last executing test programs: 1m48.752976482s ago: executing program 0 (id=94): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0xffffffffffffffff, 0x9, 0x2}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) 1m48.544981332s ago: executing program 0 (id=97): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000280)=[{r0, 0x5082}], 0x1, 0x0, 0x0, 0x0) 1m48.347040821s ago: executing program 0 (id=98): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8919, &(0x7f0000000280)) 1m47.863538959s ago: executing program 0 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) 1m46.550678597s ago: executing program 0 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x44, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040044}, 0x48044) 1m46.168044818s ago: executing program 0 (id=104): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) lseek(r0, 0xfffffffffffffff7, 0x3) 1m45.557755483s ago: executing program 32 (id=104): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) lseek(r0, 0xfffffffffffffff7, 0x3) 1m8.472508958s ago: executing program 2 (id=288): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000080)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) write$binfmt_format(r2, &(0x7f0000000240)='0\x00', 0x2) 1m8.301578839s ago: executing program 2 (id=290): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000100)={0xfffffffb, [[0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x719e, 0xfffffff7, 0x3], [0x1, 0xdfffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffb, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80000000}, {0x0, 0x3}, {0x2, 0xffffffff}, {0x0, 0xff7fffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffd}, {0x2, 0xffffffff}, {0x10000, 0x2}]}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019580)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) r6 = memfd_create(&(0x7f00000195c0)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r6, 0x8800000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) dup3(0xffffffffffffffff, r7, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x8098) 1m6.23300821s ago: executing program 2 (id=305): syz_usb_connect$uac3(0x0, 0x98, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x931e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x22, 0x7}, [@feature_unit={0x5, 0x24, 0x7, 0x4, 0x3}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x101, 0x3, 0x5, 0x4, 0x4, 0xfe00, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0) 1m3.741951438s ago: executing program 2 (id=324): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@local}) 1m3.446509958s ago: executing program 2 (id=327): mknodat$loop(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x6004, 0x1) r0 = open(&(0x7f0000001500)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001540)=0x10) link(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='./file1\x00') 1m3.282938028s ago: executing program 2 (id=329): mknodat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x2000010, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002840)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000028c0)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000049c0)='./file0\x00', 0x26d01, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000004b00)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) r3 = dup3(r2, r0, 0x80000) write$FUSE_STATFS(r3, &(0x7f0000004b40)={0x60, 0xffffffffffffffda, r1, {{0x0, 0xfffffffffffffffe, 0x401, 0x8e, 0x9, 0x7fffffff, 0x0, 0x1}}}, 0x60) 48.008538866s ago: executing program 33 (id=329): mknodat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x2000010, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002840)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000028c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f0000fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196094bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac09dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff4c84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937011892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02ae91d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f795cf86af7c716a438fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6010000000000000000c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d00", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000049c0)='./file0\x00', 0x26d01, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000004b00)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) r3 = dup3(r2, r0, 0x80000) write$FUSE_STATFS(r3, &(0x7f0000004b40)={0x60, 0xffffffffffffffda, r1, {{0x0, 0xfffffffffffffffe, 0x401, 0x8e, 0x9, 0x7fffffff, 0x0, 0x1}}}, 0x60) 22.283237922s ago: executing program 4 (id=562): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x200000, 0x200000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b00)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 7.031350938s ago: executing program 1 (id=621): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x10, 0x800000000000002}, 0xffffffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 6.653982767s ago: executing program 1 (id=623): write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="9a0500007d00000005e801000000000000000000000000000000000000000000000000000000ffffffff00000000000000002e00046e6f645a3dbf640237fc6225ffffff8005000000000000ff03ff92e91600059b65712c93cb3db6c231d119aaa139007002007dfa673effeb09b5351f5bde054000000000187b82d9b56928fbbf0b00002b595fcb14034354b9fd9ef196a51cd5157adc8106b494e13500cf60372d61cceab8c88641eb93b4ccf6002ab87bfc012796093f68305c4d222839e4461ab62aeb841f20837e0108e2e748501c51481901f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cdb80e8d4070000003700870f4642e4c5de8714a2b0844c2345d8df49d700efc452afb5469eaad2c8857a352446ae2b4ea708fa22c6de4882e3464151df43be5a279a95f2a9001744a974535846e13e2d0cb49e4a0fa1753343b8a3c0afcae62cc429c0ec7d6454684a428d589d759f617ea19522c62f192480119b2801c9c104140560f20d38590a81982a9490b395e900740bdc1ab0387726419bffd5c7737d4c2a17b92f18edc99c1099e40f13d828049f3c5b3a7fe030d9c78aea9903af142355f549abb3f7b40bb010222b4f9d036f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0c41f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f3061ed8fc975f8246bcc42eaa8c631c0c500959a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238593aed3b42ee7cac07de09d1d68a60333a882467d2b31aafb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664c0fb4e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae122e6105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fc200000030e4ee2bfc7f8050851143e5161acd47150acbaf743822dfe203b108d37e914dc1e53e234c509eca4107a1712caa9da53d051c36884c79182661f3ca36bcdbfbbd267109f8319d8dd5c07099eb1b11030655f562694f61743d19421b4a19ef8b8b4ce9c993c7d6cb300c4e657a4e50a35b5cc16b8c161a8e3df9036bbcf28adcd19a6c4c291709aee5ab3e5bc5ae29f475e4d24408b5167d0faf5fc1566b705c8b60afa8aca42f7e0469188a0ef062ca18e38f9ee10ac77d2b7eb9d60ea79fdb556411e59dfbd8dbb8a2a6622ebcf84c696fa4da21bad2320d0d68e9bf4346f0686119a39e400395c8f2825ea069ae0e143bd1a44179ed8e3cea0b5e9a19cc7ffa500fa41b6c8049bde45827d54ec901d27ad125056889b3336b3f06838c5b667ae22efe3bc15b825f7fbce48027281cf9fe8fc21fc77c243de26705310eb81cf74de0293192a13f6ad057de61fd8aba8ef4439bc06a45b2b03162515a23433afeb52aedb5ab6f334653380515f779f35dc8a78c37772492a2284c21d21356d473f00f85137c7bf0636f757d3528869b3f007735cff85c9d978bf55dcc26d62d25e308f08827a91ff47bec92f8e91e7908665400aa4e39b35986239d5c7b9492c5bb26bc55b55b49ed70486e6e7da38c208450f9f79e1b4100000000000000000000000000ae2d5b5c99f717f0a07749239b5d08f8c5c0ad7951e0a7c7f3db8dfd3f8657258a6c04f32d57ad2873de45fa98b0f8267917ff9bbe9c0d74a5aca206fe29e0c1039f22553c2747425d831030782ee78f8ba35de318c53f094f925cc9782e94b6c870a487678bfae745dff268bda7fdec873ce4fb4b8dcba0419b30449adfef724162bfb10aafcfea48a67fae7733cc3a7f1eef91be5285215eab41f6", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x59a) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000b40)={0x5, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000c40)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000c80)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000d80)={[0x60000000000, 0xd4, 0x4, 0x61, 0x200002000001, 0x2, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8931, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdir(&(0x7f0000000e40)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_debugfs/asoc/components\x00', &(0x7f0000000ec0)='debugfs\x00', 0xa785f62b097931ec, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='my_debugfs\x00', 0x523201, 0x0) read(r5, &(0x7f0000000f40), 0x400) connect$unix(0xffffffffffffffff, &(0x7f0000000f80)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mount$afs(0x0, 0x0, &(0x7f0000001080), 0x0, 0x0) 5.34615982s ago: executing program 1 (id=627): pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000ec0), 0xffffff98) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.082693129s ago: executing program 4 (id=562): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x200000, 0x200000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b00)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 4.858749771s ago: executing program 4 (id=632): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x40000) 4.734415748s ago: executing program 5 (id=633): r0 = openat$kvm(0x0, &(0x7f0000000400), 0xa600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000580)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000600)={0x1, 0x0, [{0x400, 0x2, 0x0, 0x0, @adapter={0x4, 0x10, 0xffffffffffffffff, 0x8, 0xf8}}]}) 4.58803426s ago: executing program 4 (id=635): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r0, 0x1005) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000200)=0xe, 0x4) 4.446361613s ago: executing program 5 (id=636): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x7, 0x0, 0x1, 0x0, 0x1, 0x8f7, 0x0, 0x8, 0x2}}) 4.392002176s ago: executing program 4 (id=638): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x10, 0x800000000000002}, 0xffffffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 4.296029652s ago: executing program 5 (id=639): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x80000}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e13010042000000aaaaaaaaaa2010000000000100"], 0x16) mmap(&(0x7f0000a76000/0x4000)=nil, 0x4000, 0x1000002, 0x12, 0xffffffffffffffff, 0xcda23000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0c040042000000000000000000"], 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x202000, 0x40) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x38, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x2400c004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0xffffffff, 0x2}}, 0x2e) 4.233791701s ago: executing program 1 (id=640): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xc004) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x6ff, &(0x7f0000000140)={0x0, 0xce1d, 0x800, 0x2, 0x100009c}, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) r1 = syz_open_dev$evdev(&(0x7f0000001280), 0x40, 0x8302) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/241) 2.033501407s ago: executing program 4 (id=642): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400), 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 1.856765348s ago: executing program 3 (id=643): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000080)=@l2={0x1f, 0x1, @none, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x20000080) 1.735332655s ago: executing program 3 (id=644): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000c80)=""/173, &(0x7f0000000d40)=0xad) 1.413767898s ago: executing program 3 (id=645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x60, r1, 0x800, 0x0, 0x25df5bfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x100, 0x18}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE]}, 0x60}}, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="100001000180000012000108000004001300"/32], 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x40) 1.09971158s ago: executing program 3 (id=646): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x560a, &(0x7f0000000100)={0x0, 0x0, 0x2}) 900.519681ms ago: executing program 5 (id=647): request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000001c0)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) 796.005671ms ago: executing program 3 (id=648): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0x2000) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r3) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x0, 0x411}}}, 0x7) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r6, &(0x7f00000050c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{0x0}], 0x1}}], 0x1, 0x2000c044) writev(r6, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f00000002c0)='syz') add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65, 0x63, 0x61, 0x34, 0x34, 0x36, 0x39, 0x34, 0x31, 0x36, 0x38, 0x63, 0x35, 0x64, 0x32, 0x34]}, &(0x7f0000000080)={0x0, "058cdebe9ce6bd11f5ca6f67942144145d5e2c0051f5bdcbcfe1ba34c5ddc0eee09831cdab0f091399eb9c33d6e51a3f549ec3980f2333010ec193e2890153f3", 0x25}, 0x48, r4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x60, 0x1, 0x4, 0xfffe, 0x0, 0x2, 0x0}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x3, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x7, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x75, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x6, '\x00', 0x6}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x7, 0x80, '\x00', 0x6}]}}) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) 594.368695ms ago: executing program 5 (id=649): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080)={0x200000000000001}, 0x8) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f00000003c0)=']', 0x1, 0x4000000, 0x0, 0x0) 439.018013ms ago: executing program 1 (id=650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001a40)={'syzkaller0\x00', 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001a80)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000001ac0)=0x1) 298.968635ms ago: executing program 5 (id=651): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400a1110140000000000010902270001010080320904"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="0800080006000200000014f700eb440a00"], 0x22) 188.531963ms ago: executing program 1 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) mkdirat(0xffffffffffffffff, &(0x7f0000001500)='./sys\x00', 0x59) mount(0x0, 0x0, &(0x7f00000001c0)='esdfs\x00', 0x2981000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x329683, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r6 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x4000921, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000200000066aea8f615f44155093443da4feb05a78faf00009999df7a99425dd09b0f4db922a6891004000000"], 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) 0s ago: executing program 3 (id=653): socket$inet6(0xa, 0x3, 0x40) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) kernel console output (not intermixed with test programs): ctivated: batadv_slave_1 [ 94.063905][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.185549][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.185572][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.317241][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.317262][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.367348][ T1440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.368185][ T1440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.368566][ T1440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.411369][ T5702] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.497880][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.497904][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.503180][ T1440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.570053][ T5702] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 94.587264][ T5702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.587295][ T5702] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 94.589390][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.589417][ T5702] usb 4-1: Product: syz [ 94.589433][ T5702] usb 4-1: Manufacturer: syz [ 94.589448][ T5702] usb 4-1: SerialNumber: syz [ 94.697788][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.697811][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.183977][ T5702] usb 4-1: Cannot retrieve CPort count: -110 [ 95.184024][ T5702] usb 4-1: Cannot retrieve CPort count: -110 [ 95.184048][ T5702] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 95.281982][ T5709] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.381154][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.442705][ T5709] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 95.443688][ T5709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.443711][ T5709] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 95.448529][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.448555][ T5709] usb 2-1: Product: syz [ 95.448570][ T5709] usb 2-1: Manufacturer: syz [ 95.448584][ T5709] usb 2-1: SerialNumber: syz [ 95.508173][ T5702] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.574475][ T9] usb 3-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 95.575979][ T9] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 95.576008][ T9] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 95.576030][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.576056][ T9] usb 3-1: config 0 has no interface number 0 [ 95.576084][ T9] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 95.576100][ T9] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 95.576118][ T9] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 95.576136][ T9] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 95.576166][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.578960][ T9] usb 3-1: config 0 descriptor?? [ 95.653660][ T5621] Bluetooth: hci1: command tx timeout [ 95.683305][ T5702] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 95.708270][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.708320][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.732481][ T5621] Bluetooth: hci3: command tx timeout [ 95.732519][ T5621] Bluetooth: hci2: command tx timeout [ 95.753599][ T5702] usb 1-1: config 0 descriptor?? [ 95.757901][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 95.804057][ T5779] loop5: detected capacity change from 0 to 7 [ 95.810361][ T5779] Dev loop5: unable to read RDB block 7 [ 95.810419][ T5779] loop5: unable to read partition table [ 95.810711][ T5779] loop5: partition table beyond EOD, truncated [ 95.810784][ T5779] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.961977][ T5702] usbhid 1-1:0.0: can't add hid device: -71 [ 95.962094][ T5702] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 95.986828][ T5702] usb 1-1: USB disconnect, device number 2 [ 96.843722][ T1440] usb 3-1: Failed to submit usb control message: -110 [ 96.843774][ T1440] usb 3-1: unable to send the bmi data to the device: -110 [ 96.843792][ T1440] usb 3-1: unable to get target info from device [ 96.843819][ T1440] usb 3-1: could not get target info (-110) [ 96.844086][ T1440] usb 3-1: could not probe fw (-110) [ 97.149639][ T5784] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.150161][ T5784] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.172413][ T5784] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.177717][ T5784] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.178538][ T5784] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.180743][ T5784] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.207780][ T5784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.207852][ T5784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.213267][ T5784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.232827][ T5784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.232914][ T5784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.235062][ T5784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.269828][ T5702] usb 2-1: USB disconnect, device number 2 [ 97.303895][ T199] usb 3-1: USB disconnect, device number 2 [ 97.346194][ T32] usb 4-1: USB disconnect, device number 2 [ 97.418534][ T5795] FAULT_INJECTION: forcing a failure. [ 97.418534][ T5795] name failslab, interval 1, probability 0, space 0, times 1 [ 97.418579][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) [ 97.418607][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.418627][ T5795] Call Trace: [ 97.418639][ T5795] [ 97.418648][ T5795] dump_stack_lvl+0xe8/0x150 [ 97.418677][ T5795] should_fail_ex+0x3eb/0x540 [ 97.418703][ T5795] should_failslab+0xa8/0x100 [ 97.418725][ T5795] ? do_getname+0x2e/0x250 [ 97.418744][ T5795] kmem_cache_alloc_noprof+0x9c/0x600 [ 97.418765][ T5795] ? do_getname+0x2e/0x250 [ 97.418790][ T5795] do_getname+0x2e/0x250 [ 97.418808][ T5795] ? getname_flags+0x11/0x20 [ 97.418830][ T5795] do_sys_openat2+0xce/0x200 [ 97.418854][ T5795] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.418886][ T5795] ? ksys_write+0x242/0x270 [ 97.418908][ T5795] ? __pfx_ksys_write+0x10/0x10 [ 97.418933][ T5795] __x64_sys_openat+0x138/0x170 [ 97.418959][ T5795] do_syscall_64+0x166/0x520 [ 97.418978][ T5795] ? trace_irq_disable+0x3b/0x140 [ 97.418997][ T5795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.419018][ T5795] ? clear_bhb_loop+0x70/0xc0 [ 97.419041][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.419063][ T5795] RIP: 0033:0x7f51c6d9e1d9 [ 97.419090][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.419113][ T5795] RSP: 002b:00007f51c7cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.419137][ T5795] RAX: ffffffffffffffda RBX: 00007f51c7025fa0 RCX: 00007f51c6d9e1d9 [ 97.419151][ T5795] RDX: 0000000000000002 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 97.419164][ T5795] RBP: 00007f51c7cdc090 R08: 0000000000000000 R09: 0000000000000000 [ 97.419176][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.419187][ T5795] R13: 00007f51c7026038 R14: 00007f51c7025fa0 R15: 00007ffd621766e8 [ 97.419217][ T5795] [ 97.582491][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.586059][ T4930] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.732361][ T9] usb 1-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 97.733537][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.733583][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.736816][ T9] usb 1-1: config 0 descriptor?? [ 97.903403][ T5803] sit0: entered allmulticast mode [ 97.955426][ T5805] syzkaller0: entered promiscuous mode [ 97.955505][ T5805] syzkaller0: entered allmulticast mode [ 97.957169][ T5805] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 98.062483][ T1016] syzkaller0: tun_net_xmit 76 [ 98.062821][ T1016] syzkaller0: tun_net_xmit 48 [ 98.091668][ T5709] syzkaller0: tun_net_xmit 76 [ 98.161347][ T199] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.321419][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 98.323260][ T199] usb 4-1: New USB device found: idVendor=0810, idProduct=0001, bcdDevice=0.00 [ 98.324720][ T199] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 98.324754][ T199] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.324784][ T199] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.324820][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.349295][ T199] usb 4-1: config 0 descriptor?? [ 98.568766][ T9] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 98.594547][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.595045][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.601936][ T199] usbhid 4-1:0.0: can't add hid device: -71 [ 98.602153][ T199] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 98.634154][ T199] usb 4-1: USB disconnect, device number 3 [ 98.717844][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 98.797919][ T9] usb 1-1: USB disconnect, device number 3 [ 98.798053][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 99.244162][ T4930] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.252990][ T4930] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.253037][ T4930] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.643228][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.990842][ T5836] netlink: 'syz.1.21': attribute type 58 has an invalid length. [ 99.990919][ T5836] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21'. [ 100.389638][ T5851] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 100.647649][ T5869] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.722486][ T5873] capability: warning: `syz.1.38' uses deprecated v2 capabilities in a way that may be insecure [ 100.806596][ T5877] syzkaller0: entered promiscuous mode [ 100.806621][ T5877] syzkaller0: entered allmulticast mode [ 101.122232][ T5701] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.211625][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.272219][ T5701] usb 2-1: New USB device found: idVendor=056a, idProduct=0024, bcdDevice=0.00 [ 101.273627][ T5701] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 101.273664][ T5701] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.273774][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.278222][ T5701] usb 2-1: config 0 descriptor?? [ 101.321737][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.321845][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.321910][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.366868][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.366924][ T9] usb 1-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 101.367935][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.368005][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 101.368047][ T9] usb 1-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 101.378943][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.378972][ T9] usb 1-1: Product: syz [ 101.378989][ T9] usb 1-1: Manufacturer: syz [ 101.379005][ T9] usb 1-1: SerialNumber: syz [ 101.697730][ T9] usb 1-1: Unsupported UAC3 BADD profile [ 101.721509][ T4930] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.879507][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 101.904164][ T9] usb 1-1: USB disconnect, device number 4 [ 101.937508][ T5908] netlink: 104 bytes leftover after parsing attributes in process `syz.3.51'. [ 101.962583][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.991423][ T5701] usb 2-1: USB disconnect, device number 3 [ 102.691526][ T5701] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.848617][ T5701] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 102.865128][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.882115][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.882147][ T5701] usb 1-1: Product: syz [ 102.882163][ T5701] usb 1-1: Manufacturer: syz [ 102.882180][ T5701] usb 1-1: SerialNumber: syz [ 103.204269][ T5936] syz.1.60 (5936) used greatest stack depth: 18088 bytes left [ 103.272913][ T4930] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 103.401208][ T4930] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.401249][ T4930] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.401276][ T4930] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.751131][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.902592][ T27] usb 4-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 103.904304][ T27] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.904337][ T27] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.904396][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.904433][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.927002][ T27] usb 4-1: config 0 descriptor?? [ 104.421092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.441034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.501024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.131041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.421389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.831258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 106.241032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.558197][ T5701] cdc_ncm 1-1:1.0: bind() failure [ 106.583268][ T5701] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 106.601522][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 106.601628][ T27] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 106.605215][ T5701] usb 1-1: USB disconnect, device number 5 [ 106.639753][ T27] usb 4-1: USB disconnect, device number 4 [ 107.103180][ T5701] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.225860][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 107.261210][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 107.263641][ T5701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.266575][ T5701] usb 1-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 107.267838][ T5701] usb 1-1: config 1 has an invalid interface number: 252 but max is 2 [ 107.267866][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.267886][ T5701] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 107.267909][ T5701] usb 1-1: config 1 has no interface number 3 [ 107.267982][ T5701] usb 1-1: too many endpoints for config 1 interface 252 altsetting 255: 255, using maximum allowed: 30 [ 107.268019][ T5701] usb 1-1: config 1 interface 252 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 107.268058][ T5701] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.268085][ T5701] usb 1-1: config 1 interface 252 has no altsetting 0 [ 107.268104][ T5701] usb 1-1: config 1 interface 2 has no altsetting 0 [ 107.270691][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.270717][ T5701] usb 1-1: Product: syz [ 107.270733][ T5701] usb 1-1: Manufacturer: syz [ 107.270755][ T5701] usb 1-1: SerialNumber: syz [ 107.302157][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.461224][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 107.461958][ T9] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.463306][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.463333][ T9] usb 3-1: config 179 has no interface number 0 [ 107.463376][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.463405][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.463433][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.463460][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 107.463480][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.463524][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.470614][ T5981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.653587][ T5701] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 107.656555][ T5701] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.682448][ T5701] usb 1-1: selecting invalid altsetting 0 [ 107.737814][ T5701] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 107.737860][ T5701] snd-usb-audio 1-1:1.252: probe with driver snd-usb-audio failed with error -22 [ 107.762404][ T5701] usb 1-1: USB disconnect, device number 6 [ 107.803989][ T5813] udevd[5813]: setting mode of /dev/bus/usb/001/006 to 020664 failed: No such file or directory [ 107.804119][ T5813] udevd[5813]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 107.862678][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.890141][ T5989] binder: Failure when writing BR_NOOP at beginning of buffer. [ 107.890160][ T5989] binder: Read failure Err(EFAULT) in pid:45 [ 107.933638][ T5988] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 107.974162][ T9] usb 3-1: USB disconnect, device number 3 [ 107.974227][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 107.974276][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 108.266304][ T6004] tmpfs: Bad value for 'nr_inodes' [ 113.030224][ T1406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.178151][ T1406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.379878][ T1406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.576979][ T1406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.686084][ T4930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.688596][ T4930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.689832][ T4930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.690830][ T4930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.720079][ T4930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.784532][ T6043] process 'syz.3.107' launched './file1' with NULL argv: empty string added [ 114.180489][ T1406] bridge_slave_1: left allmulticast mode [ 114.180540][ T1406] bridge_slave_1: left promiscuous mode [ 114.182921][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.255927][ T1406] bridge_slave_0: left allmulticast mode [ 114.255957][ T1406] bridge_slave_0: left promiscuous mode [ 114.256253][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.048627][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.083747][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.097696][ T1406] bond0 (unregistering): Released all slaves [ 115.189279][ T6093] Bluetooth: MGMT ver 1.23 [ 115.607200][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.125099][ T4930] Bluetooth: hci1: command tx timeout [ 117.280004][ T6117] mmap: syz.3.127 (6117) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.577286][ T1406] hsr_slave_0: left promiscuous mode [ 117.587240][ T1406] hsr_slave_1: left promiscuous mode [ 117.591438][ T1406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.591494][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.618392][ T1406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.618418][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.694140][ T1406] veth1_macvtap: left promiscuous mode [ 117.694196][ T1406] veth0_macvtap: left promiscuous mode [ 117.694302][ T1406] veth1_vlan: left promiscuous mode [ 117.694387][ T1406] veth0_vlan: left promiscuous mode [ 118.535229][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 118.578400][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 118.713439][ T199] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.871370][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 118.887533][ T199] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.887587][ T199] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 118.896244][ T199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.896394][ T199] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.896465][ T199] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.896521][ T199] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.896594][ T199] usb 4-1: config 1 interface 0 has no altsetting 0 [ 118.936293][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.936374][ T199] usb 4-1: Product: syz [ 118.936408][ T199] usb 4-1: Manufacturer: syz [ 118.936450][ T199] usb 4-1: SerialNumber: syz [ 119.006875][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.171153][ T4930] Bluetooth: hci1: command tx timeout [ 119.185687][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.186748][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.186894][ T6044] bridge_slave_0: entered allmulticast mode [ 119.189184][ T6044] bridge_slave_0: entered promiscuous mode [ 119.231673][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.231791][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.231958][ T6044] bridge_slave_1: entered allmulticast mode [ 119.264800][ T6044] bridge_slave_1: entered promiscuous mode [ 119.279407][ T199] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 119.323168][ T199] usb 4-1: USB disconnect, device number 5 [ 119.359740][ T6036] udevd[6036]: setting mode of /dev/bus/usb/004/005 to 020664 failed: No such file or directory [ 119.359875][ T6036] udevd[6036]: setting owner of /dev/bus/usb/004/005 to uid=0, gid=0 failed: No such file or directory [ 119.514085][ T6044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.529994][ T6044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.635017][ T6044] team0: Port device team_slave_0 added [ 119.639274][ T6044] team0: Port device team_slave_1 added [ 119.707942][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.707972][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.708000][ T6044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.710962][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.766186][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.766222][ T6044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.964409][ T6044] hsr_slave_0: entered promiscuous mode [ 119.965560][ T6044] hsr_slave_1: entered promiscuous mode [ 120.181496][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.191502][ T4930] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 120.332714][ T27] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 120.336650][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.336684][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.336709][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.336754][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.398207][ T27] usb 2-1: config 0 descriptor?? [ 120.418895][ T6044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.433998][ T6044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.435112][ T6044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.466045][ T6044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.467166][ T6044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.480294][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.494710][ T6044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.498452][ T6044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.516104][ T6044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.640057][ T6044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.658451][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 120.662919][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.663057][ T9] usb 4-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 120.667467][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.667530][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.682639][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.682735][ T9] usb 4-1: Product: syz [ 120.682780][ T9] usb 4-1: Manufacturer: syz [ 120.682815][ T9] usb 4-1: SerialNumber: syz [ 120.744022][ T6044] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.746288][ T9] usb 4-1: cannot find UAC_HEADER [ 120.792504][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.792612][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.833101][ T27] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 120.837701][ T27] plantronics 0003:047F:FFFF.0002: parse failed [ 120.837814][ T27] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 120.837884][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.838017][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.005121][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 121.034332][ T27] usb 2-1: USB disconnect, device number 4 [ 121.119212][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 121.218221][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.241154][ T4930] Bluetooth: hci1: command tx timeout [ 121.701301][ T27] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 121.777007][ T6044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.851832][ T27] usb 3-1: New USB device found: idVendor=056a, idProduct=00b9, bcdDevice=0.00 [ 121.853496][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33494, setting to 64 [ 121.853532][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.853575][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.859147][ T27] usb 3-1: config 0 descriptor?? [ 121.859917][ T6217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.098408][ T6239] FAULT_INJECTION: forcing a failure. [ 122.098408][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 122.098460][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) [ 122.098487][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.098501][ T6239] Call Trace: [ 122.098511][ T6239] [ 122.098521][ T6239] dump_stack_lvl+0xe8/0x150 [ 122.098566][ T6239] should_fail_ex+0x3eb/0x540 [ 122.098592][ T6239] ? __alloc_skb+0x1db/0x7a0 [ 122.098615][ T6239] should_failslab+0xa8/0x100 [ 122.098639][ T6239] ? __alloc_skb+0x1db/0x7a0 [ 122.098658][ T6239] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 122.098682][ T6239] ? __alloc_skb+0x18d/0x7a0 [ 122.098703][ T6239] ? __alloc_skb+0x1db/0x7a0 [ 122.098731][ T6239] __alloc_skb+0x1db/0x7a0 [ 122.098767][ T6239] __ip6_append_data+0x2ec4/0x40c0 [ 122.098789][ T6239] ? __lock_acquire+0x747/0x2de0 [ 122.098830][ T6239] ? __pfx_raw6_getfrag+0x10/0x10 [ 122.098871][ T6239] ? ip6_mtu+0x7d/0x4a0 [ 122.098894][ T6239] ? __pfx___ip6_append_data+0x10/0x10 [ 122.098914][ T6239] ? __pfx_ip6_mtu+0x10/0x10 [ 122.098932][ T6239] ? ip6_setup_cork+0x631/0xfb0 [ 122.098952][ T6239] ? ip6_append_data+0x1a6/0x270 [ 122.098975][ T6239] ip6_append_data+0x108/0x270 [ 122.098997][ T6239] ? __pfx_raw6_getfrag+0x10/0x10 [ 122.099021][ T6239] rawv6_sendmsg+0x1298/0x18c0 [ 122.099056][ T6239] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 122.099093][ T6239] ? __pfx___css_rstat_updated+0x10/0x10 [ 122.099124][ T6239] ? __lock_acquire+0x747/0x2de0 [ 122.099153][ T6239] ? aa_sock_msg_perm+0xf5/0x210 [ 122.099175][ T6239] ? sock_rps_record_flow+0x19/0x350 [ 122.099201][ T6239] ? inet_sendmsg+0x298/0x320 [ 122.099220][ T6239] ? apparmor_socket_sendmsg+0x98/0x360 [ 122.099247][ T6239] ? __pfx_inet_sendmsg+0x10/0x10 [ 122.099267][ T6239] sock_sendmsg_nosec+0x10f/0x190 [ 122.099293][ T6239] ____sys_sendmsg+0x54e/0x850 [ 122.099321][ T6239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.099354][ T6239] ? import_iovec+0x73/0xa0 [ 122.099380][ T6239] ___sys_sendmsg+0x2a5/0x360 [ 122.099409][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.099455][ T6239] ? lockdep_hardirqs_on+0x7b/0x110 [ 122.099507][ T6239] __sys_sendmmsg+0x273/0x4d0 [ 122.099537][ T6239] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.099557][ T6239] ? do_futex+0x3e7/0x4e0 [ 122.099589][ T6239] ? __sys_connect+0x3a1/0x450 [ 122.099627][ T6239] ? rcu_is_watching+0x16/0xb0 [ 122.099659][ T6239] __x64_sys_sendmmsg+0xa0/0xc0 [ 122.099684][ T6239] do_syscall_64+0x166/0x520 [ 122.099705][ T6239] ? trace_irq_disable+0x3b/0x140 [ 122.099724][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.099757][ T6239] ? clear_bhb_loop+0x70/0xc0 [ 122.099782][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.099806][ T6239] RIP: 0033:0x7f297e79e1d9 [ 122.099836][ T6239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.099856][ T6239] RSP: 002b:00007f297f5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.099885][ T6239] RAX: ffffffffffffffda RBX: 00007f297ea25fa0 RCX: 00007f297e79e1d9 [ 122.099903][ T6239] RDX: 00000000000002e9 RSI: 00002000000006c0 RDI: 0000000000000004 [ 122.099918][ T6239] RBP: 00007f297e835888 R08: 0000000000000000 R09: 0000000000000000 [ 122.099932][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.099946][ T6239] R13: 00007f297ea26038 R14: 00007f297ea25fa0 R15: 00007fff690f9058 [ 122.099982][ T6239] [ 122.500509][ T199] usb 3-1: USB disconnect, device number 4 [ 122.595076][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 122.910564][ T6044] veth0_vlan: entered promiscuous mode [ 122.928504][ T6044] veth1_vlan: entered promiscuous mode [ 122.984465][ T6044] veth0_macvtap: entered promiscuous mode [ 122.998811][ T6044] veth1_macvtap: entered promiscuous mode [ 123.028331][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.067678][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.073323][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.161695][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.161746][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.161784][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.181526][ T1440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.224176][ T6263] FAULT_INJECTION: forcing a failure. [ 123.224176][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 123.224210][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz.2.153 Not tainted syzkaller #0 PREEMPT(full) [ 123.224236][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.224250][ T6263] Call Trace: [ 123.224260][ T6263] [ 123.224269][ T6263] dump_stack_lvl+0xe8/0x150 [ 123.224299][ T6263] should_fail_ex+0x3eb/0x540 [ 123.224349][ T6263] should_failslab+0xa8/0x100 [ 123.224371][ T6263] ? vm_area_dup+0x28/0x760 [ 123.224392][ T6263] kmem_cache_alloc_noprof+0x9c/0x600 [ 123.224419][ T6263] ? vm_area_dup+0x28/0x760 [ 123.224447][ T6263] vm_area_dup+0x28/0x760 [ 123.224472][ T6263] copy_vma+0x656/0xaf0 [ 123.224503][ T6263] ? __pfx_copy_vma+0x10/0x10 [ 123.224553][ T6263] ? rcu_is_watching+0x16/0xb0 [ 123.224575][ T6263] ? percpu_counter_add_batch+0xec/0x1d0 [ 123.224608][ T6263] move_vma+0xbed/0x1bc0 [ 123.224653][ T6263] ? __pfx_move_vma+0x10/0x10 [ 123.224683][ T6263] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 123.224708][ T6263] ? mtree_load+0x12a/0x780 [ 123.224745][ T6263] ? mtree_load+0x12a/0x780 [ 123.224770][ T6263] ? __futex_wait+0x3c7/0x470 [ 123.224796][ T6263] ? cap_mmap_addr+0xaa/0xf0 [ 123.224819][ T6263] ? bpf_lsm_mmap_addr+0x9/0x50 [ 123.224839][ T6263] ? security_mmap_addr+0x71/0x240 [ 123.224872][ T6263] mremap_to+0x7f9/0x8d0 [ 123.224898][ T6263] ? check_prep_vma+0x81d/0xca0 [ 123.224919][ T6263] ? __pfx_mremap_to+0x10/0x10 [ 123.224955][ T6263] ? __pfx_check_prep_vma+0x10/0x10 [ 123.224980][ T6263] ? mas_find+0x642/0xcb0 [ 123.225007][ T6263] __se_sys_mremap+0xd48/0x12e0 [ 123.225053][ T6263] ? __pfx___se_sys_mremap+0x10/0x10 [ 123.225073][ T6263] ? do_futex+0x3e7/0x4e0 [ 123.225101][ T6263] ? __fget_files+0x3a2/0x420 [ 123.225122][ T6263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.225155][ T6263] ? __se_sys_futex+0x3a8/0x450 [ 123.225198][ T6263] ? __x64_sys_mremap+0x20/0xc0 [ 123.225223][ T6263] do_syscall_64+0x166/0x520 [ 123.225245][ T6263] ? trace_irq_disable+0x3b/0x140 [ 123.225271][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.225295][ T6263] ? clear_bhb_loop+0x70/0xc0 [ 123.225320][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.225343][ T6263] RIP: 0033:0x7fbb1cf9e1d9 [ 123.225364][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.225382][ T6263] RSP: 002b:00007fbb1de9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 123.225408][ T6263] RAX: ffffffffffffffda RBX: 00007fbb1d225fa0 RCX: 00007fbb1cf9e1d9 [ 123.225424][ T6263] RDX: 0000000000600000 RSI: 0000000000600000 RDI: 0000200000000000 [ 123.225439][ T6263] RBP: 00007fbb1d035888 R08: 0000200000a00000 R09: 0000000000000000 [ 123.225454][ T6263] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 123.225467][ T6263] R13: 00007fbb1d226038 R14: 00007fbb1d225fa0 R15: 00007ffef51dd968 [ 123.225503][ T6263] [ 123.242702][ T9] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 123.262665][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.262764][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.262820][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 123.262934][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.332027][ T4930] Bluetooth: hci1: command tx timeout [ 123.399737][ T9] usb 2-1: config 0 descriptor?? [ 123.624559][ T5709] usb 4-1: USB disconnect, device number 6 [ 123.659163][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.659182][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.733164][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.733189][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.182357][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.538961][ T32] usb 2-1: USB disconnect, device number 5 [ 124.906269][ T6282] fido_id[6282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 124.926719][ T6298] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 125.901317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.311222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 128.551265][ T199] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.701800][ T199] usb 2-1: New USB device found: idVendor=1532, idProduct=011d, bcdDevice=0.00 [ 128.705527][ T199] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.705562][ T199] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.705592][ T199] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.705627][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.761330][ T199] usb 2-1: config 0 descriptor?? [ 129.205303][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x6 [ 129.205343][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.205373][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.205401][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.205429][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.205455][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.205483][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.205510][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.205536][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.205563][ T199] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 129.289103][ T199] hid-rmi 0003:1532:011D.0005: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.1-1/input0 [ 129.401580][ T27] usb 2-1: USB disconnect, device number 6 [ 129.761165][ T5723] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.781089][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.911348][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 129.913392][ T5723] usb 4-1: New USB device found: idVendor=054c, idProduct=1000, bcdDevice=0.00 [ 129.914572][ T5723] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.914606][ T5723] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.914634][ T5723] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.914669][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.926536][ T5723] usb 4-1: config 0 descriptor?? [ 129.992950][ T9] usb 3-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=9.00 [ 129.995313][ T9] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 129.995340][ T9] usb 3-1: Product: syz [ 130.023972][ T9] usb 3-1: config 0 descriptor?? [ 130.030384][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 130.044948][ T9] usb 3-1: Detected FT232H [ 130.197359][ T6361] [ 130.238518][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 130.392717][ T5723] sony 0003:054C:1000.0006: missing HID_OUTPUT_REPORT 0 [ 130.431803][ T5723] sony 0003:054C:1000.