last executing test programs: 2m5.543454577s ago: executing program 3 (id=2385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2m5.293220916s ago: executing program 3 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000002200)={0x23, 0x0, 0x0, 0x1d}, 0x10) 2m2.583891515s ago: executing program 3 (id=2392): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000001000)="fc", 0xfffffdd8, 0x7) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) r3 = io_uring_setup(0x1b7b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) 1m57.034409407s ago: executing program 3 (id=2407): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x3, 0x0, [{0x80000000, 0x80000000, 0x6, 0x0, 0x200}, {0x40000001, 0x0, 0xffffffff, 0x3, 0x6}, {0x1, 0x7, 0x2, 0x80, 0x200}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002030104000000000000"], 0x1c}}, 0x0) 1m54.073582464s ago: executing program 3 (id=2415): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x280, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000002200)={0x23, 0x0, 0x0, 0x1d}, 0x10) 1m52.60836841s ago: executing program 3 (id=2419): openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x14c) 1m37.129778468s ago: executing program 32 (id=2419): openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x14c) 12.518364219s ago: executing program 4 (id=2697): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, &(0x7f0000000840)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) 9.660005996s ago: executing program 0 (id=2706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c010) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000240)={[{@filestreams}, {@usrquota}, {@noquota}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@nogrpid}, {@dax_inode}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 8.291345953s ago: executing program 4 (id=2713): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000 00000100000,user_id', @ANYRESDEC=0x0]) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r3 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000500)={0x0, 0x30bc, 0x100, 0x2, 0x1a6}, &(0x7f0000000080), &(0x7f0000000280), &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r6, &(0x7f0000002400)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0xea, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) close(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.965041727s ago: executing program 5 (id=2715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fc, 0x1, 0x42303159, 0x3, 0x8, [{0x8, 0xf}, {0x8, 0x8}, {0xa, 0x8}, {0x4000005, 0x8}, {0x0, 0x2003}, {0x7, 0x9}, {0x6, 0xb}, {0x5, 0x1c00000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x4}}) 7.854034318s ago: executing program 4 (id=2716): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x874) recvmsg$unix(r0, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.935213368s ago: executing program 5 (id=2717): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="10040000", @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="f10333008000e100ffffffffffff080211000000080211000001000000000000000000003f0003480301b3060204000587228401bb3c21a2f092ba11004508c58f080347392d8fdcc89308e73ba7c4579b8d75403abcfb2aadf8b466a3dec60be8d6099de59ea6b7462e2d2ab2f70e8ba108f8c809215deb81e96432d8976fb41a5cf5cccf59ee6bbe95bdceb4fd953b5b1ac4acb0e7b72516e55990a5ba025ae7185775a11014f832173cd8db9d2a9c845333aa8e7bbf8d2a01073c04010730442d1a0100060100000000000000040005000d000000010004000000817206030303030303760640b91c005000dd0f0c6068"], 0x410}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 6.847366434s ago: executing program 0 (id=2718): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 6.707443562s ago: executing program 2 (id=2720): r0 = socket(0x2, 0x80805, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x109, &(0x7f0000006680)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@loopback, 0x8, 0x2, 0x0, 0x1, 0x3}, 0x20) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x88) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x98}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x79a}, 0x8) 6.572926558s ago: executing program 5 (id=2721): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 6.004368309s ago: executing program 4 (id=2723): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, &(0x7f0000000840)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) 5.623974663s ago: executing program 0 (id=2724): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 5.495451918s ago: executing program 5 (id=2725): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 5.468177203s ago: executing program 1 (id=2726): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000 00000100000,user_id', @ANYRESDEC=0x0]) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r3 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000500)={0x0, 0x30bc, 0x100, 0x2, 0x1a6}, &(0x7f0000000080), &(0x7f0000000280), &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r6, &(0x7f0000002400)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0xea, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) close(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.300265476s ago: executing program 0 (id=2727): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.007375214s ago: executing program 5 (id=2728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fc, 0x1, 0x42303159, 0x3, 0x8, [{0x8, 0xf}, {0x8, 0x8}, {0xa, 0x8}, {0x4000005, 0x8}, {0x0, 0x2003}, {0x7, 0x9}, {0x6, 0xb}, {0x5, 0x1c00000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x4}}) 4.838373516s ago: executing program 1 (id=2729): bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) 4.370241788s ago: executing program 2 (id=2730): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x4) 4.248117561s ago: executing program 1 (id=2731): socket$inet6(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fgetxattr(r2, &(0x7f0000000040)=@known='system.advise\x00', &(0x7f0000000300)=""/244, 0xf4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x1, 0x7800, 0xffff, 0x8004, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @remote}}}}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 4.111386748s ago: executing program 2 (id=2732): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, 0xffffffffffffffff, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 2.91955178s ago: executing program 1 (id=2733): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x179}, {0x0}], 0x2}}], 0x1, 0x2090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x36d) 2.853527613s ago: executing program 2 (id=2734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 1.84552327s ago: executing program 2 (id=2735): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0x9b6f, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x8000, 0x1, 0x243}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x103aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97e8, 0x800, 0x14000001, 0xb2}}], 0x1, 0x0, 0x0) 1.590175099s ago: executing program 4 (id=2736): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygroup/myeve', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) 1.579057602s ago: executing program 0 (id=2737): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 1.567261694s ago: executing program 1 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) getrlimit(0x9, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000324c0)=""/102384, 0x18ff0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 210.240819ms ago: executing program 1 (id=2739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) read$char_usb(r0, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 186.636044ms ago: executing program 2 (id=2740): r0 = socket(0x2, 0x80805, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x109, &(0x7f0000006680)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@loopback, 0x8, 0x2, 0x0, 0x1, 0x3}, 0x20) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x88) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x98}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x79a}, 0x8) 186.454553ms ago: executing program 4 (id=2741): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x7) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) r3 = io_uring_setup(0x1b7b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) 660.34µs ago: executing program 0 (id=2742): socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]}) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) sendmsg$nl_generic(r2, 0x0, 0xc840) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0) 0s ago: executing program 5 (id=2743): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x6, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x9, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0x421, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x7, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xaca, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xffffffef, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x7, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x40000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): x188/0x24e [ 538.134573][ T8967] ? show_regs_print_info+0x12/0x12 [ 538.139771][ T8967] ? load_image+0x410/0x410 [ 538.144277][ T8967] ? __might_sleep+0xd0/0xd0 [ 538.148860][ T8967] ? __lock_acquire+0x7c40/0x7c40 [ 538.153902][ T8967] should_fail_ex+0x390/0x4c0 [ 538.158634][ T8967] should_failslab+0x5/0x20 [ 538.163173][ T8967] slab_pre_alloc_hook+0x59/0x300 [ 538.168238][ T8967] ? iter_file_splice_write+0x1a0/0xcf0 [ 538.173915][ T8967] __kmem_cache_alloc_node+0x4f/0x270 [ 538.179336][ T8967] ? iter_file_splice_write+0x1a0/0xcf0 [ 538.184943][ T8967] __kmalloc+0xa3/0x240 [ 538.189207][ T8967] iter_file_splice_write+0x1a0/0xcf0 [ 538.194648][ T8967] ? current_time+0x2c0/0x2c0 [ 538.199381][ T8967] ? generic_file_splice_read+0x23c/0x510 [ 538.205155][ T8967] ? splice_from_pipe+0x180/0x180 [ 538.210221][ T8967] ? splice_shrink_spd+0xc0/0xc0 [ 538.215187][ T8967] ? splice_from_pipe+0x180/0x180 [ 538.220229][ T8967] direct_splice_actor+0xe1/0x130 [ 538.225280][ T8967] splice_direct_to_actor+0x4b8/0xbd0 [ 538.230668][ T8967] ? direct_file_splice_eof+0xa0/0xa0 [ 538.236043][ T8967] ? pipe_to_sendpage+0x320/0x320 [ 538.241068][ T8967] ? common_file_perm+0x171/0x1c0 [ 538.246099][ T8967] ? fsnotify_perm+0x5a/0x550 [ 538.250788][ T8967] ? security_file_permission+0x75/0xa0 [ 538.256331][ T8967] do_splice_direct+0x1ce/0x2f0 [ 538.261197][ T8967] ? splice_direct_to_actor+0xbd0/0xbd0 [ 538.266754][ T8967] ? rcu_read_lock_any_held+0xb0/0x130 [ 538.272211][ T8967] ? do_splice_direct+0x2f0/0x2f0 [ 538.277233][ T8967] ? common_file_perm+0x171/0x1c0 [ 538.282262][ T8967] do_sendfile+0x51b/0xe20 [ 538.286678][ T8967] ? __ia32_sys_get_robust_list+0x100/0x100 [ 538.292567][ T8967] ? do_pwritev+0x3a0/0x3a0 [ 538.297063][ T8967] ? __might_fault+0xa6/0x120 [ 538.301741][ T8967] ? __might_fault+0xc2/0x120 [ 538.306417][ T8967] ? __might_fault+0xa6/0x120 [ 538.311106][ T8967] __se_sys_sendfile64+0xdc/0x1a0 [ 538.316126][ T8967] ? lock_chain_count+0x20/0x20 [ 538.320972][ T8967] ? __x64_sys_sendfile64+0xa0/0xa0 [ 538.326166][ T8967] ? lockdep_hardirqs_on+0x94/0x140 [ 538.331370][ T8967] do_syscall_64+0x4c/0xa0 [ 538.335785][ T8967] ? clear_bhb_loop+0x60/0xb0 [ 538.340471][ T8967] ? clear_bhb_loop+0x60/0xb0 [ 538.345143][ T8967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.351036][ T8967] RIP: 0033:0x7faca719e159 [ 538.355451][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.375056][ T8967] RSP: 002b:00007faca7fd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 538.383469][ T8967] RAX: ffffffffffffffda RBX: 00007faca7425fa0 RCX: 00007faca719e159 [ 538.391436][ T8967] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 538.399405][ T8967] RBP: 00007faca723506b R08: 0000000000000000 R09: 0000000000000000 [ 538.407375][ T8967] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 538.415371][ T8967] R13: 00007faca7426038 R14: 00007faca7425fa0 R15: 00007ffe27607768 [ 538.423355][ T8967] [ 538.997915][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 541.460582][ T9002] overlayfs: missing 'lowerdir' [ 545.652824][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 549.187605][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1377'. [ 549.520763][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 552.301286][ T5043] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 552.633290][ T5043] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.092649][ T9106] overlayfs: missing 'lowerdir' [ 553.627064][ T5043] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 553.640381][ T5043] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 553.853135][ T5043] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 553.871258][ T5043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 553.879463][ T5043] usb 2-1: Product: syz [ 553.885935][ T5043] usb 2-1: Manufacturer: syz [ 553.895996][ T5043] usb 2-1: SerialNumber: syz [ 553.925043][ T5043] usb 2-1: config 0 descriptor?? [ 553.959070][ T5043] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 553.981293][ T5043] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 553.988371][ T5043] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 554.575561][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 555.374626][ T14] usb 2-1: USB disconnect, device number 25 [ 556.981450][ T32] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 557.171305][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 557.200879][ T32] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 557.286858][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.352962][ T32] usb 2-1: Product: syz [ 557.357469][ T32] usb 2-1: Manufacturer: syz [ 557.371219][ T32] usb 2-1: SerialNumber: syz [ 557.427657][ T32] usb 2-1: config 0 descriptor?? [ 557.444960][ T32] usb 2-1: selecting invalid altsetting 1 [ 557.476541][ T32] technisat-usb2: could not set alternate setting to 0 [ 557.644153][ T32] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 557.676752][ T32] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 557.692810][ T32] usb 2-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 557.999100][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1407'. [ 558.641729][ T4326] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 558.912490][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 558.919717][ T4326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.949408][ T4326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.978974][ T4326] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.005954][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.049021][ T4326] usb 3-1: Product: syz [ 559.077368][ T4326] usb 3-1: Manufacturer: syz [ 559.086969][ T4326] usb 3-1: SerialNumber: syz [ 560.470411][ T4326] usb 3-1: 0:2 : does not exist [ 560.675112][ T4326] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 560.694796][ T4326] usb 3-1: USB disconnect, device number 14 [ 561.944989][ T9184] udevd[9184]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.985182][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.991605][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.213689][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1420'. [ 564.571261][ T8746] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 564.751338][ T8746] usb 5-1: Using ep0 maxpacket: 16 [ 564.777123][ T8746] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 564.879871][ T8746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.979023][ T8746] usb 5-1: Product: syz [ 565.058088][ T8746] usb 5-1: Manufacturer: syz [ 565.137306][ T8746] usb 5-1: SerialNumber: syz [ 565.335014][ T8746] usb 5-1: config 0 descriptor?? [ 565.353241][ T8746] usb 5-1: selecting invalid altsetting 1 [ 565.393965][ T8746] technisat-usb2: could not set alternate setting to 0 [ 565.681318][ T8746] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 566.561443][ T4404] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 567.011856][ T4404] usb 4-1: Using ep0 maxpacket: 16 [ 567.024592][ T4404] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.052356][ T4404] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.623647][ T4404] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.673342][ T4404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.711332][ T4404] usb 4-1: Product: syz [ 567.741451][ T4404] usb 4-1: Manufacturer: syz [ 567.757601][ T4404] usb 4-1: SerialNumber: syz [ 567.957937][ T9281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1436'. [ 568.943191][ T4404] usb 4-1: can't set config #1, error -71 [ 568.950898][ T4404] usb 4-1: USB disconnect, device number 28 [ 572.216172][ T9332] FAULT_INJECTION: forcing a failure. [ 572.216172][ T9332] name fail_futex, interval 1, probability 0, space 0, times 0 [ 572.255346][ T9332] CPU: 0 PID: 9332 Comm: syz.4.1451 Not tainted syzkaller #0 [ 572.262804][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 572.272899][ T9332] Call Trace: [ 572.276216][ T9332] [ 572.279177][ T9332] dump_stack_lvl+0x188/0x24e [ 572.283916][ T9332] ? show_regs_print_info+0x12/0x12 [ 572.289158][ T9332] ? load_image+0x410/0x410 [ 572.293721][ T9332] ? mark_lock+0x94/0x320 [ 572.298094][ T9332] ? __lock_acquire+0x1465/0x7c40 [ 572.303168][ T9332] should_fail_ex+0x390/0x4c0 [ 572.307886][ T9332] get_futex_key+0x1de/0x1000 [ 572.312594][ T9332] ? __stack_depot_save+0x35/0x480 [ 572.317753][ T9332] ? verify_lock_unused+0x140/0x140 [ 572.323009][ T9332] ? futex_setup_timer+0xc0/0xc0 [ 572.327988][ T9332] ? verify_lock_unused+0x140/0x140 [ 572.333236][ T9332] futex_wake+0x123/0x4f0 [ 572.337604][ T9332] ? futex_wake_mark+0x150/0x150 [ 572.342595][ T9332] do_futex+0x2e2/0x320 [ 572.346786][ T9332] ? __ia32_sys_get_robust_list+0x100/0x100 [ 572.352723][ T9332] ? __might_fault+0xc2/0x120 [ 572.357438][ T9332] mm_release+0x20a/0x330 [ 572.361810][ T9332] ? exit_robust_list+0x2ce/0x2f0 [ 572.366864][ T9332] ? exit_mm_release+0x30/0x30 [ 572.371659][ T9332] ? lockdep_hardirqs_on+0x94/0x140 [ 572.376907][ T9332] exit_mm+0xa0/0x350 [ 572.380930][ T9332] ? sysctl_delayacct+0x220/0x220 [ 572.386056][ T9332] ? do_exit+0x2570/0x2570 [ 572.390515][ T9332] ? mm_trace_rss_stat+0xa7/0x250 [ 572.395585][ T9332] ? sync_mm_rss+0x211/0x350 [ 572.400213][ T9332] do_exit+0x958/0x2570 [ 572.404424][ T9332] ? put_task_struct+0x80/0x80 [ 572.409241][ T9332] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 572.415272][ T9332] ? lock_chain_count+0x20/0x20 [ 572.420161][ T9332] ? _raw_spin_lock_irq+0xb7/0xf0 [ 572.425238][ T9332] do_group_exit+0x229/0x2e0 [ 572.429875][ T9332] ? lockdep_hardirqs_on+0x94/0x140 [ 572.435116][ T9332] get_signal+0x1259/0x1340 [ 572.439744][ T9332] arch_do_signal_or_restart+0xc4/0x1310 [ 572.445438][ T9332] ? __sys_sendto+0x514/0x650 [ 572.450157][ T9332] ? do_futex+0x310/0x320 [ 572.454539][ T9332] ? get_sigframe_size+0x10/0x10 [ 572.459519][ T9332] ? __ia32_sys_get_robust_list+0x100/0x100 [ 572.465461][ T9332] ? __lock_acquire+0x7c40/0x7c40 [ 572.470542][ T9332] ? exit_to_user_mode_loop+0x3b/0x110 [ 572.476047][ T9332] exit_to_user_mode_loop+0x70/0x110 [ 572.481371][ T9332] exit_to_user_mode_prepare+0xee/0x180 [ 572.486955][ T9332] syscall_exit_to_user_mode+0x16/0x40 [ 572.492450][ T9332] do_syscall_64+0x58/0xa0 [ 572.496897][ T9332] ? clear_bhb_loop+0x60/0xb0 [ 572.501607][ T9332] ? clear_bhb_loop+0x60/0xb0 [ 572.506316][ T9332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.512247][ T9332] RIP: 0033:0x7faca719e159 [ 572.516690][ T9332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.536344][ T9332] RSP: 002b:00007faca7fd80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 572.544804][ T9332] RAX: fffffffffffffe00 RBX: 00007faca7425fa8 RCX: 00007faca719e159 [ 572.552824][ T9332] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faca7425fa8 [ 572.560844][ T9332] RBP: 00007faca7425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 572.568852][ T9332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.576865][ T9332] R13: 00007faca7426038 R14: 00007ffe27607680 R15: 00007ffe27607768 [ 572.584872][ T9332] [ 572.741378][ T4344] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 572.826227][ T9338] kvm [9337]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 572.938994][ T9338] kvm [9337]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000000000 [ 572.986352][ T9338] kvm [9337]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800000000000 [ 573.001386][ T9338] kvm [9337]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 573.009702][ T9338] kvm [9337]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 573.821254][ T4344] usb 4-1: Using ep0 maxpacket: 16 [ 573.829141][ T4344] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.841408][ T4344] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 573.853487][ T4344] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.871349][ T4344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.901375][ T4344] usb 4-1: Product: syz [ 573.905628][ T4344] usb 4-1: Manufacturer: syz [ 573.910255][ T4344] usb 4-1: SerialNumber: syz [ 574.233033][ T4344] usb 4-1: 0:2 : does not exist [ 574.244357][ T4344] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 574.262914][ T4344] usb 4-1: USB disconnect, device number 29 [ 575.244155][ T9360] udevd[9360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.241123][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 576.257721][ T26] audit: type=1800 audit(1790824425.816:1193): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1467" name="c_chmask" dev="configfs" ino=59953 res=0 errno=0 [ 576.332850][ T9382] Config c/1 of g1 needs at least one function. [ 576.371568][ T26] audit: type=1800 audit(1790824425.896:1194): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1467" name="UDC" dev="configfs" ino=59958 res=0 errno=0 [ 576.386464][ T9382] udc dummy_udc.0: failed to start g1: -22 [ 577.730852][ T9382] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 577.746381][ T9382] UDC core: g1: couldn't find an available UDC or it's busy [ 578.171248][ T4326] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 578.351252][ T4326] usb 3-1: device descriptor read/64, error -71 [ 579.411280][ T4326] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 579.581591][ T4326] usb 3-1: device descriptor read/64, error -71 [ 579.774772][ T4326] usb usb3-port1: attempt power cycle [ 580.581321][ T4326] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 580.642658][ T4326] usb 3-1: device descriptor read/8, error -71 [ 580.911278][ T4326] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 581.023486][ T4326] usb 3-1: device descriptor read/8, error -71 [ 581.376681][ T4326] usb usb3-port1: unable to enumerate USB device [ 581.433122][ T9440] FAULT_INJECTION: forcing a failure. [ 581.433122][ T9440] name failslab, interval 1, probability 0, space 0, times 0 [ 581.447274][ T9440] CPU: 0 PID: 9440 Comm: syz.2.1489 Not tainted syzkaller #0 [ 581.454697][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 581.464790][ T9440] Call Trace: [ 581.468100][ T9440] [ 581.471061][ T9440] dump_stack_lvl+0x188/0x24e [ 581.475785][ T9440] ? show_regs_print_info+0x12/0x12 [ 581.481025][ T9440] ? load_image+0x410/0x410 [ 581.485575][ T9440] ? __might_sleep+0xd0/0xd0 [ 581.490198][ T9440] ? __lock_acquire+0x7c40/0x7c40 [ 581.495280][ T9440] should_fail_ex+0x390/0x4c0 [ 581.500005][ T9440] should_failslab+0x5/0x20 [ 581.504543][ T9440] slab_pre_alloc_hook+0x59/0x300 [ 581.509611][ T9440] ? memcg_list_lru_alloc+0x331/0xb00 [ 581.515028][ T9440] __kmem_cache_alloc_node+0x4f/0x270 [ 581.520441][ T9440] ? memcg_list_lru_alloc+0x331/0xb00 [ 581.525852][ T9440] __kmalloc+0xa3/0x240 [ 581.530051][ T9440] memcg_list_lru_alloc+0x331/0xb00 [ 581.535301][ T9440] ? slab_pre_alloc_hook+0xb1/0x300 [ 581.540539][ T9440] ? memcg_reparent_list_lrus+0x850/0x850 [ 581.546315][ T9440] ? get_obj_cgroup_from_current+0xd0/0x280 [ 581.552338][ T9440] ? get_obj_cgroup_from_current+0xd0/0x280 [ 581.558284][ T9440] slab_pre_alloc_hook+0x2ad/0x300 [ 581.563434][ T9440] ? slab_pre_alloc_hook+0xb1/0x300 [ 581.568674][ T9440] kmem_cache_alloc_lru+0x49/0x2e0 [ 581.573817][ T9440] ? new_inode_pseudo+0x7e/0x1c0 [ 581.578789][ T9440] new_inode_pseudo+0x7e/0x1c0 [ 581.583570][ T9440] new_inode+0x25/0x1d0 [ 581.587736][ T9440] ? __raw_spin_lock_init+0x41/0x100 [ 581.593030][ T9440] devpts_fill_super+0x282/0x900 [ 581.598031][ T9440] ? free_anon_bdev+0x20/0x20 [ 581.602718][ T9440] ? devpts_kill_sb+0x60/0x60 [ 581.607400][ T9440] mount_nodev+0x52/0xe0 [ 581.611654][ T9440] legacy_get_tree+0xe6/0x180 [ 581.616342][ T9440] ? devpts_pty_kill+0x280/0x280 [ 581.621307][ T9440] vfs_get_tree+0x88/0x270 [ 581.625754][ T9440] do_new_mount+0x247/0xa40 [ 581.630279][ T9440] __se_sys_mount+0x2e3/0x3d0 [ 581.634974][ T9440] ? __x64_sys_mount+0xc0/0xc0 [ 581.639752][ T9440] ? lockdep_hardirqs_on+0x94/0x140 [ 581.644963][ T9440] ? __x64_sys_mount+0x1c/0xc0 [ 581.649736][ T9440] do_syscall_64+0x4c/0xa0 [ 581.654160][ T9440] ? clear_bhb_loop+0x60/0xb0 [ 581.658842][ T9440] ? clear_bhb_loop+0x60/0xb0 [ 581.663528][ T9440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.669439][ T9440] RIP: 0033:0x7f9e6939e159 [ 581.673872][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.693505][ T9440] RSP: 002b:00007f9e6a22f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 581.701938][ T9440] RAX: ffffffffffffffda RBX: 00007f9e69625fa0 RCX: 00007f9e6939e159 [ 581.709924][ T9440] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 581.717914][ T9440] RBP: 00007f9e6943506b R08: 0000000000000000 R09: 0000000000000000 [ 581.725899][ T9440] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 581.733876][ T9440] R13: 00007f9e69626038 R14: 00007f9e69625fa0 R15: 00007ffc9c358078 [ 581.741886][ T9440] [ 587.157379][ T14] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 587.371565][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 587.399981][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 587.442378][ T26] audit: type=1326 audit(1790824437.016:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.2.1509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6939e159 code=0x7ffc0000 [ 587.568716][ T14] usb 1-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 587.914855][ T26] audit: type=1326 audit(1790824437.056:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.2.1509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6939e159 code=0x7ffc0000 [ 587.951615][ T26] audit: type=1326 audit(1790824437.056:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.2.1509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f9e6939e159 code=0x7ffc0000 [ 587.976176][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.976214][ T14] usb 1-1: Product: syz [ 587.976230][ T14] usb 1-1: Manufacturer: syz [ 587.976245][ T14] usb 1-1: SerialNumber: syz [ 588.006290][ T26] audit: type=1326 audit(1790824437.056:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.2.1509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6939e159 code=0x7ffc0000 [ 588.037189][ T26] audit: type=1326 audit(1790824437.066:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.2.1509" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6939e159 code=0x7ffc0000 [ 588.904032][ T14] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 588.945351][ T14] usb 1-1: USB disconnect, device number 28 [ 594.752000][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 599.041550][ T14] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 599.270565][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.301467][ T14] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 599.341269][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 599.370561][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 599.385795][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 599.398214][ T9653] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 599.411649][ T14] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 599.452943][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 599.468706][ T14] usb 3-1: Product: syz [ 599.602494][ T14] usb 3-1: Manufacturer: syz [ 599.658894][ T14] usb 3-1: SerialNumber: syz [ 600.872005][ T14] usb 3-1: config 0 descriptor?? [ 600.917188][ T14] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 600.965132][ T14] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 600.982394][ T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 602.019668][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1559'. [ 602.390092][ T4404] usb 3-1: USB disconnect, device number 19 [ 604.559455][ T9713] overlayfs: missing 'lowerdir' [ 604.767402][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 604.965540][ T9718] FAULT_INJECTION: forcing a failure. [ 604.965540][ T9718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.004764][ T9718] CPU: 1 PID: 9718 Comm: syz.1.1570 Not tainted syzkaller #0 [ 605.012203][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 605.022283][ T9718] Call Trace: [ 605.025591][ T9718] [ 605.028546][ T9718] dump_stack_lvl+0x188/0x24e [ 605.033266][ T9718] ? show_regs_print_info+0x12/0x12 [ 605.038495][ T9718] ? load_image+0x410/0x410 [ 605.043042][ T9718] ? __lock_acquire+0x7c40/0x7c40 [ 605.048105][ T9718] should_fail_ex+0x390/0x4c0 [ 605.052825][ T9718] _copy_from_user+0x2c/0x170 [ 605.057534][ T9718] iovec_from_user+0x143/0x360 [ 605.062341][ T9718] __import_iovec+0x6c/0x510 [ 605.066978][ T9718] import_iovec+0x6f/0xa0 [ 605.071347][ T9718] do_preadv+0x1f8/0x390 [ 605.075630][ T9718] ? do_writev+0x480/0x480 [ 605.080093][ T9718] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 605.086114][ T9718] ? lock_chain_count+0x20/0x20 [ 605.091005][ T9718] ? lockdep_hardirqs_on+0x94/0x140 [ 605.096233][ T9718] ? __x64_sys_preadv2+0xba/0x100 [ 605.101290][ T9718] do_syscall_64+0x4c/0xa0 [ 605.105735][ T9718] ? clear_bhb_loop+0x60/0xb0 [ 605.110443][ T9718] ? clear_bhb_loop+0x60/0xb0 [ 605.115185][ T9718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.121120][ T9718] RIP: 0033:0x7fd5fbd9e159 [ 605.125562][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.145199][ T9718] RSP: 002b:00007fd5fcc74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 605.153645][ T9718] RAX: ffffffffffffffda RBX: 00007fd5fc025fa0 RCX: 00007fd5fbd9e159 [ 605.161660][ T9718] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 605.169679][ T9718] RBP: 00007fd5fbe3506b R08: 0000000000007fff R09: 0000000000000000 [ 605.177685][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.185691][ T9718] R13: 00007fd5fc026038 R14: 00007fd5fc025fa0 R15: 00007ffc0e9ddc58 [ 605.193712][ T9718] [ 605.198682][ T9498] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 605.411462][ T9498] usb 3-1: Using ep0 maxpacket: 16 [ 605.428656][ T9498] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 605.461280][ T9498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.469341][ T9498] usb 3-1: Product: syz [ 605.497172][ T9498] usb 3-1: Manufacturer: syz [ 605.507820][ T9498] usb 3-1: SerialNumber: syz [ 606.272162][ T9498] usb 3-1: config 0 descriptor?? [ 606.284642][ T9498] usb 3-1: selecting invalid altsetting 1 [ 606.290449][ T9498] technisat-usb2: could not set alternate setting to 0 [ 606.489446][ T9498] technisat-usb2: firmware version: 0.0 [ 606.498922][ T9498] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 606.904480][ T9498] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 606.946645][ T9498] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 606.956770][ T9498] usb 3-1: media controller created [ 606.969203][ T9498] technisat-usb2: i2c-error: out failed 53 = -22 [ 606.977740][ T9498] dvb-usb: MAC address reading failed. [ 607.010997][ T9498] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.042035][ T4381] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 607.101514][ T9709] technisat-usb2: i2c-error: out failed 41 = -22 [ 607.785810][ T4381] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.891202][ T4381] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.954069][ T4381] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 608.005478][ T9498] DVB: Unable to find symbol stv090x_attach() [ 608.017104][ T9498] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 608.029557][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.080918][ T9738] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 608.357433][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 609.363972][ T9768] overlayfs: missing 'lowerdir' [ 609.381564][ T4282] Bluetooth: Wrong link type (-22) [ 610.481237][ T9498] rc_core: IR keymap rc-technisat-usb2 not found [ 610.552170][ T9498] Registered IR keymap