last executing test programs: 4m8.016224626s ago: executing program 0 (id=434): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4ef, 0xfffffe01, 0x7fff, 0xb1, "fe6735f4050000000000002000", 0x6, 0x10}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 4m6.734199808s ago: executing program 0 (id=439): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x4048042) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'lo\x00', 0x3}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000200)={0x14, 0x49, 0x2, {0x60, 0x1, 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, @broadcast, 0xb, 0x20}}) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 4m6.697741014s ago: executing program 1 (id=440): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xfffffffc, 0x0, 0x32314742, 0x0, 0x6, [{0x800}, {0x0, 0x8}, {0x0, 0x3}, {0x5}, {}, {0x0, 0x586c}], 0x4, 0x1}}) 4m5.546297513s ago: executing program 1 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x4000921, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m5.460067044s ago: executing program 0 (id=446): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x5, 0x1, 0xe, 0xe, 0x5, 0x7d, 0x3, 0x8000c, 0xfffffffe, 0x2, 0x6d, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x1, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x40000003, 0xa6b5, 0x2, 0x3]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) 4m4.809994968s ago: executing program 0 (id=448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) 4m4.483183102s ago: executing program 3 (id=449): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78}) 4m4.276048281s ago: executing program 2 (id=450): write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x180, 0xb) 4m3.942331822s ago: executing program 1 (id=451): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x2, 0x8, 0x5, 0x831f}]}) 4m3.866168069s ago: executing program 3 (id=452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) 4m3.815097168s ago: executing program 2 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) read(r1, &(0x7f0000000140)=""/87, 0x57) 4m3.430244246s ago: executing program 1 (id=454): r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 4m3.352641726s ago: executing program 3 (id=455): r0 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@empty, @empty, 0xffffffffffffffff, "54dce0c566fb7c9359427648cecdf1f8f59c08e5192334350dc02e378a398606", 0x8, 0x0, 0x0, 0x1d}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 4m3.019142799s ago: executing program 2 (id=456): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f00000002c0)={0x1, 0x2, 0x8, 0x0, 'syz1\x00', 0x2}) 4m2.61393016s ago: executing program 3 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m2.583548649s ago: executing program 2 (id=458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, '\x00', "bcd32735a885097fa6bf1210903158a0", "55c426a0", "ace6610a279e14e7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "67dcb79207bc16d5", "34b5abe2b610e389beab0349ef30e50fde508bf407a14dbcddde320cf3f1cb53", "7cafff41", "71b7efb52c24e5ec"}, 0x38) 4m2.337246091s ago: executing program 1 (id=459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r1, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r0) 4m2.274300449s ago: executing program 0 (id=460): socket$packet(0x11, 0xa, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) 4m2.120003478s ago: executing program 3 (id=461): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c0002800800014000000042140000001100010000"], 0xdc}}, 0x8040) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r3 = socket$inet(0x2, 0x1, 0x6) connect(r3, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 4m2.08644113s ago: executing program 2 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) setresuid(0x0, 0xee00, 0x0) 4m1.726521192s ago: executing program 1 (id=463): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x9}]}, 0x30}}, 0x0) 4m1.726302202s ago: executing program 0 (id=464): prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) 3m55.636333013s ago: executing program 2 (id=465): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) 3m53.143039365s ago: executing program 3 (id=466): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x7fff, 0x0, 0x0}) 3m21.57409529s ago: executing program 32 (id=464): prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) 0s ago: executing program 33 (id=463): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x9}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 75.704153][ T5603] cgroup: Unknown subsys name 'net' [ 75.814916][ T5603] cgroup: Unknown subsys name 'cpuset' [ 75.817808][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.473605][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.819091][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.826866][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.827395][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.829573][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.830217][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.831441][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.833104][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.833781][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.835896][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.835930][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.839276][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.856105][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.862456][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.863328][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.864273][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.864964][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.877643][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.879069][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.879673][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.884852][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.494318][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.494482][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.494612][ T5614] bridge_slave_0: entered allmulticast mode [ 81.496790][ T5614] bridge_slave_0: entered promiscuous mode [ 81.558362][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.558475][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.558559][ T5614] bridge_slave_1: entered allmulticast mode [ 81.559687][ T5614] bridge_slave_1: entered promiscuous mode [ 81.586540][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.586647][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.587040][ T5613] bridge_slave_0: entered allmulticast mode [ 81.588794][ T5613] bridge_slave_0: entered promiscuous mode [ 81.592466][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.592570][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.592693][ T5613] bridge_slave_1: entered allmulticast mode [ 81.594478][ T5613] bridge_slave_1: entered promiscuous mode [ 81.696227][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.696406][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.696537][ T5615] bridge_slave_0: entered allmulticast mode [ 81.698652][ T5615] bridge_slave_0: entered promiscuous mode [ 81.704003][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.707404][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.739383][ T5613] team0: Port device team_slave_0 added [ 81.752833][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.756395][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.772506][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.772911][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.773031][ T5615] bridge_slave_1: entered allmulticast mode [ 81.774945][ T5615] bridge_slave_1: entered promiscuous mode [ 81.797359][ T5613] team0: Port device team_slave_1 added [ 81.857372][ T5614] team0: Port device team_slave_0 added [ 81.859964][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.872285][ T5616] Bluetooth: hci3: command tx timeout [ 81.872699][ T52] Bluetooth: hci0: command tx timeout [ 81.877930][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.878035][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.878150][ T5612] bridge_slave_0: entered allmulticast mode [ 81.882270][ T5612] bridge_slave_0: entered promiscuous mode [ 81.887857][ T5614] team0: Port device team_slave_1 added [ 81.906279][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.907253][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.907267][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.907289][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.909113][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.909216][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.909343][ T5612] bridge_slave_1: entered allmulticast mode [ 81.913265][ T5612] bridge_slave_1: entered promiscuous mode [ 81.946181][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.946198][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.946221][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.951021][ T52] Bluetooth: hci1: command tx timeout [ 81.963723][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.963741][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.963764][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.008625][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.008642][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.008665][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.015106][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.018480][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.031736][ T52] Bluetooth: hci2: command tx timeout [ 82.047649][ T5615] team0: Port device team_slave_0 added [ 82.127037][ T5615] team0: Port device team_slave_1 added [ 82.204861][ T5612] team0: Port device team_slave_0 added [ 82.259466][ T5612] team0: Port device team_slave_1 added [ 82.276267][ T5613] hsr_slave_0: entered promiscuous mode [ 82.277519][ T5613] hsr_slave_1: entered promiscuous mode [ 82.313208][ T5614] hsr_slave_0: entered promiscuous mode [ 82.314493][ T5614] hsr_slave_1: entered promiscuous mode [ 82.315407][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 82.315484][ T5614] Cannot create hsr debugfs directory [ 82.347084][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.347096][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.347111][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.386311][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.386328][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.386351][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.446185][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.446199][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.446214][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.449498][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.449515][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.449540][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.667862][ T5615] hsr_slave_0: entered promiscuous mode [ 82.668548][ T5615] hsr_slave_1: entered promiscuous mode [ 82.669010][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 82.669030][ T5615] Cannot create hsr debugfs directory [ 82.712926][ T5612] hsr_slave_0: entered promiscuous mode [ 82.713640][ T5612] hsr_slave_1: entered promiscuous