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.3-1/input0 [ 130.431841][ T5723] sony 0003:054C:1000.0006: failed to claim input [ 130.572676][ T5723] usb 4-1: USB disconnect, device number 7 [ 130.613328][ T6369] fido_id[6369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 130.677240][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 131.021066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.224346][ T27] usb 3-1: USB disconnect, device number 5 [ 132.282762][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 132.285211][ T27] ftdi_sio 3-1:0.0: device disconnected [ 134.010050][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.010139][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.162303][ T5702] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.312764][ T5702] usb 3-1: New USB device found: idVendor=056a, idProduct=0303, bcdDevice=0.00 [ 134.313927][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.313969][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.347319][ T5702] usb 3-1: config 0 descriptor?? [ 136.480707][ T5702] hid_parser_main: 12 callbacks suppressed [ 136.480736][ T5702] wacom 0003:056A:0303.0007: unknown main item tag 0x2 [ 136.480924][ T5702] wacom 0003:056A:0303.0007: unknown main item tag 0x0 [ 136.480955][ T5702] wacom 0003:056A:0303.0007: unknown main item tag 0x0 [ 136.481060][ T5702] wacom 0003:056A:0303.0007: unknown main item tag 0x0 [ 136.481087][ T5702] wacom 0003:056A:0303.0007: unknown main item tag 0x0 [ 136.602013][ T5702] usb 3-1: USB disconnect, device number 6 [ 136.847533][ T6424] input: syz0 as /devices/virtual/input/input9 [ 139.128827][ T6434] syz.2.207 (6434) used greatest stack depth: 11840 bytes left [ 139.802598][ T5702] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.571071][ T5702] usb 3-1: Using ep0 maxpacket: 16 [ 140.574765][ T5702] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.574812][ T5702] usb 3-1: New USB device found: idVendor=0bda, idProduct=818b, bcdDevice=7d.7a [ 140.578105][ T5702] usb 3-1: config 57 has an invalid interface number: 187 but max is 0 [ 140.578158][ T5702] usb 3-1: config 57 has no interface number 0 [ 140.578189][ T5702] usb 3-1: config 57 interface 187 has no altsetting 0 [ 140.585123][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.585189][ T5702] usb 3-1: Product: syz [ 140.585231][ T5702] usb 3-1: Manufacturer: syz [ 140.585274][ T5702] usb 3-1: SerialNumber: syz [ 140.858454][ T5702] usb 3-1: USB disconnect, device number 7 [ 142.488120][ T27] kernel write not supported for file /snd/seq (pid: 27 comm: kworker/1:0) [ 142.971108][ T27] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 143.122617][ T27] usb 5-1: New USB device found: idVendor=04f2, idProduct=0418, bcdDevice=0.00 [ 143.126852][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.126890][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.126934][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.175227][ T27] usb 5-1: config 0 descriptor?? [ 143.599322][ T27] chicony 0003:04F2:0418.0008: unknown main item tag 0x2 [ 143.599359][ T27] chicony 0003:04F2:0418.0008: item fetching failed at offset 4/8 [ 143.602298][ T27] chicony 0003:04F2:0418.0008: Chicony hid parse failed: -22 [ 143.602500][ T27] chicony 0003:04F2:0418.0008: probe with driver chicony failed with error -22 [ 143.701745][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 143.800129][ T27] usb 5-1: USB disconnect, device number 2 [ 143.851896][ T9] usb 2-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 143.853175][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.853208][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.857144][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 143.857170][ T9] usb 2-1: Product: syz [ 143.857183][ T9] usb 2-1: Manufacturer: syz [ 143.928214][ T9] hub 2-1:4.0: USB hub found [ 145.719699][ T9] hub 2-1:4.0: 2 ports detected [ 145.923846][ T9] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 145.973011][ T9] usb 2-1: USB disconnect, device number 7 [ 146.436092][ T5723] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 146.581434][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 146.584468][ T5723] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 146.590652][ T5723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.590680][ T5723] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.597623][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.597698][ T5723] usb 3-1: SerialNumber: syz [ 146.691620][ T5723] usb 3-1: 0:2 : does not exist [ 148.371333][ T6614] FAULT_INJECTION: forcing a failure. [ 148.371333][ T6614] name failslab, interval 1, probability 0, space 0, times 0 [ 148.371399][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.1.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.371432][ T6614] Tainted: [L]=SOFTLOCKUP [ 148.371440][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.371453][ T6614] Call Trace: [ 148.371462][ T6614] [ 148.371472][ T6614] dump_stack_lvl+0xe8/0x150 [ 148.371507][ T6614] should_fail_ex+0x3eb/0x540 [ 148.371537][ T6614] should_failslab+0xa8/0x100 [ 148.371559][ T6614] ? vm_area_dup+0x28/0x760 [ 148.371581][ T6614] kmem_cache_alloc_noprof+0x9c/0x600 [ 148.371608][ T6614] ? vm_area_dup+0x28/0x760 [ 148.371636][ T6614] vm_area_dup+0x28/0x760 [ 148.371661][ T6614] copy_vma+0x656/0xaf0 [ 148.371691][ T6614] ? __pfx_copy_vma+0x10/0x10 [ 148.371741][ T6614] ? rcu_is_watching+0x16/0xb0 [ 148.371773][ T6614] ? percpu_counter_add_batch+0xec/0x1d0 [ 148.371808][ T6614] move_vma+0xbed/0x1bc0 [ 148.371855][ T6614] ? __pfx_move_vma+0x10/0x10 [ 148.371885][ T6614] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 148.371910][ T6614] ? mtree_load+0x12a/0x780 [ 148.371941][ T6614] ? mtree_load+0x12a/0x780 [ 148.371966][ T6614] ? __futex_wait+0x3c7/0x470 [ 148.371993][ T6614] ? cap_mmap_addr+0xaa/0xf0 [ 148.372016][ T6614] ? bpf_lsm_mmap_addr+0x9/0x50 [ 148.372037][ T6614] ? security_mmap_addr+0x71/0x240 [ 148.372069][ T6614] mremap_to+0x7f9/0x8d0 [ 148.372095][ T6614] ? check_prep_vma+0x81d/0xca0 [ 148.372117][ T6614] ? __pfx_mremap_to+0x10/0x10 [ 148.372149][ T6614] ? __pfx_check_prep_vma+0x10/0x10 [ 148.372174][ T6614] ? mas_find+0x642/0xcb0 [ 148.372201][ T6614] __se_sys_mremap+0xd48/0x12e0 [ 148.372237][ T6614] ? __pfx___se_sys_mremap+0x10/0x10 [ 148.372257][ T6614] ? do_futex+0x3e7/0x4e0 [ 148.372286][ T6614] ? __fget_files+0x3a2/0x420 [ 148.372307][ T6614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.372338][ T6614] ? __se_sys_futex+0x3a8/0x450 [ 148.372381][ T6614] ? __x64_sys_mremap+0x20/0xc0 [ 148.372406][ T6614] do_syscall_64+0x166/0x520 [ 148.372427][ T6614] ? trace_irq_disable+0x3b/0x140 [ 148.372447][ T6614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.372470][ T6614] ? clear_bhb_loop+0x70/0xc0 [ 148.372495][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.372518][ T6614] RIP: 0033:0x7f297e79e1d9 [ 148.372539][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.372557][ T6614] RSP: 002b:00007f297f59a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 148.372582][ T6614] RAX: ffffffffffffffda RBX: 00007f297ea26180 RCX: 00007f297e79e1d9 [ 148.372599][ T6614] RDX: 0000000000600000 RSI: 0000000000600000 RDI: 0000200000000000 [ 148.372614][ T6614] RBP: 00007f297e835888 R08: 0000200000a00000 R09: 0000000000000000 [ 148.372630][ T6614] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 148.372644][ T6614] R13: 00007f297ea26218 R14: 00007f297ea26180 R15: 00007fff690f9058 [ 148.372680][ T6614] [ 149.142966][ T5723] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 149.303372][ T5723] usb 3-1: USB disconnect, device number 8 [ 150.421570][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 150.577276][ T27] usb 4-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 150.593068][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.593119][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.608145][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.608215][ T27] usb 4-1: Product: syz [ 150.608258][ T27] usb 4-1: Manufacturer: syz [ 150.608300][ T27] usb 4-1: SerialNumber: syz [ 150.648103][ T27] usb-storage 4-1:1.0: USB Mass Storage device detected [ 150.677093][ T27] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 150.855741][ T27] usb 4-1: USB disconnect, device number 8 [ 151.041086][ T5702] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.133593][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 151.202433][ T5702] usb 3-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 151.203925][ T5702] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.203955][ T5702] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 151.206630][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.206657][ T5702] usb 3-1: Product: syz [ 151.206674][ T5702] usb 3-1: Manufacturer: syz [ 151.206689][ T5702] usb 3-1: SerialNumber: syz [ 151.266985][ T5702] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 151.279703][ T5702] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 151.279703][ T5702] Please send a copy of this message to and [ 151.358775][ T6708] FAULT_INJECTION: forcing a failure. [ 151.358775][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 151.358821][ T6708] CPU: 0 UID: 0 PID: 6708 Comm: syz.4.301 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.358843][ T6708] Tainted: [L]=SOFTLOCKUP [ 151.358849][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.358859][ T6708] Call Trace: [ 151.358864][ T6708] [ 151.358871][ T6708] dump_stack_lvl+0xe8/0x150 [ 151.358893][ T6708] should_fail_ex+0x3eb/0x540 [ 151.358913][ T6708] should_failslab+0xa8/0x100 [ 151.358933][ T6708] __kmalloc_cache_noprof+0x9e/0x600 [ 151.358948][ T6708] ? alloc_vfsmnt+0x23/0x510 [ 151.358962][ T6708] ? alloc_vfsmnt+0x6d/0x510 [ 151.358975][ T6708] ? alloc_vfsmnt+0x6d/0x510 [ 151.358996][ T6708] alloc_vfsmnt+0x6d/0x510 [ 151.359013][ T6708] clone_mnt+0x4c/0xad0 [ 151.359031][ T6708] copy_tree+0x3d8/0x940 [ 151.359053][ T6708] copy_mnt_ns+0x3ff/0xd00 [ 151.359070][ T6708] ? rcu_is_watching+0x16/0xb0 [ 151.359088][ T6708] ? __pfx_copy_mnt_ns+0x10/0x10 [ 151.359103][ T6708] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 151.359127][ T6708] create_new_namespaces+0xcf/0x6b0 [ 151.359145][ T6708] ? bpf_lsm_capable+0x9/0x20 [ 151.359159][ T6708] ? security_capable+0x7e/0x2c0 [ 151.359179][ T6708] unshare_nsproxy_namespaces+0x144/0x190 [ 151.359198][ T6708] ksys_unshare+0x532/0x890 [ 151.359215][ T6708] ? __pfx_ksys_unshare+0x10/0x10 [ 151.359229][ T6708] ? __irq_exit_rcu+0xcb/0x220 [ 151.359244][ T6708] ? lockdep_softirqs_on+0x11e/0x190 [ 151.359260][ T6708] ? handle_softirqs+0x704/0x840 [ 151.359281][ T6708] __x64_sys_unshare+0x38/0x50 [ 151.359296][ T6708] do_syscall_64+0x166/0x520 [ 151.359311][ T6708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.359327][ T6708] ? clear_bhb_loop+0x70/0xc0 [ 151.359344][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.359359][ T6708] RIP: 0033:0x7f6bb399e1d9 [ 151.359373][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.359387][ T6708] RSP: 002b:00007f6bb485a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 151.359403][ T6708] RAX: ffffffffffffffda RBX: 00007f6bb3c25fa0 RCX: 00007f6bb399e1d9 [ 151.359415][ T6708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 151.359424][ T6708] RBP: 00007f6bb3a35888 R08: 0000000000000000 R09: 0000000000000000 [ 151.359434][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.359443][ T6708] R13: 00007f6bb3c26038 R14: 00007f6bb3c25fa0 R15: 00007ffca163d738 [ 151.359467][ T6708] [ 153.213726][ T5702] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 153.237608][ T5702] usb 3-1: USB disconnect, device number 9 [ 153.512400][ T6725] warning: `syz.3.308' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.061495][ T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 154.114630][ T5702] kernel read not supported for file /kmsg (pid: 5702 comm: kworker/0:3) [ 154.185905][ T6742] FAULT_INJECTION: forcing a failure. [ 154.185905][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 154.185950][ T6742] CPU: 0 UID: 0 PID: 6742 Comm: syz.4.314 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.185972][ T6742] Tainted: [L]=SOFTLOCKUP [ 154.185977][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.185987][ T6742] Call Trace: [ 154.185993][ T6742] [ 154.185999][ T6742] dump_stack_lvl+0xe8/0x150 [ 154.186022][ T6742] should_fail_ex+0x3eb/0x540 [ 154.186042][ T6742] should_failslab+0xa8/0x100 [ 154.186058][ T6742] ? prepare_creds+0x30/0x820 [ 154.186099][ T6742] kmem_cache_alloc_noprof+0x9c/0x600 [ 154.186126][ T6742] ? prepare_creds+0x30/0x820 [ 154.186154][ T6742] prepare_creds+0x30/0x820 [ 154.186184][ T6742] cap_task_prctl+0x379/0xa40 [ 154.186204][ T6742] security_task_prctl+0xf6/0x190 [ 154.186225][ T6742] __se_sys_prctl+0xbf/0x1910 [ 154.186246][ T6742] ? __pfx___se_sys_prctl+0x10/0x10 [ 154.186265][ T6742] ? __x64_sys_prctl+0x20/0xc0 [ 154.186282][ T6742] do_syscall_64+0x166/0x520 [ 154.186296][ T6742] ? trace_irq_disable+0x3b/0x140 [ 154.186311][ T6742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.186326][ T6742] ? clear_bhb_loop+0x70/0xc0 [ 154.186343][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.186359][ T6742] RIP: 0033:0x7f6bb399e1d9 [ 154.186373][ T6742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.186386][ T6742] RSP: 002b:00007f6bb4839028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 154.186404][ T6742] RAX: ffffffffffffffda RBX: 00007f6bb3c26090 RCX: 00007f6bb399e1d9 [ 154.186415][ T6742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 154.186424][ T6742] RBP: 00007f6bb3a35888 R08: 0000000000000000 R09: 0000000000000000 [ 154.186434][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.186443][ T6742] R13: 00007f6bb3c26128 R14: 00007f6bb3c26090 R15: 00007ffca163d738 [ 154.186467][ T6742] [ 154.266215][ T32] usb 3-1: New USB device found: idVendor=04b4, idProduct=931e, bcdDevice=0.40 [ 154.296627][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 154.296676][ T32] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 154.387769][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.387800][ T32] usb 3-1: Product: syz [ 154.387817][ T32] usb 3-1: Manufacturer: syz [ 154.387833][ T32] usb 3-1: SerialNumber: syz [ 154.535653][ T6746] Bluetooth: MGMT ver 1.23 [ 154.696181][ T32] usb 3-1: unit 5 not found! [ 154.758482][ T6753] FAULT_INJECTION: forcing a failure. [ 154.758482][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 154.758527][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.3.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.758564][ T6753] Tainted: [L]=SOFTLOCKUP [ 154.758573][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.758591][ T6753] Call Trace: [ 154.758600][ T6753] [ 154.758609][ T6753] dump_stack_lvl+0xe8/0x150 [ 154.758638][ T6753] should_fail_ex+0x3eb/0x540 [ 154.758666][ T6753] should_failslab+0xa8/0x100 [ 154.758690][ T6753] __kmalloc_noprof+0xf9/0x710 [ 154.758711][ T6753] ? __get_acl+0xa5/0x410 [ 154.758732][ T6753] ? security_inode_init_security+0x102/0x3e0 [ 154.758754][ T6753] ? security_inode_init_security+0x102/0x3e0 [ 154.758785][ T6753] security_inode_init_security+0x102/0x3e0 [ 154.758810][ T6753] ? __pfx_shmem_initxattrs+0x10/0x10 [ 154.758836][ T6753] ? __pfx_security_inode_init_security+0x10/0x10 [ 154.758862][ T6753] ? set_cached_acl+0xd2/0x180 [ 154.758884][ T6753] ? simple_acl_create+0x184/0x1b0 [ 154.758911][ T6753] shmem_mknod+0x1ea/0x340 [ 154.758938][ T6753] lookup_open+0xedc/0x1970 [ 154.758988][ T6753] path_openat+0x673/0x1da0 [ 154.759033][ T6753] do_file_open+0x23e/0x4a0 [ 154.759061][ T6753] ? __pfx_do_file_open+0x10/0x10 [ 154.759107][ T6753] ? _raw_spin_unlock+0x28/0x50 [ 154.759128][ T6753] ? alloc_fd+0x6af/0x760 [ 154.759163][ T6753] do_sys_openat2+0x115/0x200 [ 154.759185][ T6753] ? __se_sys_futex+0x3a8/0x450 [ 154.759208][ T6753] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.759236][ T6753] ? rcu_is_watching+0x16/0xb0 [ 154.759264][ T6753] __x64_sys_openat+0x138/0x170 [ 154.759292][ T6753] do_syscall_64+0x166/0x520 [ 154.759313][ T6753] ? trace_irq_disable+0x3b/0x140 [ 154.759332][ T6753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.759356][ T6753] ? clear_bhb_loop+0x70/0xc0 [ 154.759380][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.759403][ T6753] RIP: 0033:0x7f51c6d9e1d9 [ 154.759423][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.759442][ T6753] RSP: 002b:00007f51c7cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.759466][ T6753] RAX: ffffffffffffffda RBX: 00007f51c7025fa0 RCX: 00007f51c6d9e1d9 [ 154.759482][ T6753] RDX: 0000000000000042 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 154.759498][ T6753] RBP: 00007f51c6e35888 R08: 0000000000000000 R09: 0000000000000000 [ 154.759512][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.759526][ T6753] R13: 00007f51c7026038 R14: 00007f51c7025fa0 R15: 00007ffd621766e8 [ 154.759569][ T6753] [ 155.076433][ T32] usb 3-1: can't set first interface for hiFace device. [ 155.076522][ T32] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 155.098082][ T32] usb 3-1: can't set first interface for hiFace device. [ 155.098115][ T32] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 155.118899][ T32] usb 3-1: USB disconnect, device number 10 [ 155.190571][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.354544][ T12] smpboot: CPU 1 is now offline [ 156.829617][ T4930] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 156.830162][ T4930] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.855199][ T12] ACPI: \_SB_.C001: Eject incomplete - status 0xf [ 156.906316][ T5702] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 157.074670][ T5702] usb 2-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 157.086671][ T5702] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 157.086691][ T5702] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 157.086704][ T5702] usb 2-1: config 0 has no interface number 0 [ 157.086731][ T5702] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 157.086750][ T5702] usb 2-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.086770][ T5702] usb 2-1: config 0 interface 11 has no altsetting 0 [ 157.086793][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.145643][ T5702] usb 2-1: config 0 descriptor?? [ 157.172086][ T5702] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 157.188344][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 157.210846][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 157.210908][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 157.232799][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 157.232865][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 157.232920][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 157.232975][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 158.127806][ T5702] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 158.176224][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 158.176286][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 