last executing test programs: 5m7.508216084s ago: executing program 1 (id=109): r0 = syz_open_procfs(0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/44, 0x2c) getdents64(r0, &(0x7f0000002f40)=""/4092, 0xffc) 5m7.379690835s ago: executing program 1 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0) 5m7.322151399s ago: executing program 1 (id=111): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x2, 0x2, 0x7, 0x4, 0x7fffffff, 0x4e38}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}, {"d07ee51100"}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r4, 0x40086602, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='force', 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, r8, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r10, &(0x7f0000000600)='1', 0x1) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) 5m6.180636097s ago: executing program 1 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000022f0ffffffffffff0180c200000e81000002"], 0xc6) 5m3.073640319s ago: executing program 1 (id=122): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) msgget$private(0x0, 0x400) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r3) 5m1.960343647s ago: executing program 1 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x81, 0x77d, 0x2, 0x14, 0xc0000000000}, 0x0, &(0x7f0000000180)={0x8, 0x10000, 0x3, 0x9, 0xfffffffffffffff7, 0x3, 0x37339521, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) write$FUSE_ATTR(r4, &(0x7f0000000240)={0x78, 0x0, r5, {0x2000000007, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r6, 0x0, 0x0, 0x1000000}}}, 0x78) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r11 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_freezer_state(r12, &(0x7f00000002c0), 0x2, 0x0) sendfile(r13, r13, 0x0, 0x8000002) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') 4m46.538968087s ago: executing program 32 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x81, 0x77d, 0x2, 0x14, 0xc0000000000}, 0x0, &(0x7f0000000180)={0x8, 0x10000, 0x3, 0x9, 0xfffffffffffffff7, 0x3, 0x37339521, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) write$FUSE_ATTR(r4, &(0x7f0000000240)={0x78, 0x0, r5, {0x2000000007, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r6, 0x0, 0x0, 0x1000000}}}, 0x78) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r11 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_freezer_state(r12, &(0x7f00000002c0), 0x2, 0x0) sendfile(r13, r13, 0x0, 0x8000002) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') 3m28.477173111s ago: executing program 3 (id=308): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125d5f50e3875b306"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_udc.0\n', 0xc) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) 3m27.370305492s ago: executing program 3 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000e00)=[{0xdab4, 0x0, 0x0}], 0x1) unshare(0x24020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) add_key$keyring(&(0x7f0000000880), 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 3m23.831348495s ago: executing program 3 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x2000/000 size=0x20000 type=write-back\n\x00', 0x2e) 3m22.895561055s ago: executing program 3 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101643, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0xfffffffe, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2d0201, 0x4) 3m22.756776705s ago: executing program 3 (id=322): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) read$FUSE(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x2, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x1ff, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x2, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0x7fffffff, 0x0, 0x383, 0x8001, 0x4]}) writev(r4, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf2", 0x59}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 3m21.487488459s ago: executing program 3 (id=324): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x10001, 0x80000, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000000)) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x101003, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'vlan0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x40, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0x3, 0xf, 0xe, 0x2b12, 0xb6, 0x6, 0x9c01, 0xb, 0x8, 0xbed4, 0x7, 0x8000100, 0x6, 0x0, 0x8, 0x8, 0x5, 0x79b, 0xfffffff7, 0x8, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x8, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x3, 0x7, 0x4009, 0x0, 0x4, 0x4, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x7, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x3, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m4.92752516s ago: executing program 33 (id=324): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x10001, 0x80000, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000000)) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x101003, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'vlan0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x40, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0x3, 0xf, 0xe, 0x2b12, 0xb6, 0x6, 0x9c01, 0xb, 0x8, 0xbed4, 0x7, 0x8000100, 0x6, 0x0, 0x8, 0x8, 0x5, 0x79b, 0xfffffff7, 0x8, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x8, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x3, 0x7, 0x4009, 0x0, 0x4, 0x4, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x7, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x3, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 44.963178664s ago: executing program 0 (id=551): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) msgget$private(0x0, 0x400) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)) keyctl$get_persistent(0x16, 0x0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x140400, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.754767093s ago: executing program 0 (id=552): syz_open_dev$sndpcmp(0x0, 0x0, 0x80040) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000240)=0x5f) 41.647483715s ago: executing program 0 (id=553): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a9171", 0xdc}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d", 0x8b}, {&(0x7f0000001380)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466b1ffc295417e411d5ce52b4c6152217e3d70561444f13245ddeee17315be4358e1eef9e2c0a3070892d678bd4135206b3b44ff555e1af828e96652b28c358de018d5f140049c808959c331d95b00b8facac20ccc1e8eb73ebb503081239ef938a258fa89e74a87faaa0ba98a22c339fbf663189263b974ece97ce57364", 0xb9}], 0x3}}], 0x1, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91", 0x1}], 0x1}}], 0x1, 0x4000900) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 38.877280456s ago: executing program 0 (id=555): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125d5f50e3875b306"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_', 0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) 36.821360554s ago: executing program 0 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') 33.925542756s ago: executing program 0 (id=561): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) 17.674709399s ago: executing program 34 (id=561): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) 11.902383894s ago: executing program 4 (id=575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x40000) 10.136325203s ago: executing program 2 (id=577): dup(0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) 9.509426047s ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 8.969861665s ago: executing program 2 (id=579): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) msgget$private(0x0, 0x400) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)) keyctl$get_persistent(0x16, 0x0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x140400, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.824565167s ago: executing program 2 (id=580): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb33278ae95bc7f52363c468b257ff3e2485254bdeb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af370a42e6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x1010000000000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) 7.316815665s ago: executing program 2 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x101, 0xb, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20942, 0x56) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 4.842785592s ago: executing program 2 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0xb, r4, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 4.708833342s ago: executing program 4 (id=583): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 939.422753ms ago: executing program 2 (id=584): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125d5f50e3875b306"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_udc', 0x9) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) 484.319454ms ago: executing program 4 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x40000) 343.934633ms ago: executing program 4 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101643, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2d0201, 0x4) 0s ago: executing program 4 (id=587): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) msgget$private(0x0, 0x400) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)) keyctl$get_persistent(0x16, 0x0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x140400, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ich could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.300528][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.333725][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.333740][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.333764][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.334932][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.334943][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.334965][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.369777][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.369792][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.369816][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.554060][ T5597] hsr_slave_0: entered promiscuous mode [ 85.555384][ T5597] hsr_slave_1: entered promiscuous mode [ 85.569776][ T5598] hsr_slave_0: entered promiscuous mode [ 85.571563][ T5598] hsr_slave_1: entered promiscuous mode [ 85.572597][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 85.572705][ T5598] Cannot create hsr debugfs directory [ 85.584931][ T5601] hsr_slave_0: entered promiscuous mode [ 85.586171][ T5601] hsr_slave_1: entered promiscuous mode [ 85.587010][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 85.587029][ T5601] Cannot create hsr debugfs directory [ 85.681007][ T5599] hsr_slave_0: entered promiscuous mode [ 85.683182][ T5599] hsr_slave_1: entered promiscuous mode [ 85.684052][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 85.684073][ T5599] Cannot create hsr debugfs directory [ 85.697327][ T5600] hsr_slave_0: entered promiscuous mode [ 85.699105][ T5600] hsr_slave_1: entered promiscuous mode [ 85.700475][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 85.700498][ T5600] Cannot create hsr debugfs directory [ 86.008753][ T5617] Bluetooth: hci0: command tx timeout [ 86.008842][ T5607] Bluetooth: hci2: command tx timeout [ 86.088799][ T5617] Bluetooth: hci1: command tx timeout [ 86.088832][ T5617] Bluetooth: hci4: command tx timeout [ 86.088962][ T5607] Bluetooth: hci3: command tx timeout [ 86.871354][ T9] cfg80211: failed to load regulatory.db [ 87.185498][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.217068][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.230499][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.272760][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.279041][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.309537][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.326954][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.364730][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.496652][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.524277][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.541578][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.573315][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.576379][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.614380][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.635242][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.673917][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.776378][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.826051][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.835966][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.866053][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.876893][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.903536][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.932841][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.961739][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.092434][ T5607] Bluetooth: hci2: command tx timeout [ 88.092467][ T5607] Bluetooth: hci0: command tx timeout [ 88.095301][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.096792][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.162883][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.169104][ T4913] Bluetooth: hci4: command tx timeout [ 88.169133][ T4913] Bluetooth: hci1: command tx timeout [ 88.169153][ T4913] Bluetooth: hci3: command tx timeout [ 88.183169][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.233274][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.236307][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.271753][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.298430][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.334879][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.430973][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.472330][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.515833][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.539997][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.540512][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.546106][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.602502][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.621939][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.664159][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.676853][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.712051][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.726258][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.726417][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.769229][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.865624][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.916803][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.916921][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.965156][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.980910][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.981011][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.111216][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.172397][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.172469][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.232607][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.310311][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.310467][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.406604][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.441947][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.482221][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.482298][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.556427][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.556594][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.620993][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.661818][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.662017][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.741475][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.767116][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.132870][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.168828][ T5607] Bluetooth: hci0: command tx timeout [ 90.168857][ T5607] Bluetooth: hci2: command tx timeout [ 90.248783][ T4913] Bluetooth: hci3: command tx timeout [ 90.248811][ T4913] Bluetooth: hci1: command tx timeout [ 90.248830][ T4913] Bluetooth: hci4: command tx timeout [ 90.565512][ T5597] veth0_vlan: entered promiscuous mode [ 90.670484][ T5597] veth1_vlan: entered promiscuous mode [ 90.763595][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.999486][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.028182][ T5597] veth0_macvtap: entered promiscuous mode [ 91.134054][ T5597] veth1_macvtap: entered promiscuous mode [ 91.246378][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.278178][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.314813][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.371630][ T1045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.398291][ T1045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.413705][ T1045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.442704][ T1045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.446970][ T5598] veth0_vlan: entered promiscuous mode [ 91.620750][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.668330][ T5598] veth1_vlan: entered promiscuous mode [ 91.842040][ T5599] veth0_vlan: entered promiscuous mode [ 91.920258][ T5601] veth0_vlan: entered promiscuous mode [ 91.922872][ T5599] veth1_vlan: entered promiscuous mode [ 91.987675][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.987699][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.005942][ T5601] veth1_vlan: entered promiscuous mode [ 92.048933][ T5598] veth0_macvtap: entered promiscuous mode [ 92.098363][ T5598] veth1_macvtap: entered promiscuous mode [ 92.130502][ T5600] veth0_vlan: entered promiscuous mode [ 92.183135][ T5599] veth0_macvtap: entered promiscuous mode [ 92.188539][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.188600][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.250268][ T5599] veth1_macvtap: entered promiscuous mode [ 92.252210][ T5600] veth1_vlan: entered promiscuous mode [ 92.257356][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.316656][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.331571][ T5601] veth0_macvtap: entered promiscuous mode [ 92.365709][ T5601] veth1_macvtap: entered promiscuous mode [ 92.367335][ T4255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.374311][ T4255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.382766][ T4255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.388068][ T4255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.394681][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.433282][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.542873][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.597054][ T4255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.617059][ T4255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.627476][ T4255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.651393][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.756808][ T5600] veth0_macvtap: entered promiscuous mode [ 92.837611][ T4255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.924163][ T5600] veth1_macvtap: entered promiscuous mode [ 92.973007][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.987189][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.064477][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.175050][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.301702][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.301722][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.445407][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.724901][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.872683][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.872704][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.873048][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.878388][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.886031][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.944262][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.103270][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.103288][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.485393][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.485412][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.623386][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.623407][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.841973][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.841992][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.063953][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.063971][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.372424][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.372444][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.780342][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.897283][ T5817] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 103.012134][ T5825] lo speed is unknown, defaulting to 1000 [ 103.052578][ T5825] lo speed is unknown, defaulting to 1000 [ 103.270967][ T5829] CUSE: info not properly terminated [ 103.404616][ T5825] lo speed is unknown, defaulting to 1000 [ 103.406109][ T5825] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 103.406136][ T5825] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 103.422662][ T5825] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 103.525258][ T5825] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.580356][ T5830] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 103.580373][ T5830] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 103.682473][ T5843] ======================================================= [ 103.682473][ T5843] WARNING: The mand mount option has been deprecated and [ 103.682473][ T5843] and is ignored by this kernel. Remove the mand [ 103.682473][ T5843] option from the mount to silence this warning. [ 103.682473][ T5843] ======================================================= [ 103.767053][ T5843] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 104.515355][ T5825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.019254][ T5825] lo speed is unknown, defaulting to 1000 [ 105.035186][ T5825] lo speed is unknown, defaulting to 1000 [ 105.064095][ T5825] lo speed is unknown, defaulting to 1000 [ 105.142284][ T5825] lo speed is unknown, defaulting to 1000 [ 105.173943][ T5825] lo speed is unknown, defaulting to 1000 [ 105.878820][ T5853] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.982012][ T5853] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 106.915962][ T5864] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 107.170762][ T5871] Bluetooth: MGMT ver 1.23 [ 107.294669][ T5873] Zero length message leads to an empty skb [ 108.315097][ T5870] smbdirect: ib_dev[syz2] removed [ 115.650243][ T5947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.43'. [ 117.038598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.058611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.068656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.078636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.088631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.098628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.108634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.118623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.128626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.138622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.127304][ T5993] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 121.420847][ T5993] cramfs: wrong magic [ 127.323685][ T6031] fuse: Unknown parameter 'group_id00000000000000000000' [ 129.971208][ T6032] netlink: 'syz.0.62': attribute type 1 has an invalid length. [ 132.963797][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963855][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.230240][ T6061] fuse: Unknown parameter 'group_id00000000000000000000' [ 133.732393][ T6067] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 134.894799][ T6079] cgroup: release_agent respecified [ 135.117934][ T6079] input: syz0 as /devices/virtual/input/input5 [ 136.821979][ T6092] fuse: Bad value for 'user_id' [ 136.821997][ T6092] fuse: Bad value for 'user_id' [ 137.448995][ T6103] netlink: 'syz.4.97': attribute type 1 has an invalid length. [ 139.844569][ T6123] fuse: Bad value for 'user_id' [ 139.844587][ T6123] fuse: Bad value for 'user_id' [ 140.304682][ T6131] cgroup: release_agent respecified [ 140.342351][ T6131] input: syz0 as /devices/virtual/input/input6 [ 141.658406][ T6150] fuse: Bad value for 'user_id' [ 141.658425][ T6150] fuse: Bad value for 'user_id' [ 141.950431][ T6152] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 143.963805][ T6157] ufs: You didn't specify the type of your ufs filesystem [ 143.963805][ T6157] [ 143.963805][ T6157] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 143.963805][ T6157] [ 143.963805][ T6157] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 143.963830][ T6157] ufs: ufstype=old is supported read-only [ 145.835549][ T6171] cgroup: release_agent respecified [ 145.915412][ T6171] input: syz0 as /devices/virtual/input/input7 [ 145.975208][ T6172] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 145.975234][ T6172] netdevsim netdevsim1: Falling back to sysfs fallback for: þ [ 146.014800][ T6169] CUSE: info not properly terminated [ 147.376280][ T6189] fuse: Bad value for 'fd' [ 150.159750][ T6217] overlayfs: failed to resolve './file0': -2 [ 150.945804][ T6237] cgroup: release_agent respecified [ 151.976181][ T6246] fuse: Bad value for 'fd' [ 152.023543][ T6241] input: syz0 as /devices/virtual/input/input8 [ 152.430104][ T6255] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 153.301733][ T6256] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 153.317502][ T6256] cramfs: wrong magic [ 155.632941][ T6271] overlayfs: failed to resolve './file0': -2 [ 157.362327][ T6294] fuse: Bad value for 'fd' [ 157.753698][ T6307] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.691161][ T6318] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 160.726618][ T6318] cramfs: wrong magic [ 162.626685][ T6348] binder: 6347:6348 ioctl 80049363 200000000100 returned -22 [ 162.648528][ T6352] fuse: Bad value for 'fd' [ 162.904062][ T6359] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 164.578523][ T6348] 9pnet_virtio: no channels available for device syz [ 167.226438][ T5606] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 171.384227][ T4913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.498409][ T4913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.508122][ T4913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.522122][ T4913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.526069][ T4913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.805445][ T6414] fuse: Bad value for 'fd' [ 172.169753][ T6428] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 173.820838][ T5607] Bluetooth: hci5: command tx timeout [ 174.213232][ T5721] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 174.218009][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 174.804656][ T5721] usb 3-1: device descriptor read/64, error -32 [ 175.891146][ T5721] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.984297][ T5607] Bluetooth: hci5: command tx timeout [ 176.548476][ T6439] binder: 6437:6439 ioctl 80049363 200000000100 returned -22 [ 176.640116][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 176.788095][ T5721] usb 3-1: no configurations [ 176.788156][ T5721] usb 3-1: can't read configurations, error -22 [ 178.036198][ T5607] Bluetooth: hci5: command tx timeout [ 178.070980][ T5721] usb usb3-port1: attempt power cycle [ 179.079268][ T5721] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.312615][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 179.318278][ T5721] usb 3-1: no configurations [ 179.318333][ T5721] usb 3-1: can't read configurations, error -22 [ 180.092522][ T5721] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.120851][ T5607] Bluetooth: hci5: command tx timeout [ 180.310132][ T5721] usb 3-1: device not accepting address 6, error -71 [ 180.347270][ T5721] usb usb3-port1: unable to enumerate USB device [ 183.707167][ T6469] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 183.746713][ T6469] cramfs: wrong magic [ 185.139151][ T6489] fuse: Bad value for 'fd' [ 185.258126][ T6493] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.559305][ T6169] bond0: (slave syz_tun): Releasing backup interface [ 186.902820][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 188.204153][ T5607] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 189.929751][ T6520] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 189.957044][ T6520] cramfs: wrong magic [ 192.019377][ T6546] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.302762][ T6548] fuse: Bad value for 'fd' [ 193.058828][ T732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.374167][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.374235][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.087189][ T6582] fuse: Invalid rootmode [ 198.305562][ T732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.974236][ T732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.155143][ T6607] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 202.173770][ T6607] cramfs: wrong magic [ 205.203119][ T6630] fuse: Invalid rootmode [ 206.512741][ T732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.048918][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 207.048956][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 207.048979][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 207.049001][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 208.898173][ T6649] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 208.920125][ T6649] cramfs: wrong magic [ 210.159908][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.160027][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.160242][ T6339] bridge_slave_0: entered allmulticast mode [ 210.228328][ T6339] bridge_slave_0: entered promiscuous mode [ 210.276051][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 210.276166][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 211.466550][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.466656][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.466878][ T6339] bridge_slave_1: entered allmulticast mode [ 211.480033][ T6669] openvswitch: netlink: Flow key attr not present in new flow. [ 211.480335][ T6339] bridge_slave_1: entered promiscuous mode [ 211.817939][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.837430][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.863541][ T6692] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 214.864424][ T6692] cramfs: wrong magic [ 215.250027][ T6339] team0: Port device team_slave_0 added [ 215.283950][ T6339] team0: Port device team_slave_1 added [ 218.109093][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.109110][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.109134][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.750080][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.750095][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.750117][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.224520][ T732] bridge_slave_1: left allmulticast mode [ 220.224673][ T732] bridge_slave_1: left promiscuous mode [ 220.254349][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.400351][ T6736] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 220.484195][ T6738] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 221.501825][ T6736] cramfs: wrong magic [ 221.761729][ T732] bridge_slave_0: left allmulticast mode [ 221.761754][ T732] bridge_slave_0: left promiscuous mode [ 221.761944][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.633176][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.699358][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.731927][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.899121][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.914888][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.949311][ T732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.990142][ T732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.015736][ T732] bond0 (unregistering): Released all slaves [ 225.022776][ T6775] overlayfs: failed to resolve './file0': -2 [ 225.573498][ T6789] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 226.410092][ T5607] Bluetooth: hci0: command tx timeout [ 226.865321][ T6369] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 227.018686][ T6369] usb 5-1: Using ep0 maxpacket: 16 [ 227.053716][ T6369] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.053739][ T6369] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.090236][ T6369] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.090264][ T6369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.090283][ T6369] usb 5-1: Product: syz [ 227.090297][ T6369] usb 5-1: Manufacturer: syz [ 227.090310][ T6369] usb 5-1: SerialNumber: syz [ 228.142446][ T37] audit: type=1800 audit(1785278074.883:2): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.282" name="UDC" dev="configfs" ino=12209 res=0 errno=0 [ 228.191011][ T6822] overlayfs: failed to resolve './file0': -2 [ 228.254509][ T6369] usb 5-1: 0:2 : does not exist [ 228.296189][ T6369] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 228.450773][ T6821] configfs-gadget.g1 gadget.0: HOST MAC c2:59:6f:0f:13:7d [ 228.450798][ T6821] configfs-gadget.g1 gadget.0: MAC 46:30:51:d8:22:dd [ 228.490206][ T5607] Bluetooth: hci0: command tx timeout [ 229.111748][ T5721] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 229.373364][ T5721] usb 1-1: Dual-Role OTG device on HNP port [ 229.382427][ T5721] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 229.382454][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.773096][ T6845] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 229.791768][ T6845] cramfs: wrong magic [ 230.578743][ T5607] Bluetooth: hci0: command tx timeout [ 230.681483][ T6369] usb 5-1: USB disconnect, device number 2 [ 230.983203][ T6850] ufs: You didn't specify the type of your ufs filesystem [ 230.983203][ T6850] [ 230.983203][ T6850] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 230.983203][ T6850] [ 230.983203][ T6850] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 230.983226][ T6850] ufs: ufstype=old is supported read-only [ 231.054537][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 232.649023][ T5607] Bluetooth: hci0: command tx timeout [ 234.287142][ T5721] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, c2:59:6f:0f:13:7d [ 235.181407][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.412757][ T6868] overlayfs: failed to resolve './file0': -2 [ 235.581475][ T37] audit: type=1800 audit(1785278082.333:3): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.295" name="UDC" dev="configfs" ino=12886 res=0 errno=0 [ 236.536749][ T6879] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 236.537406][ T6879] cramfs: wrong magic [ 239.210071][ T5607] Bluetooth: Unexpected start frame (len 10) [ 239.211908][ T37] audit: type=1800 audit(1785278085.963:4): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.308" name="UDC" dev="configfs" ino=12923 res=0 errno=0 [ 240.224514][ T6923] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 240.225405][ T6923] cramfs: wrong magic [ 241.367944][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 241.462364][ T5607] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 245.109128][ T732] hsr_slave_0: left promiscuous mode [ 245.175533][ T6960] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 245.333303][ T6960] cramfs: wrong magic [ 245.446355][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 246.097106][ T5607] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 246.115967][ T732] hsr_slave_1: left promiscuous mode [ 246.165334][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.165394][ T732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.261070][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.261096][ T732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.091009][ T732] veth1_macvtap: left promiscuous mode [ 248.258274][ T732] veth0_macvtap: left promiscuous mode [ 248.472031][ T732] veth1_vlan: left promiscuous mode [ 248.758433][ T732] veth0_vlan: left promiscuous mode [ 249.139582][ T6996] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 249.140476][ T6996] cramfs: wrong magic [ 250.783586][ T7009] ufs: You didn't specify the type of your ufs filesystem [ 250.783586][ T7009] [ 250.783586][ T7009] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 250.783586][ T7009] [ 250.783586][ T7009] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 250.783606][ T7009] ufs: ufstype=old is supported read-only [ 255.778070][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.778115][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003299][ T7025] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 256.006273][ T7025] cramfs: wrong magic [ 257.009539][ T732] team0 (unregistering): Port device team_slave_1 removed [ 257.079243][ T732] team0 (unregistering): Port device team_slave_0 removed [ 258.753352][ T7043] ufs: You didn't specify the type of your ufs filesystem [ 258.753352][ T7043] [ 258.753352][ T7043] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 258.753352][ T7043] [ 258.753352][ T7043] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 258.753373][ T7043] ufs: ufstype=old is supported read-only [ 263.073391][ T7058] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 263.074635][ T7058] cramfs: wrong magic [ 264.043278][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.101037][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.127855][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.197201][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.382219][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.378277][ T7082] loop0: detected capacity change from 0 to 32768 [ 266.410616][ T5607] Bluetooth: hci5: command tx timeout [ 267.416141][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 267.646507][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.646809][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.647027][ T6754] bridge_slave_0: entered allmulticast mode [ 267.670614][ T6754] bridge_slave_0: entered promiscuous mode [ 267.822838][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.823390][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.823622][ T6754] bridge_slave_1: entered allmulticast mode [ 267.826401][ T6754] bridge_slave_1: entered promiscuous mode [ 268.066782][ T6754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.127867][ T6754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.251670][ T6754] team0: Port device team_slave_0 added [ 268.275224][ T6754] team0: Port device team_slave_1 added [ 268.462440][ T7122] ufs: You didn't specify the type of your ufs filesystem [ 268.462440][ T7122] [ 268.462440][ T7122] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 268.462440][ T7122] [ 268.462440][ T7122] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 268.462549][ T7122] ufs: ufstype=old is supported read-only [ 268.489672][ T5607] Bluetooth: hci5: command tx timeout [ 268.711763][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.713294][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.713323][ T6754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.568698][ T5607] Bluetooth: hci5: command tx timeout [ 271.017823][ T7128] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 271.058236][ T7128] cramfs: wrong magic [ 271.378785][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.378801][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.378825][ T6754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.648641][ T5607] Bluetooth: hci5: command tx timeout [ 274.627609][ T732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.766283][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 275.086396][ T7170] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 275.107842][ T7170] cramfs: wrong magic [ 275.811134][ T6754] hsr_slave_0: entered promiscuous mode [ 275.860980][ T6754] hsr_slave_1: entered promiscuous mode [ 276.405568][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 276.452777][ T5607] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 277.465766][ T732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.200585][ T7201] ufs: You didn't specify the type of your ufs filesystem [ 278.200585][ T7201] [ 278.200585][ T7201] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 278.200585][ T7201] [ 278.200585][ T7201] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 278.200632][ T7201] ufs: ufstype=old is supported read-only [ 280.129186][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 282.354882][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.387267][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.401524][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.402619][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.403768][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.548625][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 283.175935][ T7223] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 283.176524][ T7223] cramfs: wrong magic [ 283.191054][ T5607] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 283.394600][ T732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.125478][ T732] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.445717][ T5607] Bluetooth: hci2: command tx timeout [ 285.684103][ T37] audit: type=1800 audit(1785278132.353:5): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.390" name="UDC" dev="configfs" ino=14012 res=0 errno=0 [ 287.987762][ T5607] Bluetooth: hci2: command tx timeout [ 288.399119][ T5858] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 288.734729][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 289.396830][ T5603] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 289.478846][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 289.480776][ T5858] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 289.559810][ T5858] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 289.560968][ T5858] usb 5-1: can't read configurations, error -61 [ 290.009541][ T5603] Bluetooth: hci2: command tx timeout [ 290.032837][ T7273] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 290.048853][ T7273] cramfs: wrong magic [ 292.103898][ T5603] Bluetooth: hci2: command tx timeout [ 292.140154][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.140291][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.140502][ T7064] bridge_slave_0: entered allmulticast mode [ 292.158454][ T7064] bridge_slave_0: entered promiscuous mode [ 292.195604][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.195734][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.195906][ T7064] bridge_slave_1: entered allmulticast mode [ 292.201048][ T37] audit: type=1800 audit(1785278138.953:6): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.400" name="UDC" dev="configfs" ino=14666 res=0 errno=0 [ 292.211878][ T7064] bridge_slave_1: entered promiscuous mode [ 292.736793][ T7064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.807893][ T7064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.273930][ T7064] team0: Port device team_slave_0 added [ 294.290646][ T7064] team0: Port device team_slave_1 added [ 294.639623][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.639640][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.639663][ T7064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.952800][ T7324] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 294.975125][ T7324] cramfs: wrong magic [ 295.408024][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 295.610327][ T732] bridge_slave_1: left allmulticast mode [ 295.610451][ T732] bridge_slave_1: left promiscuous mode [ 295.610710][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.958705][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 295.959570][ T9] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 295.985853][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 295.985889][ T9] usb 5-1: can't read configurations, error -61 [ 296.256234][ T732] bridge_slave_0: left allmulticast mode [ 296.256255][ T732] bridge_slave_0: left promiscuous mode [ 296.288142][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.298754][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 296.458637][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 296.567561][ T9] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 296.590235][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 296.590272][ T9] usb 5-1: can't read configurations, error -61 [ 296.595669][ T9] usb usb5-port1: attempt power cycle [ 297.735622][ T732] bridge_slave_1: left allmulticast mode [ 297.735643][ T732] bridge_slave_1: left promiscuous mode [ 297.735796][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.761413][ T5603] Bluetooth: Unexpected start frame (len 10) [ 297.764116][ T37] audit: type=1800 audit(1785278144.513:7): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.410" name="UDC" dev="configfs" ino=14808 res=0 errno=0 [ 300.051847][ T732] bridge_slave_0: left allmulticast mode [ 300.051881][ T732] bridge_slave_0: left promiscuous mode [ 300.052112][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.187045][ T7349] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 300.197273][ T7349] cramfs: wrong magic [ 302.093330][ T7364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.109055][ T7364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.000828][ T5603] Bluetooth: Unexpected start frame (len 10) [ 305.002293][ T37] audit: type=1800 audit(1785278151.753:8): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.422" name="UDC" dev="configfs" ino=15385 res=0 errno=0 [ 306.978117][ T7382] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 306.990549][ T7382] cramfs: wrong magic [ 308.224382][ T7391] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 308.224885][ T7391] cramfs: wrong magic [ 308.266297][ T732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.339532][ T732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.602355][ T732] bond0 (unregistering): Released all slaves [ 309.377202][ T5721] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 309.674857][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 310.373171][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 310.380448][ T5721] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 310.420097][ T5603] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 310.443560][ T5721] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 310.443677][ T5721] usb 5-1: can't read configurations, error -61 [ 310.695425][ T5721] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 310.891972][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 310.912014][ T5721] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 310.940324][ T5721] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 310.940438][ T5721] usb 5-1: can't read configurations, error -61 [ 310.944387][ T5721] usb usb5-port1: attempt power cycle [ 312.588679][ T5721] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 312.657232][ T5721] usb 5-1: device descriptor read/8, error -71 [ 312.770286][ T5603] Bluetooth: Unexpected start frame (len 10) [ 312.771232][ T37] audit: type=1800 audit(1785278159.523:9): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.432" name="UDC" dev="configfs" ino=14888 res=0 errno=0 [ 313.231745][ T732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.359203][ T732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.679727][ T732] bond0 (unregistering): Released all slaves [ 313.772596][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.772609][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.772624][ T7064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.427274][ T7064] hsr_slave_0: entered promiscuous mode [ 315.470755][ T7064] hsr_slave_1: entered promiscuous mode [ 315.471816][ T7064] debugfs: 'hsr0' already exists in 'hsr' [ 315.471839][ T7064] Cannot create hsr debugfs directory [ 316.540052][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 316.976578][ T5603] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 317.147940][ T5603] Bluetooth: Unexpected start frame (len 10) [ 317.338486][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.354187][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.381492][ T7448] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 317.382142][ T7448] cramfs: wrong magic [ 321.548803][ T732] hsr_slave_0: left promiscuous mode [ 321.588855][ T732] hsr_slave_1: left promiscuous mode [ 321.589865][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.589888][ T732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.639973][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.639998][ T732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.680004][ T732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.740567][ T732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.874911][ T732] veth1_macvtap: left promiscuous mode [ 321.875097][ T732] veth0_macvtap: left promiscuous mode [ 321.876586][ T732] veth1_vlan: left promiscuous mode [ 321.877868][ T732] veth0_vlan: left promiscuous mode [ 323.261274][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 323.758784][ T5603] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 324.212045][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.277625][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.282451][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.307120][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.330683][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.349792][ T5607] Bluetooth: Unexpected start frame (len 10) [ 325.640961][ T7500] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 325.652153][ T7500] cramfs: wrong magic [ 326.050745][ T7510] mmap: syz.0.454 (7510) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 326.581225][ T7515] overlayfs: overlapping lowerdir path [ 327.608844][ T5603] Bluetooth: hci0: command tx timeout [ 327.873969][ T732] team0 (unregistering): Port device team_slave_1 removed [ 327.931356][ T732] team0 (unregistering): Port device team_slave_0 removed [ 328.179368][ T732] team0 (unregistering): Port device team_slave_1 removed [ 328.259961][ T732] team0 (unregistering): Port device team_slave_0 removed [ 328.542609][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.542722][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.542938][ T7221] bridge_slave_0: entered allmulticast mode [ 328.559495][ T7221] bridge_slave_0: entered promiscuous mode [ 329.229291][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.230560][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.636527][ T7221] bridge_slave_1: entered allmulticast mode [ 329.674367][ T7221] bridge_slave_1: entered promiscuous mode [ 329.688645][ T5603] Bluetooth: hci0: command tx timeout [ 330.465484][ T5603] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 330.926398][ T7221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.995987][ T7221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.167261][ T7221] team0: Port device team_slave_0 added [ 331.184596][ T7221] team0: Port device team_slave_1 added [ 331.198719][ T7542] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 331.271591][ T7542] cramfs: wrong magic [ 331.524458][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.524474][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.524498][ T7221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.591985][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.592001][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.592025][ T7221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.772489][ T5603] Bluetooth: hci0: command tx timeout [ 332.205320][ T5603] Bluetooth: Unexpected start frame (len 10) [ 333.244825][ T7221] hsr_slave_0: entered promiscuous mode [ 333.262952][ T7221] hsr_slave_1: entered promiscuous mode [ 333.269595][ T7221] debugfs: 'hsr0' already exists in 'hsr' [ 333.269621][ T7221] Cannot create hsr debugfs directory [ 333.848681][ T5603] Bluetooth: hci0: command tx timeout [ 335.904275][ T7582] overlayfs: overlapping lowerdir path [ 337.394219][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 337.687419][ T5603] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 339.804806][ T5603] Bluetooth: Unexpected start frame (len 10) [ 339.888898][ T37] audit: type=1800 audit(1785278186.563:10): pid=7607 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.473" name="UDC" dev="configfs" ino=15314 res=0 errno=0 [ 342.394824][ T7624] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 342.491826][ T7624] cramfs: wrong magic [ 344.215737][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 344.337141][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.377244][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.399720][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.407338][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.408493][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.521220][ T7643] overlayfs: overlapping lowerdir path [ 345.493393][ T732] bridge_slave_1: left allmulticast mode [ 345.493426][ T732] bridge_slave_1: left promiscuous mode [ 345.493675][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.532745][ T732] bridge_slave_0: left allmulticast mode [ 346.532802][ T732] bridge_slave_0: left promiscuous mode [ 346.532980][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.942252][ T5603] Bluetooth: hci5: command tx timeout [ 347.219005][ T732] bridge_slave_1: left allmulticast mode [ 347.219184][ T732] bridge_slave_1: left promiscuous mode [ 347.219567][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.841215][ T732] bridge_slave_0: left allmulticast mode [ 348.841250][ T732] bridge_slave_0: left promiscuous mode [ 348.841477][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.971221][ T5603] Bluetooth: hci5: command tx timeout [ 349.436578][ T7662] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 349.486012][ T7662] cramfs: wrong magic [ 349.611439][ T732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.739527][ T732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.800556][ T732] bond0 (unregistering): Released all slaves [ 350.209322][ T732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.261295][ T732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.350904][ T732] bond0 (unregistering): Released all slaves [ 351.049764][ T5603] Bluetooth: hci5: command tx timeout [ 351.134652][ T5603] Bluetooth: Unexpected start frame (len 10) [ 351.145376][ T37] audit: type=1800 audit(1785278197.893:11): pid=7674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.482" name="UDC" dev="configfs" ino=16050 res=0 errno=0 [ 353.142998][ T5603] Bluetooth: hci5: command tx timeout [ 353.170903][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.171015][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.171219][ T7495] bridge_slave_0: entered allmulticast mode [ 353.198837][ T7495] bridge_slave_0: entered promiscuous mode [ 353.346857][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.346985][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.347212][ T7495] bridge_slave_1: entered allmulticast mode [ 353.391808][ T7495] bridge_slave_1: entered promiscuous mode [ 354.698711][ T732] hsr_slave_0: left promiscuous mode [ 356.056355][ T732] hsr_slave_1: left promiscuous mode [ 356.057413][ T732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.080217][ T7688] syz.4.486 (7688) used greatest stack depth: 18776 bytes left [ 356.339264][ T732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.559254][ T732] hsr_slave_0: left promiscuous mode [ 356.625428][ T732] hsr_slave_1: left promiscuous mode [ 356.627463][ T732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.669024][ T7704] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 356.669670][ T732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.672141][ T7704] cramfs: wrong magic [ 356.941212][ T5603] Bluetooth: Unexpected start frame (len 10) [ 356.942830][ T37] audit: type=1800 audit(1785278203.693:12): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.494" name="UDC" dev="configfs" ino=16564 res=0 errno=0 [ 360.938264][ T732] team0 (unregistering): Port device team_slave_1 removed [ 361.017034][ T732] team0 (unregistering): Port device team_slave_0 removed [ 362.476217][ T732] team0 (unregistering): Port device team_slave_1 removed [ 362.561497][ T732] team0 (unregistering): Port device team_slave_0 removed [ 362.848446][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.966948][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.058110][ T7495] team0: Port device team_slave_0 added [ 363.092736][ T7495] team0: Port device team_slave_1 added [ 363.564983][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.565591][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.565618][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.780777][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.780793][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.780817][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.521418][ T7495] hsr_slave_0: entered promiscuous mode [ 364.522731][ T7495] hsr_slave_1: entered promiscuous mode [ 365.971839][ T7752] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 365.999069][ T7752] cramfs: wrong magic [ 366.033718][ T5603] Bluetooth: Unexpected start frame (len 10) [ 366.071615][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 366.240430][ T37] audit: type=1800 audit(1785278212.843:13): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.503" name="UDC" dev="configfs" ino=16715 res=0 errno=0 [ 371.904782][ T5603] Bluetooth: Unexpected start frame (len 10) [ 371.919412][ T37] audit: type=1800 audit(1785278218.673:14): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.512" name="UDC" dev="configfs" ino=16234 res=0 errno=0 [ 373.121276][ T7805] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 373.121854][ T7805] cramfs: wrong magic [ 373.421140][ T7633] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.421350][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.421516][ T7633] bridge_slave_0: entered allmulticast mode [ 373.424357][ T7633] bridge_slave_0: entered promiscuous mode [ 373.431253][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.431519][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.431730][ T7633] bridge_slave_1: entered allmulticast mode [ 373.434162][ T7633] bridge_slave_1: entered promiscuous mode [ 373.746537][ T7495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.686892][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.814258][ T7495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 375.028074][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.633112][ T7633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.635420][ T7495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.816106][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.859393][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 376.882802][ T7633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.261409][ T7495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.324570][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.637204][ T5603] Bluetooth: Unexpected start frame (len 10) [ 378.656196][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.656264][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.796946][ T37] audit: type=1800 audit(1785278225.433:15): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.521" name="UDC" dev="configfs" ino=16278 res=0 errno=0 [ 379.988198][ T7633] team0: Port device team_slave_0 added [ 380.033655][ T7633] team0: Port device team_slave_1 added [ 380.158021][ T7859] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 380.158591][ T7859] cramfs: wrong magic [ 380.507683][ T7633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.507699][ T7633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.507724][ T7633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.537491][ T7633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.537507][ T7633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.537530][ T7633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.856379][ T7633] hsr_slave_0: entered promiscuous mode [ 381.879012][ T7633] hsr_slave_1: entered promiscuous mode [ 381.882735][ T7633] debugfs: 'hsr0' already exists in 'hsr' [ 381.882983][ T7633] Cannot create hsr debugfs directory [ 384.477698][ T7891] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 384.478246][ T7891] cramfs: wrong magic [ 385.166256][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.203460][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.216867][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.261496][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.269501][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.615853][ T5603] Bluetooth: hci2: command tx timeout [ 389.701665][ T5603] Bluetooth: hci2: command tx timeout [ 390.712555][ T5603] Bluetooth: Unexpected start frame (len 10) [ 390.715491][ T37] audit: type=1800 audit(1785278237.463:16): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.531" name="UDC" dev="configfs" ino=17331 res=0 errno=0 [ 391.670719][ T732] bridge_slave_1: left