mode [ 82.714114][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 82.714134][ T5612] Cannot create hsr debugfs directory [ 83.066735][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.076980][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.077894][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.090596][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.094463][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.104790][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.105656][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.115465][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.202783][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.206681][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.207537][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.210082][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.254600][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.258050][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.259823][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.266275][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.344524][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.350215][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.370651][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.381834][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.389911][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.399670][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.426270][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.430704][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.464058][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.536757][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.539961][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.557987][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.565065][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.579154][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.586435][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.588873][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.604786][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.607478][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.640797][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.641198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.664435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.664553][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.700434][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.772102][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.806481][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.806554][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.849301][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.849419][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.879728][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.930002][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.951435][ T5616] Bluetooth: hci3: command tx timeout [ 83.951531][ T52] Bluetooth: hci0: command tx timeout [ 83.980660][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.023299][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.023470][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.029940][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.031262][ T52] Bluetooth: hci1: command tx timeout [ 84.060247][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.060371][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.086544][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.086685][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.108525][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.108589][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.111895][ T52] Bluetooth: hci2: command tx timeout [ 84.791862][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.969918][ T5614] veth0_vlan: entered promiscuous mode [ 85.014233][ T5614] veth1_vlan: entered promiscuous mode [ 85.076865][ T5614] veth0_macvtap: entered promiscuous mode [ 85.093546][ T5614] veth1_macvtap: entered promiscuous mode [ 85.135000][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.167647][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.216007][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.273932][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.332720][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.412929][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.437332][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.496406][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.496430][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.532875][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.634614][ T5613] veth0_vlan: entered promiscuous mode [ 85.634987][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.635007][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.649920][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.688912][ T5613] veth1_vlan: entered promiscuous mode [ 85.728900][ T5615] veth0_vlan: entered promiscuous mode [ 85.758632][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.798760][ T5615] veth1_vlan: entered promiscuous mode [ 85.867036][ T5613] veth0_macvtap: entered promiscuous mode [ 85.873999][ T5768] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.880829][ T5613] veth1_macvtap: entered promiscuous mode [ 85.919533][ T5612] veth0_vlan: entered promiscuous mode [ 85.930289][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.939762][ T5768] ======================================================= [ 85.939762][ T5768] WARNING: The mand mount option has been deprecated and [ 85.939762][ T5768] and is ignored by this kernel. Remove the mand [ 85.939762][ T5768] option from the mount to silence this warning. [ 85.939762][ T5768] ======================================================= [ 85.969677][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.989458][ T5612] veth1_vlan: entered promiscuous mode [ 86.031727][ T5616] Bluetooth: hci3: command tx timeout [ 86.031812][ T52] Bluetooth: hci0: command tx timeout [ 86.032126][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.032175][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.032213][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.076128][ T5615] veth0_macvtap: entered promiscuous mode [ 86.112923][ T52] Bluetooth: hci1: command tx timeout [ 86.137219][ T5615] veth1_macvtap: entered promiscuous mode [ 86.141089][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.191338][ T52] Bluetooth: hci2: command tx timeout [ 86.200166][ T5612] veth0_macvtap: entered promiscuous mode [ 86.217127][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.245373][ T5612] veth1_macvtap: entered promiscuous mode [ 86.261784][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.292088][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.292114][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.385733][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.398938][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.398973][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.458947][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.565332][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.565358][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.569163][ T5773] jffs2: notice: (5773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.610448][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.610502][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.610539][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.721560][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.721756][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.721925][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.790447][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.790471][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.920327][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.920353][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.964908][ T5778] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2'. [ 87.071909][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.072924][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.073997][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.074017][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.128487][ T5786] Zero length message leads to an empty skb [ 87.241895][ T25] cfg80211: failed to load regulatory.db [ 87.344443][ T5789] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.344462][ T5789] overlayfs: failed to set xattr on upper [ 87.344467][ T5789] overlayfs: ...falling back to redirect_dir=nofollow. [ 87.344471][ T5789] overlayfs: ...falling back to index=off. [ 87.344476][ T5789] overlayfs: ...falling back to uuid=null. [ 87.344481][ T5789] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 87.345850][ T5786] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.399397][ T5786] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.399419][ T5786] overlayfs: failed to set xattr on upper [ 87.399427][ T5786] overlayfs: ...falling back to redirect_dir=nofollow. [ 87.399434][ T5786] overlayfs: ...falling back to index=off. [ 87.399441][ T5786] overlayfs: ...falling back to uuid=null. [ 87.458793][ T5764] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 87.607540][ T5774] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.761868][ T5796] fido_id[5796]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.798082][ T5774] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 87.819782][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.819820][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.822123][ T5774] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 87.822150][ T5774] usb 2-1: Manufacturer: syz [ 87.899368][ T5774] usb 2-1: config 0 descriptor?? [ 87.959898][ T52] Bluetooth: hci2: connection err: -111 [ 88.001060][ T5721] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.043061][ T5764] Process accounting resumed [ 88.048080][ T5808] Process accounting resumed [ 88.112453][ T5616] Bluetooth: hci3: command tx timeout [ 88.120958][ T52] Bluetooth: hci0: command tx timeout [ 88.153362][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 88.154090][ T5721] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 88.155261][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 88.159035][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.159063][ T5721] usb 4-1: Product: syz [ 88.159077][ T5721] usb 4-1: Manufacturer: syz [ 88.159091][ T5721] usb 4-1: SerialNumber: syz [ 88.168255][ T5721] usb 4-1: config 0 descriptor?? [ 88.191658][ T52] Bluetooth: hci1: command tx timeout [ 88.195488][ T5721] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 88.195521][ T5721] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 88.272640][ T52] Bluetooth: hci2: command tx timeout [ 88.291585][ T5025] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.346543][ T5816] /dev/nullb0: Can't open blockdev [ 88.421255][ T5025] usb 1-1: device descriptor read/64, error -71 [ 88.452099][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 88.530237][ T5819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.541170][ T5819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.681329][ T5025] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.720979][ T986] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.749449][ T5774] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 88.749520][ T5774] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 88.749592][ T5774] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 88.762781][ T5774] usb 2-1: USB disconnect, device number 2 [ 88.795307][ T5721] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 88.811886][ T5025] usb 1-1: device descriptor read/64, error -71 [ 88.871678][ T986] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 88.872890][ T986] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.875468][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.875491][ T986] usb 3-1: Product: syz [ 88.875506][ T986] usb 3-1: Manufacturer: syz [ 88.875520][ T986] usb 3-1: SerialNumber: syz [ 88.891444][ T986] gspca_main: spca500-2.14.0 probing 046d:0900 [ 88.932185][ T5025] usb usb1-port1: attempt power cycle [ 89.113797][ T986] gspca_spca500: reg write: error -71 [ 89.116316][ T986] gspca_spca500: reg write: error -71 [ 89.116715][ T986] gspca_spca500: reg write: error -71 [ 89.117090][ T986] gspca_spca500: reg write: error -71 [ 89.117471][ T986] gspca_spca500: reg write: error -71 [ 89.119338][ T986] gspca_spca500: reg write: error -71 [ 89.119734][ T986] gspca_spca500: reg write: error -71 [ 89.120098][ T986] gspca_spca500: reg write: error -71 [ 89.120476][ T986] gspca_spca500: reg write: error -71 [ 89.120980][ T986] gspca_spca500: reg write: error -71 [ 89.121428][ T986] gspca_spca500: reg write: error -71 [ 89.122436][ T986] gspca_spca500: reg write: error -71 [ 89.122834][ T986] gspca_spca500: reg write: error -71 [ 89.123198][ T986] gspca_spca500: reg write: error -71 [ 89.137059][ T986] usb 3-1: USB disconnect, device number 2 [ 89.271282][ T5025] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.291834][ T5025] usb 1-1: device descriptor read/8, error -71 [ 89.451177][ T5721] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 89.451248][ T5721] em28xx 4-1:0.0: board has no eeprom [ 89.531059][ T5025] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.552725][ T5721] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 89.552758][ T5721] em28xx 4-1:0.0: dvb set to bulk mode. [ 89.557344][ T5706] em28xx 4-1:0.0: Binding DVB extension [ 89.559000][ T5025] usb 1-1: device descriptor read/8, error -71 [ 89.598907][ T5721] usb 4-1: USB disconnect, device number 2 [ 89.613418][ T5721] em28xx 4-1:0.0: Disconnecting em28xx [ 89.662715][ T5025] usb usb1-port1: unable to enumerate USB device [ 89.723961][ T5706] em28xx 4-1:0.0: Registering input extension [ 89.725301][ T5721] em28xx 4-1:0.0: Closing input extension [ 89.780586][ T5721] em28xx: Freeing device [ 89.931743][ T5828] process 'syz.1.18' launched '/dev/fd/7' with NULL argv: empty string added [ 90.103330][ T5839] capability: warning: `syz.3.22' uses 32-bit capabilities (legacy support in use) [ 90.213971][ T5841] FAULT_INJECTION: forcing a failure. [ 90.213971][ T5841] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 90.214006][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 90.214028][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.214041][ T5841] Call Trace: [ 90.214048][ T5841] [ 90.214057][ T5841] dump_stack_lvl+0xe8/0x150 [ 90.214101][ T5841] should_fail_ex+0x3eb/0x540 [ 90.214131][ T5841] prepare_alloc_pages+0x21e/0x5f0 [ 90.214169][ T5841] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 90.214205][ T5841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 90.214234][ T5841] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 90.214269][ T5841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 90.214312][ T5841] __alloc_pages_noprof+0x10/0x100 [ 90.214344][ T5841] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 90.214383][ T5841] ? alloc_pages_noprof+0x140/0x2b0 [ 90.214411][ T5841] __kasan_populate_vmalloc+0xb7/0x1c0 [ 90.214447][ T5841] alloc_vmap_area+0xd10/0x1410 [ 90.214489][ T5841] ? __pfx_alloc_vmap_area+0x10/0x10 [ 90.214512][ T5841] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 90.214543][ T5841] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 90.214571][ T5841] ? __get_vm_area_node+0x155/0x2f0 [ 90.214602][ T5841] __get_vm_area_node+0x200/0x2f0 [ 90.214635][ T5841] __vmalloc_node_range_noprof+0x340/0x1690 [ 90.214663][ T5841] ? copy_process+0x81b/0x43e0 [ 90.214734][ T5841] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.214762][ T5841] ? dup_task_struct+0x52/0xa00 [ 90.214783][ T5841] ? trace_kmem_cache_alloc+0x29/0xe0 [ 90.214812][ T5841] ? memcpy_and_pad+0x48/0x80 [ 90.214851][ T5841] __vmalloc_node_noprof+0xc2/0x100 [ 90.214878][ T5841] ? copy_process+0x81b/0x43e0 [ 90.214898][ T5841] ? copy_process+0x81b/0x43e0 [ 90.214925][ T5841] dup_task_struct+0x2c6/0xa00 [ 90.214954][ T5841] copy_process+0x81b/0x43e0 [ 90.214992][ T5841] ? kasan_save_track+0x4f/0x80 [ 90.215021][ T5841] ? __kasan_kmalloc+0x93/0xb0 [ 90.215039][ T5841] ? __kmalloc_cache_noprof+0x31c/0x600 [ 90.215176][ T5841] ? io_submit_sqes+0x1e74/0x2310 [ 90.215195][ T5841] ? __se_sys_io_uring_enter+0x35b/0x1bb0 [ 90.215213][ T5841] ? do_syscall_64+0x166/0x520 [ 90.215231][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.215263][ T5841] ? __pfx_copy_process+0x10/0x10 [ 90.215294][ T5841] ? __pfx_io_wq_worker+0x10/0x10 [ 90.215320][ T5841] ? __pfx_io_wq_worker+0x10/0x10 [ 90.215347][ T5841] create_io_thread+0xfc/0x170 [ 90.215376][ T5841] ? __pfx_create_io_thread+0x10/0x10 [ 90.215409][ T5841] ? __pfx_io_wq_worker+0x10/0x10 [ 90.215436][ T5841] ? __kasan_kmalloc+0x93/0xb0 [ 90.215460][ T5841] ? __raw_spin_lock_init+0x45/0x100 [ 90.215488][ T5841] ? __init_swait_queue_head+0xa8/0x150 [ 90.215510][ T5841] ? create_io_worker+0x27/0x5c0 [ 90.215536][ T5841] create_io_worker+0x181/0x5c0 [ 90.215565][ T5841] io_wq_enqueue+0x675/0x8a0 [ 90.215588][ T5841] ? io_wq_enqueue+0x332/0x8a0 [ 90.215610][ T5841] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 90.215641][ T5841] io_submit_sqes+0x1e74/0x2310 [ 90.215696][ T5841] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 90.215734][ T5841] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 90.215766][ T5841] ? rcu_is_watching+0x16/0xb0 [ 90.215794][ T5841] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 90.215818][ T5841] do_syscall_64+0x166/0x520 [ 90.215837][ T5841] ? trace_irq_disable+0x3b/0x140 [ 90.215864][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.215884][ T5841] ? clear_bhb_loop+0x70/0xc0 [ 90.215911][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.215931][ T5841] RIP: 0033:0x7fd5b0d9e159 [ 90.215949][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.215964][ T5841] RSP: 002b:00007fd5b1cb0fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 90.215984][ T5841] RAX: ffffffffffffffda RBX: 00002000000004c0 RCX: 00007fd5b0d9e159 [ 90.215998][ T5841] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000006 [ 90.216008][ T5841] RBP: 0000200000000480 R08: 0000000000000000 R09: 0000000000000008 [ 90.216019][ T5841] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 90.216029][ T5841] R13: 00007fd5b1026038 R14: 00007fd5b1025fa0 R15: 00007ffcb004f648 [ 90.216058][ T5841] [ 90.251942][ T5841] syz.1.23: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 90.252085][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 90.252106][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.252118][ T5841] Call Trace: [ 90.252125][ T5841] [ 90.252133][ T5841] dump_stack_lvl+0xe8/0x150 [ 90.252162][ T5841] warn_alloc+0x24d/0x270 [ 90.252190][ T5841] ? lockdep_hardirqs_on+0x7b/0x110 [ 90.252222][ T5841] ? __pfx_warn_alloc+0x10/0x10 [ 90.252246][ T5841] ? kfree+0x1c5/0x650 [ 90.252275][ T5841] ? __get_vm_area_node+0x219/0x2f0 [ 90.252306][ T5841] __vmalloc_node_range_noprof+0x368/0x1690 [ 90.252364][ T5841] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.252389][ T5841] ? dup_task_struct+0x52/0xa00 [ 90.252409][ T5841] ? trace_kmem_cache_alloc+0x29/0xe0 [ 90.252435][ T5841] ? memcpy_and_pad+0x48/0x80 [ 90.252467][ T5841] __vmalloc_node_noprof+0xc2/0x100 [ 90.252491][ T5841] ? copy_process+0x81b/0x43e0 [ 90.252510][ T5841] ? copy_process+0x81b/0x43e0 [ 90.252533][ T5841] dup_task_struct+0x2c6/0xa00 [ 90.252560][ T5841] copy_process+0x81b/0x43e0 [ 90.252593][ T5841] ? kasan_save_track+0x4f/0x80 [ 90.252620][ T5841] ? __kasan_kmalloc+0x93/0xb0 [ 90.252637][ T5841] ? __kmalloc_cache_noprof+0x31c/0x600 [ 90.252663][ T5841] ? io_submit_sqes+0x1e74/0x2310 [ 90.252680][ T5841] ? __se_sys_io_uring_enter+0x35b/0x1bb0 [ 90.252697][ T5841] ? do_syscall_64+0x166/0x520 [ 90.252712][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.252740][ T5841] ? __pfx_copy_process+0x10/0x10 [ 90.252768][ T5841] ? __pfx_io_wq_worker+0x10/0x10 [ 90.252791][ T5841] ? __pfx_io_wq_worker+0x10/0x10 [ 90.252814][ T5841] create_io_thread+0xfc/0x170 [ 90.252840][ T5841] ? __pfx_create_io_thread+0x10/0x10 [ 90.252870][ T5841] ? __pfx_io_wq_worker+0x10/0x10 [ 90.252895][ T5841] ? __kasan_kmalloc+0x93/0xb0 [ 90.252916][ T5841] ? __raw_spin_lock_init+0x45/0x100 [ 90.252941][ T5841] ? __init_swait_queue_head+0xa8/0x150 [ 90.252961][ T5841] ? create_io_worker+0x27/0x5c0 [ 90.252984][ T5841] create_io_worker+0x181/0x5c0 [ 90.253011][ T5841] io_wq_enqueue+0x675/0x8a0 [ 90.253032][ T5841] ? io_wq_enqueue+0x332/0x8a0 [ 90.253051][ T5841] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 90.253087][ T5841] io_submit_sqes+0x1e74/0x2310 [ 90.253135][ T5841] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 90.253169][ T5841] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 90.253197][ T5841] ? rcu_is_watching+0x16/0xb0 [ 90.253223][ T5841] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 90.253245][ T5841] do_syscall_64+0x166/0x520 [ 90.253261][ T5841] ? trace_irq_disable+0x3b/0x140 [ 90.253287][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.253305][ T5841] ? clear_bhb_loop+0x70/0xc0 [ 90.253329][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.253347][ T5841] RIP: 0033:0x7fd5b0d9e159 [ 90.253366][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.253380][ T5841] RSP: 002b:00007fd5b1cb0fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 90.253400][ T5841] RAX: ffffffffffffffda RBX: 00002000000004c0 RCX: 00007fd5b0d9e159 [ 90.253413][ T5841] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000006 [ 90.253424][ T5841] RBP: 0000200000000480 R08: 0000000000000000 R09: 0000000000000008 [ 90.253435][ T5841] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 90.253446][ T5841] R13: 00007fd5b1026038 R14: 00007fd5b1025fa0 R15: 00007ffcb004f648 [ 90.253476][ T5841] [ 90.253483][ T5841] Mem-Info: [ 90.253492][ T5841] active_anon:5517 inactive_anon:0 isolated_anon:0 [ 90.253492][ T5841] active_file:0 inactive_file:42348 isolated_file:0 [ 90.253492][ T5841] unevictable:0 dirty:1779 writeback:0 [ 90.253492][ T5841] slab_reclaimable:9932 slab_unreclaimable:89417 [ 90.253492][ T5841] mapped:24493 shmem:522 pagetables:1047 [ 90.253492][ T5841] sec_pagetables:0 bounce:0 [ 90.253492][ T5841] kernel_misc_reclaimable:0 [ 90.253492][ T5841] free:1345566 free_pcp:15072 free_cma:0 [ 90.253539][ T5841] Node 0 active_anon:22068kB inactive_anon:0kB active_file:0kB inactive_file:169184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97972kB