last executing test programs: 3m50.998152458s ago: executing program 32 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x1000) 3m27.567419749s ago: executing program 4 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, r0, 0x17b46000) socket$vsock_stream(0x28, 0x1, 0x0) 3m27.279902755s ago: executing program 4 (id=471): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000080)=0x101, 0x4) write(r0, 0x0, 0x0) 3m27.219259598s ago: executing program 4 (id=473): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x7c, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x64, 0xe8, 0x4b, 0x20, 0xd46, 0x78, 0xd7cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x8, 0x4, 0x40, 0x7, "", [{{0x9, 0x4, 0xba, 0xa, 0x1, 0x39, 0x9e, 0x32, 0xa, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x13b8, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0xffff, 0x4}}], [{{0x9, 0x5, 0xb, 0x3, 0x40, 0xf8, 0x3, 0x7}}]}}, {{0x9, 0x4, 0x3, 0x4, 0x1, 0x17, 0xe5, 0x9, 0x1, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x20, 0x80}}]}}, {{0x9, 0x4, 0x4d, 0x60, 0x0, 0x2, 0x6, 0x0, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7280, 0x9, 0xb}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 3m25.836236811s ago: executing program 4 (id=484): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 3m25.37516209s ago: executing program 4 (id=488): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0xfffe, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xffffffff, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000340)=[{0x3a, '\x00', @buffer={"cb067c186f2c14951da1a999f56255000000080000000000000200", 0x20}, 0x7}]}) 3m24.241901221s ago: executing program 4 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x597e, 0xffffffff, 0x0, {0x5, 0x2000000000000000, 0xbdd6, 0xa, 0x10000, 0x8, 0x9d1f, 0x5, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x5, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 3m24.07067749s ago: executing program 33 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x597e, 0xffffffff, 0x0, {0x5, 0x2000000000000000, 0xbdd6, 0xa, 0x10000, 0x8, 0x9d1f, 0x5, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x5, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 2m50.512122132s ago: executing program 0 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f646d00"/312) ioctl(r0, 0xc138fd09, &(0x7f0000000200)="040000003200000000000000680100003801000001000000000000000000000000000000000000000000000000000000746573745f646d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000300000007a65726f00"/360) ioctl(r0, 0xc138fd06, &(0x7f0000000200)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f646d00"/312) 2m50.364704473s ago: executing program 0 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x0, @val=0x80}}}}}}}}, 0x36) 2m50.163078818s ago: executing program 0 (id=776): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000013c0)={[{}]}) 2m48.678460429s ago: executing program 5 (id=770): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffff00, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x40018) 2m47.806841743s ago: executing program 0 (id=772): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r3, @in={{0x2, 0x4e24, @empty}}, 0xe, 0x38f}, &(0x7f0000000340)=0x90) 2m47.753817794s ago: executing program 5 (id=773): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 2m47.623952551s ago: executing program 0 (id=774): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 2m47.602298498s ago: executing program 5 (id=775): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m47.507494009s ago: executing program 5 (id=777): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x48) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 2m47.359636802s ago: executing program 0 (id=779): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 2m47.261630911s ago: executing program 5 (id=780): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2m46.618337757s ago: executing program 5 (id=783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="bd3bc8ddb6bd37e3b08f1d8310cf3734ddd61fb1c265a82f9a16211fccbf82004b63feeb3ccafd195a6bbc5a56bfa6af8d59e4b57d536acd3ba2a5eaeb8997c9a57e196947b4eab55f5925ebd11db723b6c75e2429e41d45540b5c6f21120354cd711847358efb1bac722e79c7a1f21aa1aa5a12b418e28867f0c7c43fea7dee", 0x80}], 0x1, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001) 2m46.083237393s ago: executing program 34 (id=783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="bd3bc8ddb6bd37e3b08f1d8310cf3734ddd61fb1c265a82f9a16211fccbf82004b63feeb3ccafd195a6bbc5a56bfa6af8d59e4b57d536acd3ba2a5eaeb8997c9a57e196947b4eab55f5925ebd11db723b6c75e2429e41d45540b5c6f21120354cd711847358efb1bac722e79c7a1f21aa1aa5a12b418e28867f0c7c43fea7dee", 0x80}], 0x1, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001) 2m32.319900971s ago: executing program 35 (id=779): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 2m27.493514304s ago: executing program 6 (id=877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8) 2m27.251217427s ago: executing program 6 (id=879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001740)}], 0x1, 0x1) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f005c0000000000000100003c"], 0x6a) 2m26.904519426s ago: executing program 6 (id=882): signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0xc0800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 2m26.837125137s ago: executing program 6 (id=883): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000280)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 2m26.721506059s ago: executing program 6 (id=884): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 2m24.628359376s ago: executing program 6 (id=906): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 2m8.741081417s ago: executing program 36 (id=906): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 1m15.540055505s ago: executing program 8 (id=1407): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0xb2) r1 = fanotify_init(0xf00, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) 1m15.326640426s ago: executing program 8 (id=1408): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) close(0x3) write$ppp(r1, &(0x7f0000000400)="bf58", 0x2) 1m15.144597235s ago: executing program 8 (id=1410): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x24044000}, 0x1) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1m14.654015842s ago: executing program 8 (id=1413): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x950d3, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 1m14.475751151s ago: executing program 8 (id=1415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x400006, 0xffffffffffffffff, 0x1}) 1m12.944547887s ago: executing program 8 (id=1425): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0xa) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m12.412815514s ago: executing program 37 (id=1425): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0xa) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 43.94267799s ago: executing program 9 (id=1723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="660f3880b6e1b7c12b660f3880080f78ace31b000000d8503a640f063e0f22a566f30f11eeb972080000b807000000ba000000000f30f3666436dcf2643e0f840d000000", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.664810281s ago: executing program 9 (id=1728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000e80)={"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"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) 43.312457381s ago: executing program 9 (id=1735): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002a40)="8e", 0x1}], 0x1}}], 0x4, 0x40488c1) close(0x4) 43.236133879s ago: executing program 9 (id=1736): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 42.879571969s ago: executing program 9 (id=1742): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x4000000) 42.751052742s ago: executing program 9 (id=1744): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 27.68672055s ago: executing program 38 (id=1744): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 9.062399704s ago: executing program 7 (id=2090): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xdf3}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x301}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = dup(r1) syz_ublk_setup_queues(r5, r0, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) 8.605915662s ago: executing program 7 (id=2097): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2, 0x0, r0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3f, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.173333967s ago: executing program 7 (id=2139): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000740)={0x20, 0xf, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.808089533s ago: executing program 3 (id=2171): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0xe9, 0x9, 0x7}]}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001840)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff"], 0x8) 2.761615294s ago: executing program 3 (id=2172): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) 2.712972718s ago: executing program 3 (id=2173): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000359000/0xa000)=nil, 0x400000, 0x2, 0x2}) 2.603217382s ago: executing program 3 (id=2174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0) 2.044461048s ago: executing program 7 (id=2181): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.743945241s ago: executing program 3 (id=2188): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x88441, 0x191) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) setfsuid(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r2, 0x3, 0x80000}) 1.717087882s ago: executing program 2 (id=2189): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\r\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.601223102s ago: executing program 1 (id=2190): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002f00090028bd70000100002504"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x24000000) 1.156052995s ago: executing program 1 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d3", 0x31, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="04") 1.155856403s ago: executing program 7 (id=2192): openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='&`', 0x2) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e20, 0x8, @mcast2, 0x10001}}, 0x0, 0x0, 0x13, 0x0, "baff6a405fdf9f15e3766078d1a3a9f7f581f977c91134e2a2a26dd75697945756f7942c88123ba952205ba27fab49b513072ed55794ceebefffe8d9945b4600efcbaaa6a996e9db3c2c0c94ed2e253c"}, 0xd8) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 1.06061995s ago: executing program 2 (id=2193): unshare(0x20020480) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) unshare(0x42040280) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0}) 991.592576ms ago: executing program 1 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc020662a, 0x0) 495.650806ms ago: executing program 1 (id=2195): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000005}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x100, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 495.42115ms ago: executing program 3 (id=2196): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 477.460373ms ago: executing program 2 (id=2197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000600)='ping', 0x4, 0x0, &(0x7f0000000700)={0xa, 0x5000, 0x0, @loopback}, 0x1c) 343.463321ms ago: executing program 2 (id=2198): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x5, &(0x7f0000000080)={0x0, 0x10, 0x6}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) 268.038965ms ago: executing program 7 (id=2199): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618c, &(0x7f0000000000)) 267.786424ms ago: executing program 1 (id=2200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 152.640341ms ago: executing program 2 (id=2201): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x3) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997faf6) read$FUSE(r0, 0x0, 0x0) 1.02001ms ago: executing program 2 (id=2202): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) 0s ago: executing program 1 (id=2210): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, 0x0}}], 0x1, 0x48094) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) landlock_restrict_self(r0, 0x8) kernel console output (not intermixed with test programs): ad [000a]: -32 [ 247.030925][ T9327] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 247.307221][ T5716] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 247.307254][ T5716] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.311692][ T9327] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 247.313941][ T9327] pl2303 ttyUSB0: error sending break = -32 [ 247.315547][ T9331] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -32 [ 247.329624][ T5687] usb 4-1: USB disconnect, device number 31 [ 247.370010][ T9331] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 247.370098][ T9331] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 247.370218][ T9331] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 247.370250][ T9331] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 247.391738][ T5687] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 247.399839][ T5687] pl2303 4-1:1.0: device disconnected [ 248.112662][ T5716] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 248.112918][ T5716] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 248.147228][ T5716] usb 9-1: USB disconnect, device number 2 [ 248.298991][ T9351] syzkaller1: entered promiscuous mode [ 248.299007][ T9351] syzkaller1: entered allmulticast mode [ 248.965910][ T5716] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 249.117935][ T5716] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 249.119208][ T5716] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.119286][ T5716] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 249.121719][ T5716] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.121743][ T5716] usb 9-1: Product: syz [ 249.121759][ T5716] usb 9-1: Manufacturer: syz [ 249.121783][ T5716] usb 9-1: SerialNumber: syz [ 249.183307][ T5716] cdc_mbim 9-1:1.0: skipping garbage [ 249.369189][ T9363] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 249.413031][ T1559] usb 3-1: USB disconnect, device number 26 [ 249.450791][ T1559] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 249.452095][ T1559] spcp8x5 3-1:1.0: device disconnected [ 249.782536][ T5753] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 249.927664][ T5753] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 249.929466][ T5753] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 249.929500][ T5753] usb 4-1: config 0 interface 0 has no altsetting 0 [ 249.931513][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 249.931541][ T5753] usb 4-1: Product: syz [ 249.931558][ T5753] usb 4-1: Manufacturer: syz [ 249.931575][ T5753] usb 4-1: SerialNumber: syz [ 249.934399][ T5753] usb 4-1: config 0 descriptor?? [ 249.963792][ T5753] usb 4-1: selecting invalid altsetting 0 [ 250.000626][ T9363] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 250.001154][ T5716] cdc_mbim 9-1:1.0: setting rx_max = 16384 [ 250.030886][ T5687] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 250.180386][ T5687] usb 3-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 250.182225][ T5687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.182271][ T5687] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 250.182313][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.230728][ T5716] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 250.243326][ T5716] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 250.276329][ T5753] usb 4-1: USB disconnect, device number 32 [ 250.327101][ T5716] wwan wwan0: port wwan0mbim0 attached [ 250.391334][ T5716] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, a6:75:ed:87:0e:bc [ 250.479283][ T5687] ttusb_dec_send_command: command bulk message failed: error -71 [ 250.479514][ T5687] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -71 [ 250.502555][ T5019] usb 9-1: USB disconnect, device number 3 [ 250.521349][ T5019] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 250.529988][ T5687] usb 3-1: USB disconnect, device number 27 [ 250.638023][ T5019] wwan wwan0: port wwan0mbim0 disconnected [ 251.971563][ T9449] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.976348][ T1559] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 252.136703][ T1559] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 252.137714][ T1559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.145061][ T1559] usb 4-1: config 0 descriptor?? [ 252.369111][ T1559] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 252.613062][ T1559] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 252.613086][ T1559] [drm] Initialized udl on minor 1 [ 254.003319][ T9494] FAULT_INJECTION: forcing a failure. [ 254.003319][ T9494] name failslab, interval 1, probability 0, space 0, times 0 [ 254.003353][ T9494] CPU: 1 UID: 0 PID: 9494 Comm: syz.7.1116 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 254.003395][ T9494] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 254.003404][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.003417][ T9494] Call Trace: [ 254.003425][ T9494] [ 254.003435][ T9494] dump_stack_lvl+0xe8/0x150 [ 254.003467][ T9494] should_fail_ex+0x3eb/0x540 [ 254.003494][ T9494] should_failslab+0xa8/0x100 [ 254.003526][ T9494] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 254.003554][ T9494] ? kobject_set_name_vargs+0x61/0x110 [ 254.003582][ T9494] ? kobject_set_name_vargs+0x61/0x110 [ 254.003618][ T9494] kstrdup+0x42/0x100 [ 254.003641][ T9494] kobject_set_name_vargs+0x61/0x110 [ 254.003674][ T9494] kobject_init_and_add+0xee/0x1a0 [ 254.003703][ T9494] ? rcu_is_watching+0x16/0xb0 [ 254.003734][ T9494] ? __pfx_kobject_init_and_add+0x10/0x10 [ 254.003766][ T9494] ? __raw_spin_lock_init+0x45/0x100 [ 254.003805][ T9494] bus_add_driver+0x255/0x670 [ 254.003838][ T9494] driver_register+0x23a/0x320 [ 254.003863][ T9494] usb_gadget_register_driver_owner+0xf9/0x270 [ 254.003899][ T9494] raw_ioctl+0x1541/0x41c0 [ 254.003931][ T9494] ? tomoyo_path_number_perm+0x219/0x5f0 [ 254.003967][ T9494] ? do_vfs_ioctl+0x116f/0x1530 [ 254.003999][ T9494] ? __pfx_raw_ioctl+0x10/0x10 [ 254.004055][ T9494] ? __fget_files+0x2a/0x420 [ 254.004081][ T9494] ? __fget_files+0x2a/0x420 [ 254.004104][ T9494] ? __fget_files+0x2a/0x420 [ 254.004131][ T9494] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.004158][ T9494] ? __pfx_raw_ioctl+0x10/0x10 [ 254.004181][ T9494] __se_sys_ioctl+0xfc/0x170 [ 254.004212][ T9494] do_syscall_64+0x166/0x520 [ 254.004236][ T9494] ? trace_irq_disable+0x3b/0x140 [ 254.004262][ T9494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.004285][ T9494] ? clear_bhb_loop+0x70/0xc0 [ 254.004356][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.004386][ T9494] RIP: 0033:0x7fd36b79ddeb [ 254.004407][ T9494] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 254.004428][ T9494] RSP: 002b:00007fd36c5b8f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.004454][ T9494] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd36b79ddeb [ 254.004471][ T9494] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 254.004485][ T9494] RBP: 00007fd36c5b9fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 254.004501][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.004514][ T9494] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.004545][ T9494] [ 254.017909][ T9494] kobject: can not set name properly! [ 254.017990][ T9494] UDC core: USB Raw Gadget: driver registration failed: -12 [ 254.018037][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 254.785255][ T9512] FAULT_INJECTION: forcing a failure. [ 254.785255][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 254.785293][ T9512] CPU: 1 UID: 0 PID: 9512 Comm: syz.2.1125 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 254.785327][ T9512] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 254.785337][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.785351][ T9512] Call Trace: [ 254.785360][ T9512] [ 254.785370][ T9512] dump_stack_lvl+0xe8/0x150 [ 254.785404][ T9512] should_fail_ex+0x3eb/0x540 [ 254.785435][ T9512] should_failslab+0xa8/0x100 [ 254.785470][ T9512] __kmalloc_cache_noprof+0x9e/0x600 [ 254.785497][ T9512] ? __kmalloc_cache_noprof+0x148/0x600 [ 254.785521][ T9512] ? assoc_array_insert+0x417/0x2f60 [ 254.785546][ T9512] ? assoc_array_insert+0x417/0x2f60 [ 254.785580][ T9512] assoc_array_insert+0x417/0x2f60 [ 254.785622][ T9512] ? down_write+0x166/0x200 [ 254.785662][ T9512] __key_link_begin+0xd6/0x1f0 [ 254.785692][ T9512] key_link+0xdd/0x360 [ 254.785724][ T9512] call_sbin_request_key+0x413/0xbf0 [ 254.785759][ T9512] ? request_key_auth_free_preparse+0x9/0x10 [ 254.785806][ T9512] ? __pfx_call_sbin_request_key+0x10/0x10 [ 254.785848][ T9512] ? do_raw_spin_unlock+0xf5/0x200 [ 254.785918][ T9512] ? __pfx_request_key_auth_new+0x10/0x10 [ 254.785956][ T9512] request_key_and_link+0xefa/0x1580 [ 254.785990][ T9512] ? key_task_permission+0x3b8/0x500 [ 254.786031][ T9512] ? __pfx_request_key_and_link+0x10/0x10 [ 254.786087][ T9512] ? __pfx_key_default_cmp+0x10/0x10 [ 254.786111][ T9512] ? __pfx_keyring_search_iterator+0x10/0x10 [ 254.786141][ T9512] ? down_read+0x2b9/0x320 [ 254.786167][ T9512] ? _copy_from_user+0x94/0xb0 [ 254.786197][ T9512] __se_sys_request_key+0x29a/0x350 [ 254.786230][ T9512] ? __pfx___se_sys_request_key+0x10/0x10 [ 254.786272][ T9512] do_syscall_64+0x166/0x520 [ 254.786296][ T9512] ? trace_irq_disable+0x3b/0x140 [ 254.786322][ T9512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.786344][ T9512] ? clear_bhb_loop+0x70/0xc0 [ 254.786371][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.786393][ T9512] RIP: 0033:0x7f1bed79e159 [ 254.786413][ T9512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.786432][ T9512] RSP: 002b:00007f1bee65c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 254.786454][ T9512] RAX: ffffffffffffffda RBX: 00007f1beda25fa0 RCX: 00007f1bed79e159 [ 254.786471][ T9512] RDX: 0000200000001fee RSI: 0000200000000240 RDI: 0000200000000040 [ 254.786486][ T9512] RBP: 00007f1bed83506b R08: 0000000000000000 R09: 0000000000000000 [ 254.786500][ T9512] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 254.786514][ T9512] R13: 00007f1beda26038 R14: 00007f1beda25fa0 R15: 00007ffc191445c8 [ 254.786549][ T9512] [ 255.786141][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.786199][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.235928][ T5709] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 256.386480][ T5709] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 256.388493][ T5709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.602316][ T5709] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 257.697550][ T1559] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 257.701570][ T1559] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 257.721641][ T1559] usb 4-1: USB disconnect, device number 33 [ 257.728796][ T5709] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 257.729506][ T5709] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 258.187103][ T1559] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 258.233547][ T9595] FAULT_INJECTION: forcing a failure. [ 258.233547][ T9595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.233569][ T9595] CPU: 1 UID: 0 PID: 9595 Comm: syz.2.1153 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 258.233589][ T9595] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 258.233595][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.233622][ T9595] Call Trace: [ 258.233629][ T9595] [ 258.233639][ T9595] dump_stack_lvl+0xe8/0x150 [ 258.233667][ T9595] should_fail_ex+0x3eb/0x540 [ 258.233698][ T9595] _copy_from_user+0x2d/0xb0 [ 258.233717][ T9595] video_usercopy+0x359/0x1430 [ 258.233742][ T9595] ? do_futex+0x3e7/0x4e0 [ 258.233780][ T9595] ? __pfx___video_do_ioctl+0x10/0x10 [ 258.233812][ T9595] ? __pfx_video_usercopy+0x10/0x10 [ 258.233855][ T9595] ? __fget_files+0x2a/0x420 [ 258.233872][ T9595] ? __fget_files+0x2a/0x420 [ 258.233888][ T9595] v4l2_ioctl+0x18d/0x1e0 [ 258.233921][ T9595] ? __pfx_v4l2_ioctl+0x10/0x10 [ 258.233949][ T9595] __se_sys_ioctl+0xfc/0x170 [ 258.233978][ T9595] do_syscall_64+0x166/0x520 [ 258.234000][ T9595] ? trace_irq_disable+0x3b/0x140 [ 258.234021][ T9595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.234037][ T9595] ? clear_bhb_loop+0x70/0xc0 [ 258.234053][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.234081][ T9595] RIP: 0033:0x7f1bed79e159 [ 258.234099][ T9595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.234116][ T9595] RSP: 002b:00007f1bee65c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.234136][ T9595] RAX: ffffffffffffffda RBX: 00007f1beda25fa0 RCX: 00007f1bed79e159 [ 258.234150][ T9595] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 258.234166][ T9595] RBP: 00007f1bed83506b R08: 0000000000000000 R09: 0000000000000000 [ 258.234175][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.234183][ T9595] R13: 00007f1beda26038 R14: 00007f1beda25fa0 R15: 00007ffc191445c8 [ 258.234204][ T9595] [ 258.456754][ T1559] usb 4-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 258.457929][ T1559] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.457975][ T1559] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 258.458045][ T1559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.679778][ T1559] ttusb_dec_send_command: command bulk message failed: error -71 [ 258.680063][ T1559] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -71 [ 258.685066][ T1559] usb 4-1: USB disconnect, device number 34 [ 258.876053][ T5687] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 259.028620][ T5687] usb 3-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 259.032485][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.032518][ T5687] usb 3-1: Product: syz [ 259.032535][ T5687] usb 3-1: Manufacturer: syz [ 259.032552][ T5687] usb 3-1: SerialNumber: syz [ 259.465435][ T5687] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 259.847607][ T5709] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 259.874841][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1168'. [ 259.996019][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 259.997839][ T5709] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 259.999042][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.999076][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.002543][ T5709] usb 4-1: config 0 descriptor?? [ 260.051039][ T5709] hub 4-1:0.0: USB hub found [ 260.212020][ T5709] hub 4-1:0.0: 1 port detected [ 261.023931][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.030439][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.238640][ T1559] usb 4-1: USB disconnect, device number 35 [ 261.641452][ T1559] usb 3-1: USB disconnect, device number 28 [ 261.659450][ T1559] usblp0: removed [ 261.974561][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1177'. [ 262.104626][ T9] usb 9-1: USB disconnect, device number 4 [ 262.838462][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 262.989355][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 262.990209][ T9] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.991788][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 262.991840][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.991865][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.991891][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.991917][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.991960][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.218040][ T1559] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 263.234737][ T9] usb 9-1: usb_control_msg returned -32 [ 263.234796][ T9] usbtmc 9-1:16.0: can't read capabilities [ 263.368259][ T1559] usb 3-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 263.369878][ T1559] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.369906][ T1559] usb 3-1: config 0 has no interface number 0 [ 263.375344][ T1559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.375382][ T1559] usb 3-1: Product: syz [ 263.375399][ T1559] usb 3-1: Manufacturer: syz [ 263.375415][ T1559] usb 3-1: SerialNumber: syz [ 263.428268][ T1559] usb 3-1: config 0 descriptor?? [ 263.644441][ T1559] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 263.668848][ T1559] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.669095][ T1559] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 263.669134][ T1559] usb 3-1: media controller created [ 263.744765][ T1559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.019121][ T9707] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 264.072118][ T1559] usb 3-1: USB disconnect, device number 29 [ 264.220237][ T5709] usb 9-1: USB disconnect, device number 5 [ 264.859392][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1197'. [ 265.177971][ T5687] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 265.215349][ T5687] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 265.473104][ T5687] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 265.497875][ T32] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 265.950031][ T9754] ceph: No mds server is up or the cluster is laggy [ 265.961749][ T9748] ceph: No mds server is up or the cluster is laggy [ 266.012277][ T5687] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 266.041335][ T32] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 266.218732][ T32] usb 3-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.40 [ 266.246507][ T32] usb 3-1: config 1 interface 0 has no altsetting 0 [ 266.263248][ T32] usb 3-1: string descriptor 0 read error: -22 [ 266.263381][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.852966][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853002][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853028][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853053][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853078][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853103][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853128][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853154][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853177][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 266.853203][ T32] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 267.024030][ T32] razer 0003:1532:010D.0018: hidraw0: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0 [ 267.249545][ T9] usb 3-1: USB disconnect, device number 30 [ 267.955921][ T9] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 268.112233][ T9] usb 9-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 268.119445][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.119519][ T9] usb 9-1: Product: syz [ 268.119562][ T9] usb 9-1: Manufacturer: syz [ 268.119604][ T9] usb 9-1: SerialNumber: syz [ 268.613350][ T9] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 269.485946][ T5687] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 269.649229][ T5687] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.649730][ T5687] usb 3-1: not running at top speed; connect to a high speed hub [ 269.649762][ T5687] usb 3-1: New USB device found: idVendor=046d, idProduct=c283, bcdDevice=0.40 [ 269.650749][ T5687] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.650780][ T5687] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.650803][ T5687] usb 3-1: config 1 interface 0 has no altsetting 0 [ 269.653790][ T5687] usb 3-1: string descriptor 0 read error: -22 [ 269.653911][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.185107][ T5687] input: HID 046d:c283 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C283.0019/input/input28 [ 270.269028][ T5687] logitech 0003:046D:C283.0019: offset (39) exceeds report_count (19) [ 270.269159][ T5687] logitech 0003:046D:C283.0019: offset (25) exceeds report_count (19) [ 270.370370][ T5687] logitech 0003:046D:C283.0019: input,hidraw0: USB HID v0.0a Keyboard [HID 046d:c283] on usb-dummy_hcd.2-1/input0 [ 270.370530][ T5687] hid_logitech: Force feedback for Logitech force feedback devices by Johann Deneux [ 270.404841][ T5687] usb 3-1: USB disconnect, device number 31 [ 270.489700][ T9836] fido_id[9836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 270.726811][ T5687] usb 9-1: USB disconnect, device number 6 [ 270.752173][ T5687] usblp0: removed [ 271.429036][ T5709] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 271.578179][ T5709] usb 9-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 271.579338][ T5709] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.579391][ T5709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.626438][ T5709] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 271.626680][ T5709] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 271.626775][ T5709] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 271.645093][ T5709] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 271.645407][ T5709] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 271.671920][ T5709] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 271.696861][ T5709] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 271.696976][ T5709] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 271.714043][ T5709] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 272.152783][ T32] usb 9-1: USB disconnect, device number 7 [ 272.168280][ T32] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 272.198870][ T32] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 272.201030][ T32] keyspan 9-1:1.0: device disconnected [ 272.720687][ T9901] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 272.942443][ T9913] FAULT_INJECTION: forcing a failure. [ 272.942443][ T9913] name failslab, interval 1, probability 0, space 0, times 0 [ 272.942498][ T9913] CPU: 1 UID: 0 PID: 9913 Comm: syz.3.1258 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 272.942522][ T9913] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 272.942528][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.942538][ T9913] Call Trace: [ 272.942545][ T9913] [ 272.942560][ T9913] dump_stack_lvl+0xe8/0x150 [ 272.942587][ T9913] should_fail_ex+0x3eb/0x540 [ 272.942610][ T9913] should_failslab+0xa8/0x100 [ 272.942665][ T9913] ? fcntl_setlk+0xa9/0x1060 [ 272.942695][ T9913] kmem_cache_alloc_noprof+0x9c/0x600 [ 272.942721][ T9913] ? fcntl_setlk+0xa9/0x1060 [ 272.942753][ T9913] fcntl_setlk+0xa9/0x1060 [ 272.942786][ T9913] ? lock_acquire+0x115/0x350 [ 272.942807][ T9913] ? __pfx_fcntl_setlk+0x10/0x10 [ 272.942831][ T9913] ? __might_fault+0xaf/0x130 [ 272.942860][ T9913] do_fcntl+0x94c/0x1a20 [ 272.942883][ T9913] ? lock_acquire+0x115/0x350 [ 272.942900][ T9913] ? __pfx_do_fcntl+0x10/0x10 [ 272.942924][ T9913] ? __fget_files+0x2a/0x420 [ 272.942943][ T9913] ? __fget_files+0x2a/0x420 [ 272.942984][ T9913] ? bpf_lsm_file_fcntl+0x9/0x20 [ 272.943036][ T9913] __se_sys_fcntl+0xc8/0x150 [ 272.943068][ T9913] do_syscall_64+0x166/0x520 [ 272.943106][ T9913] ? trace_irq_disable+0x3b/0x140 [ 272.943126][ T9913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.943142][ T9913] ? clear_bhb_loop+0x70/0xc0 [ 272.943163][ T9913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.943179][ T9913] RIP: 0033:0x7f93d2f9e159 [ 272.943194][ T9913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.943209][ T9913] RSP: 002b:00007f93d3e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 272.943227][ T9913] RAX: ffffffffffffffda RBX: 00007f93d3225fa0 RCX: 00007f93d2f9e159 [ 272.943239][ T9913] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 272.943249][ T9913] RBP: 00007f93d303506b R08: 0000000000000000 R09: 0000000000000000 [ 272.943260][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.943269][ T9913] R13: 00007f93d3226038 R14: 00007f93d3225fa0 R15: 00007ffd82e267e8 [ 272.943293][ T9913] [ 273.325285][ T9919] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1261'. [ 273.536968][ T1291] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.537852][ T32] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 273.649316][ T9930] FAULT_INJECTION: forcing a failure. [ 273.649316][ T9930] name failslab, interval 1, probability 0, space 0, times 0 [ 273.649352][ T9930] CPU: 0 UID: 0 PID: 9930 Comm: syz.7.1265 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 273.649385][ T9930] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 273.649395][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.649408][ T9930] Call Trace: [ 273.649417][ T9930] [ 273.649426][ T9930] dump_stack_lvl+0xe8/0x150 [ 273.649465][ T9930] should_fail_ex+0x3eb/0x540 [ 273.649494][ T9930] should_failslab+0xa8/0x100 [ 273.649528][ T9930] __kmalloc_cache_noprof+0x9e/0x600 [ 273.649556][ T9930] ? vb2_vmalloc_alloc+0xb2/0x360 [ 273.649588][ T9930] ? vb2_vmalloc_alloc+0xb2/0x360 [ 273.649622][ T9930] ? vmalloc_user_noprof+0xad/0xe0 [ 273.649648][ T9930] vb2_vmalloc_alloc+0xb2/0x360 [ 273.649682][ T9930] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 273.649717][ T9930] __vb2_queue_alloc+0xa0b/0x1660 [ 273.649776][ T9930] vb2_core_reqbufs+0xc3f/0x1470 [ 273.649824][ T9930] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 273.649854][ T9930] ? __kasan_kmalloc+0x93/0xb0 [ 273.649886][ T9930] ? __kmalloc_cache_noprof+0x148/0x600 [ 273.649910][ T9930] ? __vb2_init_fileio+0x1e2/0x1040 [ 273.649941][ T9930] ? __vb2_init_fileio+0x1e2/0x1040 [ 273.649981][ T9930] __vb2_init_fileio+0x310/0x1040 [ 273.650030][ T9930] __vb2_perform_fileio+0x287/0x1660 [ 273.650082][ T9930] ? __lock_acquire+0x747/0x2de0 [ 273.650113][ T9930] vb2_fop_read+0x282/0x360 [ 273.650152][ T9930] v4l2_read+0x19c/0x2c0 [ 273.650185][ T9930] ? __pfx_v4l2_read+0x10/0x10 [ 273.650215][ T9930] vfs_read+0x213/0xa80 [ 273.650250][ T9930] ? __pfx_vfs_read+0x10/0x10 [ 273.650276][ T9930] ? __fget_files+0x2a/0x420 [ 273.650304][ T9930] ? __fget_files+0x2a/0x420 [ 273.650326][ T9930] ? __fget_files+0x3a2/0x420 [ 273.650361][ T9930] ? __fget_files+0x2a/0x420 [ 273.650387][ T9930] ? fdget+0x1ac/0x250 [ 273.650412][ T9930] __x64_sys_pread64+0x196/0x220 [ 273.650441][ T9930] ? __pfx___x64_sys_pread64+0x10/0x10 [ 273.650478][ T9930] do_syscall_64+0x166/0x520 [ 273.650503][ T9930] ? trace_irq_disable+0x3b/0x140 [ 273.650528][ T9930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.650550][ T9930] ? clear_bhb_loop+0x70/0xc0 [ 273.650575][ T9930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.650596][ T9930] RIP: 0033:0x7fd36b79e159 [ 273.650615][ T9930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.650633][ T9930] RSP: 002b:00007fd36c5bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 273.650656][ T9930] RAX: ffffffffffffffda RBX: 00007fd36ba25fa0 RCX: 00007fd36b79e159 [ 273.650672][ T9930] RDX: 0000000000000ff4 RSI: 00002000000014c0 RDI: 0000000000000004 [ 273.650686][ T9930] RBP: 00007fd36b83506b R08: 0000000000000000 R09: 0000000000000000 [ 273.650700][ T9930] R10: 000000000000f15e R11: 0000000000000246 R12: 0000000000000000 [ 273.650713][ T9930] R13: 00007fd36ba26038 R14: 00007fd36ba25fa0 R15: 00007ffe5f20b098 [ 273.650746][ T9930] [ 273.829143][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 273.829195][ T32] usb 4-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 273.848421][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.848449][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.934019][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.934047][ T32] usb 4-1: Product: syz [ 273.934063][ T32] usb 4-1: Manufacturer: syz [ 273.934078][ T32] usb 4-1: SerialNumber: syz [ 274.058752][ T32] usb 4-1: selecting invalid altsetting 1 [ 274.140475][ T32] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 274.215572][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.369906][ T1559] usb 4-1: USB disconnect, device number 36 [ 274.731657][ T9945] aoe: unknown AoE command type 0x67 [ 274.808627][ T9947] netlink: 'syz.2.1272': attribute type 10 has an invalid length. [ 274.808666][ T9947] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1272'. [ 275.314679][ T9959] sg_write: data in/out 483392/136 bytes for SCSI command 0x0-- guessing data in; [ 275.314679][ T9959] program syz.3.1275 not setting count and/or reply_len properly [ 275.427314][ T9962] FAULT_INJECTION: forcing a failure. [ 275.427314][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 275.427348][ T9962] CPU: 0 UID: 0 PID: 9962 Comm: syz.8.1276 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 275.427396][ T9962] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 275.427406][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.427420][ T9962] Call Trace: [ 275.427429][ T9962] [ 275.427438][ T9962] dump_stack_lvl+0xe8/0x150 [ 275.427474][ T9962] should_fail_ex+0x3eb/0x540 [ 275.427504][ T9962] should_failslab+0xa8/0x100 [ 275.427538][ T9962] __kmalloc_cache_noprof+0x9e/0x600 [ 275.427565][ T9962] ? rfkill_fop_open+0x190/0x580 [ 275.427591][ T9962] ? rfkill_fop_open+0x190/0x580 [ 275.427617][ T9962] ? rfkill_fill_event+0x29c/0x3f0 [ 275.427648][ T9962] rfkill_fop_open+0x190/0x580 [ 275.427683][ T9962] ? __pfx_rfkill_fop_open+0x10/0x10 [ 275.427709][ T9962] misc_open+0x2d5/0x350 [ 275.427746][ T9962] chrdev_open+0x4d9/0x600 [ 275.427781][ T9962] ? __pfx_chrdev_open+0x10/0x10 [ 275.427816][ T9962] ? devcgroup_check_permission+0x31/0x8f0 [ 275.427850][ T9962] ? __pfx_chrdev_open+0x10/0x10 [ 275.427888][ T9962] do_dentry_open+0x80e/0x1360 [ 275.427933][ T9962] vfs_open_consume+0x4a/0x350 [ 275.427964][ T9962] ? path_openat+0x148a/0x1da0 [ 275.427995][ T9962] path_openat+0x14a6/0x1da0 [ 275.428045][ T9962] do_file_open+0x23e/0x4a0 [ 275.428079][ T9962] ? __pfx_do_file_open+0x10/0x10 [ 275.428132][ T9962] ? _raw_spin_unlock+0x28/0x50 [ 275.428153][ T9962] ? alloc_fd+0x6af/0x760 [ 275.428188][ T9962] do_sys_openat2+0x115/0x200 [ 275.428222][ T9962] ? __se_sys_futex+0x3a8/0x450 [ 275.428257][ T9962] ? __pfx_do_sys_openat2+0x10/0x10 [ 275.428297][ T9962] ? rcu_is_watching+0x16/0xb0 [ 275.428333][ T9962] __x64_sys_openat+0x138/0x170 [ 275.428373][ T9962] do_syscall_64+0x166/0x520 [ 275.428399][ T9962] ? trace_irq_disable+0x3b/0x140 [ 275.428426][ T9962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.428449][ T9962] ? clear_bhb_loop+0x70/0xc0 [ 275.428475][ T9962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.428497][ T9962] RIP: 0033:0x7fd6ba19e159 [ 275.428517][ T9962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.428539][ T9962] RSP: 002b:00007fd6bb13d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 275.428564][ T9962] RAX: ffffffffffffffda RBX: 00007fd6ba425fa0 RCX: 00007fd6ba19e159 [ 275.428581][ T9962] RDX: 0000000000040002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 275.428597][ T9962] RBP: 00007fd6ba23506b R08: 0000000000000000 R09: 0000000000000000 [ 275.428612][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.428625][ T9962] R13: 00007fd6ba426038 R14: 00007fd6ba425fa0 R15: 00007fff59c5f938 [ 275.428661][ T9962] [ 275.774448][ T9965] netlink: 'syz.3.1277': attribute type 39 has an invalid length. [ 276.335903][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 277.451826][T10024] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 278.463756][T10046] kvm: emulating exchange as write [ 278.798114][T10061] printk: console [ttyS0] disabled [ 279.191679][T10063] printk: console [ttyS0] enabled [ 279.275923][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 279.276882][ T9] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.281687][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.281713][ T9] usb 4-1: Product: syz [ 279.281730][ T9] usb 4-1: Manufacturer: syz [ 279.281744][ T9] usb 4-1: SerialNumber: syz [ 279.327587][ T9] usb 4-1: config 0 descriptor?? [ 279.544615][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.902654][T10104] netlink: 'syz.8.1322': attribute type 10 has an invalid length. [ 279.902677][T10104] netlink: 55 bytes leftover after parsing attributes in process `syz.8.1322'. [ 280.285555][T10117] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1328'. [ 280.285575][T10117] netlink: 6116 bytes leftover after parsing attributes in process `syz.2.1328'. [ 280.285585][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 280.285595][T10117] tc_dump_action: action bad kind [ 280.423254][T10123] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 280.556891][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 280.579037][ T9] usb 4-1: USB disconnect, device number 37 [ 280.765925][ T5019] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 280.791520][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1336'. [ 280.791539][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1336'. [ 280.929630][ T5019] usb 9-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 280.933125][ T5019] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.945335][ T5019] usb 9-1: config 0 descriptor?? [ 281.088778][T10143] tipc: Started in network mode [ 281.088813][T10143] tipc: Node identity ae6b1ecf67a9, cluster identity 4711 [ 281.089159][T10143] tipc: Enabled bearer , priority 1 [ 281.090596][T10142] tipc: Resetting bearer [ 281.135067][T10142] tipc: Disabling bearer [ 281.170015][ T5019] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 281.418547][ T5019] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 281.418574][ T5019] [drm] Initialized udl on minor 1 [ 281.604227][T10160] Invalid auth_tok structure returned from key query [ 281.604243][T10160] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 281.604255][T10160] One or more global auth toks could not properly register; rc = [-22] [ 281.604293][T10160] Error validating options; rc = [-22] [ 282.646756][T10174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.305761][T10196] overlayfs: failed to clone upperpath [ 285.215773][T10203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.422788][T10208] CIFS: Attempting to mount //127.0.0.1/share [ 285.990691][T10186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.120172][T10215] FAULT_INJECTION: forcing a failure. [ 286.120172][T10215] name failslab, interval 1, probability 0, space 0, times 0 [ 286.120209][T10215] CPU: 0 UID: 0 PID: 10215 Comm: syz.3.1370 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 286.120243][T10215] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 286.120254][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.120269][T10215] Call Trace: [ 286.120278][T10215] [ 286.120288][T10215] dump_stack_lvl+0xe8/0x150 [ 286.120326][T10215] should_fail_ex+0x3eb/0x540 [ 286.120357][T10215] should_failslab+0xa8/0x100 [ 286.120390][T10215] ? security_inode_alloc+0x39/0x310 [ 286.120427][T10215] kmem_cache_alloc_noprof+0x9c/0x600 [ 286.120452][T10215] ? security_inode_alloc+0x39/0x310 [ 286.120481][T10215] security_inode_alloc+0x39/0x310 [ 286.120506][T10215] inode_init_always_gfp+0x97e/0xd30 [ 286.120534][T10215] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 286.120563][T10215] alloc_inode+0x82/0x1b0 [ 286.120584][T10215] new_inode+0x1f/0x170 [ 286.120610][T10215] __debugfs_create_file+0xb8/0x400 [ 286.120641][T10215] debugfs_create_file_full+0x3f/0x60 [ 286.120673][T10215] ref_tracker_dir_debugfs+0x197/0x360 [ 286.120718][T10215] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 286.120774][T10215] ? __kasan_kmalloc+0x93/0xb0 [ 286.120806][T10215] ? __raw_spin_lock_init+0x45/0x100 [ 286.120848][T10215] preinit_net+0x353/0x760 [ 286.120895][T10215] copy_net_ns+0x2c3/0x770 [ 286.120933][T10215] create_new_namespaces+0x3f0/0x6b0 [ 286.120973][T10215] ? security_capable+0x7e/0x2c0 [ 286.121035][T10215] unshare_nsproxy_namespaces+0x144/0x190 [ 286.121072][T10215] ksys_unshare+0x53c/0x890 [ 286.121107][T10215] ? __pfx_ksys_unshare+0x10/0x10 [ 286.121143][T10215] ? rcu_is_watching+0x16/0xb0 [ 286.121187][T10215] __x64_sys_unshare+0x38/0x50 [ 286.121219][T10215] do_syscall_64+0x166/0x520 [ 286.121245][T10215] ? trace_irq_disable+0x3b/0x140 [ 286.121272][T10215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.121297][T10215] ? clear_bhb_loop+0x70/0xc0 [ 286.121325][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.121365][T10215] RIP: 0033:0x7f93d2f9e159 [ 286.121386][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.121407][T10215] RSP: 002b:00007f93d3e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 286.121432][T10215] RAX: ffffffffffffffda RBX: 00007f93d3225fa0 RCX: 00007f93d2f9e159 [ 286.121450][T10215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 286.121465][T10215] RBP: 00007f93d303506b R08: 0000000000000000 R09: 0000000000000000 [ 286.121480][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.121494][T10215] R13: 00007f93d3226038 R14: 00007f93d3225fa0 R15: 00007ffd82e267e8 [ 286.121532][T10215] [ 286.121701][T10215] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88807f208338' [ 286.433222][T10208] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 286.433738][T10208] CIFS: VFS: cifs_mount failed w/return code = -11 [ 286.505778][ T5019] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 286.506224][ T5019] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 286.529895][ T5019] usb 9-1: USB disconnect, device number 8 [ 286.611205][ T5687] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 286.664060][T10218] FAULT_INJECTION: forcing a failure. [ 286.664060][T10218] name failslab, interval 1, probability 0, space 0, times 0 [ 286.664096][T10218] CPU: 1 UID: 0 PID: 10218 Comm: syz.7.1371 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 286.664128][T10218] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 286.664137][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.664150][T10218] Call Trace: [ 286.664158][T10218] [ 286.664167][T10218] dump_stack_lvl+0xe8/0x150 [ 286.664200][T10218] should_fail_ex+0x3eb/0x540 [ 286.664227][T10218] should_failslab+0xa8/0x100 [ 286.664258][T10218] __kmalloc_cache_noprof+0x9e/0x600 [ 286.664282][T10218] ? __kasan_kmalloc+0x93/0xb0 [ 286.664308][T10218] ? __v4l2_subdev_state_alloc+0x5a/0x3d0 [ 286.664346][T10218] ? __v4l2_subdev_state_alloc+0x5a/0x3d0 [ 286.664384][T10218] __v4l2_subdev_state_alloc+0x5a/0x3d0 [ 286.664419][T10218] subdev_open+0xad/0x430 [ 286.664453][T10218] v4l2_open+0x1bc/0x3a0 [ 286.664486][T10218] chrdev_open+0x4d9/0x600 [ 286.664518][T10218] ? __pfx_chrdev_open+0x10/0x10 [ 286.664550][T10218] ? devcgroup_check_permission+0x31/0x8f0 [ 286.664580][T10218] ? __pfx_chrdev_open+0x10/0x10 [ 286.664608][T10218] do_dentry_open+0x80e/0x1360 [ 286.664648][T10218] vfs_open_consume+0x4a/0x350 [ 286.664676][T10218] ? path_openat+0x148a/0x1da0 [ 286.664705][T10218] path_openat+0x14a6/0x1da0 [ 286.664752][T10218] do_file_open+0x23e/0x4a0 [ 286.664784][T10218] ? __pfx_do_file_open+0x10/0x10 [ 286.664829][T10218] ? _raw_spin_unlock+0x28/0x50 [ 286.664849][T10218] ? alloc_fd+0x6af/0x760 [ 286.664880][T10218] do_sys_openat2+0x115/0x200 [ 286.664914][T10218] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.664951][T10218] ? do_user_addr_fault+0xd3f/0x1480 [ 286.664986][T10218] __x64_sys_openat+0x138/0x170 [ 286.665022][T10218] do_syscall_64+0x166/0x520 [ 286.665046][T10218] ? trace_irq_disable+0x3b/0x140 [ 286.665070][T10218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.665092][T10218] ? clear_bhb_loop+0x70/0xc0 [ 286.665117][T10218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.665138][T10218] RIP: 0033:0x7fd36b75e98e [ 286.665156][T10218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 286.665174][T10218] RSP: 