allmulticast mode [ 391.670750][ T732] bridge_slave_1: left promiscuous mode [ 391.727625][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.850199][ T5603] Bluetooth: hci2: command tx timeout [ 392.025077][ T732] bridge_slave_0: left allmulticast mode [ 392.025111][ T732] bridge_slave_0: left promiscuous mode [ 392.026176][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.172515][ T5603] Bluetooth: hci2: command tx timeout [ 394.388488][ T7949] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 394.389122][ T7949] cramfs: wrong magic [ 394.681319][ T732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.841856][ T732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.926402][ T732] bond0 (unregistering): Released all slaves [ 395.137961][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 397.674019][ T5603] Bluetooth: Unexpected start frame (len 10) [ 397.681672][ T37] audit: type=1800 audit(1785278244.433:17): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.544" name="UDC" dev="configfs" ino=17399 res=0 errno=0 [ 399.294596][ T732] hsr_slave_0: left promiscuous mode [ 399.361293][ T732] hsr_slave_1: left promiscuous mode [ 399.362106][ T732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.403310][ T732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.948730][ T7981] syz.4.546 (7981) used greatest stack depth: 17568 bytes left [ 403.834561][ T732] team0 (unregistering): Port device team_slave_1 removed [ 404.015931][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.047569][ T732] team0 (unregistering): Port device team_slave_0 removed [ 404.076185][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.086321][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.121272][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.124742][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.524026][ T5603] Bluetooth: hci0: command tx timeout [ 407.643713][ T8016] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 407.643791][ T8016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 407.643818][ T8016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 407.681444][ T37] audit: type=1800 audit(1785278254.393:18): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.550" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 409.647766][ T5603] Bluetooth: hci0: command tx timeout [ 409.717634][ T37] audit: type=1800 audit(1785278256.443:19): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.555" name="UDC" dev="configfs" ino=17512 res=0 errno=0 [ 409.805542][ T5603] Bluetooth: Unexpected start frame (len 10) [ 411.992012][ T5603] Bluetooth: hci0: command tx timeout [ 414.140249][ T5603] Bluetooth: hci0: command tx timeout [ 417.699452][ T5721] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 417.903475][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 418.332444][ T5721] usb 5-1: device descriptor read/64, error -32 [ 419.189163][ T5721] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 419.189925][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 419.339523][ T5721] usb 5-1: device descriptor read/64, error -32 [ 419.453701][ T5721] usb usb5-port1: attempt power cycle [ 419.890421][ T5721] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 420.318974][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 420.319552][ T5721] usb 5-1: device descriptor read/8, error -32 [ 420.823367][ T5721] raw-gadget.0 gadget.4: failed to queue suspend event [ 421.693362][ T5721] raw-gadget.0 gadget.4: failed to queue reset event [ 422.076959][ T5721] raw-gadget.0 gadget.4: failed to queue resume event [ 422.140332][ T5721] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 422.630212][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 422.630575][ T5721] usb 5-1: device descriptor read/8, error -32 [ 422.838186][ T5721] raw-gadget.0 gadget.4: failed to queue suspend event [ 422.842954][ T5721] usb usb5-port1: unable to enumerate USB device [ 425.419868][ T8082] raw-gadget.0 gadget.4: failed to queue disconnect event [ 426.289395][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.289590][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.289809][ T7894] bridge_slave_0: entered allmulticast mode [ 426.292475][ T7894] bridge_slave_0: entered promiscuous mode [ 426.319907][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.320020][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.320201][ T7894] bridge_slave_1: entered allmulticast mode [ 426.323073][ T7894] bridge_slave_1: entered promiscuous mode [ 427.862282][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.000894][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.001012][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.001229][ T7997] bridge_slave_0: entered allmulticast mode [ 428.007682][ T7997] bridge_slave_0: entered promiscuous mode [ 428.098928][ T5603] Bluetooth: Unexpected start frame (len 10) [ 428.100787][ T37] audit: type=1800 audit(1785278274.853:20): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.567" name="UDC" dev="configfs" ino=17591 res=0 errno=0 [ 430.456878][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.457323][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.457439][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.457603][ T7997] bridge_slave_1: entered allmulticast mode [ 430.494138][ T7997] bridge_slave_1: entered promiscuous mode [ 430.575604][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.633690][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.634894][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.635995][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.636843][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.995199][ T7894] team0: Port device team_slave_0 added [ 431.050859][ T7997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.125530][ T7894] team0: Port device team_slave_1 added [ 431.154619][ T7997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.538254][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.538271][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.538294][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.775823][ T5607] Bluetooth: hci5: command tx timeout [ 433.891660][ T7997] team0: Port device team_slave_0 added [ 433.892352][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.892362][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.892381][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.851399][ T5607] Bluetooth: hci5: command tx timeout [ 436.177299][ T7997] team0: Port device team_slave_1 added [ 436.298311][ T5607] Bluetooth: Unexpected start frame (len 10) [ 436.311536][ T37] audit: type=1800 audit(1785278283.053:21): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.576" name="UDC" dev="configfs" ino=18894 res=0 errno=0 [ 437.931334][ T5607] Bluetooth: hci5: command tx timeout [ 438.093889][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.093904][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.093929][ T7997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.199734][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.200157][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.200182][ T7997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.232142][ T7894] hsr_slave_0: entered promiscuous mode [ 438.240009][ T7894] hsr_slave_1: entered promiscuous mode [ 438.242514][ T7894] debugfs: 'hsr0' already exists in 'hsr' [ 438.242593][ T7894] Cannot create hsr debugfs directory [ 440.009157][ T5607] Bluetooth: hci5: command tx timeout [ 440.098236][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.098302][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.509810][ T8173] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 441.509871][ T8173] overlayfs: missing 'lowerdir' [ 443.083747][ T7997] hsr_slave_0: entered promiscuous mode [ 443.088232][ T7997] hsr_slave_1: entered promiscuous mode [ 443.103945][ T7997] debugfs: 'hsr0' already exists in 'hsr' [ 443.103971][ T7997] Cannot create hsr debugfs directory [ 446.795701][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.899972][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.915959][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.939348][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.942444][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.415107][ T8123] FAULT_INJECTION: forcing a failure. [ 447.415107][ T8123] name failslab, interval 1, probability 1, space 0, times 98 [ 447.415162][ T8123] CPU: 1 UID: 0 PID: 8123 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 447.415188][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 447.415207][ T8123] Call Trace: [ 447.415287][ T8123] [ 447.415360][ T8123] dump_stack_lvl+0xe8/0x150 [ 447.415544][ T8123] should_fail_ex+0x467/0x600 [ 447.415672][ T8123] should_failslab+0xa8/0x100 [ 447.415753][ T8123] __kmalloc_noprof+0xfe/0x780 [ 447.415804][ T8123] ? trace_kmem_cache_alloc+0x29/0xe0 [ 447.415857][ T8123] ? security_sk_alloc+0x52/0x360 [ 447.415913][ T8123] ? security_sk_alloc+0x52/0x360 [ 447.415932][ T8123] ? rcu_is_watching+0x15/0xb0 [ 447.416034][ T8123] security_sk_alloc+0x52/0x360 [ 447.416056][ T8123] sk_prot_alloc+0x101/0x210 [ 447.416162][ T8123] sk_alloc+0x3a/0x390 [ 447.416187][ T8123] unix_create1+0xb0/0x7d0 [ 447.416292][ T8123] unix_create+0x14c/0x1d0 [ 447.416319][ T8123] __sock_create+0x4b3/0x9d0 [ 447.416387][ T8123] __sys_socket+0xd6/0x1b0 [ 447.416406][ T8123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.416447][ T8123] __x64_sys_socket+0x7a/0x90 [ 447.416467][ T8123] do_syscall_64+0x174/0x580 [ 447.416575][ T8123] ? trace_irq_disable+0x3b/0x140 [ 447.416640][ T8123] ? clear_bhb_loop+0x40/0x90 [ 447.416671][ T8123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.416695][ T8123] RIP: 0033:0x7f8b7268f707 [ 447.416744][ T8123] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.416759][ T8123] RSP: 002b:00007ffc493af398 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 447.416793][ T8123] RAX: ffffffffffffffda RBX: 00007f8b72723ea1 RCX: 00007f8b7268f707 [ 447.416807][ T8123] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 447.416819][ T8123] RBP: 00007f8b72723ea1 R08: 0000000000000000 R09: 00007ffc493af488 [ 447.416831][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 447.416842][ T8123] R13: 00007f8b73444620 R14: 0000000000000006 R15: 0000000000000000 [ 447.416870][ T8123] [ 447.430604][ T1045] FAULT_INJECTION: forcing a failure. [ 447.430604][ T1045] name failslab, interval 1, probability 1, space 0, times 96 [ 447.430639][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 447.430660][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 447.430674][ T1045] Workqueue: events_unbound nsim_dev_trap_report_work [ 447.430842][ T1045] Call Trace: [ 447.430849][ T1045] [ 447.430857][ T1045] dump_stack_lvl+0xe8/0x150 [ 447.430890][ T1045] should_fail_ex+0x467/0x600 [ 447.430924][ T1045] should_failslab+0xa8/0x100 [ 447.430949][ T1045] kmem_cache_alloc_node_noprof+0xae/0x670 [ 447.430971][ T1045] ? __alloc_skb+0x1d7/0x7a0 [ 447.431025][ T1045] ? __alloc_skb+0x1d7/0x7a0 [ 447.431051][ T1045] __alloc_skb+0x1d7/0x7a0 [ 447.431076][ T1045] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 447.431116][ T1045] ? process_scheduled_works+0xa20/0x14e0 [ 447.431188][ T1045] process_scheduled_works+0xa8e/0x14e0 [ 447.431239][ T1045] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.431269][ T1045] ? assign_work+0x3cf/0x5d0 [ 447.431298][ T1045] worker_thread+0xa47/0xfb0 [ 447.431336][ T1045] ? __kthread_parkme+0x71/0x1f0 [ 447.431400][ T1045] kthread+0x388/0x470 [ 447.431428][ T1045] ? __pfx_worker_thread+0x10/0x10 [ 447.431449][ T1045] ? __pfx_kthread+0x10/0x10 [ 447.431478][ T1045] ret_from_fork+0x514/0xb70 [ 447.431572][ T1045] ? __pfx_ret_from_fork+0x10/0x10 [ 447.431601][ T1045] ? __switch_to+0xc89/0x1420 [ 447.431678][ T1045] ? __pfx_kthread+0x10/0x10 [ 447.431707][ T1045] ret_from_fork_asm+0x1a/0x30 [ 447.431771][ T1045] [ 447.829374][ T5601] FAULT_INJECTION: forcing a failure. [ 447.829374][ T5601] name failslab, interval 1, probability 1, space 0, times 91 [ 447.829406][ T5601] CPU: 1 UID: 0 PID: 5601 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 447.829428][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 447.829439][ T5601] Call Trace: [ 447.829446][ T5601] [ 447.829454][ T5601] dump_stack_lvl+0xe8/0x150 [ 447.829490][ T5601] should_fail_ex+0x467/0x600 [ 447.829525][ T5601] should_failslab+0xa8/0x100 [ 447.829550][ T5601] __kmalloc_noprof+0xfe/0x780 [ 447.829570][ T5601] ? rcu_is_watching+0x15/0xb0 [ 447.829595][ T5601] ? tomoyo_realpath_from_path+0xef/0x640 [ 447.829695][ T5601] ? tomoyo_realpath_from_path+0xef/0x640 [ 447.829727][ T5601] tomoyo_realpath_from_path+0xef/0x640 [ 447.829765][ T5601] tomoyo_path_perm+0x283/0x560 [ 447.829786][ T5601] ? tomoyo_path_perm+0x251/0x560 [ 447.829807][ T5601] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 447.829825][ T5601] ? __x64_sys_openat+0x138/0x170 [ 447.829975][ T5601] security_inode_getattr+0x12b/0x310 [ 447.830054][ T5601] __x64_sys_newfstat+0x133/0x270 [ 447.830102][ T5601] ? do_sys_openat2+0x14e/0x200 [ 447.830121][ T5601] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 447.830158][ T5601] ? __pfx___x64_sys_umount+0x10/0x10 [ 447.830246][ T5601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.830268][ T5601] do_syscall_64+0x174/0x580 [ 447.830292][ T5601] ? trace_irq_disable+0x3b/0x140 [ 447.830312][ T5601] ? clear_bhb_loop+0x40/0x90 [ 447.830335][ T5601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.830354][ T5601] RIP: 0033:0x7f3cb277c4a7 [ 447.830372][ T5601] Code: 48 45 31 c9 45 31 c0 e8 a7 cb fb ff 5a 59 eb c6 e8 0e 3f 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 447.830387][ T5601] RSP: 002b:00007ffcdfaad8c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 447.830407][ T5601] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3cb277c4a7 [ 447.830420][ T5601] RDX: 0000000000000000 RSI: 00007ffcdfaad8d0 RDI: 0000000000000005 [ 447.830432][ T5601] RBP: 00007ffcdfaaeb30 R08: 00007ffcdfaafb30 R09: 00000000ffffffff [ 447.830445][ T5601] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffcdfaaeb30 [ 447.830457][ T5601] R13: 00007f3cb281330a R14: 000000000006d2b1 R15: 00007ffcdfaafc00 [ 447.830487][ T5601] [ 447.830529][ T5601] ERROR: Out of memory at tomoyo_realpath_from_path. [ 447.923828][ T5601] FAULT_INJECTION: forcing a failure. [ 447.923828][ T5601] name failslab, interval 1, probability 1, space 0, times 88 [ 447.923860][ T5601] CPU: 0 UID: 0 PID: 5601 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 447.923882][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 447.923894][ T5601] Call Trace: [ 447.923902][ T5601] [ 447.923909][ T5601] dump_stack_lvl+0xe8/0x150 [ 447.923946][ T5601] should_fail_ex+0x467/0x600 [ 447.923982][ T5601] should_failslab+0xa8/0x100 [ 447.924008][ T5601] kmem_cache_alloc_noprof+0xa4/0x650 [ 447.924028][ T5601] ? anon_vma_clone+0x3e7/0x9e0 [ 447.924133][ T5601] ? anon_vma_clone+0x3e7/0x9e0 [ 447.924158][ T5601] anon_vma_clone+0x3e7/0x9e0 [ 447.924188][ T5601] anon_vma_fork+0x177/0x540 [ 447.924212][ T5601] ? dup_mmap+0x8a0/0x1d40 [ 447.924264][ T5601] dup_mmap+0x976/0x1d40 [ 447.924301][ T5601] ? __pfx_dup_mmap+0x10/0x10 [ 447.924319][ T5601] ? rt_spin_lock+0x1e0/0x400 [ 447.924422][ T5601] ? copy_mm+0x10f/0x480 [ 447.924510][ T5601] ? copy_mm+0x10f/0x480 [ 447.924547][ T5601] copy_mm+0x11a/0x480 [ 447.924573][ T5601] ? copy_process+0xd3c/0x4390 [ 447.924594][ T5601] copy_process+0x1e46/0x4390 [ 447.924626][ T5601] ? copy_process+0xd3c/0x4390 [ 447.924666][ T5601] ? __pfx_copy_process+0x10/0x10 [ 447.924694][ T5601] ? preempt_schedule_thunk+0x16/0x40 [ 447.924724][ T5601] kernel_clone+0x2d2/0x8d0 [ 447.924762][ T5601] ? __pfx_kernel_clone+0x10/0x10 [ 447.924805][ T5601] __x64_sys_clone+0x1b6/0x230 [ 447.924834][ T5601] ? __pfx___x64_sys_clone+0x10/0x10 [ 447.924878][ T5601] ? do_user_addr_fault+0xc4a/0x1340 [ 447.924939][ T5601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.924960][ T5601] do_syscall_64+0x174/0x580 [ 447.924983][ T5601] ? trace_irq_disable+0x3b/0x140 [ 447.925002][ T5601] ? clear_bhb_loop+0x40/0x90 [ 447.925024][ T5601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.925043][ T5601] RIP: 0033:0x7f3cb27a6912 [ 447.925061][ T5601] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 447.925077][ T5601] RSP: 002b:00007ffcdfaafa20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.925097][ T5601] RAX: ffffffffffffffda RBX: 00007ffcdfaafa20 RCX: 00007f3cb27a6912 [ 447.925110][ T5601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 447.925121][ T5601] RBP: 00007ffcdfaafbac R08: 0000000000000000 R09: 0000000000000001 [ 447.925132][ T5601] R10: 000055555ecde7d0 R11: 0000000000000246 R12: 0000000000000001 [ 447.925145][ T5601] R13: 00000000000927c0 R14: 000000000006d2b1 R15: 00007ffcdfaafc00 [ 447.925175][ T5601] [ 448.015838][ T43] FAULT_INJECTION: forcing a failure. [ 448.015838][ T43] name failslab, interval 1, probability 1, space 0, times 84 [ 448.015874][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.015895][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.015907][ T43] Workqueue: events_unbound nsim_dev_trap_report_work [ 448.015942][ T43] Call Trace: [ 448.015949][ T43] [ 448.015957][ T43] dump_stack_lvl+0xe8/0x150 [ 448.015989][ T43] should_fail_ex+0x467/0x600 [ 448.016024][ T43] should_failslab+0xa8/0x100 [ 448.016050][ T43] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.016082][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 448.016101][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 448.016127][ T43] __alloc_skb+0x1d7/0x7a0 [ 448.016152][ T43] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 448.016192][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 448.016216][ T43] process_scheduled_works+0xa8e/0x14e0 [ 448.016267][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.016297][ T43] ? assign_work+0x3cf/0x5d0 [ 448.016324][ T43] worker_thread+0xa47/0xfb0 [ 448.016376][ T43] kthread+0x388/0x470 [ 448.016405][ T43] ? __pfx_worker_thread+0x10/0x10 [ 448.016426][ T43] ? __pfx_kthread+0x10/0x10 [ 448.016455][ T43] ret_from_fork+0x514/0xb70 [ 448.016488][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 448.016516][ T43] ? __switch_to+0xc89/0x1420 [ 448.016544][ T43] ? __pfx_kthread+0x10/0x10 [ 448.016573][ T43] ret_from_fork_asm+0x1a/0x30 [ 448.016608][ T43] [ 448.070999][ T732] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 448.119493][ T43] FAULT_INJECTION: forcing a failure. [ 448.119493][ T43] name failslab, interval 1, probability 1, space 0, times 80 [ 448.119526][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.119546][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.119560][ T43] Workqueue: events_unbound nsim_dev_trap_report_work [ 448.119592][ T43] Call Trace: [ 448.119600][ T43] [ 448.119607][ T43] dump_stack_lvl+0xe8/0x150 [ 448.119640][ T43] should_fail_ex+0x467/0x600 [ 448.119675][ T43] should_failslab+0xa8/0x100 [ 448.119700][ T43] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.119722][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 448.119741][ T43] ? __alloc_skb+0x1d7/0x7a0 [ 448.119767][ T43] __alloc_skb+0x1d7/0x7a0 [ 448.119792][ T43] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 448.119831][ T43] ? process_scheduled_works+0xa20/0x14e0 [ 448.119856][ T43] process_scheduled_works+0xa8e/0x14e0 [ 448.119907][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.119937][ T43] ? assign_work+0x3cf/0x5d0 [ 448.119965][ T43] worker_thread+0xa47/0xfb0 [ 448.120016][ T43] kthread+0x388/0x470 [ 448.120044][ T43] ? __pfx_worker_thread+0x10/0x10 [ 448.120073][ T43] ? __pfx_kthread+0x10/0x10 [ 448.120102][ T43] ret_from_fork+0x514/0xb70 [ 448.120134][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 448.120162][ T43] ? __switch_to+0xc89/0x1420 [ 448.120191][ T43] ? __pfx_kthread+0x10/0x10 [ 448.120219][ T43] ret_from_fork_asm+0x1a/0x30 [ 448.120255][ T43] [ 448.135186][ T4953] FAULT_INJECTION: forcing a failure. [ 448.135186][ T4953] name failslab, interval 1, probability 1, space 0, times 79 [ 448.135272][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.135293][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.135302][ T4953] Call Trace: [ 448.135310][ T4953] [ 448.135317][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.135352][ T4953] should_fail_ex+0x467/0x600 [ 448.135386][ T4953] should_failslab+0xa8/0x100 [ 448.135410][ T4953] kmem_cache[ 448.135410][ T4953] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.135430][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.135450][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.135473][ T4953] __alloc_skb+0x1d7/0x7a0 [ 448.135496][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 448.135613][ T4953] ? __lock_acquire+0x683/0x2ce0 [ 448.135690][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 448.135733][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 448.135766][ T4953] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 448.135852][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 448.135890][ T4953] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 448.135923][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.135965][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.135991][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 448.136024][ T4953] __sys_sendto+0x41e/0x5d0 [ 448.136051][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 448.136100][ T4953] ? preempt_schedule_thunk+0x16/0x40 [ 448.136134][ T4953] __x64_sys_sendto+0xde/0x100 [ 448.136156][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.136177][ T4953] do_syscall_64+0x174/0x580 [ 448.136204][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.136227][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.136246][ T4953] RIP: 0033:0x7f993a8b7407 [ 448.136264][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 448.136279][ T4953] RSP: 002b:00007ffd4dd25b80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 448.136299][ T4953] RAX: ffffffffffffffda RBX: 00007f993a767c80 RCX: 00007f993a8b7407 [ 448.136313][ T4953] RDX: 000000000000004c RSI: 00007ffd4dd25cc0 RDI: 0000000000000003 [ 448.136323][ T4953] RBP: 00007ffd4dd260f0 R08: 0000000000000000 R09: 0000000000000000 [ 448.136334][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4dd26108 [ 448.136345][ T4953] R13: 00007ffd4dd25cc0 R14: 0000000000000031 R15: 00007ffd4dd25cc0 [ 448.136369][ T4953] [ 448.157190][ T4953] FAULT_INJECTION: forcing a failure. [ 448.157190][ T4953] name failslab, interval 1, probability 1, space 0, times 77 [ 448.158320][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.158342][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.158353][ T4953] Call Trace: [ 448.158360][ T4953] [ 448.158367][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.158405][ T4953] should_fail_ex+0x467/0x600 [ 448.158439][ T4953] should_failslab+0xa8/0x100 [ 448.158464][ T4953] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.158485][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.158505][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.158529][ T4953] __alloc_skb+0x1d7/0x7a0 [ 448.158550][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 448.158572][ T4953] ? kasan_save_track+0x4f/0x80 [ 448.158658][ T4953] ? kasan_save_track+0x3e/0x80 [ 448.158674][ T4953] ? kasan_save_free_info+0x40/0x50 [ 448.158698][ T4953] ? __kasan_slab_free+0x5c/0x80 [ 448.158716][ T4953] ? kfree+0x1c5/0x6c0 [ 448.158731][ T4953] ? syslog_print+0x57c/0x610 [ 448.158784][ T4953] ? do_syslog+0x583/0x7d0 [ 448.158805][ T4953] ? __x64_sys_syslog+0x7c/0x90 [ 448.158831][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 448.158873][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 448.158904][ T4953] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 448.158936][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 448.158965][ T4953] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.158991][ T4953] ? kfree+0x1c5/0x6c0 [ 448.159007][ T4953] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 448.159039][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.159087][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.159113][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 448.159145][ T4953] __sys_sendto+0x41e/0x5d0 [ 448.159165][ T4953] ? smack_privileged_cred+0x33c/0x380 [ 448.159197][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 448.159237][ T4953] ? preempt_schedule_thunk+0x16/0x40 [ 448.159270][ T4953] __x64_sys_sendto+0xde/0x100 [ 448.159291][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.159311][ T4953] do_syscall_64+0x174/0x580 [ 448.159334][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.159357][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.159375][ T4953] RIP: 0033:0x7f993a8b7407 [ 448.159392][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 448.159407][ T4953] RSP: 002b:00007ffd4dd25b80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 448.159426][ T4953] RAX: ffffffffffffffda RBX: 00007f993a767c80 RCX: 00007f993a8b7407 [ 448.159440][ T4953] RDX: 0000000000000083 RSI: 00007ffd4dd25cc0 RDI: 0000000000000003 [ 448.159452][ T4953] RBP: 00007ffd4dd260f0 R08: 0000000000000000 R09: 0000000000000000 [ 448.159463][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4dd26108 [ 448.159475][ T4953] R13: 00007ffd4dd25cc0 R14: 0000000000000068 R15: 00007ffd4dd25cc0 [ 448.159503][ T4953] [ 448.193891][ T4953] FAULT_INJECTION: forcing a failure. [ 448.193891][ T4953] name failslab, interval 1, probability 1, space 0, times 76 [ 448.193924][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.193945][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.193956][ T4953] Call Trace: [ 448.193963][ T4953] [ 448.193971][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.194017][ T4953] should_fail_ex+0x467/0x600 [ 448.194052][ T4953] should_failslab+0xa8/0x100 [ 448.194077][ T4953] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.194098][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.194118][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.194142][ T4953] __alloc_skb+0x1d7/0x7a0 [ 448.194165][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 448.194210][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 448.194251][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 448.194281][ T4953] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 448.194314][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 448.194351][ T4953] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 448.194383][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.194425][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.194460][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 448.194492][ T4953] __sys_sendto+0x41e/0x5d0 [ 448.194518][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 448.194550][ T4953] ? irqentry_exit+0x218/0x8f0 [ 448.194583][ T4953] ? rcu_is_watching+0x15/0xb0 [ 448.194613][ T4953] __x64_sys_sendto+0xde/0x100 [ 448.194634][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.194655][ T4953] do_syscall_64+0x174/0x580 [ 448.194678][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.194701][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.194720][ T4953] RIP: 0033:0x7f993a8b7407 [ 448.194755][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 448.194770][ T4953] RSP: 002b:00007ffd4dd25b80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 448.194789][ T4953] RAX: ffffffffffffffda RBX: 00007f993a767c80 RCX: 00007f993a8b7407 [ 448.194802][ T4953] RDX: 000000000000004c RSI: 00007ffd4dd25cc0 RDI: 0000000000000003 [ 448.194814][ T4953] RBP: 00007ffd4dd260f0 R08: 0000000000000000 R09: 0000000000000000 [ 448.194826][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4dd26108 [ 448.194838][ T4953] R13: 00007ffd4dd25cc0 R14: 0000000000000031 R15: 00007ffd4dd25cc0 [ 448.194866][ T4953] [ 448.203710][ T1045] FAULT_INJECTION: forcing a failure. [ 448.203710][ T1045] name failslab, interval 1, probability 1, space 0, times 75 [ 448.203742][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.203763][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.203775][ T1045] Workqueue: bat_events batadv_mcast_mla_update [ 448.203926][ T1045] Call Trace: [ 448.203933][ T1045] [ 448.203940][ T1045] dump_stack_lvl+0xe8/0x150 [ 448.203972][ T1045] should_fail_ex+0x467/0x600 [ 448.204017][ T1045] should_failslab+0xa8/0x100 [ 448.204041][ T1045] __kmalloc_cache_noprof+0xa0/0x6b0 [ 448.204063][ T1045] ? batadv_mcast_mla_update+0x18e2/0x3730 [ 448.204089][ T1045] ? batadv_mcast_mla_update+0x18e2/0x3730 [ 448.204122][ T1045] batadv_mcast_mla_update+0x18e2/0x3730 [ 448.204148][ T1045] ? batadv_mcast_mla_update+0x186/0x3730 [ 448.204184][ T1045] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 448.204213][ T1045] ? do_raw_spin_lock+0x12b/0x2f0 [ 448.204280][ T1045] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.204310][ T1045] ? process_scheduled_works+0xa20/0x14e0 [ 448.204344][ T1045] ? rcu_is_watching+0x15/0xb0 [ 448.204371][ T1045] ? process_scheduled_works+0xa20/0x14e0 [ 448.204393][ T1045] process_scheduled_works+0xa8e/0x14e0 [ 448.204443][ T1045] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.204472][ T1045] ? assign_work+0x3cf/0x5d0 [ 448.204497][ T1045] worker_thread+0xa47/0xfb0 [ 448.204534][ T1045] ? __kthread_parkme+0x71/0x1f0 [ 448.204569][ T1045] kthread+0x388/0x470 [ 448.204597][ T1045] ? __pfx_worker_thread+0x10/0x10 [ 448.204618][ T1045] ? __pfx_kthread+0x10/0x10 [ 448.204647][ T1045] ret_from_fork+0x514/0xb70 [ 448.204679][ T1045] ? __pfx_ret_from_fork+0x10/0x10 [ 448.204707][ T1045] ? __switch_to+0xc89/0x1420 [ 448.204735][ T1045] ? __pfx_kthread+0x10/0x10 [ 448.204764][ T1045] ret_from_fork_asm+0x1a/0x30 [ 448.204798][ T1045] [ 448.214620][ T4953] FAULT_INJECTION: forcing a failure. [ 448.214620][ T4953] name failslab, interval 1, probability 1, space 0, times 74 [ 448.215204][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.215227][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.215237][ T4953] Call Trace: [ 448.215244][ T4953] [ 448.215251][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.215286][ T4953] should_fail_ex+0x467/0x600 [ 448.215324][ T4953] should_failslab+0xa8/0x100 [ 448.215348][ T4953] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.215369][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.215389][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.215413][ T4953] __alloc_skb+0x1d7/0x7a0 [ 448.215436][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 448.215456][ T4953] ? __lock_acquire+0x683/0x2ce0 [ 448.215484][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 448.215525][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 448.215556][ T4953] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 448.215588][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 448.215625][ T4953] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 