rc-empty [ 610.564383][ T9498] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 610.584613][ T9498] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input45 [ 610.620858][ T9498] dvb-usb: schedule remote query interval to 100 msecs. [ 610.633459][ T9498] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 610.761973][ T9498] usb 3-1: USB disconnect, device number 20 [ 610.818535][ T9498] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 611.681918][ T4262] usb 1-1: USB disconnect, device number 29 [ 612.011600][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1588'. [ 612.080764][ T9794] Bluetooth: MGMT ver 1.22 [ 614.571617][ T9810] overlayfs: missing 'lowerdir' [ 615.238124][ T4282] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 615.241254][ T9795] Bluetooth: hci1: command 0x0c24 tx timeout [ 619.710842][ T9860] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1608'. [ 619.724280][ T9859] overlayfs: missing 'lowerdir' [ 620.442854][ T8746] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 620.444710][ T32] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 620.685340][ T8746] usb 5-1: USB disconnect, device number 22 [ 620.767982][ T32] usb 2-1: USB disconnect, device number 26 [ 622.351440][ T14] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 622.712177][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.724970][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.735134][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.748259][ T14] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 622.757736][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.771087][ T14] usb 3-1: config 0 descriptor?? [ 624.632003][ T9907] overlayfs: missing 'lowerdir' [ 624.969150][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.986097][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.616644][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 626.624935][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 626.633555][ T14] usb 3-1: USB disconnect, device number 21 [ 628.844959][ T9952] overlayfs: missing 'lowerdir' [ 631.372636][ T4328] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 631.661393][ T4329] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 631.708236][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.911459][ T4329] usb 1-1: device descriptor read/64, error -71 [ 631.957967][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.011388][ T4328] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.721257][ T4328] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 632.740720][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.760812][ T4328] usb 5-1: config 0 descriptor?? [ 632.766150][ T4329] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 632.981529][ T4329] usb 1-1: device descriptor read/64, error -71 [ 633.162101][ T4329] usb usb1-port1: attempt power cycle [ 633.241521][ T4328] usbhid 5-1:0.0: can't add hid device: -71 [ 633.249031][ T4328] usbhid: probe of 5-1:0.0 failed with error -71 [ 633.321415][ T4328] usb 5-1: USB disconnect, device number 23 [ 633.571302][ T4329] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 633.614532][ T4329] usb 1-1: device descriptor read/8, error -71 [ 633.901365][ T4329] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 633.982115][ T4329] usb 1-1: device descriptor read/8, error -71 [ 634.137190][ T4329] usb usb1-port1: unable to enumerate USB device [ 635.331759][T10007] overlayfs: missing 'lowerdir' [ 636.381239][ T4329] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 636.468577][T10024] tipc: Started in network mode [ 636.489279][T10024] tipc: Node identity 0ef12d608b9, cluster identity 4711 [ 636.497004][T10024] tipc: Enabled bearer , priority 0 [ 636.593340][ T4329] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.611503][ T4329] usb 1-1: config 0 has no interfaces? [ 636.617278][ T4329] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 636.627076][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.651917][ T4329] usb 1-1: config 0 descriptor?? [ 636.998651][T10021] tipc: Disabling bearer [ 637.151238][ T14] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 637.352827][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.371236][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.381374][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.396734][ T14] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 637.408383][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.429304][ T14] usb 2-1: config 0 descriptor?? [ 637.441293][ T4329] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 637.601282][ T4329] usb 4-1: device descriptor read/64, error -71 [ 637.848364][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 637.858981][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 637.871286][ T4329] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 637.887719][ T14] usb 2-1: USB disconnect, device number 27 [ 637.974524][T10045] Bluetooth: MGMT ver 1.22 [ 637.983671][ T4328] usb 1-1: USB disconnect, device number 34 [ 638.041271][ T4329] usb 4-1: device descriptor read/64, error -71 [ 638.220230][ T4329] usb usb4-port1: attempt power cycle [ 638.731579][ T4329] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 639.201945][ T4329] usb 4-1: device descriptor read/8, error -71 [ 639.477318][T10064] overlayfs: missing 'lowerdir' [ 640.294620][ T4329] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 640.959165][T10045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.147427][ T4329] usb 4-1: device descriptor read/8, error -71 [ 641.283914][ T4329] usb usb4-port1: unable to enumerate USB device [ 645.530790][T10103] overlayfs: missing 'lowerdir' [ 651.064542][T10159] FAULT_INJECTION: forcing a failure. [ 651.064542][T10159] name failslab, interval 1, probability 0, space 0, times 0 [ 651.134272][T10160] overlayfs: missing 'lowerdir' [ 651.881557][T10159] CPU: 1 PID: 10159 Comm: syz.0.1691 Not tainted syzkaller #0 [ 651.889101][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.899199][T10159] Call Trace: [ 651.902514][T10159] [ 651.905491][T10159] dump_stack_lvl+0x188/0x24e [ 651.910227][T10159] ? show_regs_print_info+0x12/0x12 [ 651.915480][T10159] ? load_image+0x410/0x410 [ 651.920045][T10159] ? __might_sleep+0xd0/0xd0 [ 651.924649][T10159] ? __lock_acquire+0x7c40/0x7c40 [ 651.929694][T10159] should_fail_ex+0x390/0x4c0 [ 651.934391][T10159] should_failslab+0x5/0x20 [ 651.938903][T10159] slab_pre_alloc_hook+0x59/0x300 [ 651.943948][T10159] ? iter_file_splice_write+0x1a0/0xcf0 [ 651.949513][T10159] __kmem_cache_alloc_node+0x4f/0x270 [ 651.954897][T10159] ? iter_file_splice_write+0x1a0/0xcf0 [ 651.960465][T10159] __kmalloc+0xa3/0x240 [ 651.964643][T10159] iter_file_splice_write+0x1a0/0xcf0 [ 651.970030][T10159] ? current_time+0x2c0/0x2c0 [ 651.974733][T10159] ? generic_file_splice_read+0x23c/0x510 [ 651.980476][T10159] ? splice_from_pipe+0x180/0x180 [ 651.985524][T10159] ? splice_shrink_spd+0xc0/0xc0 [ 651.990495][T10159] ? splice_from_pipe+0x180/0x180 [ 651.995535][T10159] direct_splice_actor+0xe1/0x130 [ 652.000579][T10159] splice_direct_to_actor+0x4b8/0xbd0 [ 652.005988][T10159] ? direct_file_splice_eof+0xa0/0xa0 [ 652.011380][T10159] ? pipe_to_sendpage+0x320/0x320 [ 652.016420][T10159] ? common_file_perm+0x171/0x1c0 [ 652.021469][T10159] ? fsnotify_perm+0x5a/0x550 [ 652.026157][T10159] ? security_file_permission+0x75/0xa0 [ 652.031732][T10159] do_splice_direct+0x1ce/0x2f0 [ 652.036601][T10159] ? splice_direct_to_actor+0xbd0/0xbd0 [ 652.042169][T10159] ? rcu_read_lock_any_held+0xb0/0x130 [ 652.047639][T10159] ? do_splice_direct+0x2f0/0x2f0 [ 652.052682][T10159] ? common_file_perm+0x171/0x1c0 [ 652.057737][T10159] do_sendfile+0x51b/0xe20 [ 652.062170][T10159] ? __ia32_sys_get_robust_list+0x100/0x100 [ 652.068073][T10159] ? do_pwritev+0x3a0/0x3a0 [ 652.072588][T10159] ? __might_fault+0xa6/0x120 [ 652.077278][T10159] ? __might_fault+0xc2/0x120 [ 652.081966][T10159] ? __might_fault+0xa6/0x120 [ 652.086655][T10159] __se_sys_sendfile64+0xdc/0x1a0 [ 652.091689][T10159] ? lock_chain_count+0x20/0x20 [ 652.096554][T10159] ? __x64_sys_sendfile64+0xa0/0xa0 [ 652.101761][T10159] ? lockdep_hardirqs_on+0x94/0x140 [ 652.106975][T10159] do_syscall_64+0x4c/0xa0 [ 652.111400][T10159] ? clear_bhb_loop+0x60/0xb0 [ 652.116090][T10159] ? clear_bhb_loop+0x60/0xb0 [ 652.120781][T10159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 652.126691][T10159] RIP: 0033:0x7ff2f619e159 [ 652.131115][T10159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.150740][T10159] RSP: 002b:00007ff2f6fbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 652.159166][T10159] RAX: ffffffffffffffda RBX: 00007ff2f6425fa0 RCX: 00007ff2f619e159 [ 652.167148][T10159] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 652.175125][T10159] RBP: 00007ff2f623506b R08: 0000000000000000 R09: 0000000000000000 [ 652.183107][T10159] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 652.191083][T10159] R13: 00007ff2f6426038 R14: 00007ff2f6425fa0 R15: 00007ffdfbe2ea68 [ 652.199077][T10159] [ 653.811257][ T4326] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 654.033042][ T4326] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.091223][ T4326] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 654.111553][ T4326] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.138620][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.173473][T10179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 656.136049][ T4329] usb 3-1: USB disconnect, device number 22 [ 661.221367][ T4344] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 661.506296][ T4344] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 661.528104][ T4344] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 661.550417][ T4344] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 661.586167][ T4344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.604625][T10275] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 661.896739][T10297] FAULT_INJECTION: forcing a failure. [ 661.896739][T10297] name failslab, interval 1, probability 0, space 0, times 0 [ 661.917860][T10297] CPU: 1 PID: 10297 Comm: syz.2.1730 Not tainted syzkaller #0 [ 661.925399][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 661.935491][T10297] Call Trace: [ 661.938800][T10297] [ 661.941758][T10297] dump_stack_lvl+0x188/0x24e [ 661.946479][T10297] ? show_regs_print_info+0x12/0x12 [ 661.951714][T10297] ? load_image+0x410/0x410 [ 661.956260][T10297] ? __might_sleep+0xd0/0xd0 [ 661.960889][T10297] ? __lock_acquire+0x7c40/0x7c40 [ 661.965965][T10297] should_fail_ex+0x390/0x4c0 [ 661.970694][T10297] should_failslab+0x5/0x20 [ 661.975236][T10297] slab_pre_alloc_hook+0x59/0x300 [ 661.980305][T10297] ? snd_midi_event_new+0x91/0x1e0 [ 661.985539][T10297] __kmem_cache_alloc_node+0x4f/0x270 [ 661.990959][T10297] ? snd_midi_event_new+0x91/0x1e0 [ 661.996123][T10297] __kmalloc+0xa3/0x240 [ 662.000330][T10297] snd_midi_event_new+0x91/0x1e0 [ 662.005320][T10297] snd_virmidi_output_open+0xee/0x510 [ 662.010791][T10297] open_substream+0x32c/0x6c0 [ 662.015543][T10297] rawmidi_open_priv+0xc4/0x620 [ 662.020411][T10297] snd_rawmidi_open+0x45e/0xae0 [ 662.025285][T10297] ? snd_rawmidi_ioctl_compat+0x6f0/0x6f0 [ 662.031021][T10297] ? do_task_dead+0xd0/0xd0 [ 662.035591][T10297] ? __kobject_del+0x2e0/0x2e0 [ 662.040378][T10297] ? memset+0x1e/0x40 [ 662.044369][T10297] ? snd_open+0x2f7/0x380 [ 662.048757][T10297] chrdev_open+0x585/0x5f0 [ 662.053191][T10297] ? cd_forget+0x160/0x160 [ 662.057619][T10297] ? fsnotify_perm+0x39b/0x550 [ 662.062397][T10297] ? cd_forget+0x160/0x160 [ 662.066825][T10297] do_dentry_open+0x7dd/0x10b0 [ 662.071610][T10297] path_openat+0x2674/0x2f10 [ 662.076224][T10297] ? verify_lock_unused+0x140/0x140 [ 662.081437][T10297] ? do_sys_openat2+0xdd/0x4f0 [ 662.086221][T10297] ? do_filp_open+0x420/0x420 [ 662.090922][T10297] do_filp_open+0x1ee/0x420 [ 662.095439][T10297] ? vfs_tmpfile+0x470/0x470 [ 662.100055][T10297] ? _raw_spin_unlock+0x24/0x40 [ 662.104921][T10297] ? alloc_fd+0x590/0x640 [ 662.109269][T10297] do_sys_openat2+0x14b/0x4f0 [ 662.113964][T10297] ? do_sys_open+0xe0/0xe0 [ 662.118397][T10297] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 662.124398][T10297] ? lock_chain_count+0x20/0x20 [ 662.129285][T10297] __x64_sys_openat+0x135/0x160 [ 662.134178][T10297] do_syscall_64+0x4c/0xa0 [ 662.138620][T10297] ? clear_bhb_loop+0x60/0xb0 [ 662.143316][T10297] ? clear_bhb_loop+0x60/0xb0 [ 662.148009][T10297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.153938][T10297] RIP: 0033:0x7f9e6935e98e [ 662.158366][T10297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 662.177990][T10297] RSP: 002b:00007f9e6a22eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 662.186426][T10297] RAX: ffffffffffffffda RBX: 00007f9e6a22f6c0 RCX: 00007f9e6935e98e [ 662.194408][T10297] RDX: 0000000000141102 RSI: 00007f9e6a22ec00 RDI: ffffffffffffff9c [ 662.202390][T10297] RBP: 00007f9e6a22ec00 R08: 0000000000000000 R09: 0000000000000000 [ 662.210367][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 662.218350][T10297] R13: 00007f9e69626038 R14: 00007f9e69625fa0 R15: 00007ffc9c358078 [ 662.226345][T10297] [ 662.295201][ T5440] usb 2-1: USB disconnect, device number 28 [ 662.301255][ T4344] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 662.491906][ T4344] usb 4-1: Using ep0 maxpacket: 32 [ 662.504089][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.520288][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.532153][ T4344] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 662.545483][ T4344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.565094][ T4344] usb 4-1: config 0 descriptor?? [ 662.582113][ T4344] hub 4-1:0.0: USB hub found [ 664.477177][ T4344] hub 4-1:0.0: 1 port detected [ 665.189796][ T14] hub 4-1:0.0: activate --> -90 [ 665.638941][ T4262] usb 4-1: USB disconnect, device number 34 [ 665.646720][ T14] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 665.710196][ T14] usb 4-1-port1: connect-debounce failed [ 666.421303][ T4262] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 666.661549][ T4262] usb 2-1: device descriptor read/64, error -71 [ 666.941478][ T4262] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 667.161397][ T4262] usb 2-1: device descriptor read/64, error -71 [ 667.439761][ T4262] usb usb2-port1: attempt power cycle [ 667.841366][ T14] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 667.881287][ T4262] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 667.921945][ T4262] usb 2-1: device descriptor read/8, error -71 [ 668.050012][ T14] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 668.109156][ T14] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 668.191380][ T4262] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 668.226868][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 668.253215][ T4262] usb 2-1: device descriptor read/8, error -71 [ 668.333069][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.416046][ T4262] usb usb2-port1: unable to enumerate USB device [ 668.539571][T10344] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 669.547708][ T14] usb 1-1: USB disconnect, device number 35 [ 670.318837][T10222] udevd[10222]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.711881][ T5440] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 675.235606][T10420] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 675.235606][T10420] program syz.4.1769 not setting count and/or reply_len properly [ 677.381168][ C0] hrtimer: interrupt took 46035 ns [ 677.847971][ T26] audit: type=1326 audit(1790824527.426:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.2.1777" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6939e159 code=0x7ffc0000 [ 677.935285][ T26] audit: type=1326 audit(1790824527.426:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.2.1777" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9e6939e159 code=0x7ffc0000 [ 678.009035][ T26] audit: type=1326 audit(1790824527.426:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.2.1777" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6939e159 code=0x7ffc0000 [ 678.275803][ T5440] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 678.321212][ T22] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 678.461492][ T5440] usb 3-1: Using ep0 maxpacket: 16 [ 