last executing test programs: 5.715312912s ago: executing program 3 (id=424): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20040890}, 0x4008011) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) 5.296212432s ago: executing program 3 (id=429): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='setgroups\x00') r1 = fanotify_init(0x4, 0x101000) readv(r1, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$ublk_bdev(r0, &(0x7f0000000000)=""/44, 0x2c) 4.782218456s ago: executing program 2 (id=431): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESHEX], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 4.681881681s ago: executing program 1 (id=432): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x0, 0x30314742, 0x1, @discrete={0x80000000, 0x6}}) 3.756293064s ago: executing program 2 (id=433): syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9000a0006000500030102"], 0xf) 3.736449275s ago: executing program 0 (id=434): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9aec, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @pix={0x8, 0x3, 0x34324258, 0x5, 0xffffffff, 0x4, 0x7, 0x4, 0x1, 0x0, 0x1}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_overlay={0x221, 0xc, 0x4, 0x20, 0x7, {0x0, 0x2710}, {0x3, 0xc, 0xbf, 0x3, 0xd8, 0x0, "00991766"}, 0x6, 0x3, {0x0}, 0x163}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) setresuid(0x0, 0xee00, 0x0) io_uring_setup(0x49bb, &(0x7f0000000640)={0x0, 0x6e2f, 0x400, 0x1, 0xfffffffe}) 3.677433337s ago: executing program 3 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) dup(r0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x4000, 0x0}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.476221657s ago: executing program 1 (id=436): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+me'], 0xc) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0xfffc, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @loopback, 0xfffffffe}}}, 0x11f) close_range(r0, 0xffffffffffffffff, 0x0) 3.221422659s ago: executing program 0 (id=437): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20040890}, 0x4008011) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) 3.164567441s ago: executing program 1 (id=438): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 2.99627077s ago: executing program 2 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x400001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) fanotify_init(0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) 2.948770702s ago: executing program 0 (id=440): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2.914614373s ago: executing program 1 (id=441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000004c0)="02155e6509625285a565d235077879efa843adf933737d90a5ab08d8cef99870ed0c4be6", 0x24, 0x2) 2.77592894s ago: executing program 2 (id=442): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x2f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) r3 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) write(0xffffffffffffffff, &(0x7f0000000200)="503477a879dfa1c9ca5fea44da7059a405b2b65f1df96f9359af593669f59679e249d15271dc9976650ba1358e2873622501cff750ba2a5ebede2253f09aa5a970a1c390bdda43ca758193ecbda3ceb07aa5f0a70ebcd22d4982a50ecddc1ce3c20812f53476a654471b4aec6d92798b93fcc9c9ad9fa6cc3187c96b0347c10fe62b2237e9ce949ddc2a43a648c606673d5eac86a2b9907ad7a2efce6b8859b15f21c13c17dc6186fa98d8373323bb8440caa01d931dd55c4f8ceff40640492fdf556b8c0fb019a0f98e6ec57d2f5361920304907dd90fbbd12b39cd50a7", 0xde) 1.671938202s ago: executing program 2 (id=443): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='setgroups\x00') r1 = fanotify_init(0x4, 0x101000) readv(r1, &(0x7f0000000180), 0x0) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$ublk_bdev(r0, &(0x7f0000000000)=""/44, 0x2c) 1.569919036s ago: executing program 0 (id=444): r0 = syz_open_dev$vim2m(0x0, 0x180000000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x30314742, 0x1, @discrete={0x80000000, 0x6}}) 1.516242309s ago: executing program 3 (id=445): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9aec, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @pix={0x8, 0x3, 0x34324258, 0x5, 0xffffffff, 0x4, 0x7, 0x4, 0x1, 0x0, 0x1}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_overlay={0x221, 0xc, 0x4, 0x20, 0x7, {0x0, 0x2710}, {0x3, 0xc, 0xbf, 0x3, 0xd8, 0x0, "00991766"}, 0x6, 0x3, {0x0}, 0x163}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) setresuid(0x0, 0xee00, 0x0) io_uring_setup(0x49bb, &(0x7f0000000640)={0x0, 0x6e2f, 0x400, 0x1, 0xfffffffe}) 1.427358423s ago: executing program 2 (id=446): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x1c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x5) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e00, 0x400, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000406e04785540000102030109022d0001010620d60904000302030102090921887a"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xf, 0xe, 0x0, 0x8, 0x6}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "36ae30fcc05b458e26178a7fd387c8fa"}]}, 0x2, [{0x85, &(0x7f0000000180)=@string={0x85, 0x3, "baf440d59e946cc61dd2e629d00c651f6c9e0e69998daa6dce85be0504f38a9a322067aaa99708d5d38eaa60785ce2fa458d3e250e6f221ca9c57a4acde24212e345ae3f7781cd21066d452e416da0959fa1999c0c61324cb94624216469bc37bb50c46cf0fe028f8ed04a20b3164dd49d4ba4aad58fa5c8dda023d06a949828fd33cb"}}, {0x92, &(0x7f0000000240)=@string={0x92, 0x3, "4a2d0d9461ab5140614e4adb4eaf056c7852892e2178612a973903d4ded739703d5732e5174894acbd2e6a1c4ddd00e1f3a37ad18a94fc09b6fd589d9c2c6f09aacf8bbeb9722d4c4bb668f8d73d56cd6ff432b8c194fe55790b9797df5857f6a55f89a79419cff76b223e8795501ea395555c6ed36cd840318ad8f9c688a786b3923a94d2eaa5489adbb06a64fce2da"}}]}) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022e602000000126b94c43631be47ce51480d45"], 0x0}, 0x0) flock(r2, 0x2) 1.299236519s ago: executing program 1 (id=447): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x7fffffff, @mcast2, 0xffff}, {0xa, 0x4e23, 0x6f8, @loopback, 0x7fff}, 0x0, {[0x1, 0x0, 0x5, 0x1, 0xd, 0x7, 0xffffffff, 0x8]}}, 0x5c) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x2}, 0x3e) write(0xffffffffffffffff, &(0x7f0000000180)='traceon', 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x169e41, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/191, 0xbf) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 1.232088532s ago: executing program 0 (id=448): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20040890}, 0x4008011) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) 1.168786285s ago: executing program 3 (id=449): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0xa00000, 0x1ff, 0xdb, 0xffffffffffffffff, 0x0, 0x0}) 912.575037ms ago: executing program 3 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x400001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) fanotify_init(0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) 883.060069ms ago: executing program 0 (id=451): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)={0x4, 0x0, [{0x80000000, 0xe, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x7, 0xebc, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0x80000007, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x1, 0x101, 0x2, 0x8000, 0x27, 0x7, 0x9}]}) prctl$PR_SET_ENDIAN(0x14, 0x2) 0s ago: executing program 1 (id=452): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x2f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) r3 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) write(0xffffffffffffffff, &(0x7f0000000200)="503477a879dfa1c9ca5fea44da7059a405b2b65f1df96f9359af593669f59679e249d15271dc9976650ba1358e2873622501cff750ba2a5ebede2253f09aa5a970a1c390bdda43ca758193ecbda3ceb07aa5f0a70ebcd22d4982a50ecddc1ce3c20812f53476a654471b4aec6d92798b93fcc9c9ad9fa6cc3187c96b0347c10fe62b2237e9ce949ddc2a43a648c606673d5eac86a2b9907ad7a2efce6b8859b15f21c13c17dc6186fa98d8373323bb8440caa01d931dd55c4f8ceff40640492fdf556b8c0fb019a0f98e6ec57d2f5361920304907dd90fbbd12b39cd50a7", 0xde) kernel console output (not intermixed with test programs): allmulticast mode [ 81.759145][ T5781] bridge_slave_0: entered promiscuous mode [ 81.775932][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.783069][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.793040][ T5781] bridge_slave_1: entered allmulticast mode [ 81.800133][ T5781] bridge_slave_1: entered promiscuous mode [ 81.818958][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.865195][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.874601][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.884656][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.892437][ T5777] bridge_slave_0: entered allmulticast mode [ 81.899882][ T5777] bridge_slave_0: entered promiscuous mode [ 81.910026][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.923846][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.949405][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.956959][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.964156][ T5777] bridge_slave_1: entered allmulticast mode [ 81.971439][ T5777] bridge_slave_1: entered promiscuous mode [ 82.023352][ T5780] team0: Port device team_slave_0 added [ 82.034845][ T5781] team0: Port device team_slave_0 added [ 82.073369][ T5780] team0: Port device team_slave_1 added [ 82.082202][ T5781] team0: Port device team_slave_1 added [ 82.100234][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.113427][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.122985][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.130389][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.138035][ T5775] bridge_slave_0: entered allmulticast mode [ 82.144866][ T5775] bridge_slave_0: entered promiscuous mode [ 82.181492][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.188512][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.214474][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.235352][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.242878][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.250963][ T5775] bridge_slave_1: entered allmulticast mode [ 82.257934][ T5775] bridge_slave_1: entered promiscuous mode [ 82.265082][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.272720][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.298726][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.310810][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.320001][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.346278][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.372073][ T5777] team0: Port device team_slave_0 added [ 82.397898][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.404876][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.431127][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.469044][ T5777] team0: Port device team_slave_1 added [ 82.477090][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.490184][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.521473][ T5780] hsr_slave_0: entered promiscuous mode [ 82.528733][ T5780] hsr_slave_1: entered promiscuous mode [ 82.594327][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.601833][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.627983][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.652155][ T5775] team0: Port device team_slave_0 added [ 82.662010][ T5775] team0: Port device team_slave_1 added [ 82.685984][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.692940][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.720186][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.760497][ T5781] hsr_slave_0: entered promiscuous mode [ 82.767685][ T5781] hsr_slave_1: entered promiscuous mode [ 82.773844][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.782046][ T5781] Cannot create hsr debugfs directory [ 82.856729][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.863720][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.893427][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.934405][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.941620][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.968303][ T5778] Bluetooth: hci0: command tx timeout [ 82.968321][ T5782] Bluetooth: hci1: command tx timeout [ 82.974128][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.981276][ T5782] Bluetooth: hci2: command tx timeout [ 83.016045][ T5777] hsr_slave_0: entered promiscuous mode [ 83.024048][ T5777] hsr_slave_1: entered promiscuous mode [ 83.030793][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.038597][ T5782] Bluetooth: hci3: command tx timeout [ 83.044275][ T5777] Cannot create hsr debugfs directory [ 83.133413][ T5775] hsr_slave_0: entered promiscuous mode [ 83.140657][ T5775] hsr_slave_1: entered promiscuous mode [ 83.147270][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.154859][ T5775] Cannot create hsr debugfs directory [ 83.284493][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.303074][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.342936][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.353766][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.514198][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.528801][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.539197][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.557215][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.644511][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.655432][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.690167][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.701356][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.753542][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.772691][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.783030][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.794341][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.879279][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.942151][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.958458][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.977148][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.984445][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.000363][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.007528][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.041497][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.058802][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.066037][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.103105][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.110313][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.129064][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.194113][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.204541][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.242773][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.250027][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.282512][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.297597][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.304748][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.329386][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.336579][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.352093][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.359288][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.757610][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.783002][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.901338][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.950311][ T5780] veth0_vlan: entered promiscuous mode [ 84.984613][ T5780] veth1_vlan: entered promiscuous mode [ 84.995403][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.005238][ T5781] veth0_vlan: entered promiscuous mode [ 85.021364][ T5781] veth1_vlan: entered promiscuous mode [ 85.036178][ T5782] Bluetooth: hci1: command tx timeout [ 85.036195][ T5778] Bluetooth: hci2: command tx timeout [ 85.041610][ T5782] Bluetooth: hci0: command tx timeout [ 85.118780][ T5775] veth0_vlan: entered promiscuous mode [ 85.125939][ T5782] Bluetooth: hci3: command tx timeout [ 85.155061][ T5781] veth0_macvtap: entered promiscuous mode [ 85.171516][ T5775] veth1_vlan: entered promiscuous mode [ 85.191105][ T5781] veth1_macvtap: entered promiscuous mode [ 85.209702][ T5780] veth0_macvtap: entered promiscuous mode [ 85.222744][ T5780] veth1_macvtap: entered promiscuous mode [ 85.232534][ T5777] veth0_vlan: entered promiscuous mode [ 85.264530][ T5777] veth1_vlan: entered promiscuous mode [ 