448.215656][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.215697][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.215724][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 448.215755][ T4953] __sys_sendto+0x41e/0x5d0 [ 448.215774][ T4953] ? smack_privileged_cred+0x33c/0x380 [ 448.215806][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 448.215838][ T4953] ? __pfx___sys_connect+0x10/0x10 [ 448.215867][ T4953] ? rcu_is_watching+0x15/0xb0 [ 448.215897][ T4953] __x64_sys_sendto+0xde/0x100 [ 448.215917][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.215938][ T4953] do_syscall_64+0x174/0x580 [ 448.215962][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.215990][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.216008][ T4953] RIP: 0033:0x7f993a8b7407 [ 448.216025][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 448.216040][ T4953] RSP: 002b:00007ffd4dd25b80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 448.216059][ T4953] RAX: ffffffffffffffda RBX: 00007f993a767c80 RCX: 00007f993a8b7407 [ 448.216073][ T4953] RDX: 0000000000000057 RSI: 00007ffd4dd25cc0 RDI: 0000000000000003 [ 448.216084][ T4953] RBP: 00007ffd4dd260f0 R08: 0000000000000000 R09: 0000000000000000 [ 448.216096][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4dd26108 [ 448.216107][ T4953] R13: 00007ffd4dd25cc0 R14: 000000000000003c R15: 00007ffd4dd25cc0 [ 448.216135][ T4953] [ 448.227943][ T4953] FAULT_INJECTION: forcing a failure. [ 448.227943][ T4953] name failslab, interval 1, probability 1, space 0, times 73 [ 448.227973][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.228040][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.228051][ T4953] Call Trace: [ 448.228059][ T4953] [ 448.228065][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.228100][ T4953] should_fail_ex+0x467/0x600 [ 448.228135][ T4953] should_failslab+0xa8/0x100 [ 448.228159][ T4953] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.228181][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.228200][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.228225][ T4953] __alloc_skb+0x1d7/0x7a0 [ 448.228248][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 448.228269][ T4953] ? __pfx___schedule+0x10/0x10 [ 448.228299][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 448.228340][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 448.228370][ T4953] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 448.228402][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 448.228439][ T4953] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 448.228471][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.228511][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.228537][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 448.228565][ T4953] __sys_sendto+0x41e/0x5d0 [ 448.228583][ T4953] ? smack_privileged_cred+0x33c/0x380 [ 448.228614][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 448.228645][ T4953] ? irqentry_exit+0x218/0x8f0 [ 448.228677][ T4953] ? rcu_is_watching+0x15/0xb0 [ 448.228707][ T4953] __x64_sys_sendto+0xde/0x100 [ 448.228729][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.228749][ T4953] do_syscall_64+0x174/0x580 [ 448.228773][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.228795][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.228813][ T4953] RIP: 0033:0x7f993a8b7407 [ 448.228831][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 448.228845][ T4953] RSP: 002b:00007ffd4dd25b80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 448.228865][ T4953] RAX: ffffffffffffffda RBX: 00007f993a767c80 RCX: 00007f993a8b7407 [ 448.228878][ T4953] RDX: 0000000000000078 RSI: 00007ffd4dd25cc0 RDI: 0000000000000003 [ 448.228890][ T4953] RBP: 00007ffd4dd260f0 R08: 0000000000000000 R09: 0000000000000000 [ 448.228901][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4dd26108 [ 448.228913][ T4953] R13: 00007ffd4dd25cc0 R14: 000000000000005d R15: 00007ffd4dd25cc0 [ 448.228941][ T4953] [ 448.256745][ T732] bridge_slave_1: left allmulticast mode [ 448.256778][ T732] bridge_slave_1: left promiscuous mode [ 448.257216][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.284353][ T4953] FAULT_INJECTION: forcing a failure. [ 448.284353][ T4953] name failslab, interval 1, probability 1, space 0, times 71 [ 448.284602][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.284624][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.284635][ T4953] Call Trace: [ 448.284642][ T4953] [ 448.284650][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.284683][ T4953] should_fail_ex+0x467/0x600 [ 448.284721][ T4953] should_failslab+0xa8/0x100 [ 448.284746][ T4953] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.284767][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.284786][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.284810][ T4953] __alloc_skb+0x1d7/0x7a0 [ 448.284834][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 448.284855][ T4953] ? __lock_acquire+0x683/0x2ce0 [ 448.284884][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 448.284925][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 448.284956][ T4953] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 448.284995][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 448.285032][ T4953] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 448.285063][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.285104][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.285131][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 448.285162][ T4953] __sys_sendto+0x41e/0x5d0 [ 448.285181][ T4953] ? smack_privileged_cred+0x33c/0x380 [ 448.285214][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 448.285258][ T4953] ? rcu_is_watching+0x15/0xb0 [ 448.285288][ T4953] __x64_sys_sendto+0xde/0x100 [ 448.285309][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.285329][ T4953] do_syscall_64+0x174/0x580 [ 448.285353][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.285376][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.285394][ T4953] RIP: 0033:0x7f993a8b7407 [ 448.285411][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 448.285426][ T4953] RSP: 002b:00007ffd4dd25b80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 448.285445][ T4953] RAX: ffffffffffffffda RBX: 00007f993a767c80 RCX: 00007f993a8b7407 [ 448.285459][ T4953] RDX: 0000000000000052 RSI: 00007ffd4dd25cc0 RDI: 0000000000000003 [ 448.285470][ T4953] RBP: 00007ffd4dd260f0 R08: 0000000000000000 R09: 0000000000000000 [ 448.285481][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4dd26108 [ 448.285493][ T4953] R13: 00007ffd4dd25cc0 R14: 0000000000000037 R15: 00007ffd4dd25cc0 [ 448.285521][ T4953] [ 448.301262][ T1045] FAULT_INJECTION: forcing a failure. [ 448.301262][ T1045] name failslab, interval 1, probability 1, space 0, times 70 [ 448.301292][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.301316][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.301327][ T1045] Workqueue: events_unbound nsim_dev_trap_report_work [ 448.301358][ T1045] Call Trace: [ 448.301366][ T1045] [ 448.301373][ T1045] dump_stack_lvl+0xe8/0x150 [ 448.301406][ T1045] should_fail_ex+0x467/0x600 [ 448.301441][ T1045] should_failslab+0xa8/0x100 [ 448.301467][ T1045] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.301488][ T1045] ? __alloc_skb+0x1d7/0x7a0 [ 448.301507][ T1045] ? __alloc_skb+0x1d7/0x7a0 [ 448.301533][ T1045] __alloc_skb+0x1d7/0x7a0 [ 448.301557][ T1045] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 448.301598][ T1045] ? process_scheduled_works+0xa20/0x14e0 [ 448.301621][ T1045] process_scheduled_works+0xa8e/0x14e0 [ 448.301673][ T1045] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.301703][ T1045] ? assign_work+0x3cf/0x5d0 [ 448.301730][ T1045] worker_thread+0xa47/0xfb0 [ 448.301768][ T1045] ? __kthread_parkme+0x71/0x1f0 [ 448.301804][ T1045] kthread+0x388/0x470 [ 448.301832][ T1045] ? __pfx_worker_thread+0x10/0x10 [ 448.301853][ T1045] ? __pfx_kthread+0x10/0x10 [ 448.301882][ T1045] ret_from_fork+0x514/0xb70 [ 448.301915][ T1045] ? __pfx_ret_from_fork+0x10/0x10 [ 448.301943][ T1045] ? __switch_to+0xc89/0x1420 [ 448.301972][ T1045] ? __pfx_kthread+0x10/0x10 [ 448.302008][ T1045] ret_from_fork_asm+0x1a/0x30 [ 448.302043][ T1045] [ 448.355055][ T4953] FAULT_INJECTION: forcing a failure. [ 448.355055][ T4953] name failslab, interval 1, probability 1, space 0, times 68 [ 448.355087][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.355110][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.355122][ T4953] Call Trace: [ 448.355128][ T4953] [ 448.355135][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.355169][ T4953] should_fail_ex+0x467/0x600 [ 448.355203][ T4953] should_failslab+0xa8/0x100 [ 448.355229][ T4953] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.355250][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.355270][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.355294][ T4953] __alloc_skb+0x1d7/0x7a0 [ 448.355316][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 448.355337][ T4953] ? __lock_acquire+0x683/0x2ce0 [ 448.355367][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 448.355408][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 448.355439][ T4953] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 448.355471][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 448.355508][ T4953] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 448.355540][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.355582][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.355607][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 448.355638][ T4953] __sys_sendto+0x41e/0x5d0 [ 448.355664][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 448.355707][ T4953] ? rcu_is_watching+0x15/0xb0 [ 448.355736][ T4953] __x64_sys_sendto+0xde/0x100 [ 448.355757][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.355778][ T4953] do_syscall_64+0x174/0x580 [ 448.355802][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.355824][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.355842][ T4953] RIP: 0033:0x7f993a8b7407 [ 448.355859][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 448.355874][ T4953] RSP: 002b:00007ffd4dd25b80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 448.355893][ T4953] RAX: ffffffffffffffda RBX: 00007f993a767c80 RCX: 00007f993a8b7407 [ 448.355907][ T4953] RDX: 000000000000004e RSI: 00007ffd4dd25cc0 RDI: 0000000000000003 [ 448.355917][ T4953] RBP: 00007ffd4dd260f0 R08: 0000000000000000 R09: 0000000000000000 [ 448.355929][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4dd26108 [ 448.355941][ T4953] R13: 00007ffd4dd25cc0 R14: 0000000000000033 R15: 00007ffd4dd25cc0 [ 448.355975][ T4953] [ 448.362324][ T4953] FAULT_INJECTION: forcing a failure. [ 448.362324][ T4953] name failslab, interval 1, probability 1, space 0, times 67 [ 448.362355][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.362375][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.362388][ T4953] Call Trace: [ 448.362395][ T4953] [ 448.362403][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.362437][ T4953] should_fail_ex+0x467/0x600 [ 448.362470][ T4953] should_failslab+0xa8/0x100 [ 448.362495][ T4953] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.362516][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.362535][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 448.362560][ T4953] __alloc_skb+0x1d7/0x7a0 [ 448.362583][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 448.362603][ T4953] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 448.362627][ T4953] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.362649][ T4953] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.362671][ T4953] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 448.362702][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 448.362743][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 448.362774][ T4953] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 448.362806][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 448.362843][ T4953] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 448.362875][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.362916][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 448.362942][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 448.362980][ T4953] __sys_sendto+0x41e/0x5d0 [ 448.362999][ T4953] ? smack_privileged_cred+0x33c/0x380 [ 448.363031][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 448.363062][ T4953] ? __pfx___sys_connect+0x10/0x10 [ 448.363092][ T4953] ? rcu_is_watching+0x15/0xb0 [ 448.363122][ T4953] __x64_sys_sendto+0xde/0x100 [ 448.363142][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.363163][ T4953] do_syscall_64+0x174/0x580 [ 448.363186][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.363209][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.363227][ T4953] RIP: 0033:0x7f993a8b7407 [ 448.363243][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 448.363258][ T4953] RSP: 002b:00007ffd4dd25b80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 448.363278][ T4953] RAX: ffffffffffffffda RBX: 00007f993a767c80 RCX: 00007f993a8b7407 [ 448.363290][ T4953] RDX: 000000000000004c RSI: 00007ffd4dd25cc0 RDI: 0000000000000003 [ 448.363301][ T4953] RBP: 00007ffd4dd260f0 R08: 0000000000000000 R09: 0000000000000000 [ 448.363312][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4dd26108 [ 448.363324][ T4953] R13: 00007ffd4dd25cc0 R14: 0000000000000031 R15: 00007ffd4dd25cc0 [ 448.363352][ T4953] [ 448.368378][ T4964] FAULT_INJECTION: forcing a failure. [ 448.368378][ T4964] name failslab, interval 1, probability 1, space 0, times 66 [ 448.368406][ T4964] CPU: 1 UID: 0 PID: 4964 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.368427][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.368438][ T4964] Call Trace: [ 448.368445][ T4964] [ 448.368452][ T4964] dump_stack_lvl+0xe8/0x150 [ 448.368496][ T4964] should_fail_ex+0x467/0x600 [ 448.368534][ T4964] should_failslab+0xa8/0x100 [ 448.368558][ T4964] kmem_cache_alloc_noprof+0xa4/0x650 [ 448.368577][ T4964] ? do_getname+0x2e/0x250 [ 448.368593][ T4964] ? do_getname+0x2e/0x250 [ 448.368614][ T4964] do_getname+0x2e/0x250 [ 448.368629][ T4964] ? getname_flags+0x11/0x20 [ 448.368658][ T4964] do_readlinkat+0xc8/0x510 [ 448.368682][ T4964] ? __pfx_do_readlinkat+0x10/0x10 [ 448.368710][ T4964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.368730][ T4964] __x64_sys_readlink+0x7f/0x90 [ 448.368749][ T4964] do_syscall_64+0x174/0x580 [ 448.368772][ T4964] ? clear_bhb_loop+0x40/0x90 [ 448.368796][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.368814][ T4964] RIP: 0033:0x7fa92450a3a7 [ 448.368832][ T4964] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 448.368847][ T4964] RSP: 002b:00007fffd8af1f58 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 448.368866][ T4964] RAX: ffffffffffffffda RBX: 00007fffd8af2430 RCX: 00007fa92450a3a7 [ 448.368880][ T4964] RDX: 0000000000000400 RSI: 00007fffd8af1f60 RDI: 00007fffd8af2430 [ 448.368893][ T4964] RBP: 00007fffd8af1f60 R08: 000055d6f6a13194 R09: 0000000000000001 [ 448.368904][ T4964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 448.368916][ T4964] R13: 0000000000000100 R14: 000055d6d41d5be0 R15: 00007fffd8af2eb0 [ 448.368943][ T4964] [ 448.451847][ T4953] FAULT_INJECTION: forcing a failure. [ 448.451847][ T4953] name failslab, interval 1, probability 1, space 0, times 63 [ 448.451931][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.451953][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.451971][ T4953] Call Trace: [ 448.451979][ T4953] [ 448.451986][ T4953] dump_stack_lvl+0xe8/0x150 [ 448.452021][ T4953] should_fail_ex+0x467/0x600 [ 448.452058][ T4953] should_failslab+0xa8/0x100 [ 448.452083][ T4953] __kmalloc_cache_noprof+0xa0/0x6b0 [ 448.452104][ T4953] ? syslog_print+0x103/0x610 [ 448.452126][ T4953] ? syslog_print+0x103/0x610 [ 448.452154][ T4953] syslog_print+0x103/0x610 [ 448.452179][ T4953] ? __pfx_syslog_print+0x10/0x10 [ 448.452204][ T4953] ? smack_privileged_cred+0xb6/0x380 [ 448.452234][ T4953] ? smack_privileged_cred+0xb6/0x380 [ 448.452268][ T4953] ? smack_privileged_cred+0xb6/0x380 [ 448.452296][ T4953] ? smack_privileged_cred+0xb6/0x380 [ 448.452322][ T4953] ? smack_privileged_cred+0xb6/0x380 [ 448.452351][ T4953] ? smack_privileged_cred+0x33c/0x380 [ 448.452381][ T4953] ? smack_syslog+0x95/0xf0 [ 448.452410][ T4953] do_syslog+0x583/0x7d0 [ 448.452434][ T4953] ? __pfx_do_syslog+0x10/0x10 [ 448.452471][ T4953] ? rcu_is_watching+0x15/0xb0 [ 448.452500][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.452519][ T4953] __x64_sys_syslog+0x7c/0x90 [ 448.452543][ T4953] do_syscall_64+0x174/0x580 [ 448.452568][ T4953] ? clear_bhb_loop+0x40/0x90 [ 448.452591][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.452609][ T4953] RIP: 0033:0x7f993a931a37 [ 448.452626][ T4953] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 448.452640][ T4953] RSP: 002b:00007ffd4dd261d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 448.452660][ T4953] RAX: ffffffffffffffda RBX: 00007f993aad1490 RCX: 00007f993a931a37 [ 448.452673][ T4953] RDX: 00000000000003ff RSI: 00007f993aad1490 RDI: 0000000000000002 [ 448.452685][ T4953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.452696][ T4953] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f993aad1490 [ 448.452708][ T4953] R13: 00007f993aaaedfe R14: 00007f993aad186f R15: 00007f993aad186f [ 448.452736][ T4953] [ 448.523411][ T732] bridge_slave_0: left allmulticast mode [ 448.523880][ T732] bridge_slave_0: left promiscuous mode [ 448.528226][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.528251][ T732] FAULT_INJECTION: forcing a failure. [ 448.528251][ T732] name failslab, interval 1, probability 1, space 0, times 59 [ 448.528276][ T732] CPU: 0 UID: 0 PID: 732 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.528298][ T732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.528309][ T732] Workqueue: netns cleanup_net [ 448.528338][ T732] Call Trace: [ 448.528344][ T732] [ 448.528351][ T732] dump_stack_lvl+0xe8/0x150 [ 448.528385][ T732] should_fail_ex+0x467/0x600 [ 448.528422][ T732] should_failslab+0xa8/0x100 [ 448.528448][ T732] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.528470][ T732] ? __alloc_skb+0x1d7/0x7a0 [ 448.528488][ T732] ? __alloc_skb+0x1d7/0x7a0 [ 448.528516][ T732] __alloc_skb+0x1d7/0x7a0 [ 448.528539][ T732] br_info_notify+0x105/0x280 [ 448.528665][ T732] br_stp_disable_port+0xba/0x1c0 [ 448.528700][ T732] ? del_nbp+0x14c/0xa10 [ 448.528720][ T732] del_nbp+0x16e/0xa10 [ 448.528750][ T732] br_dev_delete+0x6e/0x130 [ 448.528773][ T732] br_net_exit_rtnl+0xb1/0x120 [ 448.528828][ T732] ? __pfx_br_net_exit_rtnl+0x10/0x10 [ 448.528852][ T732] ops_undo_list+0x319/0x8d0 [ 448.528880][ T732] ? __pfx_ops_undo_list+0x10/0x10 [ 448.528899][ T732] ? rt_spin_unlock+0x157/0x200 [ 448.528931][ T732] ? idr_destroy+0x21b/0x2a0 [ 448.528989][ T732] ? rt_spin_unlock+0x163/0x200 [ 448.529021][ T732] cleanup_net+0x575/0x810 [ 448.529044][ T732] ? __pfx_cleanup_net+0x10/0x10 [ 448.529072][ T732] ? rcu_is_watching+0x15/0xb0 [ 448.529100][ T732] ? process_scheduled_works+0xa20/0x14e0 [ 448.529124][ T732] process_scheduled_works+0xa8e/0x14e0 [ 448.529179][ T732] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.529209][ T732] ? assign_work+0x3cf/0x5d0 [ 448.529239][ T732] worker_thread+0xa47/0xfb0 [ 448.529293][ T732] kthread+0x388/0x470 [ 448.529321][ T732] ? __pfx_worker_thread+0x10/0x10 [ 448.529343][ T732] ? __pfx_kthread+0x10/0x10 [ 448.529373][ T732] ret_from_fork+0x514/0xb70 [ 448.529406][ T732] ? __pfx_ret_from_fork+0x10/0x10 [ 448.529436][ T732] ? __switch_to+0xc89/0x1420 [ 448.529465][ T732] ? __pfx_kthread+0x10/0x10 [ 448.529494][ T732] ret_from_fork_asm+0x1a/0x30 [ 448.529532][ T732] [ 448.530776][ T211] FAULT_INJECTION: forcing a failure. [ 448.530776][ T211] name failslab, interval 1, probability 1, space 0, times 59 [ 448.530872][ T211] CPU: 0 UID: 0 PID: 211 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.530894][ T211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.530906][ T211] Workqueue: events_unbound nsim_dev_trap_report_work [ 448.530936][ T211] Call Trace: [ 448.530943][ T211] [ 448.530957][ T211] dump_stack_lvl+0xe8/0x150 [ 448.530991][ T211] should_fail_ex+0x467/0x600 [ 448.531027][ T211] should_failslab+0xa8/0x100 [ 448.531052][ T211] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.531074][ T211] ? __alloc_skb+0x1d7/0x7a0 [ 448.531092][ T211] ? __alloc_skb+0x1d7/0x7a0 [ 448.531118][ T211] __alloc_skb+0x1d7/0x7a0 [ 448.531143][ T211] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 448.531183][ T211] ? process_scheduled_works+0xa20/0x14e0 [ 448.531207][ T211] process_scheduled_works+0xa8e/0x14e0 [ 448.531258][ T211] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.531288][ T211] ? assign_work+0x3cf/0x5d0 [ 448.531316][ T211] worker_thread+0xa47/0xfb0 [ 448.531367][ T211] kthread+0x388/0x470 [ 448.531397][ T211] ? __pfx_worker_thread+0x10/0x10 [ 448.531419][ T211] ? __pfx_kthread+0x10/0x10 [ 448.531447][ T211] ret_from_fork+0x514/0xb70 [ 448.531479][ T211] ? __pfx_ret_from_fork+0x10/0x10 [ 448.531507][ T211] ? __switch_to+0xc89/0x1420 [ 448.531535][ T211] ? __pfx_kthread+0x10/0x10 [ 448.531564][ T211] ret_from_fork_asm+0x1a/0x30 [ 448.531600][ T211] [ 448.533981][ T732] FAULT_INJECTION: forcing a failure. [ 448.533981][ T732] name failslab, interval 1, probability 1, space 0, times 58 [ 448.534010][ T732] CPU: 0 UID: 0 PID: 732 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.534032][ T732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.534044][ T732] Workqueue: netns cleanup_net [ 448.534068][ T732] Call Trace: [ 448.534075][ T732] [ 448.534083][ T732] dump_stack_lvl+0xe8/0x150 [ 448.534115][ T732] should_fail_ex+0x467/0x600 [ 448.534150][ T732] should_failslab+0xa8/0x100 [ 448.534176][ T732] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.534199][ T732] ? __alloc_skb+0x1d7/0x7a0 [ 448.534218][ T732] ? __alloc_skb+0x1d7/0x7a0 [ 448.534245][ T732] __alloc_skb+0x1d7/0x7a0 [ 448.534270][ T732] br_vlan_notify+0x273/0x730 [ 448.534361][ T732] nbp_vlan_flush+0xfa/0x190 [ 448.534384][ T732] del_nbp+0x593/0xa10 [ 448.534413][ T732] br_dev_delete+0x6e/0x130 [ 448.534436][ T732] br_net_exit_rtnl+0xb1/0x120 [ 448.534461][ T732] ? __pfx_br_net_exit_rtnl+0x10/0x10 [ 448.534486][ T732] ops_undo_list+0x319/0x8d0 [ 448.534513][ T732] ? __pfx_ops_undo_list+0x10/0x10 [ 448.534531][ T732] ? rt_spin_unlock+0x157/0x200 [ 448.534562][ T732] ? idr_destroy+0x21b/0x2a0 [ 448.534582][ T732] ? rt_spin_unlock+0x163/0x200 [ 448.534614][ T732] cleanup_net+0x575/0x810 [ 448.534637][ T732] ? __pfx_cleanup_net+0x10/0x10 [ 448.534663][ T732] ? rcu_is_watching+0x15/0xb0 [ 448.534689][ T732] ? process_scheduled_works+0xa20/0x14e0 [ 448.534733][ T732] process_scheduled_works+0xa8e/0x14e0 [ 448.534783][ T732] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.534813][ T732] ? assign_work+0x3cf/0x5d0 [ 448.534841][ T732] worker_thread+0xa47/0xfb0 [ 448.534891][ T732] kthread+0x388/0x470 [ 448.534919][ T732] ? __pfx_worker_thread+0x10/0x10 [ 448.534942][ T732] ? __pfx_kthread+0x10/0x10 [ 448.534977][ T732] ret_from_fork+0x514/0xb70 [ 448.535008][ T732] ? __pfx_ret_from_fork+0x10/0x10 [ 448.535036][ T732] ? __switch_to+0xc89/0x1420 [ 448.535065][ T732] ? __pfx_kthread+0x10/0x10 [ 448.535093][ T732] ret_from_fork_asm+0x1a/0x30 [ 448.535129][ T732] [ 448.579669][ T1045] FAULT_INJECTION: forcing a failure. [ 448.579669][ T1045] name failslab, interval 1, probability 1, space 0, times 55 [ 448.579701][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.579723][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.579737][ T1045] Workqueue: events_unbound nsim_dev_trap_report_work [ 448.579770][ T1045] Call Trace: [ 448.579777][ T1045] [ 448.579784][ T1045] dump_stack_lvl+0xe8/0x150 [ 448.579817][ T1045] should_fail_ex+0x467/0x600 [ 448.579852][ T1045] should_failslab+0xa8/0x100 [ 448.579877][ T1045] kmem_cache_alloc_node_noprof+0xae/0x670 [ 448.579899][ T1045] ? __alloc_skb+0x1d7/0x7a0 [ 448.579919][ T1045] ? __alloc_skb+0x1d7/0x7a0 [ 448.579953][ T1045] __alloc_skb+0x1d7/0x7a0 [ 448.579977][ T1045] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 448.580017][ T1045] ? process_scheduled_works+0xa20/0x14e0 [ 448.580041][ T1045] process_scheduled_works+0xa8e/0x14e0 [ 448.580092][ T1045] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.580123][ T1045] ? assign_work+0x3cf/0x5d0 [ 448.580151][ T1045] worker_thread+0xa47/0xfb0 [ 448.580188][ T1045] ? __kthread_parkme+0x71/0x1f0 [ 448.580224][ T1045] kthread+0x388/0x470 [ 448.580252][ T1045] ? __pfx_worker_thread+0x10/0x10 [ 448.580274][ T1045] ? __pfx_kthread+0x10/0x10 [ 448.580303][ T1045] ret_from_fork+0x514/0xb70 [ 448.580335][ T1045] ? __pfx_ret_from_fork+0x10/0x10 [ 448.580365][ T1045] ? __switch_to+0xc89/0x1420 [ 448.580393][ T1045] ? __pfx_kthread+0x10/0x10 [ 448.580422][ T1045] ret_from_fork_asm+0x1a/0x30 [ 448.580457][ T1045] [ 448.751656][ T10] FAULT_INJECTION: forcing a failure. [ 448.751656][ T10] name failslab, interval 1, probability 1, space 0, times 54 [ 448.751689][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.751711][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.751723][ T10] Workqueue: events vidtv_mux_tick [ 448.751906][ T10] Call Trace: [ 448.751914][ T10] [ 448.751922][ T10] dump_stack_lvl+0xe8/0x150 [ 448.751964][ T10] should_fail_ex+0x467/0x600 [ 448.751999][ T10] should_failslab+0xa8/0x100 [ 448.752024][ T10] __kmalloc_cache_noprof+0xa0/0x6b0 [ 448.752047][ T10] ? vidtv_s302m_encode+0x356/0x1840 [ 448.752068][ T10] ? vidtv_s302m_encode+0x356/0x1840 [ 448.752090][ T10] ? vidtv_psi_eit_write_into+0x764/0x890 [ 448.752115][ T10] vidtv_s302m_encode+0x356/0x1840 [ 448.752155][ T10] ? __pfx_vidtv_psi_eit_write_into+0x10/0x10 [ 448.752177][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.752199][ T10] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 448.752222][ T10] ? usleep_range_state+0x95/0x180 [ 448.752252][ T10] vidtv_mux_tick+0x135c/0x24b0 [ 448.752312][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 448.752349][ T10] ? trace_irq_disable+0x3b/0x140 [ 448.752388][ T10] ? irqentry_exit+0x218/0x8f0 [ 448.752409][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.752441][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 448.752473][ T10] ? rcu_is_watching+0x15/0xb0 [ 448.752500][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 448.752521][ T10] process_scheduled_works+0xa8e/0x14e0 [ 448.752571][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.752600][ T10] ? assign_work+0x3cf/0x5d0 [ 448.752628][ T10] worker_thread+0xa47/0xfb0 [ 448.752664][ T10] ? __kthread_parkme+0x71/0x1f0 [ 448.752700][ T10] kthread+0x388/0x470 [ 448.752727][ T10] ? __pfx_worker_thread+0x10/0x10 [ 448.752749][ T10] ? __pfx_kthread+0x10/0x10 [ 448.752778][ T10] ret_from_fork+0x514/0xb70 [ 448.752811][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 448.752839][ T10] ? __switch_to+0xc89/0x1420 [ 448.752867][ T10] ? __pfx_kthread+0x10/0x10 [ 448.752896][ T10] ret_from_fork_asm+0x1a/0x30 [ 448.752935][ T10] [ 448.755016][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 448.755143][ T10] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 448.755224][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.755246][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.755258][ T10] Workqueue: events vidtv_mux_tick [ 448.755284][ T10] RIP: 0010:vidtv_s302m_encode+0x517/0x1840 [ 448.755306][ T10] Code: eb 0a e8 4c f3 ef f9 48 8b 5c 24 10 48 8b 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 03 66 59 fa 4c 8b 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 6c 12 00 00 41 c7 06 5b 04 00 00 48 8b [ 448.755320][ T10] RSP: 0018:ffffc900000f74a0 EFLAGS: 00010246 [ 448.755334][ T10] RAX: 0000000000000000 RBX: ffff8880347ff128 RCX: ffff88801ca83e00 [ 448.755347][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.755358][ T10] RBP: ffffc900000f7630 R08: 0000000000000dc0 R09: 00000000ffffffff [ 448.755370][ T10] R10: dffffc0000000000 R11: fffffbfff1c6134f R12: dffffc0000000000 [ 448.755384][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880347ff168 [ 448.755396][ T10] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 448.755411][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.755423][ T10] CR2: 00007f993a7a2e9c CR3: 000000003f7ee000 CR4: 00000000003526f0 [ 448.755447][ T10] Call Trace: [ 448.755454][ T10] [ 448.755468][ T10] ? __pfx_vidtv_psi_eit_write_into+0x10/0x10 [ 448.755490][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.755512][ T10] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 448.755533][ T10] ? usleep_range_state+0x95/0x180 [ 448.755556][ T10] vidtv_mux_tick+0x135c/0x24b0 [ 448.755594][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 448.755621][ T10] ? trace_irq_disable+0x3b/0x140 [ 448.755646][ T10] ? irqentry_exit+0x218/0x8f0 [ 448.755666][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.755692][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 448.755718][ T10] ? rcu_is_watching+0x15/0xb0 [ 448.755742][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 448.755763][ T10] process_scheduled_works+0xa8e/0x14e0 [ 448.755795][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.755820][ T10] ? assign_work+0x3cf/0x5d0 [ 448.755842][ T10] worker_thread+0xa47/0xfb0 [ 448.755869][ T10] ? __kthread_parkme+0x71/0x1f0 [ 448.755897][ T10] kthread+0x388/0x470 [ 448.755924][ T10] ? __pfx_worker_thread+0x10/0x10 [ 448.755945][ T10] ? __pfx_kthread+0x10/0x10 [ 448.755971][ T10] ret_from_fork+0x514/0xb70 [ 448.755998][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 448.756025][ T10] ? __switch_to+0xc89/0x1420 [ 448.756050][ T10] ? __pfx_kthread+0x10/0x10 [ 448.756076][ T10] ret_from_fork_asm+0x1a/0x30 [ 448.756101][ T10] [ 448.756113][ T10] Modules linked in: [ 448.756149][ T10] ---[ end trace 0000000000000000 ]--- [ 448.757720][ T10] RIP: 0010:vidtv_s302m_encode+0x517/0x1840 [ 448.757749][ T10] Code: eb 0a e8 4c f3 ef f9 48 8b 5c 24 10 48 8b 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 03 66 59 fa 4c 8b 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 6c 12 00 00 41 c7 06 5b 04 00 00 48 8b [ 448.757764][ T10] RSP: 0018:ffffc900000f74a0 EFLAGS: 00010246 [ 448.757780][ T10] RAX: 0000000000000000 RBX: ffff8880347ff128 RCX: ffff88801ca83e00 [ 448.757794][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.757805][ T10] RBP: ffffc900000f7630 R08: 0000000000000dc0 R09: 00000000ffffffff [ 448.757819][ T10] R10: dffffc0000000000 R11: fffffbfff1c6134f R12: dffffc0000000000 [ 448.758021][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880347ff168 [ 448.758035][ T10] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 448.758050][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.758063][ T10] CR2: 00007f993a7a2e9c CR3: 000000003f7ee000 CR4: 00000000003526f0 [ 448.758132][ T10] Kernel panic - not syncing: Fatal exception [ 448.758412][ T10] Kernel Offset: disabled