last executing test programs: 4.57524717s ago: executing program 0 (id=1645): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0x9}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x4c}, 0x20) 3.640502824s ago: executing program 0 (id=1653): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 3.507142237s ago: executing program 0 (id=1655): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.363206365s ago: executing program 0 (id=1656): lsm_get_self_attr(0xfb29c5c7cb40410f, 0x0, 0x0, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x57, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0xc3, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x4e}, {0xd, 0x24, 0xf, 0x1, 0xd3c, 0x6, 0x74b, 0x7}, [@mdlm_detail={0xa, 0x24, 0x13, 0x2, "a98c810d3297"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xf9, 0x2}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x1, 0xbc, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x89, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x4, 0x20, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x2e}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x0, "5e9f73"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x4, 0x6, [0x3, 0x4, 0xa, 0x8, 0x5, 0x8], 0x9}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x8, 0x9, "0dac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x72}, @as_header={0x7, 0x24, 0x1, 0x4, 0xf, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb, 0x7fff, 0x6, 0xdd}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x5, 0x3, {0x7, 0x25, 0x1, 0x8, 0xa0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x58, 0x7, {0x7, 0x25, 0x1, 0x0, 0x8, 0xde22}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x1, 0x3, 0xf8, 0x10, 0x9}, 0xa6, &(0x7f00000002c0)={0x5, 0xf, 0xa6, 0x4, [@generic={0x85, 0x10, 0xa, "df3c84eab09045f416009bace687ae35a053b7b62eaadb5f723f91be5a803ce6f2669c441596009c6bb1bc99e9ae48fc33445d21efaff059414c4790e8c9bf105d68ce0f3f505beac7bcebf2ba134b6646e156606275d10f5c357265cf977ef3bb4a5d53c895e17fcbbcdc62a0357f834373408a77fff1654e0fbd53b6a43a92200c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x3, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0xd9, 0x9, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x13, 0x1c, 0xc18, 0xb}]}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xa9, &(0x7f0000000400)=@string={0xa9, 0x3, "2a3587b7b8d2aa6063234369ba3b16bbd470f13b39d93a7913be11b3a7d60dc51377c28c67d308da4408e8c585dff6c31a059c1af5b196c592606902027a00c142b44b8bc06f841dd638a5657a19828a5da56efe9f5cb2c04e1910367f12c30664e51abf521fb7eb10ec0e0103dfe6921b9ba54b63cacb5a4acee83c33bf02004e1c56bdf89ce2254f0d63928435b89d57d8ef838127578e4fbc1f7df4cba349a7a733aca0a126"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x406}}, {0xe9, &(0x7f0000000580)=@string={0xe9, 0x3, "072530ad0b0b56b601ce7ecc2a55a7fd18a42613b983a64c9e68714b6a8402638acf0d124a401dd65437fb9f4db99d88e49380516c3d2578e3d434c01dd881286a3567a3ef362dacd32abe37e5b45065beb474dba2ff19e340acf6cffec0e001a3c3ef4cc7d64f241fdafc172df874411b2f17b7e8a44e7dc75059055f78ad36c6ad5c22f55a1279f8602218a46055fb64f7cef012f55921cc423ea17f39353c51b57933d6d3514b01c8b82bb05c242d493812328eaacf91004faaf9ca825ed4e91f5357c1a9a8ebb128e2c560f9c73a13bb249c96157925fc7e125db6eb65fc48f7cced0cf956"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1009}}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x88}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) 2.655368812s ago: executing program 0 (id=1662): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write(r2, &(0x7f0000000300)="ffffffffffff001122334455080045", 0xf) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x8000) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000000)={0xa, 0x103, 0x0, {0x885, 0x1000, 0x4, 0x2}}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012abd7000fbdbdf25110000000a000900aaaaaaaaaaaa0000080039107c39a70005002a000100000005002d00010000000800320001000000080031000500000008000600b95760b8f4fa45e62eca11c15c0dec33f50da3ffa8c2d0255bf0c499aa47678b20860a65ec7583b08852aca8341268fc92ede68a7f7509d32a876b68233d3263b5", @ANYRES8=0x0, @ANYBLOB="08000b00000000000500380000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4890}, 0x20010000) r5 = getpgrp(0x0) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e23, 0x8, @mcast1, 0x2}, 0x1c) r6 = syz_open_procfs(r5, &(0x7f0000000140)='net/route\x00') preadv(r6, &(0x7f0000001180)=[{&(0x7f0000000180)=""/181, 0xb5}], 0x1, 0xb, 0x2) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009"], 0x80}}, 0x0) syz_usb_connect$uac2(0x3, 0xcb, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010440621804000010203010902b90003010080c0080b0001010520070904"], 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0400eee93e00fed5df2504000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24010000) fchdir(0xffffffffffffffff) 2.439830967s ago: executing program 2 (id=1666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0xd084}, 0x804) 2.345419536s ago: executing program 2 (id=1667): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 1.930806027s ago: executing program 2 (id=1669): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) set_mempolicy(0x3, &(0x7f0000000000)=0xa, 0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="e4", 0x1}], 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1, '\x00', @p_u16=&(0x7f0000000080)=0xa65}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000041000701fefeffff00000000017c0000040042802000018006000600800a00000c001500faffffffffffffff08000900", @ANYRES32=r2, @ANYBLOB="040002"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r3], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0}) 1.929248321s ago: executing program 3 (id=1670): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e) write(r0, &(0x7f0000000000)='27', 0x2) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x0, 0x3}}) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) 1.136398004s ago: executing program 1 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 1.021553876s ago: executing program 1 (id=1672): r0 = fsopen(&(0x7f0000000080)='ext4\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0xfffffffffffffffd, 0x20, 0x7}, 0x2f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000), &(0x7f0000000540), &(0x7f00000003c0)) syz_ublk_setup_queues(r4, r5, &(0x7f0000000180)={0x0, 0xe4a9, 0x0, 0x2, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x10, 0x1000000, 0x10000006, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x1a0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1174, 0x8000, 0x1, 0x2b0, 0x0, r3}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x1, 0x6, @random="c1efe9d0e083"}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/stat\x00', 0x0, 0x0) openat(r8, &(0x7f0000001140)='rt_cache\x00', 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/snd/timer\x00'}, {0x20, '-%,((&{+:^)]#/#$}#['}, {0x20, '-+}('}, {0x20, '\x83}'}, {0x20, '/+'}, {0x20, '%+@@($*[*'}], 0xa, "ac9e3856b48097d2abc6cc44f1c80f519cb9dcd19d2ee1ef4ffa02bd4d32a2450cd9e1e41dcb5ae7f66cc0ee0b92b32a3e501cc2183b883e8d7d9b3c9393ca95072d621d8bbd1543f2b46316a19c9e2dcbcf8f715525114f3d47d9acc1f72542e8cc12ab8cbc1344cf632e768a7cb10b666aabd424414e40238c062f347ada1bebe6743042fd606b9abed414f42b477b0d4930d800e4f73b6b084c96f67b052a04ef5ac8f72f1ec1f2b4a8500e3e97c118d703989f233850d7acf4b706c903c5c91c26334cf51003d5f444c5e038cb91719c854c7592210c1c76e529e76df2aacb122ab6082389b50f54d60399889408b9a243e2bfac6f63bf"}, 0x13d) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 913.07293ms ago: executing program 3 (id=1673): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 787.885821ms ago: executing program 1 (id=1674): r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b//\\o\\\xea\x95//\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000580)={0x40, r7, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xf040}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x108, r7, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6f0c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffc01}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x55c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x206, 0x6b]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x108, r7, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6f0c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffc01}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x55c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x206, 0x6b]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x14) read$alg(r4, &(0x7f0000000b00)=""/32, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010000072c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000040000000060a010400000000000000000100000008000b400000000018000480140001800b0001006578746864720010040002800900010073797a3000000000140000001100010000000000000000000700000a"], 0xa8}}, 0x0) 310.92173ms ago: executing program 0 (id=1679): setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x3, 0x1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x3, 0x40040005, 0x3ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000052000101"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004010) syz_usb_connect(0x0, 0x3d, &(0x7f0000000fc0)={{0x12, 0x1, 0x110, 0xe, 0x73, 0x1b, 0x8, 0xf11, 0x1031, 0x2f8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x7, 0x95, 0x70, 0x1, "", [{{0x9, 0x4, 0x6b, 0x2, 0x2, 0xd6, 0xff, 0xd0, 0x81, [], [{{0x9, 0x5, 0x80, 0x2, 0x20, 0x7f, 0x8, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x77, 0x3, 0x3, [@generic={0x7, 0x5, "d75eef973c"}]}}]}}]}}]}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x605, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=@other={'unlock', ' ', 'none'}, 0xc) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r8}}], 0x1, 0x0, 0x0) 236.399994ms ago: executing program 3 (id=1680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 134.504093ms ago: executing program 1 (id=1681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)="3df974a52f", 0x5}], 0x1}}], 0x1, 0x24040014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 72.113195ms ago: executing program 3 (id=1682): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9) (fail_nth: 3) 67.836948ms ago: executing program 1 (id=1683): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 17.012597ms ago: executing program 2 (id=1684): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0) 0s ago: executing program 1 (id=1685): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r2 = fcntl$getown(r0, 0x9) prlimit64(r2, 0xe, &(0x7f0000000000)={0x0, 0x751a0a7c}, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000100), 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="042c1100c800aaaaaaaaaa108000003c003c0000"], 0x14) kernel console output (not intermixed with test programs): 246 R12: 0000000000000000 [ 92.583642][ T5761] R13: 00007f6c4b826038 R14: 00007f6c4b825fa0 R15: 00007ffeb905fac8 [ 92.583682][ T5761] [ 92.630142][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.630202][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.790889][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 92.825611][ T10] usb 1-1: New USB device found: idVendor=0644, idProduct=8021, bcdDevice=0.40 [ 92.829350][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.829376][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.833198][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.833225][ T10] usb 1-1: Product: syz [ 92.833241][ T10] usb 1-1: Manufacturer: syz [ 92.833256][ T10] usb 1-1: SerialNumber: syz [ 92.941017][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 92.941048][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 93.061821][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.061844][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.066096][ T5607] Bluetooth: hci0: command tx timeout [ 93.200760][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.200783][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.227831][ T5607] Bluetooth: hci1: command tx timeout [ 93.296419][ T991] usb 1-1: USB disconnect, device number 2 [ 93.379881][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.379905][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.433950][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.468091][ T5607] Bluetooth: hci2: command tx timeout [ 93.468117][ T54] Bluetooth: hci3: command tx timeout [ 93.589909][ T10] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 93.590943][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.590968][ T10] usb 3-1: config 0 has no interfaces? [ 93.622682][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.622710][ T10] usb 3-1: Product: syz [ 93.622725][ T10] usb 3-1: Manufacturer: syz [ 93.622740][ T10] usb 3-1: SerialNumber: syz [ 93.649972][ T10] usb 3-1: config 0 descriptor?? [ 93.670058][ T5774] nvmet: adding nsid 1 to subsystem testsubsys [ 93.840516][ T5780] netlink: ct family unspecified [ 93.840561][ T5780] openvswitch: netlink: Actions may not be safe on all matching packets [ 93.841633][ T5780] netlink: ct_mark mask cannot be 0 [ 93.841669][ T5780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.958661][ T5758] usb 3-1: USB disconnect, device number 2 [ 94.150963][ T5790] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 94.893957][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 94.924840][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.046876][ T10] usb 1-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.048409][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.048437][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.048487][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.053490][ T10] usb 1-1: config 0 descriptor?? [ 95.070290][ T27] usb 3-1: device descriptor read/64, error -71 [ 95.121003][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.121279][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 95.173282][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.188244][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.188313][ T10] usb 1-1: media controller created [ 95.192472][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.232331][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 95.232486][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.253550][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 95.281874][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 95.281920][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.316618][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.435199][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 95.435235][ T4941] dvb-usb: error while querying for an remote control event. [ 95.444370][ T27] usb 3-1: device descriptor read/64, error -71 [ 95.554385][ T27] usb usb3-port1: attempt power cycle [ 95.594108][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.595907][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 95.595963][ T4941] dvb-usb: error while querying for an remote control event. [ 95.744755][ T10] usb 2-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 95.745918][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.745967][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.748101][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.748128][ T10] usb 2-1: Product: syz [ 95.748143][ T10] usb 2-1: Manufacturer: syz [ 95.748158][ T10] usb 2-1: SerialNumber: syz [ 95.751539][ T10] usb 2-1: config 0 descriptor?? [ 95.753977][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 95.754008][ T4941] dvb-usb: error while querying for an remote control event. [ 95.914018][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.914053][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 95.914086][ T10] dvb-usb: error while querying for an remote control event. [ 95.950718][ T27] usb 3-1: device descriptor read/8, error -71 [ 95.969787][ T5836] dvb-usb: bulk message failed: -22 (4/0) [ 95.970815][ T5709] usb 2-1: USB disconnect, device number 2 [ 96.074361][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 96.075169][ T4941] dvb-usb: error while querying for an remote control event. [ 96.184538][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.204734][ T27] usb 3-1: device descriptor read/8, error -71 [ 96.233957][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 96.233995][ T4941] dvb-usb: error while querying for an remote control event. [ 96.314780][ T27] usb usb3-port1: unable to enumerate USB device [ 96.394035][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 96.394078][ T10] dvb-usb: error while querying for an remote control event. [ 96.527030][ T5844] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 96.565386][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 96.565422][ T4941] dvb-usb: error while querying for an remote control event. [ 96.728427][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 96.728461][ T4941] dvb-usb: error while querying for an remote control event. [ 96.883993][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 96.884032][ T4941] dvb-usb: error while querying for an remote control event. [ 97.043938][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 97.043975][ T4941] dvb-usb: error while querying for an remote control event. [ 97.206024][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 97.206062][ T4941] dvb-usb: error while querying for an remote control event. [ 97.363953][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 97.363991][ T4941] dvb-usb: error while querying for an remote control event. [ 97.470059][ T5862] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 97.523935][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 97.523979][ T4941] dvb-usb: error while querying for an remote control event. [ 97.683956][ T4941] usb 1-1: USB disconnect, device number 3 [ 97.801379][ T4941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 98.048464][ T5873] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 98.098066][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.135260][ T4941] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.304745][ T4941] usb 1-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 98.306050][ T4941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.306078][ T4941] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.308372][ T4941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.308405][ T4941] usb 1-1: Product: syz [ 98.308420][ T4941] usb 1-1: Manufacturer: syz [ 98.308440][ T4941] usb 1-1: SerialNumber: syz [ 98.310813][ T4941] usb 1-1: config 0 descriptor?? [ 98.506656][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.523955][ T4941] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.547899][ T5687] usb 1-1: USB disconnect, device number 4 [ 98.644400][ T27] usb 2-1: device descriptor read/64, error -71 [ 98.696091][ T4941] usb 4-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 98.697614][ T4941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.697643][ T4941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 98.697688][ T4941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.703110][ T4941] usb 4-1: config 0 descriptor?? [ 98.748208][ T4941] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 98.748255][ T4941] dvb-usb: bulk message failed: -22 (3/0) [ 98.774611][ T4941] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 98.777129][ T4941] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 98.777182][ T4941] usb 4-1: media controller created [ 98.782984][ T4941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.822006][ T4941] dvb-usb: bulk message failed: -22 (6/0) [ 98.822093][ T4941] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 98.848591][ T4941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 98.852030][ T4941] dvb-usb: schedule remote query interval to 150 msecs. [ 98.852056][ T4941] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 98.894003][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.004733][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 99.004761][ T4941] dvb-usb: error while querying for an remote control event. [ 99.029003][ T27] usb 2-1: device descriptor read/64, error -71 [ 99.134557][ T27] usb usb2-port1: attempt power cycle [ 99.151530][ T5895] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 99.166805][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 99.166836][ T4941] dvb-usb: error while querying for an remote control event. [ 99.324690][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 99.324734][ T4941] dvb-usb: error while querying for an remote control event. [ 99.483950][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.483956][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 99.483992][ T4941] dvb-usb: error while querying for an remote control event. [ 99.515366][ T27] usb 2-1: device descriptor read/8, error -71 [ 99.646269][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 99.646305][ T4941] dvb-usb: error while querying for an remote control event. [ 99.753929][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.777252][ T27] usb 2-1: device descriptor read/8, error -71 [ 99.804225][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 99.804261][ T4941] dvb-usb: error while querying for an remote control event. [ 99.852822][ T5904] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 99.896023][ T27] usb usb2-port1: unable to enumerate USB device [ 99.964041][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 99.964077][ T4941] dvb-usb: error while querying for an remote control event. [ 100.125795][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 100.125824][ T4941] dvb-usb: error while querying for an remote control event. [ 100.234075][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.283990][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 100.284028][ T4941] dvb-usb: error while querying for an remote control event. [ 100.395658][ T27] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 100.396971][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.396996][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.399340][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.399366][ T27] usb 3-1: Product: syz [ 100.399380][ T27] usb 3-1: Manufacturer: syz [ 100.399399][ T27] usb 3-1: SerialNumber: syz [ 100.410937][ T27] usb 3-1: config 0 descriptor?? [ 100.446650][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 100.446686][ T5687] dvb-usb: error while querying for an remote control event. [ 100.516230][ T5912] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 100.603915][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 100.603950][ T5687] dvb-usb: error while querying for an remote control event. [ 100.682468][ T5911] dvb-usb: bulk message failed: -22 (4/0) [ 100.683552][ T5709] usb 3-1: USB disconnect, device number 7 [ 100.764176][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 100.764213][ T4941] dvb-usb: error while querying for an remote control event. [ 100.923950][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 100.923987][ T4941] dvb-usb: error while querying for an remote control event. [ 101.083978][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 101.084016][ T4941] dvb-usb: error while querying for an remote control event. [ 101.245438][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 101.245476][ T4941] dvb-usb: error while querying for an remote control event. [ 101.287880][ T5709] usb 4-1: USB disconnect, device number 2 [ 101.439739][ T5709] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 101.542041][ T5924] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 101.765831][ T5930] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 101.961935][ T5936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.344723][ T5687] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 102.454743][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.495169][ T5687] usb 1-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 102.497524][ T5687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.497548][ T5687] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.497590][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.523226][ T5687] usb 1-1: config 0 descriptor?? [ 102.552645][ T5687] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 102.552701][ T5687] dvb-usb: bulk message failed: -22 (3/0) [ 102.569707][ T5687] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 102.597315][ T5687] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 102.597375][ T5687] usb 1-1: media controller created [ 102.618825][ T5687] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.686974][ T5687] dvb-usb: bulk message failed: -22 (6/0) [ 102.687065][ T5687] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 102.747023][ T5687] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 102.793004][ T5687] dvb-usb: schedule remote query interval to 150 msecs. [ 102.793030][ T5687] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 102.944000][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 102.944037][ T4941] dvb-usb: error while querying for an remote control event. [ 103.692798][ T5953] loop7: detected capacity change from 0 to 16384 [ 104.586346][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 104.586382][ T4941] dvb-usb: error while querying for an remote control event. [ 104.665807][ T5953] loop7: detected capacity change from 16384 to 0 [ 104.748349][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 104.748381][ T5687] dvb-usb: error while querying for an remote control event. [ 104.906492][ T4941] dvb-usb: bulk message failed: -22 (1/0) [ 104.906529][ T4941] dvb-usb: error while querying for an remote control event. [ 105.065167][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 105.065205][ T5687] dvb-usb: error while querying for an remote control event. [ 105.089500][ T5716] usb 1-1: USB disconnect, device number 5 [ 105.212727][ T5716] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 105.935750][ T5971] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 106.205179][ T5687] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.219890][ T5981] FAULT_INJECTION: forcing a failure. [ 106.219890][ T5981] name failslab, interval 1, probability 0, space 0, times 0 [ 106.219982][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.2.73 Not tainted syzkaller #0 PREEMPT(full) [ 106.220045][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.220084][ T5981] Call Trace: [ 106.220107][ T5981] [ 106.220129][ T5981] dump_stack_lvl+0xe8/0x150 [ 106.220225][ T5981] should_fail_ex+0x3eb/0x540 [ 106.220299][ T5981] ? alloc_slab_obj_exts+0x5c/0x180 [ 106.220360][ T5981] should_failslab+0xa8/0x100 [ 106.220425][ T5981] ? alloc_slab_obj_exts+0x5c/0x180 [ 106.220479][ T5981] __kmalloc_flags_noprof+0x123/0x790 [ 106.220550][ T5981] ? alloc_slab_obj_exts+0x5c/0x180 [ 106.220624][ T5981] alloc_slab_obj_exts+0x5c/0x180 [ 106.220693][ T5981] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 106.220817][ T5981] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 106.220879][ T5981] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 106.220934][ T5981] ? __d_alloc+0x37/0x7f0 [ 106.220987][ T5981] ? __d_alloc+0x37/0x7f0 [ 106.221058][ T5981] __d_alloc+0x37/0x7f0 [ 106.221112][ T5981] ? hashlen_string+0x54/0x110 [ 106.221185][ T5981] d_alloc_name+0xba/0x270 [ 106.221257][ T5981] ? __pfx_d_alloc_name+0x10/0x10 [ 106.221351][ T5981] ? fast_dput+0x481/0x690 [ 106.221426][ T5981] fuse_ctl_add_conn+0x360/0xd10 [ 106.221445][ T5981] ? rcu_is_watching+0x16/0xb0 [ 106.221479][ T5981] ? __pfx_fuse_ctl_add_conn+0x10/0x10 [ 106.221512][ T5981] ? do_raw_spin_unlock+0xf5/0x200 [ 106.221541][ T5981] fuse_fill_super_common+0xb10/0x1100 [ 106.221573][ T5981] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 106.221638][ T5981] fuse_fill_super+0x98/0x120 [ 106.221660][ T5981] ? __pfx_fuse_fill_super+0x10/0x10 [ 106.221689][ T5981] get_tree_nodev+0xbb/0x150 [ 106.221725][ T5981] fuse_get_tree+0x29d/0x3b0 [ 106.221809][ T5981] vfs_get_tree+0x92/0x2a0 [ 106.221891][ T5981] do_new_mount+0x325/0xb00 [ 106.221972][ T5981] ? __pfx_do_new_mount+0x10/0x10 [ 106.222034][ T5981] ? ns_capable+0x84/0xe0 [ 106.222090][ T5981] ? path_mount+0x647/0x1050 [ 106.222161][ T5981] ? user_path_at+0xd4/0x160 [ 106.222235][ T5981] __se_sys_mount+0x31d/0x420 [ 106.222309][ T5981] ? __pfx___se_sys_mount+0x10/0x10 [ 106.222383][ T5981] ? __x64_sys_mount+0x20/0xc0 [ 106.222445][ T5981] do_syscall_64+0x166/0x520 [ 106.222507][ T5981] ? trace_irq_disable+0x3b/0x140 [ 106.222561][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.222623][ T5981] ? clear_bhb_loop+0x70/0xc0 [ 106.222676][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.222738][ T5981] RIP: 0033:0x7f6c4b59e199 [ 106.222800][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.222846][ T5981] RSP: 002b:00007f6c4c4d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.222911][ T5981] RAX: ffffffffffffffda RBX: 00007f6c4b825fa0 RCX: 00007f6c4b59e199 [ 106.222954][ T5981] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000 [ 106.222996][ T5981] RBP: 00007f6c4b635888 R08: 00002000000002c0 R09: 0000000000000000 [ 106.223037][ T5981] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 106.223070][ T5981] R13: 00007f6c4b826038 R14: 00007f6c4b825fa0 R15: 00007ffeb905fac8 [ 106.223165][ T5981] [ 106.341401][ T4941] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.356899][ T5687] usb 4-1: device descriptor read/64, error -71 [ 106.579913][ T4941] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 106.593427][ T4941] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 106.593467][ T4941] usb 1-1: can't read configurations, error -61 [ 106.633933][ T5687] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.734391][ T4941] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.764015][ T5687] usb 4-1: device descriptor read/64, error -71 [ 106.877264][ T5687] usb usb4-port1: attempt power cycle [ 106.892141][ T4941] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 106.908875][ T4941] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 106.908918][ T4941] usb 1-1: can't read configurations, error -61 [ 106.909195][ T4941] usb usb1-port1: attempt power cycle [ 107.213916][ T5687] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.237929][ T5687] usb 4-1: device descriptor read/8, error -71 [ 107.243997][ T4941] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.266290][ T4941] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 107.267984][ T4941] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 107.268022][ T4941] usb 1-1: can't read configurations, error -61 [ 107.395697][ T4941] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.416305][ T4941] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 107.420029][ T4941] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 107.420070][ T4941] usb 1-1: can't read configurations, error -61 [ 107.420352][ T4941] usb usb1-port1: unable to enumerate USB device [ 107.453912][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 107.473981][ T5687] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.494711][ T5687] usb 4-1: device descriptor read/8, error -71 [ 107.605359][ T5687] usb usb4-port1: unable to enumerate USB device [ 107.606001][ T10] usb 3-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 107.608675][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.608703][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.608767][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.630520][ T10] usb 3-1: config 0 descriptor?? [ 107.675139][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 107.675188][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 107.697686][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 107.698552][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 107.698615][ T10] usb 3-1: media controller created [ 107.701880][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.757666][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 107.757753][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 107.788800][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 107.812311][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 107.812337][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 107.963935][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 