last executing test programs: 5.26261043s ago: executing program 2 (id=45): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.989782938s ago: executing program 0 (id=47): mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x3, 0x40032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8000000000000000, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff, 0xffffbfffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff6, 0x40, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) 4.792977794s ago: executing program 0 (id=49): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40054}, 0x4040884) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 4.45432675s ago: executing program 0 (id=52): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 4.33267678s ago: executing program 1 (id=53): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000880)='./cgroup\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x3, 0xf8e, 0x3ff}}, 0x28) 4.304804029s ago: executing program 0 (id=54): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.981633486s ago: executing program 1 (id=56): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f09000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000600000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r1, 0x0, 0x0) 3.941030656s ago: executing program 2 (id=58): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r3, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) 3.728133699s ago: executing program 2 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x7}, "b961f83dcf343bc2", "dc2f65963275f02f3af64bfd04e29ec3", "2138d0bd", "db45c50af93f440d"}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 3.469020633s ago: executing program 2 (id=62): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="201504000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)={0x0, 0x6, 0x4, "2a61129d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x4, "2e4a49c9"}, 0x0, 0x0, 0x0, 0x0}) 3.289632722s ago: executing program 3 (id=64): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000"/118, 0x76, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030", 0x4b, 0x0, 0x0, 0x0) 2.390925626s ago: executing program 3 (id=65): openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.224076497s ago: executing program 3 (id=66): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d53535000", 0x54, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002300)="00000058fe534d4240000100000000000200010001000000000000000300"/40, 0x28, 0x0, 0x0, 0x0) 2.033605287s ago: executing program 3 (id=67): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f0000000380)=""/205, 0xcd}], 0x1) io_setup(0x205, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x0, 0x8}]) 1.980509337s ago: executing program 0 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2]) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0xd, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x400e0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0xca, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x13f, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffffbc, 0x0}, {0x7, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.565427851s ago: executing program 0 (id=69): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000240)={0x0, 0x14, 0x2, '$v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.108803501s ago: executing program 1 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x2, 0x80000002, 0x3, 0x6, 0x5, 0x1000000000002, 0x8000000000000000, 0x38000000000000, 0x6, 0x7ff, 0x8c, 0xd01, 0x0, 0x4, 0x6b, 0x774, 0xfffffffffffffeff, 0x2, 0x9, 0x1, 0x9014, 0x11, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2, 0xe4) 737.51387ms ago: executing program 3 (id=71): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000640)={0x1, 0x3, 0x9, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x4, 0x52a1, 0x74}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 688.743337ms ago: executing program 2 (id=72): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x1, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@out_dx={0x6a, 0x28, {0x455a, 0x2, 0x4}}], 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 602.811115ms ago: executing program 3 (id=73): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="3cc81e0000004d61501d0100000000000000100000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 489.659691ms ago: executing program 1 (id=74): openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 361.974844ms ago: executing program 2 (id=75): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e26, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) 173.731456ms ago: executing program 1 (id=76): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xa) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 0s ago: executing program 1 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 73.342875][ T5603] cgroup: Unknown subsys name 'net' [ 73.445260][ T5603] cgroup: Unknown subsys name 'cpuset' [ 73.448105][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.079180][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.305451][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.306885][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.307386][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.308895][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.309537][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.457511][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.458936][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.461538][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.471478][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.479161][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.480231][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.488874][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.491895][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.492569][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.494017][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.495122][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.495467][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.498382][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.505991][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.514436][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.891762][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.891891][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.892267][ T5613] bridge_slave_0: entered allmulticast mode [ 78.894232][ T5613] bridge_slave_0: entered promiscuous mode [ 78.950997][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.951128][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.951264][ T5613] bridge_slave_1: entered allmulticast mode [ 78.953761][ T5613] bridge_slave_1: entered promiscuous mode [ 79.059364][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.091072][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.147032][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.147172][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.147256][ T5619] bridge_slave_0: entered allmulticast mode [ 79.148396][ T5619] bridge_slave_0: entered promiscuous mode [ 79.195989][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.196097][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.196209][ T5619] bridge_slave_1: entered allmulticast mode [ 79.197582][ T5619] bridge_slave_1: entered promiscuous mode [ 79.217303][ T5613] team0: Port device team_slave_0 added [ 79.249821][ T5613] team0: Port device team_slave_1 added [ 79.250050][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.250229][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.250476][ T5620] bridge_slave_0: entered allmulticast mode [ 79.257459][ T5620] bridge_slave_0: entered promiscuous mode [ 79.260456][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.260558][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.260724][ T5620] bridge_slave_1: entered allmulticast mode [ 79.262515][ T5620] bridge_slave_1: entered promiscuous mode [ 79.291027][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.342167][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.343111][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.343124][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.343145][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.347116][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.375976][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.375993][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.376015][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.406136][ T5629] Bluetooth: hci0: command tx timeout [ 79.413929][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.444902][ T5619] team0: Port device team_slave_0 added [ 79.460345][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.460752][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.462215][ T5618] bridge_slave_0: entered allmulticast mode [ 79.464039][ T5618] bridge_slave_0: entered promiscuous mode [ 79.468678][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.468780][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.468962][ T5618] bridge_slave_1: entered allmulticast mode [ 79.470821][ T5618] bridge_slave_1: entered promiscuous mode [ 79.494799][ T5619] team0: Port device team_slave_1 added [ 79.562227][ T5629] Bluetooth: hci2: command tx timeout [ 79.567092][ T5620] team0: Port device team_slave_0 added [ 79.587424][ T5613] hsr_slave_0: entered promiscuous mode [ 79.588236][ T5613] hsr_slave_1: entered promiscuous mode [ 79.605172][ T5620] team0: Port device team_slave_1 added [ 79.605886][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.605896][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.605911][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.609312][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.609996][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.610009][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.610034][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.640660][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.642543][ T53] Bluetooth: hci3: command tx timeout [ 79.643138][ T5629] Bluetooth: hci1: command tx timeout [ 79.715490][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.715508][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.715530][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.760860][ T5618] team0: Port device team_slave_0 added [ 79.763522][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.763536][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.763582][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.817618][ T5618] team0: Port device team_slave_1 added [ 79.846468][ T5619] hsr_slave_0: entered promiscuous mode [ 79.847160][ T5619] hsr_slave_1: entered promiscuous mode [ 79.847639][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 79.847704][ T5619] Cannot create hsr debugfs directory [ 79.905913][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.905931][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.905952][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.962114][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.962133][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.962157][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.029456][ T5620] hsr_slave_0: entered promiscuous mode [ 80.030167][ T5620] hsr_slave_1: entered promiscuous mode [ 80.030687][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 80.030701][ T5620] Cannot create hsr debugfs directory [ 80.131420][ T5618] hsr_slave_0: entered promiscuous mode [ 80.132604][ T5618] hsr_slave_1: entered promiscuous mode [ 80.133428][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 80.133445][ T5618] Cannot create hsr debugfs directory [ 