002b:00007fd36c5bab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.665197][T10218] RAX: ffffffffffffffda RBX: 00007fd36c5bb6c0 RCX: 00007fd36b75e98e [ 286.665213][T10218] RDX: 0000000000000000 RSI: 00007fd36c5bac00 RDI: ffffffffffffff9c [ 286.665227][T10218] RBP: 00007fd36c5bac00 R08: 0000000000000000 R09: 0000000000000000 [ 286.665241][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 286.665255][T10218] R13: 00007fd36ba26038 R14: 00007fd36ba25fa0 R15: 00007ffe5f20b098 [ 286.665287][T10218] [ 287.272960][ T44] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 287.402014][T10238] FAULT_INJECTION: forcing a failure. [ 287.402014][T10238] name failslab, interval 1, probability 0, space 0, times 0 [ 287.402050][T10238] CPU: 0 UID: 0 PID: 10238 Comm: syz.8.1378 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 287.402082][T10238] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 287.402093][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.402107][T10238] Call Trace: [ 287.402116][T10238] [ 287.402126][T10238] dump_stack_lvl+0xe8/0x150 [ 287.402161][T10238] should_fail_ex+0x3eb/0x540 [ 287.402191][T10238] should_failslab+0xa8/0x100 [ 287.402223][T10238] __kmalloc_node_noprof+0xfb/0x720 [ 287.402246][T10238] ? fifo_init+0x3ed/0x6d0 [ 287.402274][T10238] ? qdisc_alloc+0x92/0x9d0 [ 287.402296][T10238] ? qdisc_alloc+0x92/0x9d0 [ 287.402320][T10238] ? __pfx_fifo_init+0x10/0x10 [ 287.402351][T10238] qdisc_alloc+0x92/0x9d0 [ 287.402381][T10238] qdisc_create_dflt+0x8e/0x4e0 [ 287.402410][T10238] ets_qdisc_change+0xd36/0x2510 [ 287.402456][T10238] ? __pfx_ets_qdisc_change+0x10/0x10 [ 287.402521][T10238] ? tcf_block_get+0x67/0xa0 [ 287.402542][T10238] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 287.402570][T10238] ? ets_qdisc_init+0x82/0x530 [ 287.402596][T10238] ? __pfx_ets_qdisc_init+0x10/0x10 [ 287.402626][T10238] qdisc_create+0xc23/0x1450 [ 287.402649][T10238] ? lockdep_rtnl_is_held+0x26/0x40 [ 287.402674][T10238] ? qdisc_lookup+0x364/0x6c0 [ 287.402705][T10238] tc_modify_qdisc+0x17af/0x2390 [ 287.402750][T10238] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 287.402792][T10238] ? __local_bh_enable_ip+0xd6/0x140 [ 287.402845][T10238] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 287.402880][T10238] rtnetlink_rcv_msg+0x7b9/0xc00 [ 287.402909][T10238] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 287.402932][T10238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.402962][T10238] ? __copy_skb_header+0xa3/0x4a0 [ 287.402991][T10238] ? __asan_memcpy+0x40/0x70 [ 287.403022][T10238] netlink_rcv_skb+0x226/0x4a0 [ 287.403056][T10238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.403081][T10238] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.403123][T10238] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.403154][T10238] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.403189][T10238] netlink_unicast+0x7bd/0x940 [ 287.403228][T10238] netlink_sendmsg+0x7c3/0xae0 [ 287.403268][T10238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.403309][T10238] ? apparmor_socket_sendmsg+0x98/0x360 [ 287.403347][T10238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.403379][T10238] sock_sendmsg_nosec+0x13a/0x180 [ 287.403415][T10238] sock_write_iter+0x2de/0x3e0 [ 287.403449][T10238] ? __pfx_sock_write_iter+0x10/0x10 [ 287.403485][T10238] ? bpf_lsm_file_permission+0x9/0x20 [ 287.403515][T10238] ? security_file_permission+0x75/0x260 [ 287.403556][T10238] vfs_write+0x612/0xba0 [ 287.403591][T10238] ? __pfx_vfs_write+0x10/0x10 [ 287.403623][T10238] ? __fget_files+0x3a2/0x420 [ 287.403647][T10238] ? __fget_files+0x2a/0x420 [ 287.403676][T10238] ? fdget+0x1ac/0x250 [ 287.403708][T10238] ksys_write+0x150/0x270 [ 287.403737][T10238] ? __pfx_ksys_write+0x10/0x10 [ 287.403785][T10238] do_syscall_64+0x166/0x520 [ 287.403814][T10238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.403837][T10238] ? clear_bhb_loop+0x70/0xc0 [ 287.403865][T10238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.403890][T10238] RIP: 0033:0x7fd6ba19e159 [ 287.403912][T10238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.403931][T10238] RSP: 002b:00007fd6bb13d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.403956][T10238] RAX: ffffffffffffffda RBX: 00007fd6ba425fa0 RCX: 00007fd6ba19e159 [ 287.403973][T10238] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000004 [ 287.403988][T10238] RBP: 00007fd6ba23506b R08: 0000000000000000 R09: 0000000000000000 [ 287.404001][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.404015][T10238] R13: 00007fd6ba426038 R14: 00007fd6ba425fa0 R15: 00007fff59c5f938 [ 287.404050][T10238] [ 287.899363][ T1291] IPVS: starting estimator thread 0... [ 287.985919][T10242] IPVS: using max 27 ests per chain, 64800 per kthread [ 288.418290][T10267] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 288.418332][T10267] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 288.418379][T10267] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 288.472505][T10267] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 288.483764][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1389'. [ 288.501774][T10267] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 288.602983][ T5753] infiniband s`z1: ib_query_port failed (-19) [ 288.641841][ T1291] smbdirect: ib_dev[s`z1] removed [ 288.645613][T10267] siw: device registration error -19 [ 289.155990][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 289.291770][T10283] KVM: debugfs: duplicate directory 10283-5 [ 289.317509][ T9] usb 9-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 289.318729][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.318779][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.318831][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.473360][T10285] FAULT_INJECTION: forcing a failure. [ 289.473360][T10285] name failslab, interval 1, probability 0, space 0, times 0 [ 289.473424][T10285] CPU: 0 UID: 0 PID: 10285 Comm: syz.3.1397 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 289.473449][T10285] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 289.473456][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.473466][T10285] Call Trace: [ 289.473473][T10285] [ 289.473480][T10285] dump_stack_lvl+0xe8/0x150 [ 289.473526][T10285] should_fail_ex+0x3eb/0x540 [ 289.473560][T10285] should_failslab+0xa8/0x100 [ 289.473596][T10285] __kmalloc_cache_noprof+0x9e/0x600 [ 289.473626][T10285] ? __se_sys_futex+0x3a8/0x450 [ 289.473663][T10285] ? __se_sys_getcwd+0x64/0x480 [ 289.473688][T10285] ? __se_sys_getcwd+0x64/0x480 [ 289.473714][T10285] ? __fget_files+0x2a/0x420 [ 289.473734][T10285] __se_sys_getcwd+0x64/0x480 [ 289.473768][T10285] do_syscall_64+0x166/0x520 [ 289.473788][T10285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.473805][T10285] ? clear_bhb_loop+0x70/0xc0 [ 289.473826][T10285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.473842][T10285] RIP: 0033:0x7f93d2f9e159 [ 289.473856][T10285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.473870][T10285] RSP: 002b:00007f93d3e52028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 289.473894][T10285] RAX: ffffffffffffffda RBX: 00007f93d3225fa0 RCX: 00007f93d2f9e159 [ 289.473906][T10285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.473916][T10285] RBP: 00007f93d303506b R08: 0000000000000000 R09: 0000000000000000 [ 289.473926][T10285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.473935][T10285] R13: 00007f93d3226038 R14: 00007f93d3225fa0 R15: 00007ffd82e267e8 [ 289.473960][T10285] [ 289.984821][T10293] FAULT_INJECTION: forcing a failure. [ 289.984821][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 289.984868][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.3.1401 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 289.984921][T10293] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 289.984930][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.984944][T10293] Call Trace: [ 289.984953][T10293] [ 289.984963][T10293] dump_stack_lvl+0xe8/0x150 [ 289.985000][T10293] should_fail_ex+0x3eb/0x540 [ 289.985022][T10293] should_failslab+0xa8/0x100 [ 289.985046][T10293] __kmalloc_cache_noprof+0x9e/0x600 [ 289.985084][T10293] ? newque+0x88/0x480 [ 289.985112][T10293] ? newque+0x88/0x480 [ 289.985139][T10293] newque+0x88/0x480 [ 289.985167][T10293] ipcget+0x1db/0xf20 [ 289.985186][T10293] ? __pfx_do_futex+0x10/0x10 [ 289.985211][T10293] ? __sys_connect+0x3a1/0x450 [ 289.985250][T10293] ? __pfx_ipcget+0x10/0x10 [ 289.985270][T10293] ? __se_sys_futex+0x3a8/0x450 [ 289.985314][T10293] __x64_sys_msgget+0x11a/0x160 [ 289.985332][T10293] ? __pfx___x64_sys_msgget+0x10/0x10 [ 289.985358][T10293] do_syscall_64+0x166/0x520 [ 289.985394][T10293] ? trace_irq_disable+0x3b/0x140 [ 289.985421][T10293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.985442][T10293] ? clear_bhb_loop+0x70/0xc0 [ 289.985473][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.985489][T10293] RIP: 0033:0x7f93d2f9e159 [ 289.985504][T10293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.985518][T10293] RSP: 002b:00007f93d3e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 289.985553][T10293] RAX: ffffffffffffffda RBX: 00007f93d3225fa0 RCX: 00007f93d2f9e159 [ 289.985571][T10293] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 289.985584][T10293] RBP: 00007f93d303506b R08: 0000000000000000 R09: 0000000000000000 [ 289.985597][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.985609][T10293] R13: 00007f93d3226038 R14: 00007f93d3225fa0 R15: 00007ffd82e267e8 [ 289.985643][T10293] [ 290.042680][T10224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.082692][ T9] rtsx_usb 9-1:1.0: probe with driver rtsx_usb failed with error -71 [ 290.258825][ T9] usb 9-1: USB disconnect, device number 9 [ 290.656000][ T5019] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 290.806772][ T5019] usb 4-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 290.807397][ T5019] usb 4-1: config 0 has no interfaces? [ 290.809532][ T5019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.809557][ T5019] usb 4-1: Product: syz [ 290.809572][ T5019] usb 4-1: Manufacturer: syz [ 290.809587][ T5019] usb 4-1: SerialNumber: syz [ 290.853527][ T5019] usb 4-1: config 0 descriptor?? [ 291.169357][ T33] audit: type=1326 audit(1790773191.842:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.169575][ T33] audit: type=1326 audit(1790773191.842:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.172349][ T33] audit: type=1326 audit(1790773191.842:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.172389][ T33] audit: type=1326 audit(1790773191.842:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.172437][ T33] audit: type=1326 audit(1790773191.842:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.173244][ T33] audit: type=1326 audit(1790773191.842:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.173295][ T33] audit: type=1326 audit(1790773191.842:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.173341][ T33] audit: type=1326 audit(1790773191.842:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.173891][ T33] audit: type=1326 audit(1790773191.842:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 291.316766][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.325263][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.429282][ T1559] usb 4-1: USB disconnect, device number 38 [ 291.529215][ T33] audit: type=1326 audit(1790773192.202:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.8.1410" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6ba19e159 code=0x7ffc0000 [ 292.062506][T10333] overlayfs: refusing to follow metacopy origin for (/file1) [ 292.311888][ T1291] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.529491][ T1291] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.733002][ T1291] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.906673][ T1291] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.536599][ T1291] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.857841][ T1291] bridge_slave_1: left allmulticast mode [ 293.857884][ T1291] bridge_slave_1: left promiscuous mode [ 293.858107][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.892099][ T1291] bridge_slave_0: left allmulticast mode [ 293.892124][ T1291] bridge_slave_0: left promiscuous mode [ 293.892339][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.187585][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.192644][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.193445][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.194957][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.218247][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.451955][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.471261][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.484855][ T1291] bond0 (unregistering): Released all slaves [ 294.683409][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 294.803366][T10387] batadv_slave_0: entered promiscuous mode [ 294.806967][T10385] batadv_slave_0: left promiscuous mode [ 294.924635][ T1291] hsr_slave_0: left promiscuous mode [ 294.928343][ T1291] hsr_slave_1: left promiscuous mode [ 294.933040][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.933093][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.955207][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.955226][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.991347][ T1291] veth1_macvtap: left promiscuous mode [ 294.991380][ T1291] veth0_macvtap: left promiscuous mode [ 295.736466][ T1291] team0 (unregistering): Port device team_slave_1 removed [ 295.770775][ T1291] team0 (unregistering): Port device team_slave_0 removed [ 296.131727][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 296.132684][T10424] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 296.336942][ T5610] Bluetooth: hci5: command tx timeout [ 296.345889][ T5687] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 296.507918][ T5687] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 296.511491][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.511600][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.543200][ T5687] usb 4-1: config 0 descriptor?? [ 296.778665][ T5687] usbhid 4-1:0.0: can't add hid device: -71 [ 296.780012][ T5687] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 296.789499][ T5687] usb 4-1: USB disconnect, device number 39 [ 296.990842][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 297.100381][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.100581][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.100715][T10365] bridge_slave_0: entered allmulticast mode [ 297.103106][T10365] bridge_slave_0: entered promiscuous mode [ 297.110933][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.111152][T10365] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.111497][T10365] bridge_slave_1: entered allmulticast mode [ 297.116790][T10365] bridge_slave_1: entered promiscuous mode [ 297.204705][T10365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.222148][T10365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.235434][ T1559] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 297.273616][T10365] team0: Port device team_slave_0 added [ 297.282799][T10365] team0: Port device team_slave_1 added [ 297.325601][T10365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.325619][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.325646][T10365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.372379][T10365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.372402][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.372428][T10365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.427130][ T1559] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 297.428208][ T1559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.428256][ T1559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.432904][ T1559] usb 4-1: config 0 descriptor?? [ 297.573543][T10365] hsr_slave_0: entered promiscuous mode [ 297.577314][T10365] hsr_slave_1: entered promiscuous mode [ 297.581760][T10365] debugfs: 'hsr0' already exists in 'hsr' [ 297.581779][T10365] Cannot create hsr debugfs directory [ 297.678811][T10426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.679268][T10426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.706098][ T1559] usbhid 4-1:0.0: can't add hid device: -71 [ 297.706196][ T1559] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.712073][ T1559] usb 4-1: USB disconnect, device number 40 [ 297.801439][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 297.802223][T10477] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1449'. [ 298.168279][T10365] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 298.175613][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.200580][T10365] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 298.218694][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.221047][T10365] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 298.244060][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.245909][ T1559] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 298.263382][T10365] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 