last executing test programs: 3.823227231s ago: executing program 2 (id=718): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xa44, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x84080, 0x1, 0x29, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x13b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2350, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xfffeffff}}], 0x1, 0x0, 0x0) 3.216834523s ago: executing program 2 (id=728): open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x7, 0xffffffffffffffff, 0x41, 0xc3d, 0xfffffffffffffffe, 0x102, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x6, 0x3], 0x3332d000, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.988524257s ago: executing program 2 (id=729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x34, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x8}]}]}, 0xfc}}, 0x4000000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="02031b00300014000600630672b800462fff00000000000000000000000000000000ff020000000000000000000000000001"], 0x78) 2.716367606s ago: executing program 2 (id=735): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) unshare(0x20060400) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 2.566696138s ago: executing program 2 (id=740): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x5c, 0xfe}}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825fff37e"], 0x0}, 0x0) 1.864858448s ago: executing program 0 (id=749): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x120e2) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x800, 0x1, 0x7f, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e71, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x4, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1fa9, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1.858643803s ago: executing program 1 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x17, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$EVIOCSABS20(r1, 0x401845e0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) 1.762104016s ago: executing program 1 (id=751): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) fadvise64(0xffffffffffffffff, 0xfffffffffffffffd, 0xffff, 0x2) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) syz_usb_connect(0x2, 0x24, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0xbf, 0x42, 0x40, 0x8, 0x7d1, 0x3e02, 0xf149, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0x60, 0x7, "", [{{0x9, 0x4, 0x72, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000003b40fe"], 0x28) 1.578714061s ago: executing program 0 (id=754): getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, 0x0) fsync(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000880)=""/120, 0x78, 0x2) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/76, 0x10000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x2, 0x2}) 1.456256335s ago: executing program 0 (id=756): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000030, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x7}}]}) 1.425747138s ago: executing program 0 (id=757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2a, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2, 0x3}, {0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x6, 0x796}, 0x0, 0x3507, 0x0, 0x3, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000200)=""/124, 0x20}], 0x3f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.296376681s ago: executing program 0 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x41009432, 0x0) 1.248581575s ago: executing program 3 (id=760): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.229784277s ago: executing program 0 (id=761): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, 0x0) 1.143135243s ago: executing program 1 (id=762): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xa44, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x84080, 0x1, 0x29, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x13b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2350, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xfffeffff}}], 0x1, 0x0, 0x0) 1.032206435s ago: executing program 3 (id=764): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x9) 989.233371ms ago: executing program 3 (id=765): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x460, 0x8, 0xcc, 0xff}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) 811.970489ms ago: executing program 1 (id=768): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 660.948833ms ago: executing program 2 (id=771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 660.876108ms ago: executing program 4 (id=772): ptrace$getsig(0x4202, 0x0, 0xd, &(0x7f0000000240)) socket$inet(0x2, 0x2, 0x1) mkdir(0x0, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 603.731697ms ago: executing program 4 (id=773): r0 = syz_create_resource$futex(&(0x7f0000000040)) r1 = syz_create_resource$futex(&(0x7f0000001680)) futex(r0, 0x5, 0x2, 0x0, r1, 0x4000000) 554.689737ms ago: executing program 4 (id=774): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40001) 457.095445ms ago: executing program 4 (id=775): r0 = syz_create_resource$futex(&(0x7f0000000040)) r1 = syz_create_resource$futex(&(0x7f0000001680)) futex(r0, 0x5, 0x2, 0x0, r1, 0x1f000000) 447.336623ms ago: executing program 4 (id=776): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='smaps\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 392.33199ms ago: executing program 3 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232", 0x85, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[], 0x8) 299.263899ms ago: executing program 4 (id=778): syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xfc, 0x90, 0xad, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7f, 0x0, 0x2, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x5, 0xe, {0x7, 0x25, 0x1, 0x8, 0x3, 0xb}}}}}}}}]}}, 0x0) 208.398457ms ago: executing program 3 (id=779): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@my=0x0}) 201.771407ms ago: executing program 1 (id=780): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x8000001d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x2, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x8, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x2, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0x8003, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x3, 0xfffffff9, 0x0, 0x8, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xffffffff, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfefd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x8a13, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110b}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 124.921295ms ago: executing program 3 (id=781): landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) 0s ago: executing program 1 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaacc3, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="e10fb1", 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.158' (ED25519) to the list of known hosts. [ 73.871653][ T5595] cgroup: Unknown subsys name 'net' [ 74.024200][ T5595] cgroup: Unknown subsys name 'cpuset' [ 74.033181][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.718358][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.761368][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.769963][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.771343][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.772676][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.773149][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.774116][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.774656][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.787141][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.788548][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.789135][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.790398][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.790972][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.792940][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.808315][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.823848][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.825010][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.840514][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.886461][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.904447][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.913446][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.913752][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.915043][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.918146][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.930059][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.930657][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.850675][ T5618] Bluetooth: hci1: command tx timeout [ 80.850873][ T5617] Bluetooth: hci2: command tx timeout [ 80.858644][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.858813][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.858949][ T5607] bridge_slave_0: entered allmulticast mode [ 80.861491][ T5607] bridge_slave_0: entered promiscuous mode [ 80.866905][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.867076][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.867258][ T5607] bridge_slave_1: entered allmulticast mode [ 80.870396][ T5607] bridge_slave_1: entered promiscuous mode [ 80.929825][ T5617] Bluetooth: hci0: command tx timeout [ 80.934656][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.934778][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.934885][ T5610] bridge_slave_0: entered allmulticast mode [ 80.936477][ T5610] bridge_slave_0: entered promiscuous mode [ 80.991398][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.991503][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.991615][ T5610] bridge_slave_1: entered allmulticast mode [ 80.993448][ T5610] bridge_slave_1: entered promiscuous mode [ 81.014106][ T5617] Bluetooth: hci4: command tx timeout [ 81.014122][ T5618] Bluetooth: hci3: command tx timeout [ 81.019134][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.084134][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.084369][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.084545][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.084629][ T5606] bridge_slave_0: entered allmulticast mode [ 81.085590][ T5606] bridge_slave_0: entered promiscuous mode [ 81.116526][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.116631][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.116751][ T5608] bridge_slave_0: entered allmulticast mode [ 81.119446][ T5608] bridge_slave_0: entered promiscuous mode [ 81.123737][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.123842][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.124005][ T5608] bridge_slave_1: entered allmulticast mode [ 81.125648][ T5608] bridge_slave_1: entered promiscuous mode [ 81.157549][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.157659][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.157781][ T5606] bridge_slave_1: entered allmulticast mode [ 81.161034][ T5606] bridge_slave_1: entered promiscuous mode [ 81.187211][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.187319][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.188316][ T5609] bridge_slave_0: entered allmulticast mode [ 81.190830][ T5609] bridge_slave_0: entered promiscuous mode [ 81.198012][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.217318][ T5607] team0: Port device team_slave_0 added [ 81.232965][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.233078][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.233517][ T5609] bridge_slave_1: entered allmulticast mode [ 81.235643][ T5609] bridge_slave_1: entered promiscuous mode [ 81.255647][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.285568][ T5607] team0: Port device team_slave_1 added [ 81.288402][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.326748][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.350397][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.352828][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.354895][ T5610] team0: Port device team_slave_0 added [ 81.356913][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.357798][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.357809][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.357829][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.375987][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.378377][ T5610] team0: Port device team_slave_1 added [ 81.406995][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.407011][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.407040][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.481548][ T5606] team0: Port device team_slave_0 added [ 81.498234][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.498251][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.498273][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.504763][ T5608] team0: Port device team_slave_0 added [ 81.508784][ T5608] team0: Port device team_slave_1 added [ 81.528074][ T5606] team0: Port device team_slave_1 added [ 81.531107][ T5609] team0: Port device team_slave_0 added [ 81.532952][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.532966][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.532988][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.621680][ T5609] team0: Port device team_slave_1 added [ 81.622317][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.622330][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.622354][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.624387][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.624399][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.624419][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.649043][ T5607] hsr_slave_0: entered promiscuous mode [ 81.651728][ T5607] hsr_slave_1: entered promiscuous mode [ 81.719397][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.719415][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.719436][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.726438][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.726453][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.726474][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.782055][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.782071][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.782108][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.784293][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.784305][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.784326][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.907880][ T5610] hsr_slave_0: entered promiscuous mode [ 81.908998][ T5610] hsr_slave_1: entered promiscuous mode [ 81.911085][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 81.911160][ T5610] Cannot create hsr debugfs directory [ 81.994532][ T5606] hsr_slave_0: entered promiscuous mode [ 81.996308][ T5606] hsr_slave_1: entered promiscuous mode [ 81.997115][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 81.997135][ T5606] Cannot create hsr debugfs directory [ 82.045148][ T5609] hsr_slave_0: entered promiscuous mode [ 82.046770][ T5609] hsr_slave_1: entered promiscuous mode [ 82.047555][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 82.047575][ T5609] Cannot create hsr debugfs directory [ 82.110158][ T5608] hsr_slave_0: entered promiscuous mode [ 82.111321][ T5608] hsr_slave_1: entered promiscuous mode [ 82.112209][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 82.112230][ T5608] Cannot create hsr debugfs directory [ 82.725881][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.742774][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.743815][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.749481][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.753735][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.774481][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.777600][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.788836][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.875352][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.882230][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.883626][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.893163][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.900959][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.909398][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.912302][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.922431][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.940481][ T5617] Bluetooth: hci2: command tx timeout [ 82.940520][ T5617] Bluetooth: hci1: command tx timeout [ 83.010304][ T5618] Bluetooth: hci0: command tx timeout [ 83.017259][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.024522][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.025440][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.035748][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.051614][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.059354][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.066666][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.077357][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.089770][ T5618] Bluetooth: hci4: command tx timeout [ 83.089971][ T5618] Bluetooth: hci3: command tx timeout [ 