678.469820][ T5440] usb 3-1: no configurations [ 678.499974][ T5440] usb 3-1: can't read configurations, error -22 [ 678.519385][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 678.542969][ T22] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 678.623821][ T22] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 678.660048][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.700015][ T22] usb 1-1: Product: syz [ 678.711283][ T5440] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 678.756714][ T22] usb 1-1: Manufacturer: syz [ 678.787358][ T22] usb 1-1: SerialNumber: syz [ 678.921416][ T5440] usb 3-1: Using ep0 maxpacket: 16 [ 678.952330][ T5440] usb 3-1: no configurations [ 679.029724][ T5440] usb 3-1: can't read configurations, error -22 [ 679.189036][ T5440] usb usb3-port1: attempt power cycle [ 679.721387][ T5440] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 679.813473][ T5440] usb 3-1: Using ep0 maxpacket: 16 [ 679.845322][ T22] usb 1-1: USB disconnect, device number 36 [ 679.901067][ T5440] usb 3-1: no configurations [ 679.985509][ T5440] usb 3-1: can't read configurations, error -22 [ 680.241370][ T5440] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 680.302824][ T5440] usb 3-1: Using ep0 maxpacket: 16 [ 680.447917][ T5440] usb 3-1: no configurations [ 680.572068][ T5440] usb 3-1: can't read configurations, error -22 [ 680.603898][T10220] udevd[10220]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.695255][ T5440] usb usb3-port1: unable to enumerate USB device [ 684.714884][T10515] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 684.724504][T10515] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 684.734604][T10515] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 684.806526][ T26] audit: type=1800 audit(1790824534.296:1203): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1789" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 685.864604][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.878023][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.243181][T10568] syz.0.1814 (10568) used greatest stack depth: 17088 bytes left [ 690.551198][ T22] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 690.978933][T10584] o2cb: This node has not been configured. [ 690.986468][T10584] o2cb: Cluster check failed. Fix errors before retrying. [ 690.994447][T10584] (syz.0.1816,10584,0):user_dlm_register:674 ERROR: status = -22 [ 691.002316][T10584] (syz.0.1816,10584,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 691.811384][ T22] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 691.840924][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.862282][ T22] usb 4-1: Product: syz [ 691.872177][ T22] usb 4-1: Manufacturer: syz [ 691.880454][ T22] usb 4-1: SerialNumber: syz [ 691.893562][ T22] usb 4-1: config 0 descriptor?? [ 694.165224][ T1204] usb 4-1: USB disconnect, device number 36 [ 706.104014][T10720] tipc: Started in network mode [ 706.212675][T10720] tipc: Node identity ee535dd10ba7, cluster identity 4711 [ 706.248970][T10720] tipc: Enabled bearer , priority 0 [ 706.951068][T10703] tipc: Disabling bearer [ 707.315141][T10744] FAULT_INJECTION: forcing a failure. [ 707.315141][T10744] name failslab, interval 1, probability 0, space 0, times 0 [ 707.351245][T10744] CPU: 0 PID: 10744 Comm: syz.1.1858 Not tainted syzkaller #0 [ 707.358786][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 707.368886][T10744] Call Trace: [ 707.372204][T10744] [ 707.375173][T10744] dump_stack_lvl+0x188/0x24e [ 707.379908][T10744] ? show_regs_print_info+0x12/0x12 [ 707.385155][T10744] ? load_image+0x410/0x410 [ 707.389717][T10744] ? __might_sleep+0xd0/0xd0 [ 707.394349][T10744] ? __lock_acquire+0x7c40/0x7c40 [ 707.399433][T10744] should_fail_ex+0x390/0x4c0 [ 707.404169][T10744] should_failslab+0x5/0x20 [ 707.408708][T10744] slab_pre_alloc_hook+0x59/0x300 [ 707.413830][T10744] ? tomoyo_encode+0x28a/0x550 [ 707.418611][T10744] __kmem_cache_alloc_node+0x4f/0x270 [ 707.423999][T10744] ? tomoyo_encode+0x28a/0x550 [ 707.428785][T10744] __kmalloc+0xa3/0x240 [ 707.432961][T10744] tomoyo_encode+0x28a/0x550 [ 707.437568][T10744] tomoyo_realpath_from_path+0x578/0x5c0 [ 707.443222][T10744] tomoyo_check_open_permission+0x212/0x440 [ 707.449127][T10744] ? tomoyo_check_open_permission+0x1bf/0x440 [ 707.455204][T10744] ? tomoyo_check_path_number_acl+0x280/0x280 [ 707.461279][T10744] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 707.467273][T10744] ? __lock_acquire+0x7c40/0x7c40 [ 707.472330][T10744] ? __lock_acquire+0x7c40/0x7c40 [ 707.477378][T10744] ? __rwlock_init+0x140/0x140 [ 707.482157][T10744] ? tomoyo_file_open+0xe9/0x170 [ 707.487106][T10744] security_file_open+0x5e/0xa0 [ 707.491972][T10744] do_dentry_open+0x2fd/0x10b0 [ 707.496752][T10744] ? memcpy+0x3c/0x60 [ 707.500745][T10744] path_openat+0x2674/0x2f10 [ 707.505361][T10744] ? verify_lock_unused+0x140/0x140 [ 707.510575][T10744] ? do_sys_openat2+0xdd/0x4f0 [ 707.515355][T10744] ? do_filp_open+0x420/0x420 [ 707.520061][T10744] do_filp_open+0x1ee/0x420 [ 707.524577][T10744] ? vfs_tmpfile+0x470/0x470 [ 707.529197][T10744] ? _raw_spin_unlock+0x24/0x40 [ 707.534060][T10744] ? alloc_fd+0x590/0x640 [ 707.538411][T10744] do_sys_openat2+0x14b/0x4f0 [ 707.543105][T10744] ? do_sys_open+0xe0/0xe0 [ 707.547529][T10744] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 707.553524][T10744] ? lock_chain_count+0x20/0x20 [ 707.558395][T10744] __x64_sys_openat+0x135/0x160 [ 707.563263][T10744] do_syscall_64+0x4c/0xa0 [ 707.567694][T10744] ? clear_bhb_loop+0x60/0xb0 [ 707.572385][T10744] ? clear_bhb_loop+0x60/0xb0 [ 707.577070][T10744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 707.582979][T10744] RIP: 0033:0x7fd5fbd5e98e [ 707.587408][T10744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 707.607022][T10744] RSP: 002b:00007fd5fcc73b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 707.615445][T10744] RAX: ffffffffffffffda RBX: 00007fd5fcc746c0 RCX: 00007fd5fbd5e98e [ 707.623428][T10744] RDX: 0000000000000000 RSI: 00007fd5fcc73c00 RDI: ffffffffffffff9c [ 707.631407][T10744] RBP: 00007fd5fcc73c00 R08: 0000000000000000 R09: 0000000000000000 [ 707.639388][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 707.647363][T10744] R13: 00007fd5fc026038 R14: 00007fd5fc025fa0 R15: 00007ffc0e9ddc58 [ 707.655363][T10744] [ 707.905240][T10744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 711.151890][T10363] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 711.364076][T10363] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 711.373502][T10363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.468160][T10363] usb 2-1: config 0 descriptor?? [ 711.505323][T10363] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 711.531433][ T14] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 712.917652][T10363] gspca_cpia1: usb_control_msg 03, error -32 [ 712.952944][T10363] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 712.971285][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 712.991527][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.010930][T10791] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 713.022708][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.057420][ T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.096564][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.129118][ T14] usb 3-1: Product: syz [ 713.139252][ T14] usb 3-1: Manufacturer: syz [ 713.156865][ T14] usb 3-1: SerialNumber: syz [ 713.354874][T10363] gspca_cpia1: usb_control_msg 02, error -71 [ 713.369437][T10363] cpia1 2-1:0.0: only firmware version 1 is supported (got: 6) [ 713.571820][ T14] usb 3-1: 0:2 : does not exist [ 713.582368][T10363] usb 2-1: USB disconnect, device number 33 [ 713.591635][ T14] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 713.650539][ T14] usb 3-1: USB disconnect, device number 27 [ 713.942677][T10797] udevd[10797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.344405][T10822] FAULT_INJECTION: forcing a failure. [ 715.344405][T10822] name failslab, interval 1, probability 0, space 0, times 0 [ 715.357956][T10822] CPU: 0 PID: 10822 Comm: syz.0.1883 Not tainted syzkaller #0 [ 715.365470][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 715.375568][T10822] Call Trace: [ 715.378886][T10822] [ 715.381850][T10822] dump_stack_lvl+0x188/0x24e [ 715.386572][T10822] ? show_regs_print_info+0x12/0x12 [ 715.391817][T10822] ? load_image+0x410/0x410 [ 715.396375][T10822] ? __might_sleep+0xd0/0xd0 [ 715.401003][T10822] ? __lock_acquire+0x7c40/0x7c40 [ 715.406076][T10822] should_fail_ex+0x390/0x4c0 [ 715.410807][T10822] should_failslab+0x5/0x20 [ 715.415353][T10822] slab_pre_alloc_hook+0x59/0x300 [ 715.420421][T10822] ? get_mountpoint+0x205/0x440 [ 715.425329][T10822] __kmem_cache_alloc_node+0x4f/0x270 [ 715.430748][T10822] ? get_mountpoint+0x205/0x440 [ 715.435645][T10822] kmalloc_trace+0x26/0xe0 [ 715.440106][T10822] get_mountpoint+0x205/0x440 [ 715.444823][T10822] lock_mount+0xb4/0x2a0 [ 715.449080][T10822] ? mnt_warn_timestamp_expiry+0x13d/0x2c0 [ 715.454906][T10822] do_new_mount+0x380/0xa40 [ 715.459429][T10822] __se_sys_mount+0x2e3/0x3d0 [ 715.464120][T10822] ? __x64_sys_mount+0xc0/0xc0 [ 715.468903][T10822] ? lockdep_hardirqs_on+0x94/0x140 [ 715.474111][T10822] ? __x64_sys_mount+0x1c/0xc0 [ 715.478891][T10822] do_syscall_64+0x4c/0xa0 [ 715.483320][T10822] ? clear_bhb_loop+0x60/0xb0 [ 715.488002][T10822] ? clear_bhb_loop+0x60/0xb0 [ 715.492686][T10822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.498597][T10822] RIP: 0033:0x7ff2f619e159 [ 715.503025][T10822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.522640][T10822] RSP: 002b:00007ff2f6fbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 715.531064][T10822] RAX: ffffffffffffffda RBX: 00007ff2f6425fa0 RCX: 00007ff2f619e159 [ 715.539047][T10822] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 715.547026][T10822] RBP: 00007ff2f623506b R08: 0000000000000000 R09: 0000000000000000 [ 715.555007][T10822] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 715.562989][T10822] R13: 00007ff2f6426038 R14: 00007ff2f6425fa0 R15: 00007ffdfbe2ea68 [ 715.570984][T10822] [ 717.353383][ T4381] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 718.381186][ T4381] usb 1-1: Using ep0 maxpacket: 8 [ 718.413192][ T4381] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 718.648575][ T4381] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 718.676503][ T4381] usb 1-1: Product: syz [ 718.698181][ T4381] usb 1-1: Manufacturer: syz [ 718.720233][ T4381] usb 1-1: SerialNumber: syz [ 718.739573][ T4381] usb 1-1: config 0 descriptor?? [ 718.759473][ T4381] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 719.163957][ T4381] gspca_zc3xx: reg_r err -71 [ 719.169998][ T4381] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 719.228804][ T4381] usb 1-1: USB disconnect, device number 37 [ 721.232408][T10886] overlayfs: missing 'lowerdir' [ 721.441276][T10363] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 721.638078][T10363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.649871][T10363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.924653][T10363] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.086063][T10363] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 722.110784][T10363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.135258][T10363] usb 4-1: config 0 descriptor?? [ 722.802537][T10363] usbhid 4-1:0.0: can't add hid device: -71 [ 722.811073][T10363] usbhid: probe of 4-1:0.0 failed with error -71 [ 722.835861][T10363] usb 4-1: USB disconnect, device number 37 [ 724.729070][T10920] overlayfs: missing 'lowerdir' [ 728.560560][T10967] overlayfs: missing 'lowerdir' [ 732.267213][T11025] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 732.345563][T11025] bond1: (slave veth3): Enslaving as an active interface with a down link [ 732.458287][T11029] bond1: (slave veth0_to_bond): making interface the new active one [ 732.469025][T11029] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 732.691474][ T7] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 732.761460][T11039] o2cb: This node has not been configured. [ 732.767381][T11039] o2cb: Cluster check failed. Fix errors before retrying. [ 732.774676][T11039] (syz.0.1954,11039,1):user_dlm_register:674 ERROR: status = -22 [ 732.782578][T11039] (syz.0.1954,11039,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 733.881618][ T22] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 734.081262][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 734.107453][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.131565][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 734.143381][ T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 734.166442][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 734.183493][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.222568][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.238509][T11032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 734.468822][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.541390][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.569853][ T22] usb 4-1: Product: syz [ 734.592528][ T22] usb 4-1: Manufacturer: syz [ 734.616497][ T22] usb 4-1: SerialNumber: syz [ 734.846394][ T7] usb 2-1: USB disconnect, device number 34 [ 734.877083][ T22] usb 4-1: 0:2 : does not exist [ 734.889573][ T22] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 734.934011][ T22] usb 4-1: USB disconnect, device number 38 [ 735.174412][T11055] udevd[11055]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 736.603269][T11095] digital: digital_start_poll: Unknown protocol [ 736.815857][T11100] o2cb: This node has not been configured. [ 736.821824][T11100] o2cb: Cluster check failed. Fix errors before retrying. [ 736.829092][T11100] (syz.0.1969,11100,0):user_dlm_register:674 ERROR: status = -22 [ 736.836953][T11100] (syz.0.1969,11100,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 738.512839][T11117] can0: slcan on ttyS3. [ 738.934761][T11119] can0 (unregistered): slcan off ttyS3. [ 739.021246][ T4323] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 739.529527][ T4323] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 739.586420][ T4323] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 739.822198][ T4323] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.951327][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.139440][T11104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 740.609278][ T4328] usb 1-1: USB disconnect, device number 38 [ 742.023583][T11124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.268529][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1993'. [ 744.064763][ T4329] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 744.267043][ T4329] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 744.345811][ T4329] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 744.631511][ T4329] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 744.681917][ T4329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.730422][T11192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 745.151254][ T4329] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 745.186406][ T9498] usb 4-1: USB disconnect, device number 39 [ 745.396112][ T4329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.410845][ T4329] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 745.441249][ T4329] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 745.462336][ T4329] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 745.472837][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 745.480967][ T4329] usb 2-1: Product: syz [ 745.486626][ T4329] usb 2-1: Manufacturer: syz [ 745.503290][T11204] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 745.516902][ T4329] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 745.538698][ T4329] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 745.554884][T11221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 745.766107][ T4329] usb 2-1: USB disconnect, device number 35 [ 745.795540][ T4329] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 745.817575][ T4329] garmin_gps 2-1:1.0: device disconnected [ 747.568799][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.601316][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.398361][T11260] o2cb: This node has not been configured. [ 748.404369][T11260] o2cb: Cluster check failed. Fix errors before retrying. [ 748.411684][T11260] (syz.0.2023,11260,1):user_dlm_register:674 ERROR: status = -22 [ 748.419513][T11260] (syz.0.2023,11260,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 748.701995][ T4328] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 749.033658][ T4328] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.051211][ T4328] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 749.071241][ T4328] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 749.080326][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.142667][T11251] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 749.339478][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2024'. [ 749.603657][ T4328] usb 5-1: USB disconnect, device number 24 [ 750.387415][ T7] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 751.321469][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 751.335802][ T7] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.386506][ T7] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.461485][ T7] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 751.549441][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 751.561697][ T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 752.254867][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.303251][ T7] usb 3-1: config 0 descriptor?? [ 752.356560][T11302] o2cb: This node has not been configured. [ 752.362576][T11302] o2cb: Cluster check failed. Fix errors before retrying. [ 752.369852][T11302] (syz.3.2034,11302,0):user_dlm_register:674 ERROR: status = -22 [ 752.377782][T11302] (syz.3.2034,11302,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 753.086058][ T9498] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 753.271336][ T9498] usb 5-1: Using ep0 maxpacket: 16 [ 753.295217][ T9498] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.330029][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2038'. [ 753.367942][ T9498] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 753.465990][ T9498] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 753.498573][ T9498] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.531851][ T9498] usb 5-1: Product: syz [ 753.556523][ T9498] usb 5-1: Manufacturer: syz [ 753.563211][ T22] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 753.602120][ T9498] usb 5-1: SerialNumber: syz [ 753.781786][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 753.835078][ T22] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 753.924783][ T9498] usb 5-1: 0:2 : does not exist [ 754.034672][ T9498] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 754.041214][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 754.051160][ T22] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 754.064020][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 754.072253][ T7] usb 3-1: USB disconnect, device number 28 [ 754.111383][ T22] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 754.121590][ T22] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 754.139402][ T22] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 754.175720][ T9498] usb 5-1: USB disconnect, device number 25 [ 754.211982][ T22] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 754.222161][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.442890][ T22] usb 2-1: GET_CAPABILITIES returned 0 [ 754.448545][ T22] usbtmc 2-1:16.0: can't read capabilities [ 754.553259][T11055] udevd[11055]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 754.641230][ T7] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 754.653992][ T9498] usb 2-1: USB disconnect, device number 36 [ 754.823046][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 754.844504][ T7] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 754.877308][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 754.903923][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.925337][T11314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 756.728084][ T22] usb 3-1: USB disconnect, device number 29 [ 756.960640][ T7] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 757.148577][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.176400][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.209809][ T7] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 757.240771][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.305795][ T7] usb 5-1: config 0 descriptor?? [ 757.491964][T11343] o2cb: This node has not been configured. [ 757.497940][T11343] o2cb: Cluster check failed. Fix errors before retrying. [ 757.505253][T11343] (syz.0.2048,11343,0):user_dlm_register:674 ERROR: status = -22 [ 757.513092][T11343] (syz.0.2048,11343,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 757.797548][ T7] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 757.931791][ T7] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 758.132979][T11347] FAULT_INJECTION: forcing a failure. [ 758.132979][T11347] name fail_futex, interval 1, probability 0, space 0, times 0 [ 758.136006][ T7] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 758.155125][T11347] CPU: 0 PID: 11347 Comm: syz.3.2051 Not tainted syzkaller #0 [ 758.162638][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 758.172738][T11347] Call Trace: [ 758.176046][T11347] [ 758.179013][T11347] dump_stack_lvl+0x188/0x24e [ 758.183736][T11347] ? show_regs_print_info+0x12/0x12 [ 758.188966][T11347] ? load_image+0x410/0x410 [ 758.193516][T11347] ? release_firmware_map_entry+0x187/0x187 [ 758.199452][T11347] ? plist_add+0x3d7/0x490 [ 758.203912][T11347] should_fail_ex+0x390/0x4c0 [ 758.208660][T11347] get_futex_key+0x1b1/0x1000 [ 758.213369][T11347] ? futex_unqueue+0xc7/0xf0 [ 758.218000][T11347] ? futex_setup_timer+0xc0/0xc0 [ 758.222982][T11347] futex_wake+0x123/0x4f0 [ 758.227386][T11347] ? futex_wake_mark+0x150/0x150 [ 758.232369][T11347] ? file_end_write+0x156/0x250 [ 758.237262][T11347] ? vfs_write+0x777/0x9a0 [ 758.241725][T11347] do_futex+0x2e2/0x320 [ 758.245917][T11347] ? __ia32_sys_get_robust_list+0x100/0x100 [ 758.251858][T11347] __se_sys_futex+0x381/0x410 [ 758.256576][T11347] ? __x64_sys_futex+0xf0/0xf0 [ 758.261374][T11347] ? __se_sys_landlock_create_ruleset+0x28a/0x380 [ 758.267837][T11347] ? __x64_sys_futex+0x1d/0xf0 [ 758.272652][T11347] do_syscall_64+0x4c/0xa0 [ 758.277107][T11347] ? clear_bhb_loop+0x60/0xb0 [ 758.281819][T11347] ? clear_bhb_loop+0x60/0xb0 [ 758.286541][T11347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.292481][T11347] RIP: 0033:0x7fba74d9e159 [ 758.296931][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.316578][T11347] RSP: 002b:00007fba75d180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 758.325045][T11347] RAX: ffffffffffffffda RBX: 00007fba75025fa8 RCX: 00007fba74d9e159 [ 758.333054][T11347] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fba75025fac [ 758.341068][T11347] RBP: 00007fba75025fa0 R08: 000448b6e7fb1278 R09: 0000000000000000 [ 758.349075][T11347] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 758.357080][T11347] R13: 00007fba75026038 R14: 00007ffe0dbc4e10 R15: 00007ffe0dbc4ef8 [ 758.365104][T11347] [ 758.377560][ T7] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 758.461300][ T7] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 758.479479][ T7] hid-steam 0003:28DE:1142.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 758.541607][ T7] usb 5-1: USB disconnect, device number 26 [ 758.610148][ T7] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 758.677290][T11356] fido_id[11356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 758.781235][T10363] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 758.991860][T10363] usb 2-1: Using ep0 maxpacket: 16 [ 759.004508][T10363] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.075028][T10363] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.123967][T10363] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 759.178498][T10363] usb 2-1: config 0 interface 0 has no altsetting 0 [ 759.208603][T10363] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 759.247070][T10363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.355216][T10363] usb 2-1: config 0 descriptor?? [ 759.500043][T11374] netlink: 'syz.2.2061': attribute type 3 has an invalid length. [ 759.818428][T10363] usbhid 2-1:0.0: can't add hid device: -71 [ 759.914557][T10363] usbhid: probe of 2-1:0.0 failed with error -71 [ 761.080248][T10363] usb 2-1: USB disconnect, device number 37 [ 761.666068][T11394] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2067'. [ 764.205506][T11436] o2cb: This node has not been configured. [ 764.211527][T11436] o2cb: Cluster check failed. Fix errors before retrying. [ 764.218771][T11436] (syz.0.2066,11436,1):user_dlm_register:674 ERROR: status = -22 [ 764.226676][T11436] (syz.0.2066,11436,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 765.166312][T11445] netlink: 'syz.3.2077': attribute type 3 has an invalid length. [ 772.153426][T11494] o2cb: This node has not been configured. [ 772.159357][T11494] o2cb: Cluster check failed. Fix errors before retrying. [ 772.166702][T11494] (syz.1.2087,11494,0):user_dlm_register:674 ERROR: status = -22 [ 772.175658][T11494] (syz.1.2087,11494,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 773.052208][T11508] netlink: 'syz.1.2090': attribute type 3 has an invalid length. [ 774.464853][T10363] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 775.391166][T10363] usb 3-1: Using ep0 maxpacket: 8 [ 775.400284][T10363] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 775.451144][T10363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.491436][T10363] usb 3-1: Product: syz [ 775.495664][T10363] usb 3-1: Manufacturer: syz [ 775.531306][T10363] usb 3-1: SerialNumber: syz [ 775.547544][T10363] usb 3-1: config 0 descriptor?? [ 775.580659][T10363] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 776.523249][T10363] gspca_sonixj: reg_r err -110 [ 776.528096][T10363] sonixj: probe of 3-1:0.0 failed with error -110 [ 777.175307][T11553] o2cb: This node has not been configured. [ 777.181356][T11553] o2cb: Cluster check failed. Fix errors before retrying. [ 777.188751][T11553] (syz.3.2100,11553,1):user_dlm_register:674 ERROR: status = -22 [ 777.196729][T11553] (syz.3.2100,11553,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 779.212216][ T14] usb 3-1: USB disconnect, device number 30 [ 786.251557][ T4381] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 787.221269][ T4381] usb 5-1: Using ep0 maxpacket: 16 [ 787.231930][ T4381] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.306082][ T4381] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.342470][ T4381] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 787.391313][ T4381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.442292][T11644] tipc: Enabled bearer , priority 0 [ 787.520259][ T4381] usb 5-1: Product: syz [ 787.524857][ T4381] usb 5-1: Manufacturer: syz [ 787.532912][ T4381] usb 5-1: SerialNumber: syz [ 787.735818][T11638] tipc: Disabling bearer [ 787.784686][ T4381] usb 5-1: 0:2 : does not exist [ 787.903958][ T4381] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 788.204052][ T4381] usb 5-1: USB disconnect, device number 27 [ 788.516095][T11526] udevd[11526]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.197045][T11694] program syz.1.2130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 796.485147][T11734] FAULT_INJECTION: forcing a failure. [ 796.485147][T11734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.560819][T11734] CPU: 0 PID: 11734 Comm: syz.1.2143 Not tainted syzkaller #0 [ 796.568350][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 796.578431][T11734] Call Trace: [ 796.581739][T11734] [ 796.584696][T11734] dump_stack_lvl+0x188/0x24e [ 796.589423][T11734] ? show_regs_print_info+0x12/0x12 [ 796.594650][T11734] ? load_image+0x410/0x410 [ 796.599198][T11734] ? __lock_acquire+0x7c40/0x7c40 [ 796.604261][T11734] should_fail_ex+0x390/0x4c0 [ 796.608985][T11734] _copy_to_user+0x2c/0x130 [ 796.613522][T11734] tomoyo_flush+0x153/0x4a0 [ 796.618067][T11734] tomoyo_io_printf+0x2e7/0x3b0 [ 796.622961][T11734] ? __might_fault+0xa6/0x120 [ 796.627669][T11734] ? tomoyo_set_string+0x100/0x100 [ 796.632829][T11734] tomoyo_read_domain+0x389/0xd70 [ 796.637897][T11734] tomoyo_read_control+0x2b1/0x4b0 [ 796.643040][T11734] ? tomoyo_read_control+0xf7/0x4b0 [ 796.648273][T11734] ? tomoyo_realpath_nofollow+0x110/0x110 [ 796.654034][T11734] vfs_read+0x2db/0x960 [ 796.658232][T11734] ? kernel_read+0x1e0/0x1e0 [ 796.662866][T11734] ? __fget_files+0x28/0x460 [ 796.667494][T11734] ? __fget_files+0x3fc/0x460 [ 796.672226][T11734] ? __fdget_pos+0x2ae/0x360 [ 796.676854][T11734] ? ksys_read+0x70/0x260 [ 796.681223][T11734] ksys_read+0x14d/0x260 [ 796.685511][T11734] ? vfs_write+0x9a0/0x9a0 [ 796.689973][T11734] ? lockdep_hardirqs_on+0x94/0x140 [ 796.695215][T11734] do_syscall_64+0x4c/0xa0 [ 796.699658][T11734] ? clear_bhb_loop+0x60/0xb0 [ 796.704367][T11734] ? clear_bhb_loop+0x60/0xb0 [ 796.709079][T11734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.715018][T11734] RIP: 0033:0x7fd5fbd9e159 [ 796.719462][T11734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.739105][T11734] RSP: 002b:00007fd5fcc74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 796.747561][T11734] RAX: ffffffffffffffda RBX: 00007fd5fc025fa0 RCX: 00007fd5fbd9e159 [ 796.755571][T11734] RDX: 0000000000002020 RSI: 0000200000000340 RDI: 0000000000000003 [ 796.763576][T11734] RBP: 00007fd5fbe3506b R08: 0000000000000000 R09: 0000000000000000 [ 796.771579][T11734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.779579][T11734] R13: 00007fd5fc026038 R14: 00007fd5fc025fa0 R15: 00007ffc0e9ddc58 [ 796.787603][T11734] [ 801.838940][T11759] FAULT_INJECTION: forcing a failure. [ 801.838940][T11759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.906582][T11759] CPU: 0 PID: 11759 Comm: syz.0.2150 Not tainted syzkaller #0 [ 801.914135][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 801.924230][T11759] Call Trace: [ 801.927538][T11759] [ 801.930495][T11759] dump_stack_lvl+0x188/0x24e [ 801.935220][T11759] ? show_regs_print_info+0x12/0x12 [ 801.940453][T11759] ? load_image+0x410/0x410 [ 801.944995][T11759] ? __lock_acquire+0x7c40/0x7c40 [ 801.950068][T11759] should_fail_ex+0x390/0x4c0 [ 801.954791][T11759] _copy_from_user+0x2c/0x170 [ 801.959506][T11759] __sys_bpf+0x2ea/0x780 [ 801.963840][T11759] ? bpf_link_show_fdinfo+0x380/0x380 [ 801.969243][T11759] ? lock_chain_count+0x20/0x20 [ 801.974113][T11759] __x64_sys_bpf+0x78/0x90 [ 801.978550][T11759] do_syscall_64+0x4c/0xa0 [ 801.982974][T11759] ? clear_bhb_loop+0x60/0xb0 [ 801.987658][T11759] ? clear_bhb_loop+0x60/0xb0 [ 801.992342][T11759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.998247][T11759] RIP: 0033:0x7ff2f619e159 [ 802.002670][T11759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.022287][T11759] RSP: 002b:00007ff2f6fbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.030709][T11759] RAX: ffffffffffffffda RBX: 00007ff2f6425fa0 RCX: 00007ff2f619e159 [ 802.038690][T11759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000f [ 802.046667][T11759] RBP: 00007ff2f623506b R08: 0000000000000000 R09: 0000000000000000 [ 802.054644][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.062625][T11759] R13: 00007ff2f6426038 R14: 00007ff2f6425fa0 R15: 00007ffdfbe2ea68 [ 802.070620][T11759] [ 806.836274][T11814] vivid-001: disconnect [ 806.890647][T11808] mmap: syz.3.2164 (11808) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 807.696488][T11807] vivid-001: reconnect [ 808.740029][T11822] overlayfs: missing 'lowerdir' [ 808.781656][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.788269][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.183034][T11877] netlink: 1012 bytes leftover after parsing attributes in process `syz.1.2180'. [ 816.571162][T11887] overlayfs: missing 'lowerdir' [ 822.257345][T11932] overlayfs: missing 'lowerdir' [ 826.252952][T11971] vivid-003: disconnect [ 826.311649][T11970] vivid-003: reconnect [ 826.642947][T11982] overlayfs: missing 'lowerdir' [ 830.181891][ T4344] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 830.391477][ T4344] usb 5-1: Using ep0 maxpacket: 16 [ 830.405552][ T4344] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.537578][ T4344] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.658509][ T4344] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 830.797526][ T4344] usb 5-1: config 0 interface 0 has no altsetting 0 [ 830.878616][ T4344] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 830.969447][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.122264][ T4344] usb 5-1: config 0 descriptor?? [ 831.271661][T12011] vivid-001: disconnect [ 831.276216][T12010] vivid-001: reconnect [ 831.690201][T12018] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2226'. [ 832.042595][ T4344] usb 5-1: USB disconnect, device number 28 [ 833.216631][T12032] overlayfs: missing 'lowerdir' [ 833.387690][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2230'. [ 839.441222][ T9895] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 839.641147][ T9895] usb 3-1: Using ep0 maxpacket: 16 [ 839.648846][ T9895] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.698934][ T9895] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.719535][T12078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2243'. [ 839.763156][ T9895] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 839.889776][ T9895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 839.987000][ T9895] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 840.098319][ T9895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.218356][ T9895] usb 3-1: config 0 descriptor?? [ 841.970461][ T4329] usb 3-1: USB disconnect, device number 31 [ 844.037345][T12115] overlayfs: missing 'lowerdir' [ 844.846552][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2255'. [ 846.499153][T12131] vivid-001: disconnect [ 847.651742][T12126] vivid-001: reconnect [ 850.067681][T12158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2266'. [ 851.449577][T12173] vivid-002: disconnect [ 851.526154][T12168] vivid-002: reconnect [ 855.045938][T12190] overlayfs: missing 'lowerdir' [ 856.471235][ T9895] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 856.490554][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2280'. [ 856.681110][ T9895] usb 1-1: Using ep0 maxpacket: 16 [ 856.694779][ T9895] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.876957][ T9895] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.053980][ T9895] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 857.299229][ T9895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 857.321835][T12211] vivid-003: disconnect [ 857.336719][ T9895] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 857.346479][T12210] vivid-003: reconnect [ 857.369790][ T9895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.398795][ T9895] usb 1-1: config 0 descriptor?? [ 858.546147][ T9895] usb 1-1: USB disconnect, device number 39 [ 859.993117][T12245] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12245] [ 861.084283][T12250] vivid-001: disconnect [ 861.096567][T12248] vivid-001: reconnect [ 863.436343][T12284] overlayfs: missing 'lowerdir' [ 865.736017][T12302] vivid-000: disconnect [ 865.761318][T12301] vivid-000: reconnect [ 865.781273][ T5440] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 865.984389][ T5440] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.000647][ T5440] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.043512][ T5440] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 866.068916][ T5440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.114335][ T5440] usb 4-1: config 0 descriptor?? [ 866.388236][T12315] overlayfs: missing 'lowerdir' [ 867.583995][ T5440] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 867.621160][ T5440] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 867.649215][ T5440] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 867.681334][ T5440] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 867.698580][ T5440] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 868.626542][ T5440] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 868.669642][ T5440] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 868.704742][ T5440] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 868.831663][ T5440] cp2112 0003:10C4:EA90.0009: error requesting version [ 868.848317][ T5440] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71 [ 868.921150][ T22] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 868.949730][ T5440] usb 4-1: USB disconnect, device number 40 [ 869.739079][T12336] fido_id[12336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 869.752535][ T22] usb 1-1: device descriptor read/all, error -71 [ 870.303557][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.312424][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.548613][T12362] overlayfs: missing 'lowerdir' [ 875.270258][T12388] loop1: detected capacity change from 0 to 1024 [ 875.318860][T12388] EXT4-fs: Ignoring removed bh option [ 875.492150][T12388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 875.689280][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 877.567325][T12419] overlayfs: missing 'lowerdir' [ 877.671152][ T4323] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 877.757171][ T22] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 878.011553][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 878.026819][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.154611][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.367279][ T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.415775][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.445072][ T22] usb 2-1: Product: syz [ 878.449333][ T22] usb 2-1: Manufacturer: syz [ 878.495215][ T22] usb 2-1: SerialNumber: syz [ 879.833663][ T4323] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 879.851243][ T22] usb 2-1: 0:2 : does not exist [ 879.852518][ T4323] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 879.870328][ T4323] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 879.879656][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.898085][ T22] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 879.933948][T12416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 879.975147][ T22] usb 2-1: USB disconnect, device number 38 [ 880.241785][T12287] udevd[12287]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.505736][ T22] usb 3-1: USB disconnect, device number 32 [ 883.635270][T12475] FAULT_INJECTION: forcing a failure. [ 883.635270][T12475] name failslab, interval 1, probability 0, space 0, times 0 [ 883.690745][T12475] CPU: 0 PID: 12475 Comm: syz.2.2357 Not tainted syzkaller #0 [ 883.698296][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 883.708377][T12475] Call Trace: [ 883.711657][T12475] [ 883.714602][T12475] dump_stack_lvl+0x188/0x24e [ 883.719285][T12475] ? show_regs_print_info+0x12/0x12 [ 883.724480][T12475] ? load_image+0x410/0x410 [ 883.729006][T12475] ? __might_sleep+0xd0/0xd0 [ 883.733596][T12475] ? __lock_acquire+0x7c40/0x7c40 [ 883.738624][T12475] should_fail_ex+0x390/0x4c0 [ 883.743305][T12475] should_failslab+0x5/0x20 [ 883.747802][T12475] slab_pre_alloc_hook+0x59/0x300 [ 883.752849][T12475] ? ucma_alloc_ctx+0x4e/0x2d0 [ 883.757645][T12475] __kmem_cache_alloc_node+0x4f/0x270 [ 883.763032][T12475] ? ucma_alloc_ctx+0x4e/0x2d0 [ 883.767823][T12475] kmalloc_trace+0x26/0xe0 [ 883.772256][T12475] ucma_alloc_ctx+0x4e/0x2d0 [ 883.776870][T12475] ucma_create_id+0x1dc/0x370 [ 883.781549][T12475] ? __lock_acquire+0x7c40/0x7c40 [ 883.786584][T12475] ? ucma_close+0x170/0x170 [ 883.791099][T12475] ? __might_fault+0xa6/0x120 [ 883.795781][T12475] ? __might_fault+0xc2/0x120 [ 883.800450][T12475] ? __might_fault+0xa6/0x120 [ 883.805147][T12475] ucma_write+0x24e/0x2f0 [ 883.809475][T12475] ? ucma_get_global_nl_info+0x70/0x70 [ 883.814929][T12475] ? common_file_perm+0x171/0x1c0 [ 883.819967][T12475] ? fsnotify_perm+0x5a/0x550 [ 883.824639][T12475] ? security_file_permission+0x75/0xa0 [ 883.830201][T12475] ? ucma_get_global_nl_info+0x70/0x70 [ 883.835675][T12475] vfs_write+0x2dc/0x9a0 [ 883.839925][T12475] ? file_end_write+0x250/0x250 [ 883.844776][T12475] ? __fget_files+0x28/0x460 [ 883.849388][T12475] ? __fget_files+0x3fc/0x460 [ 883.854086][T12475] ? __fdget_pos+0x1d4/0x360 [ 883.858685][T12475] ? ksys_write+0x70/0x260 [ 883.863104][T12475] ksys_write+0x14d/0x260 [ 883.867433][T12475] ? __ia32_sys_read+0x80/0x80 [ 883.872201][T12475] ? lockdep_hardirqs_on+0x94/0x140 [ 883.877404][T12475] do_syscall_64+0x4c/0xa0 [ 883.881830][T12475] ? clear_bhb_loop+0x60/0xb0 [ 883.886516][T12475] ? clear_bhb_loop+0x60/0xb0 [ 883.891203][T12475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.897113][T12475] RIP: 0033:0x7f9e6939e159 [ 883.901529][T12475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.921135][T12475] RSP: 002b:00007f9e6a22f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 883.929563][T12475] RAX: ffffffffffffffda RBX: 00007f9e69625fa0 RCX: 00007f9e6939e159 [ 883.937547][T12475] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 883.945529][T12475] RBP: 00007f9e6943506b R08: 0000000000000000 R09: 0000000000000000 [ 883.953497][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.961483][T12475] R13: 00007f9e69626038 R14: 00007f9e69625fa0 R15: 00007ffc9c358078 [ 883.969514][T12475] [ 884.482394][T12479] overlayfs: missing 'lowerdir' [ 885.755257][ T4323] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 886.668075][ T4323] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 886.725707][ T4323] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 887.388397][ T4323] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 887.469636][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.693351][T12488] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 888.433819][ T4329] usb 5-1: USB disconnect, device number 29 [ 892.649150][T12562] overlayfs: missing 'lowerdir' [ 899.043786][T12606] loop1: detected capacity change from 0 to 1024 [ 899.092547][T12606] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 899.119606][T12606] EXT4-fs (loop1): orphan cleanup on readonly fs [ 899.277067][T12607] udevd[12607]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 899.289708][T12606] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.2390: Invalid inode table block 0 in block_group 0 [ 899.376514][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 899.385434][T12607] udevd[12607]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 899.430353][T12606] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 899.469605][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 899.511294][T12606] EXT4-fs error (device loop1): ext4_quota_write:7253: inode #3: comm syz.1.2390: mark_inode_dirty error [ 899.556087][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 899.579620][T12606] Quota error (device loop1): write_blk: dquota write failed [ 899.621261][T12606] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 899.638094][T12607] udevd[12607]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 899.661190][T12606] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2390: Failed to acquire dquot type 0 [ 899.734306][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 899.746296][T12607] udevd[12607]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 899.746518][T12606] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.2390: Invalid inode table block 0 in block_group 0 [ 899.795607][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 899.871252][T12606] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 899.939274][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 899.951185][T12606] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #15: comm syz.1.2390: mark_inode_dirty error [ 900.843649][T12620] o2cb: This node has not been configured. [ 900.849519][T12620] o2cb: Cluster check failed. Fix errors before retrying. [ 900.856706][T12620] (syz.2.2394,12620,1):user_dlm_register:674 ERROR: status = -22 [ 900.864540][T12620] (syz.2.2394,12620,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 900.881744][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 900.891544][T12606] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.2390: Invalid inode table block 0 in block_group 0 [ 900.952020][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 900.987481][T12606] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 901.043096][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 901.049876][T12606] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 901.076985][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 901.101537][T12606] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.2390: Invalid inode table block 0 in block_group 0 [ 901.201405][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 901.287442][T12606] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 901.297646][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 901.304928][T12606] EXT4-fs error (device loop1): ext4_truncate:4325: inode #15: comm syz.1.2390: mark_inode_dirty error [ 901.436172][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 901.656089][T12606] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 902.174504][T12606] EXT4-fs (loop1): Remounting filesystem read-only [ 902.251233][T12606] EXT4-fs (loop1): 1 truncate cleaned up [ 902.280805][T12606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 902.438492][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 902.629882][T12607] udevd[12607]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 902.692083][T12607] udevd[12607]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 907.729336][T12684] o2cb: This node has not been configured. [ 907.735253][T12684] o2cb: Cluster check failed. Fix errors before retrying. [ 907.742453][T12684] (syz.0.2410,12684,0):user_dlm_register:674 ERROR: status = -22 [ 907.750199][T12684] (syz.0.2410,12684,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 910.841972][T12713] tipc: Enabled bearer , priority 0 [ 911.843561][T12703] tipc: Disabling bearer [ 912.226231][T12728] o2cb: This node has not been configured. [ 912.232157][T12728] o2cb: Cluster check failed. Fix errors before retrying. [ 912.239313][T12728] (syz.0.2424,12728,0):user_dlm_register:674 ERROR: status = -22 [ 912.247193][T12728] (syz.0.2424,12728,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 916.812349][T12779] o2cb: This node has not been configured. [ 916.818266][T12779] o2cb: Cluster check failed. Fix errors before retrying. [ 916.825724][T12779] (syz.1.2440,12779,0):user_dlm_register:674 ERROR: status = -22 [ 916.833535][T12779] (syz.1.2440,12779,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 918.370454][T12787] ima: policy update failed [ 919.031309][ T26] audit: type=1802 audit(1790824767.966:1204): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2442" res=0 errno=0 [ 929.332094][T12865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 929.436290][T12865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 929.544371][T12865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 929.591873][T12865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.610751][T12865] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 930.071251][T12865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 930.289934][ T9498] libceph: connect (1)[c::]:6789 error -101 [ 930.302532][ T9498] libceph: mon0 (1)[c::]:6789 connect error [ 931.140686][ T9498] libceph: connect (1)[c::]:6789 error -101 [ 931.147480][T12863] ceph: No mds server is up or the cluster is laggy [ 931.156110][ T9498] libceph: mon0 (1)[c::]:6789 connect error [ 931.633635][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.640045][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.112112][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 932.855709][ T4654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.063958][T12861] chnl_net:caif_netlink_parms(): no params data found [ 934.412854][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 935.188473][ T4654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.501301][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 936.927595][ T4654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.963905][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.015651][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.042749][T12861] device bridge_slave_0 entered promiscuous mode [ 