last executing test programs: 3m11.672147725s ago: executing program 2 (id=650): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0185502, &(0x7f0000002500)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xffffffbffffffdfc, 0xfffffffc, 0x2a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x400, 0x1, 0x0, 0x0, 0xffff, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x0, 0x5691, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x5, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x400000, 0x0, 0x40008, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x20, 0xfff, 0xa2, 0x200, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0xc0ab, 0x0, 0x201, 0x0, 0xfffffffe, 0x0, 0xfffffffc]}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4b2}}, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) syz_usb_control_io$printer(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) syz_usb_control_io$uac3(r1, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x20, 0xe, 0xf, {0xf, 0x6, "f8ecc3460a07deaf57482f1c97"}}, &(0x7f0000000140)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "e691e4a994fa2b61df88e90cdd28d07df71ded4ad78db8f13c7683f7b5bab7c918964d279402996199f1b3be782a2b83286330afe3fd34943dcb6025a4cd19dbfce6f0f6e0a9242527140818d19513fd3dae8b55c8f6822e2f8ebad6642b1e42bbfaa57efde6a1c607390768a537accc0499009457eaddc8a938ffed1f48487cde54a6fc17abdbc51fc6312d2440f6f9ffccd3dc73ba0d082614a900958cb1a3ad4270a946ee24f4c8771d10d90eda6c47f79bd46695e530625bfb4eed3751409eee20d5fca742af9e382d86043e36fb2ac074e2e602f4f8411af2affda3"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x81, 0x1, '_'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "6a88"}, &(0x7f0000000c00)=ANY=[@ANYBLOB="208303000000912dc12c2a82ac4176017a05247a97b156a4558a30f51a3293dd4713bd8553e4a80855143db4fc4270b64a36254cc01537d426ad9cb1d7dd22c9992ef4bf"], &(0x7f0000000640)={0x20, 0x84, 0x3, "3f33eb"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "4e7f3a"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='enable_event:sched:sched_process_fork\x00', 0x26) syz_usb_connect$uac2(0x4, 0x100, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1034, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x9, 0x10, 0x4, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x27, 0x7}, [@effect_unit={0xb, 0x24, 0x7, 0x2, 0x3, 0x1, [0x3, 0x3]}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0x1, 0x8, 0x6}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0xf, 0x2, 0x3, 0x1c, 0xfa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0xfff, 0x6, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x7, 0xe7, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x7ff, 0x3, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x3, 0xb1, 0x3}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7f, 0xb7, "3e4a48aae0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5a, 0x6, 0xce, {0x8, 0x25, 0x1, 0x83, 0xc, 0x4, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9e, 0x4, 0x6, 0x3, "e08ecf0e"}, @as_header={0x10, 0x24, 0x1, 0x8, 0xfe, 0x3, 0x3, 0x5, 0x7, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1ff, 0x3, 0xb9, "3fdb"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x7, 'F\a', "62e92f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xc, 0x1, 0x0, {0x8, 0x25, 0x1, 0x2, 0x30, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x201, 0x2, 0x1, 0x5, 0x10, 0x6}, 0x11c, &(0x7f0000000880)={0x5, 0xf, 0x11c, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x3cb, 0xff00, 0x401, [0x3f30, 0xffc011, 0xc000]}, @generic={0xe7, 0x10, 0xa, "59b62fb99756e3943d6bae7964e6574e79d26be0948a56ff21b19dde2a7cf156392c3827d56b312d173a55141722f9e1594b0abb95f87afe5a89cc66269612e5cc17dcbec2488ae4d357783e5046ab1bbf6c34a15e9fee60a427b36ea669d6d3ab66f5b6072cd4bbf07fcd23d806d9aadfea0dd5dd1705bbaeb1220f9aee743a7b9dcfcf75e753a69b55901e5483368e19fd9d33cd413af218cd7bb98181ab8b8a58e4048ccb349b6b714be3ee4a1a409fe4c176734a7eb8dbc2fa6f04e925c152b4013cda63c271d7601609faf7616779631314beeb015186b517a626103e336efb7cbd"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xed, 0x1, 0x8, 0x3, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xd6, 0xf8, 0x8}, @ptm_cap={0x3}]}, 0x3, [{0x26, &(0x7f00000009c0)=@string={0x26, 0x3, "57acda9aedebb7ecd9bdf77717f77757af54439472ba918daf6897d2788c49c55be6eab2"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1407}}, {0xeb, &(0x7f0000000a40)=@string={0xeb, 0x3, "d4c259d4885f01f972f84a19666e1109620948a3e812478f9f921894b8daed521c0d03b1331989bcfb8a5e9d81e2795c7fb6916f4a01e79eb2594a975c7068a1587841046f7f8841bc27a0dea2b121f9668a4e8e6d23a89ac9c9eb13b59ae59ae5574c6aa786c75058f58a8b2377da0785baba0ec68cf887b7f568011c558f0ab7e17072c15057e8cf7da3cb1489ac7b42a80fe5a241b7584d4a05759da4c40264444b5887025f58a1b0daa157d4a440af022a229ffa1e5f5732d257c8596163fbead82c1c59c895d7f0cce26cd82526ff91ee4d8b63222d921591ec6d28af187449941e6ea2ee76ce"}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0xa, @local, 0xe}], 0x1c) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) mount$afs(&(0x7f00000000c0), &(0x7f00000002c0)='./debug/fail_page_alloc/min-order\x00', &(0x7f0000000300), 0x8, &(0x7f0000000b80)={[{@flock_strict}, {@dyn}, {@flock_openafs}, {@dyn}, {@flock_openafs}, {@flock_local}, {@flock_strict}, {@flock_strict}, {@flock_strict}, {@dyn}]}) 3m8.414794806s ago: executing program 2 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f0000001040)=""/4100, 0x1004}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4082, 0xff2}, {&(0x7f0000000340)=""/242, 0xf2}], 0x3}, 0x6}], 0x7, 0x0, 0x0) 3m8.211379971s ago: executing program 2 (id=688): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010000100f5ffffff000000000700000a20000000000a0103000000000000000001db00000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000020a01030000000000000000000000061400000011000100"], 0xfc}}, 0x0) 3m7.982563568s ago: executing program 2 (id=692): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x9d2051, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0xb703, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000053d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="36f2440f23f1b9800000c00f3235000800000f30440f01c40f01c3c744240013010000c744240206000000ff2c24dab07a8300000fc71e0f793966b8f0000f00d0400f01c9", 0x45}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000440)={0x3e, &(0x7f0000000480)=[{0x12, '\x00', @data=0x8, 0xfffffff7}]}) r7 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r7, 0xc008551a, &(0x7f0000000180)={0xffff52ea}) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f0001"], 0x90}}, 0x4) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m7.534658299s ago: executing program 2 (id=697): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) setuid(0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) (async) r2 = socket(0x15, 0x5, 0x0) accept4$vsock_stream(r2, 0x0, 0x0, 0x800) (async) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) (async) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000019580)={@initdev, @private}, &(0x7f00000195c0)=0x8) (async) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) (async) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000180)=0x18ff9) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r6, 0x0, 0x0, 0x10002, 0x0) (async) write(r5, &(0x7f0000000800)='0', 0x1) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xab94, 0xd, 0x6, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x3, 0x40, 0x10, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x484, 0xc, 0x465, 0xfffffe00, 0x80000001, 0xffffffff, 0x0, 0x1, 0x8001, 0x1]}) socket$packet(0x11, 0x2, 0x300) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x400448e0, &(0x7f0000000940)={0x0, 0x0}) 3m7.211742573s ago: executing program 2 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54002100100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080003007b000000080002007f000001", 0x54}], 0x1}, 0x0) 3m6.649392137s ago: executing program 32 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54002100100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080003007b000000080002007f000001", 0x54}], 0x1}, 0x0) 1m32.306821211s ago: executing program 3 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xba) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x138, 0x0, 0xfd, [{{0x1, 0x2, 0x10d6, 0x8, 0x9, 0x8, {0x204, 0x80000000000006, 0xfffffffffffff534, 0x7, 0x8000000000000000, 0xfffffffffffffffd, 0x3, 0x4, 0x7fff, 0xc000, 0x8, r2, r3, 0x6, 0x200003}}, {0x0, 0xc7b, 0x8d, 0x6, '\xbb\xfef\x91\xc0\x9a\tf\x95\xaf\x9f\xa03|d\xac\xea\x80\x8f\xce\xb3\t>!\xfc-*\xd1\xa9\xe2\xde.\xe0u\x9ac.\x92\x19\xed:\xe3\xeaM\x98m\xea\x862\xcdI\x13\xd4\xdc\b\xab$\x9e44*9\xf16\x9b\xd7F\xf3=\xee1Y\x7f\xf0\xd0_\xf1z{\xfam_\xf7\x10o\xa5\xc5\x9a\x960\x14\b\xa3\x03\x98ZW<0\xd2\xae\xb6\xdb\xbf\xac\xc8\xf2\xb2\x81\xc0\xfe\xe3X\xdba\x85\x9d\ac\xf7)\x1f(\xa4L\x87;\xa6p\xd3\xea,\xc7\x00\x00\x00\x00\x00\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r6, 0x5220, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000140)=""/85) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) quotactl$Q_GETINFO(0x3, &(0x7f00000000c0)=@filename='./tracing\x00', r8, &(0x7f0000000300)) 1m30.781811409s ago: executing program 3 (id=1173): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xe000, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000200)={0x2}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x100, 0x0, 0x2, 0x1, 0x11, 0x8, 0x79, 0x3, 0x80008, 0x9, 0x10, 0xfffffffe, 0x7, 0x1, 0x1, 0x1, 0xfffffffb, 0xdb, 0x3, 0x80000000, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8, 0x1]}) 1m30.250137813s ago: executing program 3 (id=1178): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x180800) close_range(r0, r1, 0x0) 1m29.538476738s ago: executing program 3 (id=1181): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x4202, 0x6a) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="c2d12ce551c4c691851bebe8a792e029ed1e01f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') (rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async, rerun: 32) writev(r2, &(0x7f00000035c0)=[{0x0}, {&(0x7f0000000200)="22fb", 0x2}], 0x2) (async, rerun: 32) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000280)) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x40, 0x2, 0x37, {0x37, 0x23, "8dd89a7b4612b70a5f8413ef51699df6c85a01678b372429adf87bb38965eba5515d975da03a0812c308ccd8d58585d7df5320e915"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, &(0x7f0000000240)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0x0, "d79390ec"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0xb, "eb"}, @local=@item_4={0x3, 0x2, 0x8, "68458772"}, @local=@item_4={0x3, 0x2, 0x4, "2e8fb80f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0xb3, 0x1, {0x22, 0xb52}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x20, 0xb, 0x75, "dda83fea4ab80c66ceff5b78a96f7e66edeead414b354b75388a5ca285b3fcd8e22b5dc5f7e6f0a1199e282a0b6b6e7048514f7dcc5d949abd42010b01d11132aa230e64fdc7312c6eb29ebf5aa6e6d68e1a249091c8b18251794642d4c22768c07e215ae62e872e7fc5accc48a723deed6acf58bc"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x1, 0x27, "af1e99fc4c0762f52390b23517df5eb846c016dc14937443b6d522963a8e957e4619b64df585bf"}, &(0x7f0000000480)={0x20, 0x3, 0x1}}) 1m25.168526142s ago: executing program 3 (id=1205): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x97, 0x7, {[@generic={0x89, 0x2}]}}}], 0x18}}], 0x2, 0x0) 1m24.144424214s ago: executing program 3 (id=1210): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000280)=0x5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000001", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x8, "948b77584eddbe7fdd987d1ea53060c94d8ca40117193143cd26d088297b7db5", 0x49433553}) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x6) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) landlock_restrict_self(r3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) r4 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0xc, 0x3, 0x800}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) r5 = msgget(0x1, 0x240) msgctl$IPC_RMID(r5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, 0x0, &(0x7f00000000c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003"], 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') 1m23.391573373s ago: executing program 33 (id=1210): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000280)=0x5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000001", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x8, "948b77584eddbe7fdd987d1ea53060c94d8ca40117193143cd26d088297b7db5", 0x49433553}) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x6) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) landlock_restrict_self(r3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) r4 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0xc, 0x3, 0x800}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) r5 = msgget(0x1, 0x240) msgctl$IPC_RMID(r5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, 0x0, &(0x7f00000000c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003"], 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') 1m18.417345311s ago: executing program 1 (id=1235): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfe, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x30040404000000}]) 1m17.570497092s ago: executing program 1 (id=1238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x17b) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x16, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc/file0\x00', &(0x7f0000000280)='esdfs\x00', 0x2504be, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x4, 0x6, 0xffffffff, 0x87, 0xffffffff, 0x40}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x2c) write(r4, &(0x7f0000000000)='3', 0x4e) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000300)={@hyper, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000040)={{@my=0x0}, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r7, 0x1e08e000) socket$inet_sctp(0x2, 0x1, 0x84) 1m17.131011877s ago: executing program 1 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffff0) 1m16.034745865s ago: executing program 1 (id=1243): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xc4afc) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="e10fb1", 0x3}, {&(0x7f0000001940)}, {&(0x7f00000006c0)}, {&(0x7f00000026c0)}], 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m15.452899242s ago: executing program 1 (id=1248): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000180)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x8, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x0, 0x9, 0x28, {0x28, 0x4, "82631b612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c55"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}}, 0x18) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x34, r8, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'dummy0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x22000000}, 0x200000d0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000400)="b121", 0x2, 0x840, 0x0, 0x0) 1m15.019034982s ago: executing program 0 (id=1250): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r2, 0x18, 0x1f00, 0x4) 1m14.89457653s ago: executing program 4 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x1, 0x1000000, 0x78, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x22b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x130, 0x0, 0x3, {0x1, 0x0, 0x0, '\x00', {0x8007, 0x2, 0x4, 0xe, r7, r8, 0xc000, '\x00', 0xfffffffffffff000, 0xbfff, 0x1, 0xfffffffffffffff7, {0x7, 0x3}, {0x1001, 0xa}, {0x1ffffff, 0x20000d}, {0x7f, 0xa00}, 0x3, 0x574, 0x9db, 0x3bba}}}}) sendmsg$nl_generic(r0, &(0x7f0000001980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000000780)=ANY=[@ANYBLOB="b4110000340001002abd7000fbdbdf250800000018003f800400c78005005b000400660008000000", @ANYRES32=r7, @ANYBLOB="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"], 0x11b4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000000)='3', 0x4e) r10 = add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000480)="8a5551e08916d32f78226ebe34324ef94c90a098f12c52559d2a34bad7997eaafba2ebb430e540913f3b32e7f947def709d27cdd74fe", 0x36, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r10) fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) write(r0, &(0x7f00000001c0)='kyber', 0x5) 1m14.717498796s ago: executing program 0 (id=1252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000002c0)=[@rdmsr={0x66, 0x18, {0xbf3}}, @nested_load_code={0x12e, 0x5a, {0x2, "4a0fc7a83e000000c422c1a7190f01cb0fc0393e660fc5e300c4c21d0c0742df1cc2b930090000b846000000ba000000000f3065642e0f01bb010000003e450ffe09"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2400, 0x9, 0x4, 0x101}}, @code={0xa, 0x66, {"660f214b65f30f350febbde8870000450f01d7470f01c466bad10466edc744240047aa0000c74424025b7e0000c7442406000000000f011c242edacb66baf80cb8907dad81ef66bafc0cb8bf6d0000ef470fae7895"}}, @wrmsr={0x65, 0x20, {0x36e, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x2, 0x8}}, @cpuid={0x64, 0x18, {0x1, 0x10001}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0xbc7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c01, 0x2, 0x7, 0xfffffffffffffff5}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x68, {"66baf80cb878f4c18eef66bafc0cb0f6ee66baa100b89a000000ef660fc7b00b21a4b6c74424009c000000c7442402e5a30000ff2c24c4c1f9e63bf20fd6c2f3430fa6d066ba4200ed3e3e490fc769013e2e26f30f1ed6"}}], 0x280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x9) fcntl$setstatus(r3, 0x4, 0x1c00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820574004000010203010902"], 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r5 = syz_open_pts(r4, 0x200) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x3) 1m14.332003369s ago: executing program 4 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffedb) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m13.948320182s ago: executing program 4 (id=1254): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, 0x0, 0x20004040) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002840)=[{{&(0x7f0000001240)={0xa, 0x4e24, 0x4, @remote, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001280)='.', 0x1}], 0x1}}], 0x1, 0x20000810) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x7}, 0x8) sendmsg$NFT_BATCH(r1, 0x0, 0x24044010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000005540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0xffffddcd}], 0x18, 0x80}], 0x1, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000000000000101f40405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"], 0x48, 0xfffffffffffffffb) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m13.904153249s ago: executing program 0 (id=1255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000067f000001001500"/68, 0x44) 1m13.631600474s ago: executing program 0 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r1, 0x5605) 1m13.492342033s ago: executing program 4 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100003"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 1m13.215644758s ago: executing program 0 (id=1258): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001200700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x5c}}, 0x20084884) 1m13.150818969s ago: executing program 4 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async, rerun: 64) r1 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) (async, rerun: 32) listen(r1, 0x2b9b) (rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_cmd={0x2b, 0x3, 0x9, 0x5, 0x10, 0x7, 0x8, 0x5, 0x3, 0x2, 0x10000000, 0x2, 0x7, 0x0, 0x9, 0xcd9, [0x4, 0xcdaa]}}) (async) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r2, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000927000/0x7000)=nil, 0x2) (rerun: 64) fsopen(&(0x7f0000000000)='btrfs\x00', 0x1) (async) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x83c, &(0x7f0000000300)) 1m12.486091405s ago: executing program 0 (id=1260): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(0xca, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xa}, 0x2) connect$bt_l2cap(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4050000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000fffffffc000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m12.423761642s ago: executing program 4 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) r2 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write(r0, &(0x7f00000001c0)='ky', 0x2) 1m12.369096124s ago: executing program 1 (id=1262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000002c0)=[@rdmsr={0x66, 0x18, {0xbf3}}, @nested_load_code={0x12e, 0x5a, {0x2, "4a0fc7a83e000000c422c1a7190f01cb0fc0393e660fc5e300c4c21d0c0742df1cc2b930090000b846000000ba000000000f3065642e0f01bb010000003e450ffe09"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2400, 0x9, 0x4, 0x101}}, @code={0xa, 0x66, {"660f214b65f30f350febbde8870000450f01d7470f01c466bad10466edc744240047aa0000c74424025b7e0000c7442406000000000f011c242edacb66baf80cb8907dad81ef66bafc0cb8bf6d0000ef470fae7895"}}, @wrmsr={0x65, 0x20, {0x36e, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x2, 0x8}}, @cpuid={0x64, 0x18, {0x1, 0x10001}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0xbc7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c01, 0x2, 0x7, 0xfffffffffffffff5}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x68, {"66baf80cb878f4c18eef66bafc0cb0f6ee66baa100b89a000000ef660fc7b00b21a4b6c74424009c000000c7442402e5a30000ff2c24c4c1f9e63bf20fd6c2f3430fa6d066ba4200ed3e3e490fc769013e2e26f30f1ed6"}}], 0x280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x9) fcntl$setstatus(r3, 0x4, 0x1c00) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820574004000010203010902"], 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r5 = syz_open_pts(r4, 0x200) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x3) 0s ago: executing program 34 (id=1260): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(0xca, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xa}, 0x2) connect$bt_l2cap(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4050000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000fffffffc000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) kernel console output (not intermixed with test programs): sing attributes in process `syz.0.684'. [ 117.873365][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'. [ 117.886039][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.968782][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.045747][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.045781][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.377755][ T7369] sg_write: data in/out 204764/136 bytes for SCSI command 0x0-- guessing data in; [ 118.377755][ T7369] program syz.3.694 not setting count and/or reply_len properly [ 118.421358][ T7369] misc userio: The device must be registered before sending interrupts [ 118.508547][ T7373] overlay: Bad value for 'uuid' [ 118.642616][ T31] audit: type=1400 audit(1789518833.551:14): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=7376 comm="syz.1.699" name="//o" offset=55 [ 118.695666][ T5686] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.751595][ T7379] FAULT_INJECTION: forcing a failure. [ 118.751595][ T7379] name failslab, interval 1, probability 0, space 0, times 0 [ 118.751621][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.1.700 Not tainted syzkaller #0 PREEMPT(full) [ 118.751651][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 118.751661][ T7379] Call Trace: [ 118.751668][ T7379] [ 118.751675][ T7379] dump_stack_lvl+0xe8/0x150 [ 118.751703][ T7379] should_fail_ex+0x3eb/0x540 [ 118.751727][ T7379] should_failslab+0xa8/0x100 [ 118.751746][ T7379] ? do_getname+0x2e/0x250 [ 118.751764][ T7379] kmem_cache_alloc_noprof+0x9c/0x600 [ 118.751788][ T7379] ? do_getname+0x2e/0x250 [ 118.751809][ T7379] do_getname+0x2e/0x250 [ 118.751824][ T7379] ? getname_flags+0x11/0x20 [ 118.751842][ T7379] __se_sys_move_mount+0x334/0x510 [ 118.751864][ T7379] ? __pfx___se_sys_move_mount+0x10/0x10 [ 118.751883][ T7379] ? __pfx_ksys_write+0x10/0x10 [ 118.751908][ T7379] ? __x64_sys_move_mount+0x20/0xc0 [ 118.751929][ T7379] do_syscall_64+0x166/0x520 [ 118.751946][ T7379] ? trace_irq_disable+0x3b/0x140 [ 118.751968][ T7379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.751984][ T7379] ? clear_bhb_loop+0x70/0xc0 [ 118.752003][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.752018][ T7379] RIP: 0033:0x7f06cfb9e159 [ 118.752032][ T7379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.752045][ T7379] RSP: 002b:00007f06d0a66028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 118.752062][ T7379] RAX: ffffffffffffffda RBX: 00007f06cfe25fa0 RCX: 00007f06cfb9e159 [ 118.752074][ T7379] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000003 [ 118.752084][ T7379] RBP: 00007f06d0a66090 R08: 0000000000000262 R09: 0000000000000000 [ 118.752094][ T7379] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 118.752104][ T7379] R13: 00007f06cfe26038 R14: 00007f06cfe25fa0 R15: 00007ffda218ed18 [ 118.752127][ T7379] [ 118.857362][ T5686] usb 4-1: Using ep0 maxpacket: 8 [ 118.910257][ T5686] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.948761][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.002119][ T5686] pvrusb2: Hardware description: Terratec Grabster AV400 [ 119.002140][ T5686] pvrusb2: ********** [ 119.002146][ T5686] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 119.002158][ T5686] pvrusb2: Important functionality might not be entirely working. [ 119.002167][ T5686] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 119.002177][ T5686] pvrusb2: ********** [ 119.084400][ T4138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.110785][ T7384] netlink: 5 bytes leftover after parsing attributes in process `syz.0.702'. [ 119.132839][ T7384] 30ªî{X¹¦: renamed from gretap0 (while UP) [ 119.141107][ T7384] 30ªî{X¹¦: entered allmulticast mode [ 119.141489][ T7384] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 119.234538][ T2355] pvrusb2: Invalid write control endpoint [ 119.383310][ T4138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.413837][ T7369] pvrusb2: Killing an I2C write to 5 that is too large (desired=8192 limit=61) [ 119.424179][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 119.473543][ T2355] pvrusb2: Invalid write control endpoint [ 119.473559][ T2355] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.473568][ T2355] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.473576][ T2355] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.473586][ T2355] pvrusb2: Device being rendered inoperable [ 119.473805][ T2355] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.473849][ T2355] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 119.492849][ T2355] pvrusb2: Attached sub-driver cx25840 [ 119.492874][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 119.492883][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 119.630875][ T4138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.642329][ T1057] usb 4-1: USB disconnect, device number 5 [ 119.668784][ T7391] FAULT_INJECTION: forcing a failure. [ 119.668784][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 119.668812][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.1.706 Not tainted syzkaller #0 PREEMPT(full) [ 119.668834][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 119.668846][ T7391] Call Trace: [ 119.668853][ T7391] [ 119.668861][ T7391] dump_stack_lvl+0xe8/0x150 [ 119.668892][ T7391] should_fail_ex+0x3eb/0x540 [ 119.668918][ T7391] should_failslab+0xa8/0x100 [ 119.668941][ T7391] __kvmalloc_node_noprof+0x171/0x820 [ 119.668981][ T7391] ? alloc_netdev_mqs+0xae2/0x12a0 [ 119.669005][ T7391] ? alloc_netdev_mqs+0xae2/0x12a0 [ 119.669035][ T7391] alloc_netdev_mqs+0xae2/0x12a0 [ 119.669067][ T7391] rtnl_create_link+0x321/0xd70 [ 119.669098][ T7391] rtnl_newlink_create+0x258/0x7b0 [ 119.669127][ T7391] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 119.669153][ T7391] ? __pfx___mutex_lock+0x10/0x10 [ 119.669181][ T7391] ? full_name_hash+0x92/0xe0 [ 119.669209][ T7391] rtnl_newlink+0x166d/0x1c30 [ 119.669244][ T7391] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.669261][ T7391] ? do_syscall_64+0x166/0x520 [ 119.669315][ T7391] ? kasan_quarantine_put+0xbb/0x1f0 [ 119.669343][ T7391] ? lockdep_hardirqs_on+0x7b/0x110 [ 119.669375][ T7391] ? nlmon_xmit+0xb0/0x100 [ 119.669401][ T7391] ? kmem_cache_free+0x182/0x650 [ 119.669440][ T7391] ? __lock_acquire+0x747/0x2de0 [ 119.669477][ T7391] ? __local_bh_enable_ip+0xd6/0x140 [ 119.669499][ T7391] ? lockdep_hardirqs_on+0x7b/0x110 [ 119.669526][ T7391] ? __dev_queue_xmit+0x29b/0x3820 [ 119.669548][ T7391] ? __local_bh_enable_ip+0xd6/0x140 [ 119.669568][ T7391] ? __dev_queue_xmit+0x29b/0x3820 [ 119.669599][ T7391] ? lock_acquire+0x115/0x350 [ 119.669640][ T7391] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.669658][ T7391] rtnetlink_rcv_msg+0x802/0xc00 [ 119.669681][ T7391] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 119.669700][ T7391] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.669717][ T7391] ? ref_tracker_free+0x689/0x830 [ 119.669744][ T7391] ? __pfx_ref_tracker_free+0x10/0x10 [ 119.669767][ T7391] ? __asan_memcpy+0x40/0x70 [ 119.669792][ T7391] ? __skb_clone+0x5c/0x6c0 [ 119.669820][ T7391] netlink_rcv_skb+0x226/0x4a0 [ 119.669845][ T7391] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.669867][ T7391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.669904][ T7391] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.669927][ T7391] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.669957][ T7391] netlink_unicast+0x7bd/0x940 [ 119.669996][ T7391] netlink_sendmsg+0x7c3/0xae0 [ 119.670030][ T7391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.670061][ T7391] ? apparmor_socket_sendmsg+0x98/0x360 [ 119.670082][ T7391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.670104][ T7391] sock_sendmsg_nosec+0x13a/0x180 [ 119.670133][ T7391] ____sys_sendmsg+0x54e/0x850 [ 119.670160][ T7391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.670190][ T7391] ? import_iovec+0x73/0xa0 [ 119.670218][ T7391] ___sys_sendmsg+0x2a5/0x360 [ 119.670235][ T7391] ? __lock_acquire+0x747/0x2de0 [ 119.670264][ T7391] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.670318][ T7391] ? __fget_files+0x2a/0x420 [ 119.670340][ T7391] ? __fget_files+0x3a2/0x420 [ 119.670370][ T7391] __x64_sys_sendmsg+0x1b1/0x290 [ 119.670393][ T7391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.670430][ T7391] do_syscall_64+0x166/0x520 [ 119.670446][ T7391] ? trace_irq_disable+0x3b/0x140 [ 119.670471][ T7391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.670489][ T7391] ? clear_bhb_loop+0x70/0xc0 [ 119.670512][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.670529][ T7391] RIP: 0033:0x7f06cfb9e159 [ 119.670546][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.670562][ T7391] RSP: 002b:00007f06d0a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.670582][ T7391] RAX: ffffffffffffffda RBX: 00007f06cfe25fa0 RCX: 00007f06cfb9e159 [ 119.670595][ T7391] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 119.670607][ T7391] RBP: 00007f06d0a66090 R08: 0000000000000000 R09: 0000000000000000 [ 119.670619][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.670630][ T7391] R13: 00007f06cfe26038 R14: 00007f06cfe25fa0 R15: 00007ffda218ed18 [ 119.670658][ T7391] [ 119.925134][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.933493][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.935462][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.940576][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.943107][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.969371][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.980971][ T4138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.065667][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.135658][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.441947][ T4138] bridge_slave_1: left allmulticast mode [ 120.441999][ T4138] bridge_slave_1: left promiscuous mode [ 120.443377][ T4138] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.491068][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 120.532972][ T4138] bridge_slave_0: left allmulticast mode [ 120.533013][ T4138] bridge_slave_0: left promiscuous mode [ 120.533224][ T4138] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.583764][ T7422] device-mapper: ioctl: Invalid ioctl structure: name c, dev f802 [ 120.861372][ T4138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.884654][ T4138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.895983][ T4138] bond0 (unregistering): Released all slaves [ 121.462437][ T7451] gadgetfs: bound to dummy_udc driver [ 121.899091][ T4138] hsr_slave_0: left promiscuous mode [ 121.911340][ T4138] hsr_slave_1: left promiscuous mode [ 121.912348][ T4138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.912383][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.954384][ T4138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.954406][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.977424][ T5612] Bluetooth: hci2: command tx timeout [ 122.001911][ T4138] veth1_macvtap: left promiscuous mode [ 122.001974][ T4138] veth0_macvtap: left promiscuous mode [ 122.002122][ T4138] veth1_vlan: left promiscuous mode [ 122.002212][ T4138] veth0_vlan: left promiscuous mode [ 122.206181][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.474478][ T7429] CIFS: Attempting to mount //127.0.0.1/share [ 122.523771][ T4138] team0 (unregistering): Port device team_slave_1 removed [ 122.550859][ T4138] team0 (unregistering): Port device team_slave_0 removed [ 122.772227][ T7429] CIFS: VFS: Error connecting to socket. Aborting operation. [ 122.772376][ T7429] CIFS: VFS: cifs_mount failed w/return code = -4 [ 122.834226][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 123.496973][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.769711][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.772689][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.774395][ T7392] bridge_slave_0: entered allmulticast mode [ 123.778350][ T7392] bridge_slave_0: entered promiscuous mode [ 123.785614][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.785710][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.785858][ T7392] bridge_slave_1: entered allmulticast mode [ 123.789095][ T7392] bridge_slave_1: entered promiscuous mode [ 123.869458][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 123.897262][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.912352][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.009723][ T7392] team0: Port device team_slave_0 added [ 124.018698][ T7392] team0: Port device team_slave_1 added [ 124.047466][ T5612] Bluetooth: hci2: command tx timeout [ 124.063561][ T7533] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32000000 [ 124.116153][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.116170][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.116195][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.135994][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.136010][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.136033][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.282065][ T7392] hsr_slave_0: entered promiscuous mode [ 124.283079][ T7392] hsr_slave_1: entered promiscuous mode [ 124.283824][ T7392] debugfs: 'hsr0' already exists in 'hsr' [ 124.283842][ T7392] Cannot create hsr debugfs directory [ 124.285281][ T7541] FAULT_INJECTION: forcing a failure. [ 124.285281][ T7541] name failslab, interval 1, probability 0, space 0, times 0 [ 124.285304][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.1.738 Not tainted syzkaller #0 PREEMPT(full) [ 124.285321][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 124.285330][ T7541] Call Trace: [ 124.285337][ T7541] [ 124.285344][ T7541] dump_stack_lvl+0xe8/0x150 [ 124.285373][ T7541] should_fail_ex+0x3eb/0x540 [ 124.285398][ T7541] ? __alloc_skb+0x1db/0x7a0 [ 124.285415][ T7541] should_failslab+0xa8/0x100 [ 124.285437][ T7541] ? __alloc_skb+0x1db/0x7a0 [ 124.285451][ T7541] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 124.285477][ T7541] ? __alloc_skb+0x18d/0x7a0 [ 124.285495][ T7541] ? __alloc_skb+0x1db/0x7a0 [ 124.285518][ T7541] __alloc_skb+0x1db/0x7a0 [ 124.285551][ T7541] fdb_notify+0xa6/0x160 [ 124.285582][ T7541] fdb_delete+0xc37/0xe40 [ 124.285612][ T7541] ? fdb_delete+0x1cb/0xe40 [ 124.285643][ T7541] br_fdb_delete_by_port+0x247/0x310 [ 124.285678][ T7541] br_dev_delete+0xb1/0x130 [ 124.285701][ T7541] br_del_bridge+0xb1/0xf0 [ 124.285723][ T7541] br_ioctl_stub+0x746/0xd60 [ 124.285750][ T7541] ? __mutex_lock+0x10de/0x15a0 [ 124.285768][ T7541] ? __pfx_br_ioctl_stub+0x10/0x10 [ 124.285792][ T7541] ? __mutex_lock+0x5cd/0x15a0 [ 124.285814][ T7541] ? sock_ioctl+0x4b8/0x7e0 [ 124.285843][ T7541] ? hook_file_ioctl+0x1f2/0x600 [ 124.285877][ T7541] ? __pfx_br_ioctl_stub+0x10/0x10 [ 124.285898][ T7541] sock_ioctl+0x4e1/0x7e0 [ 124.285923][ T7541] ? __pfx_sock_ioctl+0x10/0x10 [ 124.285947][ T7541] ? __fget_files+0x2a/0x420 [ 124.285970][ T7541] ? __fget_files+0x3a2/0x420 [ 124.285991][ T7541] ? __fget_files+0x2a/0x420 [ 124.286016][ T7541] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.286039][ T7541] ? __pfx_sock_ioctl+0x10/0x10 [ 124.286062][ T7541] __se_sys_ioctl+0xfc/0x170 [ 124.286092][ T7541] do_syscall_64+0x166/0x520 [ 124.286108][ T7541] ? trace_irq_disable+0x3b/0x140 [ 124.286133][ T7541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.286152][ T7541] ? clear_bhb_loop+0x70/0xc0 [ 124.286175][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.286193][ T7541] RIP: 0033:0x7f06cfb9e159 [ 124.286210][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.286226][ T7541] RSP: 002b:00007f06d0a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.286246][ T7541] RAX: ffffffffffffffda RBX: 00007f06cfe26090 RCX: 00007f06cfb9e159 [ 124.286260][ T7541] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000004 [ 124.286272][ T7541] RBP: 00007f06d0a45090 R08: 0000000000000000 R09: 