298.277779][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.307350][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 298.416640][ T5610] Bluetooth: hci5: command tx timeout [ 298.422384][T10365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.438562][ T1559] usb 4-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=0.00 [ 298.443707][ T1559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.443821][ T1559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.466407][ T1559] usb 4-1: config 0 descriptor?? [ 298.494080][ T1559] usbhid 4-1:0.0: can't add hid device: -22 [ 298.494172][ T1559] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 298.538025][T10365] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.566706][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.566818][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.633751][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.634574][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.921337][ T1559] usb 4-1: USB disconnect, device number 41 [ 299.359667][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 299.518652][T10529] FAULT_INJECTION: forcing a failure. [ 299.518652][T10529] name failslab, interval 1, probability 0, space 0, times 0 [ 299.518685][T10529] CPU: 0 UID: 0 PID: 10529 Comm: syz.3.1455 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 299.518716][T10529] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 299.518724][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.518755][T10529] Call Trace: [ 299.518764][T10529] [ 299.518774][T10529] dump_stack_lvl+0xe8/0x150 [ 299.518810][T10529] should_fail_ex+0x3eb/0x540 [ 299.518840][T10529] should_failslab+0xa8/0x100 [ 299.518871][T10529] ? radix_tree_node_alloc+0x82/0x3a0 [ 299.518898][T10529] kmem_cache_alloc_noprof+0x9c/0x600 [ 299.518921][T10529] ? radix_tree_node_alloc+0x82/0x3a0 [ 299.518944][T10529] ? kmem_cache_alloc_noprof+0x151/0x600 [ 299.518967][T10529] ? radix_tree_node_alloc+0x82/0x3a0 [ 299.518999][T10529] radix_tree_node_alloc+0x82/0x3a0 [ 299.519035][T10529] idr_get_free+0x28f/0xa10 [ 299.519072][T10529] idr_alloc_u32+0x18a/0x330 [ 299.519105][T10529] ? __pfx_idr_alloc_u32+0x10/0x10 [ 299.519137][T10529] ? net_generic+0x1e/0x240 [ 299.519159][T10529] ? l2tp_tunnel_register+0x140/0x1570 [ 299.519198][T10529] l2tp_tunnel_register+0x15a/0x1570 [ 299.519246][T10529] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 299.519282][T10529] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.519320][T10529] ? pcpu_alloc+0x10/0x310 [ 299.519366][T10529] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.519395][T10529] ? l2tp_tunnel_create+0x249/0x3e0 [ 299.519426][T10529] ? l2tp_tunnel_create+0x2d3/0x3e0 [ 299.519465][T10529] pppol2tp_connect+0x8e3/0x18b0 [ 299.519500][T10529] ? aa_sk_perm+0x6ff/0x8f0 [ 299.519534][T10529] ? __pfx_pppol2tp_connect+0x10/0x10 [ 299.519556][T10529] ? lock_acquire+0x115/0x350 [ 299.519587][T10529] ? __pfx_aa_sk_perm+0x10/0x10 [ 299.519633][T10529] ? apparmor_socket_connect+0x13e/0x210 [ 299.519671][T10529] ? bpf_lsm_socket_connect+0x9/0x20 [ 299.519703][T10529] __sys_connect+0x316/0x450 [ 299.519727][T10529] ? __pfx___sys_connect+0x10/0x10 [ 299.519776][T10529] ? rcu_is_watching+0x16/0xb0 [ 299.519815][T10529] __x64_sys_connect+0x7a/0x90 [ 299.519838][T10529] do_syscall_64+0x166/0x520 [ 299.519863][T10529] ? trace_irq_disable+0x3b/0x140 [ 299.519890][T10529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.519913][T10529] ? clear_bhb_loop+0x70/0xc0 [ 299.519942][T10529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.519964][T10529] RIP: 0033:0x7f93d2f9e159 [ 299.519985][T10529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.520004][T10529] RSP: 002b:00007f93d3e52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 299.520028][T10529] RAX: ffffffffffffffda RBX: 00007f93d3225fa0 RCX: 00007f93d2f9e159 [ 299.520045][T10529] RDX: 0000000000000026 RSI: 00002000000002c0 RDI: 0000000000000004 [ 299.520060][T10529] RBP: 00007f93d303506b R08: 0000000000000000 R09: 0000000000000000 [ 299.520075][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.520089][T10529] R13: 00007f93d3226038 R14: 00007f93d3225fa0 R15: 00007ffd82e267e8 [ 299.520140][T10529] [ 299.585678][T10365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.469610][T10365] veth0_vlan: entered promiscuous mode [ 300.490680][T10365] veth1_vlan: entered promiscuous mode [ 300.498759][ T5610] Bluetooth: hci5: command tx timeout [ 300.566495][T10365] veth0_macvtap: entered promiscuous mode [ 300.571822][T10365] veth1_macvtap: entered promiscuous mode [ 300.609184][T10365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.623926][T10365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.667559][ T1019] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.671651][ T103] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.671880][ T103] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.671916][ T103] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.933918][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.933942][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.042572][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.042594][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.577684][ T5610] Bluetooth: hci5: command tx timeout [ 302.671269][T10621] netlink: 'syz.7.1484': attribute type 10 has an invalid length. [ 302.703884][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.755716][T10621] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 303.697378][ T1559] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 303.874013][ T1559] usb 10-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 303.887963][ T1559] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.888015][ T1559] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 303.888042][ T1559] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 303.888084][ T1559] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.309673][ T33] kauditd_printk_skb: 1 callbacks suppressed [ 304.309692][ T33] audit: type=1326 audit(1790773204.982:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.7.1504" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd36b797ed7 code=0x0 [ 304.345956][ T1559] cxacru 10-1:1.0: send of cm 0x91 failed (-71) [ 304.346087][ T1559] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 304.346102][ T1559] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 304.407617][ T1559] cxacru 10-1:1.0: probe with driver cxacru failed with error -71 [ 304.427942][ T1559] usb 10-1: USB disconnect, device number 2 [ 305.254115][T10690] netlink: 'syz.2.1514': attribute type 4 has an invalid length. [ 305.404736][T10700] overlayfs: failed to clone upperpath [ 305.435987][ T991] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 305.586016][ T991] usb 10-1: Using ep0 maxpacket: 8 [ 305.586707][ T991] usb 10-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 305.587671][ T991] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 305.592084][ T991] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.592121][ T991] usb 10-1: Product: syz [ 305.592139][ T991] usb 10-1: Manufacturer: syz [ 305.592155][ T991] usb 10-1: SerialNumber: syz [ 305.611614][ T991] usb 10-1: config 0 descriptor?? [ 305.653101][ T991] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 305.744669][T10715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.275739][T10731] syz_tun: entered allmulticast mode [ 306.542295][T10748] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 306.542323][T10748] overlayfs: failed to set xattr on upper [ 306.542332][T10748] overlayfs: ...falling back to redirect_dir=nofollow. [ 306.542342][T10748] overlayfs: ...falling back to index=off. [ 306.542350][T10748] overlayfs: ...falling back to uuid=null. [ 306.542359][T10748] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 306.879957][ T991] gspca_zc3xx: reg_w_i err -71 [ 307.485950][ T991] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 307.486042][ T991] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 307.490632][ T991] usb 10-1: USB disconnect, device number 3 [ 307.747499][T10765] binder: Failure when writing BR_NOOP at beginning of buffer. [ 307.747517][T10765] binder: Read failure Err(EFAULT) in pid:29 [ 308.774789][T10823] FAULT_INJECTION: forcing a failure. [ 308.774789][T10823] name failslab, interval 1, probability 0, space 0, times 0 [ 308.774833][T10823] CPU: 0 UID: 0 PID: 10823 Comm: syz.9.1555 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 308.774862][T10823] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 308.774871][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.774882][T10823] Call Trace: [ 308.774889][T10823] [ 308.774898][T10823] dump_stack_lvl+0xe8/0x150 [ 308.774930][T10823] should_fail_ex+0x3eb/0x540 [ 308.774956][T10823] should_failslab+0xa8/0x100 [ 308.774985][T10823] __kmalloc_cache_noprof+0x9e/0x600 [ 308.775007][T10823] ? __kmalloc_cache_noprof+0x148/0x600 [ 308.775027][T10823] ? sctp_add_bind_addr+0x8c/0x370 [ 308.775055][T10823] ? sctp_add_bind_addr+0x8c/0x370 [ 308.775086][T10823] sctp_add_bind_addr+0x8c/0x370 [ 308.775116][T10823] sctp_copy_local_addr_list+0x31a/0x4e0 [ 308.775145][T10823] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 308.775172][T10823] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 308.775203][T10823] ? sctp_v4_is_any+0x35/0x60 [ 308.775230][T10823] ? sctp_copy_one_addr+0x93/0x360 [ 308.775259][T10823] sctp_bind_addr_copy+0x189/0x3c0 [ 308.775293][T10823] sctp_connect_new_asoc+0x2ff/0x6b0 [ 308.775320][T10823] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 308.775346][T10823] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 308.775387][T10823] __sctp_connect+0x5cb/0xdc0 [ 308.775423][T10823] ? __pfx___sctp_connect+0x10/0x10 [ 308.775447][T10823] ? security_sctp_bind_connect+0x7e/0x2c0 [ 308.775484][T10823] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 308.775518][T10823] sctp_getsockopt_connectx3+0x227/0x360 [ 308.775555][T10823] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 308.775592][T10823] ? sctp_getsockopt+0x12f/0xb90 [ 308.775616][T10823] ? __local_bh_enable_ip+0xd6/0x140 [ 308.775648][T10823] sctp_getsockopt+0x984/0xb90 [ 308.775671][T10823] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 308.775705][T10823] do_sock_getsockopt+0x4aa/0x640 [ 308.775736][T10823] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 308.775778][T10823] ? __fget_files+0x3a2/0x420 [ 308.775809][T10823] ? __fget_files+0x2a/0x420 [ 308.775839][T10823] __x64_sys_getsockopt+0x1a4/0x240 [ 308.775874][T10823] do_syscall_64+0x166/0x520 [ 308.775900][T10823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.775923][T10823] ? clear_bhb_loop+0x70/0xc0 [ 308.775949][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.775973][T10823] RIP: 0033:0x7f025f79e159 [ 308.775994][T10823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.776014][T10823] RSP: 002b:00007f0260607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 308.776039][T10823] RAX: ffffffffffffffda RBX: 00007f025fa25fa0 RCX: 00007f025f79e159 [ 308.776057][T10823] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 308.776071][T10823] RBP: 00007f025f83506b R08: 00002000000007c0 R09: 0000000000000000 [ 308.776087][T10823] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.776102][T10823] R13: 00007f025fa26038 R14: 00007f025fa25fa0 R15: 00007ffee3237be8 [ 308.776137][T10823] [ 309.257988][T10836] FAULT_INJECTION: forcing a failure. [ 309.257988][T10836] name failslab, interval 1, probability 0, space 0, times 0 [ 309.258021][T10836] CPU: 1 UID: 0 PID: 10836 Comm: syz.9.1560 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 309.258053][T10836] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 309.258062][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.258076][T10836] Call Trace: [ 309.258085][T10836] [ 309.258096][T10836] dump_stack_lvl+0xe8/0x150 [ 309.258137][T10836] should_fail_ex+0x3eb/0x540 [ 309.258166][T10836] should_failslab+0xa8/0x100 [ 309.258219][T10836] __kmalloc_noprof+0xf9/0x710 [ 309.258246][T10836] ? __kmalloc_noprof+0x1a6/0x710 [ 309.258282][T10836] ? kvm_io_bus_register_dev+0x1ef/0x700 [ 309.258309][T10836] ? kvm_io_bus_register_dev+0x1ef/0x700 [ 309.258343][T10836] kvm_io_bus_register_dev+0x1ef/0x700 [ 309.258386][T10836] kvm_pic_init+0x1dc/0x2f0 [ 309.258422][T10836] kvm_arch_vm_ioctl+0x1624/0x1a10 [ 309.258452][T10836] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 309.258482][T10836] ? __lock_acquire+0x747/0x2de0 [ 309.258536][T10836] ? lock_acquire+0x115/0x350 [ 309.258572][T10836] ? lock_acquire+0x115/0x350 [ 309.258607][T10836] ? is_bpf_text_address+0x26/0x2b0 [ 309.258646][T10836] ? is_bpf_text_address+0x292/0x2b0 [ 309.258678][T10836] ? is_bpf_text_address+0x26/0x2b0 [ 309.258714][T10836] ? kernel_text_address+0xa5/0xe0 [ 309.258743][T10836] ? __kernel_text_address+0xd/0x30 [ 309.258769][T10836] ? unwind_get_return_address+0x4d/0x90 [ 309.258795][T10836] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 309.258821][T10836] ? arch_stack_walk+0xfb/0x150 [ 309.258857][T10836] ? stack_trace_save+0xa9/0x100 [ 309.258882][T10836] ? __pfx_stack_trace_save+0x10/0x10 [ 309.258906][T10836] ? kasan_save_track+0x4f/0x80 [ 309.258936][T10836] ? stack_depot_save_flags+0x33/0x7f0 [ 309.258962][T10836] ? __lock_acquire+0x747/0x2de0 [ 309.258991][T10836] ? kasan_save_track+0x4f/0x80 [ 309.259017][T10836] ? kasan_save_track+0x3e/0x80 [ 309.259043][T10836] ? kasan_save_free_info+0x40/0x50 [ 309.259064][T10836] ? __kasan_slab_free+0x5c/0x80 [ 309.259091][T10836] ? kfree+0x1c5/0x650 [ 309.259111][T10836] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 309.259143][T10836] ? security_file_ioctl+0xc3/0x2a0 [ 309.259174][T10836] ? __se_sys_ioctl+0x47/0x170 [ 309.259233][T10836] ? do_syscall_64+0x166/0x520 [ 309.259267][T10836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.259312][T10836] kvm_vm_ioctl+0x883/0xcb0 [ 309.259348][T10836] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 309.259405][T10836] ? kasan_quarantine_put+0xbb/0x1f0 [ 309.259439][T10836] ? tomoyo_path_number_perm+0x219/0x5f0 [ 309.259474][T10836] ? tomoyo_path_number_perm+0x219/0x5f0 [ 309.259510][T10836] ? do_vfs_ioctl+0x116f/0x1530 [ 309.259544][T10836] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 309.259587][T10836] ? do_futex+0x3e7/0x4e0 [ 309.259639][T10836] ? __fget_files+0x2a/0x420 [ 309.259665][T10836] ? __fget_files+0x2a/0x420 [ 309.259709][T10836] ? __fget_files+0x2a/0x420 [ 309.259739][T10836] ? bpf_lsm_file_ioctl+0x9/0x20 [ 309.259770][T10836] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 309.259803][T10836] __se_sys_ioctl+0xfc/0x170 [ 309.259838][T10836] do_syscall_64+0x166/0x520 [ 309.259865][T10836] ? trace_irq_disable+0x3b/0x140 [ 309.259892][T10836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.259916][T10836] ? clear_bhb_loop+0x70/0xc0 [ 309.259946][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.259970][T10836] RIP: 0033:0x7f025f79e159 [ 309.259993][T10836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.260013][T10836] RSP: 002b:00007f0260607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.260040][T10836] RAX: ffffffffffffffda RBX: 00007f025fa25fa0 RCX: 00007f025f79e159 [ 309.260058][T10836] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 309.260074][T10836] RBP: 00007f025f83506b R08: 0000000000000000 R09: 0000000000000000 [ 309.260089][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.260104][T10836] R13: 00007f025fa26038 R14: 00007f025fa25fa0 R15: 00007ffee3237be8 [ 309.260138][T10836] [ 310.144972][T10854] syzkaller1: entered promiscuous mode [ 310.144996][T10854] syzkaller1: entered allmulticast mode [ 311.585748][T10912] FAULT_INJECTION: forcing a failure. [ 311.585748][T10912] name failslab, interval 1, probability 0, space 0, times 0 [ 311.585791][T10912] CPU: 1 UID: 0 PID: 10912 Comm: syz.7.1584 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 311.585825][T10912] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 311.585835][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.585861][T10912] Call Trace: [ 311.585870][T10912] [ 311.585881][T10912] dump_stack_lvl+0xe8/0x150 [ 311.585917][T10912] should_fail_ex+0x3eb/0x540 [ 311.585959][T10912] should_failslab+0xa8/0x100 [ 311.585992][T10912] __kmalloc_cache_noprof+0x9e/0x600 [ 311.586018][T10912] ? __kmalloc_cache_noprof+0x148/0x600 [ 311.586040][T10912] ? vlan_vid_add+0x303/0x750 [ 311.586071][T10912] ? vlan_vid_add+0x303/0x750 [ 311.586117][T10912] vlan_vid_add+0x303/0x750 [ 311.586159][T10912] register_vlan_dev+0x9c/0x830 [ 311.586193][T10912] ? alloc_netdev_mqs+0xe78/0x12c0 [ 311.586229][T10912] register_vlan_device+0x393/0x4b0 [ 311.586267][T10912] ? __pfx_register_vlan_device+0x10/0x10 [ 311.586302][T10912] ? security_capable+0x7e/0x2c0 [ 311.586343][T10912] vlan_ioctl_handler+0x248/0x630 [ 311.586376][T10912] ? __pfx___mutex_lock+0x10/0x10 [ 311.586404][T10912] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 311.586455][T10912] ? do_futex+0x3e7/0x4e0 [ 311.586502][T10912] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 311.586538][T10912] sock_ioctl+0x612/0x7e0 [ 311.586569][T10912] ? __fget_files+0x2a/0x420 [ 311.586594][T10912] ? __pfx_sock_ioctl+0x10/0x10 [ 311.586624][T10912] ? __fget_files+0x2a/0x420 [ 311.586650][T10912] ? __fget_files+0x2a/0x420 [ 311.586680][T10912] ? bpf_lsm_file_ioctl+0x9/0x20 [ 311.586711][T10912] ? __pfx_sock_ioctl+0x10/0x10 [ 311.586741][T10912] __se_sys_ioctl+0xfc/0x170 [ 311.586776][T10912] do_syscall_64+0x166/0x520 [ 311.586807][T10912] ? trace_irq_disable+0x3b/0x140 [ 311.586835][T10912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.586879][T10912] ? clear_bhb_loop+0x70/0xc0 [ 311.586909][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.586934][T10912] RIP: 0033:0x7fd36b79e159 [ 311.586957][T10912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.586983][T10912] RSP: 002b:00007fd36c5bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.587009][T10912] RAX: ffffffffffffffda RBX: 00007fd36ba25fa0 RCX: 00007fd36b79e159 [ 311.587027][T10912] RDX: 0000200000000280 RSI: 0000000000008982 RDI: 0000000000000004 [ 311.587043][T10912] RBP: 00007fd36b83506b R08: 0000000000000000 R09: 0000000000000000 [ 311.587059][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.587074][T10912] R13: 00007fd36ba26038 R14: 00007fd36ba25fa0 R15: 00007ffe5f20b098 [ 311.587118][T10912] [ 311.729934][ T5694] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 311.945870][ T5694] usb 10-1: Using ep0 maxpacket: 8 [ 311.946613][ T5694] usb 10-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 311.953761][ T5694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.953788][ T5694] usb 10-1: Product: syz [ 311.953804][ T5694] usb 10-1: Manufacturer: syz [ 311.953820][ T5694] usb 10-1: SerialNumber: syz [ 311.993427][ T5694] usb 10-1: config 0 descriptor?? [ 312.247181][ T5694] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 313.486287][ T5694] usb write operation failed. (-71) [ 313.489935][ T5694] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.490484][ T5694] dvbdev: DVB: registering new adapter (Terratec H7) [ 313.490531][ T5694] usb 10-1: media controller created [ 313.513306][ T5694] usb read operation failed. (-71) [ 313.514239][ T5694] usb write operation failed. (-71) [ 313.598009][ T5694] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 313.618076][ T5694] usb 10-1: USB disconnect, device number 4 [ 314.132834][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1603'. [ 314.395245][T11003] loop6: detected capacity change from 0 to 2640 [ 314.449589][ T5624] buffer_io_error: 907 callbacks suppressed [ 314.449609][ T5624] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.451828][ T5624] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.452300][ T5624] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.452739][ T5624] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.454927][ T5624] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.760381][T11054] nvmet: Invalid value 'ip' for adrfam [ 316.684468][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1639'. [ 316.777995][T10774] IPVS: starting estimator thread 0... [ 316.865989][T11107] IPVS: using max 27 ests per chain, 64800 per kthread [ 316.955902][T10591] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 317.108692][T10591] usb 10-1: New USB device found: idVendor=0925, idProduct=8888, bcdDevice=0.00 [ 317.109753][T10591] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.113440][T10591] usb 10-1: config 0 descriptor?? [ 317.221167][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.221229][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.353971][T10591] usbhid 10-1:0.0: can't add hid device: -71 [ 317.354100][T10591] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 317.372613][T10591] usb 10-1: USB disconnect, device number 5 [ 319.353726][T11204] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1678'. [ 320.027266][T11231] batadv_slave_1: entered promiscuous mode [ 320.089319][T11228] batadv_slave_1: left promiscuous mode [ 321.222115][T11270] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1704'. [ 321.255992][ T5716] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 321.409006][ T5716] usb 10-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 321.412207][ T5716] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.412236][ T5716] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.413425][ T5716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 321.413452][ T5716] usb 10-1: SerialNumber: syz [ 321.684531][ T5716] usb 10-1: 0:2 : does not exist [ 321.797881][ T5716] usb 10-1: USB disconnect, device number 6 [ 321.848823][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.274741][T11314] netlink: 'syz.7.1722': attribute type 1 has an invalid length. [ 322.274767][T11314] netlink: 'syz.7.1722': attribute type 4 has an invalid length. [ 322.274783][T11314] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1722'. [ 322.473963][T11322] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 322.475628][T11322] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 322.612721][T11327] fuse: Bad value for 'fd' [ 322.724974][T11329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 322.768725][T11333] overlayfs: failed to clone lowerpath [ 322.931865][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 322.932051][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 322.966553][T11343] syzkaller1: entered promiscuous mode [ 322.966579][T11343] syzkaller1: entered allmulticast mode [ 322.999055][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 322.999205][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 323.029832][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 323.029995][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 323.216493][T10591] libceph: connect (1)[c::]:6789 error -101 [ 323.216664][T10591] libceph: mon0 (1)[c::]:6789 connect error [ 323.291233][T10591] libceph: connect (1)[c::]:6789 error -101 [ 323.291378][T10591] libceph: mon0 (1)[c::]:6789 connect error [ 323.293973][T11350] syz.9.1736 (11350): drop_caches: 2 [ 323.728161][T10591] libceph: connect (1)[c::]:6789 error -101 [ 323.728286][T10591] libceph: mon0 (1)[c::]:6789 connect error [ 323.753206][T11346] ceph: No mds server is up or the cluster is laggy [ 323.763208][T11339] ceph: No mds server is up or the cluster is laggy [ 323.803490][T10591] libceph: connect (1)[c::]:6789 error -101 [ 323.803645][T10591] libceph: mon0 (1)[c::]:6789 connect error [ 324.364777][T11400] FAULT_INJECTION: forcing a failure. [ 324.364777][T11400] name failslab, interval 1, probability 0, space 0, times 0 [ 324.364816][T11400] CPU: 0 UID: 0 PID: 11400 Comm: syz.7.1753 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 324.364852][T11400] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 324.364863][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.364879][T11400] Call Trace: [ 324.364890][T11400] [ 324.364901][T11400] dump_stack_lvl+0xe8/0x150 [ 324.364937][T11400] should_fail_ex+0x3eb/0x540 [ 324.364967][T11400] should_failslab+0xa8/0x100 [ 324.365001][T11400] ? __kernfs_new_node+0xe6/0x980 [ 324.365033][T11400] kmem_cache_alloc_noprof+0x9c/0x600 [ 324.365058][T11400] ? kstrdup+0x81/0x100 [ 324.365081][T11400] ? __kernfs_new_node+0xe6/0x980 [ 324.365120][T11400] __kernfs_new_node+0xe6/0x980 [ 324.365162][T11400] ? __pfx___kernfs_new_node+0x10/0x10 [ 324.365195][T11400] ? kernfs_root+0x1c/0x230 [ 324.365232][T11400] ? kernfs_root+0x1c/0x230 [ 324.365261][T11400] ? kernfs_root+0x1c/0x230 [ 324.365289][T11400] ? kernfs_root+0x1c/0x230 [ 324.365328][T11400] kernfs_create_dir_ns+0xf7/0x220 [ 324.365391][T11400] sysfs_create_dir_ns+0x12f/0x2a0 [ 324.365424][T11400] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 324.365463][T11400] ? do_raw_spin_unlock+0xf5/0x200 [ 324.365495][T11400] kobject_add_internal+0x622/0xcd0 [ 324.365532][T11400] kobject_add+0x163/0x240 [ 324.365564][T11400] ? __pfx_kobject_add+0x10/0x10 [ 324.365589][T11400] ? kobject_put+0x50f/0x550 [ 324.365620][T11400] ? get_device_parent+0x366/0x3a0 [ 324.365651][T11400] device_add+0x3fa/0xb80 [ 324.365681][T11400] netdev_register_kobject+0x197/0x350 [ 324.365734][T11400] register_netdevice+0x142e/0x1eb0 [ 324.365777][T11400] ? __pfx_register_netdevice+0x10/0x10 [ 324.365805][T11400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 324.365839][T11400] ? idr_alloc+0x89/0xd0 [ 324.365868][T11400] ppp_dev_configure+0x806/0xaa0 [ 324.365897][T11400] ? alloc_netdev_mqs+0xf0e/0x12c0 [ 324.365932][T11400] ppp_ioctl+0xaff/0x1c00 [ 324.365966][T11400] ? __pfx_ppp_ioctl+0x10/0x10 [ 324.365992][T11400] ? __fget_files+0x2a/0x420 [ 324.366019][T11400] ? __fget_files+0x2a/0x420 [ 324.366042][T11400] ? __fget_files+0x2a/0x420 [ 324.366069][T11400] ? bpf_lsm_file_ioctl+0x9/0x20 [ 324.366097][T11400] ? __pfx_ppp_ioctl+0x10/0x10 [ 324.366125][T11400] __se_sys_ioctl+0xfc/0x170 [ 324.366156][T11400] do_syscall_64+0x166/0x520 [ 324.366186][T11400] ? trace_irq_disable+0x3b/0x140 [ 324.366212][T11400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.366252][T11400] ? clear_bhb_loop+0x70/0xc0 [ 324.366286][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.366310][T11400] RIP: 0033:0x7fd36b79e159 [ 324.366332][T11400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.366361][T11400] RSP: 002b:00007fd36c5bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.366388][T11400] RAX: ffffffffffffffda RBX: 00007fd36ba25fa0 RCX: 00007fd36b79e159 [ 324.366406][T11400] RDX: 00002000000000c0 RSI: 00000000c004743e RDI: 0000000000000004 [ 324.366423][T11400] RBP: 00007fd36b83506b R08: 0000000000000000 R09: 0000000000000000 [ 324.366439][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.366453][T11400] R13: 00007fd36ba26038 R14: 00007fd36ba25fa0 R15: 00007ffe5f20b098 [ 324.366490][T11400] [ 324.431293][T11316] Bluetooth: hci1: command 0x0406 tx timeout [ 324.431344][ T4925] Bluetooth: hci3: command 0x0406 tx timeout [ 324.655260][T11400] kobject: kobject_add_internal failed for ppp0 (error: -12 parent: net) [ 325.983661][T11444] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 327.520106][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1785'. [ 329.044934][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 329.871778][T11558] fuse: Bad value for 'fd' [ 330.027049][T11568] tipc: Enabling of bearer rejected, failed to enable media [ 330.448607][T11587] warning: `syz.7.1827' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 330.790253][T11607] fuse: Bad value for 'fd' [ 331.216537][T11624] input: syz0 as /devices/virtual/input/input29 [ 333.361316][T11669] overlayfs: failed to clone upperpath [ 333.914172][T11676] fuse: fd is not a fuse device [ 335.183525][T11708] fuse: Bad value for 'fd' [ 335.387066][T11719] fuse: Bad value for 'fd' [ 335.388826][T11719] 9pnet_fd: p9_fd_create_unix (11719): problem connecting socket: ./file0: -111 [ 335.516209][T11723] fuse: Bad value for 'fd' [ 335.591036][T11726] overlayfs: failed to clone upperpath [ 335.607882][T11727] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 335.607908][T11727] overlayfs: failed to set xattr on upper [ 335.607918][T11727] overlayfs: ...falling back to redirect_dir=nofollow. [ 335.607929][T11727] overlayfs: ...falling back to uuid=null. [ 335.921562][T11738] af_packet: packet size is too long (8192 > 2016) [ 336.813675][T11767] fuse: fd is not a fuse device [ 336.874864][T11771] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1899'. [ 336.977592][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 337.961368][T11804] netlink: 'syz.7.1914': attribute type 4 has an invalid length. [ 338.369466][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1920'. [ 338.369492][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1920'. [ 338.763223][ T4925] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.765690][ T4925] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.792893][ T4925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.814626][ T4925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.827238][ T4925] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.783333][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 339.861864][T11829] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.862085][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.862221][T11829] bridge_slave_0: entered allmulticast mode [ 339.863991][T11829] bridge_slave_0: entered promiscuous mode [ 339.893389][T11829] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.893544][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.893674][T11829] bridge_slave_1: entered allmulticast mode [ 339.895322][T11829] bridge_slave_1: entered promiscuous mode [ 339.958647][T11829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.961529][T11829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.015060][T11829] team0: Port device team_slave_0 added [ 340.023730][T11829] team0: Port device team_slave_1 added [ 340.071042][T11829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.071061][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.071090][T11829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.073293][T11829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.073308][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.073333][T11829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.235751][T11829] hsr_slave_0: entered promiscuous mode [ 340.239877][T11829] hsr_slave_1: entered promiscuous mode [ 340.241499][T11829] debugfs: 'hsr0' already exists in 'hsr' [ 340.241520][T11829] Cannot create hsr debugfs directory [ 340.897129][ T54] Bluetooth: hci6: command tx timeout [ 341.193929][T11829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.211035][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.213490][T11829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.241989][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.244337][T11829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.266255][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.268768][T11829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.290893][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.451163][T11829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.494669][T11829] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.513292][T10777] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.513436][T10777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.551961][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.552070][T10789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.462328][T11829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.647513][T11829] veth0_vlan: entered promiscuous mode [ 342.675726][T11829] veth1_vlan: entered promiscuous mode [ 342.794914][T11829] veth0_macvtap: entered promiscuous mode [ 342.840682][T11829] veth1_macvtap: entered promiscuous mode [ 342.976196][ T5616] Bluetooth: hci6: command tx timeout [ 343.007642][T11829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.067436][T11829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.126361][T10775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.127237][T10775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.127276][T10775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.127310][T10775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.297944][T11983] syzkaller0: entered allmulticast mode [ 343.452983][T11983] syzkaller0 (unregistering): left allmulticast mode [ 343.759309][T10777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.759331][T10777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.872428][T10789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.872451][T10789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.914392][T11997] fuse: fd is not a fuse device [ 344.866245][ T5716] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 345.020554][ T5716] usb 2-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 345.023518][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.053361][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.053392][ T5716] usb 2-1: Product: syz [ 345.053409][ T5716] usb 2-1: Manufacturer: syz [ 345.053427][ T5716] usb 2-1: SerialNumber: syz [ 345.056227][ T5616] Bluetooth: hci6: command tx timeout [ 345.105091][ T5716] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 345.105330][ T5716] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 345.126593][ T5716] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 345.130997][ T5716] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 345.131085][ T5716] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 345.131172][ T5716] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 345.131249][ T5716] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 345.131326][ T5716] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 345.157363][ T5716] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 345.684258][T10591] usb 2-1: USB disconnect, device number 7 [ 345.712845][T10591] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 345.723026][T10591] keyspan 2-1:1.0: device disconnected [ 346.542164][T12084] FAULT_INJECTION: forcing a failure. [ 346.542164][T12084] name failslab, interval 1, probability 0, space 0, times 0 [ 346.542201][T12084] CPU: 0 UID: 0 PID: 12084 Comm: syz.1.1986 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 