last executing test programs: 3.984830291s ago: executing program 3 (id=174): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x24, &(0x7f0000000280)={0x0, 0x1baf, 0x0, 0x0, 0x1bd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) write(r6, 0x0, 0x0) 3.808102182s ago: executing program 3 (id=176): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000800)=[{0x1a, '\x00', @st={0x4, [{0x0, @svalue=0xaae}, {0x0, @uvalue=0x70000}, {0x0, @svalue=0x101}, {0x0, @uvalue=0x4}]}, 0x3}, {0x6, '\x00', @data=0x6, 0x6}, {0x31, '\x00', @st={0x4, [{0x2, @uvalue=0xfffffffffffffffc}, {0x2, @svalue=0x9}, {0x2, @uvalue=0x3}, {0x1, @uvalue=0x460}]}}, {0x45, '\x00', @buffer={"5bb3099b8dd72038417881f26bd4056b8e776dc8efd699499f72a1b380f8904e", 0x20}, 0x5e1b}]}) 3.794809163s ago: executing program 3 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r2, &(0x7f0000000280)='0', 0x1) syz_usb_connect(0x3, 0x9d3, &(0x7f0000000500)=ANY=[@ANYBLOB="12015002b0ef0f08d112c6ff71e7010203010902c10903"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='binder\x00', 0x200000, 0x0) 3.187185512s ago: executing program 1 (id=180): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000340)="a158ead005cb", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.781876064s ago: executing program 1 (id=183): syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402e0c20070001000000010902190001010080320904000001ff0000000705810340"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000200)) 2.700052794s ago: executing program 0 (id=184): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, 0x0) 2.252028503s ago: executing program 0 (id=185): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)='512', 0x3) 2.251743371s ago: executing program 2 (id=186): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0xcd, 0xf5b, 0x401, 0x20c00000}, 0x14) 1.76975052s ago: executing program 0 (id=187): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x1, 0x34324258, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x4}}) 1.588313995s ago: executing program 2 (id=188): r0 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x3}, &(0x7f0000001440)="94", 0x1, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000002440)=""/102, 0x66) 1.360317588s ago: executing program 0 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x103, 0x0, 0x2080, {0xf000, 0xd000, {}, 0x0, 0x9}, {"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", "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"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x23, 0x0, 0x0) 1.111910558s ago: executing program 2 (id=190): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1, 0x0, 0x0, 0x8090}, 0x40) 1.036646395s ago: executing program 1 (id=191): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x5, 0x1, 0xe, 0xe, 0x5, 0x7d, 0x3, 0x8000c, 0xfffffffe, 0x2, 0x6d, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x1, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x40000003, 0xa6b5, 0x2, 0x3]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f2b, 0x0, 0x4, 0x4, 0x5, 0x6, 0x7, 0x7, 0x75, 0x100, 0x2, 0x80000, 0x1, 0x8, 0xb, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x3e58, 0xb, 0x3, 0x3c, 0x5, 0xffffffff, 0xcdb0, 0x5]}) 910.978857ms ago: executing program 2 (id=192): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)={0x2c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x3f, 0x0, 0x1, [@nested={0x18, 0x153, 0x0, 0x1, [@typed={0x14, 0x139, 0x0, 0x0, @ipv6=@empty}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x40004}, 0x4) 727.985397ms ago: executing program 1 (id=193): setns(0xc9, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) 645.851402ms ago: executing program 0 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 636.672021ms ago: executing program 3 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004811}, 0x4000004) 463.940907ms ago: executing program 2 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f00000003c0)={0xa, 0x0, [{0x2, 0x85c3, 0x5, 0x0, 0x98ca, 0x9f5, 0x6}, {0x0, 0xff, 0x0, 0xc, 0x80, 0x1, 0x3}, {0xd, 0x6, 0x0, 0xf30d, 0x10000, 0x2, 0x80}, {0x2, 0x1, 0x0, 0x7fd, 0xce2, 0x8, 0x6}, {0x80000001, 0x6, 0x1, 0x37b47472, 0x8001, 0x81, 0x3ff}, {0x0, 0x7fffffff, 0x0, 0x63a, 0x9, 0x1, 0x1ff}, {0xb, 0x1ff, 0x5, 0x3, 0x7, 0x7, 0x6}, {0x80000007, 0x2, 0x2, 0x7fe1218, 0x81, 0x7, 0x38c2c748}, {0x6, 0xcedc, 0x3, 0x1, 0x0, 0x7, 0x5}, {0x1, 0x5270, 0x0, 0x1, 0x8, 0xffffffff, 0x7}]}) 460.234307ms ago: executing program 1 (id=197): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x300, 0x7, 0x1]}) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000340)={0x1, 0x14270000, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2714, 0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) 331.294632ms ago: executing program 3 (id=198): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000004c0)={0x0, 0x281, "0a74193390e93608e8d266f013f6aac3a6b38f6fad2afd9c2c9662e7ae397291", 0x1, 0x6, 0x5, 0x6, 0x480, 0x200, 0x7, 0x7, [0x5e2cbbe8, 0x2f, 0x5, 0x5]}) 288.661372ms ago: executing program 1 (id=199): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$video(&(0x7f0000000100), 0x7fff, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x1, 0x5bec9a099655b64c, 0x5, {0x6, 0xfffff4f8, 0x770d0367, 0x2}}) 288.297685ms ago: executing program 0 (id=200): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x3f, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 52.327795ms ago: executing program 3 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x240480dc}, 0x24000000) 0s ago: executing program 2 (id=202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 81.684225][ T5603] cgroup: Unknown subsys name 'net' [ 81.795035][ T5603] cgroup: Unknown subsys name 'cpuset' [ 81.798761][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.484701][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.962955][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.965868][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.966434][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.968120][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.969192][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.969419][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.969550][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.970701][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.020021][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.024242][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.024999][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.028731][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.040943][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.044974][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.049531][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.064206][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.064604][ T4932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.069071][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.073970][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.074738][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.786756][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.786924][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.787060][ T5612] bridge_slave_0: entered allmulticast mode [ 87.789074][ T5612] bridge_slave_0: entered promiscuous mode [ 87.859401][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.859514][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.860784][ T5613] bridge_slave_0: entered allmulticast mode [ 87.868760][ T5613] bridge_slave_0: entered promiscuous mode [ 87.876272][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.876382][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.876506][ T5612] bridge_slave_1: entered allmulticast mode [ 87.888481][ T5612] bridge_slave_1: entered promiscuous mode [ 87.924711][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.927051][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.927159][ T5613] bridge_slave_1: entered allmulticast mode [ 87.928613][ T5613] bridge_slave_1: entered promiscuous mode [ 88.027556][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.030348][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.072384][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.074591][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.139627][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.139827][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.140103][ T5615] bridge_slave_0: entered allmulticast mode [ 88.157570][ T5615] bridge_slave_0: entered promiscuous mode [ 88.166068][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.166366][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.166764][ T5615] bridge_slave_1: entered allmulticast mode [ 88.169033][ T5615] bridge_slave_1: entered promiscuous mode [ 88.212796][ T52] Bluetooth: hci2: command tx timeout [ 88.213079][ T5621] Bluetooth: hci1: command tx timeout [ 88.213240][ T52] Bluetooth: hci0: command tx timeout [ 88.213388][ T5617] Bluetooth: hci3: command tx timeout [ 88.262815][ T5613] team0: Port device team_slave_0 added [ 88.264919][ T5612] team0: Port device team_slave_0 added [ 88.302469][ T5613] team0: Port device team_slave_1 added [ 88.304991][ T5612] team0: Port device team_slave_1 added [ 88.308849][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.361876][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.362111][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.362202][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.362312][ T5614] bridge_slave_0: entered allmulticast mode [ 88.363965][ T5614] bridge_slave_0: entered promiscuous mode [ 88.446590][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.446667][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.446768][ T5614] bridge_slave_1: entered allmulticast mode [ 88.448165][ T5614] bridge_slave_1: entered promiscuous mode [ 88.455681][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.455709][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.455735][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.469940][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.469967][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.470044][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.482443][ T5615] team0: Port device team_slave_0 added [ 88.548152][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.548197][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.548270][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.604595][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.604652][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.604750][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.616758][ T5615] team0: Port device team_slave_1 added [ 88.673007][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.702925][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.771858][ T5614] team0: Port device team_slave_0 added [ 88.772627][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.772643][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.772696][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.774912][ T5614] team0: Port device team_slave_1 added [ 88.842342][ T5613] hsr_slave_0: entered promiscuous mode [ 88.843632][ T5613] hsr_slave_1: entered promiscuous mode [ 88.866244][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.866260][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.866285][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.939036][ T5612] hsr_slave_0: entered promiscuous mode [ 88.940128][ T5612] hsr_slave_1: entered promiscuous mode [ 88.940789][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 88.940876][ T5612] Cannot create hsr debugfs directory [ 88.969705][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.969721][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.969744][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.995675][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.995727][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.995808][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.143557][ T5615] hsr_slave_0: entered promiscuous mode [ 89.144395][ T5615] hsr_slave_1: entered promiscuous mode [ 89.144962][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 89.144983][ T5615] Cannot create hsr debugfs directory [ 89.238891][ T5614] hsr_slave_0: entered promiscuous mode [ 89.239667][ T5614] hsr_slave_1: entered promiscuous mode [ 89.240198][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 89.240220][ T5614] Cannot create hsr debugfs directory [ 89.674338][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.693498][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.696046][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.715795][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.717160][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.737810][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.756022][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.759773][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.834670][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.838039][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.839043][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.849276][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.870235][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.883848][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.885175][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.888864][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.010179][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.023747][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.026930][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.030942][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.066510][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.070111][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.089113][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.104731][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.192689][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.197733][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.223557][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.227127][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.230285][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.253980][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.254877][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.257904][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.291184][ T5617] Bluetooth: hci1: command tx timeout [ 90.291211][ T5627] Bluetooth: hci2: command tx timeout [ 90.291220][ T5617] Bluetooth: hci3: command tx timeout [ 90.291237][ T5627] Bluetooth: hci0: command tx timeout [ 90.296880][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.402728][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.437158][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.437450][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.455366][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.483620][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.483714][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.553079][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.583398][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.583700][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.620798][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.620879][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.664614][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.686734][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.762376][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.766226][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.819135][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.819216][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.846831][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.846941][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.874039][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.874113][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.877679][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.877767][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.680568][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.795234][ T5613] veth0_vlan: entered promiscuous mode [ 91.819504][ T5613] veth1_vlan: entered promiscuous mode [ 91.912208][ T5613] veth0_macvtap: entered promiscuous mode [ 91.934971][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.940660][ T5613] veth1_macvtap: entered promiscuous mode [ 92.008500][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.046908][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.139689][ T30] cfg80211: failed to load regulatory.db [ 92.181422][ T1398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.182854][ T1398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.183212][ T1398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.186221][ T5615] veth0_vlan: entered promiscuous mode [ 92.217218][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.238352][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.249366][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.295635][ T5615] veth1_vlan: entered promiscuous mode [ 92.371788][ T52] Bluetooth: hci1: command tx timeout [ 92.371823][ T52] Bluetooth: hci0: command tx timeout [ 92.371848][ T52] Bluetooth: hci3: command tx timeout [ 92.371871][ T52] Bluetooth: hci2: command tx timeout [ 92.377065][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.377092][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.473154][ T1398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.473177][ T1398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.510901][ T5614] veth0_vlan: entered promiscuous mode [ 92.516398][ T5615] veth0_macvtap: entered promiscuous mode [ 92.535050][ T5612] veth0_vlan: entered promiscuous mode [ 92.558126][ T5615] veth1_macvtap: entered promiscuous mode [ 92.585785][ T5614] veth1_vlan: entered promiscuous mode [ 92.590913][ T5612] veth1_vlan: entered promiscuous mode [ 92.624575][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.657607][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.668813][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.783095][ T5614] veth0_macvtap: entered promiscuous mode [ 92.801032][ T5766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.843316][ T5614] veth1_macvtap: entered promiscuous mode [ 92.844864][ T5612] veth0_macvtap: entered promiscuous mode [ 92.850284][ T5612] veth1_macvtap: entered promiscuous mode [ 92.872429][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.941221][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.965991][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.993930][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994431][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.070409][ T5771] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 93.080975][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.102957][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.102981][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.109353][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.181925][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.238911][ T1398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.238928][ T1398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.242340][ T766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.244065][ T1398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274119][ T766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274254][ T766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274355][ T766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274459][ T766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274555][ T766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.306102][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.543432][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.543451][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.630548][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.630570][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.679409][ T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.679427][ T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.722445][ T987] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.764236][ T1392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.764267][ T1392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.883435][ T987] usb 3-1: Using ep0 maxpacket: 32 [ 93.885076][ T987] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.907590][ T987] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 93.927477][ T987] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.927515][ T987] usb 3-1: Product: syz [ 93.927532][ T987] usb 3-1: Manufacturer: syz [ 93.927547][ T987] usb 3-1: SerialNumber: syz [ 93.972457][ T987] usb 3-1: config 0 descriptor?? [ 93.974217][ T5774] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.977543][ T987] hub 3-1:0.0: bad descriptor, ignoring hub [ 93.977570][ T987] hub 3-1:0.0: probe with driver hub failed with error -5 [ 94.109080][ T1392] IPVS: starting estimator thread 0... [ 94.192366][ T5783] IPVS: using max 30 ests per chain, 72000 per kthread [ 94.451712][ T5627] Bluetooth: hci2: command tx timeout [ 94.451777][ T5627] Bluetooth: hci3: command tx timeout [ 94.451808][ T5627] Bluetooth: hci0: command tx timeout [ 94.451838][ T5627] Bluetooth: hci1: command tx timeout [ 94.746507][ T5786] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 94.979872][ T5786] usb 3-1: device firmware changed [ 94.999406][ T9] usb 3-1: USB disconnect, device number 2 [ 95.201476][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.222998][ T5348] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.226700][ T5799] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.375145][ T5348] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.377618][ T5348] usb 4-1: config 0 has no interfaces? [ 95.377672][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.407757][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 95.435866][ T5348] usb 4-1: config 0 descriptor?? [ 95.466865][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.469842][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.510512][ T9] usb 3-1: string descriptor 0 read error: -22 [ 95.510625][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.558919][ T9] usb 3-1: config 0 descriptor?? [ 95.568574][ T5787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.581347][ T5799] md/raid10:md0: not clean -- starting background reconstruction [ 95.581362][ T5799] md/raid10:md0: active with 1 out of 2 devices [ 95.582950][ T5799] md0: detected capacity change from 0 to 2048 [ 95.620149][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 95.620163][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 95.656242][ T5804] md: resync of RAID array md0 [ 95.722902][ T52] Bluetooth: Frame is too long (len 16, expected len 4) [ 95.814380][ T5804] md: md0: resync done. [ 95.863598][ T5806] md: recover of RAID array md0 [ 95.912157][ T5806] md: md0: recover done. [ 96.133360][ T9] usb 3-1: USB disconnect, device number 3 [ 96.430144][ T5811] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.530667][ T883] hid-generic 0005:046D:0A0E.0001: unknown main item tag 0x0 [ 96.573405][ T883] hid-generic 0005:046D:0A0E.