dirty:7104kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11700kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 90.253588][ T5841] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 90.253634][ T5841] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.253686][ T5841] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 90.253722][ T5841] Node 0 DMA32 free:1429676kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22068kB inactive_anon:0kB active_file:0kB inactive_file:169184kB unevictable:0kB writepending:7104kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:60284kB local_pcp:7592kB free_cma:0kB [ 90.253776][ T5841] lowmem_reserve[]: 0 0 1 1 1 [ 90.253809][ T5841] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 90.253858][ T5841] lowmem_reserve[]: 0 0 0 0 0 [ 90.253891][ T5841] Node 1 Normal free:3937228kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.269564][ T5841] lowmem_reserve[]: 0 0 0 0 0 [ 90.269608][ T5841] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.275507][ T5841] Node 0 DMA32: 385*4kB (UE) 103*8kB (UME) 3*16kB (ME) 2*32kB (ME) 1*64kB (U) 3*128kB (ME) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 346*4096kB (M) = 1429612kB [ 90.277176][ T5841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 90.280148][ T5841] Node 1 Normal: 5*4kB (UM) 5*8kB (UM) 3*16kB (UM) 5*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937228kB [ 90.282699][ T5841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.282715][ T5841] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.282730][ T5841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.284338][ T5841] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.284356][ T5841] 42866 total pagecache pages [ 90.284364][ T5841] 0 pages in swap cache [ 90.284371][ T5841] Free swap = 124996kB [ 90.284378][ T5841] Total swap = 124996kB [ 90.284386][ T5841] 2097051 pages RAM [ 90.284393][ T5841] 0 pages HighMem/MovableOnly [ 90.284399][ T5841] 429554 pages reserved [ 90.284406][ T5841] 0 pages cma reserved [ 90.412099][ T5025] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.562574][ T5025] usb 3-1: Using ep0 maxpacket: 8 [ 90.565414][ T5025] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 90.570548][ T5025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.570573][ T5025] usb 3-1: Product: syz [ 90.570587][ T5025] usb 3-1: Manufacturer: syz [ 90.570600][ T5025] usb 3-1: SerialNumber: syz [ 90.592534][ T5025] usb 3-1: config 0 descriptor?? [ 90.607260][ T5025] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 91.341439][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.499169][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 91.501150][ T25] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 91.520390][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.520445][ T25] usb 4-1: Product: syz [ 91.520460][ T25] usb 4-1: Manufacturer: syz [ 91.520473][ T25] usb 4-1: SerialNumber: syz [ 91.534273][ T25] usb 4-1: config 0 descriptor?? [ 91.574262][ T25] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 91.575222][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 91.575245][ T25] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 91.575413][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 91.575429][ T25] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 91.588910][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.593333][ T25] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 91.594524][ T25] usb 4-1: media controller created [ 91.694115][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.806589][ T25] usb 4-1: selecting invalid altsetting 3 [ 91.806613][ T25] ttusb2: set interface to alts=3 failed [ 91.857806][ T5870] netlink: 224 bytes leftover after parsing attributes in process `syz.1.29'. [ 91.897638][ T25] DVB: Unable to find symbol tda10086_attach() [ 91.897657][ T25] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 91.898686][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 91.898706][ T25] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 91.899014][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 91.899030][ T25] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 91.899148][ T25] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 91.915026][ T25] usb 4-1: USB disconnect, device number 3 [ 92.093111][ T25] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 93.104196][ T5838] kvm [5835]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 93.104444][ T5838] kvm [5835]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 93.371923][ T5025] gspca_sonixj: reg_w err -110 [ 93.371986][ T5025] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 94.211798][ T5692] usb 3-1: USB disconnect, device number 3 [ 95.778052][ T5886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.081688][ T5918] openvswitch: netlink: Key type 15622 is out of range max 32 [ 96.528250][ T5932] syzkaller0: entered promiscuous mode [ 96.528275][ T5932] syzkaller0: entered allmulticast mode [ 96.633271][ T5939] netlink: 56 bytes leftover after parsing attributes in process `syz.2.55'. [ 97.556603][ T5966] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 97.778849][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 98.676728][ T25] hid-generic 0005:046D:0A0E.0003: unknown main item tag 0x0 [ 98.707721][ T25] hid-generic 0005:046D:0A0E.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 99.327781][ T6036] netlink: Invalid conntrack timeout [ 99.327818][ T6036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.511329][ T6001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.759662][ T6049] syzkaller0: entered promiscuous mode [ 101.759691][ T6049] syzkaller0: entered allmulticast mode [ 101.783029][ T6049] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 102.074079][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'. [ 103.035204][ T6098] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.576001][ T6085] infiniband syz1: set active [ 103.576026][ T6085] infiniband syz1: added bond_slave_0 [ 103.647173][ T6085] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 103.647215][ T6085] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 103.647253][ T6085] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 103.780008][ T6085] RDS/IB: syz1: added [ 103.784488][ T6085] smc: adding ib device syz1 with port count 1 [ 103.784592][ T6085] smc: ib device syz1 port 1 has no pnetid [ 103.792312][ T52] Bluetooth: hci3: command tx timeout [ 104.002106][ T5706] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.041052][ T5721] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.080979][ T5692] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.152537][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 104.153432][ T5706] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 104.154836][ T5706] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 104.157720][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 104.157744][ T5706] usb 3-1: Product: syz [ 104.157759][ T5706] usb 3-1: Manufacturer: syz [ 104.157775][ T5706] usb 3-1: SerialNumber: syz [ 104.215589][ T5706] usb 3-1: config 0 descriptor?? [ 104.218166][ T6120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.220756][ T5706] hub 3-1:0.0: bad descriptor, ignoring hub [ 104.220781][ T5706] hub 3-1:0.0: probe with driver hub failed with error -5 [ 104.233245][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 104.248158][ T5721] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.248389][ T5692] usb 2-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice= 1.00 [ 104.254507][ T5721] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.254607][ T5721] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.254631][ T5721] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.254651][ T5721] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.254690][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.265673][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.519571][ T5692] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 104.585394][ T5721] usb 1-1: GET_CAPABILITIES returned 0 [ 104.585461][ T5721] usbtmc 1-1:16.0: can't read capabilities [ 104.723113][ T5721] usb 2-1: USB disconnect, device number 3 [ 105.002734][ T6124] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 105.186731][ T6124] usb 3-1: device firmware changed [ 105.191443][ T5692] usb 3-1: USB disconnect, device number 4 [ 105.382344][ T5692] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.532499][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 105.534080][ T5692] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.535411][ T5692] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.551827][ T5692] usb 3-1: string descriptor 0 read error: -22 [ 105.551987][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.572156][ T5692] usb 3-1: config 0 descriptor?? [ 105.578034][ T6125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.586153][ T5692] hub 3-1:0.0: bad descriptor, ignoring hub [ 105.586171][ T5692] hub 3-1:0.0: probe with driver hub failed with error -5 [ 105.779276][ T6139] gadgetfs: bound to dummy_udc driver [ 105.958936][ T5025] usb 1-1: USB disconnect, device number 6 [ 106.070466][ T6146] FAULT_INJECTION: forcing a failure. [ 106.070466][ T6146] name fail_futex, interval 1, probability 0, space 0, times 1 [ 106.070489][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) [ 106.070504][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.070512][ T6146] Call Trace: [ 106.070518][ T6146] [ 106.070524][ T6146] dump_stack_lvl+0xe8/0x150 [ 106.070546][ T6146] should_fail_ex+0x3eb/0x540 [ 106.070563][ T6146] get_futex_key+0x1b4/0x1580 [ 106.070585][ T6146] ? __pfx_futex_wake_mark+0x10/0x10 [ 106.070605][ T6146] ? __pfx_get_futex_key+0x10/0x10 [ 106.070630][ T6146] futex_wake+0x119/0x5f0 [ 106.070648][ T6146] ? __pfx_futex_wait+0x10/0x10 [ 106.070665][ T6146] ? __pfx_futex_wake+0x10/0x10 [ 106.070685][ T6146] ? __lock_acquire+0x747/0x2de0 [ 106.070705][ T6146] do_futex+0x458/0x4e0 [ 106.070722][ T6146] ? __pfx_do_futex+0x10/0x10 [ 106.070736][ T6146] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.070754][ T6146] __se_sys_futex+0x3a8/0x450 [ 106.070771][ T6146] ? __pfx___se_sys_futex+0x10/0x10 [ 106.070789][ T6146] ? __x64_sys_futex+0x21/0xf0 [ 106.070804][ T6146] do_syscall_64+0x166/0x520 [ 106.070815][ T6146] ? trace_irq_disable+0x3b/0x140 [ 106.070849][ T6146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.070870][ T6146] ? clear_bhb_loop+0x70/0xc0 [ 106.070896][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.070917][ T6146] RIP: 0033:0x7f49d2d9e159 [ 106.070936][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.070953][ T6146] RSP: 002b:00007f49d3cf00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.070978][ T6146] RAX: ffffffffffffffda RBX: 00007f49d3026098 RCX: 00007f49d2d9e159 [ 106.070995][ T6146] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49d302609c [ 106.071010][ T6146] RBP: 00007f49d3026090 R08: 3fffffffffffffff R09: 0000000000000000 [ 106.071026][ T6146] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 106.071041][ T6146] R13: 00007f49d3026128 R14: 00007ffc79c63d00 R15: 00007ffc79c63de8 [ 106.071074][ T6146] [ 106.141095][ T5721] usb 3-1: USB disconnect, device number 5 [ 106.755702][ T76] IPVS: starting estimator thread 0... [ 106.841838][ T6169] IPVS: using max 22 ests per chain, 52800 per kthread [ 107.120502][ T6178] UDC core: g1: couldn't find an available UDC or it's busy [ 107.394922][ T59] IPVS: starting estimator thread 0... [ 107.483467][ T6194] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.476085][ T6236] random: crng reseeded on system resumption [ 108.685630][ T6243] Unsupported ieee802154 address type: 0 [ 109.432870][ T6268] FAULT_INJECTION: forcing a failure. [ 109.432870][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.432886][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(full) [ 109.432905][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.432913][ T6268] Call Trace: [ 109.432918][ T6268] [ 109.432924][ T6268] dump_stack_lvl+0xe8/0x150 [ 109.432946][ T6268] should_fail_ex+0x3eb/0x540 [ 109.432969][ T6268] _copy_to_user+0x31/0xb0 [ 109.432988][ T6268] do_ipt_get_ctl+0xa0c/0x1300 [ 109.433007][ T6268] ? release_sock+0x2f/0x260 [ 109.433030][ T6268] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 109.433047][ T6268] ? do_ip_getsockopt+0x12fb/0x1d00 [ 109.433067][ T6268] ? do_ip_getsockopt+0x12fb/0x1d00 [ 109.433086][ T6268] ? __local_bh_enable_ip+0xd6/0x140 [ 109.433103][ T6268] ? __mutex_trylock_common+0x15f/0x270 [ 109.433119][ T6268] ? __pfx___mutex_trylock_common+0x10/0x10 [ 109.433135][ T6268] ? rcu_is_watching+0x16/0xb0 [ 109.433164][ T6268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.433186][ T6268] nf_getsockopt+0x26e/0x290 [ 109.433202][ T6268] ip_getsockopt+0x19e/0x230 [ 109.433219][ T6268] ? __pfx_ip_getsockopt+0x10/0x10 [ 109.433233][ T6268] ? sctp_getsockopt+0x9b/0xb90 [ 109.433273][ T6268] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 109.433292][ T6268] do_sock_getsockopt+0x51d/0x7e0 [ 109.433309][ T6268] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 109.433334][ T6268] ? __fget_files+0x3a2/0x420 [ 109.433349][ T6268] ? __fget_files+0x2a/0x420 [ 109.433369][ T6268] __x64_sys_getsockopt+0x1a4/0x240 [ 109.433389][ T6268] do_syscall_64+0x166/0x520 [ 109.433409][ T6268] ? trace_irq_disable+0x3b/0x140 [ 109.433438][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.433451][ T6268] ? clear_bhb_loop+0x70/0xc0 [ 109.433467][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.433480][ T6268] RIP: 0033:0x7f6d9459e159 [ 109.433493][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.433505][ T6268] RSP: 002b:00007f6d953a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 109.433521][ T6268] RAX: ffffffffffffffda RBX: 00007f6d94825fa0 RCX: 00007f6d9459e159 [ 109.433531][ T6268] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 109.433544][ T6268] RBP: 00007f6d9463506b R08: 00002000000000c0 R09: 0000000000000000 [ 109.433554][ T6268] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 109.433562][ T6268] R13: 00007f6d94826038 R14: 00007f6d94825fa0 R15: 00007ffe8fce98f8 [ 109.433589][ T6268] [ 109.616679][ T6271] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 109.616702][ T6271] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.617732][ T6271] vhci_hcd vhci_hcd.0: Device attached [ 109.889030][ T6279] Unsupported ieee802154 address type: 0 [ 109.901342][ T5692] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 110.030916][ C1] net_ratelimit: 64 callbacks suppressed [ 110.067676][ T6272] vhci_hcd: connection reset by peer [ 110.075580][ T43] vhci_hcd vhci_hcd.1: stop threads [ 110.075895][ T43] vhci_hcd vhci_hcd.1: release socket [ 110.082212][ T43] vhci_hcd vhci_hcd.1: disconnect device [ 110.421060][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.477845][ T6300] syzkaller1: entered promiscuous mode [ 110.477863][ T6300] syzkaller1: entered allmulticast mode [ 110.586110][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 110.590670][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.590815][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.616850][ T25] usb 1-1: config 0 descriptor?? [ 110.628077][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 110.898483][ T5721] usb 1-1: USB disconnect, device number 7 [ 110.943050][ T6310] input: syz0 as /devices/virtual/input/input6 [ 111.047595][ T6314] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 111.310306][ T6325] FAULT_INJECTION: forcing a failure. [ 111.310306][ T6325] name failslab, interval 1, probability 0, space 0, times 1 [ 111.310342][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT(full) [ 111.310369][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.310383][ T6325] Call Trace: [ 111.310393][ T6325] [ 111.310403][ T6325] dump_stack_lvl+0xe8/0x150 [ 111.310439][ T6325] should_fail_ex+0x3eb/0x540 [ 111.310471][ T6325] should_failslab+0xa8/0x100 [ 111.310497][ T6325] __kmalloc_noprof+0xf9/0x710 [ 111.310528][ T6325] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 111.310560][ T6325] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 111.310600][ T6325] __memcg_list_lru_alloc+0x1d9/0x760 [ 111.310639][ T6325] ? xa_load+0x60/0x210 [ 111.310664][ T6325] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 111.310716][ T6325] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 111.310751][ T6325] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 111.310799][ T6325] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 111.310835][ T6325] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 111.310861][ T6325] ? __d_alloc+0x37/0x6f0 [ 111.310886][ T6325] ? __d_alloc+0x37/0x6f0 [ 111.310920][ T6325] __d_alloc+0x37/0x6f0 [ 111.310955][ T6325] d_make_root+0x41/0x80 [ 111.310985][ T6325] mqueue_fill_super+0x252/0x360 [ 111.311007][ T6325] ? __pfx_mqueue_fill_super+0x10/0x10 [ 111.311031][ T6325] get_tree_nodev+0xbb/0x150 [ 111.311064][ T6325] vfs_get_tree+0x92/0x2a0 [ 111.311097][ T6325] fc_mount_longterm+0x1c/0x100 [ 111.311122][ T6325] mq_init_ns+0x508/0x770 [ 111.311157][ T6325] copy_ipcs+0x460/0x6c0 [ 111.311185][ T6325] create_new_namespaces+0x210/0x6b0 [ 111.311214][ T6325] ? security_capable+0x7e/0x2c0 [ 111.311245][ T6325] unshare_nsproxy_namespaces+0x144/0x190 [ 111.311273][ T6325] ksys_unshare+0x5a7/0x950 [ 111.311320][ T6325] ? __pfx_ksys_unshare+0x10/0x10 [ 111.311348][ T6325] ? rcu_is_watching+0x16/0xb0 [ 111.311383][ T6325] __x64_sys_unshare+0x38/0x50 [ 111.311412][ T6325] do_syscall_64+0x166/0x520 [ 111.311432][ T6325] ? trace_irq_disable+0x3b/0x140 [ 111.311462][ T6325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.311485][ T6325] ? clear_bhb_loop+0x70/0xc0 [ 111.311512][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.311534][ T6325] RIP: 0033:0x7fd5b0d9e159 [ 111.311557][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.311576][ T6325] RSP: 002b:00007fd5b1cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.311603][ T6325] RAX: ffffffffffffffda RBX: 00007fd5b1025fa0 RCX: 00007fd5b0d9e159 [ 111.311619][ T6325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000600 [ 111.311633][ T6325] RBP: 00007fd5b0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 111.311647][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.311661][ T6325] R13: 00007fd5b1026038 R14: 00007fd5b1025fa0 R15: 00007ffcb004f648 [ 111.311696][ T6325] [ 112.572472][ T6370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.431104][ T6394] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 113.601252][ T30] audit: type=1800 audit(1789978410.860:2): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.248" name="file1" dev="overlay" ino=265 res=0 errno=0 [ 114.061328][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.234184][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.243178][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.243201][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.243220][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.243282][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.243305][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.248310][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.248329][ T25] usb 3-1: Product: syz [ 114.248343][ T25] usb 3-1: Manufacturer: syz [ 114.292545][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 114.292557][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 114.337575][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 114.337595][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 114.541364][ T42] usb 3-1: USB disconnect, device number 6 [ 114.547621][ T76] IPVS: starting estimator thread 0... [ 114.631408][ T6429] IPVS: using max 29 ests per chain, 69600 per kthread [ 114.820082][ T6435] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.981246][ T5692] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 115.062446][ T6444] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 115.116790][ T6435] md/raid10:md0: not clean -- starting background reconstruction [ 115.116807][ T6435] md/raid10:md0: active with 1 out of 2 devices [ 115.118089][ T6435] md0: detected capacity change from 0 to 2048 [ 115.172296][ T6448] md: resync of RAID array md0 [ 115.240962][ C1] net_ratelimit: 72 callbacks suppressed [ 115.244152][ T52] Bluetooth: Frame is too long (len 16, expected len 4) [ 115.296887][ T6453] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.378382][ T6448] md: md0: resync done. [ 115.379083][ T13] tipc: Subscription rejected, illegal request [ 115.425351][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.504928][ T6464] md: recover of RAID array md0 [ 115.527434][ T6464] md: md0: recover done. [ 115.691124][ T1219] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.721018][ T5721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.843569][ T1219] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 115.844610][ T1219] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 115.844625][ T1219] usb 3-1: config 1 has no interface number 0 [ 115.845552][ T1219] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 115.845565][ T1219] usb 3-1: config 1 has no interface number 0 [ 115.846463][ T1219] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 115.846486][ T1219] usb 3-1: config 1 has no interface number 0 [ 115.847389][ T1219] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 115.847402][ T1219] usb 3-1: config 1 has no interface number 0 [ 115.849253][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.849265][ T1219] usb 3-1: Product: syz [ 115.849275][ T1219] usb 3-1: Manufacturer: syz [ 115.849284][ T1219] usb 3-1: SerialNumber: syz [ 115.949260][ T5721] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.971767][ T5721] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.971796][ T5721] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.971826][ T5721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.971895][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.971923][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.976484][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.976506][ T5721] usb 1-1: Product: syz [ 115.976522][ T5721] usb 1-1: Manufacturer: syz [ 116.057466][ T1219] usb 3-1: 3:0 : does not exist [ 116.057484][ T1219] usb 3-1: 3:0 : does not exist [ 116.081255][ T5721] cdc_wdm 1-1:1.0: skipping garbage [ 116.081269][ T5721] cdc_wdm 1-1:1.0: skipping garbage [ 116.107101][ T5721] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 116.107117][ T5721] cdc_wdm 1-1:1.0: Unknown control protocol [ 116.144607][ T6467] kvm [6466]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x7 [ 116.408940][ T1219] usb 3-1: USB disconnect, device number 7 [ 116.559770][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.621251][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 116.621846][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 116.621928][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 116.622164][ T25] usb 1-1: USB disconnect, device number 8 [ 116.622238][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 116.622257][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 116.622284][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 117.522357][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 118.246589][ T6541] random: crng reseeded on system resumption [ 118.949718][ T30] audit: type=1326 audit(1789978416.