85.280312][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.299668][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.313015][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.325200][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.339273][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.352224][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.362713][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372155][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.381726][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.392711][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.403919][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.415232][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.433591][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.443530][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.452766][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.462049][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.476735][ T5775] veth0_macvtap: entered promiscuous mode [ 85.503198][ T5775] veth1_macvtap: entered promiscuous mode [ 85.577498][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.589394][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.600810][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.612020][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.624851][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.642464][ T5777] veth0_macvtap: entered promiscuous mode [ 85.658655][ T5777] veth1_macvtap: entered promiscuous mode [ 85.684607][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.702300][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.712287][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.722936][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.734466][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.777870][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.787431][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.798278][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.807561][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846400][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.854405][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.897250][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.908357][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.918851][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.929735][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.940134][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.951181][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.962612][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.005862][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.010505][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.013725][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.025357][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.041697][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.052943][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.062920][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.073489][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.088289][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.097700][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.119988][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.171339][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.184813][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.194397][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.204592][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.252633][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.279557][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.311151][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.330683][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.365138][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.430834][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.437666][ T5844] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 86.448112][ T5844] FAULT_INJECTION: forcing a failure. [ 86.448112][ T5844] name failslab, interval 1, probability 0, space 0, times 1 [ 86.461210][ T5844] CPU: 0 PID: 5844 Comm: syz.0.1 Not tainted syzkaller #0 [ 86.468366][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.478502][ T5844] Call Trace: [ 86.481808][ T5844] [ 86.484764][ T5844] dump_stack_lvl+0x18c/0x250 [ 86.489514][ T5844] ? show_regs_print_info+0x20/0x20 [ 86.494772][ T5844] ? load_image+0x420/0x420 [ 86.499375][ T5844] ? __might_sleep+0xe0/0xe0 [ 86.504026][ T5844] ? __lock_acquire+0x7d80/0x7d80 [ 86.509117][ T5844] ? rcu_read_lock_bh_held+0x100/0x100 [ 86.514633][ T5844] should_fail_ex+0x394/0x4c0 [ 86.519360][ T5844] should_failslab+0x9/0x20 [ 86.523934][ T5844] slab_pre_alloc_hook+0x59/0x300 [ 86.529029][ T5844] ? tomoyo_find_next_domain+0xe0/0x1a50 [ 86.534725][ T5844] __kmem_cache_alloc_node+0x53/0x250 [ 86.540160][ T5844] ? tomoyo_find_next_domain+0xe0/0x1a50 [ 86.545840][ T5844] kmalloc_trace+0x2a/0xe0 [ 86.545891][ T5844] tomoyo_find_next_domain+0xe0/0x1a50 [ 86.545934][ T5844] ? rw_verify_area+0x1b0/0x1b0 [ 86.560826][ T5844] ? read_lock_is_recursive+0x20/0x20 [ 86.566238][ T5844] ? tomoyo_assign_domain+0x790/0x790 [ 86.571656][ T5844] ? common_file_perm+0x198/0x1f0 [ 86.576722][ T5844] ? tomoyo_bprm_check_security+0xea/0x170 [ 86.582572][ T5844] tomoyo_bprm_check_security+0x116/0x170 [ 86.588357][ T5844] security_bprm_check+0x62/0xa0 [ 86.593374][ T5844] bprm_execve+0xa72/0x1730 [ 86.597937][ T5844] ? alloc_bprm+0x9a0/0x9a0 [ 86.602485][ T5844] ? put_arg_page+0xea/0x260 [ 86.607129][ T5844] ? copy_string_kernel+0x1e9/0x220 [ 86.612379][ T5844] do_execveat_common+0x501/0x6b0 [ 86.617455][ T5844] __x64_sys_execve+0x92/0xa0 [ 86.622188][ T5844] do_syscall_64+0x55/0xb0 [ 86.626673][ T5844] ? clear_bhb_loop+0x40/0x90 [ 86.631395][ T5844] ? clear_bhb_loop+0x40/0x90 [ 86.636208][ T5844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.642247][ T5844] RIP: 0033:0x7f2ff3d9e159 [ 86.646717][ T5844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.666480][ T5844] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 86.674948][ T5844] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 86.683011][ T5844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 86.691030][ T5844] RBP: 00007f2ff3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 86.699048][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.707064][ T5844] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 86.715088][ T5844] [ 86.781906][ T4696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.812325][ T4696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.951760][ T4696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.985753][ T4696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.232088][ T5778] Bluetooth: hci1: command tx timeout [ 87.238111][ T5790] Bluetooth: hci0: command tx timeout [ 87.243552][ T5790] Bluetooth: hci3: command tx timeout [ 87.249999][ T5782] Bluetooth: hci2: command tx timeout [ 87.472354][ T5850] warning: `syz.0.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.868805][ T5855] Zero length message leads to an empty skb [ 88.299843][ T5860] autofs4:pid:5860:autofs_fill_super: called with bogus options [ 89.338398][ T5782] Bluetooth: hci1: command tx timeout [ 89.343853][ T5782] Bluetooth: hci2: command tx timeout [ 89.349342][ T5782] Bluetooth: hci3: command tx timeout [ 89.354773][ T5782] Bluetooth: hci0: command tx timeout [ 89.595385][ T5872] input: syz0 as /devices/virtual/input/input5 [ 90.338648][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.350388][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.359733][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 91.818642][ T5883] FAULT_INJECTION: forcing a failure. [ 91.818642][ T5883] name failslab, interval 1, probability 0, space 0, times 0 [ 91.855649][ T971] cfg80211: failed to load regulatory.db [ 91.885697][ T5883] CPU: 0 PID: 5883 Comm: syz.2.13 Not tainted syzkaller #0 [ 91.892971][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.903065][ T5883] Call Trace: [ 91.906377][ T5883] [ 91.909356][ T5883] dump_stack_lvl+0x18c/0x250 [ 91.914118][ T5883] ? show_regs_print_info+0x20/0x20 [ 91.919379][ T5883] ? load_image+0x420/0x420 [ 91.923948][ T5883] ? __might_sleep+0xe0/0xe0 [ 91.928610][ T5883] ? __lock_acquire+0x7d80/0x7d80 [ 91.933687][ T5883] should_fail_ex+0x394/0x4c0 [ 91.938416][ T5883] should_failslab+0x9/0x20 [ 91.942970][ T5883] slab_pre_alloc_hook+0x59/0x300 [ 91.948058][ T5883] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 91.953745][ T5883] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 91.959436][ T5883] __kmem_cache_alloc_node+0x53/0x250 [ 91.964888][ T5883] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 91.970579][ T5883] __kmalloc_node+0xa6/0x240 [ 91.975244][ T5883] memcg_alloc_slab_cgroups+0x85/0x120 [ 91.980755][ T5883] slab_post_alloc_hook+0xec/0x4d0 [ 91.985951][ T5883] kmem_cache_alloc_lru+0x175/0x2b0 [ 91.991196][ T5883] ? __d_alloc+0x31/0x710 [ 91.995562][ T5883] __d_alloc+0x31/0x710 [ 91.999853][ T5883] __ns_get_path+0x3b7/0x5f0 [ 92.004500][ T5883] ns_get_path+0x54/0x90 [ 92.008814][ T5883] proc_ns_get_link+0x16c/0x2d0 [ 92.013707][ T5883] ? proc_ns_instantiate+0xf0/0xf0 [ 92.018867][ T5883] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 92.024464][ T5883] ? security_inode_follow_link+0xb7/0x100 [ 92.030328][ T5883] ? proc_ns_instantiate+0xf0/0xf0 [ 92.035488][ T5883] pick_link+0x666/0xdd0 [ 92.039795][ T5883] step_into+0xc18/0xee0 [ 92.044095][ T5883] ? __up_read+0x2b8/0x6b0 [ 92.048566][ T5883] ? set_root+0x3a0/0x3a0 [ 92.052946][ T5883] ? d_splice_alias+0x114/0x330 [ 92.057926][ T5883] ? proc_ns_dir_lookup+0x7bb/0x800 [ 92.063167][ T5883] path_openat+0x1656/0x3270 [ 92.067849][ T5883] ? do_filp_open+0x430/0x430 [ 92.072598][ T5883] do_filp_open+0x1f2/0x430 [ 92.077158][ T5883] ? vfs_tmpfile+0x620/0x620 [ 92.081861][ T5883] ? _raw_spin_unlock+0x28/0x40 [ 92.086851][ T5883] ? alloc_fd+0x590/0x640 [ 92.091253][ T5883] do_sys_openat2+0x134/0x1d0 [ 92.095984][ T5883] ? do_sys_open+0xe0/0xe0 [ 92.100449][ T5883] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 92.106487][ T5883] ? lock_chain_count+0x20/0x20 [ 92.111446][ T5883] __x64_sys_openat+0x139/0x160 [ 92.116413][ T5883] do_syscall_64+0x55/0xb0 [ 92.120882][ T5883] ? clear_bhb_loop+0x40/0x90 [ 92.125603][ T5883] ? clear_bhb_loop+0x40/0x90 [ 92.130333][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.136283][ T5883] RIP: 0033:0x7fce1355e98e [ 92.140760][ T5883] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.160412][ T5883] RSP: 002b:00007fce1438af18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.168877][ T5883] RAX: ffffffffffffffda RBX: 00007fce1438b6c0 RCX: 00007fce1355e98e [ 92.176897][ T5883] RDX: 0000000000000000 RSI: 00007fce136347a6 RDI: ffffffffffffff9c [ 92.184907][ T5883] RBP: 00007fce1363506b R08: 0000000000000000 R09: 0000000000000000 [ 92.192914][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.200921][ T5883] R13: 00007fce13826038 R14: 00007fce13825fa0 R15: 00007ffc7c687e58 [ 92.208954][ T5883] [ 93.727084][ T5890] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 94.983745][ T5893] syz.0.16[5893]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.005900][ T51] Bluetooth: hci3: unexpected subevent 0x06 length: 30 > 10 [ 95.726167][ T5897] UDC core: g1: couldn't find an available UDC or it's busy [ 95.905879][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.545639][ T5904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21'. [ 96.554622][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 96.563706][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 97.566552][ T51] Bluetooth: hci3: command tx timeout [ 97.602104][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 97.672633][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.729719][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.781163][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 97.817100][ T9] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 97.854125][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.873971][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 97.916929][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 97.948560][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.964254][ T5909] FAULT_INJECTION: forcing a failure. [ 97.964254][ T5909] name failslab, interval 1, probability 0, space 0, times 0 [ 97.976964][ T5909] CPU: 1 PID: 5909 Comm: syz.3.12 Not tainted syzkaller #0 [ 97.984164][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.994237][ T5909] Call Trace: [ 97.997539][ T5909] [ 98.000495][ T5909] dump_stack_lvl+0x18c/0x250 [ 98.005187][ T5909] ? show_regs_print_info+0x20/0x20 [ 98.010395][ T5909] ? load_image+0x420/0x420 [ 98.014916][ T5909] ? __might_sleep+0xe0/0xe0 [ 98.019527][ T5909] ? __lock_acquire+0x7d80/0x7d80 [ 98.024563][ T5909] should_fail_ex+0x394/0x4c0 [ 98.029256][ T5909] should_failslab+0x9/0x20 [ 98.033787][ T5909] slab_pre_alloc_hook+0x59/0x300 [ 98.038820][ T5909] ? prepend_path+0x8a7/0x950 [ 98.043499][ T5909] ? tomoyo_encode+0x2ad/0x570 [ 98.048293][ T5909] ? tomoyo_encode+0x2ad/0x570 [ 98.053075][ T5909] __kmem_cache_alloc_node+0x53/0x250 [ 98.058503][ T5909] ? tomoyo_encode+0x2ad/0x570 [ 98.063277][ T5909] __kmalloc+0xa7/0x240 [ 98.067476][ T5909] tomoyo_encode+0x2ad/0x570 [ 98.072084][ T5909] tomoyo_realpath_from_path+0x57c/0x5c0 [ 98.077739][ T5909] ? kmem_cache_free+0xf8/0x290 [ 98.082609][ T5909] tomoyo_realpath_nofollow+0xc4/0x110 [ 98.088081][ T5909] ? tomoyo_get_local_path+0x850/0x850 [ 98.093578][ T5909] tomoyo_find_next_domain+0x25b/0x1a50 [ 98.099151][ T5909] ? read_lock_is_recursive+0x20/0x20 [ 98.104535][ T5909] ? tomoyo_assign_domain+0x790/0x790 [ 98.109934][ T5909] ? common_file_perm+0x198/0x1f0 [ 98.115075][ T5909] ? tomoyo_bprm_check_security+0xea/0x170 [ 98.120883][ T5909] tomoyo_bprm_check_security+0x116/0x170 [ 98.126612][ T5909] security_bprm_check+0x62/0xa0 [ 98.131561][ T5909] bprm_execve+0xa72/0x1730 [ 98.136083][ T5909] ? alloc_bprm+0x9a0/0x9a0 [ 98.140599][ T5909] ? put_arg_page+0xea/0x260 [ 98.145219][ T5909] ? copy_string_kernel+0x1e9/0x220 [ 98.150430][ T5909] do_execveat_common+0x501/0x6b0 [ 98.155494][ T5909] __x64_sys_execve+0x92/0xa0 [ 98.160215][ T5909] do_syscall_64+0x55/0xb0 [ 98.164665][ T5909] ? clear_bhb_loop+0x40/0x90 [ 98.169354][ T5909] ? clear_bhb_loop+0x40/0x90 [ 98.174043][ T5909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.179947][ T5909] RIP: 0033:0x7efdfc79e159 [ 98.184369][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.203990][ T5909] RSP: 002b:00007efdfd580028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 98.212406][ T5909] RAX: ffffffffffffffda RBX: 00007efdfca25fa0 RCX: 00007efdfc79e159 [ 98.220404][ T5909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 98.228383][ T5909] RBP: 00007efdfc83506b R08: 0000000000000000 R09: 0000000000000000 [ 98.236363][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.244366][ T5909] R13: 00007efdfca26038 R14: 00007efdfca25fa0 R15: 00007fffcc009778 [ 98.252371][ T5909] [ 98.259401][ T5909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.292594][ T9] usb 1-1: Product: syz [ 98.305596][ T9] usb 1-1: Manufacturer: syz [ 98.333227][ T9] usb 1-1: SerialNumber: syz [ 98.664843][ T9] usb 1-1: selecting invalid altsetting 0 [ 98.678546][ T9] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 98.696104][ T9] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 98.797469][ T9] usb 1-1: USB disconnect, device number 2 [ 98.962830][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.016297][ T5923] autofs4:pid:5923:autofs_fill_super: called with bogus options [ 102.816715][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.067894][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.104886][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.156174][ T5840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.202133][ T5840] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.236454][ T5840] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 103.255177][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.283860][ T5840] usb 3-1: Product: syz [ 103.315575][ T5840] usb 3-1: Manufacturer: syz [ 103.351180][ T5840] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 103.888305][ T5953] ERROR: Out of memory at tomoyo_memory_ok. [ 103.894552][ T5953] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci2-linux-6-6-kasan/syz-executor /root/ci2-linux-6-6-kasan/syz-executor /newroot/8/file0' not defined. [ 104.017676][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 104.048385][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 104.083648][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 104.104103][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 104.128053][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 104.156907][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 104.206074][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 104.231018][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 105.296052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.694468][ T971] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.768896][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 