83.174352][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.210524][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.214913][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.217130][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.222683][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.225134][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.235426][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.254793][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.263059][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.297741][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.339866][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.340018][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.348988][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.349050][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.437867][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.445413][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.447985][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.462811][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.473730][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.476516][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.493835][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.504252][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.567904][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.654030][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.657473][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.715686][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.715806][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.763086][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.774774][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.775000][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.799404][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.799529][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.815675][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.852770][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.852888][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.933843][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.979789][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.979923][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.986189][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.986250][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.114712][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.271896][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.309294][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.309433][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.349410][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.349526][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.591746][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.837542][ T5607] veth0_vlan: entered promiscuous mode [ 84.902586][ T5607] veth1_vlan: entered promiscuous mode [ 85.009993][ T5617] Bluetooth: hci2: command tx timeout [ 85.010087][ T5618] Bluetooth: hci1: command tx timeout [ 85.091139][ T5618] Bluetooth: hci0: command tx timeout [ 85.104864][ T5607] veth0_macvtap: entered promiscuous mode [ 85.136112][ T5607] veth1_macvtap: entered promiscuous mode [ 85.171029][ T5618] Bluetooth: hci3: command tx timeout [ 85.171041][ T5617] Bluetooth: hci4: command tx timeout [ 85.258537][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.287281][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.362673][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.473761][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.561888][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.561943][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.561980][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.660903][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.790131][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.790155][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.836548][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.855639][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.882151][ T5606] veth0_vlan: entered promiscuous mode [ 85.918885][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.918908][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.955797][ T5606] veth1_vlan: entered promiscuous mode [ 86.081400][ T5608] veth0_vlan: entered promiscuous mode [ 86.119102][ T5609] veth0_vlan: entered promiscuous mode [ 86.154744][ T5606] veth0_macvtap: entered promiscuous mode [ 86.170207][ T5608] veth1_vlan: entered promiscuous mode [ 86.186780][ T5609] veth1_vlan: entered promiscuous mode [ 86.216148][ T5606] veth1_macvtap: entered promiscuous mode [ 86.260103][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.279033][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.288976][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.397213][ T5609] veth0_macvtap: entered promiscuous mode [ 86.428775][ T5608] veth0_macvtap: entered promiscuous mode [ 87.092486][ T5617] Bluetooth: hci1: command tx timeout [ 87.092528][ T5617] Bluetooth: hci2: command tx timeout [ 87.102640][ T993] cfg80211: failed to load regulatory.db [ 87.180486][ T5618] Bluetooth: hci0: command tx timeout [ 87.252746][ T5618] Bluetooth: hci4: command tx timeout [ 87.260495][ T5618] Bluetooth: hci3: command tx timeout [ 87.490025][ T5608] veth1_macvtap: entered promiscuous mode [ 87.506729][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507573][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507618][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507654][ T1166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.564081][ T5609] veth1_macvtap: entered promiscuous mode [ 87.617382][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.626396][ T5610] veth0_vlan: entered promiscuous mode [ 87.671236][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.674238][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.712812][ T5610] veth1_vlan: entered promiscuous mode [ 87.715668][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.725507][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.725536][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.802047][ T83] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.820778][ T45] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.821295][ T45] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.821464][ T45] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.830915][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.830934][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.997995][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.998020][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.012248][ T5610] veth0_macvtap: entered promiscuous mode [ 88.031478][ T5610] veth1_macvtap: entered promiscuous mode [ 88.061875][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.123034][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.133095][ T45] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.151636][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.151658][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.169929][ T45] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.170242][ T45] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.170696][ T45] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.205571][ T45] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.225138][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.225163][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.506565][ T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.548052][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.999998][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.000045][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.162908][ T83] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.388472][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.388494][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.520171][ T5733] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.674287][ T5733] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 89.692890][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.692951][ T5733] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.692972][ T5733] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.692994][ T5733] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.693038][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.221817][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.221841][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.671672][ T5733] gud 4-1:1.0: Unexpected status OK for failed transfer [ 90.671726][ T5733] gud 4-1:1.0: Failed to add properties (error=-32) [ 90.671751][ T5733] gud 4-1:1.0: probe with driver