158.176340][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 158.176393][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 158.176446][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 158.176499][ T5702] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 158.233212][ T5702] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 158.260451][ T5702] usb 2-1: USB disconnect, device number 8 [ 158.303563][ T5702] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 158.335197][ T5702] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 158.335773][ T5702] keyspan 2-1:0.11: device disconnected [ 159.808809][ T6791] syz.4.331 uses obsolete (PF_INET,SOCK_PACKET) [ 164.207740][ T6819] FAULT_INJECTION: forcing a failure. [ 164.207740][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 164.207768][ T6819] CPU: 0 UID: 0 PID: 6819 Comm: syz.1.341 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.207789][ T6819] Tainted: [L]=SOFTLOCKUP [ 164.207795][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.207804][ T6819] Call Trace: [ 164.207810][ T6819] [ 164.207817][ T6819] dump_stack_lvl+0xe8/0x150 [ 164.207843][ T6819] should_fail_ex+0x3eb/0x540 [ 164.207863][ T6819] should_failslab+0xa8/0x100 [ 164.207879][ T6819] ? __proc_create+0x55d/0xad0 [ 164.207894][ T6819] kmem_cache_alloc_noprof+0x9c/0x600 [ 164.207913][ T6819] ? __proc_create+0x55d/0xad0 [ 164.207932][ T6819] __proc_create+0x55d/0xad0 [ 164.207951][ T6819] ? __pfx___proc_create+0x10/0x10 [ 164.207975][ T6819] proc_create_reg+0x8b/0x110 [ 164.207991][ T6819] proc_create_net_data+0x98/0x1d0 [ 164.208009][ T6819] ? __pfx_proc_create_net_data+0x10/0x10 [ 164.208026][ T6819] ? neigh_table_register+0xf31/0x1520 [ 164.208048][ T6819] arp_net_init+0xdf/0x130 [ 164.208065][ T6819] ops_init+0x35d/0x5d0 [ 164.208086][ T6819] setup_net+0x118/0x350 [ 164.208111][ T6819] ? __pfx_setup_net+0x10/0x10 [ 164.208127][ T6819] ? down_read_killable+0x1b6/0x3b0 [ 164.208143][ T6819] ? __ns_common_init+0x38a/0x590 [ 164.208162][ T6819] copy_net_ns+0x536/0x770 [ 164.208180][ T6819] create_new_namespaces+0x3f0/0x6b0 [ 164.208199][ T6819] ? security_capable+0x7e/0x2c0 [ 164.208220][ T6819] unshare_nsproxy_namespaces+0x144/0x190 [ 164.208238][ T6819] ksys_unshare+0x532/0x890 [ 164.208255][ T6819] ? __pfx_ksys_unshare+0x10/0x10 [ 164.208272][ T6819] ? rcu_is_watching+0x16/0xb0 [ 164.208295][ T6819] __x64_sys_unshare+0x38/0x50 [ 164.208309][ T6819] do_syscall_64+0x166/0x520 [ 164.208324][ T6819] ? trace_irq_disable+0x3b/0x140 [ 164.208338][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.208354][ T6819] ? clear_bhb_loop+0x70/0xc0 [ 164.208371][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.208386][ T6819] RIP: 0033:0x7f297e79e1d9 [ 164.208401][ T6819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.208413][ T6819] RSP: 002b:00007f297f5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 164.208430][ T6819] RAX: ffffffffffffffda RBX: 00007f297ea25fa0 RCX: 00007f297e79e1d9 [ 164.208442][ T6819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 164.208451][ T6819] RBP: 00007f297e835888 R08: 0000000000000000 R09: 0000000000000000 [ 164.208461][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.208470][ T6819] R13: 00007f297ea26038 R14: 00007f297ea25fa0 R15: 00007fff690f9058 [ 164.208495][ T6819] [ 164.901575][ T5709] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 165.052180][ T5709] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 165.052210][ T5709] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 165.121734][ T199] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 165.213226][ T6837] kvm: pic: non byte read [ 165.213466][ T6837] kvm: pic: non byte read [ 165.213695][ T6837] kvm: pic: non byte read [ 165.213911][ T6837] kvm: pic: non byte read [ 165.214115][ T6837] kvm: pic: non byte read [ 165.214319][ T6837] kvm: pic: non byte read [ 165.214510][ T6837] kvm: pic: non byte read [ 165.218054][ T6837] kvm: pic: non byte read [ 165.218309][ T6837] kvm: pic: non byte read [ 165.218519][ T6837] kvm: pic: non byte read [ 165.271655][ T5709] usb 4-1: string descriptor 0 read error: -71 [ 165.271758][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.292448][ T199] usb 2-1: Using ep0 maxpacket: 16 [ 165.296506][ T199] usb 2-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=6.00 [ 165.320460][ T5709] usb 4-1: can't set config #1, error -71 [ 165.328917][ T199] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 165.345812][ T5709] usb 4-1: USB disconnect, device number 9 [ 165.346222][ T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.346239][ T199] usb 2-1: Product: syz [ 165.346249][ T199] usb 2-1: Manufacturer: syz [ 165.346260][ T199] usb 2-1: SerialNumber: syz [ 165.416677][ T199] usb 2-1: config 0 descriptor?? [ 165.443412][ T199] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 165.450666][ T199] usb 2-1: Detected FT232R [ 165.654506][ T199] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 165.879963][ T199] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.065636][ T199] usb 2-1: USB disconnect, device number 9 [ 166.094202][ T199] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.094622][ T199] ftdi_sio 2-1:0.0: device disconnected [ 167.234474][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 167.563011][ T5702] logitech-hidpp-device 0005:046D:B012.0009: unbalanced collection at end of report description [ 167.586628][ T5702] logitech-hidpp-device 0005:046D:B012.0009: hidpp_probe:parse failed [ 167.586690][ T5702] logitech-hidpp-device 0005:046D:B012.0009: probe with driver logitech-hidpp-device failed with error -22 [ 168.771512][ T5702] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.911383][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.929835][ T5702] usb 5-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 168.930685][ T5702] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 168.930702][ T5702] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.965342][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.965362][ T5702] usb 5-1: Product: syz [ 168.965373][ T5702] usb 5-1: Manufacturer: syz [ 168.965383][ T5702] usb 5-1: SerialNumber: syz [ 169.074935][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.074972][ T9] usb 4-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 169.076094][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.091000][ T9] usb 4-1: string descriptor 0 read error: -22 [ 169.091115][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.632122][ T9] usb 4-1: failed to read current rate; disabling the check [ 170.659231][ T5702] usb 5-1: unit 5 not found! [ 170.818225][ T5702] usb 5-1: USB disconnect, device number 3 [ 171.154051][ T9] usb 4-1: USB disconnect, device number 10 [ 171.776705][ T4930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.780575][ T4930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.790428][ T4930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.814230][ T4930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.816702][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.555281][ T1440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.850275][ T1440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.983371][ T1440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.140644][ T1440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.361077][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.516024][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.516113][ T9] usb 4-1: New USB device found: idVendor=0ccd, idProduct=0035, bcdDevice=0.40 [ 173.519189][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 108, changing to 10 [ 173.521341][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.521359][ T9] usb 4-1: Product: syz [ 173.521369][ T9] usb 4-1: Manufacturer: syz [ 173.521380][ T9] usb 4-1: SerialNumber: syz [ 173.769932][ T1440] bridge_slave_1: left allmulticast mode [ 173.769972][ T1440] bridge_slave_1: left promiscuous mode [ 173.770137][ T1440] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.806424][ T1440] bridge_slave_0: left allmulticast mode [ 173.806445][ T1440] bridge_slave_0: left promiscuous mode [ 173.806612][ T1440] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.874372][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.882927][ T4930] Bluetooth: hci4: command tx timeout [ 174.089410][ T9] usb 4-1: USB disconnect, device number 11 [ 174.385210][ T6985] udevd[6985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.427863][ T33] audit: type=1326 audit(1791826159.155:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.4.409" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 174.458790][ T33] audit: type=1326 audit(1791826159.185:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.4.409" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 174.506495][ T33] audit: type=1326 audit(1791826159.235:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.4.409" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 174.506534][ T33] audit: type=1326 audit(1791826159.235:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.4.409" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 174.506565][ T33] audit: type=1326 audit(1791826159.235:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.4.409" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 174.638938][ T1440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.664410][ T1440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.670695][ T1440] bond0 (unregistering): Released all slaves [ 174.862388][ T6996] EXT4-fs warning (device sda1): ext4_group_extend:1872: need to use ext2online to resize further [ 175.308224][ T7008] input: syz0 as /devices/virtual/input/input10 [ 175.578738][ T1440] hsr_slave_0: left promiscuous mode [ 175.591179][ T1440] hsr_slave_1: left promiscuous mode [ 175.591883][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.591899][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.594231][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.594245][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.666377][ T1440] veth1_macvtap: left promiscuous mode [ 175.666408][ T1440] veth0_macvtap: left promiscuous mode [ 175.666479][ T1440] veth1_vlan: left promiscuous mode [ 175.666606][ T1440] veth0_vlan: left promiscuous mode [ 175.711554][ T7020] Zero length message leads to an empty skb [ 175.962366][ T4930] Bluetooth: hci4: command tx timeout [ 176.989261][ T1440] team0 (unregistering): Port device team_slave_1 removed [ 177.060834][ T1440] team0 (unregistering): Port device team_slave_0 removed [ 177.507609][ T7053] kthread_run failed with err -4 [ 177.523589][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 178.042070][ T4930] Bluetooth: hci4: command tx timeout [ 178.418395][ T7083] netlink: 224 bytes leftover after parsing attributes in process `syz.1.438'. [ 178.510552][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.510636][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.533784][ T6929] bridge_slave_0: entered allmulticast mode [ 178.550228][ T6929] bridge_slave_0: entered promiscuous mode [ 178.576088][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.576163][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.576275][ T6929] bridge_slave_1: entered allmulticast mode [ 178.610052][ T6929] bridge_slave_1: entered promiscuous mode [ 178.759907][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.788471][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.946302][ T6929] team0: Port device team_slave_0 added [ 178.965496][ T6929] team0: Port device team_slave_1 added [ 179.099964][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.099980][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.099999][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.156610][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.156625][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.156645][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.230012][ T7098] FAULT_INJECTION: forcing a failure. [ 179.230012][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 179.230038][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.3.443 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.230065][ T7098] Tainted: [L]=SOFTLOCKUP [ 179.230071][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.230080][ T7098] Call Trace: [ 179.230086][ T7098] [ 179.230093][ T7098] dump_stack_lvl+0xe8/0x150 [ 179.230115][ T7098] should_fail_ex+0x3eb/0x540 [ 179.230135][ T7098] should_failslab+0xa8/0x100 [ 179.230150][ T7098] ? skb_clone+0x212/0x3a0 [ 179.230165][ T7098] kmem_cache_alloc_noprof+0x9c/0x600 [ 179.230184][ T7098] ? skb_clone+0x212/0x3a0 [ 179.230203][ T7098] skb_clone+0x212/0x3a0 [ 179.230216][ T7098] ? __tcp_transmit_skb+0x2a0/0x47c0 [ 179.230234][ T7098] __tcp_transmit_skb+0x37c/0x47c0 [ 179.230254][ T7098] ? __alloc_skb+0x27a/0x7a0 [ 179.230268][ T7098] ? rcu_is_watching+0x16/0xb0 [ 179.230283][ T7098] ? __alloc_skb+0x27a/0x7a0 [ 179.230296][ T7098] ? trace_kmem_cache_alloc+0x29/0xe0 [ 179.230315][ T7098] ? __asan_memcpy+0x40/0x70 [ 179.230330][ T7098] ? __copy_skb_header+0xa3/0x4a0 [ 179.230346][ T7098] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 179.230376][ T7098] tcp_send_synack+0xd50/0x1200 [ 179.230399][ T7098] ? tcp_parse_options+0x12d0/0x13a0 [ 179.230415][ T7098] ? __pfx_tcp_send_synack+0x10/0x10 [ 179.230435][ T7098] ? tcp_sync_mss+0x25e/0x5a0 [ 179.230455][ T7098] tcp_rcv_state_process+0x1773/0x4920 [ 179.230479][ T7098] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 179.230495][ T7098] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 179.230516][ T7098] ? sk_setup_caps+0x94f/0xbc0 [ 179.230546][ T7098] tcp_v4_do_rcv+0x9fd/0x13b0 [ 179.230561][ T7098] ? __local_bh_enable_ip+0xd6/0x140 [ 179.230584][ T7098] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 179.230598][ T7098] __release_sock+0x256/0x390 [ 179.230620][ T7098] release_sock+0x190/0x260 [ 179.230637][ T7098] __inet_stream_connect+0x8e7/0xf50 [ 179.230665][ T7098] ? __pfx___inet_stream_connect+0x10/0x10 [ 179.230681][ T7098] ? __pfx_woken_wake_function+0x10/0x10 [ 179.230698][ T7098] ? inet_stream_connect+0x51/0xa0 [ 179.230715][ T7098] ? __local_bh_enable_ip+0xd6/0x140 [ 179.230734][ T7098] inet_stream_connect+0x66/0xa0 [ 179.230752][ T7098] __sys_connect+0x316/0x450 [ 179.230769][ T7098] ? __pfx___sys_connect+0x10/0x10 [ 179.230792][ T7098] ? rcu_is_watching+0x16/0xb0 [ 179.230814][ T7098] __x64_sys_connect+0x7a/0x90 [ 179.230830][ T7098] do_syscall_64+0x166/0x520 [ 179.230844][ T7098] ? trace_irq_disable+0x3b/0x140 [ 179.230858][ T7098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.230874][ T7098] ? clear_bhb_loop+0x70/0xc0 [ 179.230891][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.230910][ T7098] RIP: 0033:0x7f51c6d9e1d9 [ 179.230925][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.230937][ T7098] RSP: 002b:00007f51c7cdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 179.230954][ T7098] RAX: ffffffffffffffda RBX: 00007f51c7025fa0 RCX: 00007f51c6d9e1d9 [ 179.230966][ T7098] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000005 [ 179.230976][ T7098] RBP: 00007f51c6e35888 R08: 0000000000000000 R09: 0000000000000000 [ 179.230985][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.230994][ T7098] R13: 00007f51c7026038 R14: 00007f51c7025fa0 R15: 00007ffd621766e8 [ 179.231024][ T7098] [ 179.631326][ T7100] ======================================================= [ 179.631326][ T7100] WARNING: The mand mount option has been deprecated and [ 179.631326][ T7100] and is ignored by this kernel. Remove the mand [ 179.631326][ T7100] option from the mount to silence this warning. [ 179.631326][ T7100] ======================================================= [ 179.814147][ T6929] hsr_slave_0: entered promiscuous mode [ 179.819099][ T6929] hsr_slave_1: entered promiscuous mode [ 179.837939][ T6929] debugfs: 'hsr0' already exists in 'hsr' [ 179.837960][ T6929] Cannot create hsr debugfs directory [ 180.122559][ T4930] Bluetooth: hci4: command tx timeout [ 180.560665][ T7115] FAULT_INJECTION: forcing a failure. [ 180.560665][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 180.560711][ T7115] CPU: 0 UID: 0 PID: 7115 Comm: syz.3.448 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.560733][ T7115] Tainted: [L]=SOFTLOCKUP [ 180.560738][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.560747][ T7115] Call Trace: [ 180.560753][ T7115] [ 180.560760][ T7115] dump_stack_lvl+0xe8/0x150 [ 180.560782][ T7115] should_fail_ex+0x3eb/0x540 [ 180.560801][ T7115] ? alloc_slab_obj_exts+0x5c/0x180 [ 180.560815][ T7115] should_failslab+0xa8/0x100 [ 180.560831][ T7115] ? alloc_slab_obj_exts+0x5c/0x180 [ 180.560844][ T7115] __kmalloc_flags_noprof+0x123/0x790 [ 180.560862][ T7115] ? alloc_slab_obj_exts+0x5c/0x180 [ 180.560882][ T7115] alloc_slab_obj_exts+0x5c/0x180 [ 180.560899][ T7115] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 180.560930][ T7115] __kvmalloc_node_noprof+0x5ec/0x820 [ 180.560950][ T7115] ? __kvmalloc_node_noprof+0x340/0x820 [ 180.560964][ T7115] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 180.560979][ T7115] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 180.560998][ T7115] io_ring_ctx_alloc+0x1ad/0xb80 [ 180.561014][ T7115] ? io_prepare_config+0x8c8/0xc70 [ 180.561033][ T7115] io_uring_create+0x50/0x980 [ 180.561051][ T7115] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 180.561067][ T7115] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.561084][ T7115] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 180.561110][ T7115] ? rcu_is_watching+0x16/0xb0 [ 180.561135][ T7115] do_syscall_64+0x166/0x520 [ 180.561149][ T7115] ? trace_irq_disable+0x3b/0x140 [ 180.561164][ T7115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.561180][ T7115] ? clear_bhb_loop+0x70/0xc0 [ 180.561197][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.561212][ T7115] RIP: 0033:0x7f51c6d9e1d9 [ 180.561227][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.561240][ T7115] RSP: 002b:00007f51c7cdbfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 180.561257][ T7115] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f51c6d9e1d9 [ 180.561268][ T7115] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 000000000000001d [ 180.561278][ T7115] RBP: 00007f51c6e35888 R08: 0000000000000000 R09: 0000000000000000 [ 180.561288][ T7115] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 180.561298][ T7115] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffd621766e8 [ 180.561322][ T7115] [ 180.931930][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 181.622743][ T6929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.668774][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.686574][ T6929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.734025][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.751158][ T6929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.793692][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.810066][ T6929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.838401][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.048188][ T7142] tipc: Started in network mode [ 182.048207][ T7142] tipc: Node identity 4, cluster identity 4711 [ 182.048216][ T7142] tipc: Node number set to 4 [ 182.213608][ T1397] tipc: Subscription rejected, illegal request [ 182.410522][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.512742][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.545611][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.545688][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.599547][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.599622][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.890533][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.461'. [ 183.219680][ T7172] tipc: Can't bind to reserved service type 2 [ 183.886521][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 185.067740][ T6929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.375433][ T7226] syz.1.477 (7226): drop_caches: 0 [ 186.771914][ T6929] veth0_vlan: entered promiscuous mode [ 186.806705][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 186.845710][ T6929] veth1_vlan: entered promiscuous mode [ 187.053036][ T6929] veth0_macvtap: entered promiscuous mode [ 187.097424][ T6929] veth1_macvtap: entered promiscuous mode [ 187.125914][ T33] audit: type=1326 audit(1791826427.853:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.125954][ T33] audit: type=1326 audit(1791826427.853:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.189506][ T33] audit: type=1326 audit(1791826427.923:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.189550][ T33] audit: type=1326 audit(1791826427.923:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.189591][ T33] audit: type=1326 audit(1791826427.923:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.276826][ T33] audit: type=1326 audit(1791826428.003:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.276873][ T33] audit: type=1326 audit(1791826428.003:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.276910][ T33] audit: type=1326 audit(1791826428.003:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.332925][ T33] audit: type=1326 audit(1791826428.063:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.332970][ T33] audit: type=1326 audit(1791826428.063:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.492" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb399e1d9 code=0x7ffc0000 [ 187.477096][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.536557][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.611179][ T1285] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.625042][ T1285] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.625218][ T1397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.625246][ T1397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.157571][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.157588][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.424128][ T1419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.424144][ T1419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.500504][ T7311] FAULT_INJECTION: forcing a failure. [ 189.500504][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 189.500531][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.4.506 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.500552][ T7311] Tainted: [L]=SOFTLOCKUP [ 189.500558][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 189.500567][ T7311] Call Trace: [ 189.500574][ T7311] [ 189.500580][ T7311] dump_stack_lvl+0xe8/0x150 [ 189.500602][ T7311] should_fail_ex+0x3eb/0x540 [ 189.500622][ T7311] should_failslab+0xa8/0x100 [ 189.500638][ T7311] ? __send_signal_locked+0x313/0x1010 [ 189.500654][ T7311] kmem_cache_alloc_noprof+0x9c/0x600 [ 189.500670][ T7311] ? sig_get_ucounts+0x26/0x450 [ 189.500686][ T7311] ? __send_signal_locked+0x313/0x1010 [ 189.500702][ T7311] ? sig_get_ucounts+0x3e4/0x450 [ 189.500719][ T7311] __send_signal_locked+0x313/0x1010 [ 189.500741][ T7311] send_signal_locked+0x135/0x9e0 [ 189.500761][ T7311] ? __pfx_send_signal_locked+0x10/0x10 [ 189.500789][ T7311] force_sig_info_to_task+0x316/0x4b0 [ 189.500812][ T7311] force_sig_fault+0xf0/0x150 [ 189.500829][ T7311] ? __pfx_force_sig_fault+0x10/0x10 [ 189.500850][ T7311] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 189.500871][ T7311] exc_page_fault+0x6a/0xc0 [ 189.500888][ T7311] asm_exc_page_fault+0x26/0x30 [ 189.500903][ T7311] RIP: 0033:0x7f6bb398735f [ 189.500917][ T7311] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 189.500930][ T7311] RSP: 002b:00007f6bb4859bd8 EFLAGS: 00010283 [ 189.500947][ T7311] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 189.500957][ T7311] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f6bb4859c00 [ 189.500966][ T7311] RBP: 00007f6bb4859c00 R08: 0000000000000000 R09: 0000000000000000 [ 189.500976][ T7311] R10: 0000000000000000 R11: 000000000013b241 R12: cccccccccccccccd [ 189.500987][ T7311] R13: 00007f6bb3c26038 R14: 00007f6bb3c25fa0 R15: 00007ffca163d738 [ 189.501018][ T7311] [ 190.204272][ T5709] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.353966][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 190.356157][ T5709] usb 5-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 190.358463][ T5709] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 190.358481][ T5709] usb 5-1: config 0 has no interface number 0 [ 190.397356][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.397378][ T5709] usb 5-1: Product: syz [ 190.397389][ T5709] usb 5-1: Manufacturer: syz [ 190.397406][ T5709] usb 5-1: SerialNumber: syz [ 190.430656][ T5709] usb 5-1: config 0 descriptor?? [ 190.785033][ T7340] netlink: 36 bytes leftover after parsing attributes in process `syz.3.518'. [ 190.865845][ T5709] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 190.865870][ T5709] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 191.239573][ T7351] tipc: Started in network mode [ 191.239590][ T7351] tipc: Node identity 4, cluster identity 4711 [ 191.239599][ T7351] tipc: Node number set to 4 [ 191.269748][ T5709] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 191.269940][ T5709] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 191.303403][ T5709] usb 5-1: USB disconnect, device number 4 [ 192.221079][ T5709] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.371780][ T5709] usb 5-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 192.372655][ T5709] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 192.372690][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.373661][ T5709] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 192.373677][ T5709] usb 5-1: Manufacturer: syz [ 192.377760][ T5709] usb 5-1: config 0 descriptor?? [ 192.497481][ T7399] FAULT_INJECTION: forcing a failure. [ 192.497481][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 192.497553][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.5.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.497575][ T7399] Tainted: [L]=SOFTLOCKUP [ 192.497581][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 192.497590][ T7399] Call Trace: [ 192.497596][ T7399] [ 192.497603][ T7399] dump_stack_lvl+0xe8/0x150 [ 192.497625][ T7399] should_fail_ex+0x3eb/0x540 [ 192.497645][ T7399] should_failslab+0xa8/0x100 [ 192.497660][ T7399] ? __ksm_enter+0x34/0x4b0 [ 192.497676][ T7399] kmem_cache_alloc_noprof+0x9c/0x600 [ 192.497693][ T7399] ? ksm_compatible+0x22f/0x260 [ 192.497708][ T7399] ? __ksm_enter+0x34/0x4b0 [ 192.497727][ T7399] __ksm_enter+0x34/0x4b0 [ 192.497744][ T7399] ksm_madvise+0x1da/0x410 [ 192.497762][ T7399] ? __pfx_ksm_madvise+0x10/0x10 [ 192.497779][ T7399] ? __lock_acquire+0x747/0x2de0 [ 192.497798][ T7399] madvise_vma_behavior+0xb79/0x5180 [ 192.497821][ T7399] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 192.497842][ T7399] ? do_raw_spin_lock+0x12b/0x2f0 [ 192.497863][ T7399] ? rcu_is_watching+0x16/0xb0 [ 192.497879][ T7399] ? trace_hrtimer_start+0x82/0x200 [ 192.497896][ T7399] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 192.497923][ T7399] ? finish_task_switch+0x40e/0xc60 [ 192.497938][ T7399] ? lockdep_hardirqs_on+0x7b/0x110 [ 192.497955][ T7399] ? rcu_is_watching+0x16/0xb0 [ 192.497973][ T7399] ? trace_sched_exit_tp+0x3a/0x130 [ 192.497991][ T7399] ? __lock_acquire+0x747/0x2de0 [ 192.498011][ T7399] ? plist_check_list+0x2ef/0x310 [ 192.498036][ T7399] ? mas_prev_slot+0xb76/0xbf0 [ 192.498062][ T7399] ? find_vma_prev+0x123/0x1b0 [ 192.498080][ T7399] ? __pfx_find_vma_prev+0x10/0x10 [ 192.498110][ T7399] madvise_walk_vmas+0x57d/0xb70 [ 192.498134][ T7399] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 192.498153][ T7399] ? blk_start_plug+0x6e/0x1b0 [ 192.498171][ T7399] madvise_do_behavior+0x385/0x540 [ 192.498191][ T7399] ? __pfx_madvise_do_behavior+0x10/0x10 [ 192.498221][ T7399] do_madvise+0x26f/0x330 [ 192.498243][ T7399] ? __pfx_do_madvise+0x10/0x10 [ 192.498266][ T7399] ? rcu_is_watching+0x16/0xb0 [ 192.498287][ T7399] __x64_sys_madvise+0xa6/0xc0 [ 192.498312][ T7399] do_syscall_64+0x166/0x520 [ 192.498327][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.498343][ T7399] ? clear_bhb_loop+0x70/0xc0 [ 192.498360][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.498376][ T7399] RIP: 0033:0x7f4a0ab9e1d9 [ 192.498390][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.498403][ T7399] RSP: 002b:00007f4a0b9a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 192.498420][ T7399] RAX: ffffffffffffffda RBX: 00007f4a0ae25fa0 RCX: 00007f4a0ab9e1d9 [ 192.498432][ T7399] RDX: 000000000000000c RSI: 0000000000002000 RDI: 00002000002a3000 [ 192.498442][ T7399] RBP: 00007f4a0ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 192.498451][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.498461][ T7399] R13: 00007f4a0ae26038 R14: 00007f4a0ae25fa0 R15: 00007fff898eda78 [ 192.498485][ T7399] [ 192.922417][ T5709] rc_core: IR keymap rc-hauppauge not found [ 192.922432][ T5709] Registered IR keymap rc-empty [ 192.944593][ T5709] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 192.961315][ T5709] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 193.014206][ T5709] usb 5-1: USB disconnect, device number 5 [ 193.164968][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.165011][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.352924][ T4930] Bluetooth: hci4: unexpected subevent 0x01 length: 16 < 18 [ 193.372482][ T7414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.545'. [ 193.454285][ T7416] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 193.454306][ T7416] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.457801][ T7416] vhci_hcd vhci_hcd.0: Device attached [ 193.502507][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 193.631246][ T5709] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 193.653086][ T9] usb 2-1: New USB device found: idVendor=110a, idProduct=1410, bcdDevice=0.00 [ 193.655757][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.655796][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.696945][ T5709] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 193.958769][ T7409] syzkaller1: entered promiscuous mode [ 193.958788][ T7409] syzkaller1: entered allmulticast mode [ 194.010609][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 194.165028][ T9] mxuport 2-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 194.165395][ T9] mxuport 2-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 194.165441][ T9] mxuport 2-1:1.0: probe with driver mxuport failed with error -71 [ 194.236158][ T9] usb 2-1: USB disconnect, device number 10 [ 194.328750][ T7417] vhci_hcd: connection reset by peer [ 194.365264][ T1285] vhci_hcd vhci_hcd.3: stop threads [ 194.379819][ T1285] vhci_hcd vhci_hcd.3: release socket [ 194.380817][ T1285] vhci_hcd vhci_hcd.3: disconnect device [ 194.480595][ T520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.684786][ T520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.758833][ T4930] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 194.758849][ T4930] Bluetooth: Wrong link type (-22) [ 194.934165][ T520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.018650][ T520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.127728][ T7436] FAULT_INJECTION: forcing a failure. [ 195.127728][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 195.127754][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.1.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.127775][ T7436] Tainted: [L]=SOFTLOCKUP [ 195.127780][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.127790][ T7436] Call Trace: [ 195.127796][ T7436] [ 195.127803][ T7436] dump_stack_lvl+0xe8/0x150 [ 195.127823][ T7436] should_fail_ex+0x3eb/0x540 [ 195.127843][ T7436] should_failslab+0xa8/0x100 [ 195.127860][ T7436] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 195.127878][ T7436] ? __d_alloc+0x37/0x7f0 [ 195.127890][ T7436] ? __d_alloc+0x37/0x7f0 [ 195.127909][ T7436] __d_alloc+0x37/0x7f0 [ 195.127926][ T7436] d_alloc_pseudo+0x21/0xc0 [ 195.127942][ T7436] alloc_path_pseudo+0x107/0x220 [ 195.127960][ T7436] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 195.127976][ T7436] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.128006][ T7436] alloc_file_pseudo+0xa8/0x1e0 [ 195.128024][ T7436] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 195.128039][ T7436] ? _raw_spin_unlock+0x28/0x50 [ 195.128060][ T7436] sock_alloc_file+0xb8/0x2e0 [ 195.128075][ T7436] ? __sys_socket+0x12b/0x1b0 [ 195.128091][ T7436] __sys_socket+0x13f/0x1b0 [ 195.128109][ T7436] __x64_sys_socket+0x7a/0x90 [ 195.128125][ T7436] do_syscall_64+0x166/0x520 [ 195.128139][ T7436] ? trace_irq_disable+0x3b/0x140 [ 195.128153][ T7436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.128169][ T7436] ? clear_bhb_loop+0x70/0xc0 [ 195.128186][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.128201][ T7436] RIP: 0033:0x7f297e79e1d9 [ 195.128216][ T7436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.128229][ T7436] RSP: 002b:00007f297f5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 195.128245][ T7436] RAX: ffffffffffffffda RBX: 00007f297ea25fa0 RCX: 00007f297e79e1d9 [ 195.128257][ T7436] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 195.128266][ T7436] RBP: 00007f297e835888 R08: 0000000000000000 R09: 0000000000000000 [ 195.128276][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.128285][ T7436] R13: 00007f297ea26038 R14: 00007f297ea25fa0 R15: 00007fff690f9058 [ 195.128309][ T7436] [ 195.647825][ T7441] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 195.807057][ T520] bridge_slave_1: left allmulticast mode [ 195.807078][ T520] bridge_slave_1: left promiscuous mode [ 195.807321][ T520] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.852985][ T520] bridge_slave_0: left allmulticast mode [ 195.853015][ T520] bridge_slave_0: left promiscuous mode [ 195.853183][ T520] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.174063][ T7451] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 196.174086][ T7451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.174140][ T7451] vhci_hcd vhci_hcd.0: Device attached [ 196.205224][ T7451] loop8: detected capacity change from 0 to 16384 [ 196.329133][ T7455] loop8: detected capacity change from 16384 to 16383 [ 196.355112][ T199] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 196.414775][ T199] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 197.013934][ T7452] vhci_hcd: connection reset by peer [ 197.021318][ T1016] vhci_hcd vhci_hcd.1: stop threads [ 197.021338][ T1016] vhci_hcd vhci_hcd.1: release socket [ 197.021379][ T1016] vhci_hcd