105.806796][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 105.834710][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 105.864920][ T5840] usb 3-1: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 105.891395][ T5840] usb 3-1: No streaming interface found for terminal 2. [ 105.924898][ T5840] usb 3-1: USB disconnect, device number 2 [ 105.946148][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 105.974854][ T971] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 105.994329][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.023621][ T971] usb 4-1: Product: syz [ 106.033871][ T971] usb 4-1: Manufacturer: syz [ 106.041111][ T971] usb 4-1: SerialNumber: syz [ 106.054921][ T971] usb 4-1: config 0 descriptor?? [ 106.082988][ T971] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 106.112057][ T971] usb 4-1: Detected FT-X [ 106.175699][ T5819] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.291899][ T971] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 106.336023][ T971] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 106.356629][ T971] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 106.375788][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 106.388491][ T971] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.406561][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.435577][ T5819] usb 1-1: config 0 has no interfaces? [ 106.452650][ T971] usb 4-1: USB disconnect, device number 2 [ 106.473131][ T5819] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 106.494975][ T971] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 106.504577][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.532769][ T5819] usb 1-1: Product: syz [ 106.542492][ T971] ftdi_sio 4-1:0.0: device disconnected [ 106.555607][ T5819] usb 1-1: Manufacturer: syz [ 106.570443][ T5819] usb 1-1: SerialNumber: syz [ 106.606880][ T5819] usb 1-1: config 0 descriptor?? [ 106.865021][ T5819] usb 1-1: USB disconnect, device number 3 [ 110.163333][ T971] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.385538][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 110.407316][ T971] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 110.447138][ T971] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.466862][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.474906][ T971] usb 4-1: Product: syz [ 110.495541][ T971] usb 4-1: Manufacturer: syz [ 110.500197][ T971] usb 4-1: SerialNumber: syz [ 110.519475][ T971] usb 4-1: config 0 descriptor?? [ 111.175726][ T971] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.493784][ T971] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 111.543810][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.583478][ T971] usb 1-1: config 0 descriptor?? [ 111.625416][ T971] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 111.885777][ T5819] usb 4-1: USB disconnect, device number 3 [ 112.026356][ T971] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 112.405536][ C0] sched: RT throttling activated [ 112.436011][ T971] gspca_cpia1: usb_control_msg 02, error -71 [ 114.595388][ T971] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 114.607117][ T971] usb 1-1: USB disconnect, device number 4 [ 115.870817][ T6052] FAULT_INJECTION: forcing a failure. [ 115.870817][ T6052] name failslab, interval 1, probability 0, space 0, times 0 [ 115.905955][ T6052] CPU: 1 PID: 6052 Comm: syz.0.67 Not tainted syzkaller #0 [ 115.913227][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.923317][ T6052] Call Trace: [ 115.926620][ T6052] [ 115.929581][ T6052] dump_stack_lvl+0x18c/0x250 [ 115.934296][ T6052] ? show_regs_print_info+0x20/0x20 [ 115.939541][ T6052] ? load_image+0x420/0x420 [ 115.944071][ T6052] ? __lock_acquire+0x7d80/0x7d80 [ 115.949128][ T6052] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 115.954893][ T6052] ? lockdep_hardirqs_on+0x98/0x150 [ 115.960124][ T6052] should_fail_ex+0x394/0x4c0 [ 115.964844][ T6052] should_failslab+0x9/0x20 [ 115.969380][ T6052] slab_pre_alloc_hook+0x59/0x300 [ 115.974447][ T6052] ? mas_prev_slot+0x858/0x8a0 [ 115.979234][ T6052] kmem_cache_alloc+0x5a/0x2c0 [ 115.984022][ T6052] ? vm_area_alloc+0x24/0x1d0 [ 115.988724][ T6052] vm_area_alloc+0x24/0x1d0 [ 115.993271][ T6052] mmap_region+0xcfa/0x2090 [ 115.997803][ T6052] ? mark_lock+0x94/0x320 [ 116.002154][ T6052] ? file_mmap_ok+0x170/0x170 [ 116.006859][ T6052] ? cap_mmap_addr+0x213/0x2b0 [ 116.011690][ T6052] do_mmap+0x98f/0x10a0 [ 116.015907][ T6052] ? mlock_future_ok+0xf0/0xf0 [ 116.020729][ T6052] vm_mmap_pgoff+0x1c4/0x3f0 [ 116.025364][ T6052] ? account_locked_vm+0x200/0x200 [ 116.030518][ T6052] ? ksys_mmap_pgoff+0xf3/0x720 [ 116.035414][ T6052] ? __x64_sys_mmap+0x7a/0x130 [ 116.040198][ T6052] do_syscall_64+0x55/0xb0 [ 116.044638][ T6052] ? clear_bhb_loop+0x40/0x90 [ 116.049341][ T6052] ? clear_bhb_loop+0x40/0x90 [ 116.054040][ T6052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.059990][ T6052] RIP: 0033:0x7f2ff3d9e159 [ 116.064428][ T6052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.084047][ T6052] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 116.092499][ T6052] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 116.100493][ T6052] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 116.108504][ T6052] RBP: 00007f2ff3e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 116.116496][ T6052] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 116.124606][ T6052] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 116.132630][ T6052] [ 119.515632][ T5817] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.520813][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 122.692729][ T6089] syz.3.76 (6089): drop_caches: 2 [ 123.257099][ T5817] usb 2-1: device descriptor read/all, error -71 [ 125.776149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 126.595534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.029342][ T6155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.99'. [ 132.039768][ T6155] bridge: RTM_NEWNEIGH with invalid ether address [ 132.303660][ T6166] FAULT_INJECTION: forcing a failure. [ 132.303660][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 132.330526][ T6166] CPU: 0 PID: 6166 Comm: syz.3.102 Not tainted syzkaller #0 [ 132.337883][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.347977][ T6166] Call Trace: [ 132.351298][ T6166] [ 132.354261][ T6166] dump_stack_lvl+0x18c/0x250 [ 132.359010][ T6166] ? show_regs_print_info+0x20/0x20 [ 132.364279][ T6166] ? load_image+0x420/0x420 [ 132.368837][ T6166] ? __lock_acquire+0x7d80/0x7d80 [ 132.373906][ T6166] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 132.379771][ T6166] ? lockdep_hardirqs_on+0x98/0x150 [ 132.385035][ T6166] should_fail_ex+0x394/0x4c0 [ 132.389771][ T6166] should_failslab+0x9/0x20 [ 132.394335][ T6166] slab_pre_alloc_hook+0x59/0x300 [ 132.399524][ T6166] ? mas_prev_slot+0x858/0x8a0 [ 132.404354][ T6166] kmem_cache_alloc+0x5a/0x2c0 [ 132.409170][ T6166] ? vm_area_alloc+0x24/0x1d0 [ 132.413897][ T6166] vm_area_alloc+0x24/0x1d0 [ 132.418444][ T6166] mmap_region+0xcfa/0x2090 [ 132.423010][ T6166] ? file_mmap_ok+0x170/0x170 [ 132.427748][ T6166] ? cap_mmap_addr+0x213/0x2b0 [ 132.432573][ T6166] do_mmap+0x98f/0x10a0 [ 132.436782][ T6166] ? mlock_future_ok+0xf0/0xf0 [ 132.441589][ T6166] ? down_write+0x200/0x200 [ 132.446143][ T6166] vm_mmap_pgoff+0x1c4/0x3f0 [ 132.450793][ T6166] ? account_locked_vm+0x200/0x200 [ 132.455948][ T6166] ? ksys_mmap_pgoff+0xf3/0x720 [ 132.460860][ T6166] ? __x64_sys_mmap+0x7a/0x130 [ 132.465668][ T6166] do_syscall_64+0x55/0xb0 [ 132.470130][ T6166] ? clear_bhb_loop+0x40/0x90 [ 132.474859][ T6166] ? clear_bhb_loop+0x40/0x90 [ 132.479673][ T6166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.485630][ T6166] RIP: 0033:0x7efdfc79e159 [ 132.490301][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.509964][ T6166] RSP: 002b:00007efdfd580028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.518454][ T6166] RAX: ffffffffffffffda RBX: 00007efdfca25fa0 RCX: 00007efdfc79e159 [ 132.526487][ T6166] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 132.534497][ T6166] RBP: 00007efdfc83506b R08: ffffffffffffffff R09: 0000000000000000 [ 132.542499][ T6166] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 132.550610][ T6166] R13: 00007efdfca26038 R14: 00007efdfca25fa0 R15: 00007fffcc009778 [ 132.558693][ T6166] [ 132.565886][ T6161] FAULT_INJECTION: forcing a failure. [ 132.565886][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 132.600184][ T6161] CPU: 0 PID: 6161 Comm: syz.0.110 Not tainted syzkaller #0 [ 132.607541][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.617635][ T6161] Call Trace: [ 132.620944][ T6161] [ 132.623907][ T6161] dump_stack_lvl+0x18c/0x250 [ 132.628644][ T6161] ? show_regs_print_info+0x20/0x20 [ 132.633879][ T6161] ? load_image+0x420/0x420 [ 132.638417][ T6161] ? __might_sleep+0xe0/0xe0 [ 132.643047][ T6161] ? __lock_acquire+0x7d80/0x7d80 [ 132.648120][ T6161] should_fail_ex+0x394/0x4c0 [ 132.652879][ T6161] should_failslab+0x9/0x20 [ 132.657436][ T6161] slab_pre_alloc_hook+0x59/0x300 [ 132.662520][ T6161] ? snd_timer_instance_new+0x51/0x210 [ 132.668023][ T6161] __kmem_cache_alloc_node+0x53/0x250 [ 132.673450][ T6161] ? vsprintf+0x30/0x30 [ 132.677645][ T6161] ? snd_timer_instance_new+0x51/0x210 [ 132.683153][ T6161] kmalloc_trace+0x2a/0xe0 [ 132.687615][ T6161] snd_timer_instance_new+0x51/0x210 [ 132.692925][ T6161] snd_seq_timer_open+0x23b/0x610 [ 132.698078][ T6161] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 132.703515][ T6161] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 132.709467][ T6161] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 132.715398][ T6161] ? _raw_spin_unlock+0x40/0x40 [ 132.720278][ T6161] ? snd_seq_timer_defaults+0x35/0x530 [ 132.725776][ T6161] snd_seq_queue_alloc+0x3b7/0x740 [ 132.730922][ T6161] snd_seq_ioctl_create_queue+0x7f/0x3b0 [ 132.736589][ T6161] ? snd_seq_ioctl_unsubscribe_port+0x6e0/0x6e0 [ 132.742879][ T6161] snd_seq_oss_open+0x658/0xf10 [ 132.747766][ T6161] ? snd_seq_oss_delete_client+0x50/0x50 [ 132.753472][ T6161] ? trace_raw_output_contention_end+0xd0/0xd0 [ 132.759671][ T6161] ? soundcore_open+0x274/0x4c0 [ 132.764578][ T6161] ? odev_open+0x5c/0xa0 [ 132.768848][ T6161] ? __lock_acquire+0x7d80/0x7d80 [ 132.773905][ T6161] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 132.779927][ T6161] ? async_call_lookup_ports+0x20/0x20 [ 132.785420][ T6161] ? do_raw_spin_unlock+0x121/0x230 [ 132.790658][ T6161] ? soundcore_open+0x310/0x4c0 [ 132.795565][ T6161] odev_open+0x67/0xa0 [ 132.799669][ T6161] chrdev_open+0x58c/0x600 [ 132.804126][ T6161] ? cd_forget+0x160/0x160 [ 132.808570][ T6161] ? fsnotify_perm+0x3ed/0x5e0 [ 132.813355][ T6161] do_dentry_open+0x880/0x14b0 [ 132.818141][ T6161] ? cd_forget+0x160/0x160 [ 132.822605][ T6161] path_openat+0x284f/0x3270 [ 132.827230][ T6161] ? do_sys_openat2+0xda/0x1d0 [ 132.832020][ T6161] ? __x64_sys_openat+0x139/0x160 [ 132.837087][ T6161] ? verify_lock_unused+0x140/0x140 [ 132.842309][ T6161] ? do_filp_open+0x430/0x430 [ 132.847051][ T6161] do_filp_open+0x1f2/0x430 [ 132.851580][ T6161] ? vfs_tmpfile+0x620/0x620 [ 132.856257][ T6161] ? _raw_spin_unlock+0x28/0x40 [ 132.861141][ T6161] ? alloc_fd+0x590/0x640 [ 132.865515][ T6161] do_sys_openat2+0x134/0x1d0 [ 132.870216][ T6161] ? do_sys_open+0xe0/0xe0 [ 132.874660][ T6161] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 132.880698][ T6161] ? lock_chain_count+0x20/0x20 [ 132.885587][ T6161] __x64_sys_openat+0x139/0x160 [ 132.890465][ T6161] do_syscall_64+0x55/0xb0 [ 132.894911][ T6161] ? clear_bhb_loop+0x40/0x90 [ 132.899623][ T6161] ? clear_bhb_loop+0x40/0x90 [ 132.904334][ T6161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.910267][ T6161] RIP: 0033:0x7f2ff3d9e159 [ 132.914706][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.934327][ T6161] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.942755][ T6161] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 132.950748][ T6161] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 132.958739][ T6161] RBP: 00007f2ff3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 132.966750][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.974756][ T6161] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 132.982756][ T6161] [ 133.021813][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029228][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.175652][ T6173] netlink: 'syz.1.105': attribute type 4 has an invalid length. [ 133.310266][ T28] audit: type=1107 audit(1789948654.130:2): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 135.238972][ T6200] FAULT_INJECTION: forcing a failure. [ 135.238972][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 135.395795][ T6200] CPU: 1 PID: 6200 Comm: syz.0.117 Not tainted syzkaller #0 [ 135.403167][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.413309][ T6200] Call Trace: [ 135.416621][ T6200] [ 135.419595][ T6200] dump_stack_lvl+0x18c/0x250 [ 135.424343][ T6200] ? show_regs_print_info+0x20/0x20 [ 135.429636][ T6200] ? load_image+0x420/0x420 [ 135.434198][ T6200] ? __might_sleep+0xe0/0xe0 [ 135.438830][ T6200] ? __lock_acquire+0x7d80/0x7d80 [ 135.443909][ T6200] should_fail_ex+0x394/0x4c0 [ 135.448643][ T6200] should_failslab+0x9/0x20 [ 135.453192][ T6200] slab_pre_alloc_hook+0x59/0x300 [ 135.458258][ T6200] ? snd_timer_instance_new+0x51/0x210 [ 135.463761][ T6200] __kmem_cache_alloc_node+0x53/0x250 [ 135.469181][ T6200] ? vsprintf+0x30/0x30 [ 135.473367][ T6200] ? snd_timer_instance_new+0x51/0x210 [ 135.478875][ T6200] kmalloc_trace+0x2a/0xe0 [ 135.483355][ T6200] snd_timer_instance_new+0x51/0x210 [ 135.488697][ T6200] snd_seq_timer_open+0x23b/0x610 [ 135.493771][ T6200] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 135.499175][ T6200] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 135.505107][ T6200] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 135.511036][ T6200] ? _raw_spin_unlock+0x40/0x40 [ 135.515923][ T6200] ? snd_seq_timer_defaults+0x35/0x530 [ 135.521401][ T6200] snd_seq_queue_alloc+0x3b7/0x740 [ 135.526541][ T6200] snd_seq_ioctl_create_queue+0x7f/0x3b0 [ 135.532186][ T6200] ? snd_seq_ioctl_unsubscribe_port+0x6e0/0x6e0 [ 135.538441][ T6200] snd_seq_oss_open+0x658/0xf10 [ 135.543328][ T6200] ? snd_seq_oss_delete_client+0x50/0x50 [ 135.549020][ T6200] ? trace_raw_output_contention_end+0xd0/0xd0 [ 135.555203][ T6200] ? soundcore_open+0x274/0x4c0 [ 135.560085][ T6200] ? odev_open+0x5c/0xa0 [ 135.564372][ T6200] ? __lock_acquire+0x7d80/0x7d80 [ 135.569431][ T6200] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 135.575463][ T6200] ? async_call_lookup_ports+0x20/0x20 [ 135.580952][ T6200] ? do_raw_spin_unlock+0x121/0x230 [ 135.586173][ T6200] ? soundcore_open+0x310/0x4c0 [ 135.591046][ T6200] odev_open+0x67/0xa0 [ 135.595136][ T6200] chrdev_open+0x58c/0x600 [ 135.599584][ T6200] ? cd_forget+0x160/0x160 [ 135.604040][ T6200] ? fsnotify_perm+0x3ed/0x5e0 [ 135.608833][ T6200] do_dentry_open+0x880/0x14b0 [ 135.613613][ T6200] ? cd_forget+0x160/0x160 [ 135.618049][ T6200] path_openat+0x284f/0x3270 [ 135.622676][ T6200] ? do_sys_openat2+0xda/0x1d0 [ 135.627457][ T6200] ? __x64_sys_openat+0x139/0x160 [ 135.632509][ T6200] ? verify_lock_unused+0x140/0x140 [ 135.637746][ T6200] ? do_filp_open+0x430/0x430 [ 135.642461][ T6200] do_filp_open+0x1f2/0x430 [ 135.647002][ T6200] ? vfs_tmpfile+0x620/0x620 [ 135.651639][ T6200] ? _raw_spin_unlock+0x28/0x40 [ 135.656530][ T6200] ? alloc_fd+0x590/0x640 [ 135.660888][ T6200] do_sys_openat2+0x134/0x1d0 [ 135.665592][ T6200] ? do_sys_open+0xe0/0xe0 [ 135.670036][ T6200] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 135.676054][ T6200] ? lock_chain_count+0x20/0x20 [ 135.680926][ T6200] __x64_sys_openat+0x139/0x160 [ 135.685824][ T6200] do_syscall_64+0x55/0xb0 [ 135.690262][ T6200] ? clear_bhb_loop+0x40/0x90 [ 135.694973][ T6200] ? clear_bhb_loop+0x40/0x90 [ 135.699693][ T6200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.705618][ T6200] RIP: 0033:0x7f2ff3d9e159 [ 135.710057][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.729690][ T6200] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.738128][ T6200] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 135.746115][ T6200] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 135.754100][ T6200] RBP: 00007f2ff3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 135.762083][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.770077][ T6200] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 135.778081][ T6200] [ 135.931407][ T6202] FAULT_INJECTION: forcing a failure. [ 135.931407][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 135.955573][ T6202] CPU: 0 PID: 6202 Comm: syz.1.118 Not tainted syzkaller #0 [ 135.962956][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.973058][ T6202] Call Trace: [ 135.976360][ T6202] [ 135.979316][ T6202] dump_stack_lvl+0x18c/0x250 [ 135.984093][ T6202] ? show_regs_print_info+0x20/0x20 [ 135.989327][ T6202] ? load_image+0x420/0x420 [ 135.993852][ T6202] ? __lock_acquire+0x7d80/0x7d80 [ 135.998934][ T6202] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 136.004702][ T6202] ? lockdep_hardirqs_on+0x98/0x150 [ 136.009936][ T6202] should_fail_ex+0x394/0x4c0 [ 136.014671][ T6202] should_failslab+0x9/0x20 [ 136.019201][ T6202] slab_pre_alloc_hook+0x59/0x300 [ 136.024251][ T6202] ? mas_prev_slot+0x858/0x8a0 [ 136.029068][ T6202] kmem_cache_alloc+0x5a/0x2c0 [ 136.033858][ T6202] ? vm_area_alloc+0x24/0x1d0 [ 136.038573][ T6202] vm_area_alloc+0x24/0x1d0 [ 136.043100][ T6202] mmap_region+0xcfa/0x2090 [ 136.047675][ T6202] ? file_mmap_ok+0x170/0x170 [ 136.052382][ T6202] ? cap_mmap_addr+0x213/0x2b0 [ 136.057190][ T6202] do_mmap+0x98f/0x10a0 [ 136.061385][ T6202] ? mlock_future_ok+0xf0/0xf0 [ 136.066186][ T6202] ? down_write+0x200/0x200 [ 136.070741][ T6202] vm_mmap_pgoff+0x1c4/0x3f0 [ 136.075375][ T6202] ? account_locked_vm+0x200/0x200 [ 136.080515][ T6202] ? ksys_mmap_pgoff+0xf3/0x720 [ 136.085392][ T6202] ? __x64_sys_mmap+0x7a/0x130 [ 136.090173][ T6202] do_syscall_64+0x55/0xb0 [ 136.094630][ T6202] ? clear_bhb_loop+0x40/0x90 [ 136.099352][ T6202] ? clear_bhb_loop+0x40/0x90 [ 136.104058][ T6202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.109990][ T6202] RIP: 0033:0x7f49c8b9e159 [ 136.114433][ T6202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.134063][ T6202] RSP: 002b:00007f49c6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 136.142497][ T6202] RAX: ffffffffffffffda RBX: 00007f49c8e25fa0 RCX: 00007f49c8b9e159 [ 136.150493][ T6202] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 136.158486][ T6202] RBP: 00007f49c8c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 136.166491][ T6202] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 136.174482][ T6202] R13: 00007f49c8e26038 R14: 00007f49c8e25fa0 R15: 00007ffdd2376018 [ 136.182474][ T6202] [ 138.717727][ T6214] Illegal XDP return value 64 on prog (id 9) dev N/A, expect packet loss! [ 139.075749][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.995537][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.012764][ T9] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 141.038668][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.059804][ T9] usb 2-1: Product: syz [ 141.064022][ T9] usb 2-1: Manufacturer: syz [ 141.078629][ T9] usb 2-1: SerialNumber: syz [ 141.397205][ T9] option 2-1:4.0: GSM modem (1-port) converter detected [ 141.475782][ T9] usb 2-1: USB disconnect, device number 4 [ 141.497631][ T9] option 2-1:4.0: device disconnected [ 141.756203][ T28] audit: type=1326 audit(1789948662.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.2.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce1359e159 code=0x0 [ 141.857883][ T6236] FAULT_INJECTION: forcing a failure. [ 141.857883][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 141.966027][ T6236] CPU: 1 PID: 6236 Comm: syz.3.129 Not tainted syzkaller #0 [ 141.973400][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.983488][ T6236] Call Trace: [ 141.986888][ T6236] [ 141.989850][ T6236] dump_stack_lvl+0x18c/0x250 [ 141.994614][ T6236] ? show_regs_print_info+0x20/0x20 [ 141.999873][ T6236] ? load_image+0x420/0x420 [ 142.004428][ T6236] ? __might_sleep+0xe0/0xe0 [ 142.009056][ T6236] ? __lock_acquire+0x7d80/0x7d80 [ 142.014145][ T6236] should_fail_ex+0x394/0x4c0 [ 142.018870][ T6236] should_failslab+0x9/0x20 [ 142.023442][ T6236] slab_pre_alloc_hook+0x59/0x300 [ 142.028523][ T6236] ? snd_timer_instance_new+0x6a/0x210 [ 142.034026][ T6236] ? snd_timer_instance_new+0x6a/0x210 [ 142.039539][ T6236] __kmem_cache_alloc_node+0x53/0x250 [ 142.044974][ T6236] ? snd_timer_instance_new+0x6a/0x210 [ 142.050485][ T6236] __kmalloc_node_track_caller+0xa4/0x230 [ 142.056273][ T6236] kstrdup+0x3b/0x80 [ 142.060229][ T6236] snd_timer_instance_new+0x6a/0x210 [ 142.065574][ T6236] snd_seq_timer_open+0x23b/0x610 [ 142.070651][ T6236] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 142.076090][ T6236] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 142.082112][ T6236] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 142.088043][ T6236] ? _raw_spin_unlock+0x40/0x40 [ 142.092932][ T6236] ? snd_seq_timer_defaults+0x35/0x530 [ 142.098438][ T6236] snd_seq_queue_alloc+0x3b7/0x740 [ 142.103604][ T6236] snd_seq_ioctl_create_queue+0x7f/0x3b0 [ 142.109291][ T6236] ? snd_seq_ioctl_unsubscribe_port+0x6e0/0x6e0 [ 142.115621][ T6236] snd_seq_oss_open+0x658/0xf10 [ 142.120542][ T6236] ? snd_seq_oss_delete_client+0x50/0x50 [ 142.126273][ T6236] ? trace_raw_output_contention_end+0xd0/0xd0 [ 142.132494][ T6236] ? soundcore_open+0x274/0x4c0 [ 142.137417][ T6236] ? odev_open+0x5c/0xa0 [ 142.141706][ T6236] ? __lock_acquire+0x7d80/0x7d80 [ 142.146787][ T6236] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 142.152806][ T6236] ? async_call_lookup_ports+0x20/0x20 [ 142.158310][ T6236] ? do_raw_spin_unlock+0x121/0x230 [ 142.163578][ T6236] ? soundcore_open+0x310/0x4c0 [ 142.168483][ T6236] odev_open+0x67/0xa0 [ 142.172604][ T6236] chrdev_open+0x58c/0x600 [ 142.177065][ T6236] ? cd_forget+0x160/0x160 [ 142.181520][ T6236] ? fsnotify_perm+0x3ed/0x5e0 [ 142.186338][ T6236] do_dentry_open+0x880/0x14b0 [ 142.191156][ T6236] ? cd_forget+0x160/0x160 [ 142.195655][ T6236] path_openat+0x284f/0x3270 [ 142.200332][ T6236] ? do_sys_openat2+0xda/0x1d0 [ 142.205150][ T6236] ? __x64_sys_openat+0x139/0x160 [ 142.210232][ T6236] ? verify_lock_unused+0x140/0x140 [ 142.215473][ T6236] ? do_filp_open+0x430/0x430 [ 142.220209][ T6236] do_filp_open+0x1f2/0x430 [ 142.224779][ T6236] ? vfs_tmpfile+0x620/0x620 [ 142.229443][ T6236] ? _raw_spin_unlock+0x28/0x40 [ 142.234363][ T6236] ? alloc_fd+0x590/0x640 [ 142.238756][ T6236] do_sys_openat2+0x134/0x1d0 [ 142.243483][ T6236] ? do_sys_open+0xe0/0xe0 [ 142.247946][ T6236] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 142.253965][ T6236] ? lock_chain_count+0x20/0x20 [ 142.258866][ T6236] __x64_sys_openat+0x139/0x160 [ 142.263789][ T6236] do_syscall_64+0x55/0xb0 [ 142.268254][ T6236] ? clear_bhb_loop+0x40/0x90 [ 142.272973][ T6236] ? clear_bhb_loop+0x40/0x90 [ 142.277688][ T6236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.283622][ T6236] RIP: 0033:0x7efdfc79e159 [ 142.288094][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.307752][ T6236] RSP: 002b:00007efdfd580028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.316206][ T6236] RAX: ffffffffffffffda RBX: 00007efdfca25fa0 RCX: 00007efdfc79e159 [ 142.324220][ T6236] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 142.332226][ T6236] RBP: 00007efdfc83506b R08: 0000000000000000 R09: 0000000000000000 [ 142.340242][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.348251][ T6236] R13: 00007efdfca26038 R14: 00007efdfca25fa0 R15: 00007fffcc009778 [ 142.356273][ T6236] [ 142.926006][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.125'. [ 144.105615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 144.515525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 145.215671][ T789] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 145.497147][ T789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.525567][ T789] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.577299][ T6261] FAULT_INJECTION: forcing a failure. [ 145.577299][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.597473][ T789] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 145.615747][ T789] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 145.623959][ T789] usb 3-1: Product: syz [ 145.665636][ T789] usb 3-1: Manufacturer: syz [ 145.670324][ T789] usb 3-1: SerialNumber: syz [ 145.671126][ T6261] CPU: 1 PID: 6261 Comm: syz.1.140 Not tainted syzkaller #0 [ 145.682257][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.692347][ T6261] Call Trace: [ 145.695650][ T6261] [ 145.698618][ T6261] dump_stack_lvl+0x18c/0x250 [ 145.703369][ T6261] ? show_regs_print_info+0x20/0x20 [ 145.708610][ T6261] ? load_image+0x420/0x420 [ 145.713203][ T6261] ? __might_fault+0xaa/0x120 [ 145.717929][ T6261] ? __lock_acquire+0x7d80/0x7d80 [ 145.722996][ T6261] ? __virt_addr_valid+0x10c/0x380 [ 145.723819][ T789] usb 3-1: config 0 descriptor?? [ 145.728145][ T6261] should_fail_ex+0x394/0x4c0 [ 145.728178][ T6261] _copy_from_user+0x2f/0xe0 [ 145.728203][ T6261] strndup_user+0xb7/0x150 [ 145.728229][ T6261] __se_sys_mount+0x9f/0x3d0 [ 145.728257][ T6261] ? __x64_sys_mount+0xc0/0xc0 [ 145.728280][ T6261] ? lockdep_hardirqs_on+0x98/0x150 [ 145.728298][ T6261] ? __x64_sys_mount+0x20/0xc0 [ 145.728320][ T6261] do_syscall_64+0x55/0xb0 [ 145.770910][ T6261] ? clear_bhb_loop+0x40/0x90 [ 145.775648][ T6261] ? clear_bhb_loop+0x40/0x90 [ 145.780377][ T6261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.786335][ T6261] RIP: 0033:0x7f49c8b9e159 [ 145.790796][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.810443][ T6261] RSP: 002b:00007f49c6df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 145.818906][ T6261] RAX: ffffffffffffffda RBX: 00007f49c8e25fa0 RCX: 00007f49c8b9e159 [ 145.826916][ T6261] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.834944][ T6261] RBP: 00007f49c8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 145.842951][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.850959][ T6261] R13: 00007f49c8e26038 R14: 00007f49c8e25fa0 R15: 00007ffdd2376018 [ 145.858977][ T6261] [ 146.954390][ T6279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.147'. [ 146.986232][ T6278] FAULT_INJECTION: forcing a failure. [ 146.986232][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 147.006543][ T6278] CPU: 0 PID: 6278 Comm: syz.1.146 Not tainted syzkaller #0 [ 147.013880][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.023970][ T6278] Call Trace: [ 147.027286][ T6278] [ 147.030259][ T6278] dump_stack_lvl+0x18c/0x250 [ 147.034996][ T6278] ? show_regs_print_info+0x20/0x20 [ 147.040269][ T6278] ? load_image+0x420/0x420 [ 147.044822][ T6278] ? __might_sleep+0xe0/0xe0 [ 147.049468][ T6278] ? __lock_acquire+0x7d80/0x7d80 [ 147.054570][ T6278] should_fail_ex+0x394/0x4c0 [ 147.059306][ T6278] should_failslab+0x9/0x20 [ 147.063849][ T6278] slab_pre_alloc_hook+0x59/0x300 [ 147.068932][ T6278] ? __lock_acquire+0x7d80/0x7d80 [ 147.074031][ T6278] ? do_raw_spin_lock+0x11f/0x2b0 [ 147.079123][ T6278] kmem_cache_alloc+0x5a/0x2c0 [ 147.083969][ T6278] ? vm_area_alloc+0x24/0x1d0 [ 147.088699][ T6278] vm_area_alloc+0x24/0x1d0 [ 147.093255][ T6278] alloc_bprm+0x324/0x9a0 [ 147.097654][ T6278] do_execveat_common+0x18a/0x6b0 [ 147.102741][ T6278] __x64_sys_execve+0x92/0xa0 [ 147.107501][ T6278] do_syscall_64+0x55/0xb0 [ 147.111952][ T6278] ? clear_bhb_loop+0x40/0x90 [ 147.116654][ T6278] ? clear_bhb_loop+0x40/0x90 [ 147.121373][ T6278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.127300][ T6278] RIP: 0033:0x7f49c8b9e159 [ 147.131744][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.151890][ T6278] RSP: 002b:00007f49c6df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 147.160332][ T6278] RAX: ffffffffffffffda RBX: 00007f49c8e25fa0 RCX: 00007f49c8b9e159 [ 147.168331][ T6278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 147.176320][ T6278] RBP: 00007f49c8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 147.184310][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.192303][ T6278] R13: 00007f49c8e26038 R14: 00007f49c8e25fa0 R15: 00007ffdd2376018 [ 147.200409][ T6278] [ 147.356981][ T971] usb 3-1: USB disconnect, device number 3 [ 147.617705][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 147.658853][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.667218][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.846258][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 147.856272][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 147.863677][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.873794][ T51] Workqueue: hci2 hci_rx_work [ 147.878532][ T51] Call Trace: [ 147.881840][ T51] [ 147.884830][ T51] dump_stack_lvl+0x18c/0x250 [ 147.889574][ T51] ? show_regs_print_info+0x20/0x20 [ 147.894828][ T51] ? load_image+0x420/0x420 [ 147.899399][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 147.904580][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 147.909663][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 147.914398][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 147.919657][ T51] kobject_add_internal+0x617/0xc90 [ 147.924908][ T51] kobject_add+0x164/0x240 [ 147.929367][ T51] ? kobject_init+0x1d0/0x1d0 [ 147.934096][ T51] ? get_device_parent+0x366/0x390 [ 147.939272][ T51] device_add+0x3fa/0xc40 [ 147.943646][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 147.948646][ T51] le_conn_complete_evt+0xe9a/0x1480 [ 147.953992][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 147.960291][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 147.965977][ T51] ? mutex_unlock+0x10/0x10 [ 147.970529][ T51] ? skb_pull_data+0xf0/0x1f0 [ 147.975265][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 147.980863][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 147.986969][ T51] hci_event_packet+0x7b4/0x1280 [ 147.991952][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 147.997021][ T51] ? lock_chain_count+0x20/0x20 [ 148.001931][ T51] ? bis_list+0x290/0x290 [ 148.006314][ T51] ? kcov_remote_start+0x513/0x810 [ 148.011458][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 148.016693][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 148.021957][ T51] hci_rx_work+0x43a/0xd60 [ 148.026438][ T51] ? process_scheduled_works+0x975/0x1600 [ 148.032212][ T51] process_scheduled_works+0xa60/0x1600 [ 148.037830][ T51] ? worker_attach_to_pool+0x370/0x370 [ 148.043354][ T51] ? assign_work+0x3cc/0x5d0 [ 148.047999][ T51] worker_thread+0xa5e/0xfe0 [ 148.052658][ T51] kthread+0x2fa/0x390 [ 148.056770][ T51] ? pr_cont_work+0x550/0x550 [ 148.061507][ T51] ? kthread_blkcg+0xd0/0xd0 [ 148.066170][ T51] ret_from_fork+0x48/0x80 [ 148.070642][ T51] ? kthread_blkcg+0xd0/0xd0 [ 148.075268][ T51] ret_from_fork_asm+0x11/0x20 [ 148.080098][ T51] [ 148.086615][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.101453][ T51] Bluetooth: hci2: failed to register connection device [ 148.624680][ T6298] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 148.755094][ T6298] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.809930][ T6298] kvm: pic: non byte read [ 148.814788][ T6298] kvm: pic: non byte read [ 148.820227][ T6298] kvm: pic: single mode not supported [ 148.820328][ T6298] kvm: pic: non byte read [ 151.138740][ T6313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.157'. [ 151.601588][ T6320] FAULT_INJECTION: forcing a failure. [ 151.601588][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.638564][ T6320] CPU: 0 PID: 6320 Comm: syz.2.161 Not tainted syzkaller #0 [ 151.645906][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.655992][ T6320] Call Trace: [ 151.659299][ T6320] [ 151.662273][ T6320] dump_stack_lvl+0x18c/0x250 [ 151.667012][ T6320] ? show_regs_print_info+0x20/0x20 [ 151.672274][ T6320] ? load_image+0x420/0x420 [ 151.676824][ T6320] ? __might_fault+0xaa/0x120 [ 151.681590][ T6320] ? __lock_acquire+0x7d80/0x7d80 [ 151.686666][ T6320] ? __virt_addr_valid+0x10c/0x380 [ 151.691822][ T6320] should_fail_ex+0x394/0x4c0 [ 151.696557][ T6320] _copy_from_user+0x2f/0xe0 [ 151.701203][ T6320] strndup_user+0xb7/0x150 [ 151.705661][ T6320] __se_sys_mount+0x9f/0x3d0 [ 151.710302][ T6320] ? __x64_sys_mount+0xc0/0xc0 [ 151.715109][ T6320] ? lockdep_hardirqs_on+0x98/0x150 [ 151.720350][ T6320] ? __x64_sys_mount+0x20/0xc0 [ 151.725165][ T6320] do_syscall_64+0x55/0xb0 [ 151.729628][ T6320] ? clear_bhb_loop+0x40/0x90 [ 151.734358][ T6320] ? clear_bhb_loop+0x40/0x90 [ 151.739082][ T6320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.745017][ T6320] RIP: 0033:0x7fce1359e159 [ 151.749483][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.769122][ T6320] RSP: 002b:00007fce1438b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.777563][ T6320] RAX: ffffffffffffffda RBX: 00007fce13825fa0 RCX: 00007fce1359e159 [ 151.785554][ T6320] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.793545][ T6320] RBP: 00007fce1363506b R08: 0000000000000000 R09: 0000000000000000 [ 151.801554][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.809550][ T6320] R13: 00007fce13826038 R14: 00007fce13825fa0 R15: 00007ffc7c687e58 [ 151.817555][ T6320] [ 152.223266][ T789] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.105590][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 153.112870][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.127068][ T789] usb 2-1: config 21 has an invalid interface number: 205 but max is 0 [ 153.140864][ T789] usb 2-1: config 21 has no interface number 0 [ 153.438679][ T789] usb 2-1: config 21 interface 205 has no altsetting 0 [ 153.561962][ T789] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=f5.2f [ 