0000000000000000 [ 124.286283][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.286294][ T7541] R13: 00007f06cfe26128 R14: 00007f06cfe26090 R15: 00007ffda218ed18 [ 124.286324][ T7541] [ 124.495922][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.666024][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.666074][ T30] usb 4-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 124.685198][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.685223][ T30] usb 4-1: Product: syz [ 124.685237][ T30] usb 4-1: Manufacturer: syz [ 124.685250][ T30] usb 4-1: SerialNumber: syz [ 124.920489][ T7392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.944643][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.962582][ T30] option 4-1:4.0: GSM modem (1-port) converter detected [ 124.977122][ T7392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.991876][ T30] usb 4-1: USB disconnect, device number 6 [ 125.005958][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.007178][ T7392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.015306][ T7562] FAULT_INJECTION: forcing a failure. [ 125.015306][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 125.015333][ T7562] CPU: 1 UID: 0 PID: 7562 Comm: syz.1.743 Not tainted syzkaller #0 PREEMPT(full) [ 125.015355][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 125.015366][ T7562] Call Trace: [ 125.015374][ T7562] [ 125.015382][ T7562] dump_stack_lvl+0xe8/0x150 [ 125.015413][ T7562] should_fail_ex+0x3eb/0x540 [ 125.015440][ T7562] should_failslab+0xa8/0x100 [ 125.015465][ T7562] __kmalloc_cache_node_noprof+0xa5/0x620 [ 125.015502][ T7562] ? __raw_spin_lock_init+0x45/0x100 [ 125.015523][ T7562] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 125.015546][ T7562] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 125.015573][ T7562] ? __init_waitqueue_head+0xa8/0x150 [ 125.015597][ T7562] sbitmap_queue_init_node+0x1dc/0x4d0 [ 125.015627][ T7562] blk_mq_init_tags+0x1a3/0x2d0 [ 125.015656][ T7562] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 125.015695][ T7562] blk_mq_alloc_sched_tags+0x14d/0x380 [ 125.015726][ T7562] blk_mq_alloc_sched_res+0x92/0x360 [ 125.015754][ T7562] elevator_change+0x122/0x480 [ 125.015774][ T7562] ? do_raw_spin_unlock+0xf5/0x200 [ 125.015802][ T7562] elv_iosched_store+0x504/0x630 [ 125.015828][ T7562] ? __pfx_elv_iosched_store+0x10/0x10 [ 125.015869][ T7562] queue_attr_store+0x207/0x2b0 [ 125.015898][ T7562] ? __pfx_queue_attr_store+0x10/0x10 [ 125.015925][ T7562] ? lock_acquire+0x115/0x350 [ 125.015952][ T7562] ? sysfs_file_kobj+0x1a/0x230 [ 125.015983][ T7562] ? sysfs_file_kobj+0x1a/0x230 [ 125.016006][ T7562] ? sysfs_file_kobj+0x1a/0x230 [ 125.016027][ T7562] ? sysfs_file_kobj+0x1a/0x230 [ 125.016051][ T7562] ? sysfs_file_kobj+0x1e4/0x230 [ 125.016073][ T7562] ? sysfs_kf_write+0x166/0x260 [ 125.016101][ T7562] ? __pfx_sysfs_kf_write+0x10/0x10 [ 125.016123][ T7562] kernfs_fop_write_iter+0x3a4/0x540 [ 125.016147][ T7562] vfs_write+0x612/0xba0 [ 125.016177][ T7562] ? __pfx_vfs_write+0x10/0x10 [ 125.016211][ T7562] ? __fget_files+0x2a/0x420 [ 125.016245][ T7562] ksys_write+0x150/0x270 [ 125.016273][ T7562] ? __pfx_ksys_write+0x10/0x10 [ 125.016308][ T7562] do_syscall_64+0x166/0x520 [ 125.016326][ T7562] ? trace_irq_disable+0x3b/0x140 [ 125.016351][ T7562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.016371][ T7562] ? clear_bhb_loop+0x70/0xc0 [ 125.016394][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.016413][ T7562] RIP: 0033:0x7f06cfb9e159 [ 125.016430][ T7562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.016446][ T7562] RSP: 002b:00007f06d0a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.016466][ T7562] RAX: ffffffffffffffda RBX: 00007f06cfe25fa0 RCX: 00007f06cfb9e159 [ 125.016486][ T7562] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 125.016499][ T7562] RBP: 00007f06d0a66090 R08: 0000000000000000 R09: 0000000000000000 [ 125.016510][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.016521][ T7562] R13: 00007f06cfe26038 R14: 00007f06cfe25fa0 R15: 00007ffda218ed18 [ 125.016552][ T7562] [ 125.020712][ T30] option 4-1:4.0: device disconnected [ 125.031870][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.048785][ T7392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.105187][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.458742][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.499138][ T7392] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.512104][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.512200][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.532019][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.532112][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.708929][ T7583] 0x000000000000-0x000000010000 : "" [ 125.822551][ T7583] ftl_cs: FTL header not found. [ 125.992464][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 126.036322][ T5686] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.126010][ T5612] Bluetooth: hci2: command tx timeout [ 126.186857][ T5686] usb 4-1: Using ep0 maxpacket: 8 [ 126.187644][ T5686] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 126.191803][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.191827][ T5686] usb 4-1: Product: syz [ 126.191841][ T5686] usb 4-1: Manufacturer: syz [ 126.191855][ T5686] usb 4-1: SerialNumber: syz [ 126.238535][ T5686] usb 4-1: config 0 descriptor?? [ 126.277498][ T7608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.754'. [ 126.277561][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 126.444022][ T5686] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 126.579652][ T7627] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 126.579687][ T7627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.738092][ T7636] netlink: 'syz.0.758': attribute type 12 has an invalid length. [ 126.778193][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.152967][ T5686] usb write operation failed. (-71) [ 127.197321][ T5686] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.201798][ T5686] dvbdev: DVB: registering new adapter (Terratec H7) [ 127.201858][ T5686] usb 4-1: media controller created [ 127.203403][ T5686] usb read operation failed. (-71) [ 127.237011][ T5686] usb write operation failed. (-71) [ 127.287508][ T5686] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 127.289900][ T5686] usb 4-1: USB disconnect, device number 7 [ 127.302629][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 127.663805][ T7678] netlink: 'syz.0.764': attribute type 9 has an invalid length. [ 127.699999][ T7392] veth0_vlan: entered promiscuous mode [ 127.749368][ T7392] veth1_vlan: entered promiscuous mode [ 127.829086][ T30] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 127.838968][ T7685] trusted_key: encrypted_key: insufficient parameters specified [ 127.861826][ T7392] veth0_macvtap: entered promiscuous mode [ 127.873689][ T7392] veth1_macvtap: entered promiscuous mode [ 127.922937][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.940559][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.979752][ T30] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 127.980995][ T30] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 127.981021][ T30] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.981042][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.981060][ T30] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.981080][ T30] usb 2-1: config 1 has no interface number 0 [ 127.981120][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.021197][ T30] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 128.095833][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.095902][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.095935][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.095966][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.122862][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.122883][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.175281][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.175301][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.193799][ T30] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 128.194191][ T30] snd_usb_pod 2-1:1.1: invalid control EP [ 128.194206][ T30] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 128.197738][ T30] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 128.200071][ T30] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 128.216240][ T5612] Bluetooth: hci2: command tx timeout [ 128.374934][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 128.457743][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.458168][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.595657][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.747587][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 128.749637][ T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 128.755326][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.755375][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.793451][ T10] usb 4-1: config 0 descriptor?? [ 129.231858][ T10] chicony 0003:04F2:0418.0001: unknown main item tag 0x0 [ 129.231895][ T10] chicony 0003:04F2:0418.0001: unknown main item tag 0x0 [ 129.231921][ T10] chicony 0003:04F2:0418.0001: unknown main item tag 0x0 [ 129.231946][ T10] chicony 0003:04F2:0418.0001: unknown main item tag 0x0 [ 129.231972][ T10] chicony 0003:04F2:0418.0001: unknown main item tag 0x0 [ 129.232006][ T10] chicony 0003:04F2:0418.0001: unknown main item tag 0x0 [ 129.232032][ T10] chicony 0003:04F2:0418.0001: unknown main item tag 0x0 [ 129.232811][ T10] chicony 0003:04F2:0418.0001: unknown main item tag 0x0 [ 129.232893][ T10] chicony 0003:04F2:0418.0001: unknown global tag 0xd [ 129.232908][ T10] chicony 0003:04F2:0418.0001: item 0 0 1 13 parsing failed [ 129.233952][ T10] chicony 0003:04F2:0418.0001: Chicony hid parse failed: -22 [ 129.234030][ T10] chicony 0003:04F2:0418.0001: probe with driver chicony failed with error -22 [ 129.443924][ T7696] netlink: 188 bytes leftover after parsing attributes in process `syz.3.770'. [ 129.489323][ T1057] usb 4-1: USB disconnect, device number 8 [ 129.816205][ T7719] FAULT_INJECTION: forcing a failure. [ 129.816205][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 129.816235][ T7719] CPU: 0 UID: 0 PID: 7719 Comm: syz.4.775 Not tainted syzkaller #0 PREEMPT(full) [ 129.816258][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 129.816270][ T7719] Call Trace: [ 129.816278][ T7719] [ 129.816287][ T7719] dump_stack_lvl+0xe8/0x150 [ 129.816319][ T7719] should_fail_ex+0x3eb/0x540 [ 129.816347][ T7719] should_failslab+0xa8/0x100 [ 129.816371][ T7719] __kmalloc_cache_noprof+0x9e/0x600 [ 129.816402][ T7719] ? __pfx_dev_set_name+0x10/0x10 [ 129.816432][ T7719] ? device_add+0xb6/0xb80 [ 129.816451][ T7719] ? device_add+0xb6/0xb80 [ 129.816479][ T7719] device_add+0xb6/0xb80 [ 129.816503][ T7719] ? wakeup_source_sysfs_add+0x1b4/0x2c0 [ 129.816534][ T7719] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 129.816565][ T7719] wakeup_source_register+0x17f/0x380 [ 129.816593][ T7719] ep_insert+0xfaf/0x1af0 [ 129.816637][ T7719] ? __pfx_ep_insert+0x10/0x10 [ 129.816678][ T7719] ? bpf_lsm_capable+0x9/0x20 [ 129.816704][ T7719] ? security_capable+0x7e/0x2c0 [ 129.816732][ T7719] do_epoll_ctl_file+0x8c2/0xee0 [ 129.816767][ T7719] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 129.816797][ T7719] ? __fget_files+0x3a2/0x420 [ 129.816820][ T7719] ? __fget_files+0x2a/0x420 [ 129.816852][ T7719] __se_sys_epoll_ctl+0x162/0x230 [ 129.816885][ T7719] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 129.816927][ T7719] do_syscall_64+0x166/0x520 [ 129.816956][ T7719] ? trace_irq_disable+0x3b/0x140 [ 129.816984][ T7719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.817004][ T7719] ? clear_bhb_loop+0x70/0xc0 [ 129.817029][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.817050][ T7719] RIP: 0033:0x7f61c599e159 [ 129.817070][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.817088][ T7719] RSP: 002b:00007f61c6841028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 129.817110][ T7719] RAX: ffffffffffffffda RBX: 00007f61c5c25fa0 RCX: 00007f61c599e159 [ 129.817126][ T7719] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 129.817138][ T7719] RBP: 00007f61c5a3503b R08: 0000000000000000 R09: 0000000000000000 [ 129.817152][ T7719] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.817166][ T7719] R13: 00007f61c5c26038 R14: 00007f61c5c25fa0 R15: 00007ffc9378f8a8 [ 129.817198][ T7719] [ 130.522246][ T7733] netlink: 'syz.4.780': attribute type 4 has an invalid length. [ 130.522268][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 130.814504][ T7674] syz.1.762 (7674): drop_caches: 2 [ 130.814594][ T7703] syz.1.762 (7703): drop_caches: 2 [ 130.857643][ T1057] usb 2-1: USB disconnect, device number 3 [ 131.014774][ T7751] device-mapper: ioctl: Invalid ioctl structure: name mypo, dev 32 [ 131.149638][ T7759] FAULT_INJECTION: forcing a failure. [ 131.149638][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 131.149669][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.4.790 Not tainted syzkaller #0 PREEMPT(full) [ 131.149691][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 131.149703][ T7759] Call Trace: [ 131.149711][ T7759] [ 131.149720][ T7759] dump_stack_lvl+0xe8/0x150 [ 131.149750][ T7759] should_fail_ex+0x3eb/0x540 [ 131.149780][ T7759] should_failslab+0xa8/0x100 [ 131.149804][ T7759] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 131.149830][ T7759] ? kasan_save_track+0x4f/0x80 [ 131.149858][ T7759] ? __d_alloc+0x37/0x6f0 [ 131.149882][ T7759] ? __d_alloc+0x37/0x6f0 [ 131.149914][ T7759] __d_alloc+0x37/0x6f0 [ 131.149946][ T7759] d_alloc_parallel+0xde/0x16b0 [ 131.149994][ T7759] ? __pfx_d_alloc_parallel+0x10/0x10 [ 131.150021][ T7759] ? lock_acquire+0x115/0x350 [ 131.150062][ T7759] __lookup_slow+0x82/0x2f0 [ 131.150091][ T7759] lookup_slow+0x53/0x70 [ 131.150117][ T7759] link_path_walk+0xd2a/0x1910 [ 131.150161][ T7759] path_openat+0x1c4/0x1e40 [ 131.150209][ T7759] do_file_open+0x23e/0x4a0 [ 131.150242][ T7759] ? __pfx_do_file_open+0x10/0x10 [ 131.150280][ T7759] ? __pfx_kfree_link+0x10/0x10 [ 131.150324][ T7759] ? _raw_spin_unlock+0x28/0x50 [ 131.150350][ T7759] ? alloc_fd+0x651/0x6c0 [ 131.150384][ T7759] do_sys_openat2+0x115/0x200 [ 131.150410][ T7759] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.150433][ T7759] ? ksys_write+0x242/0x270 [ 131.150462][ T7759] ? __pfx_ksys_write+0x10/0x10 [ 131.150493][ T7759] __x64_sys_openat+0x138/0x170 [ 131.150521][ T7759] do_syscall_64+0x166/0x520 [ 131.150539][ T7759] ? trace_irq_disable+0x3b/0x140 [ 131.150567][ T7759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.150587][ T7759] ? clear_bhb_loop+0x70/0xc0 [ 131.150612][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.150632][ T7759] RIP: 0033:0x7f61c595e98e [ 131.150650][ T7759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.150667][ T7759] RSP: 002b:00007f61c6840f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.150689][ T7759] RAX: ffffffffffffffda RBX: 00007f61c68416c0 RCX: 00007f61c595e98e [ 131.150704][ T7759] RDX: 0000000000000000 RSI: 00007f61c5a34776 RDI: ffffffffffffff9c [ 131.150718][ T7759] RBP: 00007f61c6841090 R08: 0000000000000000 R09: 0000000000000000 [ 131.150731][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.150743][ T7759] R13: 00007f61c5c26038 R14: 00007f61c5c25fa0 R15: 00007ffc9378f8a8 [ 131.150774][ T7759] [ 131.501341][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 131.501363][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 131.617553][ T7779] input: syz1 as /devices/virtual/input/input7 [ 131.736315][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.886074][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 131.888051][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 131.888598][ T10] usb 2-1: config 0 has no interfaces? [ 131.888628][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.891597][ T10] usb 2-1: config 0 descriptor?? [ 132.097128][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.099956][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.102165][ T7774] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 132.128792][ T1057] usb 2-1: USB disconnect, device number 4 [ 132.195813][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.346860][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 132.347383][ T10] usb 5-1: config 0 has no interfaces? [ 132.349945][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.349969][ T10] usb 5-1: Product: syz [ 132.349983][ T10] usb 5-1: Manufacturer: syz [ 132.349997][ T10] usb 5-1: SerialNumber: syz [ 132.354628][ T10] usb 5-1: config 0 descriptor?? [ 132.405468][ T7804] netlink: Conntrack attr has 12 unknown bytes [ 132.405499][ T7804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.478022][ T7806] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 132.774292][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774347][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.398285][ T7833] fuse: fd is not a fuse device [ 133.408009][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.461660][ T7835] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 133.461683][ T7835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.816'. [ 133.555933][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 133.560517][ T30] usb 2-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 133.562739][ T30] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 133.564883][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.564907][ T30] usb 2-1: Product: syz [ 133.564921][ T30] usb 2-1: Manufacturer: syz [ 133.564936][ T30] usb 2-1: SerialNumber: syz [ 133.636563][ T7843] fuse: fd is not a fuse device [ 133.782420][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.784768][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.862637][ T30] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 133.863045][ T30] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.929456][ T30] usb 2-1: USB disconnect, device number 5 [ 134.007929][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.673055][ T7867] overlayfs: failed to clone upperpath [ 134.677103][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 134.755859][ T7876] netlink: 'syz.0.829': attribute type 46 has an invalid length. [ 134.827764][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 134.828470][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 134.833429][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 134.833475][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.870952][ T10] usb 4-1: config 0 descriptor?? [ 134.872372][ T30] usb 5-1: USB disconnect, device number 2 [ 135.282315][ T7860] netlink: 164 bytes leftover after parsing attributes in process `syz.3.824'. [ 