vhci_hcd.1: disconnect device [ 197.132535][ T520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.166322][ T520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.189304][ T520] bond0 (unregistering): Released all slaves [ 198.136160][ T520] hsr_slave_0: left promiscuous mode [ 198.147640][ T520] hsr_slave_1: left promiscuous mode [ 198.148278][ T520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.148293][ T520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.176206][ T520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.176231][ T520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.235585][ T520] veth1_macvtap: left promiscuous mode [ 198.235618][ T520] veth0_macvtap: left promiscuous mode [ 198.235690][ T520] veth1_vlan: left promiscuous mode [ 198.235738][ T520] veth0_vlan: left promiscuous mode [ 198.556005][ T7478] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 198.831971][ T5709] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 198.865644][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.869124][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.870306][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.898962][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.900367][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.012197][ T5783] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 199.164243][ T5783] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 199.165276][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 199.165298][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.165315][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 199.167111][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.167128][ T5783] usb 2-1: Product: syz [ 199.167139][ T5783] usb 2-1: Manufacturer: syz [ 199.167149][ T5783] usb 2-1: SerialNumber: syz [ 199.253598][ T5783] usb 2-1: config 0 descriptor?? [ 199.390429][ T520] team0 (unregistering): Port device team_slave_1 removed [ 199.427440][ T520] team0 (unregistering): Port device team_slave_0 removed [ 199.497739][ T5783] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 199.755996][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 200.470031][ T7497] netlink: 64 bytes leftover after parsing attributes in process `syz.3.568'. [ 201.001826][ T5621] Bluetooth: hci1: command tx timeout [ 201.551274][ T199] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 201.748812][ T5709] usb 2-1: USB disconnect, device number 11 [ 202.108150][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 202.258037][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.259958][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.260293][ T7482] bridge_slave_0: entered allmulticast mode [ 202.292524][ T7482] bridge_slave_0: entered promiscuous mode [ 202.313180][ T7482] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.313271][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.319848][ T7482] bridge_slave_1: entered allmulticast mode [ 202.347862][ T7482] bridge_slave_1: entered promiscuous mode [ 202.493744][ T7482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.518396][ T7482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.536819][ T33] kauditd_printk_skb: 492 callbacks suppressed [ 202.536835][ T33] audit: type=1800 audit(1791826443.263:509): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.574" name=8006 dev="sda1" ino=2048 res=0 errno=-22 [ 202.692268][ T7482] team0: Port device team_slave_0 added [ 202.700013][ T7482] team0: Port device team_slave_1 added [ 202.804718][ T7543] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 202.804740][ T7543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.805952][ T7543] vhci_hcd vhci_hcd.0: Device attached [ 202.860364][ T7482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.860379][ T7482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.860399][ T7482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.919969][ T7482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.919996][ T7482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.920017][ T7482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.042356][ T199] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 203.081439][ T5621] Bluetooth: hci1: command tx timeout [ 203.230112][ T7482] hsr_slave_0: entered promiscuous mode [ 203.246552][ T7482] hsr_slave_1: entered promiscuous mode [ 203.614098][ T7544] vhci_hcd: connection reset by peer [ 203.624217][ T1440] vhci_hcd vhci_hcd.1: stop threads [ 203.624239][ T1440] vhci_hcd vhci_hcd.1: release socket [ 203.625191][ T1440] vhci_hcd vhci_hcd.1: disconnect device [ 204.069635][ T5621] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 205.061033][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.161194][ T5621] Bluetooth: hci1: command tx timeout [ 205.802549][ T10] usb 4-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 205.971080][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.971121][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 205.971139][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 205.971157][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 205.971193][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 205.971209][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 205.971225][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 206.339533][ T10] usb 4-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 206.339556][ T10] usb 4-1: Product: syz [ 206.339567][ T10] usb 4-1: Manufacturer: syz [ 206.339578][ T10] usb 4-1: SerialNumber: syz [ 206.798858][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.798947][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.799039][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.989647][ T10] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 207.063438][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 207.088545][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 207.088629][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 207.157224][ T10] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 207.241020][ T5621] Bluetooth: hci1: command tx timeout [ 207.699614][ T5709] usb 4-1: USB disconnect, device number 12 [ 207.759492][ T5709] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 207.760169][ T5709] keyspan 4-1:1.0: device disconnected [ 207.874676][ T7482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.898086][ T7482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.911913][ T7482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.949323][ T7482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.967404][ T7482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.994958][ T7482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.997281][ T7482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.027977][ T7482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.192445][ T199] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 208.383294][ T7482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.458800][ T7482] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.500127][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.500207][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.548678][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.548774][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.158437][ T7644] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 210.174974][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 210.324696][ T10] usb 2-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 210.328615][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 210.328635][ T10] usb 2-1: config 0 has no interface number 0 [ 210.328661][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.328678][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 210.328697][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 210.328715][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 210.328734][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 210.328752][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.328782][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.380340][ T10] usb 2-1: config 0 descriptor?? [ 210.382983][ T7668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 210.383082][ T7668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 210.489248][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 210.654805][ T7668] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 210.701152][ T10] usb 2-1: USB disconnect, device number 12 [ 210.727008][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 210.880001][ T7482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.892177][ T5702] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 211.939341][ T7724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.052732][ T5702] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 212.055685][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.055708][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.055725][ T5702] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.055754][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.085515][ T5702] usb 6-1: config 0 descriptor?? [ 212.199544][ T7482] veth0_vlan: entered promiscuous mode [ 212.240514][ T7482] veth1_vlan: entered promiscuous mode [ 212.400780][ T7482] veth0_macvtap: entered promiscuous mode [ 212.440864][ T7482] veth1_macvtap: entered promiscuous mode [ 212.519567][ T7482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.554394][ T7482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.614769][ T1419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.615112][ T1419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.615226][ T1419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.621648][ T5702] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 212.631904][ T1016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.732009][ T7736] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 212.793749][ T7741] FAULT_INJECTION: forcing a failure. [ 212.793749][ T7741] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 212.793777][ T7741] CPU: 0 UID: 0 PID: 7741 Comm: syz.3.624 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.793801][ T7741] Tainted: [L]=SOFTLOCKUP [ 212.793809][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 212.793820][ T7741] Call Trace: [ 212.793827][ T7741] [ 212.793834][ T7741] dump_stack_lvl+0xe8/0x150 [ 212.793857][ T7741] should_fail_ex+0x3eb/0x540 [ 212.793881][ T7741] prepare_alloc_pages+0x21e/0x5f0 [ 212.793904][ T7741] __alloc_frozen_pages_noprof+0x17a/0x400 [ 212.793921][ T7741] ? kasan_save_track+0x3e/0x80 [ 212.793938][ T7741] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 212.793962][ T7741] ? policy_nodemask+0x2cc/0x8e0 [ 212.793978][ T7741] ? mas_start+0x46b/0x640 [ 212.793995][ T7741] alloc_pages_mpol+0x21e/0x390 [ 212.794014][ T7741] alloc_pages_noprof+0xb1/0x2b0 [ 212.794046][ T7741] __pud_alloc+0x3a/0x460 [ 212.794067][ T7741] handle_mm_fault+0x2519/0x3750 [ 212.794083][ T7741] ? mt_find+0x186/0x630 [ 212.794104][ T7741] ? handle_mm_fault+0xf1/0x3750 [ 212.794118][ T7741] ? mt_find+0x186/0x630 [ 212.794133][ T7741] ? __pfx_mt_find+0x10/0x10 [ 212.794152][ T7741] ? __pfx_handle_mm_fault+0x10/0x10 [ 212.794166][ T7741] ? vma_has_anon_rmap+0x95/0x270 [ 212.794203][ T7741] __get_user_pages+0x1670/0x2750 [ 212.794246][ T7741] get_user_pages_remote+0x305/0xb90 [ 212.794270][ T7741] ? __pfx_get_user_pages_remote+0x10/0x10 [ 212.794289][ T7741] ? mmap_read_lock_maybe_expand+0xd7/0x3b0 [ 212.794309][ T7741] copy_string_kernel+0x2f9/0x5f0 [ 212.794334][ T7741] ? __pfx_copy_string_kernel+0x10/0x10 [ 212.794354][ T7741] ? alloc_bprm+0x57d/0x640 [ 212.794378][ T7741] do_execveat_common+0x7fb/0xbd0 [ 212.794398][ T7741] ? do_getname+0x151/0x250 [ 212.794415][ T7741] __x64_sys_execveat+0xc7/0xf0 [ 212.794434][ T7741] do_syscall_64+0x166/0x520 [ 212.794449][ T7741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.794466][ T7741] ? clear_bhb_loop+0x70/0xc0 [ 212.794483][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.794500][ T7741] RIP: 0033:0x7f51c6d9e1d9 [ 212.794515][ T7741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.794529][ T7741] RSP: 002b:00007f51c7cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 212.794546][ T7741] RAX: ffffffffffffffda RBX: 00007f51c7025fa0 RCX: 00007f51c6d9e1d9 [ 212.794558][ T7741] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 212.794568][ T7741] RBP: 00007f51c6e35888 R08: 0000000000001000 R09: 0000000000000000 [ 212.794578][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.794588][ T7741] R13: 00007f51c7026038 R14: 00007f51c7025fa0 R15: 00007ffd621766e8 [ 212.794613][ T7741] [ 213.200893][ T5702] usb 6-1: USB disconnect, device number 2 [ 213.454721][ T7742] fido_id[7742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 213.595011][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.595029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.787418][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.787436][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.527964][ T1397] tipc: Subscription rejected, illegal request [ 214.815784][ T7784] netlink: 64 bytes leftover after parsing attributes in process `syz.4.638'. [ 217.093132][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 217.181843][ T5702] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 217.334782][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 217.339763][ T5702] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 217.348304][ T5702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.348340][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.348361][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.348376][ T5702] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 217.348392][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.368969][ T5709] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 217.369659][ T5702] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 217.369684][ T5702] usb 2-1: Manufacturer: syz [ 217.449197][ T5702] usb 2-1: config 0 descriptor?? [ 217.543074][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 217.543754][ T5709] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.544845][ T5709] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 217.544899][ T5709] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.544917][ T5709] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.544934][ T5709] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.544951][ T5709] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.544981][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.770457][ T7813] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 217.770475][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 217.823872][ T5709] usb 5-1: usb_control_msg returned -32 [ 217.823909][ T5709] usbtmc 5-1:16.0: can't read capabilities [ 217.862907][ T5702] rc_core: IR keymap rc-hauppauge not found [ 217.862921][ T5702] Registered IR keymap rc-empty [ 217.863049][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.892788][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.912102][ T5702] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 217.939002][ T5702] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 217.969550][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.982600][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.001166][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.021262][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.041956][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.061811][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.082358][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.102532][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.122026][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.141284][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 218.168875][ T5702] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 218.168896][ T5702] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 218.222687][ T5702] usb 2-1: USB disconnect, device number 13 [ 218.404596][ T4930] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 218.858921][ T5702] usb 5-1: USB disconnect, device number 6 [ 219.006545][ T4930] Bluetooth: hci4: command tx timeout [ 219.081881][ T5709] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 219.137747][ T7839] [ 219.140327][ T7839] ====================================================== [ 219.147384][ T7839] WARNING: possible circular locking dependency detected [ 219.154425][ T7839] syzkaller #0 Tainted: G L [ 219.160509][ T7839] ------------------------------------------------------ [ 219.167546][ T7839] syz.1.652/7839 is trying to acquire lock: [ 219.173446][ T7839] ffff88803652e060 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x28f/0x1a90 [ 219.182519][ T7839] [ 219.182519][ T7839] but task is already holding lock: [ 219.189891][ T7839] ffff888027907938 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x72a/0xe80 [ 219.199648][ T7839] [ 219.199648][ T7839] which lock already depends on the new lock. [ 219.199648][ T7839] [ 219.210062][ T7839] [ 219.210062][ T7839] the existing dependency chain (in reverse order) is: [ 219.219168][ T7839] [ 219.219168][ T7839] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 219.226902][ T7839] __mutex_lock+0x197/0x15a0 [ 219.232031][ T7839] autofs_notify_daemon+0x72a/0xe80 [ 219.237758][ T7839] autofs_wait+0x11aa/0x18a0 [ 219.242868][ T7839] autofs_mount_wait+0x16b/0x390 [ 219.248332][ T7839] autofs_d_automount+0x64e/0x810 [ 219.253879][ T7839] __traverse_mounts+0x2fe/0x5d0 [ 219.259352][ T7839] step_into_slowpath+0x573/0xa20 [ 219.264897][ T7839] path_lookupat+0x433/0x8c0 [ 219.270008][ T7839] filename_lookup+0x265/0x5d0 [ 219.275293][ T7839] kern_path+0x3d/0x150 [ 219.279976][ T7839] lookup_bdev+0xc8/0x2b0 [ 219.284839][ T7839] resume_store+0x181/0x500 [ 219.289860][ T7839] kernfs_fop_write_iter+0x3a4/0x540 [ 219.295674][ T7839] vfs_write+0x612/0xba0 [ 219.300438][ T7839] ksys_write+0x150/0x270 [ 219.305285][ T7839] do_syscall_64+0x166/0x520 [ 219.310404][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.316821][ T7839] [ 219.316821][ T7839] -> #2 (&of->mutex){+.