153.676491][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.785972][ T789] usb 2-1: Product: syz [ 153.841578][ T789] usb 2-1: Manufacturer: syz [ 153.889279][ T789] usb 2-1: SerialNumber: syz [ 154.041094][ T6340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.168'. [ 154.224265][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.245862][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 154.257090][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.323681][ T789] kvaser_usb 2-1:21.205: Cannot get usb endpoint(s) [ 154.375542][ T789] usb 2-1: USB disconnect, device number 5 [ 154.395699][ T5840] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.595550][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 154.616258][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.629072][ T5840] usb 3-1: no configurations [ 154.633707][ T5840] usb 3-1: can't read configurations, error -22 [ 156.337027][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 157.037278][ T6373] jffs2: notice: (6373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 157.618372][ T6379] FAULT_INJECTION: forcing a failure. [ 157.618372][ T6379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.866986][ T6379] CPU: 1 PID: 6379 Comm: syz.3.181 Not tainted syzkaller #0 [ 157.874516][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.884781][ T6379] Call Trace: [ 157.888094][ T6379] [ 157.891061][ T6379] dump_stack_lvl+0x18c/0x250 [ 157.895789][ T6379] ? show_regs_print_info+0x20/0x20 [ 157.901054][ T6379] ? load_image+0x420/0x420 [ 157.905600][ T6379] ? __might_fault+0xaa/0x120 [ 157.910313][ T6379] ? __lock_acquire+0x7d80/0x7d80 [ 157.915409][ T6379] ? __virt_addr_valid+0x10c/0x380 [ 157.920577][ T6379] should_fail_ex+0x394/0x4c0 [ 157.925308][ T6379] _copy_from_user+0x2f/0xe0 [ 157.929942][ T6379] strndup_user+0xb7/0x150 [ 157.934409][ T6379] __se_sys_mount+0x9f/0x3d0 [ 157.939045][ T6379] ? __x64_sys_mount+0xc0/0xc0 [ 157.943859][ T6379] ? lockdep_hardirqs_on+0x98/0x150 [ 157.949094][ T6379] ? __x64_sys_mount+0x20/0xc0 [ 157.953888][ T6379] do_syscall_64+0x55/0xb0 [ 157.958333][ T6379] ? clear_bhb_loop+0x40/0x90 [ 157.963040][ T6379] ? clear_bhb_loop+0x40/0x90 [ 157.967758][ T6379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.973691][ T6379] RIP: 0033:0x7efdfc79e159 [ 157.978130][ T6379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.997764][ T6379] RSP: 002b:00007efdfd580028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.006216][ T6379] RAX: ffffffffffffffda RBX: 00007efdfca25fa0 RCX: 00007efdfc79e159 [ 158.014263][ T6379] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.022353][ T6379] RBP: 00007efdfc83506b R08: 0000000000000000 R09: 0000000000000000 [ 158.030373][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.038395][ T6379] R13: 00007efdfca26038 R14: 00007efdfca25fa0 R15: 00007fffcc009778 [ 158.046409][ T6379] [ 159.488170][ T6401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.195'. [ 160.653384][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'. [ 161.100581][ T6409] FAULT_INJECTION: forcing a failure. [ 161.100581][ T6409] name failslab, interval 1, probability 0, space 0, times 0 [ 161.145523][ T6409] CPU: 0 PID: 6409 Comm: syz.2.192 Not tainted syzkaller #0 [ 161.152927][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.163028][ T6409] Call Trace: [ 161.166355][ T6409] [ 161.169313][ T6409] dump_stack_lvl+0x18c/0x250 [ 161.174036][ T6409] ? show_regs_print_info+0x20/0x20 [ 161.179284][ T6409] ? load_image+0x420/0x420 [ 161.183840][ T6409] ? __lock_acquire+0x7d80/0x7d80 [ 161.188913][ T6409] should_fail_ex+0x394/0x4c0 [ 161.193637][ T6409] should_failslab+0x9/0x20 [ 161.198189][ T6409] slab_pre_alloc_hook+0x59/0x300 [ 161.203264][ T6409] ? key_alloc+0x34a/0x1030 [ 161.207860][ T6409] ? key_alloc+0x34a/0x1030 [ 161.212593][ T6409] __kmem_cache_alloc_node+0x53/0x250 [ 161.218028][ T6409] ? slab_post_alloc_hook+0x86/0x4d0 [ 161.223383][ T6409] ? key_alloc+0x34a/0x1030 [ 161.227939][ T6409] __kmalloc_node_track_caller+0xa4/0x230 [ 161.233706][ T6409] kmemdup+0x2b/0x70 [ 161.237632][ T6409] key_alloc+0x34a/0x1030 [ 161.242052][ T6409] keyring_alloc+0x45/0xb0 [ 161.246504][ T6409] keyctl_get_persistent+0x4b5/0x7a0 [ 161.251817][ T6409] ? proc_key_users_show+0x310/0x310 [ 161.257137][ T6409] ? futex_wake_mark+0x150/0x150 [ 161.262099][ T6409] ? __lock_acquire+0x7d80/0x7d80 [ 161.267151][ T6409] __se_sys_keyctl+0x829/0xb50 [ 161.271941][ T6409] ? __x64_sys_keyctl+0xc0/0xc0 [ 161.276823][ T6409] ? do_futex+0x35d/0x3e0 [ 161.281172][ T6409] ? __ia32_sys_get_robust_list+0x110/0x110 [ 161.287105][ T6409] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 161.293108][ T6409] ? lock_chain_count+0x20/0x20 [ 161.297993][ T6409] ? lockdep_hardirqs_on+0x98/0x150 [ 161.303220][ T6409] ? __x64_sys_keyctl+0x20/0xc0 [ 161.308100][ T6409] do_syscall_64+0x55/0xb0 [ 161.312539][ T6409] ? clear_bhb_loop+0x40/0x90 [ 161.317252][ T6409] ? clear_bhb_loop+0x40/0x90 [ 161.321955][ T6409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.327879][ T6409] RIP: 0033:0x7fce1359e159 [ 161.332330][ T6409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.351953][ T6409] RSP: 002b:00007fce1438b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 161.360404][ T6409] RAX: ffffffffffffffda RBX: 00007fce13825fa0 RCX: 00007fce1359e159 [ 161.368409][ T6409] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 161.376405][ T6409] RBP: 00007fce1363506b R08: 0000000000000000 R09: 0000000000000000 [ 161.384389][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.392377][ T6409] R13: 00007fce13826038 R14: 00007fce13825fa0 R15: 00007ffc7c687e58 [ 161.400387][ T6409] [ 163.268271][ T6425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.197'. [ 164.175997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 164.765174][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 165.275673][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.495987][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.630334][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.777081][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.906822][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.079852][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 166.117382][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 166.159104][ T9] usb 3-1: Product: syz [ 166.163337][ T9] usb 3-1: Manufacturer: syz [ 166.241329][ T9] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 166.455216][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 166.486621][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 166.516025][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 166.526170][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 166.548626][ T9] usb 3-1: No streaming interface found for terminal 2. [ 166.588442][ T9] usb 3-1: USB disconnect, device number 6 [ 168.356586][ T6455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 174.258447][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.218'. [ 174.825595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 178.616330][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 178.700642][ T6515] FAULT_INJECTION: forcing a failure. [ 178.700642][ T6515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.820188][ T6520] FAULT_INJECTION: forcing a failure. [ 178.820188][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 178.833674][ T6520] CPU: 0 PID: 6520 Comm: syz.1.229 Not tainted syzkaller #0 [ 178.841013][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.851107][ T6520] Call Trace: [ 178.854432][ T6520] [ 178.857395][ T6520] dump_stack_lvl+0x18c/0x250 [ 178.862301][ T6520] ? show_regs_print_info+0x20/0x20 [ 178.867546][ T6520] ? load_image+0x420/0x420 [ 178.872092][ T6520] ? __might_sleep+0xe0/0xe0 [ 178.876765][ T6520] ? __lock_acquire+0x7d80/0x7d80 [ 178.881849][ T6520] should_fail_ex+0x394/0x4c0 [ 178.886573][ T6520] should_failslab+0x9/0x20 [ 178.891117][ T6520] slab_pre_alloc_hook+0x59/0x300 [ 178.896239][ T6520] ? __kernfs_new_node+0xaa/0x7f0 [ 178.901290][ T6520] ? rcu_is_watching+0x15/0xb0 [ 178.906087][ T6520] kmem_cache_alloc+0x5a/0x2c0 [ 178.910885][ T6520] ? __kernfs_new_node+0xe5/0x7f0 [ 178.915936][ T6520] __kernfs_new_node+0xe5/0x7f0 [ 178.920809][ T6520] ? kernfs_new_node+0x260/0x260 [ 178.925807][ T6520] ? sysfs_do_create_link_sd+0x75/0x110 [ 178.931394][ T6520] kernfs_new_node+0x14c/0x260 [ 178.936183][ T6520] kernfs_create_link+0xa7/0x200 [ 178.941144][ T6520] sysfs_do_create_link_sd+0x83/0x110 [ 178.946563][ T6520] bus_add_device+0x3a4/0x820 [ 178.951280][ T6520] ? sysfs_add_file_mode_ns+0x258/0x2f0 [ 178.956872][ T6520] ? bus_for_each_drv+0x2e0/0x2e0 [ 178.961925][ T6520] ? device_add_class_symlinks+0x240/0x240 [ 178.967767][ T6520] ? class_to_subsys+0xb6/0x120 [ 178.972651][ T6520] ? device_add_class_symlinks+0xd4/0x240 [ 178.978406][ T6520] device_add+0x53b/0xc40 [ 178.982760][ T6520] iommufd_test+0x121d/0x2a20 [ 178.987464][ T6520] ? iommufd_selftest_destroy+0xf0/0xf0 [ 178.993025][ T6520] ? __lock_acquire+0x7d80/0x7d80 [ 178.998067][ T6520] ? __lock_acquire+0x7d80/0x7d80 [ 179.003129][ T6520] ? __might_fault+0xaa/0x120 [ 179.007827][ T6520] ? __might_fault+0xaa/0x120 [ 179.012526][ T6520] iommufd_fops_ioctl+0x48b/0x540 [ 179.017576][ T6520] ? iommufd_ctx_put+0x40/0x40 [ 179.022369][ T6520] ? __fget_files+0x28/0x460 [ 179.027001][ T6520] ? bpf_lsm_file_ioctl+0x9/0x10 [ 179.031965][ T6520] ? security_file_ioctl+0x80/0xa0 [ 179.037096][ T6520] ? iommufd_ctx_put+0x40/0x40 [ 179.041882][ T6520] __se_sys_ioctl+0xfd/0x170 [ 179.046502][ T6520] do_syscall_64+0x55/0xb0 [ 179.050946][ T6520] ? clear_bhb_loop+0x40/0x90 [ 179.055642][ T6520] ? clear_bhb_loop+0x40/0x90 [ 179.060351][ T6520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.066273][ T6520] RIP: 0033:0x7f49c8b9e159 [ 179.070766][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.090393][ T6520] RSP: 002b:00007f49c6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.098930][ T6520] RAX: ffffffffffffffda RBX: 00007f49c8e25fa0 RCX: 00007f49c8b9e159 [ 179.106961][ T6520] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 179.114944][ T6520] RBP: 00007f49c8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 179.122945][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.130948][ T6520] R13: 00007f49c8e26038 R14: 00007f49c8e25fa0 R15: 00007ffdd2376018 [ 179.138971][ T6520] [ 179.175540][ T6515] CPU: 0 PID: 6515 Comm: syz.0.227 Not tainted syzkaller #0 [ 179.182917][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.193004][ T6515] Call Trace: [ 179.196318][ T6515] [ 179.199299][ T6515] dump_stack_lvl+0x18c/0x250 [ 179.204041][ T6515] ? show_regs_print_info+0x20/0x20 [ 179.209303][ T6515] ? load_image+0x420/0x420 [ 179.213866][ T6515] ? __might_fault+0xaa/0x120 [ 179.218592][ T6515] ? __lock_acquire+0x7d80/0x7d80 [ 179.223651][ T6515] ? __virt_addr_valid+0x10c/0x380 [ 179.228801][ T6515] should_fail_ex+0x394/0x4c0 [ 179.233521][ T6515] _copy_from_user+0x2f/0xe0 [ 179.238137][ T6515] strndup_user+0xb7/0x150 [ 179.242591][ T6515] __se_sys_mount+0x9f/0x3d0 [ 179.247203][ T6515] ? __x64_sys_mount+0xc0/0xc0 [ 179.252006][ T6515] ? lockdep_hardirqs_on+0x98/0x150 [ 179.257242][ T6515] ? __x64_sys_mount+0x20/0xc0 [ 179.262045][ T6515] do_syscall_64+0x55/0xb0 [ 179.266500][ T6515] ? clear_bhb_loop+0x40/0x90 [ 179.271194][ T6515] ? clear_bhb_loop+0x40/0x90 [ 179.275891][ T6515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.281806][ T6515] RIP: 0033:0x7f2ff3d9e159 [ 179.286237][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.305875][ T6515] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.314307][ T6515] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 179.322320][ T6515] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.330337][ T6515] RBP: 00007f2ff3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 179.338337][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.346332][ T6515] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 179.354876][ T6515] [ 180.825580][ T5819] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.698926][ T5819] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 181.725152][ T5819] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.853429][ T5819] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 181.864117][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.009205][ T5819] usb 1-1: Product: syz [ 182.069209][ T5819] usb 1-1: Manufacturer: syz [ 182.122401][ T5819] usb 1-1: SerialNumber: syz [ 183.152259][ T5819] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to g@b4.vu [ 183.184521][ T5819] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 183.215835][ T5819] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 183.245858][ T5819] usb 1-1: USB disconnect, device number 5 [ 183.416621][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.926062][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 188.127586][ T27] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 188.165702][ T27] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.202193][ T27] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 188.214550][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.247100][ T27] usb 2-1: Product: syz [ 188.263334][ T27] usb 2-1: Manufacturer: syz [ 188.283812][ T27] usb 2-1: SerialNumber: syz [ 189.362503][ T27] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to g@b4.vu [ 189.437598][ T27] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 189.557358][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 189.635627][ T27] usb 2-1: USB disconnect, device number 6 [ 189.713663][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.046881][ T6632] ublk_ctrl_add_dev: dev id not match 4294967295 4096 [ 192.331323][ T6638] input: syz1 as /devices/virtual/input/input7 [ 193.557337][ T6650] can: request_module (can-proto-0) failed. [ 194.895995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 195.246927][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.253290][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.158331][ T6678] netlink: 'syz.3.277': attribute type 21 has an invalid length. [ 200.354755][ T6684] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 200.395689][ T6684] comedi comedi1: 8255: I/O port conflict (0xc,4) [ 200.402187][ T6684] comedi comedi1: 8255: I/O port conflict (0x90000,4) [ 200.435761][ T6684] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 200.442306][ T6684] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 200.460270][ T6684] comedi comedi1: 8255: I/O port conflict (0x280ffa,4) [ 200.479368][ T6684] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 200.497634][ T6684] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 200.525698][ T6684] comedi comedi1: 8255: I/O port conflict (0x1000008,4) [ 200.545834][ T6684] comedi comedi1: 8255: I/O port conflict (0x40000009,4) [ 200.579062][ T6684] comedi comedi1: 8255: I/O port conflict (0xfffffffffff7ffa6,4) [ 200.600126][ T6684] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 200.869744][ T6690] can: request_module (can-proto-0) failed. [ 200.876126][ T5819] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 201.064768][ T5819] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 201.090689][ T5819] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.256762][ T5819] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 201.824044][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.834167][ T5819] usb 3-1: Product: syz [ 201.838770][ T5819] usb 3-1: Manufacturer: syz [ 201.843403][ T5819] usb 3-1: SerialNumber: syz [ 202.103930][ T5819] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to g@b4.vu [ 202.138581][ T5819] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 202.216687][ T5819] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 202.254658][ T5819] usb 3-1: USB disconnect, device number 7 [ 202.290231][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.103809][ T6724] FAULT_INJECTION: forcing a failure. [ 203.103809][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 203.158650][ T6724] CPU: 0 PID: 6724 Comm: syz.0.292 Not tainted syzkaller #0 [ 203.166000][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.176102][ T6724] Call Trace: [ 203.179416][ T6724] [ 203.182384][ T6724] dump_stack_lvl+0x18c/0x250 [ 203.187112][ T6724] ? show_regs_print_info+0x20/0x20 [ 203.192355][ T6724] ? load_image+0x420/0x420 [ 203.196902][ T6724] ? __lock_acquire+0x7d80/0x7d80 [ 203.201959][ T6724] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 203.207707][ T6724] ? lockdep_hardirqs_on+0x98/0x150 [ 203.212931][ T6724] should_fail_ex+0x394/0x4c0 [ 203.217648][ T6724] should_failslab+0x9/0x20 [ 203.222188][ T6724] slab_pre_alloc_hook+0x59/0x300 [ 203.227234][ T6724] ? mas_prev_slot+0x858/0x8a0 [ 203.232040][ T6724] kmem_cache_alloc+0x5a/0x2c0 [ 203.236844][ T6724] ? vm_area_alloc+0x24/0x1d0 [ 203.241668][ T6724] vm_area_alloc+0x24/0x1d0 [ 