last executing test programs: 4.000359642s ago: executing program 0 (id=733): socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 3.574494756s ago: executing program 1 (id=743): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x14002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f0000000440)={&(0x7f0000000400)=[r2, r3], 0x0, 0x2, 0x4}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x1, 0x2}, {0x3}}}}, 0xf) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x1) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(r0, 0xe) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) open(&(0x7f0000000080)='./file0\x00', 0x60c02, 0x1) 3.151617182s ago: executing program 0 (id=736): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x801, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(r0, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r6}}], 0x1, 0x0, 0x0) 3.133445004s ago: executing program 3 (id=737): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x801, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 2.938835852s ago: executing program 3 (id=738): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x8) landlock_restrict_self(r3, 0xb) landlock_restrict_self(r3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.591335139s ago: executing program 3 (id=740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28) close(0x3) 2.589094537s ago: executing program 1 (id=741): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 2.37858175s ago: executing program 3 (id=744): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 2.236213757s ago: executing program 2 (id=745): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 2.235678656s ago: executing program 1 (id=746): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) syz_io_uring_complete(r2, r3) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) syz_ublk_process_io(r7, 0x0, 0x1, &(0x7f0000000e00), 0x0) 1.897188893s ago: executing program 0 (id=747): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(r2, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 1.713438403s ago: executing program 0 (id=748): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x801, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1.538939645s ago: executing program 0 (id=749): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 1.464956925s ago: executing program 2 (id=750): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="f2ab8fe978d7fbb9800000c00f3235002000000f30360f090f2327f2aaf3a59a07000000e900f336dde48fc9e801cf", 0x2f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pwrite64(r0, 0x0, 0x0, 0x1be) pwrite64(r0, 0x0, 0x0, 0x1fe) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r7, 0x7, 0x10000000, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) pwrite64(r0, 0x0, 0x0, 0xd23) pwrite64(r0, 0x0, 0x0, 0xd2b) 1.338029957s ago: executing program 3 (id=751): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.185215834s ago: executing program 1 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28) close(0x3) 975.857687ms ago: executing program 2 (id=753): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xe000, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 936.880365ms ago: executing program 3 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000100)=""/43, 0x2b) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 929.83925ms ago: executing program 1 (id=755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf030000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x5ac4, 0x2}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8000, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 704.511778ms ago: executing program 2 (id=756): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(r2, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 319.434538ms ago: executing program 0 (id=757): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x20, 0x118, 0x0, r4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f00000004c0)={0x0, 0x400042cc, 0x1000, 0x1, 0x80, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 180.685524ms ago: executing program 2 (id=758): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x801, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 148.007398ms ago: executing program 1 (id=759): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, &(0x7f0000000380)) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006000000693574"], 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) stat(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB]) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 0s ago: executing program 2 (id=760): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) syz_io_uring_complete(r2, r3) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) syz_ublk_process_io(r7, 0x0, 0x1, &(0x7f0000000e00), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 87.317555][ T5607] cgroup: Unknown subsys name 'net' [ 87.437700][ T5607] cgroup: Unknown subsys name 'cpuset' [ 87.441160][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.167697][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.661671][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.670882][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.678684][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.691111][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.692406][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.755437][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.758521][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.759806][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.761753][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.763155][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.763293][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.774346][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.777462][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.793603][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.793750][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.842912][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.848198][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.861732][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.871771][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.872782][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.130338][ T1238] cfg80211: failed to load regulatory.db [ 93.437046][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.437607][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.437724][ T5627] bridge_slave_0: entered allmulticast mode [ 93.439495][ T5627] bridge_slave_0: entered promiscuous mode [ 93.510364][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.510525][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.510671][ T5627] bridge_slave_1: entered allmulticast mode [ 93.512530][ T5627] bridge_slave_1: entered promiscuous mode [ 93.568404][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.568511][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.568644][ T5626] bridge_slave_0: entered allmulticast mode [ 93.570696][ T5626] bridge_slave_0: entered promiscuous mode [ 93.622434][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.622542][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.622671][ T5626] bridge_slave_1: entered allmulticast mode [ 93.630991][ T5626] bridge_slave_1: entered promiscuous mode [ 93.676374][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.676558][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.676678][ T5628] bridge_slave_0: entered allmulticast mode [ 93.678841][ T5628] bridge_slave_0: entered promiscuous mode [ 93.717865][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.724180][ T5637] Bluetooth: hci0: command tx timeout [ 93.730778][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.731219][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.733122][ T5628] bridge_slave_1: entered allmulticast mode [ 93.740256][ T5628] bridge_slave_1: entered promiscuous mode [ 93.766119][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.778155][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.810167][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.872848][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.872967][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.873511][ T5622] bridge_slave_0: entered allmulticast mode [ 93.878782][ T5622] bridge_slave_0: entered promiscuous mode [ 93.893961][ T52] Bluetooth: hci2: command tx timeout [ 93.895747][ T5637] Bluetooth: hci1: command tx timeout [ 93.911307][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.932468][ T5627] team0: Port device team_slave_0 added [ 93.932708][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.932861][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.933014][ T5622] bridge_slave_1: entered allmulticast mode [ 93.937773][ T5622] bridge_slave_1: entered promiscuous mode [ 93.949275][ T5627] team0: Port device team_slave_1 added [ 93.957764][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.974524][ T5637] Bluetooth: hci3: command tx timeout [ 93.995005][ T5626] team0: Port device team_slave_0 added [ 94.039529][ T5626] team0: Port device team_slave_1 added [ 94.067920][ T5628] team0: Port device team_slave_0 added [ 94.088139][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.089175][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.089195][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.089219][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.092451][ T5628] team0: Port device team_slave_1 added [ 94.153154][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.154212][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.154226][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.154250][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.205953][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.206005][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.206078][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.273524][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.273543][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.273569][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.274744][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.274756][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.274779][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.339810][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.339861][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.339946][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.411427][ T5622] team0: Port device team_slave_0 added [ 94.452859][ T5622] team0: Port device team_slave_1 added [ 94.477293][ T5627] hsr_slave_0: entered promiscuous mode [ 94.478174][ T5627] hsr_slave_1: entered promiscuous mode [ 94.528170][ T5626] hsr_slave_0: entered promiscuous mode [ 94.528941][ T5626] hsr_slave_1: entered promiscuous mode [ 94.529577][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 94.529659][ T5626] Cannot create hsr debugfs directory [ 94.590212][ T5628] hsr_slave_0: entered promiscuous mode [ 94.591048][ T5628] hsr_slave_1: entered promiscuous mode [ 94.591579][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 94.591601][ T5628] Cannot create hsr debugfs directory [ 94.592418][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.592431][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.592454][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.664738][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.664755][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.664802][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.871403][ T5622] hsr_slave_0: entered promiscuous mode [ 94.872303][ T5622] hsr_slave_1: entered promiscuous mode [ 94.872857][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 94.872877][ T5622] Cannot create hsr debugfs directory [ 