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 96.796290][ T31] audit: type=1800 audit(1789978593.877:2): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="overlay" ino=47 res=0 errno=0 [ 96.842033][ T5821] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 96.842058][ T5821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.842739][ T5821] vhci_hcd vhci_hcd.0: Device attached [ 96.887266][ T5826] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.081250][ T5708] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 97.117445][ T1398] IPVS: starting estimator thread 0... [ 97.213431][ T5833] IPVS: using max 34 ests per chain, 81600 per kthread [ 97.277981][ T5823] vhci_hcd: connection reset by peer [ 97.290102][ T1392] vhci_hcd vhci_hcd.1: stop threads [ 97.290359][ T1392] vhci_hcd vhci_hcd.1: release socket [ 97.290574][ T1392] vhci_hcd vhci_hcd.1: disconnect device [ 97.575899][ T5618] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.731564][ T5618] usb 1-1: Using ep0 maxpacket: 16 [ 97.733391][ T5618] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.736035][ T5618] usb 1-1: config 137 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.736064][ T5618] usb 1-1: config 137 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.736127][ T5618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.992870][ T9] usb 4-1: USB disconnect, device number 2 [ 98.199263][ T1398] IPVS: starting estimator thread 0... [ 98.283006][ T5844] IPVS: using max 26 ests per chain, 62400 per kthread [ 98.294412][ T883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.317839][ T5618] usbhid 1-1:137.0: can't add hid device: -71 [ 98.318009][ T5618] usbhid 1-1:137.0: probe with driver usbhid failed with error -71 [ 98.354758][ T5618] usb 1-1: USB disconnect, device number 2 [ 98.472377][ T883] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 98.473727][ T883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.473778][ T883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 98.473809][ T883] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 98.473874][ T883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.906921][ T883] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 98.907117][ T883] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 98.907134][ T883] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 98.957549][ T883] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 99.007062][ T883] usb 2-1: USB disconnect, device number 2 [ 99.252155][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.541012][ T5872] Bluetooth: ISO socket layer initialized [ 99.547502][ T5871] FAULT_INJECTION: forcing a failure. [ 99.547502][ T5871] name failslab, interval 1, probability 0, space 0, times 1 [ 99.547595][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) [ 99.547652][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.547676][ T5871] Call Trace: [ 99.547689][ T5871] [ 99.547700][ T5871] dump_stack_lvl+0xe8/0x150 [ 99.547755][ T5871] should_fail_ex+0x3eb/0x540 [ 99.547860][ T5871] should_failslab+0xa8/0x100 [ 99.547953][ T5871] __kmalloc_cache_noprof+0x9e/0x600 [ 99.548048][ T5871] ? __kmalloc_cache_noprof+0x148/0x600 [ 99.548132][ T5871] ? sctp_add_bind_addr+0x8c/0x370 [ 99.548206][ T5871] ? sctp_add_bind_addr+0x8c/0x370 [ 99.548291][ T5871] sctp_add_bind_addr+0x8c/0x370 [ 99.548386][ T5871] sctp_copy_local_addr_list+0x31a/0x4e0 [ 99.548471][ T5871] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 99.548563][ T5871] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 99.548650][ T5871] ? sctp_v4_is_any+0x35/0x60 [ 99.548733][ T5871] ? sctp_copy_one_addr+0x93/0x360 [ 99.548827][ T5871] sctp_bind_addr_copy+0xb3/0x3c0 [ 99.548899][ T5871] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 99.548981][ T5871] sctp_connect_new_asoc+0x2ff/0x6b0 [ 99.549081][ T5871] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 99.549199][ T5871] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 99.549316][ T5871] __sctp_connect+0x5cb/0xdc0 [ 99.549443][ T5871] ? __pfx___sctp_connect+0x10/0x10 [ 99.549540][ T5871] ? security_sctp_bind_connect+0x7e/0x2c0 [ 99.549641][ T5871] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 99.549725][ T5871] sctp_getsockopt_connectx3+0x227/0x360 [ 99.549862][ T5871] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 99.549955][ T5871] ? sctp_getsockopt+0x12f/0xb90 [ 99.550052][ T5871] ? __local_bh_enable_ip+0xd6/0x140 [ 99.550137][ T5871] sctp_getsockopt+0x984/0xb90 [ 99.550232][ T5871] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 99.550341][ T5871] do_sock_getsockopt+0x51d/0x7e0 [ 99.550425][ T5871] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 99.550530][ T5871] ? __fget_files+0x3a2/0x420 [ 99.550611][ T5871] ? __fget_files+0x2a/0x420 [ 99.550722][ T5871] __x64_sys_getsockopt+0x1a4/0x240 [ 99.550835][ T5871] do_syscall_64+0x166/0x520 [ 99.550898][ T5871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.550962][ T5871] ? clear_bhb_loop+0x70/0xc0 [ 99.551038][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.551102][ T5871] RIP: 0033:0x7f11e359e159 [ 99.551172][ T5871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.551228][ T5871] RSP: 002b:00007f11e17f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 99.551290][ T5871] RAX: ffffffffffffffda RBX: 00007f11e3825fa0 RCX: 00007f11e359e159 [ 99.551341][ T5871] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 99.551382][ T5871] RBP: 00007f11e363506b R08: 0000200000000180 R09: 0000000000000000 [ 99.551424][ T5871] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.551467][ T5871] R13: 00007f11e3826038 R14: 00007f11e3825fa0 R15: 00007fff3bd06158 [ 99.551554][ T5871] [ 99.581312][ C1] net_ratelimit: 264 callbacks suppressed [ 99.947948][ T5875] tipc: Started in network mode [ 99.947986][ T5875] tipc: Node identity 7f000001, cluster identity 4711 [ 99.949795][ T5875] tipc: Enabled bearer , priority 10 [ 100.334910][ T5891] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 101.062519][ T5618] tipc: Node number set to 2130706433 [ 101.221442][ T5723] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.381403][ T5723] usb 1-1: Using ep0 maxpacket: 32 [ 101.420179][ T5918] gadgetfs: bound to dummy_udc driver [ 101.508386][ T5723] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.508436][ T5723] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 101.509718][ T5723] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 101.509754][ T5723] usb 1-1: can't read configurations, error -71 [ 101.624481][ T5937] FAULT_INJECTION: forcing a failure. [ 101.624481][ T5937] name fail_futex, interval 1, probability 0, space 0, times 1 [ 101.624514][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.1.67 Not tainted syzkaller #0 PREEMPT(full) [ 101.624541][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.624557][ T5937] Call Trace: [ 101.624568][ T5937] [ 101.624579][ T5937] dump_stack_lvl+0xe8/0x150 [ 101.624626][ T5937] should_fail_ex+0x3eb/0x540 [ 101.624659][ T5937] get_futex_key+0x1b4/0x1580 [ 101.624709][ T5937] ? __pfx_get_futex_key+0x10/0x10 [ 101.624749][ T5937] ? __cgroup_account_cputime+0xe8/0x120 [ 101.624795][ T5937] futex_wait_setup+0x4a/0x590 [ 101.624826][ T5937] ? update_se+0x90/0x1020 [ 101.624860][ T5937] ? __futex_wait+0xdb/0x470 [ 101.624896][ T5937] __futex_wait+0x175/0x470 [ 101.624937][ T5937] ? __pfx___futex_wait+0x10/0x10 [ 101.624972][ T5937] ? __pfx_futex_wake_mark+0x10/0x10 [ 101.625010][ T5937] ? try_to_wake_up+0x8c5/0x14d0 [ 101.625047][ T5937] futex_wait+0x121/0x390 [ 101.625082][ T5937] ? __pfx_futex_wait+0x10/0x10 [ 101.625121][ T5937] ? __seccomp_filter+0xafb/0x1de0 [ 101.625156][ T5937] do_futex+0x3e7/0x4e0 [ 101.625187][ T5937] ? __pfx_do_futex+0x10/0x10 [ 101.625212][ T5937] ? _raw_spin_unlock_irq+0x2e/0x50 [ 101.625245][ T5937] ? do_seccomp+0xc83/0xdc0 [ 101.625276][ T5937] __se_sys_futex+0x3a8/0x450 [ 101.625309][ T5937] ? __pfx___se_sys_futex+0x10/0x10 [ 101.625344][ T5937] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 101.625368][ T5937] ? __x64_sys_futex+0x21/0xf0 [ 101.625403][ T5937] do_syscall_64+0x166/0x520 [ 101.625426][ T5937] ? trace_irq_disable+0x3b/0x140 [ 101.625461][ T5937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.625487][ T5937] ? clear_bhb_loop+0x70/0xc0 [ 101.625518][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.625542][ T5937] RIP: 0033:0x7f11e359e159 [ 101.625564][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.625593][ T5937] RSP: 002b:00007f11e17f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.625620][ T5937] RAX: ffffffffffffffda RBX: 00007f11e3825fa8 RCX: 00007f11e359e159 [ 101.625639][ T5937] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11e3825fa8 [ 101.625655][ T5937] RBP: 00007f11e3825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 101.625671][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.625687][ T5937] R13: 00007f11e3826038 R14: 00007fff3bd06070 R15: 00007fff3bd06158 [ 101.625724][ T5937] [ 102.093517][ T5940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 102.201631][ T5708] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 102.319880][ T5949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.723666][ T5959] ubi0: attaching mtd0 [ 102.760566][ T5959] ubi0: scanning is finished [ 102.760594][ T5959] ubi0: empty MTD device detected [ 102.992023][ T5963] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 103.027822][ T5959] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 103.027851][ T5959] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 103.027883][ T5959] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 103.027901][ T5959] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 103.027921][ T5959] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 103.027940][ T5959] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 103.027960][ T5959] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3611965909 [ 103.027983][ T5959] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 103.050161][ T5964] ubi0: background thread "ubi_bgt0d" started, PID 5964 [ 104.039524][ T31] audit: type=1326 audit(1789978601.117:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039578][ T31] audit: type=1326 audit(1789978601.127:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039624][ T31] audit: type=1326 audit(1789978601.127:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039668][ T31] audit: type=1326 audit(1789978601.127:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039723][ T31] audit: type=1326 audit(1789978601.127:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039770][ T31] audit: type=1326 audit(1789978601.127:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039814][ T31] audit: type=1326 audit(1789978601.127:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039861][ T31] audit: type=1326 audit(1789978601.127:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039907][ T31] audit: type=1326 audit(1789978601.127:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.039954][ T31] audit: type=1326 audit(1789978601.127:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a6f9e159 code=0x7ff00000 [ 104.778649][ C1] net_ratelimit: 102 callbacks suppressed [ 105.279052][ T52] Bluetooth: hci2: connection err: -111 [ 106.964872][ T6022] atomic_op ffff8880323319e0 conn xmit_atomic 0000000000000000 [ 107.389028][ T6033] zram: failed to load dictionary d (err=-2) [ 108.297716][ T5617] Bluetooth: hci2: unexpected event for opcode 0x203b [ 108.566802][ T6053] ======================================================= [ 108.566802][ T6053] WARNING: The mand mount option has been deprecated and [ 108.566802][ T6053] and is ignored by this kernel. Remove the mand [ 108.566802][ T6053] option from the mount to silence this warning. [ 108.566802][ T6053] ======================================================= [ 108.599867][ T6053] FAULT_INJECTION: forcing a failure. [ 108.599867][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.599965][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) [ 108.600046][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.600086][ T6053] Call Trace: [ 108.600126][ T6053] [ 108.600160][ T6053] dump_stack_lvl+0xe8/0x150 [ 108.600264][ T6053] should_fail_ex+0x3eb/0x540 [ 108.600347][ T6053] copy_folio_from_iter_atomic+0x45a/0x1a30 [ 108.600462][ T6053] ? shmem_get_folio_gfp+0x6ba/0x1330 [ 108.600534][ T6053] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 108.600638][ T6053] ? shmem_write_begin+0x1d8/0x330 [ 108.600724][ T6053] generic_perform_write+0x5c7/0x8e0 [ 108.600848][ T6053] ? __pfx_generic_perform_write+0x10/0x10 [ 108.600930][ T6053] ? down_write+0x166/0x200 [ 108.600994][ T6053] ? generic_write_checks_count+0x41a/0x520 [ 108.601092][ T6053] ? file_update_time_flags+0x2d5/0x440 [ 108.601210][ T6053] shmem_file_write_iter+0xf8/0x120 [ 108.601301][ T6053] vfs_write+0x612/0xba0 [ 108.601414][ T6053] ? __pfx_vfs_write+0x10/0x10 [ 108.601523][ T6053] ? __fget_files+0x2a/0x420 [ 108.601629][ T6053] ksys_write+0x150/0x270 [ 108.601721][ T6053] ? __pfx_ksys_write+0x10/0x10 [ 108.601837][ T6053] do_syscall_64+0x166/0x520 [ 108.601916][ T6053] ? trace_irq_disable+0x3b/0x140 [ 108.602021][ T6053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.602084][ T6053] ? clear_bhb_loop+0x70/0xc0 [ 108.602166][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.602229][ T6053] RIP: 0033:0x7f3a75b9e159 [ 108.602309][ T6053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.602388][ T6053] RSP: 002b:00007f3a76a63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.602464][ T6053] RAX: ffffffffffffffda RBX: 00007f3a75e25fa0 RCX: 00007f3a75b9e159 [ 108.602545][ T6053] RDX: 000000000208e24b RSI: 0000200000000280 RDI: 0000000000000004 [ 108.602607][ T6053] RBP: 00007f3a75c3506b R08: 0000000000000000 R09: 0000000000000000 [ 108.602836][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.602899][ T6053] R13: 00007f3a75e26038 R14: 00007f3a75e25fa0 R15: 00007ffc3bdf9348 [ 108.603039][ T6053] [ 108.902295][ T6056] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.034247][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 109.065686][ T6060] Zero length message leads to an empty skb [ 109.191746][ T6056] md: md0: raid1 would not accept array [ 109.213454][ T6058] md: could not open device unknown-block(1,0). [ 109.463836][ T6077] netlink: 'syz.1.127': attribute type 2 has an invalid length. [ 109.637627][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 109.637686][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 109.736115][ T6091] capability: warning: `syz.0.134' uses deprecated v2 capabilities in a way that may be insecure [ 109.756767][ T6088] comedi comedi3: pcl816: I/O port conflict (0x300,16) [ 109.891253][ C1] net_ratelimit: 461 callbacks suppressed [ 110.271149][ T5708] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.426387][ T5708] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 110.427641][ T5708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.427693][ T5708] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.427718][ T5708] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.427743][ T5708] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.431292][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 110.431315][ T5708] usb 4-1: Product: syz [ 110.431333][ T5708] usb 4-1: Manufacturer: syz [ 110.512437][ T5708] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 110.536866][ T5708] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 110.539212][ T5708] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 110.716524][ T5708] usb 4-1: USB disconnect, device number 3 [ 110.751468][ T5708] garmin_gps 4-1:1.0: device disconnected [ 110.781731][ T5723] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.931673][ T5723] usb 3-1: Using ep0 maxpacket: 8 [ 110.936213][ T5723] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 110.937429][ T5723] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.937454][ T5723] usb 3-1: config 179 has no interface number 0 [ 110.937496][ T5723] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 110.937528][ T5723] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 110.937559][ T5723] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11 [ 110.937589][ T5723] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024 [ 110.937629][ T5723] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.937660][ T5723] usb 3-1: config 179 interface 65 has no altsetting 0 [ 110.937718][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.070460][ T5723] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 111.101468][ T6135] program syz.1.