203.246189][ T6724] mmap_region+0xcfa/0x2090 [ 203.250737][ T6724] ? file_mmap_ok+0x170/0x170 [ 203.255468][ T6724] ? cap_mmap_addr+0x213/0x2b0 [ 203.260281][ T6724] do_mmap+0x98f/0x10a0 [ 203.264471][ T6724] ? mlock_future_ok+0xf0/0xf0 [ 203.269257][ T6724] ? down_write+0x200/0x200 [ 203.273777][ T6724] vm_mmap_pgoff+0x1c4/0x3f0 [ 203.278405][ T6724] ? account_locked_vm+0x200/0x200 [ 203.283537][ T6724] ? ksys_mmap_pgoff+0xf3/0x720 [ 203.288430][ T6724] ? __x64_sys_mmap+0x7a/0x130 [ 203.293236][ T6724] do_syscall_64+0x55/0xb0 [ 203.297714][ T6724] ? clear_bhb_loop+0x40/0x90 [ 203.302424][ T6724] ? clear_bhb_loop+0x40/0x90 [ 203.307139][ T6724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.313066][ T6724] RIP: 0033:0x7f2ff3d9e159 [ 203.317492][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.337119][ T6724] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 203.345573][ T6724] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 203.353591][ T6724] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 203.361591][ T6724] RBP: 00007f2ff3e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 203.369588][ T6724] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 203.377575][ T6724] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 203.385597][ T6724] [ 204.662151][ T6738] can: request_module (can-proto-0) failed. [ 206.077108][ T6763] FAULT_INJECTION: forcing a failure. [ 206.077108][ T6763] name failslab, interval 1, probability 0, space 0, times 0 [ 206.161058][ T6763] CPU: 1 PID: 6763 Comm: syz.3.305 Not tainted syzkaller #0 [ 206.168433][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.178540][ T6763] Call Trace: [ 206.181859][ T6763] [ 206.184813][ T6763] dump_stack_lvl+0x18c/0x250 [ 206.189581][ T6763] ? show_regs_print_info+0x20/0x20 [ 206.194831][ T6763] ? load_image+0x420/0x420 [ 206.199390][ T6763] ? __lock_acquire+0x7d80/0x7d80 [ 206.204549][ T6763] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 206.210362][ T6763] ? lockdep_hardirqs_on+0x98/0x150 [ 206.215617][ T6763] should_fail_ex+0x394/0x4c0 [ 206.220349][ T6763] should_failslab+0x9/0x20 [ 206.224884][ T6763] slab_pre_alloc_hook+0x59/0x300 [ 206.229940][ T6763] ? mas_prev_slot+0x858/0x8a0 [ 206.234737][ T6763] kmem_cache_alloc+0x5a/0x2c0 [ 206.239536][ T6763] ? vm_area_alloc+0x24/0x1d0 [ 206.244240][ T6763] vm_area_alloc+0x24/0x1d0 [ 206.248762][ T6763] mmap_region+0xcfa/0x2090 [ 206.253308][ T6763] ? file_mmap_ok+0x170/0x170 [ 206.258022][ T6763] ? cap_mmap_addr+0x213/0x2b0 [ 206.262853][ T6763] do_mmap+0x98f/0x10a0 [ 206.267067][ T6763] ? mlock_future_ok+0xf0/0xf0 [ 206.271867][ T6763] ? down_write+0x200/0x200 [ 206.276494][ T6763] vm_mmap_pgoff+0x1c4/0x3f0 [ 206.281121][ T6763] ? account_locked_vm+0x200/0x200 [ 206.286253][ T6763] ? ksys_mmap_pgoff+0xf3/0x720 [ 206.291151][ T6763] ? __x64_sys_mmap+0x7a/0x130 [ 206.295935][ T6763] do_syscall_64+0x55/0xb0 [ 206.300388][ T6763] ? clear_bhb_loop+0x40/0x90 [ 206.305087][ T6763] ? clear_bhb_loop+0x40/0x90 [ 206.309788][ T6763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.315750][ T6763] RIP: 0033:0x7efdfc79e159 [ 206.320197][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.339824][ T6763] RSP: 002b:00007efdfd580028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 206.348265][ T6763] RAX: ffffffffffffffda RBX: 00007efdfca25fa0 RCX: 00007efdfc79e159 [ 206.356269][ T6763] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 206.364266][ T6763] RBP: 00007efdfc83506b R08: ffffffffffffffff R09: 0000000000000000 [ 206.372273][ T6763] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 206.380294][ T6763] R13: 00007efdfca26038 R14: 00007efdfca25fa0 R15: 00007fffcc009778 [ 206.388306][ T6763] [ 206.558122][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 206.564675][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 206.571724][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 206.577845][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 207.849059][ T6789] scsi_nl_rcv_msg: discarding partial skb [ 211.846766][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.335'. [ 211.865662][ T5817] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 212.140531][ T5817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.172897][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 212.218708][ T5817] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 212.250455][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.545540][ T5817] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 212.552388][ T5817] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 212.614873][ T5817] usb 2-1: USB disconnect, device number 7 [ 212.729903][ T6864] FAULT_INJECTION: forcing a failure. [ 212.729903][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 212.834168][ T6864] CPU: 0 PID: 6864 Comm: syz.0.349 Not tainted syzkaller #0 [ 212.841524][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.851708][ T6864] Call Trace: [ 212.855022][ T6864] [ 212.858033][ T6864] dump_stack_lvl+0x18c/0x250 [ 212.862754][ T6864] ? show_regs_print_info+0x20/0x20 [ 212.867996][ T6864] ? load_image+0x420/0x420 [ 212.872538][ T6864] ? __lock_acquire+0x7d80/0x7d80 [ 212.877598][ T6864] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 212.883369][ T6864] ? lockdep_hardirqs_on+0x98/0x150 [ 212.888619][ T6864] should_fail_ex+0x394/0x4c0 [ 212.893357][ T6864] should_failslab+0x9/0x20 [ 212.897915][ T6864] slab_pre_alloc_hook+0x59/0x300 [ 212.903011][ T6864] ? mas_prev_slot+0x858/0x8a0 [ 212.907841][ T6864] kmem_cache_alloc+0x5a/0x2c0 [ 212.912645][ T6864] ? vm_area_alloc+0x24/0x1d0 [ 212.917365][ T6864] vm_area_alloc+0x24/0x1d0 [ 212.921942][ T6864] mmap_region+0xcfa/0x2090 [ 212.926517][ T6864] ? file_mmap_ok+0x170/0x170 [ 212.931265][ T6864] ? cap_mmap_addr+0x213/0x2b0 [ 212.936095][ T6864] do_mmap+0x98f/0x10a0 [ 212.940340][ T6864] ? mlock_future_ok+0xf0/0xf0 [ 212.945169][ T6864] ? down_write+0x200/0x200 [ 212.949726][ T6864] vm_mmap_pgoff+0x1c4/0x3f0 [ 212.954381][ T6864] ? account_locked_vm+0x200/0x200 [ 212.959633][ T6864] ? ksys_mmap_pgoff+0xf3/0x720 [ 212.964543][ T6864] ? __x64_sys_mmap+0x7a/0x130 [ 212.969355][ T6864] do_syscall_64+0x55/0xb0 [ 212.973819][ T6864] ? clear_bhb_loop+0x40/0x90 [ 212.978570][ T6864] ? clear_bhb_loop+0x40/0x90 [ 212.983300][ T6864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.989234][ T6864] RIP: 0033:0x7f2ff3d9e159 [ 212.993688][ T6864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.013329][ T6864] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 213.021784][ T6864] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 213.029794][ T6864] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 213.037863][ T6864] RBP: 00007f2ff3e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 213.045903][ T6864] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 213.053909][ T6864] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 213.061930][ T6864] [ 214.065598][ T971] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 214.271348][ T971] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.286126][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.304707][ T971] usb 3-1: Product: syz [ 214.309107][ T971] usb 3-1: Manufacturer: syz [ 214.314077][ T971] usb 3-1: SerialNumber: syz [ 214.322845][ T971] usb 3-1: config 0 descriptor?? [ 214.567864][ T971] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.800045][ T6886] syz.3.352 uses obsolete (PF_INET,SOCK_PACKET) [ 214.825650][ T971] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 214.861772][ T971] usb 3-1: USB disconnect, device number 8 [ 215.455896][ T6892] FAULT_INJECTION: forcing a failure. [ 215.455896][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 215.559311][ T6892] CPU: 1 PID: 6892 Comm: syz.0.354 Not tainted syzkaller #0 [ 215.566677][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.576771][ T6892] Call Trace: [ 215.580089][ T6892] [ 215.583061][ T6892] dump_stack_lvl+0x18c/0x250 [ 215.587789][ T6892] ? show_regs_print_info+0x20/0x20 [ 215.593042][ T6892] ? load_image+0x420/0x420 [ 215.597600][ T6892] ? __lock_acquire+0x7d80/0x7d80 [ 215.602689][ T6892] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 215.608466][ T6892] ? lockdep_hardirqs_on+0x98/0x150 [ 215.613697][ T6892] should_fail_ex+0x394/0x4c0 [ 215.618413][ T6892] should_failslab+0x9/0x20 [ 215.622941][ T6892] slab_pre_alloc_hook+0x59/0x300 [ 215.628002][ T6892] ? mas_prev_slot+0x858/0x8a0 [ 215.632789][ T6892] kmem_cache_alloc+0x5a/0x2c0 [ 215.637578][ T6892] ? vm_area_alloc+0x24/0x1d0 [ 215.642302][ T6892] vm_area_alloc+0x24/0x1d0 [ 215.646824][ T6892] mmap_region+0xcfa/0x2090 [ 215.651356][ T6892] ? file_mmap_ok+0x170/0x170 [ 215.656061][ T6892] ? cap_mmap_addr+0x213/0x2b0 [ 215.660857][ T6892] do_mmap+0x98f/0x10a0 [ 215.665049][ T6892] ? mlock_future_ok+0xf0/0xf0 [ 215.669848][ T6892] ? down_write+0x200/0x200 [ 215.674387][ T6892] vm_mmap_pgoff+0x1c4/0x3f0 [ 215.679030][ T6892] ? account_locked_vm+0x200/0x200 [ 215.684189][ T6892] ? ksys_mmap_pgoff+0xf3/0x720 [ 215.689065][ T6892] ? __x64_sys_mmap+0x7a/0x130 [ 215.693880][ T6892] do_syscall_64+0x55/0xb0 [ 215.698342][ T6892] ? clear_bhb_loop+0x40/0x90 [ 215.703040][ T6892] ? clear_bhb_loop+0x40/0x90 [ 215.707739][ T6892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.713664][ T6892] RIP: 0033:0x7f2ff3d9e159 [ 215.718111][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.737744][ T6892] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 215.746185][ T6892] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 215.754183][ T6892] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 215.762171][ T6892] RBP: 00007f2ff3e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 215.770164][ T6892] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 215.778160][ T6892] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 215.786165][ T6892] [ 217.266530][ T6931] FAULT_INJECTION: forcing a failure. [ 217.266530][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 217.306743][ T6931] CPU: 1 PID: 6931 Comm: syz.2.367 Not tainted syzkaller #0 [ 217.314104][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.324202][ T6931] Call Trace: [ 217.327538][ T6931] [ 217.330498][ T6931] dump_stack_lvl+0x18c/0x250 [ 217.335237][ T6931] ? show_regs_print_info+0x20/0x20 [ 217.340492][ T6931] ? load_image+0x420/0x420 [ 217.345046][ T6931] ? __lock_acquire+0x7d80/0x7d80 [ 217.350125][ T6931] should_fail_ex+0x394/0x4c0 [ 217.354866][ T6931] should_failslab+0x9/0x20 [ 217.359425][ T6931] slab_pre_alloc_hook+0x59/0x300 [ 217.364518][ T6931] kmem_cache_alloc+0x5a/0x2c0 [ 217.369322][ T6931] ? vm_area_alloc+0x10e/0x1d0 [ 217.374118][ T6931] vm_area_alloc+0x10e/0x1d0 [ 217.378769][ T6931] mmap_region+0xcfa/0x2090 [ 217.383351][ T6931] ? try_to_wake_up+0x6f5/0x10e0 [ 217.388322][ T6931] ? file_mmap_ok+0x170/0x170 [ 217.393047][ T6931] ? cap_mmap_addr+0x213/0x2b0 [ 217.397864][ T6931] do_mmap+0x98f/0x10a0 [ 217.402049][ T6931] ? mlock_future_ok+0xf0/0xf0 [ 217.406833][ T6931] ? down_write+0x200/0x200 [ 217.411352][ T6931] vm_mmap_pgoff+0x1c4/0x3f0 [ 217.415965][ T6931] ? account_locked_vm+0x200/0x200 [ 217.421118][ T6931] ? ksys_mmap_pgoff+0xf3/0x720 [ 217.425997][ T6931] ? __x64_sys_mmap+0x7a/0x130 [ 217.430813][ T6931] do_syscall_64+0x55/0xb0 [ 217.435277][ T6931] ? clear_bhb_loop+0x40/0x90 [ 217.439986][ T6931] ? clear_bhb_loop+0x40/0x90 [ 217.444724][ T6931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.450655][ T6931] RIP: 0033:0x7fce1359e159 [ 217.455112][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.474748][ T6931] RSP: 002b:00007fce1438b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 217.483221][ T6931] RAX: ffffffffffffffda RBX: 00007fce13825fa0 RCX: 00007fce1359e159 [ 217.491227][ T6931] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 217.499223][ T6931] RBP: 00007fce1363506b R08: ffffffffffffffff R09: 0000000000000000 [ 217.507208][ T6931] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 217.515197][ T6931] R13: 00007fce13826038 R14: 00007fce13825fa0 R15: 00007ffc7c687e58 [ 217.523207][ T6931] [ 217.896196][ T5790] Bluetooth: hci2: adv larger than maximum supported [ 218.044366][ T28] audit: type=1326 audit(1789948738.860:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 218.165540][ T28] audit: type=1326 audit(1789948738.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 218.220593][ T28] audit: type=1326 audit(1789948738.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 218.408145][ T28] audit: type=1326 audit(1789948738.910:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 218.584820][ T28] audit: type=1326 audit(1789948738.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 218.675539][ T28] audit: type=1326 audit(1789948738.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 218.815998][ T28] audit: type=1326 audit(1789948738.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 218.904868][ T28] audit: type=1326 audit(1789948738.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 219.004091][ T28] audit: type=1326 audit(1789948738.910:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 219.065568][ T6956] FAULT_INJECTION: forcing a failure. [ 219.065568][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 219.078381][ T28] audit: type=1326 audit(1789948738.910:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfc79e159 code=0x7ffc0000 [ 219.125781][ T6956] CPU: 0 PID: 6956 Comm: syz.3.377 Not tainted syzkaller #0 [ 219.133128][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.143216][ T6956] Call Trace: [ 219.146525][ T6956] [ 219.149504][ T6956] dump_stack_lvl+0x18c/0x250 [ 219.154246][ T6956] ? show_regs_print_info+0x20/0x20 [ 219.159510][ T6956] ? load_image+0x420/0x420 [ 219.164079][ T6956] ? __lock_acquire+0x7d80/0x7d80 [ 219.169139][ T6956] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 219.174924][ T6956] ? lockdep_hardirqs_on+0x98/0x150 [ 219.180181][ T6956] should_fail_ex+0x394/0x4c0 [ 219.184922][ T6956] should_failslab+0x9/0x20 [ 219.189496][ T6956] slab_pre_alloc_hook+0x59/0x300 [ 219.194604][ T6956] ? mas_prev_slot+0x858/0x8a0 [ 219.199408][ T6956] kmem_cache_alloc+0x5a/0x2c0 [ 219.204199][ T6956] ? vm_area_alloc+0x24/0x1d0 [ 219.208892][ T6956] vm_area_alloc+0x24/0x1d0 [ 219.213407][ T6956] mmap_region+0xcfa/0x2090 [ 219.217951][ T6956] ? file_mmap_ok+0x170/0x170 [ 219.222660][ T6956] ? cap_mmap_addr+0x213/0x2b0 [ 219.227451][ T6956] do_mmap+0x98f/0x10a0 [ 219.231632][ T6956] ? __sanitizer_cov_trace_switch+0x89/0xe0 [ 219.237587][ T6956] ? mlock_future_ok+0xf0/0xf0 [ 219.242380][ T6956] ? down_write+0x200/0x200 [ 219.246929][ T6956] vm_mmap_pgoff+0x1c4/0x3f0 [ 219.251544][ T6956] ? account_locked_vm+0x200/0x200 [ 219.256679][ T6956] ? ksys_mmap_pgoff+0xf3/0x720 [ 219.261546][ T6956] ? __x64_sys_mmap+0x7a/0x130 [ 219.266328][ T6956] do_syscall_64+0x55/0xb0 [ 219.270771][ T6956] ? clear_bhb_loop+0x40/0x90 [ 219.275501][ T6956] ? clear_bhb_loop+0x40/0x90 [ 219.280218][ T6956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.286147][ T6956] RIP: 0033:0x7efdfc79e159 [ 219.290588][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.310255][ T6956] RSP: 002b:00007efdfd580028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 219.318693][ T6956] RAX: ffffffffffffffda RBX: 00007efdfca25fa0 RCX: 00007efdfc79e159 [ 219.326676][ T6956] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 219.334662][ T6956] RBP: 00007efdfc83506b R08: ffffffffffffffff R09: 0000000000000000 [ 219.342652][ T6956] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 219.350664][ T6956] R13: 00007efdfca26038 R14: 00007efdfca25fa0 R15: 00007fffcc009778 [ 219.358694][ T6956] [ 223.418922][ T6993] ======================================================= [ 223.418922][ T6993] WARNING: The mand mount option has been deprecated and [ 223.418922][ T6993] and is ignored by this kernel. Remove the mand [ 223.418922][ T6993] option from the mount to silence this warning. [ 223.418922][ T6993] ======================================================= [ 223.546371][ T6993] overlayfs: missing 'lowerdir' [ 223.635532][ T23] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 223.834329][ T7000] FAULT_INJECTION: forcing a failure. [ 223.834329][ T7000] name failslab, interval 1, probability 0, space 0, times 0 [ 223.899194][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.087425][ T7000] CPU: 0 PID: 7000 Comm: syz.1.389 Not tainted syzkaller #0 [ 224.094788][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.104875][ T7000] Call Trace: [ 224.108179][ T7000] [ 224.111137][ T7000] dump_stack_lvl+0x18c/0x250 [ 224.115860][ T7000] ? show_regs_print_info+0x20/0x20 [ 224.121100][ T7000] ? load_image+0x420/0x420 [ 224.125632][ T7000] ? __lock_acquire+0x7d80/0x7d80 [ 224.130715][ T7000] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 224.136482][ T7000] ? lockdep_hardirqs_on+0x98/0x150 [ 224.141723][ T7000] should_fail_ex+0x394/0x4c0 [ 224.146453][ T7000] should_failslab+0x9/0x20 [ 224.150996][ T7000] slab_pre_alloc_hook+0x59/0x300 [ 224.156057][ T7000] ? mas_prev_slot+0x858/0x8a0 [ 224.160858][ T7000] kmem_cache_alloc+0x5a/0x2c0 [ 224.165663][ T7000] ? vm_area_alloc+0x24/0x1d0 [ 224.170379][ T7000] vm_area_alloc+0x24/0x1d0 [ 224.174930][ T7000] mmap_region+0xcfa/0x2090 [ 224.179521][ T7000] ? file_mmap_ok+0x170/0x170 [ 224.184294][ T7000] ? cap_mmap_addr+0x213/0x2b0 [ 224.189126][ T7000] do_mmap+0x98f/0x10a0 [ 224.193349][ T7000] ? mlock_future_ok+0xf0/0xf0 [ 224.198162][ T7000] ? down_write+0x200/0x200 [ 224.202706][ T7000] vm_mmap_pgoff+0x1c4/0x3f0 [ 224.207353][ T7000] ? account_locked_vm+0x200/0x200 [ 224.212490][ T7000] ? ksys_mmap_pgoff+0xf3/0x720 [ 224.217392][ T7000] ? __x64_sys_mmap+0x7a/0x130 [ 224.222195][ T7000] do_syscall_64+0x55/0xb0 [ 224.226699][ T7000] ? clear_bhb_loop+0x40/0x90 [ 224.231409][ T7000] ? clear_bhb_loop+0x40/0x90 [ 224.236121][ T7000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.242045][ T7000] RIP: 0033:0x7f49c8b9e159 [ 224.246479][ T7000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.266096][ T7000] RSP: 002b:00007f49c6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 224.274564][ T7000] RAX: ffffffffffffffda RBX: 00007f49c8e25fa0 RCX: 00007f49c8b9e159 [ 224.282565][ T7000] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 224.290566][ T7000] RBP: 00007f49c8c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 224.298590][ T7000] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 224.306578][ T7000] R13: 00007f49c8e26038 R14: 00007f49c8e25fa0 R15: 00007ffdd2376018 [ 224.314598][ T7000] [ 224.366827][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 224.476106][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.511509][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.560466][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.645840][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 224.705575][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 224.742613][ T23] usb 1-1: Product: syz [ 224.752185][ T23] usb 1-1: Manufacturer: syz [ 224.778711][ T23] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 224.812960][ T23] usb 1-1: No streaming interface found for terminal 2. [ 224.895567][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 225.854677][ T971] usb 1-1: USB disconnect, device number 6 [ 225.870646][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.884569][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 225.921066][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.940378][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.950647][ T5819] usb 3-1: Product: syz [ 225.954898][ T5819] usb 3-1: Manufacturer: syz [ 225.974426][ T5819] usb 3-1: SerialNumber: syz [ 226.762634][ T5819] cdc_ncm 3-1:1.0: bind() failure [ 226.781442][ T5819] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 226.846114][ T5819] cdc_ncm 3-1:1.1: bind() failure [ 226.869600][ T5819] usb 3-1: USB disconnect, device number 9 [ 226.902349][ T7022] FAULT_INJECTION: forcing a failure. [ 226.902349][ T7022] name failslab, interval 1, probability 0, space 0, times 0 [ 226.953932][ T7022] CPU: 1 PID: 7022 Comm: syz.2.402 Not tainted syzkaller #0 [ 226.961313][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.971372][ T7022] Call Trace: [ 226.974656][ T7022] [ 226.977597][ T7022] dump_stack_lvl+0x18c/0x250 [ 226.982294][ T7022] ? show_regs_print_info+0x20/0x20 [ 226.987511][ T7022] ? load_image+0x420/0x420 [ 226.992050][ T7022] ? __lock_acquire+0x7d80/0x7d80 [ 226.997131][ T7022] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 227.002858][ T7022] ? lockdep_hardirqs_on+0x98/0x150 [ 227.008087][ T7022] should_fail_ex+0x394/0x4c0 [ 227.012835][ T7022] should_failslab+0x9/0x20 [ 227.017387][ T7022] slab_pre_alloc_hook+0x59/0x300 [ 227.022470][ T7022] ? mas_prev_slot+0x858/0x8a0 [ 227.027276][ T7022] kmem_cache_alloc+0x5a/0x2c0 [ 227.032124][ T7022] ? vm_area_alloc+0x24/0x1d0 [ 227.036852][ T7022] vm_area_alloc+0x24/0x1d0 [ 227.041393][ T7022] mmap_region+0xcfa/0x2090 [ 227.045947][ T7022] ? file_mmap_ok+0x170/0x170 [ 227.050694][ T7022] ? cap_mmap_addr+0x213/0x2b0 [ 227.055528][ T7022] do_mmap+0x98f/0x10a0 [ 227.059744][ T7022] ? mlock_future_ok+0xf0/0xf0 [ 227.064565][ T7022] ? down_write+0x200/0x200 [ 227.069143][ T7022] vm_mmap_pgoff+0x1c4/0x3f0 [ 227.073786][ T7022] ? account_locked_vm+0x200/0x200 [ 227.078949][ T7022] ? ksys_mmap_pgoff+0xf3/0x720 [ 227.083896][ T7022] ? __x64_sys_mmap+0x7a/0x130 [ 227.088737][ T7022] do_syscall_64+0x55/0xb0 [ 227.093199][ T7022] ? clear_bhb_loop+0x40/0x90 [ 227.097918][ T7022] ? clear_bhb_loop+0x40/0x90 [ 227.102651][ T7022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.108595][ T7022] RIP: 0033:0x7fce1359e159 [ 227.113055][ T7022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.132703][ T7022] RSP: 002b:00007fce1438b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 227.141172][ T7022] RAX: ffffffffffffffda RBX: 00007fce13825fa0 RCX: 00007fce1359e159 [ 227.149202][ T7022] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 227.157218][ T7022] RBP: 00007fce1363506b R08: ffffffffffffffff R09: 0000000000000000 [ 227.165233][ T7022] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 227.173230][ T7022] R13: 00007fce13826038 R14: 00007fce13825fa0 R15: 00007ffc7c687e58 [ 227.181256][ T7022] [ 230.651147][ T7051] FAULT_INJECTION: forcing a failure. [ 230.651147][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 230.713300][ T7051] CPU: 0 PID: 7051 Comm: syz.2.412 Not tainted syzkaller #0 [ 230.720681][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.730862][ T7051] Call Trace: [ 230.734155][ T7051] [ 230.737102][ T7051] dump_stack_lvl+0x18c/0x250 [ 230.741831][ T7051] ? show_regs_print_info+0x20/0x20 [ 230.747076][ T7051] ? load_image+0x420/0x420 [ 230.751679][ T7051] ? __lock_acquire+0x7d80/0x7d80 [ 230.756733][ T7051] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 230.762471][ T7051] ? lockdep_hardirqs_on+0x98/0x150 [ 230.767775][ T7051] should_fail_ex+0x394/0x4c0 [ 230.772492][ T7051] should_failslab+0x9/0x20 [ 230.777008][ T7051] slab_pre_alloc_hook+0x59/0x300 [ 230.782046][ T7051] ? mas_prev_slot+0x858/0x8a0 [ 230.786819][ T7051] kmem_cache_alloc+0x5a/0x2c0 [ 230.791586][ T7051] ? vm_area_alloc+0x24/0x1d0 [ 230.796264][ T7051] vm_area_alloc+0x24/0x1d0 [ 230.800783][ T7051] mmap_region+0xcfa/0x2090 [ 230.805301][ T7051] ? file_mmap_ok+0x170/0x170 [ 230.809995][ T7051] ? cap_mmap_addr+0x213/0x2b0 [ 230.814777][ T7051] do_mmap+0x98f/0x10a0 [ 230.818966][ T7051] ? mlock_future_ok+0xf0/0xf0 [ 230.823769][ T7051] ? down_write+0x200/0x200 [ 230.828314][ T7051] vm_mmap_pgoff+0x1c4/0x3f0 [ 230.832917][ T7051] ? account_locked_vm+0x200/0x200 [ 230.838048][ T7051] ? ksys_mmap_pgoff+0xf3/0x720 [ 230.842922][ T7051] ? __x64_sys_mmap+0x7a/0x130 [ 230.847691][ T7051] do_syscall_64+0x55/0xb0 [ 230.852112][ T7051] ? clear_bhb_loop+0x40/0x90 [ 230.856792][ T7051] ? clear_bhb_loop+0x40/0x90 [ 230.861473][ T7051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.867370][ T7051] RIP: 0033:0x7fce1359e159 [ 230.871783][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.891387][ T7051] RSP: 002b:00007fce1438b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 230.899801][ T7051] RAX: ffffffffffffffda RBX: 00007fce13825fa0 RCX: 00007fce1359e159 [ 230.907780][ T7051] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 230.915755][ T7051] RBP: 00007fce1363506b R08: ffffffffffffffff R09: 0000000000000000 [ 230.923730][ T7051] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 230.931706][ T7051] R13: 00007fce13826038 R14: 00007fce13825fa0 R15: 00007ffc7c687e58 [ 230.939732][ T7051] [ 234.476483][ T7094] FAULT_INJECTION: forcing a failure. [ 234.476483][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 234.546283][ T7094] CPU: 0 PID: 7094 Comm: syz.1.425 Not tainted syzkaller #0 [ 234.553645][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.563730][ T7094] Call Trace: [ 234.567052][ T7094] [ 234.570031][ T7094] dump_stack_lvl+0x18c/0x250 [ 234.574769][ T7094] ? show_regs_print_info+0x20/0x20 [ 234.580049][ T7094] ? load_image+0x420/0x420 [ 234.584602][ T7094] ? __lock_acquire+0x7d80/0x7d80 [ 234.589710][ T7094] should_fail_ex+0x394/0x4c0 [ 234.594454][ T7094] should_failslab+0x9/0x20 [ 234.599038][ T7094] slab_pre_alloc_hook+0x59/0x300 [ 234.604138][ T7094] kmem_cache_alloc+0x5a/0x2c0 [ 234.608947][ T7094] ? vm_area_alloc+0x10e/0x1d0 [ 234.613778][ T7094] vm_area_alloc+0x10e/0x1d0 [ 234.618414][ T7094] mmap_region+0xcfa/0x2090 [ 234.622973][ T7094] ? try_to_wake_up+0x6f5/0x10e0 [ 234.627989][ T7094] ? file_mmap_ok+0x170/0x170 [ 234.632747][ T7094] ? cap_mmap_addr+0x213/0x2b0 [ 234.637596][ T7094] do_mmap+0x98f/0x10a0 [ 234.641809][ T7094] ? mlock_future_ok+0xf0/0xf0 [ 234.646616][ T7094] ? down_write+0x200/0x200 [ 234.651166][ T7094] vm_mmap_pgoff+0x1c4/0x3f0 [ 234.655827][ T7094] ? account_locked_vm+0x200/0x200 [ 234.660985][ T7094] ? ksys_mmap_pgoff+0xf3/0x720 [ 234.665867][ T7094] ? __x64_sys_mmap+0x7a/0x130 [ 234.670672][ T7094] do_syscall_64+0x55/0xb0 [ 234.675110][ T7094] ? clear_bhb_loop+0x40/0x90 [ 234.679822][ T7094] ? clear_bhb_loop+0x40/0x90 [ 234.684534][ T7094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.690462][ T7094] RIP: 0033:0x7f49c8b9e159 [ 234.694907][ T7094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.714537][ T7094] RSP: 002b:00007f49c6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 234.722969][ T7094] RAX: ffffffffffffffda RBX: 00007f49c8e25fa0 RCX: 00007f49c8b9e159 [ 234.730984][ T7094] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 234.738987][ T7094] RBP: 00007f49c8c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 234.746993][ T7094] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 234.755007][ T7094] R13: 00007f49c8e26038 R14: 00007f49c8e25fa0 R15: 00007ffdd2376018 [ 234.763041][ T7094] [ 236.154494][ T5790] Bluetooth: Unknown LE signaling command 0x03 [ 236.161250][ T5790] Bluetooth: Wrong link type (-22) [ 236.478273][ T7120] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 237.060578][ T7131] FAULT_INJECTION: forcing a failure. [ 237.060578][ T7131] name failslab, interval 1, probability 0, space 0, times 0 [ 237.132911][ T7131] CPU: 1 PID: 7131 Comm: syz.0.440 Not tainted syzkaller #0 [ 237.140280][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.150382][ T7131] Call Trace: [ 237.153708][ T7131] [ 237.156663][ T7131] dump_stack_lvl+0x18c/0x250 [ 237.161385][ T7131] ? show_regs_print_info+0x20/0x20 [ 237.166643][ T7131] ? load_image+0x420/0x420 [ 237.171182][ T7131] ? __lock_acquire+0x7d80/0x7d80 [ 237.176251][ T7131] should_fail_ex+0x394/0x4c0 [ 237.180988][ T7131] should_failslab+0x9/0x20 [ 237.185538][ T7131] slab_pre_alloc_hook+0x59/0x300 [ 237.190616][ T7131] kmem_cache_alloc+0x5a/0x2c0 [ 237.195476][ T7131] ? vm_area_alloc+0x10e/0x1d0 [ 237.200307][ T7131] vm_area_alloc+0x10e/0x1d0 [ 237.204961][ T7131] mmap_region+0xcfa/0x2090 [ 237.209558][ T7131] ? try_to_wake_up+0x6f5/0x10e0 [ 237.214568][ T7131] ? file_mmap_ok+0x170/0x170 [ 237.219286][ T7131] ? cap_mmap_addr+0x213/0x2b0 [ 237.224099][ T7131] do_mmap+0x98f/0x10a0 [ 237.228299][ T7131] ? mlock_future_ok+0xf0/0xf0 [ 237.233133][ T7131] ? down_write+0x200/0x200 [ 237.237715][ T7131] vm_mmap_pgoff+0x1c4/0x3f0 [ 237.242353][ T7131] ? account_locked_vm+0x200/0x200 [ 237.247504][ T7131] ? ksys_mmap_pgoff+0xf3/0x720 [ 237.252408][ T7131] ? __x64_sys_mmap+0x7a/0x130 [ 237.257246][ T7131] do_syscall_64+0x55/0xb0 [ 237.261695][ T7131] ? clear_bhb_loop+0x40/0x90 [ 237.266405][ T7131] ? clear_bhb_loop+0x40/0x90 [ 237.271119][ T7131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.277055][ T7131] RIP: 0033:0x7f2ff3d9e159 [ 237.281496][ T7131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.301131][ T7131] RSP: 002b:00007f2ff4d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 237.309600][ T7131] RAX: ffffffffffffffda RBX: 00007f2ff4025fa0 RCX: 00007f2ff3d9e159 [ 237.317615][ T7131] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 237.325618][ T7131] RBP: 00007f2ff3e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 237.333624][ T7131] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 237.341662][ T7131] R13: 00007f2ff4026038 R14: 00007f2ff4025fa0 R15: 00007ffec200bbc8 [ 237.349697][ T7131] [ 238.855688][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 239.755824][ T9] usb 3-1: device descriptor read/64, error -71 [ 240.045513][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 240.215686][ T9] usb 3-1: device descriptor read/64, error -71 [ 240.346108][ T9] usb usb3-port1: attempt power cycle [ 240.759385][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 240.798258][ T9] usb 3-1: device descriptor read/8, error -71 [ 241.068157][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.106143][ T9] usb 3-1: device descriptor read/8, error -71 [ 241.225775][ T9] usb usb3-port1: unable to enumerate USB device [ 255.678823][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.685171][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.119318][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.125943][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.559454][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568602][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.595661][ T29] INFO: task syz-executor:5764 blocked for more than 143 seconds. [ 385.603529][ T29] Not tainted syzkaller #0 [ 385.608884][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 385.617648][ T29] task:syz-executor state:D stack:22008 pid:5764 ppid:5763 flags:0x00004002 [ 385.627006][ T29] Call Trace: [ 385.630329][ T29] [ 385.633306][ T29] __schedule+0x15ae/0x4660 [ 385.638059][ T29] ? mark_lock+0x94/0x320 [ 385.642425][ T29] ? asan.module_dtor+0x20/0x20 [ 385.647354][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 385.652424][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 385.658426][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 385.663660][ T29] schedule+0xbd/0x170 [ 385.668809][ T29] io_schedule+0x80/0xd0 [ 385.673143][ T29] bit_wait_io+0x11/0xd0 [ 385.677454][ T29] __wait_on_bit+0x9f/0x2c0 [ 385.681994][ T29] ? bit_wait+0xd0/0xd0 [ 385.686276][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 385.691800][ T29] ? bit_wait+0xd0/0xd0 [ 385.696048][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 385.700861][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 385.705962][ T29] ? bit_waitqueue+0x30/0x30 [ 385.710602][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 385.715972][ T29] do_get_write_access+0x5c9/0xe00 [ 385.721171][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 385.727270][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 385.733488][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 385.739737][ T29] ? __might_sleep+0xe0/0xe0 [ 385.744375][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 385.750173][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 385.763941][ T29] ext4_dirty_inode+0xcb/0x110 [ 385.768800][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 385.775248][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 385.780622][ T29] file_update_time+0x187/0x1a0 [ 385.785584][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 385.790653][ T29] ? do_wp_page+0x4ce/0x34d0 [ 385.795276][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 385.801587][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 385.806725][ T29] do_page_mkwrite+0x153/0x3f0 [ 385.811533][ T29] do_wp_page+0xd4d/0x34d0 [ 385.816018][ T29] ? folio_put+0xd0/0xd0 [ 385.820310][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 385.825445][ T29] ? __rwlock_init+0x150/0x150 [ 385.830261][ T29] handle_mm_fault+0x1306/0x4a50 [ 385.835248][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 385.840353][ T29] ? numa_migrate_prep+0x350/0x350 [ 385.845581][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 385.850893][ T29] do_user_addr_fault+0x736/0x12d0 [ 385.856192][ T29] exc_page_fault+0x64/0x100 [ 385.860828][ T29] ? clear_bhb_loop+0x40/0x90 [ 385.865591][ T29] asm_exc_page_fault+0x26/0x30 [ 385.870513][ T29] RIP: 0033:0x7fd2cda7c6e2 [ 385.875849][ T29] RSP: 002b:00007fff9c6fd990 EFLAGS: 00010202 [ 385.881956][ T29] RAX: 00007fd2cb924000 RBX: 00005555837f6540 RCX: 0000000000000006 [ 385.889997][ T29] RDX: 00000000000002cf RSI: 00005555837f6638 RDI: 0000000000000040 [ 385.898071][ T29] RBP: 00007fff9c6fde90 R08: 00005555837f6660 R09: 0000000000000093 [ 385.906151][ T29] R10: 00007fd2cddf2e20 R11: 0000000000000000 R12: 00007fff9c6fdcd0 [ 385.914158][ T29] R13: 00007fff9c6fdac0 R14: 585858582e7a7973 R15: 00007fff9c6fda10 [ 385.925127][ T29] [ 385.930714][ T29] INFO: task syz.3.450:7158 blocked for more than 143 seconds. [ 385.938443][ T29] Not tainted syzkaller #0 [ 385.943663][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 385.952485][ T29] task:syz.3.450 state:D stack:27048 pid:7158 