gud failed with error -32 [ 90.779773][ T5704] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.942507][ T5704] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 90.943827][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.943879][ T5704] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.943901][ T5704] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.943923][ T5704] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.943965][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.781474][ T5853] null_blk: nullb1: using native zone append [ 91.871955][ T5853] null_blk: disk nullb1 created [ 92.168336][ T5704] gud 1-1:1.0: Failed to add properties (error=-32) [ 92.168374][ T5704] gud 1-1:1.0: probe with driver gud failed with error -32 [ 92.285384][ T32] usb 4-1: USB disconnect, device number 2 [ 92.579485][ T5876] FAULT_INJECTION: forcing a failure. [ 92.579485][ T5876] name failslab, interval 1, probability 0, space 0, times 1 [ 92.579518][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 92.579541][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.579554][ T5876] Call Trace: [ 92.579563][ T5876] [ 92.579572][ T5876] dump_stack_lvl+0xe8/0x150 [ 92.579600][ T5876] should_fail_ex+0x3eb/0x540 [ 92.579634][ T5876] should_failslab+0xa8/0x100 [ 92.579657][ T5876] __kmalloc_noprof+0xf9/0x710 [ 92.579678][ T5876] ? __register_sysctl_table+0x6f/0x1370 [ 92.579698][ T5876] ? __register_sysctl_table+0x6f/0x1370 [ 92.579727][ T5876] __register_sysctl_table+0x6f/0x1370 [ 92.579751][ T5876] ? register_net_sysctl_sz+0x2ba/0x3f0 [ 92.579782][ T5876] sysctl_core_net_init+0x74f/0x7c0 [ 92.579811][ T5876] ops_init+0x35d/0x5d0 [ 92.579842][ T5876] setup_net+0x118/0x350 [ 92.579864][ T5876] ? __pfx_setup_net+0x10/0x10 [ 92.579885][ T5876] ? down_read_killable+0x1b6/0x3b0 [ 92.579907][ T5876] ? __ns_common_init+0x38a/0x590 [ 92.579932][ T5876] copy_net_ns+0x536/0x770 [ 92.579956][ T5876] create_new_namespaces+0x3f0/0x6b0 [ 92.579980][ T5876] ? security_capable+0x7e/0x2c0 [ 92.580009][ T5876] unshare_nsproxy_namespaces+0x144/0x190 [ 92.580035][ T5876] ksys_unshare+0x532/0x890 [ 92.580058][ T5876] ? __pfx_ksys_unshare+0x10/0x10 [ 92.580100][ T5876] ? rcu_is_watching+0x16/0xb0 [ 92.580133][ T5876] __x64_sys_unshare+0x38/0x50 [ 92.580153][ T5876] do_syscall_64+0x166/0x520 [ 92.580172][ T5876] ? trace_irq_disable+0x3b/0x140 [ 92.580189][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.580210][ T5876] ? clear_bhb_loop+0x70/0xc0 [ 92.580233][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.580253][ T5876] RIP: 0033:0x7f5e8ff9e1d9 [ 92.580274][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.580290][ T5876] RSP: 002b:00007f5e90d8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 92.580315][ T5876] RAX: ffffffffffffffda RBX: 00007f5e90225fa0 RCX: 00007f5e8ff9e1d9 [ 92.580330][ T5876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 92.580343][ T5876] RBP: 00007f5e90035888 R08: 0000000000000000 R09: 0000000000000000 [ 92.580364][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.580377][ T5876] R13: 00007f5e90226038 R14: 00007f5e90225fa0 R15: 00007ffe4354e988 [ 92.580412][ T5876] [ 92.985566][ T5884] fuse: Bad value for 'fd' [ 93.603237][ T5733] usb 1-1: USB disconnect, device number 2 [ 95.180237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.729801][ T5711] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.834026][ T5909] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 95.880609][ T5711] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 95.881990][ T5711] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.882042][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.882063][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.882085][ T5711] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.882126][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.949190][ T5909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.124390][ T5911] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 96.148996][ T5911] bond2 (unregistering): Released all slaves [ 96.581071][ T5733] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.740968][ T5733] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 96.743075][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.743128][ T5733] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.743181][ T5733] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.743205][ T5733] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.743247][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.045352][ T5711] gud 5-1:1.0: Failed to get connectors (error=-5) [ 97.045683][ T5711] gud 5-1:1.0: probe with driver gud failed with error -5 [ 97.525746][ T5711] usb 5-1: USB disconnect, device number 2 [ 97.904441][ T5733] gud 4-1:1.0: Failed to get connectors (error=-5) [ 97.904477][ T5733] gud 4-1:1.0: probe with driver gud failed with error -5 [ 97.959784][ T5704] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.050982][ T5942] evm: overlay not supported [ 98.112882][ T5704] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 98.118448][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.118507][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.118528][ T5704] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.118550][ T5704] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.118631][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.183263][ T5711] usb 4-1: USB disconnect, device number 3 [ 98.439827][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.589893][ T993] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.591183][ T27] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 98.592380][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.592422][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.592443][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.592463][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.592502][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.754029][ T993] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 98.755527][ T993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.755576][ T993] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.755626][ T993] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.755649][ T993] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.755690][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.027886][ T5704] gud 2-1:1.0: Failed to get connectors (error=-5) [ 99.027923][ T5704] gud 2-1:1.0: probe with driver gud failed with error -5 [ 99.257738][ T5797] usb 2-1: USB disconnect, device number 2 [ 99.268977][ T27] gud 1-1:1.0: Failed to add properties (error=-32) [ 99.269041][ T27] gud 1-1:1.0: probe with driver gud failed with error -32 [ 100.061389][ T993] gud 5-1:1.0: Failed to get connectors (error=-5) [ 100.061424][ T993] gud 5-1:1.0: probe with driver gud failed with error -5 [ 100.283781][ T993] usb 5-1: USB disconnect, device number 3 [ 101.358635][ T5704] usb 1-1: USB disconnect, device number 3 [ 101.384940][ T5988] FAULT_INJECTION: forcing a failure. [ 101.384940][ T5988] name failslab, interval 1, probability 0, space 0, times 0 [ 101.384973][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.2.58 Not tainted syzkaller #0 PREEMPT(full) [ 101.384995][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.385006][ T5988] Call Trace: [ 101.385014][ T5988] [ 101.385023][ T5988] dump_stack_lvl+0xe8/0x150 [ 101.385052][ T5988] should_fail_ex+0x3eb/0x540 [ 101.385079][ T5988] should_failslab+0xa8/0x100 [ 101.385101][ T5988] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 101.385124][ T5988] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 101.385144][ T5988] ? devinet_init_net+0xe4/0x7c0 [ 101.385161][ T5988] ? devinet_init_net+0xe4/0x7c0 [ 101.385186][ T5988] kmemdup_noprof+0x2b/0x70 [ 101.385207][ T5988] devinet_init_net+0xe4/0x7c0 [ 101.385232][ T5988] ops_init+0x35d/0x5d0 [ 101.385263][ T5988] setup_net+0x118/0x350 [ 101.385285][ T5988] ? __pfx_setup_net+0x10/0x10 [ 101.385306][ T5988] ? down_read_killable+0x1b6/0x3b0 [ 101.385336][ T5988] ? __ns_common_init+0x38a/0x590 [ 101.385362][ T5988] copy_net_ns+0x536/0x770 [ 101.385385][ T5988] create_new_namespaces+0x3f0/0x6b0 [ 101.385410][ T5988] ? security_capable+0x7e/0x2c0 [ 101.385439][ T5988] unshare_nsproxy_namespaces+0x144/0x190 [ 101.385465][ T5988] ksys_unshare+0x532/0x890 [ 101.385489][ T5988] ? __pfx_ksys_unshare+0x10/0x10 [ 101.385512][ T5988] ? rcu_is_watching+0x16/0xb0 [ 101.385545][ T5988] __x64_sys_unshare+0x38/0x50 [ 101.385564][ T5988] do_syscall_64+0x166/0x520 [ 101.385582][ T5988] ? trace_irq_disable+0x3b/0x140 [ 101.385599][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.385618][ T5988] ? clear_bhb_loop+0x70/0xc0 [ 101.385639][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.385660][ T5988] RIP: 0033:0x7fd48699e1d9 [ 101.385681][ T5988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.385697][ T5988] RSP: 002b:00007fd487941028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 101.385720][ T5988] RAX: ffffffffffffffda RBX: 00007fd486c25fa0 RCX: 00007fd48699e1d9 [ 101.385735][ T5988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 101.385748][ T5988] RBP: 00007fd486a35888 R08: 0000000000000000 R09: 0000000000000000 [ 101.385760][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.385773][ T5988] R13: 00007fd486c26038 R14: 00007fd486c25fa0 R15: 00007fffb2926508 [ 101.385807][ T5988] [ 102.149882][ T5704] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.318555][ T5704] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 102.420516][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.421933][ T5704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.421959][ T5704] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.422807][ T5704] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.423709][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.749771][ T5711] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.939048][ T5711] usb 1-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5 [ 102.971487][ T5711] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 102.971765][ T5711] usb 1-1: config 0 has no interface number 0 [ 102.972462][ T5711] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.030568][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 103.031408][ T5711] usb 1-1: Manufacturer: syz [ 103.031487][ T5711] usb 1-1: SerialNumber: syz [ 103.101961][ T5711] usb 1-1: config 0 descriptor?? [ 103.375034][ T5704] gud 5-1:1.0: Failed to get connectors (error=-5) [ 103.375159][ T5704] gud 5-1:1.0: probe with driver gud failed with error -5 [ 103.585045][ T993] usb 5-1: USB disconnect, device number 4 [ 103.602992][ T45] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 104.709471][ T6032] ======================================================= [ 104.709471][ T6032] WARNING: The mand mount option has been deprecated and [ 104.709471][ T6032] and is ignored by this kernel. Remove the mand [ 104.709471][ T6032] option from the mount to silence this warning. [ 104.709471][ T6032] ======================================================= [ 105.606430][ T5704] usb 1-1: USB disconnect, device number 4 [ 106.625081][ T6013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.036470][ T6070] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 107.082595][ T6070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.170990][ T6070] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 107.176648][ T6070] bond2 (unregistering): Released all slaves [ 107.679766][ T5719] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.830648][ T5719] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 107.833337][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.833390][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.833411][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.833433][ T5719] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.833476][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.861452][ T5711] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 108.040656][ T5711] usb 2-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5 [ 108.042418][ T5711] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 108.042473][ T5711] usb 2-1: config 0 has no interface number 0 [ 108.042516][ T5711] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.044841][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 108.044864][ T5711] usb 2-1: Manufacturer: syz [ 108.044877][ T5711] usb 2-1: SerialNumber: syz [ 108.047226][ T6084] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 108.050134][ T5711] usb 2-1: config 0 descriptor?? [ 109.041277][ T5719] gud 3-1:1.0: Failed to get connectors (error=-5) [ 109.041314][ T5719] gud 3-1:1.0: probe with driver gud failed with error -5 [ 109.289166][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 110.670013][ T5719] usb 3-1: USB disconnect, device number 2 [ 111.171079][ T6132] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 111.265075][ T32] usb 2-1: USB disconnect, device number 3 [ 111.898894][ T6154] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 112.152976][ T6101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.028429][ T6175] netlink: 'syz.0.103': attribute type 1 has an invalid length. [ 114.161514][ T6175] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 114.178116][ T6175] bond2 (unregistering): Released all slaves [ 115.680219][ T6196] Zero length message leads to an empty skb [ 116.778201][ T6204] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 120.279002][ T6266] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 122.229795][ T5797] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.382056][ T5797] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 122.387219][ T5797] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.387273][ T5797] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.387295][ T5797] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.387317][ T5797] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.387361][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.015393][ T5797] gud 4-1:1.0: Failed to get connectors (error=-5) [ 124.015428][ T5797] gud 4-1:1.0: probe with driver gud failed with error -5 [ 124.278156][ T6320] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 124.386862][ T6320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.484976][ T6322] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 124.514596][ T6322] bond3 (unregistering): Released all slaves [ 125.571253][ T5719] usb 4-1: USB disconnect, device number 4 [ 125.772822][ T6351] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 126.927116][ T6366] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 126.939085][ T6366] bond1 (unregistering): Released all slaves [ 127.943562][ T6114] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 128.042838][ T6399] fuse: Bad value for 'fd' [ 128.131390][ T1223] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.281025][ T1223] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 128.283156][ T1223] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.283205][ T1223] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.283227][ T1223] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.283248][ T1223] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.283289][ T1223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.582301][ T6417] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 129.931308][ T1223] gud 3-1:1.0: USB-1: Failed to add properties (ret=-71) [ 129.931366][ T1223] gud 3-1:1.0: Failed to get connectors (error=-71) [ 129.931391][ T1223] gud 3-1:1.0: probe with driver gud failed with error -71 [ 130.020356][ T1223] usb 3-1: USB disconnect, device number 3 [ 130.809809][ T6389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.558151][ T6441] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 132.502094][ T33] audit: type=1804 audit(1791581020.306:2): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.185" name="/newroot/42/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3568 res=1 errno=0 [ 132.506804][ T6450] 9p: Bad value for 'rfdno' [ 132.749435][ T6457] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 133.188607][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.188718][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.915679][ T6472] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 134.934090][ T6472] bond3 (unregistering): Released all slaves [ 135.392036][ T974] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 135.748266][ T6493] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 137.700766][ T6477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.244718][ T6506] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 138.338210][ T6514] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 139.267406][ T6514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.269216][ T6516] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 139.501971][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.210'. [ 139.732799][ T6525] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 139.757681][ T6525] bond2 (unregistering): Released all slaves [ 140.120442][ T6532] overlayfs: missing 'lowerdir' [ 142.088321][ T6560] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 142.469082][ T6565] overlayfs: missing 'lowerdir' [ 142.655853][ T6569] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 142.821098][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 142.875566][ T6571] vlan2: entered promiscuous mode [ 142.875594][ T6571] gretap0: entered promiscuous mode [ 144.022082][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 144.055958][ T6581] vlan2: entered promiscuous mode [ 144.055983][ T6581] gretap0: entered promiscuous mode [ 145.389528][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 146.117975][ T6609] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 147.798243][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.238'. [ 147.804593][ T6622] vlan2: entered promiscuous mode [ 147.804614][ T6622] gretap0: entered promiscuous mode [ 147.852761][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 147.869277][ T6624] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 147.872305][ T6624] bond1 (unregistering): Released all slaves [ 148.035759][ T6629] 9pnet_fd: p9_fd_create_tcp (6629): problem connecting socket to 127.0.0.1 [ 148.141153][ T6633] fuse: Bad value for 'fd' [ 148.237482][ T6596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.651759][ T6644] loop2: detected capacity change from 0 to 164 [ 148.679165][ T6644] iso9660: Unknown parameter 'ÿÿÿÿÿÿ .