80.354311][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.369859][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.397534][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.402551][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.412065][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.426991][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.456921][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.460986][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.542036][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.547281][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.554934][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.563872][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.564671][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.573263][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.577312][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.587625][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.679264][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.687107][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.697497][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.705686][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.712345][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.721208][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.723876][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.734535][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.837434][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.841016][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.858077][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.861006][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.873154][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.883715][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.895829][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.898874][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.950877][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.995226][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.014523][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.053593][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.053931][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.086158][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.086231][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.114282][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.115963][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.140808][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.140872][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.164051][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.164170][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.178189][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.204819][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.204949][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.206305][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.206364][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.304829][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.387488][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.427273][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.427419][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.451556][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.451732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.481950][ T5629] Bluetooth: hci0: command tx timeout [ 81.642461][ T5629] Bluetooth: hci2: command tx timeout [ 81.723694][ T53] Bluetooth: hci3: command tx timeout [ 81.723786][ T5629] Bluetooth: hci1: command tx timeout [ 82.435536][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.636011][ T5619] veth0_vlan: entered promiscuous mode [ 82.674911][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.691201][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.722911][ T5619] veth1_vlan: entered promiscuous mode [ 82.806434][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.887620][ T5619] veth0_macvtap: entered promiscuous mode [ 82.893670][ T5619] veth1_macvtap: entered promiscuous mode [ 82.944163][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.966699][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.966855][ T5618] veth0_vlan: entered promiscuous mode [ 82.969721][ T5613] veth0_vlan: entered promiscuous mode [ 83.029024][ T5618] veth1_vlan: entered promiscuous mode [ 83.057531][ T5620] veth0_vlan: entered promiscuous mode [ 83.058323][ T5613] veth1_vlan: entered promiscuous mode [ 83.117816][ T5620] veth1_vlan: entered promiscuous mode [ 83.123987][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.186638][ T5613] veth0_macvtap: entered promiscuous mode [ 83.212705][ T5618] veth0_macvtap: entered promiscuous mode [ 83.217981][ T5613] veth1_macvtap: entered promiscuous mode [ 83.228079][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.228100][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.235174][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.235482][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.241321][ T5618] veth1_macvtap: entered promiscuous mode [ 83.298310][ T5620] veth0_macvtap: entered promiscuous mode [ 83.310776][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.346183][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.346648][ T5620] veth1_macvtap: entered promiscuous mode [ 83.353504][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.353532][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.387844][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.421028][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.423745][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.425327][ T158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.425364][ T158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.425396][ T158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.447467][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.511815][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.520294][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.535009][ T5619] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.562545][ T5629] Bluetooth: hci0: command tx timeout [ 83.562814][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.599334][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.599359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.603554][ T3692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.603599][ T3692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.603633][ T3692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.612169][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.612213][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.612246][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.612278][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.722522][ T5629] Bluetooth: hci2: command tx timeout [ 83.754774][ T5767] ======================================================= [ 83.754774][ T5767] WARNING: The mand mount option has been deprecated and [ 83.754774][ T5767] and is ignored by this kernel. Remove the mand [ 83.754774][ T5767] option from the mount to silence this warning. [ 83.754774][ T5767] ======================================================= [ 