ppid:5781 flags:0x00004004 [ 385.961892][ T29] Call Trace: [ 385.965193][ T29] [ 385.968205][ T29] __schedule+0x15ae/0x4660 [ 385.972768][ T29] ? mark_lock+0x94/0x320 [ 385.978995][ T29] ? asan.module_dtor+0x20/0x20 [ 385.983899][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 385.989091][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 385.995059][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 386.000468][ T29] schedule+0xbd/0x170 [ 386.004607][ T29] io_schedule+0x80/0xd0 [ 386.008974][ T29] bit_wait_io+0x11/0xd0 [ 386.013249][ T29] __wait_on_bit+0x9f/0x2c0 [ 386.017885][ T29] ? bit_wait+0xd0/0xd0 [ 386.022096][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 386.027679][ T29] ? bit_wait+0xd0/0xd0 [ 386.031878][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 386.036731][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 386.041844][ T29] ? bit_waitqueue+0x30/0x30 [ 386.046611][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 386.051879][ T29] do_get_write_access+0x5c9/0xe00 [ 386.057099][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 386.063094][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 386.069349][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 386.075637][ T29] ? __might_sleep+0xe0/0xe0 [ 386.080856][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 386.086590][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 386.092210][ T29] ext4_dirty_inode+0xcb/0x110 [ 386.097088][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 386.102932][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 386.108167][ T29] file_update_time+0x187/0x1a0 [ 386.113068][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 386.118203][ T29] ? filemap_fault+0x103c/0x1540 [ 386.123225][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 386.129017][ T29] ? pte_alloc_one+0x3b6/0x540 [ 386.133835][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 386.140178][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 386.145398][ T29] do_page_mkwrite+0x153/0x3f0 [ 386.150221][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 386.155217][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 386.160371][ T29] ? numa_migrate_prep+0x350/0x350 [ 386.165575][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 386.170883][ T29] do_user_addr_fault+0x736/0x12d0 [ 386.176188][ T29] exc_page_fault+0x64/0x100 [ 386.181314][ T29] asm_exc_page_fault+0x26/0x30 [ 386.186296][ T29] RIP: 0033:0x7efdfc672809 [ 386.190765][ T29] RSP: 002b:00007fffcc0097c0 EFLAGS: 00010202 [ 386.196966][ T29] RAX: 0000001b2de24000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 386.204976][ T29] RDX: 0000001b2de23ffc RSI: 00000000003ffde8 RDI: 00007efdfd555700 [ 386.213047][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007efdfca12000 [ 386.221134][ T29] R10: 00007efdfd555700 R11: 0000000000000000 R12: 0000000000000000 [ 386.229187][ T29] R13: 000000000000003d R14: ffffffff81321df0 R15: 00007efdfd555720 [ 386.237461][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 386.243589][ T29] [ 386.246699][ T29] INFO: task syz.0.451:7160 blocked for more than 144 seconds. [ 386.254270][ T29] Not tainted syzkaller #0 [ 386.259304][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.268079][ T29] task:syz.0.451 state:D stack:27560 pid:7160 ppid:5780 flags:0x00004004 [ 386.278203][ T29] Call Trace: [ 386.282000][ T29] [ 386.284973][ T29] __schedule+0x15ae/0x4660 [ 386.289680][ T29] ? mark_lock+0x94/0x320 [ 386.294051][ T29] ? asan.module_dtor+0x20/0x20 [ 386.298971][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 386.304036][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 386.310043][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 386.315293][ T29] schedule+0xbd/0x170 [ 386.319624][ T29] io_schedule+0x80/0xd0 [ 386.323913][ T29] bit_wait_io+0x11/0xd0 [ 386.328373][ T29] __wait_on_bit+0x9f/0x2c0 [ 386.332905][ T29] ? bit_wait+0xd0/0xd0 [ 386.337147][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 386.342645][ T29] ? bit_wait+0xd0/0xd0 [ 386.346881][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 386.351676][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 386.356817][ T29] ? bit_waitqueue+0x30/0x30 [ 386.361443][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 386.366728][ T29] do_get_write_access+0x5c9/0xe00 [ 386.371894][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 386.377951][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 386.384685][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 386.390956][ T29] ? __might_sleep+0xe0/0xe0 [ 386.395933][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 386.401551][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 386.407114][ T29] ext4_dirty_inode+0xcb/0x110 [ 386.411915][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 386.417998][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 386.423076][ T29] file_update_time+0x187/0x1a0 [ 386.428201][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 386.433264][ T29] ? filemap_fault+0x103c/0x1540 [ 386.438457][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 386.444250][ T29] ? pte_alloc_one+0x3b6/0x540 [ 386.449096][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 386.455434][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 386.460508][ T29] do_page_mkwrite+0x153/0x3f0 [ 386.465318][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 386.470380][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 386.475429][ T29] ? numa_migrate_prep+0x350/0x350 [ 386.480585][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 386.486529][ T29] do_user_addr_fault+0x736/0x12d0 [ 386.491697][ T29] exc_page_fault+0x64/0x100 [ 386.496368][ T29] ? clear_bhb_loop+0x40/0x90 [ 386.501084][ T29] asm_exc_page_fault+0x26/0x30 [ 386.506030][ T29] RIP: 0033:0x7f2ff3c6baa3 [ 386.510509][ T29] RSP: 002b:00007ffec200bd30 EFLAGS: 00010246 [ 386.516689][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d764000 [ 386.524721][ T29] RDX: 0000001b2d724000 RSI: 0000000000600000 RDI: 00007f2ff3fe0708 [ 386.532865][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.540908][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 386.549197][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec200bfc0 [ 386.557784][ T29] [ 386.560864][ T29] INFO: task syz.1.452:7161 blocked for more than 144 seconds. [ 386.568477][ T29] Not tainted syzkaller #0 [ 386.573432][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.582164][ T29] task:syz.1.452 state:D stack:27560 pid:7161 ppid:5775 flags:0x00004004 [ 386.591930][ T29] Call Trace: [ 386.595269][ T29] [ 386.598335][ T29] __schedule+0x15ae/0x4660 [ 386.602890][ T29] ? mark_lock+0x94/0x320 [ 386.607291][ T29] ? asan.module_dtor+0x20/0x20 [ 386.612191][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 386.617323][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 386.623260][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 386.628551][ T29] schedule+0xbd/0x170 [ 386.632666][ T29] io_schedule+0x80/0xd0 [ 386.637012][ T29] bit_wait_io+0x11/0xd0 [ 386.641305][ T29] __wait_on_bit+0x9f/0x2c0 [ 386.645924][ T29] ? bit_wait+0xd0/0xd0 [ 386.650263][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 386.655935][ T29] ? bit_wait+0xd0/0xd0 [ 386.660135][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 386.664912][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 386.670055][ T29] ? bit_waitqueue+0x30/0x30 [ 386.674704][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 386.680020][ T29] do_get_write_access+0x5c9/0xe00 [ 386.685195][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 386.691874][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 386.699458][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 386.705841][ T29] ? __might_sleep+0xe0/0xe0 [ 386.710496][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 386.716182][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 386.721684][ T29] ext4_dirty_inode+0xcb/0x110 [ 386.726558][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 386.732418][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 386.737872][ T29] file_update_time+0x187/0x1a0 [ 386.742801][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 386.747925][ T29] ? filemap_fault+0x103c/0x1540 [ 386.752915][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 386.760043][ T29] ? pte_alloc_one+0x3b6/0x540 [ 386.764839][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 386.771297][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 386.776458][ T29] do_page_mkwrite+0x153/0x3f0 [ 386.781252][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 386.786272][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 386.791251][ T29] ? numa_migrate_prep+0x350/0x350 [ 386.797017][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 386.802363][ T29] do_user_addr_fault+0x736/0x12d0 [ 386.807593][ T29] exc_page_fault+0x64/0x100 [ 386.812223][ T29] ? clear_bhb_loop+0x40/0x90 [ 386.817054][ T29] asm_exc_page_fault+0x26/0x30 [ 386.821970][ T29] RIP: 0033:0x7f49c8a6baa3 [ 386.826477][ T29] RSP: 002b:00007ffdd2376180 EFLAGS: 00010246 [ 386.832579][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d864000 [ 386.840630][ T29] RDX: 0000001b2d824000 RSI: 0000000000400000 RDI: 00007f49c8de0708 [ 386.848744][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.856826][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 386.864826][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd2376410 [ 386.872910][ T29] [ 386.876923][ T29] [ 386.876923][ T29] Showing all locks held in the system: [ 386.884692][ T29] 1 lock held by khungtaskd/29: [ 386.889649][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 386.900311][ T29] 6 locks held by kworker/u4:5/79: [ 386.905546][ T29] #0: ffff88801d657538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 386.916984][ T29] #1: ffffc9000232fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 386.929608][ T29] #2: ffff88814e5de0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 386.940379][ T29] #3: ffff88814e5e0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 386.950947][ T29] #4: ffff88814e5e2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 386.960797][ T29] #5: ffff8880769b7088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 386.970735][ T29] 2 locks held by kworker/u4:11/4696: [ 386.980119][ T29] #0: ffff8880b8f3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 386.990456][ T29] #1: ffff8880b8f28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 387.000665][ T29] 2 locks held by getty/5530: [ 387.005466][ T29] #0: ffff88802d24f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 387.015332][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 387.025734][ T29] 3 locks held by syz-executor/5764: [ 387.031042][ T29] #0: ffff88807de73aa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 387.041130][ T29] #1: ffff88814e5de510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 387.051097][ T29] #2: ffff88814e5e2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 387.060908][ T29] 3 locks held by syz.3.450/7158: [ 387.066120][ T29] #0: ffff888079adb120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 387.076144][ T29] #1: ffff88814e5de510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 387.086207][ T29] #2: ffff88814e5e2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 387.096054][ T29] 3 locks held by syz.0.451/7160: [ 387.102154][ T29] #0: ffff888079adc420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 387.112443][ T29] #1: ffff88814e5de510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 387.122352][ T29] #2: ffff88814e5e2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 387.132190][ T29] 3 locks held by syz.1.452/7161: [ 387.137465][ T29] #0: ffff888079ad94a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 387.147500][ T29] #1: ffff88814e5de510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 387.157324][ T29] #2: ffff88814e5e2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 387.167198][ T29] [ 387.169546][ T29] ============================================= [ 387.169546][ T29] [ 387.178059][ T29] NMI backtrace for cpu 1 [ 387.182402][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 387.189627][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.199715][ T29] Call Trace: [ 387.203012][ T29] [ 387.205972][ T29] dump_stack_lvl+0x18c/0x250 [ 387.210787][ T29] ? __wake_up_klogd+0xd9/0x100 [ 387.215687][ T29] ? show_regs_print_info+0x20/0x20 [ 387.220905][ T29] ? load_image+0x420/0x420 [ 387.225463][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 387.230438][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 387.236651][ T29] ? load_image+0x420/0x420 [ 387.241180][ T29] ? wq_watchdog_touch+0xef/0x170 [ 387.246252][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 387.252359][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 387.258368][ T29] watchdog+0xf59/0xfa0 [ 387.262556][ T29] ? watchdog+0x1e1/0xfa0 [ 387.266911][ T29] kthread+0x2fa/0x390 [ 387.270997][ T29] ? hungtask_pm_notify+0x50/0x50 [ 387.276045][ T29] ? kthread_blkcg+0xd0/0xd0 [ 387.280652][ T29] ret_from_fork+0x48/0x80 [ 387.285091][ T29] ? kthread_blkcg+0xd0/0xd0 [ 387.289703][ T29] ret_from_fork_asm+0x11/0x20 [ 387.294502][ T29] [ 387.298619][ T29] Sending NMI from CPU 1 to CPUs 0: [ 387.303879][ C0] NMI backtrace for cpu 0 [ 387.303888][ C0] CPU: 0 PID: 3443 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 387.303902][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.303911][ C0] Workqueue: bat_events batadv_nc_worker [ 387.303935][ C0] RIP: 0010:__lock_acquire+0x126a/0x7d80 [ 387.303955][ C0] Code: 07 89 c3 81 e3 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 00 b5 1e 91 be 08 00 00 00 e8 ee 6a 77 00 48 0f a3 1d b6 06 b6 0f <73> 1a 48 69 c3 d0 00 00 00 48 8d 98 c0 33 b5 90 49 b8 00 00 00 00 [ 387.303967][ C0] RSP: 0018:ffffc9000c7ff7c0 EFLAGS: 00000057 [ 387.303978][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff8168ae42 [ 387.303987][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb500 [ 387.303997][ C0] RBP: ffffc9000c7ffa08 R08: ffffffff911eb507 R09: 1ffffffff223d6a0 [ 387.304007][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 0000000023203d58 [ 387.304017][ C0] R13: ffff88802d931e00 R14: 000000002600a200 R15: ffff88802d932958 [ 387.304028][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 387.304039][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.304049][ C0] CR2: 00007ffdb3b9efe8 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 387.304061][ C0] Call Trace: [ 387.304066][ C0] [ 387.304080][ C0] ? __mod_timer+0x9b0/0xd60 [ 387.304094][ C0] ? verify_lock_unused+0x140/0x140 [ 387.304113][ C0] ? verify_lock_unused+0x140/0x140 [ 387.304135][ C0] lock_acquire+0x19e/0x420 [ 387.304150][ C0] ? batadv_nc_worker+0xd2/0x600 [ 387.304172][ C0] ? batadv_nc_worker+0xd2/0x600 [ 387.304191][ C0] ? read_lock_is_recursive+0x20/0x20 [ 387.304208][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 387.304225][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 387.304243][ C0] ? batadv_nc_worker+0xd2/0x600 [ 387.304262][ C0] batadv_nc_worker+0xef/0x600 [ 387.304281][ C0] ? batadv_nc_worker+0xd2/0x600 [ 387.304301][ C0] ? process_scheduled_works+0x975/0x1600 [ 387.304321][ C0] process_scheduled_works+0xa60/0x1600 [ 387.304350][ C0] ? worker_attach_to_pool+0x370/0x370 [ 387.304370][ C0] ? assign_work+0x3cc/0x5d0 [ 387.304390][ C0] worker_thread+0xa5e/0xfe0 [ 387.304417][ C0] kthread+0x2fa/0x390 [ 387.304431][ C0] ? pr_cont_work+0x550/0x550 [ 387.304449][ C0] ? kthread_blkcg+0xd0/0xd0 [ 387.304463][ C0] ret_from_fork+0x48/0x80 [ 387.304481][ C0] ? kthread_blkcg+0xd0/0xd0 [ 387.304495][ C0] ret_from_fork_asm+0x11/0x20 [ 387.304520][ C0] [ 387.314553][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 387.314581][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 387.314627][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.314665][ T29] Call Trace: [ 387.314682][ T29] [ 387.314699][ T29] dump_stack_lvl+0x18c/0x250 [ 387.314766][ T29] ? show_regs_print_info+0x20/0x20 [ 387.314829][ T29] ? load_image+0x420/0x420 [ 387.314915][ T29] panic+0x2ca/0x720 [ 387.314970][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 387.315021][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 387.315087][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 387.315151][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 387.315232][ T29] watchdog+0xf98/0xfa0 [ 387.315297][ T29] ? watchdog+0x1e1/0xfa0 [ 387.315378][ T29] kthread+0x2fa/0x390 [ 387.315440][ T29] ? hungtask_pm_notify+0x50/0x50 [ 387.315518][ T29] ? kthread_blkcg+0xd0/0xd0 [ 387.315582][ T29] ret_from_fork+0x48/0x80 [ 387.315639][ T29] ? kthread_blkcg+0xd0/0xd0 [ 387.315689][ T29] ret_from_fork_asm+0x11/0x20 [ 387.315782][ T29] [ 387.317961][ T29] Kernel Offset: disabled [ 387.664156][ T29] Rebooting in 86400 seconds..