346.542232][T12084] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 346.542242][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.542256][T12084] Call Trace: [ 346.542265][T12084] [ 346.542275][T12084] dump_stack_lvl+0xe8/0x150 [ 346.542309][T12084] should_fail_ex+0x3eb/0x540 [ 346.542338][T12084] should_failslab+0xa8/0x100 [ 346.542368][T12084] ? sctp_chunkify+0x5a/0x260 [ 346.542404][T12084] kmem_cache_alloc_noprof+0x9c/0x600 [ 346.542427][T12084] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 346.542448][T12084] ? __alloc_skb+0x27a/0x7a0 [ 346.542469][T12084] ? sctp_chunkify+0x5a/0x260 [ 346.542506][T12084] sctp_chunkify+0x5a/0x260 [ 346.542541][T12084] _sctp_make_chunk+0x122/0x290 [ 346.542576][T12084] sctp_make_init+0x5e9/0xe20 [ 346.542604][T12084] ? is_bpf_text_address+0x292/0x2b0 [ 346.542646][T12084] ? __pfx_sctp_make_init+0x10/0x10 [ 346.542688][T12084] ? stack_trace_save+0xa9/0x100 [ 346.542712][T12084] ? __pfx_stack_trace_save+0x10/0x10 [ 346.542740][T12084] sctp_sf_do_prm_asoc+0xcf/0x3f0 [ 346.542768][T12084] sctp_do_sm+0x239/0x5dd0 [ 346.542801][T12084] ? kasan_save_track+0x3e/0x80 [ 346.542825][T12084] ? __pfx_sctp_pname+0x10/0x10 [ 346.542849][T12084] ? __kmalloc_cache_noprof+0x31c/0x600 [ 346.542871][T12084] ? sctp_stream_init_ext+0x57/0x180 [ 346.542897][T12084] ? sctp_sendmsg+0x1bb5/0x2d00 [ 346.542916][T12084] ? ___sys_sendmsg+0x2a5/0x360 [ 346.542938][T12084] ? __sys_sendmmsg+0x273/0x4d0 [ 346.542960][T12084] ? do_syscall_64+0x166/0x520 [ 346.542984][T12084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.543013][T12084] ? __pfx_sctp_do_sm+0x10/0x10 [ 346.543076][T12084] ? __sk_mem_raise_allocated+0x292/0x1250 [ 346.543103][T12084] ? __genradix_ptr+0x1e1/0x220 [ 346.543138][T12084] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 346.543165][T12084] sctp_sendmsg_to_asoc+0x1489/0x1920 [ 346.543211][T12084] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 346.543233][T12084] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 346.543273][T12084] ? __local_bh_enable_ip+0xd6/0x140 [ 346.543297][T12084] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 346.543323][T12084] ? security_sctp_bind_connect+0x7e/0x2c0 [ 346.543354][T12084] sctp_sendmsg+0x1bb5/0x2d00 [ 346.543388][T12084] ? __pfx_sctp_sendmsg+0x10/0x10 [ 346.543407][T12084] ? finish_task_switch+0x40e/0xc60 [ 346.543437][T12084] ? __lock_acquire+0x747/0x2de0 [ 346.543471][T12084] ? aa_sock_msg_perm+0xf5/0x210 [ 346.543490][T12084] ? sock_rps_record_flow+0x19/0x350 [ 346.543522][T12084] ? inet_sendmsg+0x298/0x320 [ 346.543552][T12084] ? __pfx_inet_sendmsg+0x10/0x10 [ 346.543580][T12084] sock_sendmsg_nosec+0x10e/0x180 [ 346.543611][T12084] ____sys_sendmsg+0x54e/0x850 [ 346.543640][T12084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.543672][T12084] ? import_iovec+0x73/0xa0 [ 346.543699][T12084] ___sys_sendmsg+0x2a5/0x360 [ 346.543720][T12084] ? __lock_acquire+0x747/0x2de0 [ 346.543746][T12084] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.543776][T12084] ? __pfx_futex_wake_mark+0x10/0x10 [ 346.543828][T12084] ? __fget_files+0x3a2/0x420 [ 346.543850][T12084] ? __fget_files+0x2a/0x420 [ 346.543881][T12084] __sys_sendmmsg+0x273/0x4d0 [ 346.543910][T12084] ? __pfx___sys_sendmmsg+0x10/0x10 [ 346.543931][T12084] ? do_futex+0x3e7/0x4e0 [ 346.543987][T12084] ? rcu_is_watching+0x16/0xb0 [ 346.544023][T12084] __x64_sys_sendmmsg+0xa0/0xc0 [ 346.544047][T12084] do_syscall_64+0x166/0x520 [ 346.544071][T12084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.544092][T12084] ? clear_bhb_loop+0x70/0xc0 [ 346.544116][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.544137][T12084] RIP: 0033:0x7f3f3859e159 [ 346.544156][T12084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.544173][T12084] RSP: 002b:00007f3f393fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.544201][T12084] RAX: ffffffffffffffda RBX: 00007f3f38825fa0 RCX: 00007f3f3859e159 [ 346.544217][T12084] RDX: 0000000000000001 RSI: 0000200000002680 RDI: 0000000000000004 [ 346.544249][T12084] RBP: 00007f3f3863506b R08: 0000000000000000 R09: 0000000000000000 [ 346.544263][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.544296][T12084] R13: 00007f3f38826038 R14: 00007f3f38825fa0 R15: 00007ffe5b187798 [ 346.544333][T12084] [ 347.135955][ T5616] Bluetooth: hci6: command tx timeout [ 348.381293][T10777] Bluetooth: hci7: Frame reassembly failed (-84) [ 348.965938][ T1559] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 349.115927][ T1559] usb 2-1: Using ep0 maxpacket: 16 [ 349.116636][ T1559] usb 2-1: New USB device found: idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 349.119227][ T1559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.119261][ T1559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.119287][ T1559] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.119333][ T1559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.188740][ T1559] usb 2-1: config 0 descriptor?? [ 349.621864][ T1559] hid_parser_main: 7523 callbacks suppressed [ 349.622436][ T1559] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 349.622475][ T1559] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 349.622505][ T1559] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 349.622534][ T1559] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 349.622562][ T1559] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 349.683331][ T1559] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 349.813839][T12144] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2001'. [ 349.985602][ T1559] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 349.996979][ T1559] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 350.080428][ T1559] usb 2-1: USB disconnect, device number 8 [ 350.101709][T10591] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 350.101789][T10591] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 350.101855][T10591] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 350.101913][T10591] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 350.416140][ T54] Bluetooth: hci7: command 0x1003 tx timeout [ 350.416298][ T5616] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 350.661979][T10591] kernel read not supported for file /swaps (pid: 10591 comm: kworker/0:8) [ 351.494181][T12217] CacheFiles: Failed to register: -30 [ 352.302425][T10795] IPVS: starting estimator thread 0... [ 352.390229][T12244] IPVS: using max 29 ests per chain, 69600 per kthread [ 352.974892][T12269] fuse: fd is not a fuse device [ 354.234335][T12307] fuse: fd is not a fuse device [ 356.396865][T12393] overlayfs: failed to clone upperpath [ 358.972118][T12494] syzkaller1: entered promiscuous mode [ 358.972142][T12494] syzkaller1: entered allmulticast mode [ 359.103225][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2111'. [ 359.125411][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2111'. [ 359.765993][T10591] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 359.916233][T10591] usb 2-1: Using ep0 maxpacket: 32 [ 359.917859][T10591] usb 2-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 359.921149][T10591] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 359.921176][T10591] usb 2-1: config 0 has no interface number 0 [ 359.921221][T10591] usb 2-1: config 0 interface 12 has no altsetting 0 [ 359.924238][T10591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.924260][T10591] usb 2-1: Product: syz [ 359.924275][T10591] usb 2-1: Manufacturer: syz [ 359.924290][T10591] usb 2-1: SerialNumber: syz [ 359.990276][T10591] usb 2-1: config 0 descriptor?? [ 360.776128][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.840279][T12566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.905032][T12572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.435120][T10591] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 361.435180][T10591] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 361.435210][T10591] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 361.435288][T10591] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 361.449290][T10591] usb 2-1: USB disconnect, device number 9 [ 362.081895][T12609] fuse: fd is not a fuse device [ 362.177114][T12614] fuse: fd is not a fuse device [ 362.255342][T12619] netlink: 'syz.2.2153': attribute type 2 has an invalid length. [ 362.255372][T12619] netlink: 'syz.2.2153': attribute type 8 has an invalid length. [ 362.255385][T12619] netlink: 'syz.2.2153': attribute type 9 has an invalid length. [ 362.255398][T12619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2153'. [ 362.343797][T12622] EXT4-fs warning (device sda1): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 362.370413][T12623] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 362.370438][T12623] netlink: 'syz.3.2155': attribute type 4 has an invalid length. [ 362.370464][T12623] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2155'. [ 362.372983][T12623] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 362.373006][T12623] netlink: 'syz.3.2155': attribute type 4 has an invalid length. [ 362.373021][T12623] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2155'. [ 362.802747][T12641] FAULT_INJECTION: forcing a failure. [ 362.802747][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 362.802776][T12641] CPU: 1 UID: 0 PID: 12641 Comm: syz.1.2164 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 362.802806][T12641] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 362.802813][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.802824][T12641] Call Trace: [ 362.802831][T12641] [ 362.802838][T12641] dump_stack_lvl+0xe8/0x150 [ 362.802865][T12641] should_fail_ex+0x3eb/0x540 [ 362.802887][T12641] should_failslab+0xa8/0x100 [ 362.802912][T12641] __kmalloc_cache_noprof+0x9e/0x600 [ 362.802931][T12641] ? __pfx_snd_pcm_hw_rule_mulkdiv+0x10/0x10 [ 362.802952][T12641] ? loopback_open+0x12a/0xaa0 [ 362.802971][T12641] ? loopback_open+0x12a/0xaa0 [ 362.802995][T12641] loopback_open+0x12a/0xaa0 [ 362.803016][T12641] ? snd_pcm_attach_substream+0x845/0xb10 [ 362.803045][T12641] snd_pcm_open_substream+0xff1/0x24f0 [ 362.803081][T12641] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 362.803107][T12641] ? __kmalloc_cache_noprof+0x148/0x600 [ 362.803124][T12641] ? snd_pcm_oss_open+0xa39/0x1c60 [ 362.803140][T12641] ? snd_pcm_oss_open+0xa39/0x1c60 [ 362.803172][T12641] snd_pcm_oss_open+0xbb1/0x1c60 [ 362.803215][T12641] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 362.803230][T12641] ? tomoyo_check_open_permission+0x38e/0x470 [ 362.803259][T12641] ? do_raw_spin_lock+0x12b/0x2f0 [ 362.803287][T12641] ? __pfx_default_wake_function+0x10/0x10 [ 362.803321][T12641] chrdev_open+0x4d9/0x600 [ 362.803345][T12641] ? __pfx_chrdev_open+0x10/0x10 [ 362.803369][T12641] ? devcgroup_check_permission+0x31/0x8f0 [ 362.803392][T12641] ? __pfx_chrdev_open+0x10/0x10 [ 362.803413][T12641] do_dentry_open+0x80e/0x1360 [ 362.803443][T12641] vfs_open_consume+0x4a/0x350 [ 362.803465][T12641] ? path_openat+0x148a/0x1da0 [ 362.803485][T12641] path_openat+0x14a6/0x1da0 [ 362.803517][T12641] do_file_open+0x23e/0x4a0 [ 362.803540][T12641] ? __pfx_do_file_open+0x10/0x10 [ 362.803573][T12641] ? _raw_spin_unlock+0x28/0x50 [ 362.803588][T12641] ? alloc_fd+0x6af/0x760 [ 362.803610][T12641] do_sys_openat2+0x115/0x200 [ 362.803633][T12641] ? __se_sys_futex+0x3a8/0x450 [ 362.803655][T12641] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.803681][T12641] ? __pfx___se_sys_futex+0x10/0x10 [ 362.803703][T12641] ? __pfx___se_sys_mount+0x10/0x10 [ 362.803723][T12641] __x64_sys_openat+0x138/0x170 [ 362.803751][T12641] do_syscall_64+0x166/0x520 [ 362.803769][T12641] ? trace_irq_disable+0x3b/0x140 [ 362.803787][T12641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.803808][T12641] ? clear_bhb_loop+0x70/0xc0 [ 362.803827][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.803843][T12641] RIP: 0033:0x7f3f3859e159 [ 362.803858][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.803872][T12641] RSP: 002b:00007f3f393fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.803888][T12641] RAX: ffffffffffffffda RBX: 00007f3f38825fa0 RCX: 00007f3f3859e159 [ 362.803900][T12641] RDX: 0000000000008002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 362.803910][T12641] RBP: 00007f3f3863506b R08: 0000000000000000 R09: 0000000000000000 [ 362.803920][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.803934][T12641] R13: 00007f3f38826038 R14: 00007f3f38825fa0 R15: 00007ffe5b187798 [ 362.803957][T12641] [ 364.159016][T12675] overlayfs: failed to clone upperpath [ 364.360958][T12685] netlink: 'syz.1.2184': attribute type 4 has an invalid length. [ 364.382258][T12685] netlink: 'syz.1.2184': attribute type 4 has an invalid length. [ 364.684620][T12699] FAULT_INJECTION: forcing a failure. [ 364.684620][T12699] name failslab, interval 1, probability 0, space 0, times 0 [ 364.684655][T12699] CPU: 1 UID: 0 PID: 12699 Comm: syz.1.2190 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 364.684686][T12699] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 364.684695][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.684709][T12699] Call Trace: [ 364.684717][T12699] [ 364.684726][T12699] dump_stack_lvl+0xe8/0x150 [ 364.684761][T12699] should_fail_ex+0x3eb/0x540 [ 364.684787][T12699] should_failslab+0xa8/0x100 [ 364.684816][T12699] ? __kernfs_new_node+0xe6/0x980 [ 364.684845][T12699] kmem_cache_alloc_noprof+0x9c/0x600 [ 364.684872][T12699] ? __kernfs_new_node+0xe6/0x980 [ 364.684924][T12699] __kernfs_new_node+0xe6/0x980 [ 364.684963][T12699] ? __pfx___kernfs_new_node+0x10/0x10 [ 364.684991][T12699] ? lock_acquire+0x115/0x350 [ 364.685015][T12699] ? kernfs_root+0x1c/0x230 [ 364.685048][T12699] ? kernfs_root+0x1c/0x230 [ 364.685076][T12699] ? kernfs_root+0x1c/0x230 [ 364.685101][T12699] ? kernfs_root+0x1c/0x230 [ 364.685139][T12699] kernfs_new_node+0xeb/0x140 [ 364.685173][T12699] __kernfs_create_file+0x4b/0x2e0 [ 364.685198][T12699] sysfs_add_file_mode_ns+0x237/0x300 [ 364.685230][T12699] sysfs_merge_group+0x183/0x320 [ 364.685262][T12699] ? __pfx_sysfs_merge_group+0x10/0x10 [ 364.685288][T12699] ? device_add_attrs+0x5c3/0x600 [ 364.685321][T12699] ? __pfx_device_add_attrs+0x10/0x10 [ 364.685355][T12699] dpm_sysfs_add+0xd2/0x270 [ 364.685391][T12699] device_add+0x4ca/0xb80 [ 364.685424][T12699] device_create+0x269/0x300 [ 364.685460][T12699] ? timer_init_key+0x161/0x2c0 [ 364.685485][T12699] ? __pfx_device_create+0x10/0x10 [ 364.685517][T12699] ? ieee80211_roc_setup+0x119/0x1d0 [ 364.685551][T12699] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 364.685578][T12699] mac80211_hwsim_new_radio+0x3f3/0x5720 [ 364.685642][T12699] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 364.685665][T12699] ? trace_kmalloc+0x2a/0xf0 [ 364.685695][T12699] hwsim_new_radio_nl+0xd8b/0xf90 [ 364.685731][T12699] genl_family_rcv_msg_doit+0x233/0x340 [ 364.685760][T12699] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 364.685793][T12699] ? bpf_lsm_capable+0x9/0x20 [ 364.685821][T12699] ? security_capable+0x7e/0x2c0 [ 364.685858][T12699] genl_rcv_msg+0x614/0x7a0 [ 364.685883][T12699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.685903][T12699] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 364.685925][T12699] ? __asan_memcpy+0x40/0x70 [ 364.685954][T12699] netlink_rcv_skb+0x226/0x4a0 [ 364.685983][T12699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.686004][T12699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.686039][T12699] ? down_read+0x2b9/0x320 [ 364.686063][T12699] genl_rcv+0x28/0x40 [ 364.686077][T12699] netlink_unicast+0x7bd/0x940 [ 364.686104][T12699] netlink_sendmsg+0x7c3/0xae0 [ 364.686138][T12699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.686166][T12699] ? apparmor_socket_sendmsg+0x18b/0x360 [ 364.686192][T12699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.686213][T12699] sock_sendmsg_nosec+0x13a/0x180 [ 364.686238][T12699] ____sys_sendmsg+0x54e/0x850 [ 364.686261][T12699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.686285][T12699] ? import_iovec+0x73/0xa0 [ 364.686307][T12699] ___sys_sendmsg+0x2a5/0x360 [ 364.686323][T12699] ? __lock_acquire+0x747/0x2de0 [ 364.686345][T12699] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.686365][T12699] ? futex_wait+0x2a2/0x390 [ 364.686403][T12699] ? __fget_files+0x3a2/0x420 [ 364.686419][T12699] ? __fget_files+0x2a/0x420 [ 364.686442][T12699] __x64_sys_sendmsg+0x1b1/0x290 [ 364.686462][T12699] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.686495][T12699] do_syscall_64+0x166/0x520 [ 364.686513][T12699] ? trace_irq_disable+0x3b/0x140 [ 364.686532][T12699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.686548][T12699] ? clear_bhb_loop+0x70/0xc0 [ 364.686567][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.686583][T12699] RIP: 0033:0x7f3f3859e159 [ 364.686599][T12699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.686613][T12699] RSP: 002b:00007f3f393fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.686633][T12699] RAX: ffffffffffffffda RBX: 00007f3f38825fa0 RCX: 00007f3f3859e159 [ 364.686646][T12699] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 364.686657][T12699] RBP: 00007f3f3863506b R08: 0000000000000000 R09: 0000000000000000 [ 