95.228366][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.240528][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.247799][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.261212][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.262536][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.281000][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.298686][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.310772][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.383236][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.395669][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.396852][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.400257][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.402383][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.437159][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.438081][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.440672][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.551428][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.562284][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.581756][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.592420][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.599713][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.614735][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.616510][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.619743][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.744984][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.748848][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.774240][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.778428][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.779297][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.782499][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.814271][ T5637] Bluetooth: hci0: command tx timeout [ 95.820499][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.831817][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.908561][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.914559][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.964170][ T52] Bluetooth: hci2: command tx timeout [ 95.964244][ T5637] Bluetooth: hci1: command tx timeout [ 95.972208][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.010467][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.022588][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.043303][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.043541][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.044641][ T5637] Bluetooth: hci3: command tx timeout [ 96.073194][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.073823][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.098498][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.098660][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.100274][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.100366][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.186247][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.219695][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.219967][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.271295][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.271370][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.335985][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.416598][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.457108][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.457204][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.501487][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.501606][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.257451][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.417334][ T5626] veth0_vlan: entered promiscuous mode [ 97.452491][ T5626] veth1_vlan: entered promiscuous mode [ 97.485602][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.583385][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.608846][ T5626] veth0_macvtap: entered promiscuous mode [ 97.623139][ T5626] veth1_macvtap: entered promiscuous mode [ 97.706170][ T5627] veth0_vlan: entered promiscuous mode [ 97.726214][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.762343][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.773129][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.783387][ T5627] veth1_vlan: entered promiscuous mode [ 97.826891][ T5628] veth0_vlan: entered promiscuous mode [ 97.860191][ T5628] veth1_vlan: entered promiscuous mode [ 97.884002][ T5637] Bluetooth: hci0: command tx timeout [ 97.946955][ T5627] veth0_macvtap: entered promiscuous mode [ 97.991402][ T5627] veth1_macvtap: entered promiscuous mode [ 98.027045][ T5628] veth0_macvtap: entered promiscuous mode [ 98.032833][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.032849][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.049586][ T5637] Bluetooth: hci1: command tx timeout [ 98.049932][ T5637] Bluetooth: hci2: command tx timeout [ 98.092626][ T5622] veth0_vlan: entered promiscuous mode [ 98.105163][ T5628] veth1_macvtap: entered promiscuous mode [ 98.134737][ T52] Bluetooth: hci3: command tx timeout [ 98.140717][ T5622] veth1_vlan: entered promiscuous mode [ 98.151812][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.155084][ T1395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.164354][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.185794][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.185818][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.289710][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.317943][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.334601][ T5626] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.374941][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.376103][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.403818][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.403870][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.403910][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.403948][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.403986][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.537682][ T1414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.537799][ T28] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.537960][ T28] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.537969][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.537988][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.541576][ T5622] veth0_macvtap: entered promiscuous mode [ 98.597235][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.645932][ T5622] veth1_macvtap: entered promiscuous mode [ 98.703567][ T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.703592][ T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.778372][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.824909][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.831478][ T5770] nvmet: adding nsid 1 to subsystem testsubsys [ 98.861595][ T5770] nvmet: failed to open block device (null): (-22) [ 98.897233][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.897257][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.964498][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.090762][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.090786][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.143569][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.143622][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.143660][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.260258][ T5778] veth0_virt_wifi: entered promiscuous mode [ 99.293600][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.296765][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.492481][ T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.492506][ T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.519628][ T5780] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.965297][ T52] Bluetooth: hci0: command tx timeout [ 100.123663][ T52] Bluetooth: hci2: command tx timeout [ 100.123699][ T52] Bluetooth: hci1: command tx timeout [ 100.206398][ T5637] Bluetooth: hci3: command tx timeout [ 101.502849][ T5766] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.661383][ T5766] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 101.675519][ T5766] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.701753][ T5766] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.721451][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.721479][ T5766] usb 2-1: Product: syz [ 101.721494][ T5766] usb 2-1: Manufacturer: syz [ 101.721509][ T5766] usb 2-1: SerialNumber: syz [ 101.808924][ T5840] process 'syz.2.27' launched './file0' with NULL argv: empty string added [ 101.847614][ T5766] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 101.851516][ T5843] tipc: Started in network mode [ 101.851548][ T5843] tipc: Node identity 7f000001, cluster identity 4711 [ 101.852519][ T5843] tipc: Enabling of bearer rejected, failed to enable media [ 101.896486][ T5843] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 101.898115][ T5843] tipc: Enabled bearer , priority 10 [ 101.908983][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.930229][ T5840] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.934723][ T5766] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 102.000623][ T5766] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 102.023187][ T5840] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.054364][ T5840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.055539][ T5840] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.109654][ T5840] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.141017][ T5840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.143254][ T5840] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.211025][ T5840] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.250911][ T5840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.253204][ T5840] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.309058][ T5840] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.569587][ T5853] device-mapper: ioctl: Invalid data size in the ioctl structure: 3041672136 [ 102.700856][ T5858] tipc: Enabling of bearer rejected, failed to enable media [ 102.702112][ T5858] netlink: 'syz.2.31': attribute type 10 has an invalid length. [ 102.723028][ T5858] syz_tun: entered promiscuous mode [ 102.745933][ T5858] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 102.827628][ T5860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.847381][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 102.849089][ T5860] Zero length message leads to an empty skb [ 103.015532][ T10] tipc: Node number set to 2130706433 [ 103.964529][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.992657][ T317] IPVS: starting estimator thread 0... [ 104.083929][ T5886] IPVS: using max 37 ests per chain, 88800 per kthread [ 104.124186][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.214164][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.223724][ T5729] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.285407][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.384537][ T5729] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 104.390195][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.652328][ T5729] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 6e:54:6b:1c:93:21 [ 104.767974][ T5830] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 104.798478][ T5766] usb 2-1: USB disconnect, device number 2 [ 104.819708][ T5766] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 104.851368][ T5766] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 104.869611][ T5766] ti_usb_3410_5052 2-1:2.0: device disconnected [ 105.017232][ T5784] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.175498][ T5784] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.179491][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.179523][ T5784] usb 1-1: Product: syz [ 105.179539][ T5784] usb 1-1: Manufacturer: syz [ 105.179553][ T5784] usb 1-1: SerialNumber: syz [ 105.227682][ T5784] usb 1-1: config 0 descriptor?? [ 105.456540][ T5784] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.750556][ T5901] net1080 4-1:1.0 usb0: port A, peer connected [ 105.972146][ T5925] netlink: 168 bytes leftover after parsing attributes in process `syz.1.51'. [ 106.044521][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.206785][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.283576][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.368274][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.675853][ T5729] usb 4-1: USB disconnect, device number 2 [ 106.711171][ T5729] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 106.786672][ T5951] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.940960][ T5784] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 106.971677][ T5784] usb 1-1: USB disconnect, device number 2 [ 107.429891][ T5969] loop0: detected capacity change from 0 to 3904 [ 107.459367][ T5971] FAULT_INJECTION: forcing a failure. [ 107.459367][ T5971] name failslab, interval 1, probability 0, space 0, times 1 [ 107.459414][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT(full) [ 107.459439][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.459462][ T5971] Call Trace: [ 107.459475][ T5971] [ 107.459485][ T5971] dump_stack_lvl+0xe8/0x150 [ 107.459533][ T5971] should_fail_ex+0x3eb/0x540 [ 107.459565][ T5971] should_failslab+0xa8/0x100 [ 107.459594][ T5971] __kmalloc_cache_noprof+0x9e/0x600 [ 107.459632][ T5971] ? __pfx___key_instantiate_and_link+0x10/0x10 [ 107.459660][ T5971] ? assoc_array_insert+0x90/0x2f60 [ 107.459687][ T5971] ? assoc_array_insert+0x90/0x2f60 [ 107.459723][ T5971] assoc_array_insert+0x90/0x2f60 [ 107.459777][ T5971] ? down_write+0x166/0x200 [ 107.459803][ T5971] ? __pfx_down_write+0x10/0x10 [ 107.459834][ T5971] __key_link_begin+0xd6/0x1f0 [ 107.459869][ T5971] key_link+0xdd/0x360 [ 107.459906][ T5971] call_sbin_request_key+0x413/0xbf0 [ 107.459933][ T5971] ? request_key_auth_free_preparse+0x9/0x10 [ 107.459968][ T5971] ? __pfx_call_sbin_request_key+0x10/0x10 [ 107.459992][ T5971] ? do_raw_spin_unlock+0xf5/0x200 [ 107.460057][ T5971] ? __pfx_request_key_auth_new+0x10/0x10 [ 107.460100][ T5971] request_key_and_link+0xefa/0x1580 [ 107.460136][ T5971] ? __pfx_request_key_and_link+0x10/0x10 [ 107.460172][ T5971] ? __pfx_key_default_cmp+0x10/0x10 [ 107.460202][ T5971] ? __pfx_keyring_search_iterator+0x10/0x10 [ 107.460239][ T5971] ? down_read+0x2b9/0x320 [ 107.460262][ T5971] ? _copy_from_user+0x94/0xb0 [ 107.460297][ T5971] __se_sys_request_key+0x29a/0x350 [ 107.460336][ T5971] ? __pfx___se_sys_request_key+0x10/0x10 [ 107.460386][ T5971] do_syscall_64+0x166/0x520 [ 107.460408][ T5971] ? trace_irq_disable+0x3b/0x140 [ 107.460441][ T5971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.460465][ T5971] ? clear_bhb_loop+0x70/0xc0 [ 107.460494][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.460517][ T5971] RIP: 0033:0x7fdff079e159 [ 107.460543][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.460563][ T5971] RSP: 002b:00007fdff16cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 107.460598][ T5971] RAX: ffffffffffffffda RBX: 00007fdff0a25fa0 RCX: 00007fdff079e159 [ 107.460615][ T5971] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 107.460632][ T5971] RBP: 00007fdff083503b R08: 0000000000000000 R09: 0000000000000000 [ 107.460646][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.460660][ T5971] R13: 00007fdff0a26038 R14: 00007fdff0a25fa0 R15: 00007ffc2420b5e8 [ 107.460696][ T5971] [ 107.694405][ T5969] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 107.694512][ T5969] ldm_validate_privheads(): Disk read failed. [ 107.781559][ T5969] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be ''. [ 107.781589][ T5969] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 107.781599][ T5969] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 107.781609][ T5969] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 107.781631][ T5969] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 107.781671][ T5969] loop0: [ 107.781685][ T5969] loop0: partition table partially beyond EOD, truncated [ 108.111036][ T5978] tipc: Started in network mode [ 108.111075][ T5978] tipc: Node identity 2000004, cluster identity 4711 [ 108.111091][ T5978] tipc: Node number set to 33554436 [ 108.137475][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.284981][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.364064][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.445142][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.984133][ T6002] netlink: 'syz.3.67': attribute type 13 has an invalid length. [ 109.373526][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.525300][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 109.527059][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.528695][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 109.531834][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.531862][ T10] usb 3-1: Product: syz [ 109.531879][ T10] usb 3-1: Manufacturer: syz [ 109.531894][ T10] usb 3-1: SerialNumber: syz [ 109.534240][ T5784] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.562457][ T10] usb 3-1: config 0 descriptor?? [ 109.592038][ T6007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.684378][ T5784] usb 4-1: Using ep0 maxpacket: 8 [ 109.686799][ T5784] usb 4-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 109.687836][ T5784] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.687870][ T5784] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.687904][ T5784] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.687930][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.699447][ T5784] usb 4-1: config 0 descriptor?? [ 109.793748][ T1222] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.930353][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.933188][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.948446][ T1222] usb 1-1: Using ep0 maxpacket: 16 [ 109.956513][ T1222] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 109.958586][ T1222] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 109.958606][ T1222] usb 1-1: config 0 has no interface number 0 [ 109.958634][ T1222] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 109.958652][ T1222] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 109.965635][ T1222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.965769][ T1222] usb 1-1: Product: syz [ 109.965819][ T1222] usb 1-1: Manufacturer: syz [ 109.965940][ T1222] usb 1-1: SerialNumber: syz [ 110.078363][ T1222] usb 1-1: config 0 descriptor?? [ 110.089411][ T6020] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.092449][ T6020] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.314926][ T9] usb 3-1: USB disconnect, device number 2 [ 110.373555][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.379914][ T6020] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.380080][ T6020] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 111.998436][ T1222] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 112.334823][ T5784] usbhid 4-1:0.0: can't add hid device: -71 [ 112.334962][ T5784] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 112.343861][ T5784] usb 4-1: USB disconnect, device number 3 [ 112.608513][ T1222] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 112.608539][ T1222] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 112.652728][ T1222] asix 1-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 112.653195][ T1222] asix 1-1:0.251: probe with driver asix failed with error -5 [ 112.686776][ T1222] usb 1-1: USB disconnect, device number 3 [ 113.591339][ T6101] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 113.736097][ T6105] rust_binder: 6100:6105 got reply transaction with no transaction stack [ 113.736165][ T6105] rust_binder: 6100:6105 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 114.396990][ T6105] syz.3.93 (6105) used greatest stack depth: 17776 bytes left [ 114.397884][ T6101] syz.3.93 (6101) used greatest stack depth: 11936 bytes left [ 114.484743][ T5784] rust_binder: 6100: undelivered TRANSACTION_ERROR: 29201 [ 115.653637][ T62] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 115.804635][ T62] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 115.812041][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.812065][ T62] usb 1-1: Product: syz [ 115.812076][ T62] usb 1-1: Manufacturer: syz [ 115.812088][ T62] usb 1-1: SerialNumber: syz [ 115.850525][ T62] usb 1-1: config 0 descriptor?? [ 116.082288][ T62] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 116.180355][ T31] audit: type=1326 audit(1788986093.686:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101e19e159 code=0x7ffc0000 [ 116.180808][ T31] audit: type=1326 audit(1788986093.686:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101e19e159 code=0x7ffc0000 [ 116.193895][ T31] audit: type=1326 audit(1788986093.686:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101e19e159 code=0x7ffc0000 [ 116.263818][ T31] audit: type=1326 audit(1788986093.776:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101e197ed7 code=0x7ffc0000 [ 116.265156][ T31] audit: type=1326 audit(1788986093.776:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f101e13f4d9 code=0x7ffc0000 [ 116.265215][ T31] audit: type=1326 audit(1788986093.776:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101e197ed7 code=0x7ffc0000 [ 116.265266][ T31] audit: type=1326 audit(1788986093.776:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f101e13f4d9 code=0x7ffc0000 [ 116.265318][ T31] audit: type=1326 audit(1788986093.776:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101e197ed7 code=0x7ffc0000 [ 116.265369][ T31] audit: type=1326 audit(1788986093.776:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f101e13f4d9 code=0x7ffc0000 [ 116.265422][ T31] audit: type=1326 audit(1788986093.776:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.114" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f101e197ed7 code=0x7ffc0000 [ 117.233558][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.384489][ T44] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.386154][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.386209][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.391374][ T44] usb 4-1: config 0 descriptor?? [ 117.445568][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 117.557073][ T6203] nvmet: adding nsid 1 to subsystem testnqn [ 117.682845][ T62] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 117.706048][ T62] usb 1-1: USB disconnect, device number 4 [ 117.846172][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 117.852093][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 117.852707][ T44] pwc: recv_control_msg error -32 req 02 val 2c00 [ 117.860174][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 117.883154][ T44] pwc: recv_control_msg error -32 req 04 val 1300 [ 117.896589][ T44] pwc: recv_control_msg error -32 req 04 val 1400 [ 117.897639][ T44] pwc: recv_control_msg error -32 req 02 val 2000 [ 117.899723][ T44] pwc: recv_control_msg error -32 req 02 val 2100 [ 117.900772][ T44] pwc: recv_control_msg error -32 req 04 val 1500 [ 117.901512][ T44] pwc: recv_control_msg error -32 req 02 val 2500 [ 117.917905][ T44] pwc: recv_control_msg error -32 req 02 val 2400 [ 117.949563][ T44] pwc: recv_control_msg error -32 req 02 val 2600 [ 117.960307][ T44] pwc: recv_control_msg error -32 req 02 val 2900 [ 117.970453][ T44] pwc: recv_control_msg error -32 req 02 val 2800 [ 117.972254][ T44] pwc: recv_control_msg error -32 req 04 val 1100 [ 118.012194][ T44] pwc: Registered as video103. [ 118.024346][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 118.229131][ T44] usb 4-1: USB disconnect, device number 4 [ 118.392230][ T6217] syz.0.130 uses obsolete (PF_INET,SOCK_PACKET) [ 118.815078][ T5784] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.974996][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 118.975704][ T5784] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 118.977783][ T5784] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 118.977810][ T5784] usb 1-1: config 0 has no interface number 0 [ 118.977854][ T5784] usb 1-1: config 0 interface 184 has no altsetting 0 [ 118.981761][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.981856][ T5784] usb 1-1: Product: syz [ 118.981871][ T5784] usb 1-1: Manufacturer: syz [ 118.981885][ T5784] usb 1-1: SerialNumber: syz [ 119.041322][ T5784] usb 1-1: config 0 descriptor?? [ 119.216204][ T280] IPVS: starting estimator thread 0... [ 119.229783][ T6247] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 119.303573][ T6248] IPVS: using max 26 ests per chain, 62400 per kthread [ 119.684934][ T5784] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 119.684994][ T5784] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 120.499626][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.500356][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.500874][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.501323][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.501789][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.502249][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.505242][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.516298][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.528930][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 