+.}-{4:4}: [ 219.324464][ T7839] __mutex_lock+0x197/0x15a0 [ 219.329581][ T7839] kernfs_seq_start+0x5d/0x420 [ 219.334864][ T7839] seq_read_iter+0x37e/0xca0 [ 219.339974][ T7839] vfs_read+0x595/0xa80 [ 219.344647][ T7839] ksys_read+0x150/0x270 [ 219.349405][ T7839] do_syscall_64+0x166/0x520 [ 219.354512][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.360939][ T7839] [ 219.360939][ T7839] -> #1 (&p->lock){+.+.}-{4:4}: [ 219.367974][ T7839] __mutex_lock+0x197/0x15a0 [ 219.373094][ T7839] seq_read_iter+0xa4/0xca0 [ 219.378114][ T7839] proc_reg_read_iter+0x1b7/0x280 [ 219.383656][ T7839] copy_splice_read+0x5ff/0xaa0 [ 219.389284][ T7839] splice_file_to_pipe+0x4ab/0x720 [ 219.394926][ T7839] do_splice+0x124a/0x19f0 [ 219.399873][ T7839] __se_sys_splice+0x353/0x490 [ 219.405183][ T7839] do_syscall_64+0x166/0x520 [ 219.410308][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.416975][ T7839] [ 219.416975][ T7839] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 219.424388][ T7839] __lock_acquire+0x164c/0x2de0 [ 219.429780][ T7839] lock_acquire+0x115/0x350 [ 219.434821][ T7839] __mutex_lock+0x197/0x15a0 [ 219.439938][ T7839] anon_pipe_write+0x28f/0x1a90 [ 219.445311][ T7839] __kernel_write_iter+0x44a/0x8f0 [ 219.450947][ T7839] __kernel_write+0x106/0x170 [ 219.456151][ T7839] autofs_notify_daemon+0x73d/0xe80 [ 219.461899][ T7839] autofs_wait+0x11aa/0x18a0 [ 219.467029][ T7839] autofs_mount_wait+0x16b/0x390 [ 219.472511][ T7839] autofs_d_automount+0x64e/0x810 [ 219.478077][ T7839] __traverse_mounts+0x2fe/0x5d0 [ 219.483733][ T7839] step_into_slowpath+0x573/0xa20 [ 219.489293][ T7839] path_lookupat+0x433/0x8c0 [ 219.494439][ T7839] filename_lookup+0x265/0x5d0 [ 219.499773][ T7839] kern_path+0x3d/0x150 [ 219.504480][ T7839] lookup_bdev+0xc8/0x2b0 [ 219.509380][ T7839] resume_store+0x181/0x500 [ 219.514550][ T7839] kernfs_fop_write_iter+0x3a4/0x540 [ 219.520367][ T7839] vfs_write+0x612/0xba0 [ 219.525132][ T7839] ksys_write+0x150/0x270 [ 219.529987][ T7839] do_syscall_64+0x166/0x520 [ 219.535113][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.541632][ T7839] [ 219.541632][ T7839] other info that might help us debug this: [ 219.541632][ T7839] [ 219.551992][ T7839] Chain exists of: [ 219.551992][ T7839] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 219.551992][ T7839] [ 219.564471][ T7839] Possible unsafe locking scenario: [ 219.564471][ T7839] [ 219.572047][ T7839] CPU0 CPU1 [ 219.577419][ T7839] ---- ---- [ 219.582879][ T7839] lock(&sbi->pipe_mutex); [ 219.587401][ T7839] lock(&of->mutex); [ 219.593913][ T7839] lock(&sbi->pipe_mutex); [ 219.600961][ T7839] lock(&pipe->mutex); [ 219.605253][ T7839] [ 219.605253][ T7839] *** DEADLOCK *** [ 219.605253][ T7839] [ 219.613407][ T7839] locks held by syz.1.652/7839: 5, last CPU#0: [ 219.619657][ T7839] #0: ffff88807e0d4ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 219.628811][ T7839] #1: ffff8880268f8460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 219.637787][ T7839] #2: ffff88807e442880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 219.647541][ T7839] #3: ffff88801fa96968 (kn->active#73){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 219.657591][ T7839] #4: ffff888027907938 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x72a/0xe80 [ 219.667879][ T7839] [ 219.667879][ T7839] stack backtrace: [ 219.673782][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.1.652 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.684635][ T7839] Tainted: [L]=SOFTLOCKUP [ 219.688954][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.699006][ T7839] Call Trace: [ 219.702283][ T7839] [ 219.705230][ T7839] dump_stack_lvl+0xe8/0x150 [ 219.709839][ T7839] print_circular_bug+0x2e2/0x300 [ 219.714887][ T7839] check_noncircular+0x12f/0x150 [ 219.719830][ T7839] __lock_acquire+0x164c/0x2de0 [ 219.724684][ T7839] ? lock_acquire+0x115/0x350 [ 219.729377][ T7839] lock_acquire+0x115/0x350 [ 219.733878][ T7839] ? anon_pipe_write+0x28f/0x1a90 [ 219.738908][ T7839] __mutex_lock+0x197/0x15a0 [ 219.743523][ T7839] ? anon_pipe_write+0x28f/0x1a90 [ 219.748549][ T7839] ? __alloc_frozen_pages_noprof+0x24a/0x400 [ 219.754543][ T7839] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.760873][ T7839] ? anon_pipe_write+0x28f/0x1a90 [ 219.765983][ T7839] ? __pfx___mutex_lock+0x10/0x10 [ 219.771020][ T7839] ? policy_nodemask+0x2cc/0x8e0 [ 219.775988][ T7839] ? __kernel_text_address+0xd/0x30 [ 219.781212][ T7839] ? alloc_pages_mpol+0x256/0x390 [ 219.786274][ T7839] anon_pipe_write+0x28f/0x1a90 [ 219.791138][ T7839] ? __pfx_hlock_conflict+0x10/0x10 [ 219.796347][ T7839] ? check_path+0x21/0x40 [ 219.800712][ T7839] ? lockdep_unlock+0x5c/0xd0 [ 219.805399][ T7839] ? __lock_acquire+0x1511/0x2de0 [ 219.810452][ T7839] ? __pfx_anon_pipe_write+0x10/0x10 [ 219.815772][ T7839] __kernel_write_iter+0x44a/0x8f0 [ 219.820922][ T7839] ? __pfx___kernel_write_iter+0x10/0x10 [ 219.826562][ T7839] ? __asan_memset+0x22/0x50 [ 219.831171][ T7839] ? iov_iter_kvec+0xb8/0x180 [ 219.835889][ T7839] __kernel_write+0x106/0x170 [ 219.840579][ T7839] ? autofs_notify_daemon+0x72a/0xe80 [ 219.845970][ T7839] ? __pfx___kernel_write+0x10/0x10 [ 219.851182][ T7839] ? from_kgid_munged+0x20a/0x6b0 [ 219.856222][ T7839] ? __pfx_from_kgid_munged+0x10/0x10 [ 219.861600][ T7839] ? autofs_d_automount+0x64e/0x810 [ 219.866812][ T7839] ? step_into_slowpath+0x573/0xa20 [ 219.872033][ T7839] ? path_lookupat+0x433/0x8c0 [ 219.876814][ T7839] ? filename_lookup+0x265/0x5d0 [ 219.881769][ T7839] ? autofs_notify_daemon+0x517/0xe80 [ 219.887249][ T7839] autofs_notify_daemon+0x73d/0xe80 [ 219.893079][ T7839] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 219.898822][ T7839] ? __raw_spin_lock_init+0x45/0x100 [ 219.904113][ T7839] ? autofs_wait+0xe17/0x18a0 [ 219.908807][ T7839] autofs_wait+0x11aa/0x18a0 [ 219.913413][ T7839] ? __pfx_autofs_wait+0x10/0x10 [ 219.918383][ T7839] ? do_raw_spin_unlock+0xf5/0x200 [ 219.923528][ T7839] autofs_mount_wait+0x16b/0x390 [ 219.928491][ T7839] autofs_d_automount+0x64e/0x810 [ 219.933560][ T7839] __traverse_mounts+0x2fe/0x5d0 [ 219.938565][ T7839] step_into_slowpath+0x573/0xa20 [ 219.943616][ T7839] ? __pfx_step_into_slowpath+0x10/0x10 [ 219.949184][ T7839] ? lookup_slow+0x64/0x80 [ 219.953618][ T7839] path_lookupat+0x433/0x8c0 [ 219.958326][ T7839] filename_lookup+0x265/0x5d0 [ 219.963115][ T7839] ? __pfx_filename_lookup+0x10/0x10 [ 219.968434][ T7839] ? do_getname_kernel+0x54/0x230 [ 219.973670][ T7839] ? do_getname_kernel+0x97/0x230 [ 219.978721][ T7839] ? __asan_memcpy+0x40/0x70 [ 219.983322][ T7839] ? do_getname_kernel+0x183/0x230 [ 219.988457][ T7839] kern_path+0x3d/0x150 [ 219.992633][ T7839] lookup_bdev+0xc8/0x2b0 [ 219.996974][ T7839] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 220.003573][ T7839] ? resume_store+0x160/0x500 [ 220.008278][ T7839] ? __pfx_lookup_bdev+0x10/0x10 [ 220.013239][ T7839] ? __asan_memcpy+0x40/0x70 [ 220.017833][ T7839] ? kstrndup+0xbd/0x160 [ 220.022087][ T7839] resume_store+0x181/0x500 [ 220.026603][ T7839] ? sysfs_file_kobj+0x1a/0x230 [ 220.031463][ T7839] ? __pfx_resume_store+0x10/0x10 [ 220.036508][ T7839] ? sysfs_file_kobj+0x1a/0x230 [ 220.041360][ T7839] ? sysfs_file_kobj+0x1a/0x230 [ 220.046210][ T7839] ? sysfs_file_kobj+0x1a/0x230 [ 220.051070][ T7839] ? sysfs_file_kobj+0x1e4/0x230 [ 220.056200][ T7839] ? sysfs_kf_write+0x166/0x260 [ 220.061069][ T7839] ? __pfx_sysfs_kf_write+0x10/0x10 [ 220.066267][ T7839] kernfs_fop_write_iter+0x3a4/0x540 [ 220.071659][ T7839] vfs_write+0x612/0xba0 [ 220.075924][ T7839] ? __pfx_vfs_write+0x10/0x10 [ 220.080710][ T7839] ? __fget_files+0x3a2/0x420 [ 220.085399][ T7839] ? __fget_files+0x2a/0x420 [ 220.089990][ T7839] ? fdget+0x1ac/0x250 [ 220.094060][ T7839] ksys_write+0x150/0x270 [ 220.098394][ T7839] ? __pfx_ksys_write+0x10/0x10 [ 220.103252][ T7839] do_syscall_64+0x166/0x520 [ 220.107849][ T7839] ? trace_irq_disable+0x3b/0x140 [ 220.112877][ T7839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.119033][ T7839] ? clear_bhb_loop+0x70/0xc0 [ 220.123822][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.129717][ T7839] RIP: 0033:0x7f297e79e1d9 [ 220.134220][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.153837][ T7839] RSP: 002b:00007f297f5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.162257][ T7839] RAX: ffffffffffffffda RBX: 00007f297ea25fa0 RCX: 00007f297e79e1d9 [ 220.170254][ T7839] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 000000000000000b [ 220.178226][ T7839] RBP: 00007f297e835888 R08: 0000000000000000 R09: 0000000000000000 [ 220.186201][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.194260][ T7839] R13: 00007f297ea26038 R14: 00007f297ea25fa0 R15: 00007fff690f9058 [ 220.202245][ T7839] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.847737][ T1440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.967925][ T5709] usb 6-1: device descriptor read/all, error -71 [ 221.043294][ T1440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.096658][ T1440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.147043][ T1440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.252617][ T1440] bridge_slave_1: left allmulticast mode [ 221.252635][ T1440] bridge_slave_1: left promiscuous mode [ 221.252749][ T1440] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.253837][ T1440] bridge_slave_0: left allmulticast mode [ 221.253851][ T1440] bridge_slave_0: left promiscuous mode [ 221.253942][ T1440] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.345212][ T7839] PM: Image not found (code -6) [ 221.476303][ T1440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.490796][ T1440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.503930][ T1440] bond0 (unregistering): Released all slaves [ 221.544146][ T1440] tipc: Left network mode [ 221.623450][ T1440] hsr_slave_0: left promiscuous mode [ 221.623761][ T1440] hsr_slave_1: left promiscuous mode [ 221.624150][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.624162][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.624542][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.624554][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.676172][ T1440] veth1_macvtap: left promiscuous mode [ 221.676195][ T1440] veth0_macvtap: left promiscuous mode [ 221.676248][ T1440] veth1_vlan: left promiscuous mode [ 221.676280][ T1440] veth0_vlan: left promiscuous mode [ 222.086354][ T1440] team0 (unregistering): Port device team_slave_1 removed [ 222.100902][ T1440] team0 (unregistering): Port device team_slave_0 removed [ 222.324032][ T1440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.383228][ T1440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.406351][ T1440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.467345][ T1440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.594001][ T1440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.637275][ T1440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.677849][ T1440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.715237][ T1440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.826661][ T1440] bridge_slave_1: left allmulticast mode [ 222.826681][ T1440] bridge_slave_1: left promiscuous mode [ 222.826807][ T1440] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.827869][ T1440] bridge_slave_0: left allmulticast mode [ 222.827896][ T1440] bridge_slave_0: left promiscuous mode [ 222.862588][ T1440] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.879522][ T1440] bridge_slave_1: left allmulticast mode [ 222.879543][ T1440] bridge_slave_1: left promiscuous mode [ 222.879648][ T1440] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.880711][ T1440] bridge_slave_0: left allmulticast mode [ 222.880725][ T1440] bridge_slave_0: left promiscuous mode [ 222.880863][ T1440] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.077781][ T1440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.080062][ T1440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.080895][ T1440] bond0 (unregistering): Released all slaves [ 223.169012][ T1440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.170137][ T1440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.170859][ T1440] bond0 (unregistering): Released all slaves [ 223.204656][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 223.255954][ T1440] tipc: Left network mode [ 223.390087][ T1440] hsr_slave_0: left promiscuous mode [ 223.390423][ T1440] hsr_slave_1: left promiscuous mode [ 223.406791][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.406818][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.408539][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.408553][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.443346][ T1440] hsr_slave_0: left promiscuous mode [ 223.443660][ T1440] hsr_slave_1: left promiscuous mode [ 223.444041][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.444054][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.444434][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.444446][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.497911][ T1440] veth1_macvtap: left promiscuous mode [ 223.497935][ T1440] veth0_macvtap: left promiscuous mode [ 223.497982][ T1440] veth1_vlan: left promiscuous mode [ 223.498026][ T1440] veth0_vlan: left promiscuous mode [ 223.500008][ T1440] veth1_macvtap: left promiscuous mode [ 223.500027][ T1440] veth0_macvtap: left promiscuous mode [ 223.500073][ T1440] veth1_vlan: left promiscuous mode [ 223.500105][ T1440] veth0_vlan: left promiscuous mode [ 223.838472][ T1440] team0 (unregistering): Port device team_slave_1 removed [ 223.858010][ T1440] team0 (unregistering): Port device team_slave_0 removed [ 224.017591][ T1440] team0 (unregistering): Port device team_slave_1 removed [ 224.030516][ T1440] team0 (unregistering): Port device team_slave_0 removed [ 224.096000][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 224.345522][ T1440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.379559][ T1440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.410672][ T1440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.446356][ T1440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.554510][ T1440] bridge_slave_1: left allmulticast mode [ 224.554530][ T1440] bridge_slave_1: left promiscuous mode [ 224.554642][ T1440] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.555776][ T1440] bridge_slave_0: left allmulticast mode [ 224.555790][ T1440] bridge_slave_0: left promiscuous mode [ 224.555883][ T1440] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.696700][ T1440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.697955][ T1440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.698702][ T1440] bond0 (unregistering): Released all slaves [ 224.841784][ T1440] hsr_slave_0: left promiscuous mode [ 224.842276][ T1440] hsr_slave_1: left promiscuous mode [ 224.842659][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.842672][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.843055][ T1440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.843067][ T1440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.847036][ T1440] veth1_macvtap: left promiscuous mode [ 224.847065][ T1440] veth0_macvtap: left promiscuous mode [ 224.847114][ T1440] veth1_vlan: left promiscuous mode [ 224.847153][ T1440] veth0_vlan: left promiscuous mode [ 225.047458][ T1440] team0 (unregistering): Port device team_slave_1 removed [ 225.058675][ T1440] team0 (unregistering): Port device team_slave_0 removed [ 225.120529][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 225.495637][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 225.765356][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13 [ 226.036946][ T5275] 8021q: adding VLAN 0 to HW filter on device eth14 [ 226.315307][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15 [ 226.588942][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16 [ 226.866333][ T5275] 8021q: adding VLAN 0 to HW filter on device eth17 [ 227.143129][ T5275] 8021q: adding VLAN 0 to HW filter on device eth18 [ 227.424952][ T5275] 8021q: adding VLAN 0 to HW filter on device eth19 [ 227.699783][ T5275] 8021q: adding VLAN 0 to HW filter on device eth20 [ 227.976219][ T5275] 8021q: adding VLAN 0 to HW filter on device eth21 [ 228.254459][ T5275] 8021q: adding VLAN 0 to HW filter on device eth23 [ 228.576795][ T5275] 8021q: adding VLAN 0 to HW filter on device eth22 [ 228.857403][ T5275] 8021q: adding VLAN 0 to HW filter on device eth24