83.802563][ T53] Bluetooth: hci3: command tx timeout [ 83.802653][ T5629] Bluetooth: hci1: command tx timeout [ 83.824720][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.824742][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.883691][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.883716][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.993464][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.993487][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.076242][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.076260][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.175624][ T5773] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.244599][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.244624][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.792688][ T2247] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.954155][ T2247] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.957539][ T2247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.957592][ T2247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.996699][ T2247] usb 4-1: config 0 descriptor?? [ 85.132723][ T5795] FAULT_INJECTION: forcing a failure. [ 85.132723][ T5795] name failslab, interval 1, probability 0, space 0, times 1 [ 85.132757][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 85.132782][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.132794][ T5795] Call Trace: [ 85.132802][ T5795] [ 85.132812][ T5795] dump_stack_lvl+0xe8/0x150 [ 85.132846][ T5795] should_fail_ex+0x3eb/0x540 [ 85.132877][ T5795] should_failslab+0xa8/0x100 [ 85.132904][ T5795] __kmalloc_cache_noprof+0x9e/0x600 [ 85.132935][ T5795] ? swnode_register+0x59/0x590 [ 85.132956][ T5795] ? swnode_register+0x59/0x590 [ 85.132985][ T5795] swnode_register+0x59/0x590 [ 85.133016][ T5795] fwnode_create_software_node+0x194/0x1f0 [ 85.133047][ T5795] device_create_managed_software_node+0xce/0x1f0 [ 85.133075][ T5795] iommufd_test+0x38a1/0x6360 [ 85.133115][ T5795] ? __lock_acquire+0x747/0x2de0 [ 85.133146][ T5795] ? __pfx_iommufd_test+0x10/0x10 [ 85.133190][ T5795] ? tomoyo_path_number_perm+0x219/0x5f0 [ 85.133213][ T5795] ? tomoyo_path_number_perm+0x219/0x5f0 [ 85.133238][ T5795] ? lock_acquire+0x115/0x350 [ 85.133283][ T5795] ? __might_fault+0xaf/0x130 [ 85.133317][ T5795] iommufd_fops_ioctl+0x465/0x600 [ 85.133347][ T5795] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 85.133375][ T5795] ? __fget_files+0x2a/0x420 [ 85.133408][ T5795] ? __fget_files+0x2a/0x420 [ 85.133438][ T5795] ? bpf_lsm_file_ioctl+0x9/0x20 [ 85.133464][ T5795] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 85.133488][ T5795] __se_sys_ioctl+0xfc/0x170 [ 85.133522][ T5795] do_syscall_64+0x166/0x520 [ 85.133541][ T5795] ? trace_irq_disable+0x3b/0x140 [ 85.133579][ T5795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.133602][ T5795] ? clear_bhb_loop+0x70/0xc0 [ 85.133630][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.133650][ T5795] RIP: 0033:0x7f351fb9e159 [ 85.133670][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.133688][ T5795] RSP: 002b:00007f3520a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.133713][ T5795] RAX: ffffffffffffffda RBX: 00007f351fe25fa0 RCX: 00007f351fb9e159 [ 85.133729][ T5795] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 85.133743][ T5795] RBP: 00007f351fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 85.133756][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.133769][ T5795] R13: 00007f351fe26038 R14: 00007f351fe25fa0 R15: 00007ffc64187938 [ 85.133801][ T5795] [ 85.133855][ T5795] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 85.320621][ T2247] usbhid 4-1:0.0: can't add hid device: -71 [ 85.428088][ T2247] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 85.451505][ T2247] usb 4-1: USB disconnect, device number 2 [ 85.481758][ T5703] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.635502][ T5703] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 85.637395][ T5703] usb 2-1: config 0 has no interfaces? [ 85.637431][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.643341][ T5629] Bluetooth: hci0: command tx timeout [ 85.673397][ T5703] usb 2-1: config 0 descriptor?? [ 85.805095][ T5629] Bluetooth: hci2: command tx timeout [ 85.831806][ T2247] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.872914][ T5811] FAULT_INJECTION: forcing a failure. [ 85.872914][ T5811] name failslab, interval 1, probability 0, space 0, times 0 [ 85.872950][ T5811] CPU: 0 UID: 0 PID: 5811 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(full) [ 85.872974][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.872987][ T5811] Call Trace: [ 85.872996][ T5811] [ 85.873005][ T5811] dump_stack_lvl+0xe8/0x150 [ 85.873038][ T5811] should_fail_ex+0x3eb/0x540 [ 85.873067][ T5811] ? __pfx_proc_alloc_inode+0x10/0x10 [ 85.873100][ T5811] should_failslab+0xa8/0x100 [ 85.873125][ T5811] ? __pfx_proc_alloc_inode+0x10/0x10 [ 85.873152][ T5811] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 85.873183][ T5811] ? proc_alloc_inode+0x2a/0xc0 [ 85.873212][ T5811] ? proc_alloc_inode+0x2a/0xc0 [ 85.873248][ T5811] ? __pfx_proc_alloc_inode+0x10/0x10 [ 85.873277][ T5811] proc_alloc_inode+0x2a/0xc0 [ 85.873307][ T5811] alloc_inode+0x6a/0x1b0 [ 85.873333][ T5811] new_inode+0x1f/0x170 [ 85.873354][ T5811] ? proc_get_inode+0x1a/0x6a0 [ 85.873375][ T5811] proc_get_inode+0x22/0x6a0 [ 85.873393][ T5811] ? proc_fill_super+0x525/0x760 [ 85.873417][ T5811] proc_fill_super+0x53e/0x760 [ 85.873438][ T5811] ? __pfx_proc_fill_super+0x10/0x10 [ 85.873462][ T5811] get_tree_nodev+0xbb/0x150 [ 85.873489][ T5811] vfs_get_tree+0x92/0x2a0 [ 85.873532][ T5811] do_new_mount+0x319/0xdc0 [ 85.873564][ T5811] ? __pfx_do_new_mount+0x10/0x10 [ 85.873593][ T5811] ? ns_capable+0x84/0xe0 [ 85.873619][ T5811] ? path_mount+0x647/0x1050 [ 85.873648][ T5811] ? user_path_at+0xd4/0x160 [ 85.873682][ T5811] __se_sys_mount+0x31d/0x420 [ 85.873715][ T5811] ? __pfx___se_sys_mount+0x10/0x10 [ 85.873749][ T5811] ? __x64_sys_mount+0x20/0xc0 [ 85.873777][ T5811] do_syscall_64+0x166/0x520 [ 85.873798][ T5811] ? trace_irq_disable+0x3b/0x140 [ 85.873825][ T5811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.873848][ T5811] ? clear_bhb_loop+0x70/0xc0 [ 85.873875][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.873896][ T5811] RIP: 0033:0x7f351fb9e159 [ 85.873918][ T5811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.873935][ T5811] RSP: 002b:00007f3520a89028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.873957][ T5811] RAX: ffffffffffffffda RBX: 00007f351fe25fa0 RCX: 00007f351fb9e159 [ 85.873973][ T5811] RDX: 0000200000000240 RSI: 0000200000000080 RDI: 0000000000000000 [ 85.873988][ T5811] RBP: 00007f351fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 85.874001][ T5811] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 85.874014][ T5811] R13: 00007f351fe26038 R14: 00007f351fe25fa0 R15: 00007ffc64187938 [ 85.874049][ T5811] [ 85.875088][ T5811] proc_fill_super: get root inode failed [ 85.882829][ T53] Bluetooth: hci3: command tx timeout [ 85.882876][ T5629] Bluetooth: hci1: command tx timeout [ 86.014897][ T5813] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 86.148503][ T5797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.154753][ T5797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.174888][ T5622] usb 2-1: USB disconnect, device number 2 [ 86.215625][ T2247] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 86.218528][ T2247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.218578][ T2247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.254515][ T2247] usb 4-1: config 0 descriptor?? [ 86.421781][ T5762] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.471828][ T5765] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.574837][ T5762] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.575875][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.575922][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.580081][ T5762] usb 3-1: config 0 descriptor?? [ 86.631909][ T5765] usb 1-1: Using ep0 maxpacket: 32 [ 86.633129][ T5765] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 86.634695][ T5765] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.634713][ T5765] usb 1-1: config 0 has no interface number 0 [ 86.634739][ T5765] usb 1-1: config 0 interface 184 has no altsetting 0 [ 86.637152][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.637174][ T5765] usb 1-1: Product: syz [ 86.637188][ T5765] usb 1-1: Manufacturer: syz [ 86.637201][ T5765] usb 1-1: SerialNumber: syz [ 86.640526][ T5765] usb 1-1: config 0 descriptor?? [ 86.796868][ T5762] usbhid 3-1:0.0: can't add hid device: -71 [ 86.797022][ T5762] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.805436][ T5762] usb 3-1: USB disconnect, device number 2 [ 87.072854][ T2247] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 87.079554][ T2247] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 87.110257][ T10] cfg80211: failed to load regulatory.db [ 87.253783][ T5762] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.275887][ T5765] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 87.275917][ T5765] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.414520][ T5762] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 87.415747][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.415823][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.419809][ T5762] usb 3-1: config 0 descriptor?? [ 87.453402][ T2247] usb 4-1: USB disconnect, device number 3 [ 87.453518][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 87.829193][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.829658][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.063239][ T5824] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 88.094192][ T5765] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 88.094225][ T5765] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 88.094243][ T5765] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 88.094713][ T5765] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 88.114920][ T5765] usb 1-1: USB disconnect, device number 2 [ 88.232308][ T5762] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 88.235885][ T5762] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 88.313975][ T2247] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.452224][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.469934][ T2247] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.470984][ T2247] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.471021][ T2247] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 88.505865][ T2247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.505904][ T2247] usb 4-1: Product: syz [ 88.505920][ T2247] usb 4-1: Manufacturer: syz [ 88.505934][ T2247] usb 4-1: SerialNumber: syz [ 88.579590][ T5703] usb 3-1: USB disconnect, device number 3 [ 88.579668][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 88.605130][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.605177][ T25] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 88.605856][ T25] usb 2-1: config 0 has no interfaces? [ 88.610924][ T25] usb 2-1: config 0 has no interfaces? [ 88.630604][ T25] usb 2-1: config 0 has no interfaces? [ 88.635280][ T25] usb 2-1: config 0 has no interfaces? [ 88.635758][ T25] usb 2-1: config 0 has no interfaces? [ 88.636225][ T25] usb 2-1: config 0 has no interfaces? [ 88.636696][ T25] usb 2-1: config 0 has no interfaces? [ 88.637163][ T25] usb 2-1: config 0 has no interfaces? [ 88.642501][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.642526][ T25] usb 2-1: Product: syz [ 88.642540][ T25] usb 2-1: Manufacturer: syz [ 88.642555][ T25] usb 2-1: SerialNumber: syz [ 88.727044][ T5826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.728298][ T5826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.742570][ T25] usb 2-1: config 0 descriptor?? [ 88.763490][ T2247] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 88.782064][ T2247] usb 4-1: USB disconnect, device number 4 [ 88.957577][ T5622] usb 2-1: USB disconnect, device number 3 [ 89.231764][ T2247] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.381813][ T2247] usb 4-1: Using ep0 maxpacket: 8 [ 89.382629][ T2247] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.384365][ T2247] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 89.384394][ T2247] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 89.384449][ T2247] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.384472][ T2247] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.384496][ T2247] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 89.384520][ T2247] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.384561][ T2247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.599277][ T5847] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 89.611764][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.656951][ T2247] usb 4-1: GET_CAPABILITIES returned 0 [ 89.657007][ T2247] usbtmc 4-1:16.0: can't read capabilities [ 89.709429][ T5849] FAULT_INJECTION: forcing a failure. [ 89.709429][ T5849] name failslab, interval 1, probability 0, space 0, times 0 [ 89.709464][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(full) [ 89.709488][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.709500][ T5849] Call Trace: [ 89.709509][ T5849] [ 89.709518][ T5849] dump_stack_lvl+0xe8/0x150 [ 89.709552][ T5849] should_fail_ex+0x3eb/0x540 [ 89.709582][ T5849] should_failslab+0xa8/0x100 [ 89.709608][ T5849] __kmalloc_noprof+0xf9/0x710 [ 89.709639][ T5849] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 89.709669][ T5849] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 89.709709][ T5849] __memcg_list_lru_alloc+0x1d9/0x760 [ 89.709739][ T5849] ? xa_load+0x60/0x210 [ 89.709769][ T5849] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 89.709804][ T5849] ? xa_load+0x60/0x210 [ 89.709845][ T5849] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 89.709880][ T5849] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 89.709927][ T5849] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 89.709957][ T5849] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 89.709984][ T5849] ? __d_alloc+0x37/0x6f0 [ 89.710021][ T5849] ? __d_alloc+0x37/0x6f0 [ 89.710055][ T5849] __d_alloc+0x37/0x6f0 [ 89.710088][ T5849] d_alloc_pseudo+0x21/0xc0 [ 89.710118][ T5849] alloc_path_pseudo+0x107/0x220 [ 89.710147][ T5849] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 89.710183][ T5849] alloc_file_pseudo_noaccount+0xad/0x2b0 [ 89.710211][ T5849] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 89.710234][ T5849] ? iput+0x451/0xf00 [ 89.710268][ T5849] bdev_file_open_by_dev+0x181/0x240 [ 89.710296][ T5849] setup_bdev_super+0x5a/0x680 [ 89.710328][ T5849] get_tree_bdev_flags+0x388/0x4f0 [ 89.710357][ T5849] ? __pfx_bfs_fill_super+0x10/0x10 [ 89.710383][ T5849] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 89.710426][ T5849] vfs_get_tree+0x92/0x2a0 [ 89.710459][ T5849] do_new_mount+0x319/0xdc0 [ 89.710490][ T5849] ? __pfx_do_new_mount+0x10/0x10 [ 89.710517][ T5849] ? ns_capable+0x84/0xe0 [ 89.710544][ T5849] ? path_mount+0x647/0x1050 [ 89.710573][ T5849] ? user_path_at+0xd4/0x160 [ 89.710604][ T5849] __se_sys_mount+0x31d/0x420 [ 89.710636][ T5849] ? __pfx___se_sys_mount+0x10/0x10 [ 89.710667][ T5849] ? __x64_sys_mount+0x20/0xc0 [ 89.710695][ T5849] do_syscall_64+0x166/0x520 [ 89.710716][ T5849] ? trace_irq_disable+0x3b/0x140 [ 89.710744][ T5849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.710767][ T5849] ? clear_bhb_loop+0x70/0xc0 [ 89.710793][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.710813][ T5849] RIP: 0033:0x7f351fb9e159 [ 89.710833][ T5849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.710874][ T5849] RSP: 002b:00007f3520a89028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.710900][ T5849] RAX: ffffffffffffffda RBX: 00007f351fe25fa0 RCX: 00007f351fb9e159 [ 89.710916][ T5849] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 89.710931][ T5849] RBP: 00007f351fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 89.710944][ T5849] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 89.710957][ T5849] R13: 00007f351fe26038 R14: 00007f351fe25fa0 R15: 00007ffc64187938 [ 89.710990][ T5849] [ 89.711424][ T5849] /dev/nullb0: Can't open blockdev [ 89.765246][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 89.769060][ T25] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 89.769086][ T25] usb 2-1: config 0 has no interface number 0 [ 89.769125][ T25] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.782457][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.782485][ T25] usb 2-1: Product: syz [ 89.782499][ T25] usb 2-1: Manufacturer: syz [ 89.782512][ T25] usb 2-1: SerialNumber: syz [ 89.796315][ T25] usb 2-1: config 0 descriptor?? [ 89.837852][ T25] yurex 2-1:0.50: USB YUREX device now attached to Yurex #1 [ 89.909878][ T5622] usb 4-1: USB disconnect, device number 5 [ 90.008229][ T5851] FAULT_INJECTION: forcing a failure. [ 90.008229][ T5851] name failslab, interval 1, probability 0, space 0, times 0 [ 90.008284][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(full) [ 90.008306][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.008317][ T5851] Call Trace: [ 90.008325][ T5851] [ 90.008333][ T5851] dump_stack_lvl+0xe8/0x150 [ 90.008384][ T5851] should_fail_ex+0x3eb/0x540 [ 90.008414][ T5851] should_failslab+0xa8/0x100 [ 90.008437][ T5851] __kmalloc_cache_noprof+0x9e/0x600 [ 90.008465][ T5851] ? blk_alloc_queue_stats+0x4c/0x100 [ 90.008484][ T5851] ? blk_alloc_queue_stats+0x4c/0x100 [ 90.008510][ T5851] blk_alloc_queue_stats+0x4c/0x100 [ 90.008530][ T5851] blk_alloc_queue+0xcc/0x690 [ 90.008564][ T5851] __blk_mq_alloc_disk+0x194/0x390 [ 90.008590][ T5851] ? __pfx___blk_mq_alloc_disk+0x10/0x10 [ 90.008642][ T5851] loop_add+0x480/0xb40 [ 90.008673][ T5851] ? __pfx_loop_add+0x10/0x10 [ 90.008727][ T5851] loop_control_ioctl+0x12b/0x5a0 [ 90.008754][ T5851] ? __fget_files+0x2a/0x420 [ 90.008777][ T5851] ? __pfx_loop_control_ioctl+0x10/0x10 [ 90.008800][ T5851] ? __fget_files+0x2a/0x420 [ 90.008826][ T5851] ? bpf_lsm_file_ioctl+0x9/0x20 [ 90.008849][ T5851] ? __pfx_loop_control_ioctl+0x10/0x10 [ 90.008875][ T5851] __se_sys_ioctl+0xfc/0x170 [ 90.008905][ T5851] do_syscall_64+0x166/0x520 [ 90.008923][ T5851] ? trace_irq_disable+0x3b/0x140 [ 90.008948][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.008967][ T5851] ? clear_bhb_loop+0x70/0xc0 [ 90.008990][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.009015][ T5851] RIP: 0033:0x7f351fb9e159 [ 90.009033][ T5851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.009048][ T5851] RSP: 002b:00007f3520a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.009070][ T5851] RAX: ffffffffffffffda RBX: 00007f351fe25fa0 RCX: 00007f351fb9e159 [ 90.009083][ T5851] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 90.009096][ T5851] RBP: 00007f351fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 90.009108][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.009119][ T5851] R13: 00007f351fe26038 R14: 00007f351fe25fa0 