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.138257][ T4967] input input5: unable to receive magic message: -110 [ 111.160184][ T4967] input input5: unable to receive magic message: -32 [ 111.193717][ T4967] input input5: unable to receive magic message: -32 [ 111.209800][ T4967] input input5: unable to receive magic message: -32 [ 111.266761][ T4967] input input5: unable to receive magic message: -32 [ 111.309685][ T6122] input input5: unable to receive magic message: -32 [ 111.329097][ T5708] usb 3-1: USB disconnect, device number 4 [ 111.329371][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.355303][ T6138] Bluetooth: MGMT ver 1.23 [ 111.361080][ T52] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 111.968878][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 112.682120][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.742846][ T6174] warning: `syz.3.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.841460][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 112.857133][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.857177][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=ad.f5 [ 112.858427][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 112.858462][ T9] usb 3-1: can't read configurations, error -71 [ 114.249927][ T6198] configfs-gadget.g1 gadget.0: HOST MAC 5a:f6:1b:20:29:e4 [ 114.249953][ T6198] configfs-gadget.g1 gadget.0: MAC 5e:a1:af:b0:c9:36 [ 114.272483][ T6198] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 114.275524][ T6198] udc dummy_udc.0: failed to start g1: -19 [ 114.277722][ T6198] UDC core: g1: couldn't find an available UDC or it's busy [ 114.482480][ T5348] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.482607][ T883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.652071][ T883] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 114.663121][ T883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.663218][ T883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.714392][ T883] metro_usb 2-1:1.0: Metrologic USB to Serial converter detected [ 114.748694][ T883] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 114.974457][ T883] usb 2-1: USB disconnect, device number 3 [ 115.171115][ C0] net_ratelimit: 89 callbacks suppressed [ 115.201431][ T883] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 115.202488][ T883] metro_usb 2-1:1.0: device disconnected [ 116.139960][ T6184] syz.3.177 (6184) used greatest stack depth: 19264 bytes left [ 116.678812][ T6249] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 116.713637][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.714779][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.776178][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.776784][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.777493][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.777694][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.817036][ T6249] bond0: bond_netdev_event received NETDEV_FEAT_CHANGE [ 116.817064][ T6249] bond0: bond_master_netdev_event called [ 116.817093][ T6249] net bond0: siw: event 12 [ 116.817363][ T6249] bond0: bond_netdev_event received NETDEV_XDP_FEAT_CHANGE [ 116.817382][ T6249] bond0: bond_master_netdev_event called [ 116.817404][ T6249] net bond0: siw: event 40 [ 116.817441][ T6249] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 116.818358][ T4982] kobject: 'loop3' (ffff888023d45de0): kobject_uevent_env [ 116.818410][ T4982] kobject: 'loop3' (ffff888023d45de0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 116.819968][ T5277] usb0: bond_netdev_event received NETDEV_PRE_UP [ 116.819999][ T5277] net usb0: siw: event 14 [ 116.820116][ T5277] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN PTI [ 116.825508][ T4982] get_one_event: group=ffff88807e818800 event=ffff888035342e40 [ 116.825581][ T4982] fsnotify_remove_first_event: group=ffff88807e818800 event=ffff888035342e40 [ 116.825634][ T4982] inotify_read: group=ffff88807e818800 kevent=ffff888035342e40 [ 116.825684][ T4982] copy_event_to_user: group=ffff88807e818800 event=ffff888035342e40 [ 116.825753][ T4982] inotify_read: group=ffff88807e818800 kevent=0000000000000000 [ 116.831389][ T6124] inotify_handle_inode_event: group=ffff88807e818800 mark=ffff88807f7c3d48 mask=8000 [ 116.831481][ T6124] fsnotify_insert_event: group=ffff88807e818800 event=ffff888031a78940 [ 116.852974][ T4982] kobject: 'loop2' (ffff888023d46960): kobject_uevent_env [ 116.853089][ T4982] kobject: 'loop2' (ffff888023d46960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 116.857445][ T4982] get_one_event: group=ffff88807e818800 event=ffff888031a78940 [ 116.857516][ T4982] fsnotify_remove_first_event: group=ffff88807e818800 event=ffff888031a78940 [ 116.857569][ T4982] inotify_read: group=ffff88807e818800 kevent=ffff888031a78940 [ 116.857613][ T4982] copy_event_to_user: group=ffff88807e818800 event=ffff888031a78940 [ 116.857686][ T4982] inotify_read: group=ffff88807e818800 kevent=0000000000000000 [ 116.858712][ T6124] inotify_handle_inode_event: group=ffff88807e818800 mark=ffff88807f7c3960 mask=8000 [ 116.858803][ T6124] fsnotify_insert_event: group=ffff88807e818800 event=ffff888031a78840 [ 116.858973][ T4982] get_one_event: group=ffff88807e818800 event=ffff888031a78840 [ 116.859025][ T4982] fsnotify_remove_first_event: group=ffff88807e818800 event=ffff888031a78840 [ 116.859076][ T4982] inotify_read: group=ffff88807e818800 kevent=ffff888031a78840 [ 116.859127][ T4982] copy_event_to_user: group=ffff88807e818800 event=ffff888031a78840 [ 116.859199][ T4982] inotify_read: group=ffff88807e818800 kevent=0000000000000000 [ 116.909570][ C1] virtqueue callback for ffff88802811cc00 (ffffffff86c736f0) [ 116.909677][ C1] No more buffers in queue [ 116.909795][ C1] Receiving skb proto 0x0800 len 116 type 0 [ 116.909867][ C1] No more buffers in queue [ 116.910388][ C1] eth0: xmit ffff88807cc15c80 42:01:0a:80:00:01 [ 116.910476][ C1] Added buffer head 25 to ffff88802811ca00 [ 116.910549][ C1] virtqueue callback for ffff88802811ca00 (ffffffff86c73830) [ 116.910641][ C1] Sent skb ffff88807cc15c80 [ 116.910752][ C1] No more buffers in queue [ 116.910786][ C1] No more buffers in queue [ 116.911475][ T5348] dummy_hcd dummy_hcd.3: port status 0x00010100 has changes [ 116.911721][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.911775][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.911872][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 28 [ 116.911965][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.912023][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.912100][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 15 [ 116.912261][ T5348] usb usb4-port1: not reset yet, waiting 200ms [ 116.912385][ T5348] dummy_hcd dummy_hcd.3: port status 0x00010100 has changes [ 116.912573][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.912626][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.912716][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 53 [ 116.912800][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.912852][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.912927][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 17 [ 116.913161][ T5348] dummy_hcd dummy_hcd.3: port status 0x00010100 has changes [ 116.913412][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.913464][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.913536][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 