120.539260][ T6268] kvm_intel: kvm [6267]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x320f0000048081c7 [ 121.286214][ T6292] netlink: 'syz.3.158': attribute type 2 has an invalid length. [ 121.304336][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.309407][ T31] kauditd_printk_skb: 931 callbacks suppressed [ 121.309426][ T31] audit: type=1804 audit(1788986098.816:943): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.159" name="/newroot/51/cgroup.controllers" dev="tmpfs" ino=301 res=1 errno=0 [ 121.309648][ T31] audit: type=1800 audit(1788986098.816:944): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.159" name="cgroup.controllers" dev="tmpfs" ino=301 res=0 errno=0 [ 121.479517][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 121.508683][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.508719][ T9] usb 3-1: Product: syz [ 121.508738][ T9] usb 3-1: Manufacturer: syz [ 121.508756][ T9] usb 3-1: SerialNumber: syz [ 121.666522][ T6300] null_blk: disk nullb1 created [ 121.989133][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 121.989240][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 122.039886][ T6308] LUN: removable file: (no medium) [ 122.445696][ T6321] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 122.445722][ T6321] netlink: 248 bytes leftover after parsing attributes in process `syz.1.170'. [ 122.561683][ T5784] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000034: -71 [ 122.561717][ T5784] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write BURST_CAP: -71 [ 122.561737][ T5784] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 122.562043][ T5784] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 122.638249][ T5784] usb 1-1: USB disconnect, device number 5 [ 122.718199][ T6324] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 122.718243][ T6324] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 122.718978][ T6324] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 122.722809][ T6324] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.827568][ T6324] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.023773][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.174898][ T44] usb 2-1: New USB device found, idVendor=0000, idProduct=024e, bcdDevice= 0.00 [ 123.176246][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.176272][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.176309][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.227253][ T44] usb 2-1: config 0 descriptor?? [ 123.230158][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 124.444109][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 124.445377][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 124.445433][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 124.449604][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 124.481065][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 124.516647][ T9] usb 3-1: USB disconnect, device number 3 [ 125.407492][ T5766] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.553707][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 125.554710][ T5766] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 125.556323][ T5766] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 125.559039][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.559063][ T5766] usb 3-1: Product: syz [ 125.559078][ T5766] usb 3-1: Manufacturer: syz [ 125.559092][ T5766] usb 3-1: SerialNumber: syz [ 125.562516][ T5766] usb 3-1: config 0 descriptor?? [ 125.623385][ T5766] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 125.684644][ T6387] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.691982][ T6387] ======================================================= [ 125.691982][ T6387] WARNING: The mand mount option has been deprecated and [ 125.691982][ T6387] and is ignored by this kernel. Remove the mand [ 125.691982][ T6387] option from the mount to silence this warning. [ 125.691982][ T6387] ======================================================= [ 125.761071][ T6387] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.761129][ T6387] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.791063][ T5637] Bluetooth: hci0: Malformed Event: 0x13 [ 125.791704][ T6387] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.811492][ T6387] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 125.811533][ T6387] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 125.811578][ T6387] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 125.910687][ T6387] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 125.925958][ T5711] usb 2-1: USB disconnect, device number 3 [ 126.029844][ T6387] virt_wifi0 speed is unknown, defaulting to 1000 [ 126.032420][ T6387] virt_wifi0 speed is unknown, defaulting to 1000 [ 126.038172][ T6387] virt_wifi0 speed is unknown, defaulting to 1000 [ 126.042672][ T6387] virt_wifi0 speed is unknown, defaulting to 1000 [ 126.913601][ T5711] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.063568][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 127.064345][ T5711] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.065502][ T5711] usb 2-1: config 0 has no interfaces? [ 127.068675][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.068738][ T5711] usb 2-1: Product: syz [ 127.068756][ T5711] usb 2-1: Manufacturer: syz [ 127.068773][ T5711] usb 2-1: SerialNumber: syz [ 127.072764][ T5711] usb 2-1: config 0 descriptor?? [ 127.110456][ T62] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.284354][ T62] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 127.285741][ T62] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.287104][ T62] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.291264][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.291290][ T62] usb 1-1: Product: syz [ 127.291307][ T62] usb 1-1: Manufacturer: syz [ 127.291351][ T62] usb 1-1: SerialNumber: syz [ 127.376545][ T62] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 127.395452][ T62] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 127.414923][ T62] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 127.555385][ T9] usb 2-1: USB disconnect, device number 4 [ 128.194356][ T6424] tipc: Started in network mode [ 128.194382][ T6424] tipc: Node identity ac1414aa, cluster identity 4711 [ 128.195445][ T6424] tipc: New replicast peer: 172.20.20.187 [ 128.197368][ T6424] tipc: Enabled bearer , priority 10 [ 129.173766][ T5766] gspca_zc3xx: reg_w_i err -71 [ 129.204037][ T5766] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 129.208547][ T5766] usb 3-1: USB disconnect, device number 4 [ 129.268117][ T6451] ima: policy update failed [ 129.268531][ T31] audit: type=1802 audit(1788986106.776:945): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.213" res=0 errno=0 [ 130.695015][ T6405] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 130.695343][ T6405] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 130.695388][ T6405] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 130.782153][ T6405] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 130.807519][ T6405] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 130.808982][ T62] usb 1-1: USB disconnect, device number 6 [ 130.912590][ T62] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 130.938355][ T62] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 130.948826][ T62] ti_usb_3410_5052 1-1:2.0: device disconnected [ 131.013536][ T5711] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 131.174210][ T5711] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 131.183346][ T5711] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 131.183375][ T5711] usb 2-1: config 0 has no interface number 0 [ 131.183528][ T5711] usb 2-1: config 0 interface 41 has no altsetting 0 [ 131.217343][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.217420][ T5711] usb 2-1: Product: syz [ 131.217470][ T5711] usb 2-1: Manufacturer: syz [ 131.217513][ T5711] usb 2-1: SerialNumber: syz [ 131.252867][ T5711] usb 2-1: config 0 descriptor?? [ 132.112567][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 132.763659][ T5766] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.819599][ T1238] tipc: Node number set to 2886997162 [ 132.992419][ T5766] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.006223][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.006253][ T5766] usb 3-1: Product: syz [ 133.006269][ T5766] usb 3-1: Manufacturer: syz [ 133.006285][ T5766] usb 3-1: SerialNumber: syz [ 133.104260][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.104346][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.311239][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e526 [ 133.311381][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e550 [ 133.311529][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e5f4 [ 133.311668][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e544 [ 133.311767][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e532 [ 133.311898][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e532 [ 133.312050][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e532 [ 133.312205][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e532 [ 133.312354][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e532 [ 133.312472][ T6499] kvm [6498]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f60000e532 [ 133.425050][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 133.620084][ T5766] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 133.620197][ T5766] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 133.632422][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 134.063505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 134.153438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.113443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 135.133462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 135.443447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 135.743445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 135.793445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.233757][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 136.235851][ T5766] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 136.235913][ T5766] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 136.238589][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 136.239156][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 136.299999][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 136.320480][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 136.335334][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 136.336263][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 136.337227][ T5766] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 136.337625][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 136.338029][ T5711] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 136.338262][ T5711] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 136.409248][ T5766] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 136.427412][ T5711] usb 2-1: USB disconnect, device number 5 [ 136.474579][ T5766] usb 3-1: USB disconnect, device number 5 [ 140.910617][ T6592] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 142.036333][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 142.675945][ T5784] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.838646][ T5784] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 142.839203][ T5784] usb 3-1: config 0 has no interfaces? [ 142.839240][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.842587][ T5784] usb 3-1: config 0 descriptor?? [ 142.985798][ T6632] fuse: fd is not a fuse device [ 143.101734][ T5784] usb 3-1: USB disconnect, device number 6 [ 143.216215][ T6641] loop0: detected capacity change from 0 to 204800 [ 143.247078][ T6641] loop1: detected capacity change from 0 to 204800 [ 143.764127][ T5711] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.825824][ T6655] FAULT_INJECTION: forcing a failure. [ 143.825824][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 143.825892][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.2.