ÃNÛBþO' [ 148.862195][ T32] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 149.012304][ T32] usb 5-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5 [ 149.015355][ T32] usb 5-1: config index 0 descriptor too short (expected 15622, got 27) [ 149.015385][ T32] usb 5-1: config 243 has too many interfaces: 250, using maximum allowed: 32 [ 149.015405][ T32] usb 5-1: config 243 has an invalid descriptor of length 197, skipping remainder of the config [ 149.015423][ T32] usb 5-1: config 243 has 0 interfaces, different from the descriptor's value: 250 [ 149.019586][ T32] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 149.019829][ T32] usb 5-1: Manufacturer: syz [ 149.019846][ T32] usb 5-1: SerialNumber: syz [ 149.327553][ T32] usb 5-1: USB disconnect, device number 5 [ 149.469932][ T1223] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.621730][ T1223] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 149.625966][ T1223] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.626021][ T1223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.626044][ T1223] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.626066][ T1223] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.626109][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.722777][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 150.781143][ T1223] gud 2-1:1.0: No supported pixel formats found [ 150.781174][ T1223] gud 2-1:1.0: probe with driver gud failed with error -22 [ 150.873840][ T5931] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 150.928812][ T6688] 9pnet_virtio: no channels available for device 127.0.0.1 [ 152.497115][ T32] usb 2-1: USB disconnect, device number 4 [ 152.564616][ T6712] 9pnet_fd: p9_fd_create_tcp (6712): problem connecting socket to 127.0.0.1 [ 152.640629][ T6716] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 153.705701][ T6677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.399900][ T993] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.550810][ T993] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 154.554496][ T993] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.554550][ T993] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.554572][ T993] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.554594][ T993] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.554636][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.678117][ T993] gud 3-1:1.0: No supported pixel formats found [ 155.678163][ T993] gud 3-1:1.0: probe with driver gud failed with error -22 [ 157.172301][ T6800] sctp: [Deprecated]: syz.1.304 (pid 6800) Use of int in maxseg socket option. [ 157.172301][ T6800] Use struct sctp_assoc_value instead [ 157.210914][ T1223] usb 3-1: USB disconnect, device number 4 [ 158.030711][ T6809] overlayfs: failed to clone upperpath [ 159.496027][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 159.514258][ T5711] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 159.663549][ T5711] usb 3-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 159.666974][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.667028][ T5711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.667050][ T5711] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.667072][ T5711] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.667115][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.100006][ T6851] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 162.395349][ T6884] FAULT_INJECTION: forcing a failure. [ 162.395349][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 162.395383][ T6884] CPU: 1 UID: 0 PID: 6884 Comm: syz.0.338 Not tainted syzkaller #0 PREEMPT(full) [ 162.395406][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.395418][ T6884] Call Trace: [ 162.395426][ T6884] [ 162.395436][ T6884] dump_stack_lvl+0xe8/0x150 [ 162.395465][ T6884] should_fail_ex+0x3eb/0x540 [ 162.395490][ T6884] _copy_to_user+0x31/0xb0 [ 162.395514][ T6884] semctl_info+0x2fe/0x4e0 [ 162.395538][ T6884] ? __pfx_semctl_info+0x10/0x10 [ 162.395577][ T6884] __se_sys_semctl+0x2ce/0x3e0 [ 162.395599][ T6884] ? __pfx___se_sys_semctl+0x10/0x10 [ 162.395629][ T6884] ? rcu_is_watching+0x16/0xb0 [ 162.395663][ T6884] do_syscall_64+0x166/0x520 [ 162.395683][ T6884] ? trace_irq_disable+0x3b/0x140 [ 162.395699][ T6884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.395720][ T6884] ? clear_bhb_loop+0x70/0xc0 [ 162.395743][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.395764][ T6884] RIP: 0033:0x7fd23ad9e1d9 [ 162.395784][ T6884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.395806][ T6884] RSP: 002b:00007fd23bd29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 162.395829][ T6884] RAX: ffffffffffffffda RBX: 00007fd23b025fa0 RCX: 00007fd23ad9e1d9 [ 162.395845][ T6884] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000000 [ 162.395857][ T6884] RBP: 00007fd23ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 162.395869][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.395881][ T6884] R13: 00007fd23b026038 R14: 00007fd23b025fa0 R15: 00007ffdf6db0f18 [ 162.395913][ T6884] [ 162.403431][ T6884] device-mapper: ioctl: Invalid ioctl structure: name m, dev 30 [ 162.465066][ T32] usb 3-1: USB disconnect, device number 5 [ 162.779833][ T6890] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 165.244627][ T6932] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 167.431179][ T6968] fuse: Bad value for 'fd' [ 168.328028][ T6974] capability: warning: `syz.3.370' uses 32-bit capabilities (legacy support in use) [ 168.529187][ T6983] FAULT_INJECTION: forcing a failure. [ 168.529187][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 168.529218][ T6983] CPU: 0 UID: 0 PID: 6983 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 168.529240][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.529251][ T6983] Call Trace: [ 168.529259][ T6983] [ 168.529267][ T6983] dump_stack_lvl+0xe8/0x150 [ 168.529295][ T6983] should_fail_ex+0x3eb/0x540 [ 168.529322][ T6983] should_failslab+0xa8/0x100 [ 168.529343][ T6983] __kmalloc_noprof+0xf9/0x710 [ 168.529363][ T6983] ? __pfx_ovl_lookup_index+0x10/0x10 [ 168.529381][ T6983] ? ovl_alloc_entry+0x22/0x80 [ 168.529396][ T6983] ? ovl_alloc_entry+0x22/0x80 [ 168.529423][ T6983] ovl_alloc_entry+0x22/0x80 [ 168.529441][ T6983] ovl_lookup+0x146f/0x1c80 [ 168.529459][ T6983] ? lock_acquire+0x115/0x350 [ 168.529518][ T6983] ? __pfx_ovl_lookup+0x10/0x10 [ 168.529535][ T6983] ? __d_lookup+0x66/0x790 [ 168.529557][ T6983] ? __pfx___d_alloc_parallel+0x10/0x10 [ 168.529573][ T6983] ? __d_lookup+0x6f3/0x790 [ 168.529588][ T6983] ? d_lookup+0x1f/0xa0 [ 168.529609][ T6983] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 168.529628][ T6983] ? lockdep_hardirqs_on+0x7b/0x110 [ 168.529654][ T6983] lookup_open+0x94b/0x1970 [ 168.529703][ T6983] path_openat+0x673/0x1da0 [ 168.529746][ T6983] do_file_open+0x23e/0x4a0 [ 168.529773][ T6983] ? __pfx_do_file_open+0x10/0x10 [ 168.529819][ T6983] ? _raw_spin_unlock+0x28/0x50 [ 168.529838][ T6983] ? alloc_fd+0x6af/0x760 [ 168.529872][ T6983] do_sys_openat2+0x115/0x200 [ 168.529893][ T6983] ? __se_sys_futex+0x3a8/0x450 [ 168.529915][ T6983] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.529940][ T6983] ? rcu_is_watching+0x16/0xb0 [ 168.529967][ T6983] __x64_sys_openat+0x138/0x170 [ 168.529995][ T6983] do_syscall_64+0x166/0x520 [ 168.530014][ T6983] ? trace_irq_disable+0x3b/0x140 [ 168.530032][ T6983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.530053][ T6983] ? clear_bhb_loop+0x70/0xc0 [ 168.530086][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.530106][ T6983] RIP: 0033:0x7fd23ad9e1d9 [ 