28 [ 116.913610][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.913659][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.913723][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 15 [ 116.913895][ T5348] kobject: '4-1' (ffff88801bb0b0b0): kobject_cleanup, parent 0000000000000000 [ 116.913950][ T5348] kobject: '4-1' (ffff88801bb0b0b0): calling ktype release [ 116.914025][ T5348] kobject: '4-1': free name [ 116.914161][ T5348] dummy_hcd dummy_hcd.3: port status 0x00010100 has changes [ 116.914357][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.914411][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.914485][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 28 [ 116.914567][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.914620][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.914703][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 15 [ 116.914875][ T5348] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc90017ad6000 17915 [ 116.915023][ T5348] kcov: kcov_remote_start: handle = 100000000000004, context: task [ 116.915067][ T5348] kcov: kcov_start: t = ffff88802bea8000, size = 1048576, area = ffffc90017ad6000 [ 116.915130][ T5348] hub 4-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 116.915283][ T5348] dummy_hcd dummy_hcd.3: port status 0x00010100 has changes [ 116.915411][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.915463][ C1] kcov: kcov_start: t = ffff88802bea8000, size = 262144, area = ffffc900022b2000 [ 116.915625][ C1] kcov: kcov_start: t = ffff88802bea8000, size = 1048576, area = ffffc90017ad6000 [ 116.915691][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 80 [ 116.915867][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.915912][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.915996][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 15 [ 116.916315][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.916369][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.916473][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 42 [ 116.916607][ T5348] usb usb4-port1: status 0100, change 0001, 12 Mb/s [ 116.916822][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.916875][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.916971][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 42 [ 116.933596][ C1] virtqueue callback for ffff88802811cc00 (ffffffff86c736f0) [ 116.933682][ C1] No more buffers in queue [ 116.933871][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 116.933933][ C1] No more buffers in queue [ 116.961526][ C1] eth0: xmit ffff88807cc15a00 42:01:0a:80:00:01 [ 116.961617][ C1] Added buffer head 25 to ffff88802811ca00 [ 116.961672][ C1] virtqueue callback for ffff88802811ca00 (ffffffff86c73830) [ 116.962080][ C1] Sent skb ffff88807cc15a00 [ 116.962169][ C1] No more buffers in queue [ 116.962228][ C1] No more buffers in queue [ 116.962282][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 116.962335][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 116.962422][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 15 [ 117.011846][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 117.011943][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 117.012035][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 17 [ 117.653153][ T5277] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 117.661583][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 117.670528][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.680614][ T5277] RIP: 0010:dev_driver_string+0x26/0xd0 [ 117.686187][ T5277] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 a5 73 8b fb 4c 8d 73 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ab 9c fb fb 4d 8b 36 4d 85 f6 74 [ 117.705815][ T5277] RSP: 0018:ffffc900034275a0 EFLAGS: 00010206 [ 117.711914][ T5277] RAX: 0000000000000028 RBX: 00000000000000d8 RCX: ffff888025e1be80 [ 117.719903][ T5277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000d8 [ 117.727905][ T5277] RBP: ffffc90003427780 R08: ffffc900034276ff R09: 0000000000000000 [ 117.735904][ T5277] R10: ffffc90003427680 R11: fffff52000684ee0 R12: ffffffff90924278 [ 117.743919][ T5277] R13: dffffc0000000000 R14: 0000000000000140 R15: dffffc0000000000 [ 117.751922][ T5277] FS: 00007fdfb050b780(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 117.760869][ T5277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.767474][ T5277] CR2: 00007f05a71ed158 CR3: 000000003451e000 CR4: 00000000003526f0 [ 117.775476][ T5277] Call Trace: [ 117.778771][ T5277] [ 117.781722][ T5277] __dynamic_dev_dbg+0x1ae/0x2e0 [ 117.786701][ T5277] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 117.792180][ T5277] ? ib_device_get_by_netdev+0x47f/0x4f0 [ 117.797836][ T5277] ? ib_device_get_by_netdev+0x81/0x4f0 [ 117.803404][ T5277] ? hsr_netdev_notify+0x280/0xcc0 [ 117.808544][ T5277] ? ip6_route_dev_notify+0x9a/0x5b0 [ 117.813855][ T5277] ? notifier_call_chain+0x3aa/0x3d0 [ 117.819165][ T5277] eth_open+0x170/0x1b0 [ 117.823352][ T5277] __dev_open+0x46f/0x850 [ 117.827718][ T5277] ? __pfx___dev_open+0x10/0x10 [ 117.832603][ T5277] ? __dev_change_flags+0x2e2/0x820 [ 117.837835][ T5277] ? __local_bh_enable_ip+0xd6/0x140 [ 117.843155][ T5277] __dev_change_flags+0x329/0x820 [ 117.848217][ T5277] ? __pfx___dev_change_flags+0x10/0x10 [ 117.853790][ T5277] ? __pfx___mutex_lock+0x10/0x10 [ 117.858837][ T5277] netif_change_flags+0x7c/0x1b0 [ 117.863800][ T5277] dev_change_flags+0x128/0x260 [ 117.868671][ T5277] devinet_ioctl+0x966/0x1c50 [ 117.873380][ T5277] ? __pfx_devinet_ioctl+0x10/0x10 [ 117.878539][ T5277] ? get_user_ifreq+0x12b/0x180 [ 117.883413][ T5277] inet_ioctl+0x42a/0x560 [ 117.887771][ T5277] ? __pfx_inet_ioctl+0x10/0x10 [ 117.892652][ T5277] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 117.897694][ T5277] sock_do_ioctl+0x101/0x320 [ 117.902305][ T5277] ? __pfx_sock_do_ioctl+0x10/0x10 [ 117.907439][ T5277] ? hook_file_ioctl+0x1f2/0x600 [ 117.912408][ T5277] sock_ioctl+0x57a/0x7e0 [ 117.916801][ T5277] ? __pfx_sock_ioctl+0x10/0x10 [ 117.921681][ T5277] ? fd_install+0x94/0x3d0 [ 117.926123][ T5277] ? fd_install+0x309/0x3d0 [ 117.930671][ T5277] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.935637][ T5277] ? __pfx_sock_ioctl+0x10/0x10 [ 117.940531][ T5277] __se_sys_ioctl+0xfc/0x170 [ 117.945150][ T5277] do_syscall_64+0x166/0x520 [ 117.949757][ T5277] ? trace_irq_disable+0x3b/0x140 [ 117.954806][ T5277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.960898][ T5277] ? clear_bhb_loop+0x70/0xc0 [ 117.965599][ T5277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.971516][ T5277] RIP: 0033:0x7fdfb060b378 [ 117.975951][ T5277] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 117.995571][ T5277] RSP: 002b:00007fff862cfd68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.004028][ T5277] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00007fdfb060b378 [ 118.012020][ T5277] RDX: 00007fff862dff60 RSI: 0000000000008914 RDI: 0000000000000011 [ 118.020009][ T5277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.028000][ T5277] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff862f0100 [ 118.035993][ T5277] R13: 00007fdfb050b708 R14: 0000000000000028 R15: 0000000000008914 [ 118.044007][ T5277] [ 118.047057][ T5277] Modules linked in: [ 118.051146][ C0] virtqueue callback for ffff88801e798e00 (ffffffff85687ad0) [ 118.058591][ C0] virtqueue interrupt with no work for ffff88801e799000 [ 118.061601][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 118.061675][ C1] kcov: kcov_start: t = ffff888035171f40, size = 262144, area = ffffc900022b2000 [ 118.061773][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 15 [ 118.091176][ C0] virtqueue interrupt with no work for ffff88801e799200 [ 118.098343][ T5726] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings [ 118.099750][ T30] nf_nat: Already setup manip DST for ct ffff88807887f200 (status bits 0x198) [ 118.099781][ T30] nf_nat: Already setup manip SRC for ct ffff88807887f200 (status bits 0x198) [ 118.099838][ C1] nf_nat: Already setup manip DST for ct ffff88807887f200 (status bits 0x198) [ 118.099868][ C1] nf_nat: Already setup manip SRC for ct ffff88807887f200 (status bits 0x198) [ 118.099961][ T5277] ---[ end trace 0000000000000000 ]--- [ 118.141961][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 118.142028][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 118.142120][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 17 [ 118.142269][ T5348] usb usb4-port1: debounce total 100ms stable 100ms status 0x100 [ 118.142372][ T5348] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc90017ad6000 4302 [ 118.142477][ T5348] kcov: kcov_remote_start: handle = 100000000000004, context: task [ 118.142534][ T5348] kcov: kcov_start: t = ffff88802bea8000, size = 1048576, area = ffffc90017ad6000 [ 118.142617][ T5348] hub 4-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 118.142858][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 118.142911][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 118.142999][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 15 [ 118.143198][ T5348] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc90017ad6000 1142 [ 118.175338][ T5614] send_to_group: group=ffff88807e818800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888029b3f740 data_type=2 dir=0000000000000000 cookie=0 [ 118.175454][ T5614] inotify_handle_inode_event: group=ffff88807e818800 mark=ffff88807f7c3bb8 mask=8 [ 118.175546][ T5614] fsnotify_insert_event: group=ffff88807e818800 event=ffff888031a78800 [ 118.177723][ T4982] get_one_event: group=ffff88807e818800 event=ffff888031a78800 [ 118.177792][ T4982] fsnotify_remove_first_event: group=ffff88807e818800 event=ffff888031a78800 [ 118.177844][ T4982] inotify_read: group=ffff88807e818800 kevent=ffff888031a78800 [ 118.178045][ T4982] copy_event_to_user: group=ffff88807e818800 event=ffff888031a78800 [ 118.178121][ T4982] inotify_read: group=ffff88807e818800 kevent=0000000000000000 [ 118.201222][ T52] hci2: end: err -110 [ 118.201285][ T52] hci2: status 0x13 [ 118.201410][ T52] channel 3 len 14 [ 118.201505][ T52] hcon ffff888078a7c000 bdaddr 10:aa:aa:aa:aa:aa status 19 [ 118.201566][ T52] hcon ffff888078a7c000 conn ffff8880325 ** replaying previous printk message ** [ 118.201566][ T52] hcon ffff888078a7c000 conn ffff88803254b800, err 104 [ 118.201659][ T52] hci2 hcon ffff888078a7c000 chan ffff888030a98800 [ 118.214607][ T61] hub 4-0:1.0: hub_suspend [ 118.214808][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 118.214836][ C1] kcov: kcov_start: t = ffff88801e685dc0, size = 262144, area = ffffc900022b2000 [ 118.214931][ C1] kcov: kcov_move_area: ffffc90014acf000 1048576 <= ffffc900022b2000 28 [ 118.215078][ T61] usb usb4: bus auto-suspend, wakeup 1 [ 118.215136][ T61] usb usb4: dummy_bus_suspend [ 118.291440][ T5627] Bluetooth: hci2: command 0x2016 tx timeout [ 118.291507][ T5627] hci2: err 0x6e [ 118.291570][ T5627] hci2 cmd_cnt 1 cmd queued 0 [ 118.319256][ T4982] kobject: 'loop1' (ffff888023c86960): kobject_uevent_env [ 118.319366][ T4982] kobject: 'loop1' (ffff888023c86960): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 118.328334][ T4944] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#2] SMP KASAN PTI [ 118.328409][ T4944] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 118.328472][ T4944] CPU: 1 UID: 0 PID: 4944 Comm: jbd2/sda1-8 Tainted: G D syzkaller #0 PREEMPT(full) [ 118.328552][ T4944] Tainted: [D]=DIE [ 118.328574][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.328608][ T4944] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 118.328690][ T4944] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 118.328761][ T4944] RSP: 0018:ffffc90007017868 EFLAGS: 00010202 [ 118.328831][ T4944] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 118.328873][ T4944] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888058c352a0 [ 118.328907][ T4944] RBP: 0000000000009801 R08: ffff888058c352ff R09: 1ffff1100b186a5f [ 118.328952][ T4944] R10: dffffc0000000000 R11: ffffed100b186a60 R12: dffffc0000000000 [ 118.329014][ T4944] R13: ffff888058c35280 R14: ffff8880587990e0 R15: 0000000000000008 [ 118.329058][ T4944] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 118.329109][ T4944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.329152][ T4944] CR2: 0000001b32620000 CR3: 000000007eaf6000 CR4: 00000000003526f0 [ 118.329196][ T4944] Call Trace: [ 118.329218][ T4944] [ 118.329241][ T4944] ? blkcg_set_ioprio+0x16b/0x2a0 [ 118.329335][ T4944] ? __pfx_journal_end_buffer_io_sync+0x10/0x10 [ 118.329431][ T4944] jbd2_journal_commit_transaction+0x2285/0x5c80 [ 118.329520][ T4944] ? trace_hrtimer_start+0x82/0x200 [ 118.329637][ T4944] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 118.329723][ T4944] ? __lock_acquire+0x747/0x2de0 [ 118.329817][ T4944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.329875][ T4944] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.329966][ T4944] ? rcu_is_watching+0x16/0xb0 [ 118.330068][ T4944] ? rcu_is_watching+0x16/0xb0 [ 118.330123][ T4944] ? trace_irq_enable+0x3b/0x140 [ 118.330210][ T4944] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 118.330296][ T4944] ? __timer_delete_sync+0x4a7/0x520 [ 118.330384][ T4944] kjournald2+0x3bc/0x740 [ 118.330476][ T4944] ? __pfx_kjournald2+0x10/0x10 [ 118.330587][ T4944] ? __pfx_autoremove_wake_function+0x10/0x10 [ 118.330653][ T4944] ? __kthread_parkme+0x71/0x1f0 [ 118.330734][ T4944] ? __kthread_parkme+0x199/0x1f0 [ 118.330810][ T4944] kthread+0x38b/0x480 [ 118.330892][ T4944] ? __pfx_kjournald2+0x10/0x10 [ 118.330956][ T4944] ? __pfx_kthread+0x10/0x10 [ 118.331041][ T4944] ret_from_fork+0x514/0xb70 [ 118.331127][ T4944] ? __pfx_ret_from_fork+0x10/0x10 [ 118.331210][ T4944] ? __switch_to+0xc89/0x1420 [ 118.331284][ T4944] ? __pfx_kthread+0x10/0x10 [ 118.331375][ T4944] ret_from_fork_asm+0x1a/0x30 [ 118.331486][ T4944] [ 118.331495][ T4944] Modules linked in: [ 118.331762][ T4944] ---[ end trace 0000000000000000 ]--- [ 118.344694][ T6124] inotify_handle_inode_event: group=ffff88807e818800 mark=ffff88807f7c3bb8 mask=8000 [ 118.344887][ T6124] fsnotify_insert_event: group=ffff88807e818800 event=ffff888031a78700 [ 118.345577][ T4982] get_one_event: group=ffff88807e818800 event=ffff888031a78700 [ 118.345640][ T4982] fsnotify_remove_first_event: group=ffff88807e818800 event=ffff888031a78700 [ 118.345692][ T4982] inotify_read: group=ffff88807e818800 kevent=ffff888031a78700 [ 118.345744][ T4982] copy_event_to_user: group=ffff88807e818800 event=ffff888031a78700 [ 118.345815][ T4982] inotify_read: group=ffff88807e818800 kevent=0000000000000000 [ 118.347023][ T4944] RIP: 0010:dev_driver_string+0x26/0xd0 [ 118.347124][ T4944] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 a5 73 8b fb 4c 8d 73 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ab 9c fb fb 4d 8b 36 4d 85 f6 74 [ 118.347170][ T4944] RSP: 0018:ffffc900034275a0 EFLAGS: 00010206 [ 118.347231][ T4944] RAX: 0000000000000028 RBX: 00000000000000d8 RCX: ffff888025e1be80 [ 118.347274][ T4944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000d8 [ 118.347315][ T4944] RBP: ffffc90003427780 R08: ffffc900034276ff R09: 0000000000000000 [ 118.349192][ T4944] R10: ffffc90003427680 R11: fffff52000684ee0 R12: ffffffff90924278 [ 118.349246][ T4944] R13: dffffc0000000000 R14: 0000000000000140 R15: dffffc0000000000 [ 118.349298][ T4944] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 118.349349][ T4944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.349403][ T4944] CR2: 00007f05a7227dac CR3: 000000007ba92000 CR4: 00000000003526f0 [ 118.349463][ T4944] Kernel panic - not syncing: Fatal exception [ 120.035378][ T4944] Shutting down cpus with NMI [ 120.040700][ T4944] Kernel Offset: disabled [ 120.045039][ T4944] Rebooting in 86400 seconds..