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9459e159 code=0x7ffc0000 [ 118.949889][ T30] audit: type=1326 audit(1789978416.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9459e159 code=0x7ffc0000 [ 118.954497][ T30] audit: type=1326 audit(1789978416.220:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9459e159 code=0x7ffc0000 [ 118.957925][ T30] audit: type=1326 audit(1789978416.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9459e159 code=0x7ffc0000 [ 118.958131][ T30] audit: type=1326 audit(1789978416.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6d9459e159 code=0x7ffc0000 [ 118.958333][ T30] audit: type=1326 audit(1789978416.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9459e159 code=0x7ffc0000 [ 118.958587][ T30] audit: type=1326 audit(1789978416.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9459e159 code=0x7ffc0000 [ 118.958773][ T30] audit: type=1326 audit(1789978416.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6d9459e159 code=0x7ffc0000 [ 118.962013][ T30] audit: type=1326 audit(1789978416.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d94597ed7 code=0x7ffc0000 [ 118.962060][ T30] audit: type=1326 audit(1789978416.220:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.0.316" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d9453f4d9 code=0x7ffc0000 [ 119.206467][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.372766][ T42] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.374470][ T42] usb 4-1: config 0 has no interfaces? [ 119.374529][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.418831][ T42] usb 4-1: config 0 descriptor?? [ 120.315789][ C1] net_ratelimit: 266 callbacks suppressed [ 121.614506][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 121.732041][ T5692] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.884614][ T42] usb 4-1: USB disconnect, device number 4 [ 121.902455][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 121.908958][ T5692] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.920413][ T5692] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.936250][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.936272][ T5692] usb 2-1: Product: syz [ 121.936287][ T5692] usb 2-1: Manufacturer: syz [ 121.936303][ T5692] usb 2-1: SerialNumber: syz [ 121.966426][ T5692] usb 2-1: config 0 descriptor?? [ 121.985776][ T6627] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.305287][ T42] usb 2-1: USB disconnect, device number 4 [ 122.414979][ T6660] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 123.160983][ T5721] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.249126][ T6689] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 123.249153][ T6689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.250439][ T6689] vhci_hcd vhci_hcd.0: Device attached [ 123.281951][ T6689] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 123.281982][ T6689] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.282030][ T6689] vhci_hcd vhci_hcd.0: Device attached [ 123.284554][ T6692] vhci_hcd: cannot find the pending unlink 555 [ 123.284624][ T6692] vhci_hcd: connection closed [ 123.286050][ T43] vhci_hcd vhci_hcd.1: stop threads [ 123.286072][ T43] vhci_hcd vhci_hcd.1: release socket [ 123.286093][ T43] vhci_hcd vhci_hcd.1: disconnect device [ 123.286188][ T6690] vhci_hcd: connection closed [ 123.286727][ T43] vhci_hcd vhci_hcd.1: stop threads [ 123.286744][ T43] vhci_hcd vhci_hcd.1: release socket [ 123.286764][ T43] vhci_hcd vhci_hcd.1: disconnect device [ 123.321114][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.332043][ T5721] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 123.395221][ T5721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.395275][ T5721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 123.395303][ T5721] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 123.395375][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.482987][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 123.484215][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.487510][ T25] usb 4-1: config 137 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.487531][ T25] usb 4-1: config 137 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.487579][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.860263][ T5721] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 123.860284][ T5721] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 123.890212][ T5721] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 123.910254][ T5721] usb 3-1: USB disconnect, device number 8 [ 124.101385][ T25] usbhid 4-1:137.0: can't add hid device: -71 [ 124.101544][ T25] usbhid 4-1:137.0: probe with driver usbhid failed with error -71 [ 124.111955][ T25] usb 4-1: USB disconnect, device number 5 [ 124.351457][ T5616] Bluetooth: hci4: command 0x1003 tx timeout [ 124.352324][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 124.609300][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 124.623023][ T6724] bond0: (slave bond_slave_0): Releasing backup interface [ 124.670588][ T6724] bond_slave_0: entered promiscuous mode [ 124.670599][ T6724] bond_slave_0: entered allmulticast mode [ 125.071748][ T6739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.104114][ T52] Bluetooth: hci3: link tx timeout [ 125.104213][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.263136][ T6745] sctp: [Deprecated]: syz.3.377 (pid 6745) Use of int in maxseg socket option. [ 125.263136][ T6745] Use struct sctp_assoc_value instead [ 125.519546][ T6756] Bluetooth: ISO socket layer initialized [ 125.543136][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 125.543156][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 125.543181][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.543196][ T52] Workqueue: hci3 hci_rx_work [ 125.543231][ T52] Call Trace: [ 125.543241][ T52] [ 125.543251][ T52] dump_stack_lvl+0xe8/0x150 [ 125.543283][ T52] sysfs_create_dir_ns+0x271/0x2a0 [ 125.543323][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 125.543359][ T52] ? do_raw_spin_unlock+0xf5/0x200 [ 125.543391][ T52] kobject_add_internal+0x622/0xcd0 [ 125.543426][ T52] kobject_add+0x163/0x240 [ 125.543458][ T52] ? __pfx_kobject_add+0x10/0x10 [ 125.543489][ T52] ? get_device_parent+0x366/0x3a0 [ 125.543522][ T52] device_add+0x3fa/0xb80 [ 125.543551][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 125.543586][ T52] le_conn_complete_evt+0x10b2/0x17a0 [ 125.543616][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 125.543658][ T52] ? skb_pull_data+0xf0/0x200 [ 125.543692][ T52] hci_le_conn_complete_evt+0x187/0x470 [ 125.543733][ T52] hci_event_packet+0x67a/0xf10 [ 125.543761][ T52] ? trace_irq_disable+0x3b/0x140 [ 125.543798][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 125.543831][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 125.543876][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 125.543906][ T52] hci_rx_work+0x3ee/0x1020 [ 125.543945][ T52] ? process_scheduled_works+0x97a/0x1630 [ 125.543973][ T52] process_scheduled_works+0xc3d/0x1630 [ 125.544036][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.544070][ T52] ? assign_work+0x3cf/0x5d0 [ 125.544102][ T52] worker_thread+0xa47/0xfb0 [ 125.544159][ T52] kthread+0x38b/0x480 [ 125.544191][ T52] ? __pfx_worker_thread+0x10/0x10 [ 125.544214][ T52] ? __pfx_kthread+0x10/0x10 [ 125.544247][ T52] ret_from_fork+0x514/0xb70 [ 125.544281][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 125.544311][ T52] ? __switch_to+0xc89/0x1420 [ 125.544342][ T52] ? __pfx_kthread+0x10/0x10 [ 125.544375][ T52] ret_from_fork_asm+0x1a/0x30 [ 125.544423][ T52] [ 125.544480][ T52] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.544520][ T52] Bluetooth: hci3: failed to register connection device [ 125.545373][ T52] Bluetooth: hci3: link tx timeout [ 125.545386][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.635378][ C0] net_ratelimit: 49 callbacks suppressed [ 126.074932][ T6759] syz.0.382: vmalloc error: size 36864, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.075051][ T6759] CPU: 0 UID: 0 PID: 6759 Comm: syz.0.382 Not tainted syzkaller #0 PREEMPT(full) [ 126.075076][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.075090][ T6759] Call Trace: [ 126.075099][ T6759] [ 126.075119][ T6759] dump_stack_lvl+0xe8/0x150 [ 126.075153][ T6759] warn_alloc+0x24d/0x270 [ 126.075191][ T6759] ? __pfx_warn_alloc+0x10/0x10 [ 126.075219][ T6759] ? policy_nodemask+0x2cc/0x8e0 [ 126.075250][ T6759] ? alloc_pages_mpol+0x256/0x390 [ 126.075287][ T6759] __vmalloc_node_range_noprof+0x12c8/0x1690 [ 126.075352][ T6759] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.075381][ T6759] ? pipapo_resize+0x266/0x840 [ 126.075406][ T6759] ? rcu_is_watching+0x16/0xb0 [ 126.075429][ T6759] ? pipapo_resize+0x266/0x840 [ 126.075453][ T6759] ? rcu_is_watching+0x16/0xb0 [ 126.075477][ T6759] ? pipapo_resize+0x266/0x840 [ 126.075501][ T6759] __kvmalloc_node_noprof+0x59c/0x820 [ 126.075533][ T6759] ? pipapo_resize+0x266/0x840 [ 126.075560][ T6759] ? pipapo_resize+0x266/0x840 [ 126.075591][ T6759] pipapo_resize+0x266/0x840 [ 126.075628][ T6759] pipapo_insert+0x52/0x960 [ 126.075670][ T6759] nft_pipapo_insert+0x103c/0x18a0 [ 126.075716][ T6759] ? __pfx_nft_pipapo_insert+0x10/0x10 [ 126.075743][ T6759] ? rcu_is_watching+0x16/0xb0 [ 126.075765][ T6759] ? trace_kmalloc+0x2a/0xf0 [ 126.075811][ T6759] ? nft_trans_alloc+0x40/0x2a0 [ 126.075839][ T6759] nf_tables_newsetelem+0x2aa4/0x4200 [ 126.075908][ T6759] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 126.075932][ T6759] ? lock_acquire+0x115/0x350 [ 126.075974][ T6759] ? nla_validate_array+0xfc/0x260 [ 126.076036][ T6759] ? __pfx___nla_validate_parse+0x10/0x10 [ 126.076072][ T6759] ? __pfx_nf_tables_newset+0x10/0x10 [ 126.076117][ T6759] ? lock_acquire+0x115/0x350 [ 126.076148][ T6759] ? nfnl_pernet+0x23/0x240 [ 126.076185][ T6759] ? __nla_parse+0x40/0x60 [ 126.076217][ T6759] nfnetlink_rcv+0x1288/0x28c0 [ 126.076279][ T6759] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 126.076322][ T6759] ? ref_tracker_free+0x689/0x830 [ 126.076372][ T6759] ? skb_clone+0x246/0x3a0 [ 126.076400][ T6759] ? __netlink_deliver_tap+0x811/0x860 [ 126.076434][ T6759] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.076460][ T6759] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.076491][ T6759] netlink_unicast+0x7bd/0x940 [ 126.076528][ T6759] netlink_sendmsg+0x7c3/0xae0 [ 126.076561][ T6759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.076596][ T6759] ? apparmor_socket_sendmsg+0x98/0x360 [ 126.076623][ T6759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.076649][ T6759] sock_sendmsg_nosec+0x13a/0x180 [ 126.076683][ T6759] ____sys_sendmsg+0x54e/0x850 [ 126.076713][ T6759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.076747][ T6759] ? import_iovec+0x73/0xa0 [ 126.076780][ T6759] ___sys_sendmsg+0x2a5/0x360 [ 126.076803][ T6759] ? __lock_acquire+0x747/0x2de0 [ 126.076839][ T6759] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.076868][ T6759] ? futex_wait+0x2a2/0x390 [ 126.076928][ T6759] ? __fget_files+0x2a/0x420 [ 126.076954][ T6759] ? __fget_files+0x3a2/0x420 [ 126.076991][ T6759] __x64_sys_sendmsg+0x1b1/0x290 [ 126.077019][ T6759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.077067][ T6759] do_syscall_64+0x166/0x520 [ 126.077089][ T6759] ? trace_irq_disable+0x3b/0x140 [ 126.077128][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.077151][ T6759] ? clear_bhb_loop+0x70/0xc0 [ 126.077178][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.077201][ T6759] RIP: 0033:0x7f6d9459e159 [ 126.077223][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.077243][ T6759] RSP: 002b:00007f6d953a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.077268][ T6759] RAX: ffffffffffffffda RBX: 00007f6d94825fa0 RCX: 00007f6d9459e159 [ 126.077284][ T6759] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 000000000000000b [ 126.077299][ T6759] RBP: 00007f6d9463506b R08: 0000000000000000 R09: 0000000000000000 [ 126.077313][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.077327][ T6759] R13: 00007f6d94826038 R14: 00007f6d94825fa0 R15: 00007ffe8fce98f8 [ 126.077362][ T6759] [ 126.110466][ T6759] Mem-Info: [ 126.110483][ T6759] active_anon:5834 inactive_anon:0 isolated_anon:0 [ 126.110483][ T6759] active_file:0 inactive_file:42363 isolated_file:0 [ 126.110483][ T6759] unevictable:0 dirty:59 writeback:0 [ 126.110483][ T6759] slab_reclaimable:9996 slab_unreclaimable:92654 [ 126.110483][ T6759] mapped:24815 shmem:522 pagetables:1143 [ 126.110483][ T6759] sec_pagetables:0 bounce:0 [ 126.110483][ T6759] kernel_misc_reclaimable:0 [ 126.110483][ T6759] free:1347129 free_pcp:8626 free_cma:0 [ 126.110534][ T6759] Node 0 active_anon:23336kB inactive_anon:0kB active_file:0kB inactive_file:169244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99260kB dirty:236kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11912kB pagetables:4424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 126.110586][ T6759] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 126.110633][ T6759] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.110693][ T6759] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 126.110744][ T6759] Node 0 DMA32 free:1435932kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23336kB inactive_anon:0kB active_file:0kB inactive_file:169244kB unevictable:0kB writepending:236kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:34500kB local_pcp:21276kB free_cma:0kB [ 126.110801][ T6759] lowmem_reserve[]: 0 0 1 1 1 [ 126.123175][ T6759] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 126.123237][ T6759] lowmem_reserve[]: 0 0 0 0 0 [ 126.123277][ T6759] Node 1 Normal free:3937224kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.123337][ T6759] lowmem_reserve[]: 0 0 0 0 0 [ 126.123375][ T6759] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.123493][ T6759] Node 0 DMA32: 459*4kB (UME) 236*8kB (UME) 98*16kB (UM) 194*32kB (UM) 46*64kB (UM) 31*128kB (UME) 11*256kB (M) 9*512kB (UM) 3*1024kB (UME) 5*2048kB (UME) 341*4096kB (M) = 1435884kB [ 126.123665][ T6759] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.123763][ T6759] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 3*16kB (UM) 5*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937224kB [ 126.123916][ T6759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.123933][ T6759] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.123949][ T6759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.123964][ T6759] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.123980][ T6759] 42881 total pagecache pages [ 126.123988][ T6759] 0 pages in swap cache [ 126.123995][ T6759] Free swap = 124992kB [ 126.124004][ T6759] Total swap = 124996kB [ 126.124012][ T6759] 2097051 pages RAM [ 126.124019][ T6759] 0 pages HighMem/MovableOnly [ 126.124027][ T6759] 429554 pages reserved [ 126.124034][ T6759] 0 pages cma reserved [ 126.351855][ T6759] syz.0.382 (6759) used greatest stack depth: 16480 bytes left [ 127.152093][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 127.578777][ T5692] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.995008][ T5692] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 128.125891][ T5692] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 128.125964][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.125992][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.126014][ T5692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 128.235966][ T5692] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 128.235988][ T5692] usb 2-1: Manufacturer: syz [ 128.247904][ T5692] usb 2-1: config 0 descriptor?? [ 128.745732][ T5692] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 129.188270][ T5692] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 129.830733][ T5616] Bluetooth: hci3: link tx timeout [ 129.838440][ T5616] Bluetooth: hci3: link tx timeout [ 130.066847][ T5616] Bluetooth: hci3: link tx timeout [ 130.271680][ T986] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 130.444717][ T6858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.529909][ T6858] md: could not open device unknown-block(1,0). [ 130.921378][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 131.135790][ T42] usb 2-1: USB disconnect, device number 5 [ 131.150907][ C1] net_ratelimit: 60 callbacks suppressed [ 131.502370][ T6877] FAULT_INJECTION: forcing a failure. [ 131.502370][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 131.502403][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.1.420 Not tainted syzkaller #0 PREEMPT(full) [ 131.502429][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.502443][ T6877] Call Trace: [ 131.502452][ T6877] [ 131.502462][ T6877] dump_stack_lvl+0xe8/0x150 [ 131.502498][ T6877] should_fail_ex+0x3eb/0x540 [ 131.502531][ T6877] should_failslab+0xa8/0x100 [ 131.502558][ T6877] __kmalloc_noprof+0xf9/0x710 [ 131.502599][ T6877] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 131.502622][ T6877] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 131.502652][ T6877] snd_pcm_hw_refine+0xa18/0x17d0 [ 131.502693][ T6877] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 131.502747][ T6877] ? __kasan_kmalloc+0x93/0xb0 [ 131.502772][ T6877] ? __kmalloc_cache_noprof+0x31c/0x600 [ 131.502804][ T6877] ? __kmalloc_cache_noprof+0x148/0x600 [ 131.502834][ T6877] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 131.502862][ T6877] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 131.502897][ T6877] snd_pcm_hw_param_near+0x108/0x4d0 [ 131.502932][ T6877] snd_pcm_oss_change_params_locked+0x1e07/0x3c80 [ 131.502994][ T6877] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 131.503034][ T6877] ? lock_acquire+0x115/0x350 [ 131.503082][ T6877] snd_pcm_oss_set_trigger+0x35a/0xda0 [ 131.503119][ T6877] snd_pcm_oss_ioctl+0xbb3/0xdf0 [ 131.503147][ T6877] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 131.503174][ T6877] __se_sys_ioctl+0xfc/0x170 [ 131.503212][ T6877] do_syscall_64+0x166/0x520 [ 131.503233][ T6877] ? trace_irq_disable+0x3b/0x140 [ 131.503263][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.503286][ T6877] ? clear_bhb_loop+0x70/0xc0 [ 131.503314][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.503336][ T6877] RIP: 0033:0x7fd5b0d9e159 [ 131.503357][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.503376][ T6877] RSP: 002b:00007fd5b1cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.503401][ T6877] RAX: ffffffffffffffda RBX: 00007fd5b1025fa0 RCX: 00007fd5b0d9e159 [ 131.503416][ T6877] RDX: 0000200000000000 RSI: 0000000040045010 RDI: 0000000000000004 [ 131.503431][ T6877] RBP: 00007fd5b0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 131.503444][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.503458][ T6877] R13: 00007fd5b1026038 R14: 00007fd5b1025fa0 R15: 00007ffcb004f648 [ 131.503492][ T6877] [ 134.998752][ T6921] FAULT_INJECTION: forcing a failure. [ 134.998752][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 134.998786][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.3.433 Not tainted syzkaller #0 PREEMPT(full) [ 134.998812][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.998826][ T6921] Call Trace: [ 134.998835][ T6921] [ 134.998846][ T6921] dump_stack_lvl+0xe8/0x150 [ 134.998883][ T6921] should_fail_ex+0x3eb/0x540 [ 134.998914][ T6921] should_failslab+0xa8/0x100 [ 134.998942][ T6921] __kmalloc_noprof+0xf9/0x710 [ 134.998974][ T6921] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 134.999001][ T6921] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 134.999031][ T6921] snd_pcm_hw_refine+0xa18/0x17d0 [ 134.999071][ T6921] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 134.999140][ T6921] ? __kasan_kmalloc+0x93/0xb0 [ 134.999167][ T6921] snd_pcm_hw_param_first+0x3ab/0xb10 [ 134.999207][ T6921] snd_pcm_hw_param_near+0x434/0x4d0 [ 134.999244][ T6921] snd_pcm_oss_change_params_locked+0x1e07/0x3c80 [ 134.999307][ T6921] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 134.999351][ T6921] ? lock_acquire+0x115/0x350 [ 134.999397][ T6921] snd_pcm_oss_set_trigger+0x35a/0xda0 [ 134.999434][ T6921] snd_pcm_oss_ioctl+0xbb3/0xdf0 [ 134.999463][ T6921] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 134.999490][ T6921] __se_sys_ioctl+0xfc/0x170 [ 134.999536][ T6921] do_syscall_64+0x166/0x520 [ 134.999559][ T6921] ? trace_irq_disable+0x3b/0x140 [ 134.999588][ T6921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.999612][ T6921] ? clear_bhb_loop+0x70/0xc0 [ 134.999640][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.999663][ T6921] RIP: 0033:0x7f49d2d9e159 [ 134.999685][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.999705][ T6921] RSP: 002b:00007f49d3d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.999731][ T6921] RAX: ffffffffffffffda RBX: 00007f49d3025fa0 RCX: 00007f49d2d9e159 [ 134.999748][ T6921] RDX: 0000200000000000 RSI: 0000000040045010 RDI: 0000000000000004 [ 134.999764][ T6921] RBP: 00007f49d2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 134.999779][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.999793][ T6921] R13: 00007f49d3026038 R14: 00007f49d3025fa0 R15: 00007ffc79c63de8 [ 134.999829][ T6921] [ 136.238618][ T5698] net_ratelimit: 194 callbacks suppressed [ 138.451089][ T986] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.601766][ T986] usb 1-1: Using ep0 maxpacket: 8 [ 138.620392][ T986] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.636778][ T986] usb 1-1: config 0 has no interfaces? [ 138.636836][ T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.691512][ T986] usb 1-1: config 0 descriptor?? [ 139.124590][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.267320][ T986] usb 1-1: USB disconnect, device number 9 [ 139.295106][ T6990] input: syz1 as /devices/virtual/input/input8 [ 140.422785][ T7005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.459'. [ 140.459507][ T7006] usb usb8: usbfs: process 7006 (syz.0.460) did not claim interface 0 before use [ 141.298907][ T5695] net_ratelimit: 136 callbacks suppressed [ 141.681561][ C0] sched: DL replenish lagged too much [ 146.591938][ T5702] net_ratelimit: 58 callbacks suppressed [ 151.873555][ C0] net_ratelimit: 56 callbacks suppressed [ 156.896596][ T5697] net_ratelimit: 62 callbacks suppressed [ 162.115754][ C0] net_ratelimit: 38 callbacks suppressed [ 167.924544][ T5721] net_ratelimit: 1 callbacks suppressed [ 178.753241][ C0] net_ratelimit: 11 callbacks suppressed [ 188.991986][ C0] net_ratelimit: 14 callbacks suppressed [ 194.758964][ C1] net_ratelimit: 7 callbacks suppressed [ 199.953208][ C0] net_ratelimit: 29 callbacks suppressed [ 205.790320][ T7011] net_ratelimit: 3 callbacks suppressed [ 210.541101][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 210.541173][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 210.541217][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 211.133444][ T1309] net_ratelimit: 13 callbacks suppressed [ 216.519561][ C0] net_ratelimit: 55 callbacks suppressed [ 227.392359][ C0] net_ratelimit: 11 callbacks suppressed [ 232.415527][ T5718] net_ratelimit: 4 callbacks suppressed [ 237.562930][ T5025] net_ratelimit: 27 callbacks suppressed [ 242.755943][ C0] net_ratelimit: 12 callbacks suppressed [ 248.037090][ C0] net_ratelimit: 19 callbacks suppressed [ 259.765271][ T5706] net_ratelimit: 13 callbacks suppressed [ 264.777424][ T76] net_ratelimit: 74 callbacks suppressed [ 269.802850][ C1] net_ratelimit: 34 callbacks suppressed [ 275.391277][ C0] net_ratelimit: 6 callbacks suppressed [ 280.563828][ T1309] net_ratelimit: 35 callbacks suppressed [ 286.197638][ T5707] net_ratelimit: 36 callbacks suppressed [ 291.352593][ T7013] net_ratelimit: 15 callbacks suppressed [ 296.814442][ T76] net_ratelimit: 14 callbacks suppressed [ 301.852566][ T1309] net_ratelimit: 34 callbacks suppressed [ 307.036169][ T5025] net_ratelimit: 36 callbacks suppressed [ 312.165088][ T7013] net_ratelimit: 26 callbacks suppressed [ 317.580938][ T5699] net_ratelimit: 1 callbacks suppressed [ 322.671945][ T7013] net_ratelimit: 1 callbacks suppressed [ 327.714626][ T5822] net_ratelimit: 47 callbacks suppressed [ 333.953420][ T5617] net_ratelimit: 16 callbacks suppressed [ 339.475729][ T5706] net_ratelimit: 15 callbacks suppressed [ 344.757865][ T7014] net_ratelimit: 85 callbacks suppressed [ 349.989265][ T5617] net_ratelimit: 38 callbacks suppressed [ 355.670376][ T5764] net_ratelimit: 33 callbacks suppressed [ 360.820006][ T7013] net_ratelimit: 34 callbacks suppressed [ 365.929081][ T5692] net_ratelimit: 42 callbacks suppressed [ 371.136356][ T25] net_ratelimit: 36 callbacks suppressed [ 376.315282][ T5706] net_ratelimit: 24 callbacks suppressed [ 381.538904][ T10] net_ratelimit: 28 callbacks suppressed [ 387.286987][ T7013] net_ratelimit: 34 callbacks suppressed [ 394.793264][ T5721] net_ratelimit: 36 callbacks suppressed [ 407.405351][ T7017] net_ratelimit: 24 callbacks suppressed [ 413.363659][ T7017] net_ratelimit: 9 callbacks suppressed [ 419.011482][ T5617] net_ratelimit: 10 callbacks suppressed [ 424.207774][ T7014] net_ratelimit: 12 callbacks suppressed [ 426.255199][ C0] virtqueue callback for ffff88802766ac00 (ffffffff86c736f0) [ 426.256549][ C0] No more buffers in queue [ 426.257255][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 426.257281][ C0] No more buffers in queue [ 426.257526][ C0] eth0: xmit ffff88818011a3c0 42:01:0a:80:00:01 [ 426.257557][ C0] Added buffer head 23 to ffff88802766aa00 [ 426.257644][ C0] virtqueue callback for ffff88802766aa00 (ffffffff86c73830) [ 426.267596][ C0] Sent skb ffff88818011a3c0 [ 426.267670][ C0] No more buffers in queue [ 426.272843][ C1] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 426.437585][ C1] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 426.551671][ T7011] wireguard: wg0: Sending handshake initiation to peer 14 ([::1]:20003/0%0) [ 426.993151][ T7011] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 427.805254][ C1] virtqueue callback for ffff88802766a800 (ffffffff86c736f0) [ 427.807445][ C1] No more buffers in queue [ 427.808063][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 427.808092][ C1] No more buffers in queue [ 427.808383][ C1] eth0: xmit ffff8881811573c0 42:01:0a:80:00:01 [ 427.808416][ C1] Added buffer head 6 to ffff888026b76e00 [ 427.808932][ C1] virtqueue callback for ffff888026b76e00 (ffffffff86c73830) [ 427.820022][ C1] Sent skb ffff8881811573c0 [ 427.820079][ C1] No more buffers in queue [ 429.000047][ C1] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 429.152489][ T31] INFO: task kworker/1:6:5774 blocked for more than 143 seconds. [ 429.152524][ T31] Not tainted syzkaller #0 [ 429.152537][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.152549][ T31] task:kworker/1:6 state:D stack:22504 pid:5774 tgid:5774 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 429.152616][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 429.152667][ T31] Call Trace: [ 429.152676][ T31] [ 429.152692][ T31] __schedule+0x17dd/0x5940 [ 429.152749][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 429.152785][ T31] ? __pfx___schedule+0x10/0x10 [ 429.152826][ T31] ? schedule+0x90/0x2b0 [ 429.152859][ T31] schedule+0x164/0x2b0 [ 429.152892][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.152923][ T31] __mutex_lock+0x7c4/0x15a0 [ 429.152950][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 429.152978][ T31] ? reg_check_chans_work+0x1a1/0x1110 [ 429.153013][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.153048][ T31] ? add_lock_to_list+0xc7/0x100 [ 429.153079][ T31] reg_check_chans_work+0x1a1/0x1110 [ 429.153130][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 429.153167][ T31] ? lock_acquire+0x115/0x350 [ 429.153207][ T31] ? rcu_is_watching+0x16/0xb0 [ 429.153233][ T31] ? process_scheduled_works+0x97a/0x1630 [ 429.153258][ T31] process_scheduled_works+0xc3d/0x1630 [ 429.153319][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.153353][ T31] ? assign_work+0x3cf/0x5d0 [ 429.153385][ T31] worker_thread+0xa47/0xfb0 [ 429.153427][ T31] ? __kthread_parkme+0x71/0x1f0 [ 429.153466][ T31] kthread+0x38b/0x480 [ 429.153498][ T31] ? __pfx_worker_thread+0x10/0x10 [ 429.153522][ T31] ? __pfx_kthread+0x10/0x10 [ 429.153555][ T31] ret_from_fork+0x514/0xb70 [ 429.153588][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 429.153618][ T31] ? __switch_to+0xc89/0x1420 [ 429.153657][ T31] ? __pfx_kthread+0x10/0x10 [ 429.153690][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.153738][ T31] [ 429.153757][ T31] [ 429.153757][ T31] Showing all locks held in the system: [ 429.153766][ T31] locks held by kthreadd/2: 1, last CPU#0: [ 429.153782][ T31] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 429.153848][ T31] locks held by kworker/R-kvfre/6: 1, on CPU#0: [ 429.153864][ T31] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 429.153922][ T31] locks held by kworker/0:1/10: 2, last CPU#0: [ 429.153938][ T31] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.153996][ T31] #1: ffffc900000f7c40 ((work_completion)(&(&gc->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.154052][ T31] locks held by kworker/u8:0/12: 3, last CPU#0: [ 429.154068][ T31] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.154123][ T31] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.154179][ T31] #2: ffff888067c607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 429.154239][ T31] locks held by kworker/u8:1/13: 3, last CPU#0: [ 429.154255][ T31] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.154311][ T31] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.154387][ T31] #2: ffff888035dea258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 429.154452][ T31] locks held by kworker/R-mm_pe/14: 1, last CPU#1: [ 429.154467][ T31] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 429.154526][ T31] locks held by kworker/1:0/25: 4, last CPU#1: [ 429.154541][ T31] #0: ffff88807f401540 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.154602][ T31] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.154681][ T31] #2: ffff88807f619440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 429.154742][ T31] #3: ffff888078b4a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 429.154801][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 429.154817][ T31] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 429.154873][ T31] locks held by kworker/1:1/42: 4, last CPU#1: [ 429.154889][ T31] #0: ffff8880599ec940 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.154949][ T31] #1: ffffc90000b27c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155019][ T31] #2: ffff88807f509440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 429.155078][ T31] #3: ffff888012a4e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 429.155137][ T31] locks held by kworker/u8:2/43: 3, last CPU#0: [ 429.155152][ T31] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155208][ T31] #1: ffffc90000b47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155263][ T31] #2: ffff888058e107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 429.155324][ T31] locks held by kworker/u8:3/50: 4, last CPU#0: [ 429.155339][ T31] #0: ffff8880773e3940 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155400][ T31] #1: ffffc90000bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155456][ T31] #2: ffff88807eed9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 429.155514][ T31] #3: ffff888078b4f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 429.155574][ T31] locks held by kworker/u8:4/59: 3, last CPU#0: [ 429.155590][ T31] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155655][ T31] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155711][ T31] #2: ffff8880688307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 429.155771][ T31] locks held by kworker/u8:5/76: 4, on CPU#0: [ 429.155786][ T31] #0: ffff8880768fe140 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155841][ T31] #1: ffffc9000207fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.155897][ T31] #2: ffff88807f509440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 429.155955][ T31] #3: ffff888012a4dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 429.156017][ T31] locks held by kworker/u8:6/147: 3, last CPU#0: [ 429.156033][ T31] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.156088][ T31] #1: ffffc90002e47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.156142][ T31] #2: ffff888067d507a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 429.156199][ T31] locks held by kworker/u8:7/156: 4, last CPU#0: [ 429.156215][ T31] #0: ffff8880768ff940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.156270][ T31] #1: ffffc90002e57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 429.156325][ T31] #2: ffff88807f50d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 429.156384][ T31] #3: ffff888012a4f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 429.156445][ T31] locks held by kworker/1:2/986: 3, last CPU#1: [ 429.156462][ T31] #0: ffff88807f638540 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630