135.301133][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301169][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301195][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301221][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301246][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301271][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301296][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301321][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301346][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.301369][ T10] nzxt-kraken2 0003:1E71:170E.0002: unknown main item tag 0x0 [ 135.305504][ T10] nzxt-kraken2 0003:1E71:170E.0002: collection stack underflow [ 135.310948][ T10] nzxt-kraken2 0003:1E71:170E.0002: item 0 0 0 12 parsing failed [ 135.311580][ T10] nzxt-kraken2 0003:1E71:170E.0002: hid parse failed with -22 [ 135.311721][ T10] nzxt-kraken2 0003:1E71:170E.0002: probe with driver nzxt-kraken2 failed with error -22 [ 135.360373][ T7890] 9p: Unknown uid 00000000004294967295 [ 135.469482][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 135.471058][ T7894] jffs2: notice: (7894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.493223][ T5755] usb 4-1: USB disconnect, device number 9 [ 136.005678][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.170561][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 136.171170][ T30] usb 5-1: config 0 has no interfaces? [ 136.174101][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.174125][ T30] usb 5-1: Product: syz [ 136.174138][ T30] usb 5-1: Manufacturer: syz [ 136.174152][ T30] usb 5-1: SerialNumber: syz [ 136.217713][ T30] usb 5-1: config 0 descriptor?? [ 136.295667][ T1057] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.425719][ T1057] usb 4-1: device descriptor read/64, error -71 [ 136.451851][ T7939] openvswitch: netlink: Message has 16 unknown bytes. [ 136.665617][ T1057] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.805624][ T1057] usb 4-1: device descriptor read/64, error -71 [ 136.916440][ T1057] usb usb4-port1: attempt power cycle [ 137.255912][ T1057] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 137.279656][ T1057] usb 4-1: device descriptor read/8, error -71 [ 137.291682][ T7954] jffs2: notice: (7954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 137.517649][ T1057] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.536315][ T1057] usb 4-1: device descriptor read/8, error -71 [ 137.646096][ T1057] usb usb4-port1: unable to enumerate USB device [ 138.709596][ T7977] overlayfs: failed to clone upperpath [ 138.712299][ T7977] overlay: Bad value for 'uuid' [ 138.716020][ T1057] usb 5-1: USB disconnect, device number 3 [ 138.881219][ T7983] FAULT_INJECTION: forcing a failure. [ 138.881219][ T7983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.881249][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.4.868 Not tainted syzkaller #0 PREEMPT(full) [ 138.881271][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 138.881283][ T7983] Call Trace: [ 138.881290][ T7983] [ 138.881299][ T7983] dump_stack_lvl+0xe8/0x150 [ 138.881330][ T7983] should_fail_ex+0x3eb/0x540 [ 138.881356][ T7983] strncpy_from_user+0x36/0x2c0 [ 138.881380][ T7983] do_getname+0x77/0x250 [ 138.881406][ T7983] __se_sys_move_mount+0x334/0x510 [ 138.881433][ T7983] ? __pfx___se_sys_move_mount+0x10/0x10 [ 138.881459][ T7983] ? __pfx_ksys_write+0x10/0x10 [ 138.881489][ T7983] ? __x64_sys_move_mount+0x20/0xc0 [ 138.881524][ T7983] do_syscall_64+0x166/0x520 [ 138.881541][ T7983] ? trace_irq_disable+0x3b/0x140 [ 138.881568][ T7983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.881587][ T7983] ? clear_bhb_loop+0x70/0xc0 [ 138.881609][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.881628][ T7983] RIP: 0033:0x7f61c599e159 [ 138.881646][ T7983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.881662][ T7983] RSP: 002b:00007f61c6841028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 138.881682][ T7983] RAX: ffffffffffffffda RBX: 00007f61c5c25fa0 RCX: 00007f61c599e159 [ 138.881697][ T7983] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000003 [ 138.881711][ T7983] RBP: 00007f61c6841090 R08: 0000000000000262 R09: 0000000000000000 [ 138.881722][ T7983] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 138.881733][ T7983] R13: 00007f61c5c26038 R14: 00007f61c5c25fa0 R15: 00007ffc9378f8a8 [ 138.881761][ T7983] [ 139.137450][ T7991] netlink: 5 bytes leftover after parsing attributes in process `syz.1.871'. [ 139.312719][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 139.348586][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 139.375230][ T8003] FAULT_INJECTION: forcing a failure. [ 139.375230][ T8003] name failslab, interval 1, probability 0, space 0, times 0 [ 139.375259][ T8003] CPU: 1 UID: 0 PID: 8003 Comm: syz.3.874 Not tainted syzkaller #0 PREEMPT(full) [ 139.375280][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 139.375292][ T8003] Call Trace: [ 139.375300][ T8003] [ 139.375310][ T8003] dump_stack_lvl+0xe8/0x150 [ 139.375340][ T8003] should_fail_ex+0x3eb/0x540 [ 139.375366][ T8003] should_failslab+0xa8/0x100 [ 139.375389][ T8003] __kvmalloc_node_noprof+0x171/0x820 [ 139.375421][ T8003] ? __kmalloc_cache_noprof+0x31c/0x600 [ 139.375450][ T8003] ? alloc_netdev_mqs+0xd44/0x12a0 [ 139.375474][ T8003] ? alloc_netdev_mqs+0xd44/0x12a0 [ 139.375516][ T8003] alloc_netdev_mqs+0xd44/0x12a0 [ 139.375546][ T8003] rtnl_create_link+0x321/0xd70 [ 139.375576][ T8003] rtnl_newlink_create+0x258/0x7b0 [ 139.375603][ T8003] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 139.375627][ T8003] ? __pfx___mutex_lock+0x10/0x10 [ 139.375652][ T8003] ? full_name_hash+0x92/0xe0 [ 139.375681][ T8003] rtnl_newlink+0x166d/0x1c30 [ 139.375715][ T8003] ? __pfx_rtnl_newlink+0x10/0x10 [ 139.375732][ T8003] ? do_syscall_64+0x166/0x520 [ 139.375786][ T8003] ? kasan_quarantine_put+0xbb/0x1f0 [ 139.375814][ T8003] ? lockdep_hardirqs_on+0x7b/0x110 [ 139.375847][ T8003] ? nlmon_xmit+0xb0/0x100 [ 139.375874][ T8003] ? kmem_cache_free+0x182/0x650 [ 139.375912][ T8003] ? __lock_acquire+0x747/0x2de0 [ 139.375948][ T8003] ? __local_bh_enable_ip+0xd6/0x140 [ 139.375971][ T8003] ? lockdep_hardirqs_on+0x7b/0x110 [ 139.375996][ T8003] ? __dev_queue_xmit+0x29b/0x3820 [ 139.376019][ T8003] ? __local_bh_enable_ip+0xd6/0x140 [ 139.376040][ T8003] ? __dev_queue_xmit+0x29b/0x3820 [ 139.376071][ T8003] ? lock_acquire+0x115/0x350 [ 139.376112][ T8003] ? __pfx_rtnl_newlink+0x10/0x10 [ 139.376130][ T8003] rtnetlink_rcv_msg+0x802/0xc00 [ 139.376154][ T8003] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 139.376173][ T8003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.376192][ T8003] ? ref_tracker_free+0x689/0x830 [ 139.376220][ T8003] ? __pfx_ref_tracker_free+0x10/0x10 [ 139.376244][ T8003] ? __asan_memcpy+0x40/0x70 [ 139.376269][ T8003] ? __skb_clone+0x5c/0x6c0 [ 139.376297][ T8003] netlink_rcv_skb+0x226/0x4a0 [ 139.376323][ T8003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.376345][ T8003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.376383][ T8003] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.376406][ T8003] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.376437][ T8003] netlink_unicast+0x7bd/0x940 [ 139.376470][ T8003] netlink_sendmsg+0x7c3/0xae0 [ 139.376509][ T8003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.376542][ T8003] ? apparmor_socket_sendmsg+0x98/0x360 [ 139.376566][ T8003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.376590][ T8003] sock_sendmsg_nosec+0x13a/0x180 [ 139.376620][ T8003] ____sys_sendmsg+0x54e/0x850 [ 139.376648][ T8003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.376678][ T8003] ? import_iovec+0x73/0xa0 [ 139.376705][ T8003] ___sys_sendmsg+0x2a5/0x360 [ 139.376726][ T8003] ? __lock_acquire+0x747/0x2de0 [ 139.376755][ T8003] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.376810][ T8003] ? __fget_files+0x2a/0x420 [ 139.376835][ T8003] ? __fget_files+0x3a2/0x420 [ 139.376870][ T8003] __x64_sys_sendmsg+0x1b1/0x290 [ 139.376896][ T8003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.376940][ T8003] do_syscall_64+0x166/0x520 [ 139.376958][ T8003] ? trace_irq_disable+0x3b/0x140 [ 139.376983][ T8003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.377004][ T8003] ? clear_bhb_loop+0x70/0xc0 [ 139.377027][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.377047][ T8003] RIP: 0033:0x7fbf9ad9e159 [ 139.377066][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.377082][ T8003] RSP: 002b:00007fbf98ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.377103][ T8003] RAX: ffffffffffffffda RBX: 00007fbf9b025fa0 RCX: 00007fbf9ad9e159 [ 139.377118][ T8003] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 139.377130][ T8003] RBP: 00007fbf98ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.377143][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.377154][ T8003] R13: 00007fbf9b026038 R14: 00007fbf9b025fa0 R15: 00007ffe057e0658 [ 139.377185][ T8003] [ 139.880189][ T8015] device-mapper: ioctl: Target spec extends beyond end of parameters [ 139.880207][ T8015] device-mapper: ioctl: unable to find target [ 139.937260][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'. [ 140.304295][ T8039] device-mapper: ioctl: Invalid ioctl structure: name t, dev 3200 [ 140.339111][ T8042] usb usb9: usbfs: process 8042 (syz.3.886) did not claim interface 0 before use [ 140.347487][ T8043] jffs2: notice: (8043) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.480915][ T8049] gadgetfs: bound to dummy_udc driver [ 141.356744][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.358247][ T8094] batadv_slave_0: entered promiscuous mode [ 141.358269][ T8094] batadv_slave_0: entered allmulticast mode [ 141.855637][ T7690] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 142.008760][ T7690] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 142.014660][ T7690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.014686][ T7690] usb 4-1: Product: syz [ 142.014701][ T7690] usb 4-1: Manufacturer: syz [ 142.014714][ T7690] usb 4-1: SerialNumber: syz [ 142.046825][ T7690] usb 4-1: config 0 descriptor?? [ 142.473744][ T7690] usb 4-1: Firmware: major: 207, minor: 0, hardware type: ATUSB (0) [ 142.587265][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.914'. [ 142.833398][ T8159] No source specified [ 142.850022][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.850464][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.010267][ T1057] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.339763][ T1057] usb 5-1: Using ep0 maxpacket: 16 [ 143.395482][ T1057] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 143.585730][ T1057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.623821][ T1057] usb 5-1: config 0 descriptor?? [ 143.683004][ T1057] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 143.869251][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.869762][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.870633][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.871121][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.871979][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.872478][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.873283][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.887368][ T7690] usb 4-1: failed to fetch extended address, random address set [ 143.963334][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.964337][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.964888][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.139667][ T1057] usb 5-1: Detected FT232A [ 144.203233][ T8172] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 144.203264][ T8172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.231165][ T1057] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.464483][ T8176] netlink: 'syz.0.920': attribute type 12 has an invalid length. [ 144.493306][ T1057] usb 5-1: USB disconnect, device number 4 [ 144.708819][ T1057] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.756187][ T1057] ftdi_sio 5-1:0.0: device disconnected [ 146.025771][ T5755] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 146.032361][ T5685] usb 4-1: USB disconnect, device number 14 [ 146.176560][ T5755] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 146.177775][ T5755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.182435][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.182454][ T5755] usb 2-1: Product: syz [ 146.182468][ T5755] usb 2-1: Manufacturer: syz [ 146.182482][ T5755] usb 2-1: SerialNumber: syz [ 146.330370][ T5755] usb 2-1: config 0 descriptor?? [ 146.393006][ T5755] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 146.393025][ T5755] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 147.580739][ T5685] usb 2-1: USB disconnect, device number 6 [ 147.900485][ T8231] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 148.348263][ T5685] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.696512][ C1] net_ratelimit: 64 callbacks suppressed [ 149.335800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 149.364348][ C0] sched: DL replenish lagged too much [ 149.567138][ T5685] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 149.573122][ T5685] usb 2-1: config 0 has no interfaces? [ 149.610550][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.610569][ T5685] usb 2-1: Product: syz [ 149.610583][ T5685] usb 2-1: Manufacturer: syz [ 149.610596][ T5685] usb 2-1: SerialNumber: syz [ 149.653076][ T5685] usb 2-1: config 0 descriptor?? [ 150.082087][ T8252] netlink: 'syz.0.950': attribute type 4 has an invalid length. [ 150.082104][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 150.348771][ T8255] overlay: Unknown parameter 'func' [ 150.660653][ T5685] usb 2-1: USB disconnect, device number 7 [ 150.686349][ T4945] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.757281][ T8261] FAULT_INJECTION: forcing a failure. [ 150.757281][ T8261] name failslab, interval 1, probability 0, space 0, times 0 [ 150.757316][ T8261] CPU: 0 UID: 0 PID: 8261 Comm: syz.4.952 Not tainted syzkaller #0 PREEMPT(full) [ 150.757340][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 150.757353][ T8261] Call Trace: [ 150.757360][ T8261] [ 150.757368][ T8261] dump_stack_lvl+0xe8/0x150 [ 150.757402][ T8261] should_fail_ex+0x3eb/0x540 [ 150.757430][ T8261] should_failslab+0xa8/0x100 [ 150.757455][ T8261] __kmalloc_cache_node_noprof+0xa5/0x620 [ 150.757487][ T8261] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 150.757518][ T8261] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 150.757571][ T8261] sbitmap_queue_init_node+0x1dc/0x4d0 [ 150.757606][ T8261] kyber_alloc_sched_data+0x303/0x540 [ 150.757635][ T8261] blk_mq_alloc_sched_res+0x103/0x360 [ 150.757665][ T8261] elevator_change+0x122/0x480 [ 150.757686][ T8261] ? do_raw_spin_unlock+0xf5/0x200 [ 150.757716][ T8261] elv_iosched_store+0x504/0x630 [ 150.757743][ T8261] ? __pfx_elv_iosched_store+0x10/0x10 [ 150.757787][ T8261] queue_attr_store+0x207/0x2b0 [ 150.757817][ T8261] ? __pfx_queue_attr_store+0x10/0x10 [ 150.757845][ T8261] ? lock_acquire+0x115/0x350 [ 150.757873][ T8261] ? sysfs_file_kobj+0x1a/0x230 [ 150.757906][ T8261] ? sysfs_file_kobj+0x1a/0x230 [ 150.757930][ T8261] ? sysfs_file_kobj+0x1a/0x230 [ 150.757953][ T8261] ? sysfs_file_kobj+0x1a/0x230 [ 150.757979][ T8261] ? sysfs_file_kobj+0x1e4/0x230 [ 150.758005][ T8261] ? sysfs_kf_write+0x166/0x260 [ 150.758035][ T8261] ? __pfx_sysfs_kf_write+0x10/0x10 [ 150.758058][ T8261] kernfs_fop_write_iter+0x3a4/0x540 [ 150.758088][ T8261] vfs_write+0x612/0xba0 [ 150.758126][ T8261] ? __pfx_vfs_write+0x10/0x10 [ 150.758165][ T8261] ? __fget_files+0x2a/0x420 [ 150.758200][ T8261] ksys_write+0x150/0x270 [ 150.758231][ T8261] ? __pfx_ksys_write+0x10/0x10 [ 150.758271][ T8261] do_syscall_64+0x166/0x520 [ 150.758290][ T8261] ? trace_irq_disable+0x3b/0x140 [ 150.758327][ T8261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.758347][ T8261] ? clear_bhb_loop+0x70/0xc0 [ 150.758373][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.758394][ T8261] RIP: 0033:0x7f61c599e159 [ 150.758412][ T8261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.758429][ T8261] RSP: 002b:00007f61c67ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.758451][ T8261] RAX: ffffffffffffffda RBX: 00007f61c5c26180 RCX: 00007f61c599e159 [ 150.758467][ T8261] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 150.758481][ T8261] RBP: 00007f61c5a3503b R08: 0000000000000000 R09: 0000000000000000 [ 150.758494][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.758507][ T8261] R13: 00007f61c5c26218 R14: 00007f61c5c26180 R15: 00007ffc9378f8a8 [ 150.758541][ T8261] [ 151.049037][ T4945] usb 4-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 151.144344][ T4945] usb 4-1: config 0 interface 0 altsetting 193 endpoint 0x2 has an invalid bInterval 177, changing to 11 [ 151.144368][ T4945] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.144416][ T4945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.250026][ T4945] usb 4-1: config 0 descriptor?? [ 151.493879][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.508393][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.655680][ T5685] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.758129][ T4945] hid_parser_main: 326 callbacks suppressed [ 151.758154][ T4945] wacom 0003:056A:00D7.0003: unknown main item tag 0x0 [ 151.758183][ T4945] wacom 0003:056A:00D7.0003: unknown main item tag 0x0 [ 151.758209][ T4945] wacom 0003:056A:00D7.0003: unknown main item tag 0x0 [ 151.758234][ T4945] wacom 0003:056A:00D7.0003: unknown main item tag 0x0 [ 151.845617][ T5685] usb 5-1: Using ep0 maxpacket: 8 [ 151.863713][ T5685] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.865057][ T5685] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 151.865122][ T5685] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 151.865148][ T5685] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.865172][ T5685] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 151.865207][ T5685] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 151.865230][ T5685] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.865289][ T5685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.163026][ T5755] usb 4-1: USB disconnect, device number 15 [ 152.207144][ T5685] usb 5-1: GET_CAPABILITIES returned 0 [ 152.207203][ T5685] usbtmc 5-1:16.0: can't read capabilities [ 152.460482][ T5755] usb 5-1: USB disconnect, device number 5 [ 153.142356][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 153.142379][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 153.644371][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'. [ 154.050951][ C1] net_ratelimit: 59 callbacks suppressed [ 154.528241][ T5755] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.697378][ T5755] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 154.699007][ T5755] usb 2-1: config 0 has no interfaces? [ 154.742564][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.742584][ T5755] usb 2-1: Product: syz [ 154.742598][ T5755] usb 2-1: Manufacturer: syz [ 154.742612][ T5755] usb 2-1: SerialNumber: syz [ 154.779605][ T5755] usb 2-1: config 0 descriptor?? [ 154.799547][ T8329] overlayfs: failed to clone upperpath [ 155.166247][ T5755] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.319700][ T5755] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 155.321135][ T5755] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 155.321156][ T5755] usb 5-1: config 1 has no interface number 0 [ 155.324813][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.324834][ T5755] usb 5-1: Product: syz [ 155.324848][ T5755] usb 5-1: Manufacturer: syz [ 155.324863][ T5755] usb 5-1: SerialNumber: syz [ 155.429803][ T5755] usb 5-1: cannot find UAC_HEADER [ 155.880443][ T5755] snd-usb-audio 5-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 155.911919][ T5755] usb 5-1: USB disconnect, device number 6 [ 156.009654][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.761925][ T5685] usb 2-1: USB disconnect, device number 8 [ 157.284136][ T8373] overlay: Bad value for 'uuid' [ 157.479325][ T31] audit: type=1400 audit(1789518872.391:15): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=8374 comm="syz.3.988" name="//o" offset=55 [ 157.633219][ T8379] FAULT_INJECTION: forcing a failure. [ 157.633219][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.633244][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.1.990 Not tainted syzkaller #0 PREEMPT(full) [ 157.633267][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 157.633280][ T8379] Call Trace: [ 157.633288][ T8379] [ 157.633297][ T8379] dump_stack_lvl+0xe8/0x150 [ 157.633328][ T8379] should_fail_ex+0x3eb/0x540 [ 157.633356][ T8379] _copy_to_user+0x31/0xb0 [ 157.633384][ T8379] simple_read_from_buffer+0xe1/0x170 [ 157.633414][ T8379] proc_fail_nth_read+0x1bb/0x230 [ 157.633446][ T8379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.633478][ T8379] ? rw_verify_area+0x24a/0x4c0 [ 157.633507][ T8379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.633535][ T8379] vfs_read+0x213/0xa80 [ 157.633566][ T8379] ? __pfx___mutex_lock+0x10/0x10 [ 157.633587][ T8379] ? __pfx_vfs_read+0x10/0x10 [ 157.633614][ T8379] ? __fget_files+0x2a/0x420 [ 157.633643][ T8379] ? __fget_files+0x3a2/0x420 [ 157.633667][ T8379] ? __fget_files+0x2a/0x420 [ 157.633699][ T8379] ksys_read+0x150/0x270 [ 157.633728][ T8379] ? __pfx_ksys_read+0x10/0x10 [ 157.633765][ T8379] do_syscall_64+0x166/0x520 [ 157.633784][ T8379] ? trace_irq_disable+0x3b/0x140 [ 157.633811][ T8379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.633831][ T8379] ? clear_bhb_loop+0x70/0xc0 [ 157.633856][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.633876][ T8379] RIP: 0033:0x7f06cfb5e98e [ 157.633895][ T8379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.633912][ T8379] RSP: 002b:00007f06d0a65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.633934][ T8379] RAX: ffffffffffffffda RBX: 00007f06d0a666c0 RCX: 00007f06cfb5e98e [ 157.633950][ T8379] RDX: 000000000000000f RSI: 00007f06d0a660a0 RDI: 0000000000000004 [ 157.633963][ T8379] RBP: 00007f06d0a66090 R08: 0000000000000000 R09: 0000000000000000 [ 157.633976][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.633988][ T8379] R13: 00007f06cfe26038 R14: 00007f06cfe25fa0 R15: 00007ffda218ed18 [ 157.634020][ T8379] [ 158.111581][ T8384] netlink: 5 bytes leftover after parsing attributes in process `syz.3.992'. [ 158.111680][ T8384] .30ªî{X¹¦: renamed from gretap0 (while UP) [ 158.150374][ T8384] .30ªî{X¹¦: entered allmulticast mode [ 158.566700][ T5755] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.573914][ T8392] warning: `syz.0.995' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.628837][ T8392] IPVS: set_ctl: invalid protocol: 0 233.4.0.0:4 [ 158.634795][ T8392] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 158.657606][ T8392] IPVS: set_ctl: invalid protocol: 40 16.39.0.0:256 [ 158.736599][ T5755] usb 2-1: device descriptor read/64, error -71 [ 158.975679][ T5755] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.088688][ T5703] net_ratelimit: 86 callbacks suppressed [ 159.105846][ T5755] usb 2-1: device descriptor read/64, error -71 [ 159.218152][ T5755] usb usb2-port1: attempt power cycle [ 159.566111][ T5755] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.589318][ T5755] usb 2-1: device descriptor read/8, error -71 [ 159.845649][ T5755] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.866455][ T5755] usb 2-1: device descriptor read/8, error -71 [ 159.979745][ T5755] usb usb2-port1: unable to enumerate USB device [ 161.601361][ T8404] device-mapper: ioctl: Invalid ioctl structure: name t, dev 320000000000 [ 161.610304][ T8405] gadgetfs: bound to dummy_udc driver ** 790 printk messages dropped ** ** 409 printk messages dropped ** ** 1486 printk messages dropped ** [ 163.376129][ T8435] netlink: 'syz.4.1009': attribute type 12 has an invalid length. [ 163.815662][ T5755] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.968831][ T5755] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 163.970330][ T5755] usb 2-1: config 0 has no interfaces? [ 163.995448][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.995468][ T5755] usb 2-1: Product: syz [ 163.995482][ T5755] usb 2-1: Manufacturer: syz [ 163.995497][ T5755] usb 2-1: SerialNumber: syz [ 164.078922][ T5755] usb 2-1: config 0 descriptor?? [ 164.126133][ T79] net_ratelimit: 35 callbacks suppressed [ 165.953836][ T8492] fuse: fd is not a fuse device [ 166.095698][ T5755] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.246494][ T5755] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 166.247241][ T5755] usb 5-1: config 0 has no interfaces? [ 166.249958][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.249976][ T5755] usb 5-1: Product: syz [ 166.249991][ T5755] usb 5-1: Manufacturer: syz [ 166.250005][ T5755] usb 5-1: SerialNumber: syz [ 166.336440][ T5755] usb 5-1: config 0 descriptor?? [ 166.367479][ T5755] usb 2-1: USB disconnect, device number 13 [ 166.453499][ T8502] fuse: Bad value for 'fd' [ 166.885285][ T31] audit: type=1400 audit(1789518881.791:16): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8510 comm="syz.3.1028" [ 167.143619][ T8516] device-mapper: ioctl: The device has no table. [ 168.755625][ T5685] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 168.762960][ T4945] usb 5-1: USB disconnect, device number 7 [ 168.821843][ T8551] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 168.821863][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1042'. [ 168.916882][ T5685] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 168.917618][ T5685] usb 2-1: config 0 has no interfaces? [ 168.920354][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.920374][ T5685] usb 2-1: Product: syz [ 168.920389][ T5685] usb 2-1: Manufacturer: syz [ 168.920404][ T5685] usb 2-1: SerialNumber: syz [ 168.985033][ T5685] usb 2-1: config 0 descriptor?? [ 169.335646][ C1] net_ratelimit: 59 callbacks suppressed [ 169.449845][ T8556] x_tables: duplicate underflow at hook 2 [ 169.970579][ T8575] FAULT_INJECTION: forcing a failure. [ 169.970579][ T8575] name failslab, interval 1, probability 0, space 0, times 0 [ 169.970609][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.4.1047 Not tainted syzkaller #0 PREEMPT(full) [ 169.970636][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 169.970649][ T8575] Call Trace: [ 169.970658][ T8575] [ 169.970667][ T8575] dump_stack_lvl+0xe8/0x150 [ 169.970699][ T8575] should_fail_ex+0x3eb/0x540 [ 169.970727][ T8575] should_failslab+0xa8/0x100 [ 169.970749][ T8575] ? security_inode_alloc+0x39/0x310 [ 169.970774][ T8575] kmem_cache_alloc_noprof+0x9c/0x600 [ 169.970804][ T8575] ? security_inode_alloc+0x39/0x310 [ 169.970834][ T8575] security_inode_alloc+0x39/0x310 [ 169.970861][ T8575] inode_init_always_gfp+0x97e/0xd30 [ 169.970891][ T8575] ? __pfx_proc_alloc_inode+0x10/0x10 [ 169.970919][ T8575] alloc_inode+0x82/0x1b0 [ 169.970943][ T8575] new_inode+0x1f/0x170 [ 169.970965][ T8575] ? proc_pid_make_inode+0x19/0x130 [ 169.970991][ T8575] proc_pid_make_inode+0x21/0x130 [ 169.971016][ T8575] proc_pident_instantiate+0x6d/0x2a0 [ 169.971044][ T8575] proc_pident_lookup+0x1b7/0x270 [ 169.971079][ T8575] __lookup_slow+0x1fb/0x2f0 [ 169.971108][ T8575] lookup_slow+0x53/0x70 [ 169.971134][ T8575] link_path_walk+0xd2a/0x1910 [ 169.971179][ T8575] path_openat+0x1c4/0x1e40 [ 169.971226][ T8575] do_file_open+0x23e/0x4a0 [ 169.971260][ T8575] ? __pfx_do_file_open+0x10/0x10 [ 169.971298][ T8575] ? __pfx_kfree_link+0x10/0x10 [ 169.971333][ T8575] ? _raw_spin_unlock+0x28/0x50 [ 169.971360][ T8575] ? alloc_fd+0x651/0x6c0 [ 169.971393][ T8575] do_sys_openat2+0x115/0x200 [ 169.971427][ T8575] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.971451][ T8575] ? ksys_write+0x242/0x270 [ 169.971480][ T8575] ? __pfx_ksys_write+0x10/0x10 [ 169.971511][ T8575] __x64_sys_openat+0x138/0x170 [ 169.971538][ T8575] do_syscall_64+0x166/0x520 [ 169.971557][ T8575] ? trace_irq_disable+0x3b/0x140 [ 169.971585][ T8575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.971606][ T8575] ? clear_bhb_loop+0x70/0xc0 [ 169.971631][ T8575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.971651][ T8575] RIP: 0033:0x7f61c595e98e [ 169.971670][ T8575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.971687][ T8575] RSP: 002b:00007f61c6840f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.971709][ T8575] RAX: ffffffffffffffda RBX: 00007f61c68416c0 RCX: 00007f61c595e98e [ 169.971724][ T8575] RDX: 0000000000000000 RSI: 00007f61c5a34776 RDI: ffffffffffffff9c [ 169.971739][ T8575] RBP: 00007f61c6841090 R08: 0000000000000000 R09: 0000000000000000 [ 169.971752][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.971764][ T8575] R13: 00007f61c5c26038 R14: 00007f61c5c25fa0 R15: 00007ffc9378f8a8 [ 169.971797][ T8575] [ 170.550468][ T8580] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 170.597139][ T8580] rust_binder: Failure in copy_transaction_data: EINVAL [ 170.597212][ T8580] rust_binder: 8579:8580 transaction call to 8579:0 failed EINVAL, code 0 size 0-24 [ 170.858346][ T8585] FAULT_INJECTION: forcing a failure. [ 170.858346][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 170.858377][ T8585] CPU: 0 UID: 0 PID: 8585 Comm: syz.3.1048 Not tainted syzkaller #0 PREEMPT(full) [ 170.858401][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 170.858415][ T8585] Call Trace: [ 170.858424][ T8585] [ 170.858433][ T8585] dump_stack_lvl+0xe8/0x150 [ 170.858467][ T8585] should_fail_ex+0x3eb/0x540 [ 170.858497][ T8585] should_failslab+0xa8/0x100 [ 170.858523][ T8585] __kvmalloc_node_noprof+0x171/0x820 [ 170.858560][ T8585] ? sbitmap_init_node+0x2bc/0x630 [ 170.858589][ T8585] ? sbitmap_init_node+0x2bc/0x630 [ 170.858625][ T8585] sbitmap_init_node+0x2bc/0x630 [ 170.858662][ T8585] sbitmap_queue_init_node+0x3e/0x4d0 [ 170.858698][ T8585] kyber_alloc_sched_data+0x303/0x540 [ 170.858729][ T8585] blk_mq_alloc_sched_res+0x103/0x360 [ 170.858758][ T8585] elevator_change+0x122/0x480 [ 170.858783][ T8585] ? do_raw_spin_unlock+0xf5/0x200 [ 170.858814][ T8585] elv_iosched_store+0x504/0x630 [ 170.858843][ T8585] ? __pfx_elv_iosched_store+0x10/0x10 [ 170.858885][ T8585] queue_attr_store+0x207/0x2b0 [ 170.858918][ T8585] ? __pfx_queue_attr_store+0x10/0x10 [ 170.858946][ T8585] ? lock_acquire+0x115/0x350 [ 170.858977][ T8585] ? sysfs_file_kobj+0x1a/0x230 [ 170.859010][ T8585] ? sysfs_file_kobj+0x1a/0x230 [ 170.859036][ T8585] ? sysfs_file_kobj+0x1a/0x230 [ 170.859059][ T8585] ? sysfs_file_kobj+0x1a/0x230 [ 170.859086][ T8585] ? sysfs_file_kobj+0x1e4/0x230 [ 170.859112][ T8585] ? sysfs_kf_write+0x166/0x260 [ 170.859143][ T8585] ? __pfx_sysfs_kf_write+0x10/0x10 [ 170.859169][ T8585] kernfs_fop_write_iter+0x3a4/0x540 [ 170.859199][ T8585] vfs_write+0x612/0xba0 [ 170.859237][ T8585] ? __pfx_vfs_write+0x10/0x10 [ 170.859284][ T8585] ? __fget_files+0x2a/0x420 [ 170.859321][ T8585] ksys_write+0x150/0x270 [ 170.859352][ T8585] ? __pfx_ksys_write+0x10/0x10 [ 170.859394][ T8585] do_syscall_64+0x166/0x520 [ 170.859416][ T8585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.859438][ T8585] ? clear_bhb_loop+0x70/0xc0 [ 170.859464][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.859484][ T8585] RIP: 0033:0x7fbf9ad9e159 [ 170.859505][ T8585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.859522][ T8585] RSP: 002b:00007fbf98ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.859544][ T8585] RAX: ffffffffffffffda RBX: 00007fbf9b025fa0 RCX: 00007fbf9ad9e159 [ 170.859560][ T8585] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 170.859574][ T8585] RBP: 00007fbf9ae3503b R08: 0000000000000000 R09: 0000000000000000 [ 170.859588][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.859601][ T8585] R13: 00007fbf9b026038 R14: 00007fbf9b025fa0 R15: 00007ffe057e0658 [ 170.859636][ T8585] [ 171.235755][ T5685] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.270028][ T10] usb 2-1: USB disconnect, device number 14 [ 171.386502][ T5685] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40 [ 171.387945][ T5685] usb 5-1: config 1 interface 0 has no altsetting 0 [ 171.394089][ T5685] usb 5-1: string descriptor 0 read error: -22 [ 171.394268][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.302831][ T8580] syz.4.1050 (8580): drop_caches: 2 [ 172.332883][ T5685] usbhid 5-1:1.0: can't add hid device: -71 [ 172.334946][ T5685] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 172.385770][ T5685] usb 5-1: USB disconnect, device number 8 [ 172.428029][ T5755] rust_binder: 8579: undelivered TRANSACTION_ERROR: 29201 [ 172.816466][ T5755] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.934767][ T8580] syz.4.1050 (8580) used greatest stack depth: 11936 bytes left [ 172.979755][ T5755] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 172.980499][ T5755] usb 2-1: config 0 has no interfaces? [ 172.996290][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.996326][ T5755] usb 2-1: Product: syz [ 172.996341][ T5755] usb 2-1: Manufacturer: syz [ 172.996356][ T5755] usb 2-1: SerialNumber: syz [ 173.040605][ T5755] usb 2-1: config 0 descriptor?? [ 173.181774][ T8615] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 173.215644][ T8615] qnx6: unable to read the first superblock [ 173.927981][ T5755] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 174.076299][ T5755] usb 4-1: Using ep0 maxpacket: 16 [ 174.078057][ T5755] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.079430][ T5755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.079456][ T5755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.079478][ T5755] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.079536][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.082770][ T5755] usb 4-1: config 0 descriptor?? [ 174.123293][ T4945] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.365618][ C0] net_ratelimit: 51 callbacks suppressed [ 174.412229][ T4945] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 174.446068][ T4945] usb 5-1: config 0 has no interfaces? [ 174.662832][ T4945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.662852][ T4945] usb 5-1: Product: syz [ 174.662866][ T4945] usb 5-1: Manufacturer: syz [ 174.662880][ T4945] usb 5-1: SerialNumber: syz [ 174.748105][ T4945] usb 5-1: config 0 descriptor?? [ 174.755309][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.773119][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.773151][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.773179][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.773205][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.773235][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.773273][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.773301][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.773327][ T5755] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 174.853380][ T5755] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input8 [ 175.094724][ T5755] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 175.209321][ T25] usb 2-1: USB disconnect, device number 15 [ 175.769949][ T8645] FAULT_INJECTION: forcing a failure. [ 175.769949][ T8645] name failslab, interval 1, probability 0, space 0, times 0 [ 175.769978][ T8645] CPU: 0 UID: 0 PID: 8645 Comm: syz.1.1070 Not tainted syzkaller #0 PREEMPT(full) [ 175.770002][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 175.770014][ T8645] Call Trace: [ 175.770023][ T8645] [ 175.770033][ T8645] dump_stack_lvl+0xe8/0x150 [ 175.770066][ T8645] should_fail_ex+0x3eb/0x540 [ 175.770094][ T8645] should_failslab+0xa8/0x100 [ 175.770121][ T8645] __kmalloc_cache_node_noprof+0xa5/0x620 [ 175.770154][ T8645] ? alloc_pages_node_noprof+0xe2/0x140 [ 175.770185][ T8645] ? blk_mq_init_tags+0x83/0x2d0 [ 175.770212][ T8645] ? blk_mq_init_tags+0x83/0x2d0 [ 175.770258][ T8645] blk_mq_init_tags+0x83/0x2d0 [ 175.770291][ T8645] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 175.770333][ T8645] blk_mq_alloc_sched_tags+0x14d/0x380 [ 175.770366][ T8645] blk_mq_alloc_sched_res+0x92/0x360 [ 175.770400][ T8645] elevator_change+0x122/0x480 [ 175.770422][ T8645] ? do_raw_spin_unlock+0xf5/0x200 [ 175.770452][ T8645] elv_iosched_store+0x504/0x630 [ 175.770481][ T8645] ? __pfx_elv_iosched_store+0x10/0x10 [ 175.770524][ T8645] queue_attr_store+0x207/0x2b0 [ 175.770555][ T8645] ? __pfx_queue_attr_store+0x10/0x10 [ 175.770584][ T8645] ? lock_acquire+0x115/0x350 [ 175.770614][ T8645] ? sysfs_file_kobj+0x1a/0x230 [ 175.770647][ T8645] ? sysfs_file_kobj+0x1a/0x230 [ 175.770673][ T8645] ? sysfs_file_kobj+0x1a/0x230 [ 175.770696][ T8645] ? sysfs_file_kobj+0x1a/0x230 [ 175.770723][ T8645] ? sysfs_file_kobj+0x1e4/0x230 [ 175.770749][ T8645] ? sysfs_kf_write+0x166/0x260 [ 175.770780][ T8645] ? __pfx_sysfs_kf_write+0x10/0x10 [ 175.770805][ T8645] kernfs_fop_write_iter+0x3a4/0x540 [ 175.770835][ T8645] vfs_write+0x612/0xba0 [ 175.770872][ T8645] ? __pfx_vfs_write+0x10/0x10 [ 175.770912][ T8645] ? __fget_files+0x2a/0x420 [ 175.770948][ T8645] ksys_write+0x150/0x270 [ 175.770979][ T8645] ? __pfx_ksys_write+0x10/0x10 [ 175.771020][ T8645] do_syscall_64+0x166/0x520 [ 175.771040][ T8645] ? trace_irq_disable+0x3b/0x140 [ 175.771069][ T8645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.771090][ T8645] ? clear_bhb_loop+0x70/0xc0 [ 175.771117][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.771138][ T8645] RIP: 0033:0x7f06cfb9e159 [ 175.771157][ T8645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.771175][ T8645] RSP: 002b:00007f06d0a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.771198][ T8645] RAX: ffffffffffffffda RBX: 00007f06cfe25fa0 RCX: 00007f06cfb9e159 [ 175.771214][ T8645] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 175.771228][ T8645] RBP: 00007f06cfc3503b R08: 0000000000000000 R09: 0000000000000000 [ 175.771248][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.771261][ T8645] R13: 00007f06cfe26038 R14: 00007f06cfe25fa0 R15: 00007ffda218ed18 [ 175.771296][ T8645] [ 176.335442][ T5755] usb 5-1: USB disconnect, device number 9 [ 176.697814][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 177.052718][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 177.052740][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 177.142872][ T5755] usb 4-1: USB disconnect, device number 16 [ 177.683445][ T8670] cgroup: fork rejected by pids controller in /syz4 [ 177.694482][ T8670] [ 179.485717][ C0] net_ratelimit: 