107.963970][ T10] dvb-usb: error while querying for an remote control event. [ 108.125113][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 108.125150][ T10] dvb-usb: error while querying for an remote control event. [ 108.284075][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 108.284109][ T10] dvb-usb: error while querying for an remote control event. [ 108.443947][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 108.443982][ T10] dvb-usb: error while querying for an remote control event. [ 108.603979][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 108.604017][ T10] dvb-usb: error while querying for an remote control event. [ 108.763942][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 108.763979][ T5687] dvb-usb: error while querying for an remote control event. [ 108.925985][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 108.926020][ T5687] dvb-usb: error while querying for an remote control event. [ 109.083934][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 109.083970][ T5687] dvb-usb: error while querying for an remote control event. [ 109.124759][ T6024] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 109.133954][ T5709] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.243921][ T5694] dvb-usb: bulk message failed: -22 (1/0) [ 109.243959][ T5694] dvb-usb: error while querying for an remote control event. [ 109.274148][ T5709] usb 2-1: device descriptor read/64, error -71 [ 109.403956][ T5694] dvb-usb: bulk message failed: -22 (1/0) [ 109.403992][ T5694] dvb-usb: error while querying for an remote control event. [ 109.525258][ T5709] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.563912][ T5694] dvb-usb: bulk message failed: -22 (1/0) [ 109.563947][ T5694] dvb-usb: error while querying for an remote control event. [ 109.654115][ T5709] usb 2-1: device descriptor read/64, error -71 [ 109.723926][ T5694] dvb-usb: bulk message failed: -22 (1/0) [ 109.723961][ T5694] dvb-usb: error while querying for an remote control event. [ 109.764572][ T5709] usb usb2-port1: attempt power cycle [ 109.883932][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 109.883970][ T5687] dvb-usb: error while querying for an remote control event. [ 110.044008][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 110.044043][ T5687] dvb-usb: error while querying for an remote control event. [ 110.114579][ T5709] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.141168][ T5709] usb 2-1: device descriptor read/8, error -71 [ 110.203957][ T5687] dvb-usb: bulk message failed: -22 (1/0) [ 110.203994][ T5687] dvb-usb: error while querying for an remote control event. [ 110.311069][ T5758] usb 3-1: USB disconnect, device number 8 [ 110.393944][ T5709] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 110.418697][ T5709] usb 2-1: device descriptor read/8, error -71 [ 110.517550][ T5758] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 110.532517][ T5709] usb usb2-port1: unable to enumerate USB device [ 110.691905][ T6048] FAULT_INJECTION: forcing a failure. [ 110.691905][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 110.691930][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(full) [ 110.691949][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.691959][ T6048] Call Trace: [ 110.691966][ T6048] [ 110.691973][ T6048] dump_stack_lvl+0xe8/0x150 [ 110.691996][ T6048] should_fail_ex+0x3eb/0x540 [ 110.692016][ T6048] should_failslab+0xa8/0x100 [ 110.692034][ T6048] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 110.692051][ T6048] ? seqcount_lockdep_reader_access+0xea/0x100 [ 110.692068][ T6048] ? __d_alloc+0x37/0x7f0 [ 110.692081][ T6048] ? __d_alloc+0x37/0x7f0 [ 110.692100][ T6048] __d_alloc+0x37/0x7f0 [ 110.692114][ T6048] ? hashlen_string+0xb6/0x110 [ 110.692132][ T6048] d_alloc_name+0xba/0x270 [ 110.692149][ T6048] ? __pfx_d_alloc_name+0x10/0x10 [ 110.692167][ T6048] ? fast_dput+0x481/0x690 [ 110.692185][ T6048] fuse_ctl_add_conn+0x610/0xd10 [ 110.692200][ T6048] ? rcu_is_watching+0x16/0xb0 [ 110.692231][ T6048] ? __pfx_fuse_ctl_add_conn+0x10/0x10 [ 110.692255][ T6048] ? do_raw_spin_unlock+0xf5/0x200 [ 110.692275][ T6048] fuse_fill_super_common+0xb10/0x1100 [ 110.692306][ T6048] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 110.692337][ T6048] fuse_fill_super+0x98/0x120 [ 110.692353][ T6048] ? __pfx_fuse_fill_super+0x10/0x10 [ 110.692369][ T6048] get_tree_nodev+0xbb/0x150 [ 110.692387][ T6048] fuse_get_tree+0x29d/0x3b0 [ 110.692404][ T6048] vfs_get_tree+0x92/0x2a0 [ 110.692422][ T6048] do_new_mount+0x325/0xb00 [ 110.692442][ T6048] ? __pfx_do_new_mount+0x10/0x10 [ 110.692460][ T6048] ? ns_capable+0x84/0xe0 [ 110.692476][ T6048] ? path_mount+0x647/0x1050 [ 110.692494][ T6048] ? user_path_at+0xd4/0x160 [ 110.692511][ T6048] __se_sys_mount+0x31d/0x420 [ 110.692532][ T6048] ? __pfx___se_sys_mount+0x10/0x10 [ 110.692552][ T6048] ? __x64_sys_mount+0x20/0xc0 [ 110.692570][ T6048] do_syscall_64+0x166/0x520 [ 110.692584][ T6048] ? trace_irq_disable+0x3b/0x140 [ 110.692598][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.692614][ T6048] ? clear_bhb_loop+0x70/0xc0 [ 110.692667][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.692695][ T6048] RIP: 0033:0x7f9a1ab9e199 [ 110.692711][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.692725][ T6048] RSP: 002b:00007f9a1bb52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.692742][ T6048] RAX: ffffffffffffffda RBX: 00007f9a1ae25fa0 RCX: 00007f9a1ab9e199 [ 110.692754][ T6048] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000 [ 110.692765][ T6048] RBP: 00007f9a1ac35888 R08: 00002000000002c0 R09: 0000000000000000 [ 110.692776][ T6048] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 110.692786][ T6048] R13: 00007f9a1ae26038 R14: 00007f9a1ae25fa0 R15: 00007ffeb2d60768 [ 110.692813][ T6048] [ 110.905254][ T5758] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.944742][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 111.055614][ T5758] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 111.058995][ T5758] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 111.059036][ T5758] usb 3-1: can't read configurations, error -61 [ 111.088597][ T27] usb 1-1: device descriptor read/64, error -71 [ 111.183960][ T5758] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.230599][ T6054] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 111.334819][ T5758] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 111.337002][ T5758] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 111.337043][ T5758] usb 3-1: can't read configurations, error -61 [ 111.337509][ T5758] usb usb3-port1: attempt power cycle [ 111.344013][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 111.474056][ T27] usb 1-1: device descriptor read/64, error -71 [ 111.584566][ T27] usb usb1-port1: attempt power cycle [ 111.673991][ T5758] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 111.695700][ T5758] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 111.698766][ T5758] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 111.698809][ T5758] usb 3-1: can't read configurations, error -61 [ 111.834354][ T5758] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 111.861540][ T5758] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 111.863106][ T5758] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 111.863144][ T5758] usb 3-1: can't read configurations, error -61 [ 111.863481][ T5758] usb usb3-port1: unable to enumerate USB device [ 111.953978][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 111.992794][ T27] usb 1-1: device descriptor read/8, error -71 [ 112.233947][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.254591][ T27] usb 1-1: device descriptor read/8, error -71 [ 112.284153][ T5709] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 112.365929][ T27] usb usb1-port1: unable to enumerate USB device [ 112.436030][ T5709] usb 2-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 112.438050][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.438075][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.438126][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.449773][ T5709] usb 2-1: config 0 descriptor?? [ 112.485612][ T5709] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 112.485747][ T5709] dvb-usb: bulk message failed: -22 (3/0) [ 112.511325][ T5709] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 112.521007][ T5709] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 112.521177][ T5709] usb 2-1: media controller created [ 112.535402][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.561579][ T5709] dvb-usb: bulk message failed: -22 (6/0) [ 112.561668][ T5709] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 112.582047][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 112.612585][ T5709] dvb-usb: schedule remote query interval to 150 msecs. [ 112.612611][ T5709] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 112.688998][ T5709] usb 2-1: USB disconnect, device number 11 [ 112.762778][ T5709] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.129753][ T6075] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 113.593997][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.725356][ T27] usb 2-1: device descriptor read/64, error -71 [ 113.964005][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 114.095731][ T6096] Zero length message leads to an empty skb [ 114.105034][ T27] usb 2-1: device descriptor read/64, error -71 [ 114.216956][ T27] usb usb2-port1: attempt power cycle [ 114.443941][ T5694] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 114.504092][ T5709] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 114.564790][ T27] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 114.594614][ T27] usb 2-1: device descriptor read/8, error -71 [ 114.595263][ T5694] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 114.597315][ T5694] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 114.597353][ T5694] usb 3-1: can't read configurations, error -61 [ 114.667945][ T5709] usb 4-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.670149][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.670177][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.670229][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.693455][ T5709] usb 4-1: config 0 descriptor?? [ 114.742699][ T5709] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 114.742751][ T5709] dvb-usb: bulk message failed: -22 (3/0) [ 114.756737][ T5694] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 114.782852][ T5709] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.795168][ T5709] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 114.795227][ T5709] usb 4-1: media controller created [ 114.801578][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.830775][ T5709] dvb-usb: bulk message failed: -22 (6/0) [ 114.830866][ T5709] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 114.861025][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 114.864230][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 114.889597][ T27] usb 2-1: device descriptor read/8, error -71 [ 114.893934][ T5709] dvb-usb: schedule remote query interval to 150 msecs. [ 114.893960][ T5709] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 114.918214][ T5694] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 114.920830][ T5694] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 114.920871][ T5694] usb 3-1: can't read configurations, error -61 [ 114.921200][ T5694] usb usb3-port1: attempt power cycle [ 114.994534][ T27] usb usb2-port1: unable to enumerate USB device [ 115.025307][ T991] usb 4-1: USB disconnect, device number 7 [ 115.101837][ T991] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 115.255542][ T5694] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 115.277406][ T5694] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 115.291096][ T5694] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 115.291136][ T5694] usb 3-1: can't read configurations, error -61 [ 115.423938][ T5694] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 115.446702][ T5694] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 115.452562][ T5694] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 115.452602][ T5694] usb 3-1: can't read configurations, error -61 [ 115.477154][ T5694] usb usb3-port1: unable to enumerate USB device [ 115.553944][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.701751][ T6119] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 115.709971][ T27] usb 1-1: device descriptor read/64, error -71 [ 115.955096][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 116.085069][ T27] usb 1-1: device descriptor read/64, error -71 [ 116.208136][ T27] usb usb1-port1: attempt power cycle [ 116.292161][ T6122] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 116.544322][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 116.565788][ T27] usb 1-1: device descriptor read/8, error -71 [ 116.803938][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 116.825756][ T27] usb 1-1: device descriptor read/8, error -71 [ 116.934485][ T27] usb usb1-port1: unable to enumerate USB device [ 117.354049][ T5758] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.505828][ T5758] usb 4-1: device descriptor read/64, error -71 [ 117.763969][ T5758] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.894225][ T5758] usb 4-1: device descriptor read/64, error -71 [ 118.004367][ T5758] usb usb4-port1: attempt power cycle [ 118.099194][ T6160] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 118.346175][ T5758] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.367882][ T5758] usb 4-1: device descriptor read/8, error -71 [ 118.624067][ T5758] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 118.645952][ T5758] usb 4-1: device descriptor read/8, error -71 [ 118.754312][ T5758] usb usb4-port1: unable to enumerate USB device [ 119.363953][ T5758] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 119.514930][ T5758] usb 2-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.516534][ T5758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.516562][ T5758] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.516613][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.523594][ T5758] usb 2-1: config 0 descriptor?? [ 119.583162][ T5758] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.592265][ T5758] dvb-usb: bulk message failed: -22 (3/0) [ 119.609078][ T5758] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.609898][ T5758] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.609951][ T5758] usb 2-1: media controller created [ 119.613483][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.626481][ T5694] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 119.674866][ T5758] dvb-usb: bulk message failed: -22 (6/0) [ 119.674956][ T5758] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 119.699199][ T5758] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 119.721726][ T5758] dvb-usb: schedule remote query interval to 150 msecs. [ 119.721755][ T5758] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.755358][ T5694] usb 3-1: device descriptor read/64, error -71 [ 119.874682][ T5758] dvb-usb: bulk message failed: -22 (1/0) [ 119.874717][ T5758] dvb-usb: error while querying for an remote control event. [ 119.995466][ T5694] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 120.033950][ T5758] dvb-usb: bulk message failed: -22 (1/0) [ 120.033994][ T5758] dvb-usb: error while querying for an remote control event. [ 120.080883][ T5687] usb 2-1: USB disconnect, device number 16 [ 120.124196][ T5694] usb 3-1: device descriptor read/64, error -71 [ 120.168682][ T5687] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 120.234186][ T5694] usb usb3-port1: attempt power cycle [ 120.576169][ T5694] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 120.599191][ T5694] usb 3-1: device descriptor read/8, error -71 [ 120.716924][ T6200] fuse: fd is not a fuse device [ 120.833983][ T5694] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 120.856909][ T5694] usb 3-1: device descriptor read/8, error -71 [ 120.964368][ T5694] usb usb3-port1: unable to enumerate USB device [ 120.992018][ T6211] netlink: ct family unspecified [ 120.992053][ T6211] openvswitch: netlink: Actions may not be safe on all matching packets [ 120.992847][ T6211] netlink: ct_mark mask cannot be 0 [ 120.992877][ T6211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.971831][ T6231] fuse: Bad value for 'fd' [ 123.242110][ T6259] fuse: fd is not a fuse device [ 123.795026][ T27] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 123.954739][ T27] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 123.958783][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.958813][ T27] usb 3-1: Product: syz [ 123.958828][ T27] usb 3-1: Manufacturer: syz [ 123.958844][ T27] usb 3-1: SerialNumber: syz [ 124.001317][ T27] usb 3-1: config 0 descriptor?? [ 124.014043][ T27] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 124.019684][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.020561][ T27] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 124.020623][ T27] usb 3-1: media controller created [ 124.077896][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.175716][ T27] DVB: Unable to find symbol mt352_attach() [ 124.238403][ T27] DVB: Unable to find symbol nxt6000_attach() [ 124.238421][ T27] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 124.242869][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 124.274510][ T27] dvb-usb: schedule remote query interval to 1000 msecs. [ 124.274536][ T27] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 124.274552][ T27] dvb-usb: bulk message failed: -22 (7/0) [ 124.274568][ T27] dvb-usb: bulk message failed: -22 (7/0) [ 124.282462][ T27] usb 3-1: USB disconnect, device number 21 [ 124.390239][ T27] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 124.773201][ T6284] fuse: fd is not a fuse device [ 125.161063][ T6293] fuse: Bad value for 'fd' [ 125.862682][ T6306] fuse: fd is not a fuse device [ 126.533956][ T5758] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 126.686141][ T6327] fuse: Bad value for 'fd' [ 126.705207][ T5758] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 126.706015][ T5758] usb 3-1: config 0 has no interfaces? [ 126.707621][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 126.707647][ T5758] usb 3-1: Product: syz [ 126.707662][ T5758] usb 3-1: Manufacturer: syz [ 126.711338][ T5758] usb 3-1: config 0 descriptor?? [ 126.911467][ T6329] fuse: fd is not a fuse device [ 126.920747][ T5758] usb 3-1: USB disconnect, device number 22 [ 127.775103][ T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 127.895077][ T6358] fuse: fd is not a fuse device [ 127.923932][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 127.924696][ T27] usb 3-1: New USB device found: idVendor=0644, idProduct=8021, bcdDevice=0.40 [ 127.925878][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.925903][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.928313][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.928340][ T27] usb 3-1: Product: syz [ 127.928357][ T27] usb 3-1: Manufacturer: syz [ 127.928373][ T27] usb 3-1: SerialNumber: syz [ 127.955648][ T27] hub 3-1:1.0: bad descriptor, ignoring hub [ 127.955731][ T27] hub 3-1:1.0: probe with driver hub failed with error -5 [ 128.284183][ T5716] usb 3-1: USB disconnect, device number 23 [ 128.344463][ T6374] fuse: Bad value for 'fd' [ 128.979179][ T6383] fuse: fd is not a fuse device [ 129.156043][ T6399] fuse: fd is not a fuse device [ 129.194079][ T5687] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 129.354591][ T5687] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 129.357900][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.357929][ T5687] usb 3-1: Product: syz [ 129.357945][ T5687] usb 3-1: Manufacturer: syz [ 129.357959][ T5687] usb 3-1: SerialNumber: syz [ 129.363328][ T5687] usb 3-1: config 0 descriptor?? [ 129.404137][ T5687] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 129.408469][ T5687] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.409087][ T5687] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 129.409129][ T5687] usb 3-1: media controller created [ 129.451924][ T5687] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.502708][ T5687] DVB: Unable to find symbol mt352_attach() [ 129.538969][ T5687] DVB: Unable to find symbol nxt6000_attach() [ 129.538984][ T5687] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 129.543290][ T5687] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 129.580857][ T5687] dvb-usb: schedule remote query interval to 1000 msecs. [ 129.580880][ T5687] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 129.580896][ T5687] dvb-usb: bulk message failed: -22 (7/0) [ 129.580911][ T5687] dvb-usb: bulk message failed: -22 (7/0) [ 129.640340][ T5687] usb 3-1: USB disconnect, device number 24 [ 129.693741][ T5687] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 130.063434][ T6426] fuse: fd is not a fuse device [ 130.106165][ T6429] fuse: Bad value for 'fd' [ 130.224852][ T6434] netlink: ct family unspecified [ 130.224877][ T6434] openvswitch: netlink: Actions may not be safe on all matching packets [ 130.513963][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 130.666767][ T10] usb 3-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.668636][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.668654][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.668688][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.673078][ T10] usb 3-1: config 0 descriptor?? [ 130.689499][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 130.689666][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 130.742988][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 130.752955][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 130.753010][ T10] usb 3-1: media controller created [ 130.770324][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.803435][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 130.803524][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 130.819261][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 130.836343][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 130.836368][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 130.899860][ T10] usb 3-1: USB disconnect, device number 25 [ 130.988650][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 131.126390][ T6450] fuse: fd is not a fuse device [ 131.675390][ T6460] netlink: ct family unspecified [ 131.675425][ T6460] openvswitch: netlink: Actions may not be safe on all matching packets [ 131.834337][ T6466] fuse: Bad value for 'fd' [ 132.987107][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987193][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.572782][ T6517] fuse: Bad value for 'fd' [ 134.844247][ T6549] fuse: fd is not a fuse device [ 136.364036][ T6585] fuse: fd is not a fuse device [ 138.188577][ T6629] fuse: fd is not a fuse device [ 140.051938][ T6677] fuse: fd is not a fuse device [ 141.120482][ T6697] fuse: Bad value for 'fd' [ 141.868257][ T6715] fuse: fd is not a fuse device [ 142.156218][ T6722] fuse: fd is not a fuse device [ 143.249933][ T6746] fuse: fd is not a fuse device [ 143.562360][ T6758] fuse: fd is not a fuse device [ 143.945841][ T6767] fuse: fd is not a fuse device [ 144.869229][ T6788] fuse: fd is not a fuse device [ 145.191549][ T6803] fuse: fd is not a fuse device [ 145.458071][ T6811] fuse: Bad value for 'fd' [ 146.229218][ T6839] fuse: fd is not a fuse device [ 146.263286][ T6841] netlink: ct family unspecified [ 146.263322][ T6841] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.582932][ T6853] fuse: fd is not a fuse device [ 147.132297][ T6864] fuse: fd is not a fuse device [ 147.286976][ T6870] netlink: ct family unspecified [ 147.287003][ T6870] openvswitch: netlink: Actions may not be safe on all matching packets [ 148.003905][ T6891] fuse: fd is not a fuse device [ 148.130552][ T6897] fuse: fd is not a fuse device [ 148.308100][ T6911] fuse: fd is not a fuse device [ 149.071901][ T6923] fuse: Bad value for 'fd' [ 149.794011][ T6948] fuse: Bad value for 'fd' [ 149.897302][ T6951] fuse: fd is not a fuse device [ 150.393414][ T6971] fuse: Bad value for 'fd' [ 153.600306][ T7083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.486'. [ 153.695945][ T7090] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 153.695966][ T7090] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 153.696030][ T7090] iwpm_send_hello: Unable to send a nlmsg [ 155.471126][ T7156] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.514'. [ 155.473257][ T7155] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.514'. [ 155.726631][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 155.893327][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 155.903161][ T7178] capability: warning: `syz.3.524' uses deprecated v2 capabilities in a way that may be insecure [ 155.906507][ T7178] fuse: Unknown parameter 'Ó)' [ 155.982018][ T7180] fuse: Bad value for 'fd' [ 156.523204][ T7191] netlink: 'syz.3.528': attribute type 16 has an invalid length. [ 156.523223][ T7191] netlink: 152 bytes leftover after parsing attributes in process `syz.3.528'. [ 156.789993][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 157.975547][ T7230] netlink: 666 bytes leftover after parsing attributes in process `syz.3.543'. [ 158.286022][ T7246] overlayfs: failed to clone upperpath [ 158.872330][ T7255] mmap: syz.3.550 (7255) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.288679][ T7279] overlayfs: failed to clone upperpath [ 161.370889][ T7363] fuse: fd is not a fuse device [ 161.634880][ T7377] ovs-dp0: entered promiscuous mode [ 162.713116][ T7424] fuse: Bad value for 'fd' [ 163.218308][ T7430] fuse: Bad value for 'fd' [ 164.026273][ T7470] netlink: 200 bytes leftover after parsing attributes in process `syz.2.640'. [ 164.126755][ T7473] fuse: Bad value for 'fd' [ 164.490188][ T7488] fuse: Bad value for 'fd' [ 165.080582][ T7517] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001 [ 165.299575][ T7530] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 165.348828][ T7532] fuse: Bad value for 'fd' [ 165.530597][ T7545] netlink: 'syz.2.671': attribute type 21 has an invalid length. [ 166.110732][ T7555] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 166.179418][ T7557] syz.2.675: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.179613][ T7557] CPU: 1 UID: 0 PID: 7557 Comm: syz.2.675 Not tainted syzkaller #0 PREEMPT(full) [ 166.179641][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.179655][ T7557] Call Trace: [ 166.179664][ T7557] [ 166.179674][ T7557] dump_stack_lvl+0xe8/0x150 [ 166.179723][ T7557] warn_alloc+0x24d/0x270 [ 166.179745][ T7557] ? stack_depot_save_flags+0x41e/0x7f0 [ 166.179776][ T7557] ? __pfx_warn_alloc+0x10/0x10 [ 166.179796][ T7557] ? kasan_save_track+0x4f/0x80 [ 166.179817][ T7557] ? __kasan_kmalloc+0x93/0xb0 [ 166.179839][ T7557] ? xsk_init_queue+0x8a/0xe0 [ 166.179860][ T7557] ? xsk_setsockopt+0x52a/0x960 [ 166.179882][ T7557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.179920][ T7557] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 166.179975][ T7557] ? rcu_is_watching+0x16/0xb0 [ 166.180003][ T7557] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.180027][ T7557] ? __kmalloc_cache_noprof+0x31c/0x600 [ 166.180051][ T7557] ? __kmalloc_cache_noprof+0x148/0x600 [ 166.180073][ T7557] ? xskq_create+0x56/0x220 [ 166.180099][ T7557] xskq_create+0x148/0x220 [ 166.180120][ T7557] ? xsk_init_queue+0x8a/0xe0 [ 166.180145][ T7557] xsk_init_queue+0x8a/0xe0 [ 166.180169][ T7557] xsk_setsockopt+0x52a/0x960 [ 166.180195][ T7557] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.180217][ T7557] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.180252][ T7557] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 166.180273][ T7557] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.180298][ T7557] do_sock_setsockopt+0x17c/0x1b0 [ 166.180326][ T7557] __x64_sys_setsockopt+0x13d/0x1b0 [ 166.180355][ T7557] do_syscall_64+0x166/0x520 [ 166.180376][ T7557] ? trace_irq_disable+0x3b/0x140 [ 166.180396][ T7557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.180420][ T7557] ? clear_bhb_loop+0x70/0xc0 [ 166.180445][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.180468][ T7557] RIP: 0033:0x7f6c4b59e199 [ 166.180495][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.180523][ T7557] RSP: 002b:00007f6c4c4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.180547][ T7557] RAX: ffffffffffffffda RBX: 00007f6c4b825fa0 RCX: 00007f6c4b59e199 [ 166.180564][ T7557] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 166.180579][ T7557] RBP: 00007f6c4b635888 R08: 0000000000000004 R09: 0000000000000000 [ 166.180593][ T7557] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.180608][ T7557] R13: 00007f6c4b826038 R14: 00007f6c4b825fa0 R15: 00007ffeb905fac8 [ 166.180644][ T7557] [ 166.181717][ T7557] Mem-Info: [ 166.181736][ T7557] active_anon:71890 inactive_anon:0 isolated_anon:0 [ 166.181736][ T7557] active_file:0 inactive_file:58509 isolated_file:0 [ 166.181736][ T7557] unevictable:0 dirty:183 writeback:0 [ 166.181736][ T7557] slab_reclaimable:11114 slab_unreclaimable:90259 [ 166.181736][ T7557] mapped:24426 shmem:67384 pagetables:1043 [ 166.181736][ T7557] sec_pagetables:0 bounce:0 [ 166.181736][ T7557] kernel_misc_reclaimable:0 [ 166.181736][ T7557] free:1254977 free_pcp:11825 free_cma:0 [ 166.181795][ T7557] Node 0 active_anon:287560kB inactive_anon:0kB active_file:0kB inactive_file:233828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97704kB dirty:732kB writeback:0kB shmem:269536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10968kB pagetables:4028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 166.181854][ T7557] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 166.181908][ T7557] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.181975][ T7557] lowmem_reserve[]: 0 2462 2464 2464 2464 [ 166.182019][ T7557] Node 0 DMA32 free:1073672kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:287560kB inactive_anon:0kB active_file:0kB inactive_file:233828kB unevictable:0kB writepending:732kB zspages:0kB present:3129332kB managed:2521936kB mlocked:0kB bounce:0kB free_pcp:45256kB local_pcp:20084kB free_cma:0kB [ 166.182081][ T7557] lowmem_reserve[]: 0 0 1 1 1 [ 166.182120][ T7557] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1412kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.182180][ T7557] lowmem_reserve[]: 0 0 0 0 0 [ 166.182218][ T7557] Node 1 Normal free:3930876kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 166.182282][ T7557] lowmem_reserve[]: 0 0 0 0 0 [ 166.182322][ T7557] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.182479][ T7557] Node 0 DMA32: 820*4kB (UM) 497*8kB (UM) 367*16kB (UME) 222*32kB (UME) 108*64kB (UME) 44*128kB (UME) 28*256kB (UME) 11*512kB (UM) 8*1024kB (UM) 4*2048kB (UME) 247*4096kB (M) = 1073672kB [ 166.182688][ T7557] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.182804][ T7557] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 6*16kB (UM) 5*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3930876kB [ 166.182977][ T7557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.183001][ T7557] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 166.183020][ T7557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.183038][ T7557] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 166.183056][ T7557] 125889 total pagecache pages [ 166.183073][ T7557] 0 pages in swap cache [ 166.183081][ T7557] Free swap = 124996kB [ 166.183089][ T7557] Total swap = 124996kB [ 166.183102][ T7557] 2097051 pages RAM [ 166.183110][ T7557] 0 pages HighMem/MovableOnly [ 166.183118][ T7557] 434598 pages reserved [ 166.183125][ T7557] 0 pages cma reserved [ 166.345457][ T7557] netlink: 'syz.2.675': attribute type 22 has an invalid length. [ 166.761958][ T7562] fuse: Bad value for 'fd' [ 166.919787][ T7564] fuse: fd is not a fuse device [ 167.199307][ T7581] fuse: Unknown parameter '0x0000000000000003' [ 167.460278][ T7583] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 168.089060][ T7598] 9p: Bad value for 'rfdno' [ 168.147201][ T7600] fuse: fd is not