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.825914][ T6655] Tainted: [L]=SOFTLOCKUP [ 143.825920][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.825930][ T6655] Call Trace: [ 143.825937][ T6655] [ 143.825944][ T6655] dump_stack_lvl+0xe8/0x150 [ 143.825971][ T6655] should_fail_ex+0x3eb/0x540 [ 143.825993][ T6655] should_failslab+0xa8/0x100 [ 143.826013][ T6655] __kmalloc_noprof+0xf9/0x710 [ 143.826037][ T6655] ? io_cache_alloc_new+0x40/0x100 [ 143.826061][ T6655] ? io_cache_alloc_new+0x40/0x100 [ 143.826090][ T6655] io_cache_alloc_new+0x40/0x100 [ 143.826115][ T6655] io_uring_alloc_async_data+0x1b6/0x2e0 [ 143.826135][ T6655] io_recvmsg_prep+0x86a/0x12e0 [ 143.826168][ T6655] ? __pfx_io_recvmsg_prep+0x10/0x10 [ 143.826192][ T6655] ? __pfx___mutex_trylock_common+0x10/0x10 [ 143.826212][ T6655] ? rcu_is_watching+0x16/0xb0 [ 143.826229][ T6655] ? trace_contention_end+0x3d/0x140 [ 143.826252][ T6655] io_submit_sqes+0xbde/0x2310 [ 143.826290][ T6655] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 143.826315][ T6655] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 143.826331][ T6655] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 143.826347][ T6655] ? __fget_files+0x2a/0x420 [ 143.826373][ T6655] ? rcu_is_watching+0x16/0xb0 [ 143.826393][ T6655] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 143.826411][ T6655] do_syscall_64+0x166/0x520 [ 143.826425][ T6655] ? trace_irq_disable+0x3b/0x140 [ 143.826448][ T6655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.826464][ T6655] ? clear_bhb_loop+0x70/0xc0 [ 143.826483][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.826499][ T6655] RIP: 0033:0x7fc5d179e159 [ 143.826518][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.826531][ T6655] RSP: 002b:00007fc5d2637f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 143.826552][ T6655] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc5d179e159 [ 143.826563][ T6655] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000d [ 143.826572][ T6655] RBP: 00000000000001db R08: 0000000000000000 R09: 0000000000000008 [ 143.826581][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 143.826591][ T6655] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 143.826620][ T6655] [ 144.006465][ T5711] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.041969][ T5711] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.042092][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.128840][ T5711] usb 4-1: config 0 descriptor?? [ 144.140281][ T5711] pwc: Askey VC010 type 2 USB webcam detected. [ 144.550454][ T5711] pwc: recv_control_msg error -32 req 02 val 2b00 [ 144.567696][ T5711] pwc: recv_control_msg error -32 req 02 val 2700 [ 144.580702][ T5711] pwc: recv_control_msg error -32 req 02 val 2c00 [ 144.581987][ T5711] pwc: recv_control_msg error -32 req 04 val 1000 [ 144.606104][ T5711] pwc: recv_control_msg error -32 req 04 val 1300 [ 144.608282][ T5711] pwc: recv_control_msg error -32 req 04 val 1400 [ 144.611512][ T5711] pwc: recv_control_msg error -32 req 02 val 2000 [ 144.612276][ T5711] pwc: recv_control_msg error -32 req 02 val 2100 [ 144.612882][ T5711] pwc: recv_control_msg error -32 req 04 val 1500 [ 144.646503][ T5711] pwc: recv_control_msg error -32 req 02 val 2500 [ 144.647185][ T5711] pwc: recv_control_msg error -32 req 02 val 2400 [ 144.647835][ T5711] pwc: recv_control_msg error -32 req 02 val 2600 [ 144.866213][ T5711] pwc: recv_control_msg error -71 req 02 val 2800 [ 144.869706][ T5711] pwc: recv_control_msg error -71 req 04 val 1100 [ 144.870207][ T5711] pwc: recv_control_msg error -71 req 04 val 1200 [ 144.905403][ T5711] pwc: Registered as video103. [ 144.952446][ T5711] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 144.988393][ T5711] usb 4-1: USB disconnect, device number 5 [ 145.427872][ T6668] autofs4:pid:6668:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375) [ 145.427906][ T6668] autofs4:pid:6668:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 145.462084][ T6668] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 145.462109][ T6668] netlink: 244 bytes leftover after parsing attributes in process `syz.2.290'. [ 146.456710][ T6687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.456917][ T6687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.457089][ T6687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.457259][ T6687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.865654][ T6710] dvmrp0: entered allmulticast mode [ 147.379282][ T6730] netlink: 'syz.2.306': attribute type 16 has an invalid length. [ 147.397174][ T6732] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 147.398276][ T6732] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 147.399128][ T6732] udc dummy_udc.0: failed to start g1: -22 [ 147.399155][ T6732] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 147.438934][ T6732] UDC core: g1: couldn't find an available UDC or it's busy [ 148.523526][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.523569][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.523598][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.523624][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.964323][ T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 152.113668][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 152.114585][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.116144][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 152.116178][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.120765][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.120894][ T44] usb 3-1: Product: syz [ 152.120928][ T44] usb 3-1: Manufacturer: syz [ 152.120945][ T44] usb 3-1: SerialNumber: syz [ 152.194082][ T44] usb 3-1: config 0 descriptor?? [ 152.210901][ T44] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 152.210942][ T44] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 152.248928][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 152.810730][ T44] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 152.812749][ T44] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 153.436818][ T44] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 153.443601][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 153.458425][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 154.065949][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 154.067863][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 154.101464][ T44] usb 3-1: USB disconnect, device number 7 [ 154.795263][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 155.267271][ T6875] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.629995][ T6882] ªªªªªª: renamed from vlan0 (while UP) [ 155.736180][ T6885] bridge0: port 3(netdevsim0) entered blocking state [ 155.736352][ T6885] bridge0: port 3(netdevsim0) entered disabled state [ 155.736660][ T6885] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 155.765767][ T6885] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 155.769839][ T6885] bridge0: port 3(netdevsim0) entered blocking state [ 155.769971][ T6885] bridge0: port 3(netdevsim0) entered forwarding state [ 155.805923][ T6885] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 155.811005][ T6885] bridge0: port 3(netdevsim0) entered disabled state [ 155.811335][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.812712][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.850033][ T6885] bridge0: port 3(netdevsim0) entered blocking state [ 155.850171][ T6885] bridge0: port 3(netdevsim0) entered forwarding state [ 155.852070][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.852186][ T6885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.852437][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.852671][ T6885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.905232][ T6885] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 156.210326][ T31] audit: type=1804 audit(1788986133.716:946): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.354" name="bus" dev="ramfs" ino=17564 res=1 errno=0 [ 156.257964][ T31] audit: type=1804 audit(1788986133.766:947): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.354" name="bus" dev="ramfs" ino=17564 res=1 errno=0 [ 157.373658][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.105974][ T9] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 158.107025][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.112753][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.112780][ T9] usb 3-1: Product: syz [ 158.112796][ T9] usb 3-1: Manufacturer: syz [ 158.112811][ T9] usb 3-1: SerialNumber: syz [ 158.193843][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 158.927420][ T52] Bluetooth: hci2: unexpected event for opcode 0x203d [ 159.503586][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.534900][ T9] gspca_mr97310a: reg read [21] error -71 [ 159.534988][ T9] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 159.566177][ T9] usb 3-1: USB disconnect, device number 8 [ 159.589485][ T5639] udevd[5639]: setting owner of /dev/bus/usb/003/008 to uid=0, gid=0 failed: No such file or directory [ 159.684342][ T10] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 159.685616][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.685649][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.685690][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.688964][ T10] usb 2-1: config 0 descriptor?? [ 160.325286][ T10] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 160.385096][ T10] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized [ 160.403719][ T1238] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.544544][ T10] usb 2-1: USB disconnect, device number 6 [ 160.565367][ T1238] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 160.571645][ T1238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.571675][ T1238] usb 3-1: Product: syz [ 160.571693][ T1238] usb 3-1: Manufacturer: syz [ 160.571710][ T1238] usb 3-1: SerialNumber: syz [ 161.038955][ T1238] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 161.039022][ T1238] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 161.229562][ T6691] IPVS: starting estimator thread 0... [ 161.316360][ T6957] IPVS: using max 25 ests per chain, 60000 per kthread [ 161.478372][ T6965] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 161.782974][ T6971] netlink: 'syz.1.373': attribute type 2 has an invalid length. [ 163.006259][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 163.006532][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 163.008220][ T5637] Bluetooth: hci2: hardware error 0x00 [ 163.300733][ T1238] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 163.302736][ T1238] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 163.314063][ T1238] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 163.314209][ T1238] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 163.314266][ T1238] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.415707][ T1238] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.654660][ T1238] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 163.768719][ T1238] usb 3-1: USB disconnect, device number 9 [ 164.997564][ T31] audit: type=1326 audit(1788986142.506:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.2.383" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5d179e159 code=0x0 [ 165.084042][ T5637] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 165.544903][ T7046] device-mapper: table: 248:0: zero-length target [ 165.544927][ T7046] device-mapper: ioctl: error adding target to table [ 165.654752][ T7054] device-mapper: table: 248:1: zero-length target [ 165.654771][ T7054] device-mapper: ioctl: error adding target to table [ 165.851245][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 165.898202][ T7060] mmap: syz.0.391 (7060) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.123812][ T7065] warning: `syz.1.394' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 166.353528][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 166.514205][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 166.517929][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.517958][ T10] usb 4-1: Product: syz [ 166.517974][ T10] usb 4-1: Manufacturer: syz [ 166.517990][ T10] usb 4-1: SerialNumber: syz [ 166.564954][ T10] usb 4-1: config 0 descriptor?? [ 166.580291][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 167.831309][ T7086] virt_wifi0 speed is unknown, defaulting to 1000 [ 168.524115][ T7090] virt_wifi0 speed is unknown, defaulting to 1000 [ 168.726243][ T7097] virt_wifi0 speed is unknown, defaulting to 1000 [ 169.462687][ T10] gspca_stk1135: reg_w 0x351 err -71 [ 169.471594][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 169.471611][ T10] gspca_stk1135: Sensor write failed [ 169.471647][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 169.471659][ T10] gspca_stk1135: Sensor write failed [ 169.471695][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 169.471706][ T10] gspca_stk1135: Sensor read failed [ 169.471742][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 169.471752][ T10] gspca_stk1135: Sensor read failed [ 169.471761][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 169.486487][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 169.486507][ T10] gspca_stk1135: Sensor read failed [ 169.486542][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 169.486553][ T10] gspca_stk1135: Sensor read failed [ 169.486588][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 169.486597][ T10] gspca_stk1135: Sensor write failed [ 169.486633][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 169.486643][ T10] gspca_stk1135: Sensor write failed [ 169.486723][ T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 169.592346][ T10] usb 4-1: USB disconnect, device number 6 [ 170.043543][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.193091][ T7114] futex_wake_op: syz.3.406 tries to shift op by 144; fix this program [ 170.202756][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.214790][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.214848][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.214873][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 170.214923][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.275448][ T10] usb 2-1: config 0 descriptor?? [ 170.720559][ T7122] fuse: fd is not a fuse device [ 170.771133][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 171.573756][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 171.606313][ T7152] fuse: fd is not a fuse device [ 171.749002][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 171.763514][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.763544][ T10] usb 3-1: Product: syz [ 171.763562][ T10] usb 3-1: Manufacturer: syz [ 171.763578][ T10] usb 3-1: SerialNumber: syz [ 172.225093][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 172.225161][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 172.636078][ T7164] netlink: 14 bytes leftover after parsing attributes in process `syz.1.424'. [ 172.802437][ T44] usb 2-1: USB disconnect, device number 7 [ 173.443881][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 174.259444][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 174.260781][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 174.260847][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.276496][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.335227][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 174.387705][ T10] usb 3-1: USB disconnect, device number 10 [ 174.651936][ T7195] X.509: Couldn't decode AuthKeyIdentifier [ 175.129646][ T7199] netlink: 'syz.2.436': attribute type 25 has an invalid length. [ 176.510540][ T7211] netlink: 'syz.1.439': attribute type 3 has an invalid length. [ 176.510569][ T7211] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.439'. [ 178.254054][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 178.974302][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.054836][ T5711] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.144437][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 179.148656][ T10] usb 4-1: New USB device found, idVendor=07ca, idProduct=a805, bcdDevice=2d.9e [ 179.159698][ T10] usb 4-1: config 16 interface 0 has no altsetting 0 [ 179.182904][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.182934][ T10] usb 4-1: Product: syz [ 179.182950][ T10] usb 4-1: Manufacturer: syz [ 179.182966][ T10] usb 4-1: SerialNumber: syz [ 179.207829][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 179.208631][ T5711] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 179.209987][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 179.213204][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.213229][ T5711] usb 2-1: Product: syz [ 179.213245][ T5711] usb 2-1: Manufacturer: syz [ 179.213261][ T5711] usb 2-1: SerialNumber: syz [ 179.269493][ T5711] usb 2-1: config 0 descriptor?? [ 179.285233][ T5711] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 179.285292][ T5711] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 179.563482][ T10] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 179.572567][ T10] dvb_usb_af9015 4-1:16.0: probe with driver dvb_usb_af9015 failed with error -22 [ 179.600533][ T10] usb 4-1: USB disconnect, device number 7 [ 179.892365][ T5711] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 180.326993][ T5711] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 180.327059][ T5711] em28xx 2-1:0.0: board has no eeprom [ 180.705210][ T5711] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 180.705282][ T5711] em28xx 2-1:0.0: dvb set to bulk mode. [ 180.707247][ T5766] em28xx 2-1:0.0: Binding DVB extension [ 180.779600][ T7289] siw: device registration error -23 [ 180.879145][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 181.974268][ T7257] em28xx 2-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 181.977954][ T9] usb 2-1: USB disconnect, device number 8 [ 181.989838][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 182.211245][ T5766] em28xx 2-1:0.0: Registering input extension [ 182.211657][ T9] em28xx 2-1:0.0: Closing input extension [ 182.489869][ T9] em28xx: Freeing device [ 182.817660][ T5766] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.840533][ T31] audit: type=1326 audit(1788986160.346:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.475" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb95f9e159 code=0x0 [ 182.965048][ T5766] usb 4-1: Using ep0 maxpacket: 32 [ 182.966076][ T5766] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 182.979311][ T5766] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 182.979396][ T5766] usb 4-1: config 0 has no interface number 0 [ 183.115486][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.115519][ T5766] usb 4-1: Product: syz [ 183.115537][ T5766] usb 4-1: Manufacturer: syz [ 183.115554][ T5766] usb 4-1: SerialNumber: syz [ 183.156447][ T5766] usb 4-1: config 0 descriptor?? [ 183.662653][ T5766] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 183.662686][ T5766] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 184.413692][ T5711] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.564530][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 184.565332][ T5711] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 184.567043][ T5711] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 184.567061][ T5711] usb 3-1: config 0 has no interface number 0 [ 184.567089][ T5711] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 184.567127][ T5711] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 184.570545][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.570563][ T5711] usb 3-1: Product: syz [ 184.570574][ T5711] usb 3-1: Manufacturer: syz [ 184.570584][ T5711] usb 3-1: SerialNumber: syz [ 184.590906][ T5711] usb 3-1: config 0 descriptor?? [ 184.609017][ T7349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.611086][ T7349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.822126][ T7349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.822231][ T7349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.028625][ T5711] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 185.688319][ T5766] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 185.688694][ T5766] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 185.693090][ T5766] usb 4-1: USB disconnect, device number 8 [ 186.462321][ T7388] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 186.462544][ T7388] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 187.265056][ T5711] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 187.265297][ T5711] asix 3-1:0.34: probe with driver asix failed with error -71 [ 187.297687][ T5711] usb 3-1: USB disconnect, device number 11 [ 187.446359][ T7403] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 187.446393][ T7403] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 187.446555][ T7403] udc dummy_udc.0: failed to start g1: -22 [ 187.446577][ T7403] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 187.451650][ T7403] UDC core: g1: couldn't find an available UDC or it's busy [ 189.903195][ T31] audit: type=1326 audit(1788986167.406:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="syz.2.514" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5d179e159 code=0x0 [ 190.373529][ T5711] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.524340][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 190.525193][ T5711] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 190.526539][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.533240][ T5711] usb 4-1: config 0 descriptor?? [ 190.579578][ T5711] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 190.983504][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.133612][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 191.134765][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 191.136228][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 191.136255][ T10] usb 2-1: config 0 has no interface number 0 [ 191.138958][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.138984][ T10] usb 2-1: Product: syz [ 191.139000][ T10] usb 2-1: Manufacturer: syz [ 191.139016][ T10] usb 2-1: SerialNumber: syz [ 191.142306][ T10] usb 2-1: config 0 descriptor?? [ 191.568435][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 191.568471][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 192.656172][ T7496] siw: device registration error -23 [ 192.747757][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 192.783268][ T7500] x_tables: duplicate entry at hook 1 [ 192.852715][ T7502] netlink: 'syz.0.529': attribute type 4 has an invalid length. [ 193.211852][ T5711] gspca_sonixj: reg_w1 err -71 [ 193.211960][ T5711] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 193.221355][ T5711] usb 4-1: USB disconnect, device number 9 [ 193.598803][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 193.599078][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 193.633243][ T10] usb 2-1: USB disconnect, device number 9 [ 193.848649][ T31] audit: type=1326 audit(1788986171.356:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.531" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdff079e159 code=0x0 [ 194.266943][ T31] audit: type=1800 audit(1788986171.776:952): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.532" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 194.527045][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.527107][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.562598][ T7527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.535'. [ 194.562627][ T7527] netlink: 43 bytes leftover after parsing attributes in process `syz.0.535'. [ 194.562644][ T7527] netlink: 'syz.0.535': attribute type 5 has an invalid length. [ 194.562657][ T7527] netlink: 43 bytes leftover after parsing attributes in process `syz.0.535'. [ 195.233890][ T7539] serio: Serial port ptm0 [ 197.878623][ T31] audit: type=1326 audit(1788986175.386:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d179e159 code=0x7ffc0000 [ 197.878681][ T31] audit: type=1326 audit(1788986175.386:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d179e159 code=0x7ffc0000 [ 197.880294][ T31] audit: type=1326 audit(1788986175.386:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5d1797ed7 code=0x7ffc0000 [ 197.880346][ T31] audit: type=1326 audit(1788986175.386:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5d173f4d9 code=0x7ffc0000 [ 197.880398][ T31] audit: type=1326 audit(1788986175.386:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5d1797ed7 code=0x7ffc0000 [ 197.880444][ T31] audit: type=1326 audit(1788986175.386:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5d173f4d9 code=0x7ffc0000 [ 197.880492][ T31] audit: type=1326 audit(1788986175.386:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5d1797ed7 