R15: 00007ffc64187938 [ 90.009148][ T5851] [ 90.086575][ T25] usb 2-1: USB disconnect, device number 4 [ 90.107586][ T25] yurex 2-1:0.50: USB YUREX #1 now disconnected [ 90.329756][ T5854] FAULT_INJECTION: forcing a failure. [ 90.329756][ T5854] name failslab, interval 1, probability 0, space 0, times 0 [ 90.329785][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 90.329806][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.329817][ T5854] Call Trace: [ 90.329826][ T5854] [ 90.329833][ T5854] dump_stack_lvl+0xe8/0x150 [ 90.329864][ T5854] should_fail_ex+0x3eb/0x540 [ 90.329891][ T5854] should_failslab+0xa8/0x100 [ 90.329911][ T5854] ? security_inode_alloc+0x39/0x310 [ 90.329935][ T5854] kmem_cache_alloc_noprof+0x9c/0x600 [ 90.329960][ T5854] ? make_kgid+0x1d1/0x6a0 [ 90.329986][ T5854] ? security_inode_alloc+0x39/0x310 [ 90.330023][ T5854] security_inode_alloc+0x39/0x310 [ 90.330048][ T5854] inode_init_always_gfp+0x97e/0xd30 [ 90.330076][ T5854] ? __pfx_proc_alloc_inode+0x10/0x10 [ 90.330103][ T5854] alloc_inode+0x82/0x1b0 [ 90.330126][ T5854] new_inode+0x1f/0x170 [ 90.330152][ T5854] proc_sys_make_inode+0x50/0x4e0 [ 90.330170][ T5854] ? do_raw_spin_unlock+0xf5/0x200 [ 90.330198][ T5854] proc_sys_lookup+0x32f/0x720 [ 90.330222][ T5854] __lookup_slow+0x1fb/0x2f0 [ 90.330251][ T5854] lookup_slow+0x53/0x70 [ 90.330276][ T5854] path_lookupat+0x3f5/0x8c0 [ 90.330315][ T5854] filename_lookup+0x265/0x5d0 [ 90.330336][ T5854] ? do_syscall_64+0x166/0x520 [ 90.330361][ T5854] ? __pfx_filename_lookup+0x10/0x10 [ 90.330408][ T5854] ? lock_acquire+0x115/0x350 [ 90.330444][ T5854] filename_setxattr+0xc2/0x630 [ 90.330470][ T5854] ? __might_fault+0xaf/0x130 [ 90.330497][ T5854] ? __pfx_filename_setxattr+0x10/0x10 [ 90.330526][ T5854] ? do_getname+0x151/0x250 [ 90.330550][ T5854] path_setxattrat+0x408/0x450 [ 90.330578][ T5854] ? __pfx_path_setxattrat+0x10/0x10 [ 90.330595][ T5854] ? do_futex+0x458/0x4e0 [ 90.330644][ T5854] ? rcu_is_watching+0x16/0xb0 [ 90.330689][ T5854] __x64_sys_setxattr+0xbc/0xe0 [ 90.330721][ T5854] do_syscall_64+0x166/0x520 [ 90.330739][ T5854] ? trace_irq_disable+0x3b/0x140 [ 90.330764][ T5854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.330784][ T5854] ? clear_bhb_loop+0x70/0xc0 [ 90.330808][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.330827][ T5854] RIP: 0033:0x7f013599e159 [ 90.330846][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.330861][ T5854] RSP: 002b:00007f013690c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 90.330884][ T5854] RAX: ffffffffffffffda RBX: 00007f0135c25fa0 RCX: 00007f013599e159 [ 90.330898][ T5854] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 90.330912][ T5854] RBP: 00007f0135a35024 R08: 0000000000000003 R09: 0000000000000000 [ 90.330924][ T5854] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 90.330936][ T5854] R13: 00007f0135c26038 R14: 00007f0135c25fa0 R15: 00007ffdaa4954f8 [ 90.330967][ T5854] [ 90.508393][ T31] audit: type=1800 audit(1788585258.904:2): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37" name=05 dev="sda1" ino=2043 res=0 errno=0 [ 90.773833][ T5863] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.891202][ T5866] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 91.252302][ T5880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.895310][ T5897] i2c-slave-eeprom 0-0010: i2c_slave_register: client slave flag not set. You might see address collisions [ 91.895339][ T5897] i2c-slave-eeprom 0-0010: i2c_slave_register: not supported by adapter [ 91.896738][ T5897] i2c-slave-eeprom 0-0010: probe with driver i2c-slave-eeprom failed with error -95 [ 91.897147][ T5897] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x10 [ 91.908725][ T5897] i2c i2c-0: delete_device: Deleting device slave-24c02 at 0x10 [ 92.281995][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.432567][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.434345][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.434377][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.434402][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 92.434424][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.434467][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.507997][ T25] usb 1-1: config 0 descriptor?? [ 92.717541][ T5918] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 92.820087][ T5921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.847704][ T5921] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 92.980567][ T25] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 92.999014][ T5925] process 'syz.3.63' launched './file0' with NULL argv: empty string added [ 93.066516][ T5928] CIFS: Attempting to mount //127.0.0.1/share [ 93.121157][ T5929] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=16973 len=64) [ 93.125446][ T5928] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=16973 len=64) [ 93.153069][ T2247] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.311731][ T2247] usb 3-1: Using ep0 maxpacket: 32 [ 93.313123][ T2247] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.314253][ T2247] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.314278][ T2247] usb 3-1: config 0 has no interface number 0 [ 93.314328][ T2247] usb 3-1: config 0 interface 184 has no altsetting 0 [ 93.316314][ T2247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.316339][ T2247] usb 3-1: Product: syz [ 93.316353][ T2247] usb 3-1: Manufacturer: syz [ 93.316367][ T2247] usb 3-1: SerialNumber: syz [ 93.321306][ T2247] usb 3-1: config 0 descriptor?? [ 93.802350][ T5703] usb 1-1: USB disconnect, device number 3 [ 93.895957][ T5928] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 93.896866][ T5928] CIFS: VFS: cifs_mount failed w/return code = -11 [ 94.024157][ T5933] kvm: pic: non byte write [ 94.154628][ T5936] CIFS: Attempting to mount //127.0.0.1/share [ 94.253980][ T5936] CIFS: VFS: Incorrect message type 1476395008 [ 94.254082][ T5936] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -22 [ 94.254993][ T5936] CIFS: VFS: cifs_mount failed w/return code = -22 [ 94.788356][ T2247] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM is busy [ 94.988987][ T2247] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 94.989021][ T2247] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 94.989040][ T2247] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 94.989058][ T2247] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 94.989326][ T2247] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 95.003311][ T2247] usb 3-1: USB disconnect, device number 4 [ 95.111760][ T5765] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.271787][ T5765] usb 1-1: Using ep0 maxpacket: 32 [ 95.272552][ T5765] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 95.298093][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.298121][ T5765] usb 1-1: Product: syz [ 95.298137][ T5765] usb 1-1: Manufacturer: syz [ 95.298152][ T5765] usb 1-1: SerialNumber: syz [ 95.330435][ T5765] usb 1-1: config 0 descriptor?? [ 95.344555][ T5765] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 96.034613][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.184819][ T44] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 96.186167][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.186216][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.186238][ T44] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.186261][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.186302][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.454553][ T5620] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 96.466509][ T5620] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 96.474959][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 96.484449][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.494542][ T5620] RIP: 0010:klist_remove+0x156/0x340 [ 96.499866][ T5620] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d 75 4b f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e 75 4b f6 49 8b 44 24 58 48 89 44 24 08 [ 96.519504][ T5620] RSP: 0018:ffffc90003e67880 EFLAGS: 00010202 [ 96.525614][ T5620] RAX: 000000000000000b RBX: ffff888035eebe80 RCX: ffffffff9ac59501 [ 96.533615][ T5620] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 96.541613][ T5620] RBP: ffffc90003e67980 R08: ffffffff90813aa3 R09: 1ffffffff2102754 [ 96.549612][ T5620] R10: dffffc0000000000 R11: fffffbfff2102755 R12: 0000000000000000 [ 96.557615][ T5620] R13: 1ffff110063da68c R14: ffff888031ed3460 R15: dffffc0000000000 [ 96.565617][ T5620] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 96.574575][ T5620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.581180][ T5620] CR2: 000020000000e038 CR3: 000000007fb52000 CR4: 00000000003526f0 [ 96.589186][ T5620] DR0: 0000000000000009 DR1: 0000000000000009 DR2: 0000000000000003 [ 96.597194][ T5620] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 96.605203][ T5620] Call Trace: [ 96.608509][ T5620] [ 96.611465][ T5620] ? __pfx_klist_remove+0x10/0x10 [ 96.616521][ T5620] ? kobject_move+0x5e2/0x720 [ 96.621235][ T5620] ? __pfx_kobject_move+0x10/0x10 [ 96.626293][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 96.631436][ T5620] ? get_device_parent+0x366/0x3a0 [ 96.636575][ T5620] device_move+0x18e/0x720 [ 96.641026][ T5620] hci_conn_del_sysfs+0xb8/0x1a0 [ 96.645996][ T5620] hci_conn_del+0xc98/0x1290 [ 96.650615][ T5620] hci_conn_hash_flush+0x189/0x260 [ 96.655759][ T5620] hci_dev_close_sync+0x7f1/0xf50 [ 96.660816][ T5620] ? __pfx___mutex_lock+0x10/0x10 [ 96.665874][ T5620] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 96.671457][ T5620] ? up_write+0x19d/0x4a0 [ 96.675816][ T5620] ? rcu_is_watching+0x16/0xb0 [ 96.680599][ T5620] hci_unregister_dev+0x232/0x5b0 [ 96.685653][ T5620] vhci_release+0x16d/0x1c0 [ 96.690174][ T5620] ? __pfx_vhci_release+0x10/0x10 [ 96.695211][ T5620] __fput+0x413/0xa50 [ 96.699221][ T5620] task_work_run+0x1d9/0x260 [ 96.703852][ T5620] ? __pfx_task_work_run+0x10/0x10 [ 96.709014][ T5620] ? do_exit+0x735/0x2360 [ 96.713378][ T5620] ? kmem_cache_free+0x182/0x650 [ 96.718339][ T5620] ? put_net+0x191/0x260 [ 96.722593][ T5620] do_exit+0x73a/0x2360 [ 96.726792][ T5620] ? __pfx_do_exit+0x10/0x10 [ 96.731414][ T5620] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.736468][ T5620] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.741692][ T5620] do_group_exit+0x22d/0x2f0 [ 96.746316][ T5620] __x64_sys_exit_group+0x3f/0x40 [ 96.751374][ T5620] x64_sys_call+0x18c6/0x18d0 [ 96.756091][ T5620] do_syscall_64+0x166/0x520 [ 96.760715][ T5620] ? trace_irq_disable+0x3b/0x140 [ 96.765782][ T5620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.771879][ T5620] ? clear_bhb_loop+0x70/0xc0 [ 96.776595][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.782519][ T5620] RIP: 0033:0x7fea4679e159 [ 96.786967][ T5620] Code: Unable to access opcode bytes at 0x7fea4679e12f. [ 96.794004][ T5620] RSP: 002b:00007ffd4d34dea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 96.802435][ T5620] RAX: ffffffffffffffda RBX: 00007fea468344e6 RCX: 00007fea4679e159 [ 96.810436][ T5620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 96.818432][ T5620] RBP: 0000000000000016 R08: 0000000000000000 R09: 00007fea46834474 [ 96.826425][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4d34f160 [ 96.834422][ T5620] R13: 00007fea46834474 R14: 000055556eb164e8 R15: 00007ffd4d351320 [ 96.842435][ T5620] [ 96.845483][ T5620] Modules linked in: [ 96.855743][ T5620] ---[ end trace 0000000000000000 ]--- [ 96.871092][ T5620] RIP: 0010:klist_remove+0x156/0x340 [ 96.871269][ T5620] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d 75 4b f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e 75 4b f6 49 8b 44 24 58 48 89 44 24 08 [ 96.871288][ T5620] RSP: 0018:ffffc90003e67880 EFLAGS: 00010202 [ 96.871307][ T5620] RAX: 000000000000000b RBX: ffff888035eebe80 RCX: ffffffff9ac59501 [ 96.871322][ T5620] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 96.871334][ T5620] RBP: ffffc90003e67980 R08: ffffffff90813aa3 R09: 1ffffffff2102754 [ 96.871348][ T5620] R10: dffffc0000000000 R11: fffffbfff2102755 R12: 0000000000000000 [ 96.871361][ T5620] R13: 1ffff110063da68c R14: ffff888031ed3460 R15: dffffc0000000000 [ 96.871376][ T5620] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 96.871391][ T5620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.871405][ T5620] CR2: 0000001b33b1cff8 CR3: 00000000350c8000 CR4: 00000000003526f0 [ 96.871423][ T5620] DR0: 0000000000000009 DR1: 0000000000000009 DR2: 0000000000000003 [ 96.871434][ T5620] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 96.871449][ T5620] Kernel panic - not syncing: Fatal exception [ 96.987968][ T5620] Kernel Offset: disabled [ 96.992292][ T5620] Rebooting in 86400 seconds..