39 callbacks suppressed [ 179.646092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 180.055726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 180.465937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 182.206139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 182.615757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 183.025930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 185.576736][ T8681] syzkaller1: entered promiscuous mode [ 185.576753][ T8681] syzkaller1: entered allmulticast mode [ 186.225091][ T8695] overlayfs: upper fs does not support tmpfile. [ 186.588640][ T4138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.141754][ T4138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.498036][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.500815][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.502327][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.533261][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.548318][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.716883][ T4138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.121637][ T4138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.338724][ T5686] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 188.527057][ T5686] usb 4-1: Using ep0 maxpacket: 16 [ 188.527828][ T5686] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.528962][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.531877][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.531897][ T5686] usb 4-1: Product: syz [ 188.531911][ T5686] usb 4-1: Manufacturer: syz [ 188.531954][ T5686] usb 4-1: SerialNumber: syz [ 188.699199][ T5686] usb 4-1: config 0 descriptor?? [ 188.699816][ T4138] bridge_slave_1: left allmulticast mode [ 188.699835][ T4138] bridge_slave_1: left promiscuous mode [ 188.700091][ T4138] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.742345][ T5686] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 188.742376][ T5686] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 188.784659][ T4138] bridge_slave_0: left allmulticast mode [ 188.784678][ T4138] bridge_slave_0: left promiscuous mode [ 188.800335][ T4138] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.416812][ T5686] em28xx 4-1:0.0: chip ID is em2765 [ 189.646063][ T5612] Bluetooth: hci2: command tx timeout [ 189.729738][ T5686] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 189.729794][ T5686] em28xx 4-1:0.0: board has no eeprom [ 189.812048][ T4138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.842124][ T4138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.859282][ T5686] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 189.859319][ T5686] em28xx 4-1:0.0: dvb set to bulk mode. [ 189.862205][ T4138] bond0 (unregistering): Released all slaves [ 189.904058][ T5755] em28xx 4-1:0.0: Binding DVB extension [ 189.936141][ T5686] usb 4-1: USB disconnect, device number 17 [ 189.942465][ T5686] em28xx 4-1:0.0: Disconnecting em28xx [ 190.047601][ T42] net_ratelimit: 53 callbacks suppressed [ 190.251819][ T5755] em28xx 4-1:0.0: Registering input extension [ 190.262842][ T5686] em28xx 4-1:0.0: Closing input extension [ 190.885111][ T5686] em28xx: Freeing device [ 191.075777][ T5755] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 191.266745][ T5755] usb 2-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00 [ 191.270700][ T5755] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.270750][ T5755] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 191.270772][ T5755] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 191.270795][ T5755] usb 2-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 191.343682][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.343702][ T5755] usb 2-1: Product: syz [ 191.343717][ T5755] usb 2-1: Manufacturer: syz [ 191.343731][ T5755] usb 2-1: SerialNumber: syz [ 191.412358][ T5755] mos7840 2-1:1.0: missing endpoints [ 191.672022][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 191.725687][ T5612] Bluetooth: hci2: command tx timeout [ 191.827076][ T8757] bpf: Bad value for 'gid' [ 191.845886][ T8753] x_tables: unsorted entry at hook 2 [ 191.850648][ T10] usb 2-1: USB disconnect, device number 16 [ 193.140035][ T4138] hsr_slave_0: left promiscuous mode [ 193.161899][ T4138] hsr_slave_1: left promiscuous mode [ 193.181276][ T4138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.181295][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.207676][ T4138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.207694][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.283534][ T4138] veth1_macvtap: left promiscuous mode [ 193.283571][ T4138] veth0_macvtap: left promiscuous mode [ 193.283670][ T4138] veth1_vlan: left promiscuous mode [ 193.283737][ T4138] veth0_vlan: left promiscuous mode [ 193.650120][ T8787] overlayfs: failed lookup in lower (newroot/268, name='bus', err=-40): overlapping layers [ 193.730834][ T8789] overlayfs: failed to resolve './file0:/': -2 [ 193.808388][ T5612] Bluetooth: hci2: command tx timeout [ 194.098900][ T8800] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 194.223672][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.223723][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.759118][ T8805] netlink: 'syz.3.1111': attribute type 11 has an invalid length. [ 195.047319][ T4138] team0 (unregistering): Port device team_slave_1 removed [ 195.092067][ T4138] team0 (unregistering): Port device team_slave_0 removed [ 195.460039][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 195.485829][ C0] net_ratelimit: 108 callbacks suppressed [ 195.886007][ T5612] Bluetooth: hci2: command tx timeout [ 196.574613][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.574721][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.574905][ T8717] bridge_slave_0: entered allmulticast mode [ 196.605001][ T8717] bridge_slave_0: entered promiscuous mode [ 196.620973][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.621119][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.621302][ T8717] bridge_slave_1: entered allmulticast mode [ 196.623136][ T8717] bridge_slave_1: entered promiscuous mode [ 196.714218][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.729011][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.894366][ T8717] team0: Port device team_slave_0 added [ 196.908560][ T8717] team0: Port device team_slave_1 added [ 196.975004][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.975015][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.975041][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.026971][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.026983][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.027009][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.164031][ T8717] hsr_slave_0: entered promiscuous mode [ 197.165222][ T8717] hsr_slave_1: entered promiscuous mode [ 197.185282][ T8717] debugfs: 'hsr0' already exists in 'hsr' [ 197.185304][ T8717] Cannot create hsr debugfs directory [ 198.223282][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 199.433525][ T8717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.460366][ T8717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.461475][ T8717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.496764][ T8717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.497650][ T8717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.536608][ T8717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.542064][ T8717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.589995][ T8717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.808223][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.856389][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.909125][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.909225][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.912436][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.912565][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.525913][ C0] net_ratelimit: 36 callbacks suppressed [ 201.152977][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.149594][ T8717] veth0_vlan: entered promiscuous mode [ 202.169381][ T8717] veth1_vlan: entered promiscuous mode [ 202.226913][ T8717] veth0_macvtap: entered promiscuous mode [ 202.233252][ T8717] veth1_macvtap: entered promiscuous mode [ 202.274217][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.300617][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.896073][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.896120][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.896155][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.896188][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.149359][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.149373][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.272493][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.272507][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.582786][ T8920] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 320000 [ 203.785176][ T8921] syzkaller1: entered promiscuous mode [ 203.785192][ T8921] syzkaller1: entered allmulticast mode [ 204.344071][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.344707][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.602337][ T8942] syz.4.1123(8942): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 204.675660][ T5755] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 204.825724][ T5755] usb 2-1: Using ep0 maxpacket: 32 [ 204.826503][ T5755] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 204.829631][ T5755] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 204.829653][ T5755] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 204.829673][ T5755] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 204.829721][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.829743][ T5755] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.829767][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 204.829792][ T5755] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 204.829816][ T5755] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.829875][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.969538][ T5755] usb 2-1: config 0 descriptor?? [ 204.971966][ T8938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.232792][ T5755] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 205.637751][ T8957] net_ratelimit: 257 callbacks suppressed [ 205.756788][ T5686] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.790014][ C0] usblp0: nonzero read bulk status received: -71 [ 205.802501][ T8936] usblp0: error -71 reading from printer [ 205.804263][ C0] usblp0: nonzero read bulk status received: -71 [ 205.906181][ T5686] usb 5-1: Using ep0 maxpacket: 32 [ 205.909555][ T5686] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 205.944640][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.944660][ T5686] usb 5-1: Product: syz [ 205.944700][ T5686] usb 5-1: Manufacturer: syz [ 205.944715][ T5686] usb 5-1: SerialNumber: syz [ 205.984282][ T5686] usb 5-1: config 0 descriptor?? [ 206.624956][ T2206] IPVS: starting estimator thread 0... [ 206.634606][ T8953] IPVS: ip_vs_add_dest(): server weight less than zero [ 206.671462][ T8953] tmpfs: Unknown parameter 'usrquotaic' [ 206.745658][ T8967] IPVS: using max 32 ests per chain, 76800 per kthread [ 206.961902][ T5686] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 207.159148][ T5686] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 207.201378][ T5686] usb 5-1: USB disconnect, device number 10 [ 207.333207][ T8972] overlayfs: failed to resolve './file0': -2 [ 207.620671][ T10] usb 2-1: USB disconnect, device number 17 [ 207.694264][ T10] usblp0: removed [ 207.898643][ T8981] overlay: Bad value for 'uuid' [ 208.138630][ T31] audit: type=1400 audit(1789518923.051:17): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=8990 comm="syz.4.1137" name="//o" offset=55 [ 208.357573][ T8996] comedi comedi3: comedi_config --init_data is deprecated [ 208.393849][ T8998] FAULT_INJECTION: forcing a failure. [ 208.393849][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 208.393888][ T8998] CPU: 0 UID: 0 PID: 8998 Comm: syz.1.1140 Not tainted syzkaller #0 PREEMPT(full) [ 208.393911][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 208.393933][ T8998] Call Trace: [ 208.393942][ T8998] [ 208.393951][ T8998] dump_stack_lvl+0xe8/0x150 [ 208.393984][ T8998] should_fail_ex+0x3eb/0x540 [ 208.394012][ T8998] should_failslab+0xa8/0x100 [ 208.394037][ T8998] __kvmalloc_node_noprof+0x171/0x820 [ 208.394068][ T8998] ? __kmalloc_cache_noprof+0x31c/0x600 [ 208.394098][ T8998] ? alloc_netdev_mqs+0xd44/0x12a0 [ 208.394126][ T8998] ? alloc_netdev_mqs+0xd44/0x12a0 [ 208.394158][ T8998] alloc_netdev_mqs+0xd44/0x12a0 [ 208.394189][ T8998] rtnl_create_link+0x321/0xd70 [ 208.394226][ T8998] rtnl_newlink_create+0x258/0x7b0 [ 208.394256][ T8998] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 208.394282][ T8998] ? __pfx___mutex_lock+0x10/0x10 [ 208.394311][ T8998] ? full_name_hash+0x92/0xe0 [ 208.394341][ T8998] rtnl_newlink+0x166d/0x1c30 [ 208.394376][ T8998] ? __pfx_rtnl_newlink+0x10/0x10 [ 208.394394][ T8998] ? do_syscall_64+0x166/0x520 [ 208.394448][ T8998] ? kasan_quarantine_put+0xbb/0x1f0 [ 208.394477][ T8998] ? lockdep_hardirqs_on+0x7b/0x110 [ 208.394510][ T8998] ? nlmon_xmit+0xb0/0x100 [ 208.394537][ T8998] ? kmem_cache_free+0x182/0x650 [ 208.394576][ T8998] ? __lock_acquire+0x747/0x2de0 [ 208.394615][ T8998] ? __local_bh_enable_ip+0xd6/0x140 [ 208.394638][ T8998] ? lockdep_hardirqs_on+0x7b/0x110 [ 208.394666][ T8998] ? __dev_queue_xmit+0x29b/0x3820 [ 208.394689][ T8998] ? __local_bh_enable_ip+0xd6/0x140 [ 208.394710][ T8998] ? __dev_queue_xmit+0x29b/0x3820 [ 208.394741][ T8998] ? lock_acquire+0x115/0x350 [ 208.394783][ T8998] ? __pfx_rtnl_newlink+0x10/0x10 [ 208.394802][ T8998] rtnetlink_rcv_msg+0x802/0xc00 [ 208.394826][ T8998] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 208.394846][ T8998] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.394864][ T8998] ? ref_tracker_free+0x689/0x830 [ 208.394892][ T8998] ? __pfx_ref_tracker_free+0x10/0x10 [ 208.394916][ T8998] ? __asan_memcpy+0x40/0x70 [ 208.394948][ T8998] ? __skb_clone+0x5c/0x6c0 [ 208.394977][ T8998] netlink_rcv_skb+0x226/0x4a0 [ 208.395003][ T8998] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.395025][ T8998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.395062][ T8998] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.395087][ T8998] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.395118][ T8998] netlink_unicast+0x7bd/0x940 [ 208.395151][ T8998] netlink_sendmsg+0x7c3/0xae0 [ 208.395183][ T8998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.395216][ T8998] ? apparmor_socket_sendmsg+0x98/0x360 [ 208.395241][ T8998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.395265][ T8998] sock_sendmsg_nosec+0x13a/0x180 [ 208.395295][ T8998] ____sys_sendmsg+0x54e/0x850 [ 208.395323][ T8998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.395355][ T8998] ? import_iovec+0x73/0xa0 [ 208.395384][ T8998] ___sys_sendmsg+0x2a5/0x360 [ 208.395406][ T8998] ? __lock_acquire+0x747/0x2de0 [ 208.395436][ T8998] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.395493][ T8998] ? __fget_files+0x2a/0x420 [ 208.395517][ T8998] ? __fget_files+0x3a2/0x420 [ 208.395548][ T8998] __x64_sys_sendmsg+0x1b1/0x290 [ 208.395572][ T8998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.395615][ T8998] do_syscall_64+0x166/0x520 [ 208.395633][ T8998] ? trace_irq_disable+0x3b/0x140 [ 208.395661][ T8998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.395681][ T8998] ? clear_bhb_loop+0x70/0xc0 [ 208.395706][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.395727][ T8998] RIP: 0033:0x7f06cfb9e159 [ 208.395746][ T8998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.395763][ T8998] RSP: 002b:00007f06d0a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.395785][ T8998] RAX: ffffffffffffffda RBX: 00007f06cfe25fa0 RCX: 00007f06cfb9e159 [ 208.395800][ T8998] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 208.395814][ T8998] RBP: 00007f06d0a66090 R08: 0000000000000000 R09: 0000000000000000 [ 208.395827][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.395839][ T8998] R13: 00007f06cfe26038 R14: 00007f06cfe25fa0 R15: 00007ffda218ed18 [ 208.395872][ T8998] [ 209.204538][ T9005] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1143'. [ 209.204641][ T9005] e30ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 209.415711][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.438852][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 209.579735][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 209.583356][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.583400][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.583422][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 209.583446][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.583506][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.651453][ T5755] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 209.795738][ T5755] usb 2-1: Using ep0 maxpacket: 16 [ 209.798234][ T5755] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.800798][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.800847][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.800870][ T5755] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.800929][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.892531][ T5755] usb 2-1: config 0 descriptor?? [ 210.163382][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163418][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163445][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163472][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163521][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163549][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163575][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163602][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163628][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.163678][ T5755] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 210.272315][ T9021] netlink: 'syz.1.1144': attribute type 11 has an invalid length. [ 210.272339][ T9021] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1144'. [ 210.330846][ T5755] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input10 [ 210.457776][ T5755] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 210.529578][ T5755] usb 2-1: USB disconnect, device number 18 [ 210.742438][ T5698] net_ratelimit: 104 callbacks suppressed [ 210.770587][ T9000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.787626][ T9000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.813996][ T10] gud 5-1:1.0: USB-1: Failed to add properties (ret=-71) [ 210.814043][ T10] gud 5-1:1.0: Failed to get connectors (error=-71) [ 210.814067][ T10] gud 5-1:1.0: probe with driver gud failed with error -71 [ 211.044716][ T10] usb 5-1: USB disconnect, device number 11 [ 211.148354][ T9027] fido_id[9027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 