code=0x7ffc0000 [ 197.880536][ T31] audit: type=1326 audit(1788986175.386:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5d173f4d9 code=0x7ffc0000 [ 197.882141][ T31] audit: type=1326 audit(1788986175.386:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5d1797ed7 code=0x7ffc0000 [ 197.882192][ T31] audit: type=1326 audit(1788986175.386:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.549" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5d173f4d9 code=0x7ffc0000 [ 201.850060][ T7674] FAULT_INJECTION: forcing a failure. [ 201.850060][ T7674] name failslab, interval 1, probability 0, space 0, times 0 [ 201.850098][ T7674] CPU: 0 UID: 0 PID: 7674 Comm: syz.2.582 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.850132][ T7674] Tainted: [L]=SOFTLOCKUP [ 201.850141][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.850154][ T7674] Call Trace: [ 201.850172][ T7674] [ 201.850182][ T7674] dump_stack_lvl+0xe8/0x150 [ 201.850220][ T7674] should_fail_ex+0x3eb/0x540 [ 201.850253][ T7674] should_failslab+0xa8/0x100 [ 201.850282][ T7674] __kmalloc_cache_noprof+0x9e/0x600 [ 201.850318][ T7674] ? __kmalloc_cache_noprof+0x148/0x600 [ 201.850351][ T7674] ? alloc_netdev_mqs+0xca0/0x12a0 [ 201.850379][ T7674] ? alloc_netdev_mqs+0xca0/0x12a0 [ 201.850416][ T7674] alloc_netdev_mqs+0xca0/0x12a0 [ 201.850454][ T7674] ipip6_tunnel_locate+0x4d0/0x7a0 [ 201.850486][ T7674] ? __pfx_ipip6_tunnel_locate+0x10/0x10 [ 201.850519][ T7674] ipip6_tunnel_ctl+0x6af/0x9e0 [ 201.850560][ T7674] ip_tunnel_siocdevprivate+0x125/0x1d0 [ 201.850595][ T7674] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 201.850646][ T7674] ipip6_tunnel_siocdevprivate+0x27d/0x1690 [ 201.850688][ T7674] ? __pfx___mutex_trylock_common+0x10/0x10 [ 201.850715][ T7674] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 201.850753][ T7674] ? rcu_is_watching+0x16/0xb0 [ 201.850776][ T7674] ? trace_contention_end+0x3d/0x140 [ 201.850803][ T7674] ? __mutex_lock+0x305/0x15a0 [ 201.850829][ T7674] ? do_vfs_ioctl+0x116f/0x1530 [ 201.850856][ T7674] ? dev_ioctl+0x83c/0x1150 [ 201.850880][ T7674] ? __pfx___mutex_lock+0x10/0x10 [ 201.850900][ T7674] ? full_name_hash+0x92/0xe0 [ 201.850938][ T7674] dev_ifsioc+0xb56/0x1360 [ 201.850968][ T7674] dev_ioctl+0x84c/0x1150 [ 201.850995][ T7674] sock_ioctl+0x753/0x7e0 [ 201.851028][ T7674] ? __pfx_sock_ioctl+0x10/0x10 [ 201.851059][ T7674] ? __fget_files+0x3a2/0x420 [ 201.851087][ T7674] ? __fget_files+0x2a/0x420 [ 201.851120][ T7674] ? bpf_lsm_file_ioctl+0x9/0x20 [ 201.851149][ T7674] ? __pfx_sock_ioctl+0x10/0x10 [ 201.851188][ T7674] __se_sys_ioctl+0xfc/0x170 [ 201.851228][ T7674] do_syscall_64+0x166/0x520 [ 201.851249][ T7674] ? trace_irq_disable+0x3b/0x140 [ 201.851281][ T7674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.851306][ T7674] ? clear_bhb_loop+0x70/0xc0 [ 201.851335][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.851358][ T7674] RIP: 0033:0x7fc5d179e159 [ 201.851380][ T7674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.851398][ T7674] RSP: 002b:00007fc5d2638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.851422][ T7674] RAX: ffffffffffffffda RBX: 00007fc5d1a25fa0 RCX: 00007fc5d179e159 [ 201.851439][ T7674] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000008 [ 201.851453][ T7674] RBP: 00007fc5d183503b R08: 0000000000000000 R09: 0000000000000000 [ 201.851467][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.851480][ T7674] R13: 00007fc5d1a26038 R14: 00007fc5d1a25fa0 R15: 00007ffe0f483458 [ 201.851515][ T7674] [ 202.513600][ T44] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 202.643756][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 202.664317][ T44] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 202.665392][ T44] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 202.665423][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 202.665443][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 202.665472][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.667730][ T44] usb 4-1: config 0 descriptor?? [ 202.668427][ T7680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.794310][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.798624][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.798653][ T10] usb 3-1: Product: syz [ 202.798668][ T10] usb 3-1: Manufacturer: syz [ 202.798683][ T10] usb 3-1: SerialNumber: syz [ 202.802036][ T10] usb 3-1: config 0 descriptor?? [ 203.045678][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 203.175461][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 203.175573][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 203.211302][ T44] usb 4-1: USB disconnect, device number 10 [ 204.685485][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 204.716022][ T10] usb 3-1: USB disconnect, device number 12 [ 204.783284][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 204.783325][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 204.848063][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 204.848085][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 204.971553][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 204.971575][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 206.655023][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.148080][ T6899] IPVS: starting estimator thread 0... [ 207.237571][ T7828] IPVS: using max 35 ests per chain, 84000 per kthread [ 207.486858][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 207.667546][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.668778][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.668826][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.676353][ T10] usb 4-1: config 0 descriptor?? [ 207.883655][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 207.883765][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 207.909430][ T10] usb 4-1: USB disconnect, device number 11 [ 208.333758][ T5766] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 208.484557][ T5766] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 208.485766][ T5766] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.485820][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.488327][ T5766] usb 4-1: config 0 descriptor?? [ 208.513826][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 208.664918][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 208.666586][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 208.666634][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 208.666661][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 208.666703][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.670124][ T10] usb 2-1: config 0 descriptor?? [ 208.671042][ T7855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 208.951112][ T5766] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 208.965487][ T5766] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input9 [ 209.085774][ T5766] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 209.240143][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 209.240257][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 209.279585][ T10] usb 2-1: USB disconnect, device number 10 [ 209.372416][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.077056][ T5729] usb 4-1: USB disconnect, device number 12 [ 211.134221][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 211.284591][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 211.287756][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.287784][ T10] usb 3-1: Product: syz [ 211.287799][ T10] usb 3-1: Manufacturer: syz [ 211.287815][ T10] usb 3-1: SerialNumber: syz [ 211.697963][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 211.698026][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 212.927901][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 212.929247][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 213.340991][ T7951] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 213.512950][ T7951] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 213.512979][ T7951] md: pers->run() failed ... [ 213.737091][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 213.737156][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 213.741075][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 213.777176][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 213.804568][ T10] usb 3-1: USB disconnect, device number 13 [ 214.437994][ T7974] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 214.438015][ T7974] overlayfs: failed to set xattr on upper [ 214.438021][ T7974] overlayfs: ...falling back to redirect_dir=nofollow. [ 214.438027][ T7974] overlayfs: ...falling back to uuid=null. [ 219.072240][ T8088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.723'. [ 219.168852][ T31] kauditd_printk_skb: 2013 callbacks suppressed [ 219.168883][ T31] audit: type=1800 audit(1788986196.676:2976): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.723" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 220.443185][ T5637] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 220.467872][ T8119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.483113][ T8119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.483236][ T8119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.514432][ T8119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.143904][ T5637] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 222.445013][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.524915][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.146371][ T8209] virt_wifi0: entered promiscuous mode [ 223.147228][ T8209] FAULT_INJECTION: forcing a failure. [ 223.147228][ T8209] name failslab, interval 1, probability 0, space 0, times 0 [ 223.147263][ T8209] CPU: 0 UID: 0 PID: 8209 Comm: syz.1.755 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.147296][ T8209] Tainted: [L]=SOFTLOCKUP [ 223.147305][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.147319][ T8209] Call Trace: [ 223.147328][ T8209] [ 223.147338][ T8209] dump_stack_lvl+0xe8/0x150 [ 223.147374][ T8209] should_fail_ex+0x3eb/0x540 [ 223.147406][ T8209] should_failslab+0xa8/0x100 [ 223.147434][ T8209] __kmalloc_cache_noprof+0x9e/0x600 [ 223.147466][ T8209] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.147496][ T8209] ? netdevice_event+0x3aa/0x8a0 [ 223.147524][ T8209] ? netdevice_event+0x3aa/0x8a0 [ 223.147559][ T8209] netdevice_event+0x3aa/0x8a0 [ 223.147592][ T8209] ? rcu_is_watching+0x16/0xb0 [ 223.147616][ T8209] ? __up_read+0x29c/0x930 [ 223.147640][ T8209] ? __pfx_netdevice_event+0x10/0x10 [ 223.147666][ T8209] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 223.147694][ T8209] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 223.147724][ T8209] ? __pfx_add_default_gids+0x10/0x10 [ 223.147750][ T8209] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 223.147778][ T8209] ? __pfx_add_netdev_ips+0x10/0x10 [ 223.147806][ T8209] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 223.147849][ T8209] notifier_call_chain+0x1a5/0x3d0 [ 223.147891][ T8209] __dev_notify_flags+0x31e/0x510 [ 223.147923][ T8209] ? __pfx___dev_notify_flags+0x10/0x10 [ 223.147945][ T8209] ? __dev_change_flags+0x5f1/0x820 [ 223.147975][ T8209] ? __pfx___dev_change_flags+0x10/0x10 [ 223.148020][ T8209] netif_change_flags+0xde/0x1b0 [ 223.148049][ T8209] dev_change_flags+0x128/0x260 [ 223.148077][ T8209] dev_ioctl+0x7b4/0x1150 [ 223.148104][ T8209] sock_do_ioctl+0x23e/0x320 [ 223.148138][ T8209] ? __pfx_sock_do_ioctl+0x10/0x10 [ 223.148166][ T8209] ? hook_file_ioctl+0x1f2/0x600 [ 223.148207][ T8209] sock_ioctl+0x57a/0x7e0 [ 223.148236][ T8209] ? __pfx_sock_ioctl+0x10/0x10 [ 223.148266][ T8209] ? __fget_files+0x2a/0x420 [ 223.148293][ T8209] ? __fget_files+0x3a2/0x420 [ 223.148319][ T8209] ? __fget_files+0x2a/0x420 [ 223.148348][ T8209] ? bpf_lsm_file_ioctl+0x9/0x20 [ 223.148375][ T8209] ? __pfx_sock_ioctl+0x10/0x10 [ 223.148401][ T8209] __se_sys_ioctl+0xfc/0x170 [ 223.148439][ T8209] do_syscall_64+0x166/0x520 [ 223.148461][ T8209] ? trace_irq_disable+0x3b/0x140 [ 223.148492][ T8209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.148516][ T8209] ? clear_bhb_loop+0x70/0xc0 [ 223.148545][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.148568][ T8209] RIP: 0033:0x7f101e19e159 [ 223.148589][ T8209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.148606][ T8209] RSP: 