364.686668][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.686679][T12699] R13: 00007f3f38826038 R14: 00007f3f38825fa0 R15: 00007ffe5b187798 [ 364.686708][T12699] [ 365.214071][T12702] device-mapper: ioctl: Invalid target message parameters. [ 365.325219][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 365.325250][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: kworker/u9:3 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 365.325282][ T5616] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 365.325292][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.325307][ T5616] Workqueue: hci4 hci_rx_work [ 365.325341][ T5616] Call Trace: [ 365.325350][ T5616] [ 365.325360][ T5616] dump_stack_lvl+0xe8/0x150 [ 365.325391][ T5616] sysfs_create_dir_ns+0x271/0x2a0 [ 365.325421][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 365.325451][ T5616] ? do_raw_spin_unlock+0xf5/0x200 [ 365.325487][ T5616] kobject_add_internal+0x622/0xcd0 [ 365.325526][ T5616] kobject_add+0x163/0x240 [ 365.325560][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 365.325595][ T5616] ? get_device_parent+0x366/0x3a0 [ 365.325629][ T5616] device_add+0x3fa/0xb80 [ 365.325661][ T5616] hci_conn_add_sysfs+0xd5/0x210 [ 365.325694][ T5616] le_conn_complete_evt+0x10b2/0x17a0 [ 365.325726][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 365.325752][ T5616] ? __mutex_unlock_slowpath+0x731/0x900 [ 365.325787][ T5616] ? skb_pull_data+0xf0/0x200 [ 365.325820][ T5616] hci_le_conn_complete_evt+0x187/0x470 [ 365.325849][ T5616] hci_event_packet+0x67a/0xf10 [ 365.325888][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 365.325909][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 365.325945][ T5616] ? kcov_remote_start+0x523/0x7e0 [ 365.325974][ T5616] ? hci_send_to_monitor+0xdf/0x600 [ 365.326004][ T5616] hci_rx_work+0x2b4/0x1110 [ 365.326051][ T5616] ? process_scheduled_works+0x97a/0x1630 [ 365.326082][ T5616] process_scheduled_works+0xc3d/0x1630 [ 365.326143][ T5616] ? __pfx_process_scheduled_works+0x10/0x10 [ 365.326177][ T5616] ? assign_work+0x3cf/0x5d0 [ 365.326211][ T5616] worker_thread+0xa47/0xfb0 [ 365.326254][ T5616] ? __kthread_parkme+0x71/0x1f0 [ 365.326296][ T5616] kthread+0x38b/0x480 [ 365.326318][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 365.326346][ T5616] ? __pfx_kthread+0x10/0x10 [ 365.326368][ T5616] ret_from_fork+0x514/0xb70 [ 365.326402][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 365.326432][ T5616] ? __switch_to+0xc78/0x1410 [ 365.326462][ T5616] ? __pfx_kthread+0x10/0x10 [ 365.326485][ T5616] ret_from_fork_asm+0x1a/0x30 [ 365.326530][ T5616] [ 365.336790][ T5616] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 365.336838][ T5616] Bluetooth: hci4: failed to register connection device [ 365.416374][ T33] audit: type=1326 audit(1790773266.082:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.3.2188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d2f9e159 code=0x7fc00000 [ 365.416571][ T33] audit: type=1326 audit(1790773266.082:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.3.2188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f93d2f9e159 code=0x7fc00000 [ 365.416670][ T33] audit: type=1326 audit(1790773266.082:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.3.2188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d2f9e159 code=0x7fc00000 [ 365.416745][ T33] audit: type=1326 audit(1790773266.082:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.3.2188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d2f9e159 code=0x7fc00000 [ 365.460164][ T33] audit: type=1326 audit(1790773266.102:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.3.2188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d2f9e159 code=0x7fc00000 [ 366.050033][T12726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 366.499345][ T34] INFO: task syz.6.906:8866 blocked for more than 143 seconds. [ 366.499374][ T34] Tainted: G L Y syzkaller #0 [ 366.499387][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 366.499398][ T34] task:syz.6.906 state:D stack:27432 pid:8866 tgid:8865 ppid:8308 task_flags:0x400140 flags:0x00080002 [ 366.499461][ T34] Call Trace: [ 366.499469][ T34] [ 366.499483][ T34] __schedule+0x1b47/0x5b40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 366.499537][ T34] ? preempt_schedule_notrace+0x56/0x90 [ 366.499570][ T34] ? __pfx___schedule+0x10/0x10 [ 366.499603][ T34] ? schedule+0x90/0x2b0 [ 366.499630][ T34] schedule+0x164/0x2b0 [ 366.499655][ T34] schedule_preempt_disabled+0x13/0x30 [ 366.499679][ T34] __mutex_lock+0x7c4/0x15a0 [ 366.499787][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 366.499819][ T34] ? write_ports+0xb5/0xd10 [ 366.499844][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 366.499889][ T34] write_ports+0xb5/0xd10 [ 366.499914][ T34] ? __pfx_write_ports+0x10/0x10 [ 366.499950][ T34] ? __might_fault+0xaf/0x130 [ 366.499987][ T34] ? _copy_from_user+0x94/0xb0 [ 366.500015][ T34] ? simple_transaction_get ** replaying previous printk message ** [ 366.500015][ T34] ? simple_transaction_get+0x12d/0x160 [ 366.500042][ T34] nfsctl_transaction_write+0x10f/0x160 [ 366.500066][ T34] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 366.500089][ T34] vfs_write+0x296/0xba0 [ 366.500123][ T34] ? __pfx_vfs_write+0x10/0x10 [ 366.500149][ T34] ? __fget_files+0x2a/0x420 [ 366.500172][ T34] ? __fget_files+0x3a2/0x420 [ 366.500193][ T34] ? __fget_files+0x2a/0x420 [ 366.500220][ T34] ? fdget+0x1ac/0x250 [ 366.500250][ T34] ksys_write+0x150/0x270 [ 366.500278][ T34] ? __pfx_ksys_write+0x10/0x10 [ 366.500314][ T34] do_syscall_64+0x166/0x520 [ 366.500339][ T34] ? trace_irq_disable+0x3b/0x140 [ 366.500363][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.500385][ T34] ? clear_bhb_loop+0x70/0xc0 [ 366.500412][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.500433][ T34] RIP: 0033:0x7fcc34b9e159 [ 366.500452][ T34] RSP: 002b:00007fcc35994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.500474][ T34] RAX: ffffffffffffffda RBX: 00007fcc34e25fa0 RCX: 00007fcc34b9e159 [ 366.500491][ T34] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000005 [ 366.500513][ T34] RBP: 00007fcc34c3506b R08: 0000000000000000 R09: 0000000000000000 [ 366.500528][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.500542][ T34] R13: 00007fcc34e26038 R14: 00007fcc34e25fa0 R15: 00007ffe0abf8dd8 [ 366.500575][ T34] [ 366.500646][ T34] [ 366.500646][ T34] Showing all locks held in the system: [ 366.500660][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 366.500677][ T34] #0: ffffffff8f15c520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 366.511034][ T34] locks held by klogd/4965: 1, last CPU#0: [ 366.511081][ T34] #0: ffffffff8f15c520 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 366.511270][ T34] locks held by syz.0.779/8271: 3, on CPU#0: [ 366.511304][ T34] #0: ffff8880770ca630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 366.511446][ T34] #1: ffff8880332b6460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 366.511605][ T34] #2: ffffffff8f49fc80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 366.511810][ T34] locks held by syz.6.906/8866: 3, on CPU#0: [ 366.511860][ T34] #0: ffff888035613eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 366.511984][ T34] #1: ffff888035840460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 366.512124][ T34] #2: ffffffff8f49fc80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 366.512246][ T34] locks held by pr/ttyS0/10076: 2, last CPU#1: [ 366.512272][ T34] #0: ffffffff8f036118 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 366.525567][ T34] #1: ffffffff9b1eb098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 366.525752][ T34] locks held by getty/10100: 2, on CPU#1: [ 366.526026][ T34] #0: ffff88803188e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 366.526159][ T34] #1: ffffc90005fb32e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 366.526330][ T34] locks held by kworker/0:8/10591: 2, last CPU#0: [ 366.526367][ T34] #0: ffff88813fe09d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.526534][ T34] #1: ffffc90004cbfc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.526684][ T34] locks held by kworker/u8:29/10789: 5, last CPU#0: [ 366.526722][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.526859][ T34] #1: ffffc9000340fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.527024][ T34] #2: ffffffff8efe80b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 366.543337][ T34] #3: ffffffff8f23a720 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 366.543517][ T34] #4: ffffffff8efff160 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 366.543681][ T34] locks held by kworker/u8:32/10792: 3, last CPU#0: [ 366.543720][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.543862][ T34] #1: ffffc9000378fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.544011][ T34] #2: ffff8880765a1258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 366.544170][ T34] locks held by syz.9.1744/11369: 3, on CPU#1: [ 366.544210][ T34] #0: ffff88807a9f7970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 366.544341][ T34] #1: ffff8880535f4460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 366.544472][ T34] #2: ffffffff8f49fc80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 366.544605][ T34] locks held by syz.9.1744/11370: 3, on CPU#0: [ 366.544644][ T34] #0: ffff88805b38b0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 366.544770][ T34] #1: ffff8880535f4460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 366.544921][ T34] #2: ffffffff8f49fc80 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 366.574962][ T34] locks held by kworker/u8:45/12573: 2, on CPU#0: [ 366.575002][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.575148][ T34] #1: ffffc90007677c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.575318][ T34] locks held by kworker/u8:49/12577: 3, last CPU#0: [ 366.575356][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.575495][ T34] #1: ffffc900075dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.575642][ T34] #2: ffff8880518b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 366.576155][ T34] locks held by kworker/u8:51/12579: 3, last CPU#0: [ 366.576200][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.576334][ T34] #1: ffffc900075afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.581372][ T34] #2: ffff88807ee18258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 366.588347][ T34] locks held by kworker/u8:52/12580: 3, last CPU#0: [ 366.588391][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.588563][ T34] #1: ffffc9000758fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 366.588729][ T34] #2: ffff88807899d258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 366.588887][ T34] locks held by syz.3.2196/12714: 1, last CPU#0: [ 366.588923][ T34] #0: ffffffff8f15c520 (rcu_read_lock){....}-{1:3}, at: uncharge_batch+0x1d/0x300 [ 366.589052][ T34] locks held by syz.2.2198/12727: 2, last CPU#0: [ 366.589090][ T34] #0: ffff88807feb8460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xb41/0x10f0 [ 366.589245][ T34] #1: ffff88807abe1ae8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 366.589379][ T34] locks held by syz.1.2210/12735: 3, last CPU#0: [ 366.589416][ T34] #0: ffff888033cb1430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 366.589536][ T34] #1: ffff88807a7ce460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 366.589677][ T34] #2: ffff88804cf78288 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 366.610230][ T34] locks held by syz.1.2210/12739: 1, on CPU#1: [ 366.610277][ T34] #0: ffff88802cee8670 (&sig->exec_update_lock){++++}-{4:4}, at: landlock_restrict_sibling_threads+0x271/0x11f0 [ 366.610425][ T34] locks held by modprobe/12740: 1, last CPU#0: [ 366.610463][ T34] #0: ffffffff8f15c520 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x116/0x500 [ 366.610653][ T34] [ 366.610670][ T34] ============================================= [ 366.610670][ T34] [ 366.610706][ T34] NMI backtrace for cpu 0 [ 366.610752][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT(full) [ 366.610848][ T34] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 366.610874][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.610911][ T34] Call Trace: [ 366.610930][ T34] [ 366.610951][ T34] dump_stack_lvl+0xe8/0x150 [ 366.611067][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 366.611160][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 366.611251][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 366.611355][ T34] sys_info+0x135/0x170 [ 366.611434][ T34] watchdog+0x1058/0x10d0 [ 366.611524][ T34] ? watchdog+0x209/0x10d0 [ 366.611558][ T34] kthread+0x38b/0x480 [ 366.611583][ T34] ? __pfx_watchdog+0x10/0x10 [ 366.611607][ T34] ? __pfx_kthread+0x10/0x10 [ 366.611686][ T34] ret_from_fork+0x514/0xb70 [ 366.611804][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 366.611899][ T34] ? __switch_to+0xc78/0x1410 [ 366.611975][ T34] ? __pfx_kthread+0x10/0x10 [ 366.612030][ T34] ret_from_fork_asm+0x1a/0x30 [ 366.612153][ T34] [ 366.612257][ T34] Sending NMI from CPU 0 to CPUs 1: [ 366.612321][ C1] NMI backtrace for cpu 1 [ 366.612336][ C1] CPU: 1 UID: 0 PID: 10076 Comm: pr/ttyS0 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 366.612364][ C1] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 366.612372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.612384][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 366.612411][ C1] Code: e8 ce a5 46 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 72 b8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 366.612427][ C1] RSP: 0018:ffffc90005d178b8 EFLAGS: 00000002 [ 366.612444][ C1] RAX: 1ffffffff363d600 RBX: 00000000000003fd RCX: 0000000000000000 [ 366.612457][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 366.612469][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 366.612481][ C1] R10: dffffc0000000000 R11: ffffffff85828b30 R12: dffffc0000000000 [ 366.612496][ C1] R13: 0000000000000000 R14: ffffffff9b1eb0c0 R15: 0000000000000000 [ 366.612510][ C1] FS: 0000000000000000(0000) GS:ffff888124723000(0000) knlGS:0000000000000000 [ 366.612526][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.612539][ C1] CR2: 00007f5d99f57e20 CR3: 000000005b1c8000 CR4: 00000000003526f0 [ 366.612556][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.612567][ C1] DR3: 000000000000c300 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 366.612579][ C1] Call Trace: [ 366.612587][ C1] [ 366.612595][ C1] wait_for_lsr+0x184/0x2f0 [ 366.612620][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 366.612659][ C1] serial8250_console_write+0xaa1/0x1200 [ 366.612681][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 366.612708][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 366.612729][ C1] ? __schedule+0x1b5d/0x5b40 [ 366.612757][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 366.612799][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 366.612823][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 366.612851][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 366.612871][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 366.612894][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 366.612914][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 366.612937][ C1] ? __kthread_parkme+0x71/0x1f0 [ 366.612963][ C1] ? __kthread_parkme+0x199/0x1f0 [ 366.612991][ C1] kthread+0x38b/0x480 [ 366.613013][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 366.613033][ C1] ? __pfx_kthread+0x10/0x10 [ 366.613050][ C1] ret_from_fork+0x514/0xb70 [ 366.613074][ C1] ? save_fpregs_to_fpstate+0x176/0x200 [ 366.613094][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 366.613119][ C1] ? __switch_to+0xc78/0x1410 [ 366.613141][ C1] ? __pfx_kthread+0x10/0x10 [ 366.613159][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.613191][ C1] [ 366.625380][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 367.801214][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT(full) [ 367.812005][ T34] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 367.817818][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.827902][ T34] Call Trace: [ 367.831190][ T34] [ 367.834128][ T34] vpanic+0x26f/0x710 [ 367.838133][ T34] panic+0xc5/0xd0 [ 367.841871][ T34] ? __pfx_panic+0x10/0x10 [ 367.846295][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 367.851770][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 367.857172][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 367.863348][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 367.869544][ T34] watchdog+0x10cc/0x10d0 [ 367.873895][ T34] ? watchdog+0x209/0x10d0 [ 367.878332][ T34] kthread+0x38b/0x480 [ 367.882422][ T34] ? __pfx_watchdog+0x10/0x10 [ 367.887116][ T34] ? __pfx_kthread+0x10/0x10 [ 367.891754][ T34] ret_from_fork+0x514/0xb70 [ 367.896387][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 367.901516][ T34] ? __switch_to+0xc78/0x1410 [ 367.906205][ T34] ? __pfx_kthread+0x10/0x10 [ 367.910826][ T34] ret_from_fork_asm+0x1a/0x30 [ 367.915624][ T34] [ 367.919238][ T34] Kernel Offset: disabled [ 367.923589][ T34] Rebooting in 86400 seconds..