168.530127][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.530143][ T6983] RSP: 002b:00007fd23bd29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 168.530168][ T6983] RAX: ffffffffffffffda RBX: 00007fd23b025fa0 RCX: 00007fd23ad9e1d9 [ 168.530183][ T6983] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 168.530197][ T6983] RBP: 00007fd23ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 168.530210][ T6983] R10: 000000000000025c R11: 0000000000000246 R12: 0000000000000000 [ 168.530222][ T6983] R13: 00007fd23b026038 R14: 00007fd23b025fa0 R15: 00007ffdf6db0f18 [ 168.530258][ T6983] [ 170.113015][ T7016] overlayfs: failed to clone upperpath [ 171.509930][ T7036] fuse: Bad value for 'fd' [ 171.846178][ T63] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 171.870615][ T7053] overlayfs: failed to clone upperpath [ 172.579324][ T7061] overlayfs: failed to clone upperpath [ 172.662985][ T7063] overlayfs: failed to clone upperpath [ 174.522101][ T7096] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 174.715676][ T7045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.627835][ T7125] FAULT_INJECTION: forcing a failure. [ 176.627835][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 176.627871][ T7125] CPU: 0 UID: 0 PID: 7125 Comm: syz.2.418 Not tainted syzkaller #0 PREEMPT(full) [ 176.627895][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.627906][ T7125] Call Trace: [ 176.627915][ T7125] [ 176.627926][ T7125] dump_stack_lvl+0xe8/0x150 [ 176.627956][ T7125] should_fail_ex+0x3eb/0x540 [ 176.627997][ T7125] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 176.628018][ T7125] should_failslab+0xa8/0x100 [ 176.628041][ T7125] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 176.628058][ T7125] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 176.628082][ T7125] ? ovl_alloc_inode+0x2c/0xa0 [ 176.628100][ T7125] ? ovl_alloc_inode+0x2c/0xa0 [ 176.628127][ T7125] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 176.628145][ T7125] ovl_alloc_inode+0x2c/0xa0 [ 176.628165][ T7125] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 176.628183][ T7125] alloc_inode+0x6a/0x1b0 [ 176.628203][ T7125] ? __pfx_ovl_inode_test+0x10/0x10 [ 176.628222][ T7125] ? __pfx_ovl_inode_set+0x10/0x10 [ 176.628241][ T7125] iget5_locked+0x4a/0xa0 [ 176.628266][ T7125] ovl_get_inode+0x6b3/0xff0 [ 176.628304][ T7125] ? __pfx_ovl_get_inode+0x10/0x10 [ 176.628327][ T7125] ? do_raw_spin_unlock+0xf5/0x200 [ 176.628360][ T7125] ovl_lookup+0x1945/0x1c80 [ 176.628380][ T7125] ? lock_acquire+0x115/0x350 [ 176.628442][ T7125] ? __pfx_ovl_lookup+0x10/0x10 [ 176.628459][ T7125] ? __d_lookup+0x66/0x790 [ 176.628481][ T7125] ? __pfx___d_alloc_parallel+0x10/0x10 [ 176.628510][ T7125] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 176.628532][ T7125] ? lockdep_hardirqs_on+0x7b/0x110 [ 176.628560][ T7125] lookup_open+0x94b/0x1970 [ 176.628612][ T7125] path_openat+0x673/0x1da0 [ 176.628657][ T7125] do_file_open+0x23e/0x4a0 [ 176.628684][ T7125] ? __pfx_do_file_open+0x10/0x10 [ 176.628732][ T7125] ? _raw_spin_unlock+0x28/0x50 [ 176.628752][ T7125] ? alloc_fd+0x6af/0x760 [ 176.628786][ T7125] do_sys_openat2+0x115/0x200 [ 176.628808][ T7125] ? __se_sys_futex+0x3a8/0x450 [ 176.628830][ T7125] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.628857][ T7125] ? rcu_is_watching+0x16/0xb0 [ 176.628884][ T7125] __x64_sys_openat+0x138/0x170 [ 176.628911][ T7125] do_syscall_64+0x166/0x520 [ 176.628931][ T7125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.628952][ T7125] ? clear_bhb_loop+0x70/0xc0 [ 176.628983][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.629008][ T7125] RIP: 0033:0x7fd48699e1d9 [ 176.629028][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.629044][ T7125] RSP: 002b:00007fd487941028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.629068][ T7125] RAX: ffffffffffffffda RBX: 00007fd486c25fa0 RCX: 00007fd48699e1d9 [ 176.629083][ T7125] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 176.629097][ T7125] RBP: 00007fd486a35888 R08: 0000000000000000 R09: 0000000000000000 [ 176.629109][ T7125] R10: 000000000000025c R11: 0000000000000246 R12: 0000000000000000 [ 176.629121][ T7125] R13: 00007fd486c26038 R14: 00007fd486c25fa0 R15: 00007fffb2926508 [ 176.629157][ T7125] [ 176.691727][ T7125] overlayfs: failed to get inode (-12) [ 180.167587][ T7174] overlayfs: failed to clone upperpath [ 181.072329][ T7199] fuse: Bad value for 'fd' [ 181.450146][ T7206] capability: warning: `syz.0.447' uses deprecated v2 capabilities in a way that may be insecure [ 186.258886][ T7272] overlayfs: failed to clone upperpath [ 186.291109][ T7274] overlayfs: missing 'lowerdir' [ 187.995027][ T7302] overlayfs: failed to clone upperpath [ 188.242042][ T7306] overlayfs: missing 'lowerdir' [ 190.634979][ T7337] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 190.665867][ T7337] bond2 (unregistering): Released all slaves [ 190.885041][ T7353] overlayfs: missing 'lowerdir' [ 192.897912][ T7380] overlayfs: failed to clone upperpath [ 193.334915][ T33] audit: type=1326 audit(1791581081.146:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.2.510" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd48699e1d9 code=0x7ffc0000 [ 193.335189][ T33] audit: type=1326 audit(1791581081.146:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.2.510" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd48699e1d9 code=0x7ffc0000 [ 193.336697][ T33] audit: type=1326 audit(1791581081.146:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.2.510" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd48699e1d9 code=0x7ffc0000 [ 193.337054][ T33] audit: type=1326 audit(1791581081.146:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.2.510" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd48699e1d9 code=0x7ffc0000 [ 193.487670][ T7388] overlayfs: missing 'lowerdir' [ 194.160060][ T7412] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 194.160283][ T7412] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 194.348044][ T7418] overlayfs: missing 'lowerdir' [ 194.614213][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.614278][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.928741][ T7457] overlayfs: missing 'lowerdir' [ 197.155148][ T7480] overlayfs: failed to clone upperpath [ 197.300084][ T6386] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 200.100014][ T7479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.511390][ T7545] overlayfs: failed to clone upperpath [ 201.562683][ T7549] loop2: detected capacity change from 0 to 164 [ 201.563732][ T7549] iso9660: Unknown parameter 'ÿÿÿÿÿÿ .ÃNÛBþO' [ 201.809865][ T4924] Bluetooth: hci0: command 0x0406 tx timeout [ 201.809965][ T4924] Bluetooth: hci4: command 0x0406 tx timeout [ 201.810003][ T4924] Bluetooth: hci2: command 0x0406 tx timeout [ 201.810071][ T4924] Bluetooth: hci1: command 0x0406 tx timeout [ 201.810110][ T4924] Bluetooth: hci3: command 0x0406 tx timeout [ 203.946138][ T7586] overlayfs: failed to clone upperpath [ 205.937661][ T7607] fuse: Bad value for 'fd' [ 206.982931][ T5797] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.258601][ T5797] usb 3-1: device descriptor read/64, error -71 [ 207.559970][ T5797] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 207.709981][ T5797] usb 3-1: device descriptor read/64, error -71 [ 207.830677][ T5797] usb usb3-port1: attempt power cycle [ 208.271815][ T7646] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.271843][ T7646] overlayfs: failed to set xattr on upper [ 208.271851][ T7646] overlayfs: ...falling back to redirect_dir=nofollow. [ 208.271859][ T7646] overlayfs: ...falling back to index=off. [ 208.271866][ T7646] overlayfs: ...falling back to uuid=null. [ 208.320069][ T5797] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 208.343281][ T5797] usb 3-1: device descriptor read/8, error -71 [ 208.579731][ T5797] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.601329][ T5797] usb 3-1: device descriptor read/8, error -71 [ 208.711039][ T5797] usb usb3-port1: unable to enumerate USB device [ 209.425467][ T7687] overlayfs: failed to clone upperpath [ 209.738869][ T7694] overlayfs: failed to clone upperpath [ 209.884867][ T7698] Illegal XDP return value 16128 on prog (id 25) dev N/A, expect packet loss! [ 211.369802][ T5719] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.506754][ T5719] usb 3-1: device descriptor read/64, error -71 [ 211.741029][ T5719] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 211.903964][ T5719] usb 3-1: device descriptor read/64, error -71 [ 212.003440][ T7760] tap0: tun_chr_ioctl cmd 2148553947 [ 212.020332][ T5719] usb usb3-port1: attempt power cycle [ 212.360027][ T5719] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 212.391360][ T5719] usb 3-1: device descriptor read/8, error -71 [ 212.631832][ T5719] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 212.650749][ T5719] usb 3-1: device descriptor read/8, error -71 [ 212.761773][ T5719] usb usb3-port1: unable to enumerate USB device [ 213.871729][ T7833] FAULT_INJECTION: forcing a failure. [ 213.871729][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 213.871762][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.0.687 Not tainted syzkaller #0 PREEMPT(full) [ 213.871785][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.871798][ T7833] Call Trace: [ 213.871806][ T7833] [ 213.871815][ T7833] dump_stack_lvl+0xe8/0x150 [ 213.871844][ T7833] should_fail_ex+0x3eb/0x540 [ 213.871872][ T7833] should_failslab+0xa8/0x100 [ 213.871896][ T7833] __kvmalloc_node_noprof+0x171/0x820 [ 213.871920][ T7833] ? __kvmalloc_node_noprof+0x340/0x820 [ 213.871940][ T7833] ? io_alloc_cache_init+0x42/0x140 [ 213.871959][ T7833] ? io_alloc_cache_init+0x42/0x140 [ 213.871987][ T7833] io_alloc_cache_init+0x42/0x140 [ 213.872010][ T7833] io_ring_ctx_alloc+0x57d/0xb80 [ 213.872041][ T7833] io_uring_create+0x50/0x980 [ 213.872065][ T7833] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 213.872090][ T7833] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 213.872137][ T7833] ? rcu_is_watching+0x16/0xb0 [ 213.872171][ T7833] do_syscall_64+0x166/0x520 [ 213.872188][ T7833] ? trace_irq_disable+0x3b/0x140 [ 213.872205][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.872225][ T7833] ? clear_bhb_loop+0x70/0xc0 [ 213.872247][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.872267][ T7833] RIP: 0033:0x7fd23ad9e1d9 [ 213.872287][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.872307][ T7833] RSP: 002b:00007fd23bd28fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 213.872330][ T7833] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fd23ad9e1d9 [ 213.872345][ T7833] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000002bf3 [ 213.872358][ T7833] RBP: 00007fd23ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 213.872371][ T7833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.872382][ T7833] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf6db0f18 [ 213.872415][ T7833] [ 214.207107][ T7845] overlayfs: failed to clone upperpath [ 214.245961][ T7846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 214.405083][ T7856] Unsupported ieee802154 address type: 0 [ 216.776907][ T7946] overlayfs: failed to clone upperpath [ 216.962972][ T7958] tipc: Started in network mode [ 216.962991][ T7958] tipc: Node identity , cluster identity 4711 [ 216.963005][ T7958] tipc: Failed to set node id, please configure manually [ 216.963054][ T7958] tipc: Enabling of bearer rejected, failed to enable media [ 217.270740][ T5711] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 217.421030][ T5711] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 217.423572][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.423605][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.423743][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.440929][ T5711] usb 3-1: config 0 descriptor?? [ 218.153046][ T5711] uclogic 0003:5543:0064.0001: item fetching failed at offset 6/24 [ 218.155807][ T5711] uclogic 0003:5543:0064.0001: parse failed [ 218.155928][ T5711] uclogic 0003:5543:0064.0001: probe with driver uclogic failed with error -22 [ 218.195868][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 218.307199][ T5711] usb 3-1: USB disconnect, device number 14 [ 219.469389][ T8065] ------------[ cut here ]------------ [ 219.469408][ T8065] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 219.469434][ T8065] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#1: syz.3.781/8065 [ 219.496573][ T8065] Modules linked in: [ 219.501454][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.3.781 Not tainted syzkaller #0 PREEMPT(full) [ 219.510929][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.522402][ T8065] RIP: 0010:__fortify_report+0x89/0xa0 [ 219.528277][ T8065] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 219.548216][ T8065] RSP: 0018:ffffc90004fdfdc8 EFLAGS: 00010246 [ 219.554651][ T8065] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 219.562736][ T8065] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 219.570809][ T8065] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100eb0d3f1 [ 219.578818][ T8065] R10: dffffc0000000000 R11: ffffed100eb0d3f2 R12: 0000000000000000 [ 219.586902][ T8065] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 219.594988][ T8065] FS: 00007f5e90d8c6c0(0000) GS:ffff888123bb6000(0000) knlGS:0000000000000000 [ 219.605436][ T8065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.613046][ T8065] CR2: 000000110c395024 CR3: 0000000077fac000 CR4: 00000000003526f0 [ 219.621154][ T8065] Call Trace: [ 219.624467][ T8065] [ 219.627438][ T8065] __fortify_panic+0x9/0x10 [ 219.632066][ T8065] landlock_merge_ruleset+0xc46/0xc90 [ 219.637486][ T8065] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 219.643789][ T8065] do_syscall_64+0x166/0x520 [ 219.648436][ T8065] ? trace_irq_disable+0x3b/0x140 [ 219.653603][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.659768][ T8065] ? clear_bhb_loop+0x70/0xc0 [ 219.664484][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.670499][ T8065] RIP: 0033:0x7f5e8ff9e1d9 [ 219.674961][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.694679][ T8065] RSP: 002b:00007f5e90d8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 219.704432][ T8065] RAX: ffffffffffffffda RBX: 00007f5e90225fa0 RCX: 00007f5e8ff9e1d9 [ 219.713314][ T8065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 219.721381][ T8065] RBP: 00007f5e90035888 R08: 0000000000000000 R09: 0000000000000000 [ 219.729395][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.737894][ T8065] R13: 00007f5e90226038 R14: 00007f5e90225fa0 R15: 00007ffe4354e988 [ 219.746093][ T8065] [ 219.749158][ T8065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.756473][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.3.781 Not tainted syzkaller #0 PREEMPT(full) [ 219.765698][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.775783][ T8065] Call Trace: [ 219.779141][ T8065] [ 219.782110][ T8065] vpanic+0x26f/0x710 [ 219.786140][ T8065] panic+0xc5/0xd0 [ 219.789999][ T8065] ? __pfx_panic+0x10/0x10 [ 219.794470][ T8065] __warn+0x315/0x4c0 [ 219.798575][ T8065] ? __fortify_report+0x6b/0xa0 [ 219.803466][ T8065] ? __fortify_report+0x6b/0xa0 [ 219.808393][ T8065] __report_bug+0x276/0x570 [ 219.812937][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.819065][ T8065] ? __fortify_report+0x6b/0xa0 [ 219.823970][ T8065] ? __pfx___report_bug+0x10/0x10 [ 219.829070][ T8065] report_bug_entry+0x19b/0x290 [ 219.833970][ T8065] ? __fortify_report+0x89/0xa0 [ 219.838854][ T8065] ? __fortify_report+0x8e/0xa0 [ 219.843737][ T8065] handle_bug+0xce/0x200 [ 219.848016][ T8065] exc_invalid_op+0x1a/0x50 [ 219.852554][ T8065] asm_exc_invalid_op+0x1a/0x20 [ 219.857433][ T8065] RIP: 0010:__fortify_report+0x89/0xa0 [ 219.863005][ T8065] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 219.882657][ T8065] RSP: 0018:ffffc90004fdfdc8 EFLAGS: 00010246 [ 219.888757][ T8065] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 219.896766][ T8065] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 219.904779][ T8065] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100eb0d3f1 [ 219.912792][ T8065] R10: dffffc0000000000 R11: ffffed100eb0d3f2 R12: 0000000000000000 [ 219.920800][ T8065] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 219.928808][ T8065] ? __fortify_report+0x2c/0xa0 [ 219.933862][ T8065] __fortify_panic+0x9/0x10 [ 219.938386][ T8065] landlock_merge_ruleset+0xc46/0xc90 [ 219.943797][ T8065] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 219.950007][ T8065] do_syscall_64+0x166/0x520 [ 219.954630][ T8065] ? trace_irq_disable+0x3b/0x140 [ 219.959677][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.965775][ T8065] ? clear_bhb_loop+0x70/0xc0 [ 219.970516][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.976480][ T8065] RIP: 0033:0x7f5e8ff9e1d9 [ 219.980937][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.000584][ T8065] RSP: 002b:00007f5e90d8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 220.009060][ T8065] RAX: ffffffffffffffda RBX: 00007f5e90225fa0 RCX: 00007f5e8ff9e1d9 [ 220.017071][ T8065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 220.025074][ T8065] RBP: 00007f5e90035888 R08: 0000000000000000 R09: 0000000000000000 [ 220.033071][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.041063][ T8065] R13: 00007f5e90226038 R14: 00007f5e90225fa0 R15: 00007ffe4354e988 [ 220.049087][ T8065] [ 220.052416][ T8065] Kernel Offset: disabled [ 220.056780][ T8065] Rebooting in 86400 seconds..