002b:00007f101effd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.148627][ T8209] RAX: ffffffffffffffda RBX: 00007f101e425fa0 RCX: 00007f101e19e159 [ 223.148641][ T8209] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000009 [ 223.148653][ T8209] RBP: 00007f101e23503b R08: 0000000000000000 R09: 0000000000000000 [ 223.148664][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.148675][ T8209] R13: 00007f101e426038 R14: 00007f101e425fa0 R15: 00007ffc482e6b38 [ 223.148704][ T8209] [ 223.816270][ T8207] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 223.816302][ T8207] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 223.864215][ T8207] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 223.864249][ T8207] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 223.864617][ T8207] ================================================================== [ 223.864631][ T8207] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0xd8/0xad0 [ 223.864672][ T8207] Write of size 8 at addr ffff88802860c0c0 by task syz.3.754/8207 [ 223.864689][ T8207] [ 223.864703][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.3.754 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.864734][ T8207] Tainted: [L]=SOFTLOCKUP [ 223.864742][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.864754][ T8207] Call Trace: [ 223.864762][ T8207] [ 223.864772][ T8207] dump_stack_lvl+0xe8/0x150 [ 223.864802][ T8207] print_address_description+0x55/0x1e0 [ 223.864835][ T8207] ? gadgetfs_bind+0xd8/0xad0 [ 223.864866][ T8207] print_report+0x58/0x70 [ 223.864894][ T8207] kasan_report+0x117/0x150 [ 223.864920][ T8207] ? gadgetfs_bind+0xd8/0xad0 [ 223.864957][ T8207] gadgetfs_bind+0xd8/0xad0 [ 223.864992][ T8207] ? kernfs_put+0x7b9/0x820 [ 223.865027][ T8207] ? __pfx_gadgetfs_bind+0x10/0x10 [ 223.865068][ T8207] gadget_bind_driver+0x2ca/0x9e0 [ 223.865105][ T8207] ? __pfx_gadget_bind_driver+0x10/0x10 [ 223.865134][ T8207] really_probe+0x254/0xae0 [ 223.865168][ T8207] __driver_probe_device+0x1e8/0x360 [ 223.865198][ T8207] driver_probe_device+0x4f/0x240 [ 223.865229][ T8207] __driver_attach+0x339/0x600 [ 223.865258][ T8207] bus_for_each_dev+0x23b/0x2c0 [ 223.865279][ T8207] ? __pfx___driver_attach+0x10/0x10 [ 223.865307][ T8207] ? __pfx_bus_for_each_dev+0x10/0x10 [ 223.865329][ T8207] ? do_raw_spin_unlock+0xf5/0x200 [ 223.865358][ T8207] bus_add_driver+0x345/0x670 [ 223.865383][ T8207] driver_register+0x23a/0x320 [ 223.865417][ T8207] usb_gadget_register_driver_owner+0xf9/0x270 [ 223.865449][ T8207] dev_config+0xe3c/0x12a0 [ 223.865486][ T8207] ? __pfx_dev_config+0x10/0x10 [ 223.865522][ T8207] ? __pfx_dev_config+0x10/0x10 [ 223.865552][ T8207] vfs_write+0x296/0xba0 [ 223.865588][ T8207] ? __pfx_vfs_write+0x10/0x10 [ 223.865619][ T8207] ? __fget_files+0x2a/0x420 [ 223.865649][ T8207] ? __fget_files+0x3a2/0x420 [ 223.865676][ T8207] ? __fget_files+0x2a/0x420 [ 223.865708][ T8207] ksys_write+0x150/0x270 [ 223.865739][ T8207] ? __pfx_ksys_write+0x10/0x10 [ 223.865775][ T8207] do_syscall_64+0x166/0x520 [ 223.865796][ T8207] ? trace_irq_disable+0x3b/0x140 [ 223.865828][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.865851][ T8207] ? clear_bhb_loop+0x70/0xc0 [ 223.865877][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.865899][ T8207] RIP: 0033:0x7fdff079e159 [ 223.865920][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.865939][ T8207] RSP: 002b:00007fdff16cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.865964][ T8207] RAX: ffffffffffffffda RBX: 00007fdff0a25fa0 RCX: 00007fdff079e159 [ 223.865981][ T8207] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 223.865996][ T8207] RBP: 00007fdff083503b R08: 0000000000000000 R09: 0000000000000000 [ 223.866011][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.866025][ T8207] R13: 00007fdff0a26038 R14: 00007fdff0a25fa0 R15: 00007ffc2420b5e8 [ 223.866051][ T8207] [ 223.866070][ T8207] [ 223.866085][ T8207] Allocated by task 5626: [ 223.866097][ T8207] kasan_save_track+0x3e/0x80 [ 223.866131][ T8207] __kasan_kmalloc+0x93/0xb0 [ 223.866149][ T8207] __kmalloc_cache_noprof+0x31c/0x600 [ 223.866178][ T8207] gadgetfs_fill_super+0x27b/0x790 [ 223.866208][ T8207] get_tree_single+0xc0/0x150 [ 223.866235][ T8207] vfs_get_tree+0x92/0x2a0 [ 223.866263][ T8207] do_new_mount+0x319/0xdc0 [ 223.866287][ T8207] __se_sys_mount+0x31d/0x420 [ 223.866310][ T8207] do_syscall_64+0x166/0x520 [ 223.866328][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.866348][ T8207] [ 223.866353][ T8207] Freed by task 8207: [ 223.866363][ T8207] kasan_save_track+0x3e/0x80 [ 223.866393][ T8207] kasan_save_free_info+0x40/0x50 [ 223.866418][ T8207] __kasan_slab_free+0x5c/0x80 [ 223.866435][ T8207] kfree+0x1c5/0x650 [ 223.866460][ T8207] gadgetfs_bind+0x93c/0xad0 [ 223.866489][ T8207] gadget_bind_driver+0x2ca/0x9e0 [ 223.866516][ T8207] really_probe+0x254/0xae0 [ 223.866543][ T8207] __driver_probe_device+0x1e8/0x360 [ 223.866568][ T8207] driver_probe_device+0x4f/0x240 [ 223.866595][ T8207] __driver_attach+0x339/0x600 [ 223.866621][ T8207] bus_for_each_dev+0x23b/0x2c0 [ 223.866638][ T8207] bus_add_driver+0x345/0x670 [ 223.866656][ T8207] driver_register+0x23a/0x320 [ 223.866684][ T8207] usb_gadget_register_driver_owner+0xf9/0x270 [ 223.866711][ T8207] dev_config+0xe3c/0x12a0 [ 223.866740][ T8207] vfs_write+0x296/0xba0 [ 223.866766][ T8207] ksys_write+0x150/0x270 [ 223.866793][ T8207] do_syscall_64+0x166/0x520 [ 223.866810][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.866831][ T8207] [ 223.866836][ T8207] The buggy address belongs to the object at ffff88802860c000 [ 223.866836][ T8207] which belongs to the cache kmalloc-1k of size 1024 [ 223.866854][ T8207] The buggy address is located 192 bytes inside of [ 223.866854][ T8207] freed 1024-byte region [ffff88802860c000, ffff88802860c400) [ 223.866876][ T8207] [ 223.866882][ T8207] The buggy address belongs to the physical page: [ 223.866901][ T8207] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802860b800 pfn:0x28608 [ 223.866923][ T8207] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 223.866941][ T8207] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 223.866967][ T8207] page_type: f5(slab) [ 223.866988][ T8207] raw: 00fff00000000240 ffff88813ff1adc0 ffffea0000cee010 ffffea0001a36410 [ 223.867008][ T8207] raw: ffff88802860b800 000000000010000d 00000000f5000000 0000000000000000 [ 223.867029][ T8207] head: 00fff00000000240 ffff88813ff1adc0 ffffea0000cee010 ffffea0001a36410 [ 223.867049][ T8207] head: ffff88802860b800 000000000010000d 00000000f5000000 0000000000000000 [ 223.867077][ T8207] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 223.867097][ T8207] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 223.867109][ T8207] page dumped because: kasan: bad access detected [ 223.867124][ T8207] page_owner tracks the page as allocated [ 223.867132][ T8207] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5626, tgid 5626 (syz-executor), ts 98242020281 [ 223.867167][ T8207] post_alloc_hook+0x1f9/0x250 [ 223.867196][ T8207] get_page_from_freelist+0x2209/0x2280 [ 223.867229][ T8207] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 223.867261][ T8207] allocate_slab+0x7d/0x620 [ 223.867308][ T8207] refill_objects+0x2d5/0x350 [ 223.867332][ T8207] __pcs_replace_empty_main+0x2c8/0x6c0 [ 223.867355][ T8207] __kmalloc_noprof+0x476/0x710 [ 223.867383][ T8207] tomoyo_init_log+0x1a6b/0x1f60 [ 223.867407][ T8207] tomoyo_supervisor+0x35f/0x1550 [ 223.867433][ T8207] tomoyo_mount_permission+0x670/0x9e0 [ 223.867457][ T8207] security_sb_mount+0xe4/0x320 [ 223.867479][ T8207] path_mount+0xbc/0x1050 [ 223.867501][ T8207] __se_sys_mount+0x31d/0x420 [ 223.867525][ T8207] do_syscall_64+0x166/0x520 [ 223.867542][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.867562][ T8207] page last free pid 5628 tgid 5628 ts 98192386203 stack trace: [ 223.867577][ T8207] __free_frozen_pages+0xc93/0xd90 [ 223.867605][ T8207] __slab_free+0x274/0x2c0 [ 223.867634][ T8207] qlist_free_all+0x99/0x100 [ 223.867666][ T8207] kasan_quarantine_reduce+0x148/0x160 [ 223.867697][ T8207] __kasan_slab_alloc+0x22/0x80 [ 223.867716][ T8207] kmem_cache_alloc_lru_noprof+0x29e/0x5f0 [ 223.867744][ T8207] sock_alloc_inode+0x2c/0x1a0 [ 223.867772][ T8207] alloc_inode+0x6a/0x1b0 [ 223.867793][ T8207] __sock_create+0x127/0xac0 [ 223.867821][ T8207] __sys_socket+0xd6/0x1b0 [ 223.867848][ T8207] __x64_sys_socket+0x7a/0x90 [ 223.867876][ T8207] do_syscall_64+0x166/0x520 [ 223.867894][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.867915][ T8207] [ 223.867920][ T8207] Memory state around the buggy address: [ 223.867931][ T8207] ffff88802860bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.867946][ T8207] ffff88802860c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.867961][ T8207] >ffff88802860c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.867972][ T8207] ^ [ 223.867984][ T8207] ffff88802860c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.867998][ T8207] ffff88802860c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.868009][ T8207] ================================================================== [ 223.873201][ T8207] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.726411][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.3.754 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.737196][ T8207] Tainted: [L]=SOFTLOCKUP [ 224.741540][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.751622][ T8207] Call Trace: [ 224.754934][ T8207] [ 224.757887][ T8207] vpanic+0x56d/0xa70 [ 224.761907][ T8207] ? __pfx_vpanic+0x10/0x10 [ 224.766442][ T8207] panic+0xc5/0xd0 [ 224.770199][ T8207] ? __pfx_panic+0x10/0x10 [ 224.774733][ T8207] ? preempt_schedule_thunk+0x16/0x40 [ 224.780136][ T8207] ? gadgetfs_bind+0xd8/0xad0 [ 224.784848][ T8207] ? preempt_schedule_thunk+0x16/0x40 [ 224.790260][ T8207] ? gadgetfs_bind+0xd8/0xad0 [ 224.794992][ T8207] check_panic_on_warn+0x89/0xb0 [ 224.799977][ T8207] ? gadgetfs_bind+0xd8/0xad0 [ 224.804687][ T8207] end_report+0x73/0x170 [ 224.808957][ T8207] ? gadgetfs_bind+0xd8/0xad0 [ 224.813663][ T8207] kasan_report+0x128/0x150 [ 224.818186][ T8207] ? gadgetfs_bind+0xd8/0xad0 [ 224.822904][ T8207] gadgetfs_bind+0xd8/0xad0 [ 224.827442][ T8207] ? kernfs_put+0x7b9/0x820 [ 224.831976][ T8207] ? __pfx_gadgetfs_bind+0x10/0x10 [ 224.837116][ T8207] gadget_bind_driver+0x2ca/0x9e0 [ 224.842178][ T8207] ? __pfx_gadget_bind_driver+0x10/0x10 [ 224.847749][ T8207] really_probe+0x254/0xae0 [ 224.852281][ T8207] __driver_probe_device+0x1e8/0x360 [ 224.857598][ T8207] driver_probe_device+0x4f/0x240 [ 224.862653][ T8207] __driver_attach+0x339/0x600 [ 224.867441][ T8207] bus_for_each_dev+0x23b/0x2c0 [ 224.872310][ T8207] ? __pfx___driver_attach+0x10/0x10 [ 224.877645][ T8207] ? __pfx_bus_for_each_dev+0x10/0x10 [ 224.883055][ T8207] ? do_raw_spin_unlock+0xf5/0x200 [ 224.888287][ T8207] bus_add_driver+0x345/0x670 [ 224.892996][ T8207] driver_register+0x23a/0x320 [ 224.897804][ T8207] usb_gadget_register_driver_owner+0xf9/0x270 [ 224.904005][ T8207] dev_config+0xe3c/0x12a0 [ 224.908456][ T8207] ? __pfx_dev_config+0x10/0x10 [ 224.913337][ T8207] ? __pfx_dev_config+0x10/0x10 [ 224.918232][ T8207] vfs_write+0x296/0xba0 [ 224.922512][ T8207] ? __pfx_vfs_write+0x10/0x10 [ 224.927310][ T8207] ? __fget_files+0x2a/0x420 [ 224.931953][ T8207] ? __fget_files+0x3a2/0x420 [ 224.936655][ T8207] ? __fget_files+0x2a/0x420 [ 224.941280][ T8207] ksys_write+0x150/0x270 [ 224.945649][ T8207] ? __pfx_ksys_write+0x10/0x10 [ 224.950533][ T8207] do_syscall_64+0x166/0x520 [ 224.955145][ T8207] ? trace_irq_disable+0x3b/0x140 [ 224.960218][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.966311][ T8207] ? clear_bhb_loop+0x70/0xc0 [ 224.971014][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.976927][ T8207] RIP: 0033:0x7fdff079e159 [ 224.981377][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.001097][ T8207] RSP: 002b:00007fdff16cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.009563][ T8207] RAX: ffffffffffffffda RBX: 00007fdff0a25fa0 RCX: 00007fdff079e159 [ 225.017651][ T8207] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 225.025646][ T8207] RBP: 00007fdff083503b R08: 0000000000000000 R09: 0000000000000000 [ 225.033755][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.041746][ T8207] R13: 00007fdff0a26038 R14: 00007fdff0a25fa0 R15: 00007ffc2420b5e8 [ 225.049835][ T8207] [ 225.053479][ T8207] Kernel Offset: disabled [ 225.057817][ T8207] Rebooting in 86400 seconds..