a fuse device [ 168.268098][ T7606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.397052][ T7613] netlink: 56 bytes leftover after parsing attributes in process `syz.1.697'. [ 168.429669][ T7614] fuse: Unknown parameter '0x0000000000000003' [ 169.283094][ T7634] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.329219][ T7636] syz.0.707 uses obsolete (PF_INET,SOCK_PACKET) [ 169.358665][ T7639] fuse: fd is not a fuse device [ 169.361191][ T7639] overlayfs: failed to clone upperpath [ 169.464673][ T7644] netlink: 'syz.3.711': attribute type 14 has an invalid length. [ 169.688879][ T7652] fuse: Unknown parameter '0x0000000000000003' [ 170.069459][ T7662] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.138369][ T7664] process 'syz.3.717' launched './file1' with NULL argv: empty string added [ 170.140694][ T7664] netlink: 'syz.3.717': attribute type 21 has an invalid length. [ 170.576337][ T7675] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 170.997014][ T7697] fuse: Unknown parameter '0x0000000000000003' [ 171.488919][ T7707] netlink: 72 bytes leftover after parsing attributes in process `syz.0.734'. [ 171.488948][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 171.488964][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 171.495873][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 171.841836][ T7722] fuse: fd is not a fuse device [ 171.910511][ T7724] fuse: fd is not a fuse device [ 171.998378][ T7728] netlink: 488 bytes leftover after parsing attributes in process `syz.2.742'. [ 172.391759][ T7747] fuse: Unknown parameter '0x0000000000000003' [ 173.739620][ T7783] fuse: Unknown parameter '0x0000000000000003' [ 174.602005][ T7808] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 174.602031][ T7808] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 174.661569][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.773'. [ 175.499108][ T7837] fuse: Unknown parameter 'fd0x0000000000000003' [ 175.620166][ T7844] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 176.098068][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 176.359840][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 176.769060][ T7882] 9p: Bad value for 'rfdno' [ 177.040758][ T7890] fuse: Unknown parameter 'fd0x0000000000000003' [ 177.812472][ T7909] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 178.326265][ T7939] fuse: Unknown parameter 'fd0x0000000000000003' [ 179.032558][ T7956] overlayfs: failed to clone lowerpath [ 179.115942][ T7958] fuse: fd is not a fuse device [ 179.118099][ T7958] overlayfs: failed to clone upperpath [ 179.517178][ T7980] overlayfs: failed to clone lowerpath [ 179.731717][ T7994] fuse: fd is not a fuse device [ 180.405106][ T8015] overlay: Unknown parameter '/' [ 180.411219][ T8015] UBIFS error (pid: 8015): cannot open "ubi0_0", error -19 [ 180.560294][ T8017] netlink: 'syz.0.845': attribute type 2 has an invalid length. [ 180.560320][ T8017] netlink: 'syz.0.845': attribute type 8 has an invalid length. [ 180.560333][ T8017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.845'. [ 180.745481][ T8025] netlink: 59 bytes leftover after parsing attributes in process `syz.3.848'. [ 180.816156][ T8025] warning: `syz.3.848' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.892020][ T8032] fuse: fd is not a fuse device [ 180.965648][ T8035] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 181.099865][ T8041] fuse: fd is not a fuse device [ 181.470791][ T8044] ksmbd: Unknown IPC event: 1, ignore. [ 182.098928][ T8060] ======================================================= [ 182.098928][ T8060] WARNING: The mand mount option has been deprecated and [ 182.098928][ T8060] and is ignored by this kernel. Remove the mand [ 182.098928][ T8060] option from the mount to silence this warning. [ 182.098928][ T8060] ======================================================= [ 182.119660][ T8060] overlayfs: failed to clone lowerpath [ 182.149363][ T8060] fuse: fd is not a fuse device [ 182.151219][ T8060] overlayfs: failed to clone lowerpath [ 182.719146][ T8076] fuse: fd is not a fuse device [ 183.338039][ T8094] overlayfs: failed to resolve './file2': -2 [ 183.610025][ T8108] ksmbd: Unknown IPC event: 1, ignore. [ 184.526217][ T8138] x_tables: duplicate underflow at hook 2 [ 184.789827][ T8147] fuse: fd is not a fuse device [ 184.828642][ T8150] fuse: fd is not a fuse device [ 185.829589][ T8191] netlink: 104 bytes leftover after parsing attributes in process `syz.1.901'. [ 186.120120][ T8204] fuse: fd is not a fuse device [ 186.428699][ T8220] netlink: 'syz.3.910': attribute type 21 has an invalid length. [ 186.428726][ T8220] netlink: 128 bytes leftover after parsing attributes in process `syz.3.910'. [ 186.428820][ T8220] netlink: 3 bytes leftover after parsing attributes in process `syz.3.910'. [ 186.678333][ T8226] tipc: Enabling of bearer rejected, failed to enable media [ 186.828821][ T8234] overlayfs: failed to clone lowerpath [ 187.062715][ T8244] netlink: 104 bytes leftover after parsing attributes in process `syz.2.918'. [ 187.166008][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 187.166144][ T8247] netlink: Unknown conntrack attr (type=16383, max=9) [ 187.327931][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 187.328049][ T8252] netlink: Unknown conntrack attr (type=16383, max=9) [ 188.222794][ T8275] fuse: fd is not a fuse device [ 189.075081][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.939'. [ 189.579229][ T8324] fuse: fd is not a fuse device [ 190.449130][ T8340] fuse: fd is not a fuse device [ 190.552053][ T8346] netlink: 156 bytes leftover after parsing attributes in process `syz.3.954'. [ 190.690156][ T8353] netlink: 'syz.1.957': attribute type 83 has an invalid length. [ 191.561101][ T8365] fuse: fd is not a fuse device [ 191.840861][ T54] Bluetooth: hci1: connection err: -111 [ 191.841492][ T54] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 192.074730][ T33] audit: type=1107 audit(1791475153.564:2): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='va°xù5Òh¯t MÆ¥Ÿw“4ª'8û¦AÓ“ã[ôÏsûú+¬+`I «»ã…×"¤dÇpר <¯¤W×ÐA¢xMSµü½¬4{ÀL6e$@5o,uRß«:èÎ)ž8fáB†§åòiš'ˆ5Ć•.ì1ÍG²'‹ž"k<ƒ¨JiÈ;£5W¡Ûâí' [ 192.365479][ T8386] ./mnt: Can't lookup blockdev [ 193.271888][ T8410] netlink: 156 bytes leftover after parsing attributes in process `syz.2.977'. [ 193.329917][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058c3a800: rx timeout, send abort [ 193.331917][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058c39400: rx timeout, send abort [ 193.446851][ T8417] fuse: fd is not a fuse device [ 193.447973][ T8416] 9p: Bad value for 'rfdno' [ 193.830979][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058c3a800: abort rx timeout. Force session deactivation [ 193.832011][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058c39400: abort rx timeout. Force session deactivation [ 194.427325][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.427384][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.646434][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 194.678298][ T8447] netlink: 5768 bytes leftover after parsing attributes in process `syz.2.992'. [ 195.232577][ T8452] fuse: fd is not a fuse device [ 196.097035][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 196.267988][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'. [ 198.059817][ T8497] fuse: fd is not a fuse device [ 199.210611][ T8504] openvswitch: netlink: nsh attr 363 is out of range max 3 [ 199.520726][ T8514] 9pnet_fd: p9_fd_create_tcp (8514): problem connecting socket to 127.0.0.1 [ 199.976173][ T8535] overlayfs: failed to clone upperpath [ 200.205076][ T8542] fuse: fd is not a fuse device [ 200.440206][ T8552] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 200.440223][ T8552] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1028'. [ 200.498681][ T8554] bpf: Bad value for 'mode' [ 202.516263][ T8583] fuse: fd is not a fuse device [ 203.045616][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 203.252339][ T8595] tipc: Enabling of bearer rejected, failed to enable media [ 203.434377][ T8601] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 203.434408][ T8601] netlink: 'syz.2.1046': attribute type 4 has an invalid length. [ 203.434427][ T8601] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1046'. [ 203.771928][ T8621] fuse: fd is not a fuse device [ 204.166810][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 204.431656][ T8637] tmpfs: Bad value for 'mpol' [ 204.635277][ T8648] fuse: fd is not a fuse device [ 205.881550][ T27] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 205.897991][ T27] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 206.150935][ T8689] fuse: fd is not a fuse device [ 206.160502][ T27] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 206.670370][ T5709] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 206.690491][ T8671] ceph: No mds server is up or the cluster is laggy [ 207.659233][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 207.923358][ T8729] fuse: fd is not a fuse device [ 208.672201][ T8749] 9p: Bad value for 'rfdno' [ 209.286267][ T8776] fuse: fd is not a fuse device [ 210.864382][ T8820] fuse: fd is not a fuse device [ 211.085687][ T8830] fuse: fd is not a fuse device [ 211.790986][ T8856] fuse: fd is not a fuse device [ 211.864202][ T8790] Bluetooth: hci2: command 0x0406 tx timeout [ 211.864239][ T8790] Bluetooth: hci3: command 0x0406 tx timeout [ 211.864484][ T8790] Bluetooth: hci0: command 0x0406 tx timeout [ 211.864562][ T8790] Bluetooth: hci1: command 0x0406 tx timeout [ 212.369351][ T8880] fuse: fd is not a fuse device [ 212.397549][ T8881] fuse: fd is not a fuse device [ 213.081952][ T8901] 9p: Bad value for 'rfdno' [ 213.911808][ T8927] fuse: fd is not a fuse device [ 214.331199][ T8933] capability: warning: `syz.0.1156' uses 32-bit capabilities (legacy support in use) [ 215.192323][ T8947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1160'. [ 216.551918][ T8960] fuse: fd is not a fuse device [ 218.457136][ T8993] fuse: fd is not a fuse device [ 219.574923][ T9038] netlink: 'syz.0.1195': attribute type 3 has an invalid length. [ 219.781449][ T9050] fuse: fd is not a fuse device [ 220.248213][ T9056] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1201'. [ 220.524555][ T9069] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1204'. [ 221.983990][ T9095] fuse: fd is not a fuse device [ 222.890867][ T9122] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1226'. [ 222.892275][ T9122] netlink: 'syz.3.1226': attribute type 2 has an invalid length. [ 222.892291][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1226'. [ 222.924414][ T9122] : entered promiscuous mode [ 222.942152][ T5618] Bluetooth: hci3: Malformed LE Event: 0x1b [ 224.022762][ T9151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1237'. [ 225.817071][ T5617] cgroup: fork rejected by pids controller in /syz3 [ 225.949707][ T9168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.091558][ T9168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.261358][ T9168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.390413][ T9168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.822024][ T9168] bridge_slave_1: left allmulticast mode [ 226.822079][ T9168] bridge_slave_1: left promiscuous mode [ 226.830729][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.867591][ T9168] bridge_slave_0: left allmulticast mode [ 226.867620][ T9168] bridge_slave_0: left promiscuous mode [ 226.869036][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.063913][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 227.252141][ T9272] overlayfs: failed to clone upperpath [ 227.468862][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.472717][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.481281][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.495702][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.496406][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.529633][ T9280] overlayfs: failed to clone lowerpath [ 227.690697][ T9168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.720330][ T9168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.740398][ T9168] bond0 (unregistering): Released all slaves [ 227.833540][ T9168] : left promiscuous mode [ 227.915463][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 228.437716][ T9168] hsr_slave_0: left promiscuous mode [ 228.453963][ T9168] hsr_slave_1: left promiscuous mode [ 228.455114][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.455154][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.492103][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.492130][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.522794][ T9317] overlayfs: failed to resolve './cgroup': -2 [ 228.608706][ T9168] veth1_macvtap: left promiscuous mode [ 228.608768][ T9168] veth0_macvtap: left promiscuous mode [ 228.608875][ T9168] veth1_vlan: left promiscuous mode [ 228.608967][ T9168] veth0_vlan: left promiscuous mode [ 228.612162][ T9321] fuse: fd is not a fuse device [ 228.790692][ T9333] overlayfs: failed to resolve './cgroup': -2 [ 228.951397][ T9339] fuse: fd is not a fuse device [ 228.986464][ T9336] 9pnet_virtio: no channels available for device syz [ 229.318729][ T9168] team0 (unregistering): Port device team_slave_1 removed [ 229.345697][ T9168] team0 (unregistering): Port device team_slave_0 removed [ 229.431130][ T9357] fuse: fd is not a fuse device [ 229.552543][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 229.608396][ T9363] overlayfs: failed to clone upperpath [ 229.624182][ T5618] Bluetooth: hci3: command tx timeout [ 229.926387][ T9376] fuse: fd is not a fuse device [ 230.059999][ T9378] netlink: 'syz.2.1289': attribute type 268 has an invalid length. [ 230.619370][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.619545][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.619773][ T9278] bridge_slave_0: entered allmulticast mode [ 230.622661][ T9278] bridge_slave_0: entered promiscuous mode [ 230.630279][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.630513][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.630851][ T9278] bridge_slave_1: entered allmulticast mode [ 230.636178][ T9278] bridge_slave_1: entered promiscuous mode [ 230.689083][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 230.712469][ T9278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.724486][ T9278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.758967][ T9278] team0: Port device team_slave_0 added [ 230.762111][ T9278] team0: Port device team_slave_1 added [ 230.812086][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.812105][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.812130][ T9278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.861493][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.861513][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.861541][ T9278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.959137][ T9278] hsr_slave_0: entered promiscuous mode [ 230.960293][ T9278] hsr_slave_1: entered promiscuous mode [ 230.961057][ T9278] debugfs: 'hsr0' already exists in 'hsr' [ 230.961077][ T9278] Cannot create hsr debugfs directory [ 231.226260][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 231.459315][ T9424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.704288][ T54] Bluetooth: hci3: command tx timeout [ 231.869202][ T9278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.888265][ T9278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.891926][ T9278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.928004][ T9278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.929035][ T9278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.955671][ T9278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.956754][ T9278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.981495][ T9278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.158318][ T9278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.215893][ T9278] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.246331][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.246443][ T9201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.303124][ T9458] overlayfs: failed to resolve './cgroup': -2 [ 232.320050][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.320168][ T9201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.054339][ T9482] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1307'. [ 233.054407][ T9482] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1307'. [ 233.054424][ T9482] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 233.133375][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1308'. [ 233.392174][ T9492] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1309'. [ 233.412466][ T9492] netlink: 'syz.1.1309': attribute type 2 has an invalid length. [ 233.412492][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1309'. [ 233.472082][ T9492] : entered promiscuous mode [ 233.635712][ T9278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.783873][ T54] Bluetooth: hci3: command tx timeout [ 233.833950][ T9278] veth0_vlan: entered promiscuous mode [ 233.858470][ T9278] veth1_vlan: entered promiscuous mode [ 233.927292][ T9278] veth0_macvtap: entered promiscuous mode [ 233.950908][ T9278] veth1_macvtap: entered promiscuous mode [ 234.000333][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.032239][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.274953][ T9180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.275008][ T9180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.494235][ T9199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.547856][ T9199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.658730][ T9199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.658753][ T9199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.706462][ T9182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.706486][ T9182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.976473][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 235.006841][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 235.086637][ T9543] netlink: 'syz.3.1319': attribute type 2 has an invalid length. [ 235.086664][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1319'. [ 235.115894][ T9543] : entered promiscuous mode [ 235.253250][ T9552] netlink: 'syz.0.1321': attribute type 9 has an invalid length. [ 235.657436][ T9564] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 235.699869][ T9568] TCP: TCP_TX_DELAY enabled [ 235.864023][ T54] Bluetooth: hci3: command tx timeout [ 236.084760][ T9584] netlink: 'syz.2.1329': attribute type 2 has an invalid length. [ 236.084788][ T9584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1329'. [ 236.123344][ T9584] : entered promiscuous mode [ 236.461782][ T9598] FAULT_INJECTION: forcing a failure. [ 236.461782][ T9598] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 236.461825][ T9598] CPU: 0 UID: 0 PID: 9598 Comm: syz.3.1334 Not tainted syzkaller #0 PREEMPT(full) [ 236.461858][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.461874][ T9598] Call Trace: [ 236.461885][ T9598] [ 236.461896][ T9598] dump_stack_lvl+0xe8/0x150 [ 236.461931][ T9598] should_fail_ex+0x3eb/0x540 [ 236.461971][ T9598] set_fd_set+0x3a/0xa0 [ 236.461998][ T9598] core_sys_select+0x9f7/0xb40 [ 236.462042][ T9598] ? __pfx_core_sys_select+0x10/0x10 [ 236.462096][ T9598] ? __pfx_set_user_sigmask+0x10/0x10 [ 236.462121][ T9598] ? __fget_files+0x3a2/0x420 [ 236.462145][ T9598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.462183][ T9598] __se_sys_pselect6+0x267/0x320 [ 236.462220][ T9598] ? __pfx___se_sys_pselect6+0x10/0x10 [ 236.462257][ T9598] ? __x64_sys_pselect6+0x21/0xf0 [ 236.462287][ T9598] do_syscall_64+0x166/0x520 [ 236.462311][ T9598] ? trace_irq_disable+0x3b/0x140 [ 236.462335][ T9598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.462362][ T9598] ? clear_bhb_loop+0x70/0xc0 [ 236.462391][ T9598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.462418][ T9598] RIP: 0033:0x7ff1ddb9e199 [ 236.462442][ T9598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.462466][ T9598] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 236.462494][ T9598] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 236.462515][ T9598] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.462532][ T9598] RBP: 00007ff1ddc35888 R08: 0000200000000280 R09: 0000000000000000 [ 236.462550][ T9598] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 236.462567][ T9598] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 236.462606][ T9598] [ 236.973580][ T9614] netlink: 'syz.0.1339': attribute type 2 has an invalid length. [ 236.973607][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1339'. [ 237.054162][ T9614] : entered promiscuous mode [ 237.073434][ T9618] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 238.003566][ T9670] FAULT_INJECTION: forcing a failure. [ 238.003566][ T9670] name failslab, interval 1, probability 0, space 0, times 0 [ 238.003598][ T9670] CPU: 1 UID: 0 PID: 9670 Comm: syz.3.1350 Not tainted syzkaller #0 PREEMPT(full) [ 238.003626][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.003640][ T9670] Call Trace: [ 238.003649][ T9670] [ 238.003658][ T9670] dump_stack_lvl+0xe8/0x150 [ 238.003688][ T9670] should_fail_ex+0x3eb/0x540 [ 238.003715][ T9670] should_failslab+0xa8/0x100 [ 238.003743][ T9670] __kmalloc_cache_noprof+0x9e/0x600 [ 238.003766][ T9670] ? rcu_is_watching+0x16/0xb0 [ 238.003785][ T9670] ? vhost_task_create+0x123/0x380 [ 238.003805][ T9670] ? vhost_task_create+0x123/0x380 [ 238.003833][ T9670] vhost_task_create+0x123/0x380 [ 238.003854][ T9670] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 238.003878][ T9670] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 238.003904][ T9670] ? __pfx_vhost_task_create+0x10/0x10 [ 238.003923][ T9670] ? register_lock_class+0x31/0x2e0 [ 238.003954][ T9670] ? __pfx_vhost_task_fn+0x10/0x10 [ 238.003986][ T9670] ? kasan_quarantine_put+0xbb/0x1f0 [ 238.004017][ T9670] kvm_mmu_post_init_vm+0x147/0x2b0 [ 238.004044][ T9670] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 238.004076][ T9670] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 238.004105][ T9670] kvm_vcpu_ioctl+0xa61/0xfd0 [ 238.004133][ T9670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 238.004179][ T9670] ? __fget_files+0x2a/0x420 [ 238.004203][ T9670] ? __fget_files+0x2a/0x420 [ 238.004224][ T9670] ? __fget_files+0x2a/0x420 [ 238.004249][ T9670] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.004271][ T9670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 238.004301][ T9670] __se_sys_ioctl+0xfc/0x170 [ 238.004326][ T9670] do_syscall_64+0x166/0x520 [ 238.004348][ T9670] ? trace_irq_disable+0x3b/0x140 [ 238.004372][ T9670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.004395][ T9670] ? clear_bhb_loop+0x70/0xc0 [ 238.004419][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.004441][ T9670] RIP: 0033:0x7ff1ddb9e199 [ 238.004461][ T9670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.004479][ T9670] RSP: 002b:00007ff1deadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.004502][ T9670] RAX: ffffffffffffffda RBX: 00007ff1dde26090 RCX: 00007ff1ddb9e199 [ 238.004518][ T9670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 238.004531][ T9670] RBP: 00007ff1deadc090 R08: 0000000000000000 R09: 0000000000000000 [ 238.004545][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.004557][ T9670] R13: 00007ff1dde26128 R14: 00007ff1dde26090 R15: 00007fffd2225178 [ 238.004592][ T9670] [ 238.336463][ T9673] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1351'. [ 238.592845][ T9681] FAULT_INJECTION: forcing a failure. [ 238.592845][ T9681] name failslab, interval 1, probability 0, space 0, times 0 [ 238.592886][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.3.1353 Not tainted syzkaller #0 PREEMPT(full) [ 238.592923][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.592940][ T9681] Call Trace: [ 238.592949][ T9681] [ 238.592961][ T9681] dump_stack_lvl+0xe8/0x150 [ 238.592995][ T9681] should_fail_ex+0x3eb/0x540 [ 238.593027][ T9681] should_failslab+0xa8/0x100 [ 238.593056][ T9681] __kmalloc_noprof+0xf9/0x710 [ 238.593082][ T9681] ? __kmalloc_noprof+0x1a6/0x710 [ 238.593105][ T9681] ? group_cpus_evenly+0x2cf/0x5e0 [ 238.593130][ T9681] ? group_cpus_evenly+0x2cf/0x5e0 [ 238.593163][ T9681] group_cpus_evenly+0x2cf/0x5e0 [ 238.593193][ T9681] ? __pfx_group_cpus_evenly+0x10/0x10 [ 238.593233][ T9681] blk_mq_map_queues+0xb1/0x490 [ 238.593260][ T9681] ? trace_kmalloc+0x2a/0xf0 [ 238.593288][ T9681] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 238.593315][ T9681] ? __kmalloc_node_noprof+0x2eb/0x720 [ 238.593339][ T9681] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 238.593365][ T9681] ? blk_mq_update_queue_map+0x383/0x450 [ 238.593400][ T9681] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 238.593442][ T9681] loop_add+0x436/0xb40 [ 238.593467][ T9681] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 238.593499][ T9681] ? __pfx_loop_add+0x10/0x10 [ 238.593566][ T9681] loop_control_ioctl+0x12b/0x5a0 [ 238.593594][ T9681] ? __fget_files+0x2a/0x420 [ 238.593619][ T9681] ? __pfx_loop_control_ioctl+0x10/0x10 [ 238.593650][ T9681] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.593677][ T9681] ? __pfx_loop_control_ioctl+0x10/0x10 [ 238.593703][ T9681] __se_sys_ioctl+0xfc/0x170 [ 238.593732][ T9681] do_syscall_64+0x166/0x520 [ 238.593763][ T9681] ? trace_irq_disable+0x3b/0x140 [ 238.593787][ T9681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.593817][ T9681] ? clear_bhb_loop+0x70/0xc0 [ 238.593845][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.593872][ T9681] RIP: 0033:0x7ff1ddb9e199 [ 238.593897][ T9681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.593918][ T9681] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.593948][ T9681] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 238.593968][ T9681] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 238.593986][ T9681] RBP: 00007ff1ddc35888 R08: 0000000000000000 R09: 0000000000000000 [ 238.594003][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.594018][ T9681] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 238.594057][ T9681] [ 239.113620][ T9687] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 239.113620][ T9687] [ 239.116385][ T9687] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 239.150017][ T9687] CIFS: Attempting to mount //127.0.0.1/share [ 239.199157][ T9692] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 239.826408][ T9705] FAULT_INJECTION: forcing a failure. [ 239.826408][ T9705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.826440][ T9705] CPU: 0 UID: 0 PID: 9705 Comm: syz.3.1359 Not tainted syzkaller #0 PREEMPT(full) [ 239.826464][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.826477][ T9705] Call Trace: [ 239.826485][ T9705] [ 239.826495][ T9705] dump_stack_lvl+0xe8/0x150 [ 239.826524][ T9705] should_fail_ex+0x3eb/0x540 [ 239.826552][ T9705] _copy_from_user+0x2d/0xb0 [ 239.826575][ T9705] video_usercopy+0x359/0x1430 [ 239.826607][ T9705] ? __pfx___video_do_ioctl+0x10/0x10 [ 239.826632][ T9705] ? __pfx_video_usercopy+0x10/0x10 [ 239.826671][ T9705] ? __fget_files+0x2a/0x420 [ 239.826693][ T9705] ? __fget_files+0x2a/0x420 [ 239.826716][ T9705] v4l2_ioctl+0x18d/0x1e0 [ 239.826740][ T9705] ? __pfx_v4l2_ioctl+0x10/0x10 [ 239.826762][ T9705] __se_sys_ioctl+0xfc/0x170 [ 239.826787][ T9705] do_syscall_64+0x166/0x520 [ 239.826807][ T9705] ? trace_irq_disable+0x3b/0x140 [ 239.826826][ T9705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.826850][ T9705] ? clear_bhb_loop+0x70/0xc0 [ 239.826878][ T9705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.826900][ T9705] RIP: 0033:0x7ff1ddb9e199 [ 239.826920][ T9705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.826938][ T9705] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.826961][ T9705] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 239.826978][ T9705] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000003 [ 239.826992][ T9705] RBP: 00007ff1deafd090 R08: 0000000000000000 R09: 0000000000000000 [ 239.827006][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.827019][ T9705] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 239.827062][ T9705] [ 240.072388][ T9707] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1360'. [ 240.404330][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1365'. [ 240.548716][ T9727] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 240.698439][ T9733] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1370'. [ 241.108920][ T9749] overlayfs: failed to resolve '/G+5ƒÉwdÒâ 10 [ 242.662351][ T54] Bluetooth: unknown link type 128 [ 242.969694][ T9789] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1392'. [ 242.971207][ T9789] netlink: 'syz.2.1392': attribute type 2 has an invalid length. [ 242.971228][ T9789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1392'. [ 243.434059][ T5687] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 243.604895][ T5687] usb 4-1: New USB device found: idVendor=0ccd, idProduct=0080, bcdDevice=1.00 [ 243.607791][ T5687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.609927][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.609954][ T5687] usb 4-1: Product: syz [ 243.609970][ T5687] usb 4-1: Manufacturer: syz [ 243.609986][ T5687] usb 4-1: SerialNumber: syz [ 243.838287][ T5687] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 243.838323][ T5687] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 243.940039][ T9816] fuse: fd is not a fuse device [ 244.059098][ T5687] kernel read not supported for file /asound/seq/timer (pid: 5687 comm: kworker/0:5) [ 244.097304][ T5687] usb 4-1: USB disconnect, device number 13 [ 244.257232][ T9821] fuse: fd is not a fuse device [ 244.656490][ T54] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 244.680860][ T9831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.865379][ T54] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 245.323861][ T9841] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 246.319987][ T9856] FAULT_INJECTION: forcing a failure. [ 246.319987][ T9856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.320021][ T9856] CPU: 1 UID: 0 PID: 9856 Comm: syz.3.1414 Not tainted syzkaller #0 PREEMPT(full) [ 246.320046][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.320058][ T9856] Call Trace: [ 246.320068][ T9856] [ 246.320077][ T9856] dump_stack_lvl+0xe8/0x150 [ 246.320108][ T9856] should_fail_ex+0x3eb/0x540 [ 246.320137][ T9856] _copy_from_user+0x2d/0xb0 [ 246.320160][ T9856] msr_io+0xab/0x8b0 [ 246.320186][ T9856] ? lock_acquire+0x115/0x350 [ 246.320206][ T9856] ? __pfx_do_set_msr+0x10/0x10 [ 246.320229][ T9856] ? __pfx_msr_io+0x10/0x10 [ 246.320255][ T9856] ? __srcu_check_read_flavor+0x13d/0x2e0 [ 246.320282][ T9856] ? kvm_set_msrs+0x68/0x100 [ 246.320301][ T9856] kvm_set_msrs+0x9c/0x100 [ 246.320326][ T9856] kvm_arch_vcpu_ioctl+0x712/0x23a0 [ 246.320353][ T9856] ? lock_acquire+0x115/0x350 [ 246.320374][ T9856] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 246.320403][ T9856] ? lock_acquire+0x115/0x350 [ 246.320435][ T9856] ? is_bpf_text_address+0x26/0x2b0 [ 246.320474][ T9856] ? is_bpf_text_address+0x292/0x2b0 [ 246.320495][ T9856] ? is_bpf_text_address+0x26/0x2b0 [ 246.320520][ T9856] ? kernel_text_address+0xa5/0xe0 [ 246.320544][ T9856] ? __kernel_text_address+0xd/0x30 [ 246.320564][ T9856] ? unwind_get_return_address+0x4d/0x90 [ 246.320587][ T9856] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 246.320610][ T9856] ? arch_stack_walk+0xfb/0x150 [ 246.320646][ T9856] ? stack_trace_save+0xa9/0x100 [ 246.320667][ T9856] ? __pfx_stack_trace_save+0x10/0x10 [ 246.320687][ T9856] ? kasan_save_track+0x4f/0x80 [ 246.320713][ T9856] ? stack_depot_save_flags+0x33/0x7f0 [ 246.320740][ T9856] ? __lock_acquire+0x747/0x2de0 [ 246.320765][ T9856] ? kfree+0x1c5/0x650 [ 246.320785][ T9856] ? __se_sys_ioctl+0x47/0x170 [ 246.320804][ T9856] ? do_syscall_64+0x166/0x520 [ 246.320824][ T9856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.320867][ T9856] ? __mutex_trylock_common+0x15f/0x270 [ 246.320894][ T9856] ? __pfx___mutex_trylock_common+0x10/0x10 [ 246.320920][ T9856] ? rcu_is_watching+0x16/0xb0 [ 246.320942][ T9856] ? trace_contention_end+0x3d/0x140 [ 246.320965][ T9856] ? __mutex_lock+0x305/0x15a0 [ 246.320992][ T9856] ? kasan_quarantine_put+0xbb/0x1f0 [ 246.321019][ T9856] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 246.321043][ T9856] ? __pfx___mutex_lock+0x10/0x10 [ 246.321065][ T9856] ? tomoyo_path_number_perm+0x219/0x5f0 [ 246.321093][ T9856] ? do_vfs_ioctl+0x116f/0x1530 [ 246.321117][ T9856] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.321144][ T9856] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 246.321173][ T9856] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.321218][ T9856] ? __fget_files+0x2a/0x420 [ 246.321242][ T9856] ? __fget_files+0x2a/0x420 [ 246.321263][ T9856] ? __fget_files+0x2a/0x420 [ 246.321288][ T9856] ? bpf_lsm_file_ioctl+0x9/0x20 [ 246.321310][ T9856] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.321332][ T9856] __se_sys_ioctl+0xfc/0x170 [ 246.321368][ T9856] do_syscall_64+0x166/0x520 [ 246.321388][ T9856] ? trace_irq_disable+0x3b/0x140 [ 246.321408][ T9856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.321431][ T9856] ? clear_bhb_loop+0x70/0xc0 [ 246.321455][ T9856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.321486][ T9856] RIP: 0033:0x7ff1ddb9e199 [ 246.321515][ T9856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.321533][ T9856] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.321558][ T9856] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 246.321575][ T9856] RDX: 0000200000000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 246.321590][ T9856] RBP: 00007ff1deafd090 R08: 0000000000000000 R09: 0000000000000000 [ 246.321603][ T9856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.321616][ T9856] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 246.321652][ T9856] [ 246.878137][ T9864] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1417'. [ 246.879288][ T9864] netlink: 'syz.0.1417': attribute type 2 has an invalid length. [ 246.879308][ T9864] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1417'. [ 246.918960][ T9863] FAULT_INJECTION: forcing a failure. [ 246.918960][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 246.918991][ T9863] CPU: 1 UID: 0 PID: 9863 Comm: syz.3.1416 Not tainted syzkaller #0 PREEMPT(full) [ 246.919016][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.919029][ T9863] Call Trace: [ 246.919038][ T9863] [ 246.919047][ T9863] dump_stack_lvl+0xe8/0x150 [ 246.919076][ T9863] should_fail_ex+0x3eb/0x540 [ 246.919105][ T9863] should_failslab+0xa8/0x100 [ 246.919128][ T9863] __kmalloc_cache_noprof+0x9e/0x600 [ 246.919152][ T9863] ? rcu_is_watching+0x16/0xb0 [ 246.919172][ T9863] ? vhost_task_create+0x123/0x380 [ 246.919192][ T9863] ? vhost_task_create+0x123/0x380 [ 246.919225][ T9863] vhost_task_create+0x123/0x380 [ 246.919247][ T9863] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 246.919270][ T9863] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 246.919296][ T9863] ? __pfx_vhost_task_create+0x10/0x10 [ 246.919315][ T9863] ? register_lock_class+0x31/0x2e0 [ 246.919347][ T9863] ? __pfx_vhost_task_fn+0x10/0x10 [ 246.919378][ T9863] ? kasan_quarantine_put+0xbb/0x1f0 [ 246.919410][ T9863] kvm_mmu_post_init_vm+0x147/0x2b0 [ 246.919444][ T9863] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 246.919476][ T9863] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 246.919506][ T9863] kvm_vcpu_ioctl+0xa61/0xfd0 [ 246.919534][ T9863] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.919579][ T9863] ? __fget_files+0x2a/0x420 [ 246.919604][ T9863] ? __fget_files+0x2a/0x420 [ 246.919625][ T9863] ? __fget_files+0x2a/0x420 [ 246.919650][ T9863] ? bpf_lsm_file_ioctl+0x9/0x20 [ 246.919672][ T9863] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 246.919694][ T9863] __se_sys_ioctl+0xfc/0x170 [ 246.919719][ T9863] do_syscall_64+0x166/0x520 [ 246.919739][ T9863] ? trace_irq_disable+0x3b/0x140 [ 246.919759][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.919782][ T9863] ? clear_bhb_loop+0x70/0xc0 [ 246.919807][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.919830][ T9863] RIP: 0033:0x7ff1ddb9e199 [ 246.919849][ T9863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.919866][ T9863] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.919889][ T9863] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 246.919904][ T9863] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 246.919917][ T9863] RBP: 00007ff1deafd090 R08: 0000000000000000 R09: 0000000000000000 [ 246.919932][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.919944][ T9863] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 246.919980][ T9863] [ 247.653900][ T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 247.775340][ T9888] netlink: 'syz.0.1426': attribute type 2 has an invalid length. [ 247.775359][ T9888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1426'. [ 247.804019][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 247.804803][ T27] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 247.804852][ T27] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 247.806270][ T27] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 247.806306][ T27] usb 4-1: can't read configurations, error -61 [ 247.915963][ T9892] fuse: fd is not a fuse device [ 247.934008][ T27] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 247.943239][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 248.083905][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 248.084786][ T27] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 248.084828][ T27] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 248.086407][ T27] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 248.086442][ T27] usb 4-1: can't read configurations, error -61 [ 248.086750][ T27] usb usb4-port1: attempt power cycle [ 248.423936][ T27] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 248.444664][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 248.445292][ T27] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 248.445334][ T27] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 248.446785][ T27] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 248.446821][ T27] usb 4-1: can't read configurations, error -61 [ 248.573967][ T27] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 248.580550][ T9911] netlink: 'syz.1.1435': attribute type 2 has an invalid length. [ 248.580566][ T9911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1435'. [ 248.610758][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 248.611480][ T27] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 248.611522][ T27] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 248.612929][ T27] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 248.612965][ T27] usb 4-1: can't read configurations, error -61 [ 248.613509][ T27] usb usb4-port1: unable to enumerate USB device [ 248.948988][ T54] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 249.457973][ T54] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 249.572804][ T9935] tmpfs: Bad value for 'nr_inodes' [ 249.710517][ T9937] netlink: 'syz.0.1444': attribute type 2 has an invalid length. [ 249.710536][ T9937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1444'. [ 250.032332][ T9942] fuse: fd is not a fuse device [ 250.833840][ T27] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 250.993849][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 250.995824][ T27] usb 4-1: New USB device found: idVendor=0644, idProduct=8021, bcdDevice=0.40 [ 250.996976][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.997000][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.038407][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.038438][ T27] usb 4-1: Product: syz [ 251.038455][ T27] usb 4-1: Manufacturer: syz [ 251.038472][ T27] usb 4-1: SerialNumber: syz [ 251.080855][ T27] hub 4-1:1.0: bad descriptor, ignoring hub [ 251.080886][ T27] hub 4-1:1.0: probe with driver hub failed with error -5 [ 251.394126][ T27] usb 4-1: USB disconnect, device number 18 [ 251.491112][ T9981] netlink: 'syz.2.1453': attribute type 2 has an invalid length. [ 251.491138][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1453'. [ 251.683092][ T9987] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 251.716297][ T9987] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 252.286943][T10017] netlink: 'syz.2.1462': attribute type 2 has an invalid length. [ 252.286968][T10017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1462'. [ 252.528961][T10028] netlink: 'syz.2.1465': attribute type 10 has an invalid length. [ 252.607637][T10028] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 252.636150][T10028] team0: Port device wlan0 added [ 253.516499][ T33] audit: type=1400 audit(1791475215.014:3): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":_mnt/sys/net/ipv4/conf/lo/forwarding" pid=10059 comm="syz.3.1470" [ 253.873356][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1474'. [ 254.198587][T10089] fuse: fd is not a fuse device [ 254.843238][ T27] wiimote 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 254.857444][ T27] wiimote 0005:057E:0330.0001: New device registered [ 255.019634][T10125] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 255.556450][T10112] wiimote 0005:057E:0330.0001: Device removed [ 255.866505][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.866666][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.867495][ T5716] wiimote 0005:057E:0330.0001: detected device: Nintendo Wii Remote Plus (Gen 2) [ 255.920785][ T5716] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input19 [ 255.946395][ T5716] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input20 [ 255.984110][ T5716] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input18 [ 256.650450][T10161] fuse: fd is not a fuse device [ 256.652797][T10161] cgroup: Unknown subsys name 'cpuset' [ 258.834172][T10225] overlayfs: failed to clone upperpath [ 258.970166][T10227] overlayfs: failed to clone upperpath [ 259.573015][T10239] 9pnet_virtio: no channels available for device 127.0.0.1 [ 260.155339][T10254] netlink: 'syz.2.1545': attribute type 2 has an invalid length. [ 260.155367][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1545'. [ 260.684931][T10279] netlink: 'syz.2.1556': attribute type 2 has an invalid length. [ 260.684953][T10279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1556'. [ 260.857874][T10288] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 260.968795][T10288] team0: Port device wlan0 removed [ 261.162379][T10302] netlink: 'syz.0.1565': attribute type 2 has an invalid length. [ 261.162406][T10302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1565'. [ 261.420815][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.420840][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.448560][T10314] F2FS-fs: Conflicting test_dummy_encryption options [ 261.944395][T10332] netlink: 'syz.0.1576': attribute type 2 has an invalid length. [ 261.944414][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1576'. [ 262.333260][T10353] netlink: 'syz.0.1586': attribute type 2 has an invalid length. [ 262.333286][T10353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1586'. [ 262.791975][T10376] netlink: 'syz.3.1595': attribute type 2 has an invalid length. [ 262.792004][T10376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1595'. [ 263.153945][ T5716] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 263.314729][ T5716] usb 4-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 263.316009][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.318833][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.318863][ T5716] usb 4-1: Product: syz [ 263.318885][ T5716] usb 4-1: Manufacturer: syz [ 263.318897][ T5716] usb 4-1: SerialNumber: syz [ 263.370179][ T5716] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 263.515569][T10392] schedule_timeout: wrong timeout value fffffffffffffed4 [ 263.515597][T10392] CPU: 0 UID: 0 PID: 10392 Comm: syz.2.1602 Not tainted syzkaller #0 PREEMPT(full) [ 263.515635][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.515649][T10392] Call Trace: [ 263.515658][T10392] [ 263.515668][T10392] dump_stack_lvl+0xe8/0x150 [ 263.515697][T10392] schedule_timeout+0x22e/0x2c0 [ 263.515721][T10392] ? __pfx_schedule_timeout+0x10/0x10 [ 263.515783][T10392] ? sk_wait_data+0x20e/0x4d0 [ 263.515810][T10392] wait_woken+0xbc/0x1a0 [ 263.515831][T10392] ? wait_woken+0x39/0x1a0 [ 263.515854][T10392] sk_wait_data+0x29b/0x4d0 [ 263.515889][T10392] ? __pfx_sk_wait_data+0x10/0x10 [ 263.515905][T10392] ? __pfx_woken_wake_function+0x10/0x10 [ 263.515922][T10392] ? smc_accept+0x6f3/0xa20 [ 263.515957][T10392] ? __local_bh_enable_ip+0xd6/0x140 [ 263.515986][T10392] smc_accept+0x79b/0xa20 [ 263.516014][T10392] ? __pfx_smc_accept+0x10/0x10 [ 263.516037][T10392] ? __pfx_default_wake_function+0x10/0x10 [ 263.516055][T10392] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.516071][T10392] ? inode_init_always_gfp+0x994/0xd30 [ 263.516100][T10392] ? apparmor_socket_accept+0x12f/0x200 [ 263.516134][T10392] do_accept+0x501/0x730 [ 263.516162][T10392] ? __pfx_do_accept+0x10/0x10 [ 263.516205][T10392] __sys_accept4+0x135/0x230 [ 263.516223][T10392] ? __pfx___sys_accept4+0x10/0x10 [ 263.516246][T10392] __x64_sys_accept4+0x9a/0xb0 [ 263.516283][T10392] do_syscall_64+0x166/0x520 [ 263.516303][T10392] ? trace_irq_disable+0x3b/0x140 [ 263.516323][T10392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.516349][T10392] ? clear_bhb_loop+0x70/0xc0 [ 263.516366][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.516383][T10392] RIP: 0033:0x7f6c4b59e199 [ 263.516399][T10392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.516429][T10392] RSP: 002b:00007f6c4c4d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 263.516454][T10392] RAX: ffffffffffffffda RBX: 00007f6c4b825fa0 RCX: 00007f6c4b59e199 [ 263.516471][T10392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 263.516484][T10392] RBP: 00007f6c4b635888 R08: 0000000000000000 R09: 0000000000000000 [ 263.516503][T10392] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 263.516513][T10392] R13: 00007f6c4b826038 R14: 00007f6c4b825fa0 R15: 00007ffeb905fac8 [ 263.516540][T10392] [ 263.880140][T10401] fuse: fd is not a fuse device [ 263.961365][T10403] fuse: fd is not a fuse device [ 263.990870][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.992208][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.018803][ T5716] gspca_mr97310a: reg read [21] error -71 [ 264.018915][ T5716] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 264.038694][ T5716] usb 4-1: USB disconnect, device number 19 [ 264.165208][ T33] audit: type=1326 audit(1791475225.654:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10406 comm="syz.1.1609" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb6019e199 code=0x0 [ 264.328873][T10424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.752042][T10438] FAULT_INJECTION: forcing a failure. [ 264.752042][T10438] name failslab, interval 1, probability 0, space 0, times 0 [ 264.752067][T10438] CPU: 1 UID: 0 PID: 10438 Comm: syz.3.1616 Not tainted syzkaller #0 PREEMPT(full) [ 264.752085][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.752095][T10438] Call Trace: [ 264.752101][T10438] [ 264.752107][T10438] dump_stack_lvl+0xe8/0x150 [ 264.752157][T10438] should_fail_ex+0x3eb/0x540 [ 264.752184][T10438] should_failslab+0xa8/0x100 [ 264.752208][T10438] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 264.752234][T10438] ? __d_alloc+0x37/0x7f0 [ 264.752257][T10438] ? __d_alloc+0x37/0x7f0 [ 264.752276][T10438] __d_alloc+0x37/0x7f0 [ 264.752294][T10438] __d_alloc_parallel+0xde/0x1700 [ 264.752325][T10438] ? __pfx___d_alloc_parallel+0x10/0x10 [ 264.752340][T10438] ? lock_acquire+0x115/0x350 [ 264.752368][T10438] __lookup_slow+0x82/0x2f0 [ 264.752387][T10438] lookup_slow+0x59/0x80 [ 264.752402][T10438] path_lookupat+0x3f5/0x8c0 [ 264.752436][T10438] filename_lookup+0x265/0x5d0 [ 264.752458][T10438] ? __pfx_filename_lookup+0x10/0x10 [ 264.752502][T10438] vfs_statx+0xfc/0x200 [ 264.752519][T10438] ? __pfx_vfs_statx+0x10/0x10 [ 264.752532][T10438] ? strncpy_from_user+0x150/0x2c0 [ 264.752551][T10438] ? do_getname+0x151/0x250 [ 264.752568][T10438] vfs_fstatat+0x11b/0x170 [ 264.752584][T10438] __se_sys_newfstatat+0x118/0x3a0 [ 264.752603][T10438] ? __pfx___se_sys_newfstatat+0x10/0x10 [ 264.752621][T10438] ? ksys_write+0x1e6/0x270 [ 264.752638][T10438] ? __mutex_unlock_slowpath+0x731/0x900 [ 264.752656][T10438] ? __fget_files+0x2a/0x420 [ 264.752670][T10438] ? __fget_files+0x3a2/0x420 [ 264.752700][T10438] ? __pfx_ksys_write+0x10/0x10 [ 264.752723][T10438] do_syscall_64+0x166/0x520 [ 264.752737][T10438] ? trace_irq_disable+0x3b/0x140 [ 264.752750][T10438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.752766][T10438] ? clear_bhb_loop+0x70/0xc0 [ 264.752783][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.752800][T10438] RIP: 0033:0x7ff1ddb9e199 [ 264.752816][T10438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.752829][T10438] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 264.752846][T10438] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 264.752858][T10438] RDX: 0000200000000500 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 264.752870][T10438] RBP: 00007ff1deafd090 R08: 0000000000000000 R09: 0000000000000000 [ 264.752880][T10438] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 264.752889][T10438] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 264.752914][T10438] [ 265.276751][T10451] overlayfs: failed to clone upperpath [ 265.310651][T10455] fuse: fd is not a fuse device [ 265.324938][ T27] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 265.493865][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 265.495751][ T27] usb 4-1: New USB device found: idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 265.496943][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.499891][ T27] usb 4-1: config 0 descriptor?? [ 265.536958][ T27] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 266.408577][T10484] fuse: fd is not a fuse device [ 266.716723][T10507] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1642'. [ 266.718428][T10507] overlayfs: failed to clone upperpath [ 266.835414][T10512] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 267.033085][T10521] overlayfs: failed to clone upperpath [ 267.456655][T10531] overlayfs: failed to clone upperpath [ 267.503511][T10533] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 268.207517][ T5687] usb 4-1: USB disconnect, device number 20 [ 268.653277][T10560] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 269.135379][T10576] fuse: fd is not a fuse device [ 269.550784][T10583] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 269.567690][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 269.567787][T10583] bridge_slave_1: left allmulticast mode [ 269.567811][T10583] bridge_slave_1: left promiscuous mode [ 269.569912][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.607699][T10582] FAULT_INJECTION: forcing a failure. [ 269.607699][T10582] name failslab, interval 1, probability 0, space 0, times 0 [ 269.607733][T10582] CPU: 1 UID: 0 PID: 10582 Comm: syz.3.1670 Not tainted syzkaller #0 PREEMPT(full) [ 269.607761][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.607776][T10582] Call Trace: [ 269.607785][T10582] [ 269.607795][T10582] dump_stack_lvl+0xe8/0x150 [ 269.607828][T10582] should_fail_ex+0x3eb/0x540 [ 269.607856][T10582] should_failslab+0xa8/0x100 [ 269.607883][T10582] __kmalloc_cache_noprof+0x9e/0x600 [ 269.607907][T10582] ? __kasan_kmalloc+0x93/0xb0 [ 269.607929][T10582] ? proc_init_fs_context+0x55/0x540 [ 269.607951][T10582] ? proc_init_fs_context+0x55/0x540 [ 269.607981][T10582] proc_init_fs_context+0x55/0x540 [ 269.608010][T10582] alloc_fs_context+0x99e/0xd00 [ 269.608042][T10582] do_new_mount+0x177/0xb00 [ 269.608073][T10582] ? __pfx_do_new_mount+0x10/0x10 [ 269.608099][T10582] ? ns_capable+0x84/0xe0 [ 269.608123][T10582] ? path_mount+0x647/0x1050 [ 269.608149][T10582] ? user_path_at+0xd4/0x160 [ 269.608175][T10582] __se_sys_mount+0x31d/0x420 [ 269.608208][T10582] ? __pfx___se_sys_mount+0x10/0x10 [ 269.608237][T10582] ? __x64_sys_mount+0x20/0xc0 [ 269.608263][T10582] do_syscall_64+0x166/0x520 [ 269.608285][T10582] ? trace_irq_disable+0x3b/0x140 [ 269.608306][T10582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.608331][T10582] ? clear_bhb_loop+0x70/0xc0 [ 269.608356][T10582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.608380][T10582] RIP: 0033:0x7ff1ddb9e199 [ 269.608403][T10582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.608423][T10582] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.608448][T10582] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 269.608466][T10582] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 269.608483][T10582] RBP: 00007ff1ddc35888 R08: 0000000000000000 R09: 0000000000000000 [ 269.608497][T10582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.608512][T10582] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 269.608549][T10582] [ 269.611856][T10583] bridge_slave_0: left allmulticast mode [ 269.611887][T10583] bridge_slave_0: left promiscuous mode [ 269.639185][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.890588][T10585] 0x000000000000-0x000000010000 : "" [ 269.955714][T10585] ftl_cs: FTL header not found. [ 270.309283][T10591] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 270.827327][T10607] FAULT_INJECTION: forcing a failure. [ 270.827327][T10607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.827362][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.3.1677 Not tainted syzkaller #0 PREEMPT(full) [ 270.827388][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.827402][T10607] Call Trace: [ 270.827410][T10607] [ 270.827424][T10607] dump_stack_lvl+0xe8/0x150 [ 270.827454][T10607] should_fail_ex+0x3eb/0x540 [ 270.827483][T10607] _copy_to_user+0x31/0xb0 [ 270.827508][T10607] simple_read_from_buffer+0xe1/0x170 [ 270.827538][T10607] proc_fail_nth_read+0x1bb/0x230 [ 270.827564][T10607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.827592][T10607] ? rw_verify_area+0x24a/0x4c0 [ 270.827616][T10607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.827639][T10607] vfs_read+0x213/0xa80 [ 270.827666][T10607] ? __pfx___mutex_lock+0x10/0x10 [ 270.827690][T10607] ? __pfx_vfs_read+0x10/0x10 [ 270.827714][T10607] ? __fget_files+0x2a/0x420 [ 270.827734][T10607] ? __fget_files+0x3a2/0x420 [ 270.827754][T10607] ? __fget_files+0x2a/0x420 [ 270.827779][T10607] ? fdget+0x1ac/0x250 [ 270.827807][T10607] ksys_read+0x150/0x270 [ 270.827833][T10607] ? __pfx_ksys_read+0x10/0x10 [ 270.827867][T10607] do_syscall_64+0x166/0x520 [ 270.827888][T10607] ? trace_irq_disable+0x3b/0x140 [ 270.827908][T10607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.827931][T10607] ? clear_bhb_loop+0x70/0xc0 [ 270.827964][T10607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.827992][T10607] RIP: 0033:0x7ff1ddb5e9ce [ 270.828012][T10607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 270.828031][T10607] RSP: 002b:00007ff1deafcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.828055][T10607] RAX: ffffffffffffffda RBX: 00007ff1deafd6c0 RCX: 00007ff1ddb5e9ce [ 270.828072][T10607] RDX: 000000000000000f RSI: 00007ff1deafd0a0 RDI: 0000000000000004 [ 270.828086][T10607] RBP: 00007ff1deafd090 R08: 0000000000000000 R09: 0000000000000000 [ 270.828100][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.828113][T10607] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 270.828150][T10607] [ 271.128730][ T54] Bluetooth: hci0: unexpected event for opcode 0x202d [ 271.131255][T10609] jffs2: notice: (10609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.203922][T10617] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.442472][ T54] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 271.459099][T10630] [ 271.461496][T10630] ====================================================== [ 271.468550][T10630] WARNING: possible circular locking dependency detected [ 271.475642][T10630] syzkaller #0 Not tainted [ 271.480090][T10630] ------------------------------------------------------ [ 271.487141][T10630] syz.3.1682/10630 is trying to acquire lock: [ 271.493250][T10630] ffff888024a58460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 271.502009][T10630] [ 271.502009][T10630] but task is already holding lock: [ 271.509423][T10630] ffff8880646ef2e0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 271.519214][T10630] [ 271.519214][T10630] which lock already depends on the new lock. [ 271.519214][T10630] [ 271.529674][T10630] [ 271.529674][T10630] the existing dependency chain (in reverse order) is: [ 271.538808][T10630] [ 271.538808][T10630] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 271.546666][T10630] __d_alloc_parallel+0xc32/0x1700 [ 271.552331][T10630] __lookup_slow+0x82/0x2f0 [ 271.557379][T10630] lookup_slow+0x59/0x80 [ 271.562172][T10630] link_path_walk+0xd22/0x1910 [ 271.567496][T10630] path_openat+0x1c4/0x1da0 [ 271.572555][T10630] do_file_open+0x23e/0x4a0 [ 271.577612][T10630] do_sys_openat2+0x115/0x200 [ 271.582860][T10630] __x64_sys_openat+0x138/0x170 [ 271.588254][T10630] do_syscall_64+0x166/0x520 [ 271.593391][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.599860][T10630] [ 271.599860][T10630] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 271.608362][T10630] down_write+0x91/0x200 [ 271.613148][T10630] lookup_open+0x246/0x1970 [ 271.618205][T10630] path_openat+0x673/0x1da0 [ 271.623261][T10630] do_file_open+0x23e/0x4a0 [ 271.628347][T10630] do_sys_openat2+0x115/0x200 [ 271.633582][T10630] __x64_sys_openat+0x138/0x170 [ 271.639018][T10630] do_syscall_64+0x166/0x520 [ 271.644162][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.650618][T10630] [ 271.650618][T10630] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 271.658048][T10630] __lock_acquire+0x164c/0x2de0 [ 271.663438][T10630] lock_acquire+0x115/0x350 [ 271.668485][T10630] sb_start_write+0x48/0x1c0 [ 271.673626][T10630] mnt_want_write+0x41/0x90 [ 271.678703][T10630] ovl_lookup+0xb93/0x1c80 [ 271.683677][T10630] lookup_open+0x94b/0x1970 [ 271.688741][T10630] path_openat+0x673/0x1da0 [ 271.693794][T10630] do_file_open+0x23e/0x4a0 [ 271.698851][T10630] do_sys_openat2+0x115/0x200 [ 271.704072][T10630] __x64_sys_openat+0x138/0x170 [ 271.709465][T10630] do_syscall_64+0x166/0x520 [ 271.714599][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.721044][T10630] [ 271.721044][T10630] other info that might help us debug this: [ 271.721044][T10630] [ 271.731293][T10630] Chain exists of: [ 271.731293][T10630] sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP [ 271.731293][T10630] [ 271.745089][T10630] Possible unsafe locking scenario: [ 271.745089][T10630] [ 271.752757][T10630] CPU0 CPU1 [ 271.758147][T10630] ---- ---- [ 271.763537][T10630] lock(DCACHE_PAR_LOOKUP); [ 271.768157][T10630] lock(&type->i_mutex_dir_key#5); [ 271.775918][T10630] lock(DCACHE_PAR_LOOKUP); [ 271.783072][T10630] rlock(sb_writers#5); [ 271.787357][T10630] [ 271.787357][T10630] *** DEADLOCK *** [ 271.787357][T10630] [ 271.795526][T10630] locks held by syz.3.1682/10630: 2, last CPU#0: [ 271.801885][T10630] #0: ffff88806885bd88 (&ovl_i_mutex_dir_key[depth]#2){.+.+}-{4:4}, at: lookup_open+0x221/0x1970 [ 271.812581][T10630] #1: ffff8880646ef2e0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 271.822794][T10630] [ 271.822794][T10630] stack backtrace: [ 271.828721][T10630] CPU: 0 UID: 0 PID: 10630 Comm: syz.3.1682 Not tainted syzkaller #0 PREEMPT(full) [ 271.838130][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.848233][T10630] Call Trace: [ 271.851542][T10630] [ 271.854519][T10630] dump_stack_lvl+0xe8/0x150 [ 271.859142][T10630] print_circular_bug+0x2e2/0x300 [ 271.864205][T10630] check_noncircular+0x12f/0x150 [ 271.869230][T10630] __lock_acquire+0x164c/0x2de0 [ 271.874140][T10630] ? do_raw_spin_unlock+0xf5/0x200 [ 271.879292][T10630] lock_acquire+0x115/0x350 [ 271.883838][T10630] ? mnt_want_write+0x41/0x90 [ 271.888554][T10630] sb_start_write+0x48/0x1c0 [ 271.893177][T10630] ? mnt_want_write+0x41/0x90 [ 271.897969][T10630] mnt_want_write+0x41/0x90 [ 271.902508][T10630] ovl_lookup+0xb93/0x1c80 [ 271.906952][T10630] ? lock_acquire+0x115/0x350 [ 271.911679][T10630] ? __pfx_ovl_lookup+0x10/0x10 [ 271.916584][T10630] ? __d_lookup+0x66/0x790 [ 271.921033][T10630] ? __pfx___d_alloc_parallel+0x10/0x10 [ 271.926611][T10630] ? __d_lookup+0x6f3/0x790 [ 271.931164][T10630] ? d_lookup+0x1f/0xa0 [ 271.935356][T10630] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 271.941567][T10630] ? lockdep_hardirqs_on+0x7b/0x110 [ 271.946803][T10630] lookup_open+0x94b/0x1970 [ 271.951358][T10630] path_openat+0x673/0x1da0 [ 271.955921][T10630] do_file_open+0x23e/0x4a0 [ 271.960464][T10630] ? __pfx_do_file_open+0x10/0x10 [ 271.965631][T10630] ? _raw_spin_unlock+0x28/0x50 [ 271.970527][T10630] ? alloc_fd+0x6af/0x760 [ 271.974896][T10630] do_sys_openat2+0x115/0x200 [ 271.979603][T10630] ? __se_sys_futex+0x3a8/0x450 [ 271.984482][T10630] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.989788][T10630] ? rcu_is_watching+0x16/0xb0 [ 271.994595][T10630] __x64_sys_openat+0x138/0x170 [ 271.999488][T10630] do_syscall_64+0x166/0x520 [ 272.004116][T10630] ? trace_irq_disable+0x3b/0x140 [ 272.009159][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.015259][T10630] ? clear_bhb_loop+0x70/0xc0 [ 272.019989][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.025924][T10630] RIP: 0033:0x7ff1ddb9e199 [ 272.030382][T10630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.050019][T10630] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.058465][T10630] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 272.066467][T10630] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 272.074582][T10630] RBP: 00007ff1ddc35888 R08: 0000000000000000 R09: 0000000000000000 [ 272.082580][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.090590][T10630] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 272.098606][T10630] [ 272.111740][T10630] FAULT_INJECTION: forcing a failure. [ 272.111740][T10630] name failslab, interval 1, probability 0, space 0, times 0 [ 272.111770][T10630] CPU: 0 UID: 0 PID: 10630 Comm: syz.3.1682 Not tainted syzkaller #0 PREEMPT(full) [ 272.111795][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.111809][T10630] Call Trace: [ 272.111817][T10630] [ 272.111826][T10630] dump_stack_lvl+0xe8/0x150 [ 272.111854][T10630] should_fail_ex+0x3eb/0x540 [ 272.111878][T10630] should_failslab+0xa8/0x100 [ 272.111899][T10630] ? alloc_empty_file+0x5b/0x1d0 [ 272.111920][T10630] kmem_cache_alloc_noprof+0x9c/0x600 [ 272.111943][T10630] ? stack_depot_save_flags+0x33/0x7f0 [ 272.111964][T10630] ? alloc_empty_file+0x5b/0x1d0 [ 272.111985][T10630] ? kmem_cache_alloc_noprof+0x151/0x600 [ 272.112009][T10630] alloc_empty_file+0x5b/0x1d0 [ 272.112031][T10630] path_openat+0x9d/0x1da0 [ 272.112061][T10630] do_file_open+0x23e/0x4a0 [ 272.112084][T10630] ? __pfx_do_file_open+0x10/0x10 [ 272.112116][T10630] ? _raw_spin_unlock+0x28/0x50 [ 272.112137][T10630] ? alloc_fd+0x6af/0x760 [ 272.112162][T10630] do_sys_openat2+0x115/0x200 [ 272.112185][T10630] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.112206][T10630] ? ksys_write+0x242/0x270 [ 272.112226][T10630] ? __pfx_ksys_write+0x10/0x10 [ 272.112258][T10630] __x64_sys_openat+0x138/0x170 [ 272.112281][T10630] do_syscall_64+0x166/0x520 [ 272.112301][T10630] ? trace_irq_disable+0x3b/0x140 [ 272.112320][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.112343][T10630] ? clear_bhb_loop+0x70/0xc0 [ 272.112364][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.112386][T10630] RIP: 0033:0x7ff1ddb9e199 [ 272.112405][T10630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.112424][T10630] RSP: 002b:00007ff1deafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.112447][T10630] RAX: ffffffffffffffda RBX: 00007ff1dde25fa0 RCX: 00007ff1ddb9e199 [ 272.112463][T10630] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 272.112478][T10630] RBP: 00007ff1deafd090 R08: 0000000000000000 R09: 0000000000000000 [ 272.112492][T10630] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 272.112505][T10630] R13: 00007ff1dde26038 R14: 00007ff1dde25fa0 R15: 00007fffd2225178 [ 272.112530][T10630]