211.170796][ T9029] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 211.768987][ T9039] Invalid source name [ 211.846463][ T5755] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 211.997925][ T5755] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.003325][ T5755] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 212.003351][ T5755] usb 4-1: config 0 interface 0 has no altsetting 0 [ 212.041060][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.041080][ T5755] usb 4-1: Product: syz [ 212.041095][ T5755] usb 4-1: Manufacturer: syz [ 212.041107][ T5755] usb 4-1: SerialNumber: syz [ 212.098502][ T5755] usb 4-1: config 0 descriptor?? [ 212.180263][ T5755] usb 4-1: selecting invalid altsetting 0 [ 212.471580][ T9051] loop5: detected capacity change from 0 to 7 [ 212.501332][ T9051] Dev loop5: unable to read RDB block 7 [ 212.501374][ T9051] loop5: unable to read partition table [ 212.501585][ T9051] loop5: partition table beyond EOD, truncated [ 212.501617][ T9051] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.605637][ T5686] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 212.759394][ T5686] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 212.764404][ T5686] usb 2-1: config 0 has no interfaces? [ 212.825833][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.825853][ T5686] usb 2-1: Product: syz [ 212.825867][ T5686] usb 2-1: Manufacturer: syz [ 212.825881][ T5686] usb 2-1: SerialNumber: syz [ 212.874713][ T5686] usb 2-1: config 0 descriptor?? [ 212.923128][ T5755] usb 4-1: USB disconnect, device number 18 [ 213.177051][ T9060] udevd[9060]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.715207][ T9072] fuse: fd is not a fuse device [ 214.585742][ T5755] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 214.735628][ T5755] usb 5-1: Using ep0 maxpacket: 32 [ 214.739702][ T5755] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.739746][ T5755] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 214.742868][ T5755] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 214.793756][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.793775][ T5755] usb 5-1: Product: syz [ 214.793789][ T5755] usb 5-1: Manufacturer: syz [ 214.793813][ T5755] usb 5-1: SerialNumber: syz [ 215.100129][ T5755] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 215.139463][ T5755] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 215.167563][ T4945] usb 2-1: USB disconnect, device number 19 [ 215.329959][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 215.556665][ T5755] usb 5-1: USB disconnect, device number 12 [ 215.640015][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1174'. [ 215.640052][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1174'. [ 215.811823][ C1] net_ratelimit: 66 callbacks suppressed [ 217.017188][ T5686] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 217.174780][ T5686] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 217.189996][ T5686] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.210194][ T5686] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.230082][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.230103][ T5686] usb 4-1: Product: syz [ 217.230117][ T5686] usb 4-1: Manufacturer: syz [ 217.230131][ T5686] usb 4-1: SerialNumber: syz [ 217.291766][ T5686] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 217.334958][ T5686] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 217.382530][ T5686] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 217.575877][ T9138] netlink: 'syz.0.1186': attribute type 12 has an invalid length. [ 219.041334][ T9152] random: crng reseeded on system resumption [ 219.490834][ T9120] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 219.607625][ T9120] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 220.845605][ C0] net_ratelimit: 104 callbacks suppressed [ 220.889345][ T5755] usb 4-1: USB disconnect, device number 19 [ 220.933720][ T5755] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 220.948768][ T5755] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 220.949939][ T5755] ti_usb_3410_5052 4-1:2.0: device disconnected [ 221.237677][ T9213] sctp: [Deprecated]: syz.0.1207 (pid 9213) Use of int in maxseg socket option. [ 221.237677][ T9213] Use struct sctp_assoc_value instead [ 221.970837][ T9221] FAULT_INJECTION: forcing a failure. [ 221.970837][ T9221] name failslab, interval 1, probability 0, space 0, times 0 [ 221.970871][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.1.1209 Not tainted syzkaller #0 PREEMPT(full) [ 221.970896][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 221.970909][ T9221] Call Trace: [ 221.970917][ T9221] [ 221.970927][ T9221] dump_stack_lvl+0xe8/0x150 [ 221.970960][ T9221] should_fail_ex+0x3eb/0x540 [ 221.970989][ T9221] should_failslab+0xa8/0x100 [ 221.971014][ T9221] __kmalloc_noprof+0xf9/0x710 [ 221.971044][ T9221] ? tomoyo_encode+0x2ad/0x570 [ 221.971069][ T9221] ? tomoyo_encode+0x2ad/0x570 [ 221.971111][ T9221] tomoyo_encode+0x2ad/0x570 [ 221.971143][ T9221] tomoyo_realpath_from_path+0x5fa/0x640 [ 221.971180][ T9221] ? tomoyo_path_number_perm+0x219/0x5f0 [ 221.971203][ T9221] tomoyo_path_number_perm+0x246/0x5f0 [ 221.971229][ T9221] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.971291][ T9221] ? __pfx_current_check_access_path+0x10/0x10 [ 221.971316][ T9221] ? d_splice_alias_ops+0x119/0x440 [ 221.971336][ T9221] ? d_splice_alias+0x12/0x30 [ 221.971368][ T9221] ? lookup_one_qstr_excl+0x1d4/0x360 [ 221.971403][ T9221] tomoyo_path_mkdir+0xb0/0xf0 [ 221.971431][ T9221] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 221.971463][ T9221] ? __pfx_filename_create+0x10/0x10 [ 221.971500][ T9221] security_path_mkdir+0x169/0x350 [ 221.971530][ T9221] filename_mkdirat+0x200/0x510 [ 221.971549][ T9221] ? __might_fault+0xaf/0x130 [ 221.971580][ T9221] ? __pfx_filename_mkdirat+0x10/0x10 [ 221.971604][ T9221] ? do_getname+0x151/0x250 [ 221.971631][ T9221] __se_sys_mkdirat+0x35/0x150 [ 221.971654][ T9221] do_syscall_64+0x166/0x520 [ 221.971673][ T9221] ? trace_irq_disable+0x3b/0x140 [ 221.971702][ T9221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.971724][ T9221] ? clear_bhb_loop+0x70/0xc0 [ 221.971750][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.971771][ T9221] RIP: 0033:0x7f06cfb9e159 [ 221.971791][ T9221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.971810][ T9221] RSP: 002b:00007f06d0a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 221.971833][ T9221] RAX: ffffffffffffffda RBX: 00007f06cfe25fa0 RCX: 00007f06cfb9e159 [ 221.971848][ T9221] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 221.971863][ T9221] RBP: 00007f06cfc3503b R08: 0000000000000000 R09: 0000000000000000 [ 221.971877][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.971890][ T9221] R13: 00007f06cfe26038 R14: 00007f06cfe25fa0 R15: 00007ffda218ed18 [ 221.971925][ T9221] [ 221.971948][ T9221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.849759][ T9230] device-mapper: ioctl: The device has no table. [ 223.408914][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.518329][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.524526][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.556567][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.559083][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.475415][ T9262] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 224.657142][ T9269] netlink: 'syz.0.1224': attribute type 4 has an invalid length. [ 224.657164][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 225.169408][ T9277] rust_binder: 9272:9277 error while translating object: EINVAL [ 225.169526][ T9277] rust_binder: Failure in copy_transaction_data: EINVAL [ 225.169553][ T9277] rust_binder: 9272:9277 transaction call to 9272:0 failed EINVAL, code 0 size 88-24 [ 225.185119][ T5755] rust_binder: 9272: undelivered TRANSACTION_ERROR: 29201 [ 225.646288][ T52] Bluetooth: hci3: command tx timeout [ 225.979385][ C1] net_ratelimit: 82 callbacks suppressed [ 226.056601][ T5755] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 226.248490][ T5755] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 226.249241][ T5755] usb 2-1: config 0 has no interfaces? [ 226.255956][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.255975][ T5755] usb 2-1: Product: syz [ 226.255990][ T5755] usb 2-1: Manufacturer: syz [ 226.256004][ T5755] usb 2-1: SerialNumber: syz [ 226.298123][ T5755] usb 2-1: config 0 descriptor?? [ 226.417382][ T9292] FAULT_INJECTION: forcing a failure. [ 226.417382][ T9292] name failslab, interval 1, probability 0, space 0, times 0 [ 226.417414][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.4.1231 Not tainted syzkaller #0 PREEMPT(full) [ 226.417437][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 226.417449][ T9292] Call Trace: [ 226.417458][ T9292] [ 226.417467][ T9292] dump_stack_lvl+0xe8/0x150 [ 226.417498][ T9292] should_fail_ex+0x3eb/0x540 [ 226.417526][ T9292] should_failslab+0xa8/0x100 [ 226.417560][ T9292] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 226.417590][ T9292] ? __d_alloc+0x37/0x6f0 [ 226.417616][ T9292] ? __d_alloc+0x37/0x6f0 [ 226.417646][ T9292] __d_alloc+0x37/0x6f0 [ 226.417677][ T9292] d_alloc_parallel+0xde/0x16b0 [ 226.417708][ T9292] ? lock_acquire+0x115/0x350 [ 226.417746][ T9292] ? __d_lookup+0x66/0x790 [ 226.417774][ T9292] ? __d_lookup+0x66/0x790 [ 226.417802][ T9292] ? __pfx_d_alloc_parallel+0x10/0x10 [ 226.417830][ T9292] ? d_lookup+0x1f/0xa0 [ 226.417860][ T9292] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 226.417893][ T9292] lookup_open+0x26b/0x1380 [ 226.417931][ T9292] ? lookup_fast+0x197/0x5d0 [ 226.417965][ T9292] path_openat+0x696/0x1e40 [ 226.418012][ T9292] do_file_open+0x23e/0x4a0 [ 226.418045][ T9292] ? __pfx_do_file_open+0x10/0x10 [ 226.418083][ T9292] ? __pfx_kfree_link+0x10/0x10 [ 226.418120][ T9292] ? _raw_spin_unlock+0x28/0x50 [ 226.418147][ T9292] ? alloc_fd+0x651/0x6c0 [ 226.418180][ T9292] do_sys_openat2+0x115/0x200 [ 226.418206][ T9292] ? __pfx_do_sys_openat2+0x10/0x10 [ 226.418230][ T9292] ? ksys_write+0x242/0x270 [ 226.418259][ T9292] ? __pfx_ksys_write+0x10/0x10 [ 226.418290][ T9292] __x64_sys_openat+0x138/0x170 [ 226.418318][ T9292] do_syscall_64+0x166/0x520 [ 226.418336][ T9292] ? trace_irq_disable+0x3b/0x140 [ 226.418364][ T9292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.418385][ T9292] ? clear_bhb_loop+0x70/0xc0 [ 226.418409][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.418429][ T9292] RIP: 0033:0x7f72ea95e98e [ 226.418448][ T9292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.418465][ T9292] RSP: 002b:00007f72eb84bf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.418487][ T9292] RAX: ffffffffffffffda RBX: 00007f72eb84c6c0 RCX: 00007f72ea95e98e [ 226.418503][ T9292] RDX: 0000000000000000 RSI: 00007f72eaa34776 RDI: ffffffffffffff9c [ 226.418517][ T9292] RBP: 00007f72eb84c090 R08: 0000000000000000 R09: 0000000000000000 [ 226.418530][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.418549][ T9292] R13: 00007f72eac26038 R14: 00007f72eac25fa0 R15: 00007ffd386784b8 [ 226.418582][ T9292] [ 226.755205][ T5755] usb 2-1: USB disconnect, device number 20 [ 227.212788][ T9299] overlayfs: maximum fs stacking depth exceeded [ 227.246751][ T9299] binfmt_misc: Unknown parameter '/file0' [ 227.342008][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.343291][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.343464][ T9242] bridge_slave_0: entered allmulticast mode [ 227.377044][ T9242] bridge_slave_0: entered promiscuous mode [ 227.388687][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.388790][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.394794][ T9242] bridge_slave_1: entered allmulticast mode [ 227.420157][ T9242] bridge_slave_1: entered promiscuous mode [ 227.564097][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.600712][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.725876][ T52] Bluetooth: hci3: command tx timeout [ 227.912901][ T9242] team0: Port device team_slave_0 added [ 227.935507][ T9242] team0: Port device team_slave_1 added [ 228.084913][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.084924][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.084950][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.383982][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.383994][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.384020][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.612021][ T9242] hsr_slave_0: entered promiscuous mode [ 228.637938][ T9242] hsr_slave_1: entered promiscuous mode [ 228.638797][ T9242] debugfs: 'hsr0' already exists in 'hsr' [ 228.638813][ T9242] Cannot create hsr debugfs directory [ 229.807069][ T52] Bluetooth: hci3: command tx timeout [ 231.009505][ T8848] net_ratelimit: 51 callbacks suppressed [ 231.083283][ T9350] sock: sock_set_timeout: `syz.4.1249' (pid 9350) tries to set negative timeout [ 231.236055][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 231.614256][ T9242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.652653][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.654365][ T9242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.748416][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.751186][ T9242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.799617][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 231.823710][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.834039][ T9242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.882469][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 231.886511][ T52] Bluetooth: hci3: command tx timeout [ 232.005735][ T25] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 232.005760][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 232.005810][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.016901][ T25] usb 2-1: config 0 descriptor?? [ 232.068616][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.524068][ T25] hid_parser_main: 5 callbacks suppressed [ 232.524085][ T25] lenovo 0003:17EF:60FE.0006: unknown main item tag 0x6 [ 232.524271][ T25] lenovo 0003:17EF:60FE.0006: ignoring exceeding usage max [ 232.552618][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.684749][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.685251][ T9348] tipc: Started in network mode [ 232.685277][ T9348] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 232.713072][ T9348] tipc: Enabled bearer , priority 10 [ 232.745868][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.745969][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.819579][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.819679][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.822218][ T25] lenovo 0003:17EF:60FE.0006: hidraw0: USB HID v0.05 Device [HID 17ef:60fe] on usb-dummy_hcd.1-1/input0 [ 233.104606][ T25] usb 2-1: USB disconnect, device number 21 [ 233.461120][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 233.463815][ T9377] fido_id[9377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 233.908152][ T5755] tipc: Node number set to 9349802 [ 236.618081][ C0] net_ratelimit: 59 callbacks suppressed [ 242.859151][ C0] net_ratelimit: 8 callbacks suppressed [ 256.691913][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.705310][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.332658][ C0] net_ratelimit: 24 callbacks suppressed [ 281.502498][ T5706] net_ratelimit: 4 callbacks suppressed [ 286.534578][ T5698] net_ratelimit: 19 callbacks suppressed [ 297.153098][ T59] net_ratelimit: 4 callbacks suppressed [ 303.209920][ T59] net_ratelimit: 3 callbacks suppressed [ 314.670389][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 315.750159][ T13] net_ratelimit: 2 callbacks suppressed [ 317.274273][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.288856][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.260265][ C0] net_ratelimit: 39 callbacks suppressed [ 337.768258][ T8847] net_ratelimit: 22 callbacks suppressed [ 343.122846][ T8845] net_ratelimit: 16 callbacks suppressed [ 349.801195][ T185] net_ratelimit: 24 callbacks suppressed [ 352.496732][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 355.655605][ T5685] net_ratelimit: 16 callbacks suppressed [ 361.248141][ T7690] net_ratelimit: 4 callbacks suppressed [ 367.470941][ T192] net_ratelimit: 14 callbacks suppressed [ 372.479237][ T5705] net_ratelimit: 2 callbacks suppressed [ 377.727317][ C0] net_ratelimit: 1 callbacks suppressed [ 378.696274][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.707934][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.011478][ C1] net_ratelimit: 4 callbacks suppressed [ 388.262956][ T50] net_ratelimit: 4 callbacks suppressed [ 393.567021][ T12] net_ratelimit: 9 callbacks suppressed [ 399.644674][ T1057] net_ratelimit: 10 callbacks suppressed [ 405.551216][ T185] net_ratelimit: 1 callbacks suppressed [ 422.266563][ T50] net_ratelimit: 2 callbacks suppressed [ 432.859302][ T9402] net_ratelimit: 9 callbacks suppressed [ 439.537571][ T59] net_ratelimit: 5 callbacks suppressed [ 440.975233][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.987877][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.017196][ T9] net_ratelimit: 3 callbacks suppressed [ 450.738100][ T9] net_ratelimit: 4 callbacks suppressed [ 458.916014][ C1] virtqueue callback for ffff888025575000 (ffffffff86c736f0) [ 458.921755][ C1] No more buffers in queue [ 458.922412][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 458.922436][ C1] No more buffers in queue [ 458.922709][ C1] eth0: xmit ffff888166268000 42:01:0a:80:00:01 [ 458.922737][ C1] Added buffer head 16 to ffff888025574e00 [ 458.923036][ C1] virtqueue callback for ffff888025574e00 (ffffffff86c73830) [ 458.935435][ C1] Sent skb ffff888166268000 [ 458.935489][ C1] No more buffers in queue [ 459.340972][ T9403] wireguard: wg1: Receiving handshake initiation from peer 10 (127.0.0.1:20003) [ 459.341008][ T9403] wireguard: wg1: Sending handshake response to peer 10 (127.0.0.1:20003) [ 459.401535][ T12] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 459.432736][ T5682] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 459.479871][ T192] wireguard: wg1: Receiving handshake initiation from peer 16 (127.0.0.1:20003) [ 459.479908][ T192] wireguard: wg1: Sending handshake response to peer 16 (127.0.0.1:20003) [ 459.788147][ T10] wireguard: wg1: Keypair 65 destroyed for peer 35 [ 460.453209][ C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 461.662650][ T32] INFO: task kworker/0:4:5686 blocked for more than 145 seconds. [ 461.662678][ T32] Not tainted syzkaller #0 [ 461.662690][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.662700][ T32] task:kworker/0:4 state:D stack:21280 pid:5686 tgid:5686 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 461.662757][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 461.662808][ T32] Call Trace: [ 461.662819][ T32] [ 461.662834][ T32] __schedule+0x17dd/0x5940 [ 461.662880][ T32] ? __pfx___schedule+0x10/0x10 [ 461.662908][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 461.662939][ T32] ? __pfx___schedule+0x10/0x10 [ 461.662975][ T32] ? schedule+0x90/0x2b0 [ 461.663005][ T32] schedule+0x164/0x2b0 [ 461.663035][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.663070][ T32] __mutex_lock+0x7c4/0x15a0 [ 461.663095][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 461.663119][ T32] ? reg_check_chans_work+0x1a1/0x1110 [ 461.663150][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.663180][ T32] ? add_lock_to_list+0xc7/0x100 [ 461.663207][ T32] reg_check_chans_work+0x1a1/0x1110 [ 461.663252][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 461.663285][ T32] ? lock_acquire+0x115/0x350 [ 461.663321][ T32] ? rcu_is_watching+0x16/0xb0 [ 461.663344][ T32] ? process_scheduled_works+0x97a/0x1630 [ 461.663368][ T32] process_scheduled_works+0xc3d/0x1630 [ 461.663420][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.663451][ T32] ? assign_work+0x3cf/0x5d0 [ 461.663478][ T32] worker_thread+0xa47/0xfb0 [ 461.663516][ T32] ? __kthread_parkme+0x71/0x1f0 [ 461.663550][ T32] kthread+0x38b/0x480 [ 461.663577][ T32] ? __pfx_worker_thread+0x10/0x10 [ 461.663600][ T32] ? __pfx_kthread+0x10/0x10 [ 461.663628][ T32] ret_from_fork+0x514/0xb70 [ 461.663659][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 461.663686][ T32] ? __switch_to+0xc89/0x1420 [ 461.663713][ T32] ? __pfx_kthread+0x10/0x10 [ 461.663741][ T32] ret_from_fork_asm+0x1a/0x30 [ 461.663784][ T32] [ 461.663817][ T32] INFO: task syz-executor:9242 blocked for more than 145 seconds. [ 461.663833][ T32] Not tainted syzkaller #0 [ 461.663843][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.663853][ T32] task:syz-executor state:D stack:21928 pid:9242 tgid:9242 ppid:9226 task_flags:0x400140 flags:0x00080000 [ 461.663907][ T32] Call Trace: [ 461.663914][ T32] [ 461.663927][ T32] __schedule+0x17dd/0x5940 [ 461.663982][ T32] ? __pfx___schedule+0x10/0x10 [ 461.664018][ T32] ? schedule+0x90/0x2b0 [ 461.664048][ T32] schedule+0x164/0x2b0 [ 461.664085][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.664113][ T32] __mutex_lock+0x7c4/0x15a0 [ 461.664137][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 461.664160][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 461.664183][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.664213][ T32] ? ns_capable+0x84/0xe0 [ 461.664237][ T32] ? rtnl_nets_add+0x16c/0x300 [ 461.664257][ T32] ? refcount_inc+0x46/0x70 [ 461.664286][ T32] rtnl_newlink+0xc10/0x1c30 [ 461.664319][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 461.664341][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.664375][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.664409][ T32] ? lock_acquire+0x115/0x350 [ 461.664442][ T32] ? lock_acquire+0x115/0x350 [ 461.664476][ T32] ? lock_acquire+0x115/0x350 [ 461.664511][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 461.664539][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.664572][ T32] ? __kernel_text_address+0xd/0x30 [ 461.664602][ T32] ? unwind_get_return_address+0x4d/0x90 [ 461.664622][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.664650][ T32] ? arch_stack_walk+0xfb/0x150 [ 461.664681][ T32] ? lock_acquire+0x115/0x350 [ 461.664708][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 461.664740][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 461.664759][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 461.664779][ T32] ? netlink_sendmsg+0x577/0xae0 [ 461.664808][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 461.664828][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 461.664850][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.664890][ T32] netlink_rcv_skb+0x226/0x4a0 [ 461.664916][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 461.664938][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.664976][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.665001][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.665031][ T32] netlink_unicast+0x7bd/0x940 [ 461.665072][ T32] netlink_sendmsg+0x7c3/0xae0 [ 461.665104][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.665138][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 461.665162][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.665187][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 461.665218][ T32] __sys_sendto+0x408/0x5a0 [ 461.665244][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 461.665262][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 461.665303][ T32] ? fput_close_sync+0x11f/0x240 [ 461.665327][ T32] ? kmem_cache_free+0x471/0x650 [ 461.665365][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 461.665398][ T32] __x64_sys_sendto+0xde/0x100 [ 461.665422][ T32] do_syscall_64+0x166/0x520 [ 461.665442][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.665464][ T32] ? clear_bhb_loop+0x70/0xc0 [ 461.665489][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.683538][ T32] RIP: 0033:0x7f219ef5e98e [ 461.683569][ T32] RSP: 002b:00007ffd61f3a618 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.683592][ T32] RAX: ffffffffffffffda RBX: 000055558f113500 RCX: 00007f219ef5e98e [ 461.683608][ T32] RDX: 0000000000000020 RSI: 00007f219fd54670 RDI: 0000000000000003 [ 461.683620][ T32] RBP: 0000000000000001 R08: 00007ffd61f3a694 R09: 000000000000000c [ 461.683634][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 461.683647][ T32] R13: 0000000000000000 R14: 00007f219fd54670 R15: 0000000000000000 [ 461.683678][ T32] [ 461.683708][ T32] [ 461.683708][ T32] Showing all locks held in the system: [ 461.683717][ T32] locks held by kthreadd/2: 2, last CPU#0: [ 461.683732][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 461.683792][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 461.683844][ T32] locks held by kworker/R-netns/8: 6, on CPU#0: [ 461.683858][ T32] #0: ffff88801bebe140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.683909][ T32] #1: ffffc900000d7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.683958][ T32] #2: ffffffff9045c4e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 461.684005][ T32] #3: ffff88802de78128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 461.684069][ T32] #4: ffff88802de7f258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 461.684126][ T32] #5: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 461.684182][ T32] locks held by kworker/0:0/9: 4, last CPU#0: [ 461.684197][ T32] #0: ffff88802890c140 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.684252][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.684316][ T32] #2: ffff88807b625440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 461.684371][ T32] #3: ffff88803343bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 461.684425][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 461.684439][ T32] #0: ffff8880699b5540 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.684495][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.684558][ T32] #2: ffff8880330ed440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 461.684612][ T32] #3: ffff88803343d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 461.684665][ T32] locks held by kworker/u8:0/12: 2, last CPU#0: [ 461.684679][ T32] #0: ffff88802af50940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.684732][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.684783][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 461.684797][ T32] #0: ffff888033e6d140 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.684847][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.684897][ T32] #2: ffff88807ed71440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 461.684951][ T32] #3: ffff888033337028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 461.685007][ T32] locks held by kworker/1:1/30: 2, last CPU#1: [ 461.685021][ T32] #0: ffff888034cbd140 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.685081][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.685145][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 461.685160][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 461.685209][ T32] locks held by kcompactd0/35: 1, last CPU#0: [ 461.685224][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 461.685273][ T32] locks held by kworker/u8:2/42: 3, last CPU#0: [ 461.685287][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.685337][ T32] #1: ffffc90000b27c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.685388][ T32] #2: ffff8880592c07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 461.685444][ T32] locks held by kworker/u8:3/50: 4, last CPU#0: [ 461.685458][ T32] #0: ffff888033e6c940 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.685508][ T32] #1: ffffc90000bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.703786][ T32] #2: ffff88807959d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 461.703844][ T32] #3: ffff888030b2e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 461.703900][ T32] locks held by kworker/u8:4/59: 4, last CPU#0: [ 461.703916][ T32] #0: ffff88807d170140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.703971][ T32] #1: ffffc9000201fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704022][ T32] #2: ffff888033e5d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 461.704098][ T32] #3: ffff888030b2bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 461.704151][ T32] locks held by kworker/u8:5/79: 3, last CPU#0: [ 461.704166][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704216][ T32] #1: ffffc900024bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704267][ T32] #2: ffff8880593e07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 461.704321][ T32] locks held by kswapd0/87: 2, last CPU#0: [ 461.704335][ T32] #0: ffffffff8f090420 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0x9e0/0x3260 [ 461.704382][ T32] #1: ffff8880354fb378 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: __rmap_walk_file+0x1a0/0x6a0 [ 461.704440][ T32] locks held by kworker/u8:6/158: 3, last CPU#0: [ 461.704454][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704504][ T32] #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704553][ T32] #2: ffff8880590507a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 461.704605][ T32] locks held by kworker/u8:7/166: 3, last CPU#0: [ 461.704619][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704669][ T32] #1: ffffc90002e5fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704718][ T32] #2: ffff888047ea07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 461.704771][ T32] locks held by kworker/u8:8/185: 2, last CPU#0: [ 461.704785][ T32] #0: ffff88802ae9f140 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704840][ T32] #1: ffffc90002fafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704891][ T32] locks held by kworker/0:2/192: 4, last CPU#0: [ 461.704905][ T32] #0: ffff88805a351540 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.704959][ T32] #1: ffffc9000304fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.705022][ T32] #2: ffff888033e59440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 461.705084][ T32] #3: ffff888030b2b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 461.705139][ T32] locks held by kworker/1:2/1057: 4, last CPU#1: [ 461.705153][ T32] #0: ffff888029db5540 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.705207][ T32] #1: ffffc90004f07c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.705271][ T32] #2: ffff88802d07d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 461.705325][ T32] #3: ffff888033335270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 461.705379][ T32] locks held by kworker/u8:9/1169: 3, last CPU#0: [ 461.705394][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.705444][ T32] #1: ffffc90005197c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 461.705494][ T32] #2: ffff8880698d07a0 ( [ 461.729437][ C1] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 462.526216][ T5755] net_ratelimit: 3 callbacks suppressed [ 462.526238][ T5755] wireguard: wg2: Keypair 82 destroyed for peer 18 [ 462.526271][ T5755] wireguard: wg2: Keypair 87 created for peer 18 [ 463.364270][ T50] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 463.364311][ T50] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 463.364334][ T50] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 463.364359][ T50] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 463.364383][ T50] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7f00:0001, type=128, ifindex=8) => 00000003 [ 463.496321][ C1] virtqueue callback for ffff888025575000 (ffffffff86c736f0) [ 463.502390][ C1] No more buffers in queue [ 463.502889][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 463.502911][ C1] No more buffers in queue [ 463.503057][ C1] eth0: xmit ffff88816a0ca000 42:01:0a:80:00:01 [ 463.503084][ C1] Added buffer head 16 to ffff888025574e00 [ 463.503134][ C1] virtqueue callback for ffff888025574e00 (ffffffff86c73830) [ 463.514297][ C1] Sent skb ffff88816a0ca000 [ 463.514348][ C1] No more buffers in queue [ 463.904687][ T50] wireguard: wg0: Sending handshake initiation to peer 33 ([::1]:20003/0%0) [ 463.976348][ C1] eth0: xmit ffff88816a264000 42:01:0a:80:00:01 [ 463.976385][ C1] Added buffer head 16 to ffff888025574e00 [ 463.976467][ C1] virtqueue callback for ffff888025574e00 (ffffffff86c73830) [ 463.977158][ C1] virtqueue callback for ffff888025575000 (ffffffff86c736f0) [ 463.987734][ C1] Sent skb ffff88816a264000 [ 463.987788][ C1] No more buffers in queue [ 463.987803][ C1] No more buffers in queue [ 463.987854][ C1] Receiving skb proto 0x0806 len 28 type 0 [ 463.987875][ C1] No more buffers in queue [ 464.623665][ C1] virtqueue callback for ffff888025575000 (ffffffff86c736f0) [ 464.626103][ C1] No more buffers in queue [ 464.626595][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 464.626620][ C1] No more buffers in queue [ 464.681635][ C1] eth0: xmit ffff88816a4ae780 42:01:0a:80:00:01 [ 464.681671][ C1] Added buffer head 16 to ffff888025574e00 [ 464.681997][ C1] virtqueue callback for ffff888025574e00 (ffffffff86c73830) [ 464.692520][ C1] Sent skb ffff88816a4ae780 [ 464.692564][ C1] No more buffers in queue [ 465.128935][ T185] wireguard: wg1: Sending handshake initiation to peer 35 (127.0.0.1:20003) [ 465.677537][ T12] wireguard: wg1: Sending handshake initiation to peer 15 ([::1]:20001/0%0) [ 467.684791][ T32] &rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 467.684850][ T32] locks held by kworker/u8:10/2206: 3, last CPU#0: [ 467.684867][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.684927][ T32] #1: ffffc90006a57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.684978][ T32] #2: ffff888069bf07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 467.685031][ T32] locks held by kworker/u8:11/2218: 3, last CPU#0: [ 467.685046][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.685096][ T32] #1: ffffc90006c07c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.685164][ T32] #2: ffff8880591507a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 467.685225][ T32] locks held by kworker/R-ipv6_/3196: 3, on CPU#1: [ 467.685240][ T32] #0: ffff888030ed9140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.685290][ T32] #1: ffffc9000dc3fc20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.685341][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 467.685400][ T32] locks held by kworker/R-bat_e/3227: 3, last CPU#1: [ 467.685415][ T32] #0: ffff8880325a8140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.685464][ T32] #1: ffffc9000e32fc20 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.702991][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 467.703062][ T32] locks held by kworker/u8:12/4138: 3, last CPU#0: [ 467.703078][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.703130][ T32] #1: ffffc9000f99fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.703180][ T32] #2: ffff88807fac07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 467.703237][ T32] locks held by kworker/1:3/4945: 3, last CPU#1: [ 467.703251][ T32] #0: ffff88802890c140 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.703307][ T32] #1: ffffc900050a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.703368][ T32] #2: ffff88803343b698 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 467.703421][ T32] locks held by klogd/4974: 2, last CPU#0: [ 467.703432][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 467.703486][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 467.703533][ T32] locks held by udevd/4985: 3, last CPU#0: [ 467.703547][ T32] #0: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 467.703596][ T32] #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 467.703648][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 467.703696][ T32] locks held by dhcpcd/5279: 1, last CPU#0: [ 467.703710][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 467.703765][ T32] locks held by dhcpcd/5280: 4, last CPU#0: [ 467.703778][ T32] #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470 [ 467.703827][ T32] #1: ffff88807b71e9b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 467.703880][ T32] #2: ffff88802b2736b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 467.703943][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 467.703997][ T32] locks held by getty/5371: 2, on CPU#0: [ 467.704012][ T32] #0: ffff8880324f40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 467.704068][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 467.704121][ T32] locks held by syz-executor/5611: 3, last CPU#0: [ 467.704136][ T32] #0: ffff88802940c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 467.704196][ T32] #1: ffff88801bbd3348 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 467.704261][ T32] #2: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 467.704315][ T32] locks held by syz-executor/5616: 1, on CPU#0: [ 467.704330][ T32] #0: ffff88801bb098f8 (&acct->lock#3){+.+.}-{4:4}, at: acct_pin_kill+0x2f/0x140 [ 467.704389][ T32] locks held by kworker/R-wg-cr/5684: 1, last CPU#1: [ 467.704404][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 467.704456][ T32] locks held by kworker/0:3/5685: 2, last CPU#0: [ 467.704471][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.704520][ T32] #1: ffffc900041ffc40 ((work_completion)(&acct->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.704570][ T32] locks held by kworker/0:4/5686: 4, on CPU#0: [ 467.704585][ T32] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.704635][ T32] #1: ffffc900042afc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.704684][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 467.704741][ T32] #3: ffff888047ea07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110 [ 467.704797][ T32] locks held by kworker/1:4/5693: 2, last CPU#1: [ 467.704812][ T32] #0: ffff88805a351540 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.704866][ T32] #1: ffffc9000432fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 467.704939][ T32] locks held by kworker/0:5/5700: 4, on CPU#0: [ 467.704953][ T32] #0: ffff888079d4dd40 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630