938.072605][T12861] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.079827][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.093284][T12861] device bridge_slave_1 entered promiscuous mode [ 938.690881][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 939.146616][ T4654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.247524][T12861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.485573][T12861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.878177][T12861] team0: Port device team_slave_0 added [ 940.973616][T12861] team0: Port device team_slave_1 added [ 942.456373][T12861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.474268][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.581113][T12861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.641840][T12861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.648848][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.767054][T12861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.462510][ T4654] tipc: Left network mode [ 943.571195][T12995] can0: slcan on ptm0. [ 943.581250][T11793] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 943.609079][T12861] device hsr_slave_0 entered promiscuous mode [ 943.671622][T12861] device hsr_slave_1 entered promiscuous mode [ 943.691303][T12861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 943.698931][T12861] Cannot create hsr debugfs directory [ 943.951717][T11793] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 943.971167][T11793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.986604][T11793] usb 3-1: config 0 descriptor?? [ 944.015816][T11793] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 944.225551][T13003] can0 (unregistered): slcan off ptm0. [ 944.426320][T11793] cpia1 3-1:0.0: unexpected state after lo power cmd: 01 [ 945.038051][T11793] gspca_cpia1: usb_control_msg 05, error -71 [ 945.103667][T11793] cpia1 3-1:0.0: unexpected systemstate: 01 [ 945.263936][T11793] usb 3-1: USB disconnect, device number 33 [ 946.830339][T12861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 948.465604][T12861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 948.526077][T12861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 949.046855][T12861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 950.010230][T13054] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 950.807716][T12861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.841271][ T1204] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 950.866400][T12861] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.049190][ T1204] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 951.098759][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.111614][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.127883][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.263355][ T1204] usb 2-1: config 0 descriptor?? [ 951.273277][ T1204] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 952.883210][ T1204] cpia1 2-1:0.0: unexpected state after lo power cmd: 01 [ 954.652139][ T1204] gspca_cpia1: usb_control_msg 01, error -71 [ 954.680096][ T1204] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 954.714051][ T1204] usb 2-1: USB disconnect, device number 39 [ 955.916926][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.040023][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.133689][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.140865][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.224441][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.272423][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 956.331929][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.339099][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.525290][T13142] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 957.247868][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 957.493356][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 957.661224][ T4654] device hsr_slave_0 left promiscuous mode [ 957.686071][ T4654] device hsr_slave_1 left promiscuous mode [ 957.712049][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.764534][ T4654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.776944][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.787368][ T4654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.799671][ T4654] device bridge_slave_1 left promiscuous mode [ 957.809170][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.836260][ T4654] device bridge_slave_0 left promiscuous mode [ 957.847709][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.917640][ T4654] device veth1_macvtap left promiscuous mode [ 957.925102][ T4654] device veth0_macvtap left promiscuous mode [ 957.945300][ T4654] device veth1_vlan left promiscuous mode [ 957.957013][ T4654] device veth0_vlan left promiscuous mode [ 958.186454][ T4654] bond1 (unregistering): (slave veth3): Releasing active interface [ 958.204356][ T4654] bond1 (unregistering): (slave veth3): the permanent HWaddr of slave - 12:55:5d:8b:45:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 958.234677][ T4654] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 958.245185][ T4654] bond1 (unregistering): Released all slaves [ 958.339660][T13160] overlayfs: failed to clone lowerpath [ 961.088968][T13178] gadgetfs: bound to dummy_udc driver [ 961.371544][ T4344] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 961.382940][ C0] gadgetfs: connected [ 961.388789][ T4344] gadgetfs: disconnected [ 961.519262][ T4654] team0 (unregistering): Port device team_slave_1 removed [ 961.584901][ T4654] team0 (unregistering): Port device team_slave_0 removed [ 961.654315][ T4654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.705058][ T4654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.711542][ C0] gadgetfs: connected [ 961.719192][ T4344] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 961.729704][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.749049][ C0] gadgetfs: configuration #1 [ 961.763535][ T4344] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input48 [ 961.862522][T13178] gadgetfs: suspended from state 3 [ 961.873945][ T4344] usb 1-1: USB disconnect, device number 42 [ 961.880887][T13178] gadgetfs: disconnected [ 962.247828][ T4654] bond0 (unregistering): Released all slaves [ 962.516138][T12861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 962.588762][T12861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.447403][T13204] overlayfs: failed to clone lowerpath [ 963.830415][T13145] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 963.839862][T13145] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 963.849488][T13145] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 963.863342][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 963.894755][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 963.990195][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 963.999003][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 964.007903][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 964.034237][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 964.146024][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 964.157565][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 964.634263][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 964.710310][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 964.860278][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 964.886186][T13194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2535'. [ 965.095789][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 965.124847][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 965.163060][T12861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.449246][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2554'. [ 972.793779][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 972.805654][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 972.870918][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 972.890061][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 972.901823][T13300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2563'. [ 972.923427][T12861] device veth0_vlan entered promiscuous mode [ 972.930446][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 972.949103][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 972.973520][T12861] device veth1_vlan entered promiscuous mode [ 973.088945][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 973.098016][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 973.146602][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 973.166639][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 973.279243][ T5440] libceph: connect (1)[c::]:6789 error -101 [ 973.333544][ T5440] libceph: mon0 (1)[c::]:6789 connect error [ 973.444822][T13304] ceph: No mds server is up or the cluster is laggy [ 973.671421][T11793] libceph: connect (1)[c::]:6789 error -101 [ 973.699020][T11793] libceph: mon0 (1)[c::]:6789 connect error [ 973.846493][T12861] device veth0_macvtap entered promiscuous mode [ 974.162537][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 974.185348][T12861] device veth1_macvtap entered promiscuous mode [ 974.290478][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.356533][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.396759][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.468672][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.261892][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.303643][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.625818][T12861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.700286][T13334] overlayfs: failed to clone upperpath [ 975.709417][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 975.738626][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 975.775004][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.806294][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.864019][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.923339][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.977261][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.071106][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.122103][T12861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.347299][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 976.398589][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 977.331604][T12861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.340366][T12861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.350146][T12861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.359337][T12861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.539422][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.584238][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.617381][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.621305][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 977.646892][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.671896][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 978.867344][T13368] o2cb: This node has not been configured. [ 978.873299][T13368] o2cb: Cluster check failed. Fix errors before retrying. [ 978.880451][T13368] (syz.5.2456,13368,1):user_dlm_register:674 ERROR: status = -22 [ 978.888506][T13368] (syz.5.2456,13368,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 981.431101][ T9498] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 982.391269][ T9498] usb 1-1: Using ep0 maxpacket: 16 [ 982.399444][ T9498] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.444613][ T9498] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.474940][ T9498] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 982.696128][ T9498] usb 1-1: config 0 interface 0 has no altsetting 0 [ 982.709700][ T9498] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 983.231439][ T9498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.247060][ T9498] usb 1-1: config 0 descriptor?? [ 983.907808][ T9498] usb 1-1: USB disconnect, device number 43 [ 986.791145][T10363] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 986.993677][T10363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.103010][T10363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.356413][T10363] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 987.551493][T10363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.680404][T10363] usb 1-1: config 0 descriptor?? [ 989.013580][T13520] gadgetfs: bound to dummy_udc driver [ 989.245904][T10363] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 989.280480][T10363] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 989.312773][T10363] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 989.344639][T10363] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 989.431161][T10363] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 989.442468][T10363] hid-steam 0003:28DE:1142.000B: No HID_FEATURE_REPORT submitted - nothing to read [ 989.546976][T10363] usb 1-1: USB disconnect, device number 44 [ 989.583767][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 989.637889][T10363] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 989.889292][T13531] fido_id[13531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 992.355105][T13555] o2cb: This node has not been configured. [ 992.361126][T13555] o2cb: Cluster check failed. Fix errors before retrying. [ 992.368285][T13555] (syz.2.2625,13555,0):user_dlm_register:674 ERROR: status = -22 [ 992.376325][T13555] (syz.2.2625,13555,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 992.681099][ T9498] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 992.921286][ T9498] usb 6-1: Using ep0 maxpacket: 16 [ 992.929009][ T9498] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.010591][ T9498] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.191736][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.198163][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.242214][ T9498] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 993.301639][ T9498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.362556][ T9498] usb 6-1: Product: syz [ 993.396095][ T9498] usb 6-1: Manufacturer: syz [ 993.429349][ T9498] usb 6-1: SerialNumber: syz [ 993.780422][ T9498] usb 6-1: 0:2 : does not exist [ 993.814304][ T9498] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 993.999034][ T9498] usb 6-1: USB disconnect, device number 2 [ 994.045854][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 994.219732][T13586] gadgetfs: bound to dummy_udc driver [ 994.352649][T13403] udevd[13403]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 996.468206][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 999.153479][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 1002.595805][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 1004.748395][T13731] o2cb: This node has not been configured. [ 1004.754502][T13731] o2cb: Cluster check failed. Fix errors before retrying. [ 1004.761852][T13731] (syz.2.2666,13731,0):user_dlm_register:674 ERROR: status = -22 [ 1004.769637][T13731] (syz.2.2666,13731,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1005.446189][T10363] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1005.654948][T10363] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1005.708689][T10363] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1005.749752][T10363] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1005.792934][T10363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.826101][T10363] usb 1-1: Product: syz [ 1005.830378][T10363] usb 1-1: Manufacturer: syz [ 1005.854540][T10363] usb 1-1: SerialNumber: syz [ 1005.889140][T10363] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1005.926411][T10363] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1005.958227][T10363] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1006.097107][T10363] usb 1-1: USB disconnect, device number 45 [ 1006.170067][T10363] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1006.228288][T10363] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1006.250704][T10363] ti_usb_3410_5052 1-1:2.0: device disconnected [ 1006.323862][T13753] netlink: 1012 bytes leftover after parsing attributes in process `syz.4.2678'. [ 1006.667473][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2683'. [ 1008.255530][ T4344] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1008.437150][T13790] netlink: 1012 bytes leftover after parsing attributes in process `syz.1.2692'. [ 1008.612864][ T4344] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1008.628175][ T4344] usb 6-1: config 1 has no interface number 0 [ 1008.638740][ T4344] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1008.661446][ T4344] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 1008.944943][ T4344] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1009.155406][ T4344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.341991][ T4344] usb 6-1: Product: syz [ 1009.366554][ T4344] usb 6-1: Manufacturer: syz [ 1009.400207][ T4344] usb 6-1: SerialNumber: syz [ 1009.443273][T13782] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1009.521861][ T4344] usb 6-1: Expected 3 endpoints, found: 2 [ 1009.906247][ T4344] usb 6-1: USB disconnect, device number 3 [ 1010.555492][T13826] o2cb: This node has not been configured. [ 1010.561513][T13826] o2cb: Cluster check failed. Fix errors before retrying. [ 1010.569161][T13826] (syz.2.2699,13826,0):user_dlm_register:674 ERROR: status = -22 [ 1010.577440][T13826] (syz.2.2699,13826,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1012.367306][T13799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1013.922399][T13854] loop2: detected capacity change from 0 to 32768 [ 1013.940463][T13854] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.2710 (13854) [ 1013.981683][T13854] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1013.992433][T13854] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1014.001670][T13854] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1014.011798][T13854] BTRFS info (device loop2): use zstd compression, level 3 [ 1014.019041][T13854] BTRFS info (device loop2): force clearing of disk cache [ 1014.026286][T13854] BTRFS info (device loop2): enabling disk space caching [ 1014.033498][T13854] BTRFS info (device loop2): disk space caching is enabled [ 1014.206461][T13854] BTRFS info (device loop2): enabling ssd optimizations [ 1014.219022][T13854] BTRFS info (device loop2): rebuilding free space tree [ 1014.292395][T13854] BTRFS info (device loop2): disabling free space tree [ 1014.299469][T13854] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1014.310555][T13854] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1015.572818][ T4273] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1017.331843][T13932] o2cb: This node has not been configured. [ 1017.337758][T13932] o2cb: Cluster check failed. Fix errors before retrying. [ 1017.345036][T13932] (syz.2.2720,13932,0):user_dlm_register:674 ERROR: status = -22 [ 1017.352887][T13932] (syz.2.2720,13932,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1023.216220][T13996] [ 1023.218613][T13996] ====================================================== [ 1023.225656][T13996] WARNING: possible circular locking dependency detected [ 1023.232695][T13996] syzkaller #0 Not tainted [ 1023.237132][T13996] ------------------------------------------------------ [ 1023.244164][T13996] syz.5.2743/13996 is trying to acquire lock: [ 1023.250252][T13996] ffff888038b5c428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 [ 1023.259433][T13996] [ 1023.259433][T13996] but task is already holding lock: [ 1023.266825][T13996] ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 1023.275872][T13996] [ 1023.275872][T13996] which lock already depends on the new lock. [ 1023.275872][T13996] [ 1023.286316][T13996] [ 1023.286316][T13996] the existing dependency chain (in reverse order) is: [ 1023.295350][T13996] [ 1023.295350][T13996] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 1023.302766][T13996] __mutex_lock+0x12d/0xae0 [ 1023.307839][T13996] rfcomm_security_cfm+0x95/0x780 [ 1023.313462][T13996] hci_encrypt_cfm+0x363/0x4d0 [ 1023.318824][T13996] hci_encrypt_change_evt+0x5e7/0xd30 [ 1023.324747][T13996] hci_event_packet+0x806/0x1290 [ 1023.330231][T13996] hci_rx_work+0x3eb/0xd40 [ 1023.335241][T13996] process_one_work+0x8ab/0x1160 [ 1023.340764][T13996] worker_thread+0xaf5/0x12a0 [ 1023.345986][T13996] kthread+0x29d/0x330 [ 1023.350642][T13996] ret_from_fork+0x1f/0x30 [ 1023.355654][T13996] [ 1023.355654][T13996] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 1023.363420][T13996] __mutex_lock+0x12d/0xae0 [ 1023.368493][T13996] hci_remote_features_evt+0x464/0xa10 [ 1023.374505][T13996] hci_event_packet+0x806/0x1290 [ 1023.379991][T13996] hci_rx_work+0x3eb/0xd40 [ 1023.384963][T13996] process_one_work+0x8ab/0x1160 [ 1023.390457][T13996] worker_thread+0xaf5/0x12a0 [ 1023.395693][T13996] kthread+0x29d/0x330 [ 1023.400310][T13996] ret_from_fork+0x1f/0x30 [ 1023.405281][T13996] [ 1023.405281][T13996] -> #0 (&hdev->lock){+.+.}-{3:3}: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1023.412616][T13996] __lock_acquire+0x2d18/0x7c40 [ 1023.418024][T13996] lock_acquire+0x1bb/0x4a0 [ 1023.423083][T13996] __mutex_lock+0x12d/0xae0 [ 1023.428136][T13996] l2cap_chan_connect+0xfb/0xe20 [ 1023.433626][T13996] l2cap_sock_connect+0x576/0x750 [ 1023.439211][T13996] kernel_connect+0x13e/0x1c0 [ 1023.444445][T13996] rfcomm_dlc_open+0x600/0x10c0 [ 1023.449855][T13996] rfcomm_sock_connect+0x2e9/0x600 [ 1023.455522][T13996] __sys_connect+0x3cb/0x450 [ 1023.460666][T13996] __x64_sys_connect+0x76/0x80 [ 1023.465983][T13996] do_syscall_64+0x4c/0xa0 [ 1023.471048][T13996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.477517][T13996] [ 1023.477517][T13996] other info that might help us debug this: [ 1023.477517][T13996] [ 1023.487776][T13996] Chain exists of: [ 1023.487776][T13996] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 1023.487776][T13996] [ 1023.500365][T13996] Possible unsafe locking scenario: [ 1023.500365][T13996] [ 1023.507855][T13996] CPU0 CPU1 [ 1023.513252][T13996] ---- ---- [ 1023.518636][T13996] lock(rfcomm_mutex); [ 1023.522822][T13996] lock(hci_cb_list_lock); [ 1023.529875][T13996] lock(rfcomm_mutex); [ 1023.536583][T13996] lock(&hdev->lock); [ 1023.540677][T13996] [ 1023.540677][T13996] *** DEADLOCK *** [ 1023.540677][T13996] [ 1023.548839][T13996] 1 lock held by syz.5.2743/13996: [ 1023.553979][T13996] #0: ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 1023.563424][T13996] [ 1023.563424][T13996] stack backtrace: [ 1023.569331][T13996] CPU: 0 PID: 13996 Comm: syz.5.2743 Not tainted syzkaller #0 [ 1023.576813][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1023.586901][T13996] Call Trace: [ 1023.590209][T13996] [ 1023.593172][T13996] dump_stack_lvl+0x188/0x24e [ 1023.597882][T13996] ? load_image+0x410/0x410 [ 1023.602440][T13996] ? show_regs_print_info+0x12/0x12 [ 1023.607666][T13996] ? print_circular_bug+0x12b/0x1a0 [ 1023.612911][T13996] check_noncircular+0x296/0x330 [ 1023.617893][T13996] ? add_chain_block+0x9b0/0x9b0 [ 1023.622870][T13996] ? lockdep_lock+0xf1/0x1f0 [ 1023.627506][T13996] ? _find_first_zero_bit+0xd2/0x100 [ 1023.632834][T13996] __lock_acquire+0x2d18/0x7c40 [ 1023.637735][T13996] ? verify_lock_unused+0x140/0x140 [ 1023.642969][T13996] ? verify_lock_unused+0x140/0x140 [ 1023.648209][T13996] lock_acquire+0x1bb/0x4a0 [ 1023.652743][T13996] ? l2cap_chan_connect+0xfb/0xe20 [ 1023.657942][T13996] ? __might_sleep+0xd0/0xd0 [ 1023.662560][T13996] ? read_lock_is_recursive+0x10/0x10 [ 1023.667964][T13996] ? __lock_acquire+0x7c40/0x7c40 [ 1023.673022][T13996] ? __lock_acquire+0x28d6/0x7c40 [ 1023.678084][T13996] __mutex_lock+0x12d/0xae0 [ 1023.682636][T13996] ? l2cap_chan_connect+0xfb/0xe20 [ 1023.687784][T13996] ? do_raw_read_unlock+0x39/0x70 [ 1023.692856][T13996] ? _raw_read_unlock+0x24/0x40 [ 1023.697746][T13996] ? hci_get_route+0x3a1/0x4d0 [ 1023.702537][T13996] ? l2cap_chan_connect+0xfb/0xe20 [ 1023.707679][T13996] ? mutex_lock_nested+0x10/0x10 [ 1023.712648][T13996] ? print_unlock_imbalance_bug+0x160/0x160 [ 1023.718575][T13996] ? mark_lock+0x94/0x320 [ 1023.722951][T13996] l2cap_chan_connect+0xfb/0xe20 [ 1023.727930][T13996] ? lock_chain_count+0x20/0x20 [ 1023.732803][T13996] ? l2cap_sock_connect+0x13e/0x750 [ 1023.738022][T13996] ? l2cap_chan_le_send_credits+0x590/0x590 [ 1023.743911][T13996] ? __local_bh_enable_ip+0x136/0x1c0 [ 1023.749286][T13996] ? _local_bh_enable+0xa0/0xa0 [ 1023.754137][T13996] l2cap_sock_connect+0x576/0x750 [ 1023.759159][T13996] ? l2cap_sock_bind+0x870/0x870 [ 1023.764107][T13996] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1023.770136][T13996] ? memset+0x1e/0x40 [ 1023.774151][T13996] ? kernel_connect+0xee/0x1c0 [ 1023.778949][T13996] kernel_connect+0x13e/0x1c0 [ 1023.783661][T13996] ? kernel_accept+0x420/0x420 [ 1023.788464][T13996] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 1023.790614][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1023.793506][T13996] rfcomm_dlc_open+0x600/0x10c0 [ 1023.793533][T13996] ? lock_chain_count+0x20/0x20 [ 1023.800780][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1023.805312][T13996] ? rfcomm_sock_connect+0x2c2/0x600 [ 1023.805338][T13996] ? rfcomm_dlc_free+0x40/0x40 [ 1023.805354][T13996] ? __local_bh_enable_ip+0x136/0x1c0 [ 1023.810535][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1023.817127][T13996] ? lockdep_hardirqs_on+0x94/0x140 [ 1023.817154][T13996] ? __local_bh_enable_ip+0x136/0x1c0 [ 1023.817172][T13996] ? _local_bh_enable+0xa0/0xa0 [ 1023.817188][T13996] ? do_raw_spin_unlock+0x11d/0x230 [ 1023.817207][T13996] rfcomm_sock_connect+0x2e9/0x600 [ 1023.817228][T13996] ? rfcomm_sock_bind+0x550/0x550 [ 1023.817248][T13996] __sys_connect+0x3cb/0x450 [ 1023.817266][T13996] ? __sys_connect_file+0x170/0x170 [ 1023.817290][T13996] __x64_sys_connect+0x76/0x80 [ 1023.817307][T13996] do_syscall_64+0x4c/0xa0 [ 1023.817324][T13996] ? clear_bhb_loop+0x60/0xb0 [ 1023.817342][T13996] ? clear_bhb_loop+0x60/0xb0 [ 1023.817359][T13996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.817384][T13996] RIP: 0033:0x7f63c619e159 [ 1023.817402][T13996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.817418][T13996] RSP: 002b:00007f63c7013028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1023.817440][T13996] RAX: ffffffffffffffda RBX: 00007f63c6425fa0 RCX: 00007f63c619e159 [ 1023.817453][T13996] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000004 [ 1023.817466][T13996] RBP: 00007f63c623506b R08: 0000000000000000 R09: 0000000000000000 [ 1023.817477][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.817487][T13996] R13: 00007f63c6426038 R14: 00007f63c6425fa0 R15: 00007ffdfa492fc8 [ 1023.817507][T13996] [ 1024.069579][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1024.077612][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1024.112029][T14005] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1024.548203][T13990] tipc: Resetting bearer [ 1024.614312][T13990] tipc: Disabling bearer [ 1024.728751][T14002] chnl_net:caif_netlink_parms(): no params data found [ 1024.743438][ T4403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.777800][T14002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.785073][T14002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.792937][T14002] device bridge_slave_0 entered promiscuous mode [ 1024.801298][T14002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.808398][T14002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.817215][T14002] device bridge_slave_1 entered promiscuous mode [ 1024.842500][T14002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.855274][T14002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.878279][T14002] team0: Port device team_slave_0 added [ 1024.891761][ T4403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.905464][T14002] team0: Port device team_slave_1 added [ 1024.935681][T14002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.953292][T14002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.979811][T14002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.991853][T14002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.998863][T14002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.025317][T14002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.042686][ T4403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.065825][T14002] device hsr_slave_0 entered promiscuous mode [ 1025.072600][T14002] device hsr_slave_1 entered promiscuous mode [ 1025.079047][T14002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1025.086891][T14002] Cannot create hsr debugfs directory [ 1025.095256][ T4403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.202965][ T4403] tipc: Left network mode [ 1025.782331][ T4403] IPVS: stopping master sync thread 5087 ... [ 1025.994619][ T4403] device hsr_slave_0 left promiscuous mode [ 1026.000928][ T4403] device hsr_slave_1 left promiscuous mode [ 1026.007556][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.015761][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.023822][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.031790][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.039405][ T4403] device bridge_slave_1 left promiscuous mode [ 1026.046520][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.054785][ T4403] device bridge_slave_0 left promiscuous mode [ 1026.064290][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.074680][ T4403] device veth1_macvtap left promiscuous mode [ 1026.080740][ T4403] device veth0_macvtap left promiscuous mode [ 1026.087201][ T4403] device veth1_vlan left promiscuous mode [ 1026.093175][ T4403] device veth0_vlan left promiscuous mode [ 1026.182414][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 1026.255070][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 1026.266577][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 1026.292409][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.320323][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.379799][ T4403] bond0 (unregistering): Released all slaves [ 1026.454823][T14002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1026.473576][T14002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1026.498158][T14002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1026.526281][T14002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1026.607326][T14002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.620075][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1026.629944][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1026.658015][T14002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.668588][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1026.679590][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1026.688470][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.695611][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.708025][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1026.718957][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1026.729694][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.738916][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.746050][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.763717][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1026.781228][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1026.790314][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1026.799245][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1026.809069][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.819279][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.843568][T14002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1026.854900][T14002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.868811][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.877637][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.887227][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.897377][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.907108][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.915775][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1027.030046][ T4403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.067854][ T4403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.106734][ T4403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.141835][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1027.149325][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1027.162233][T14002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.187335][ T4403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.293659][ T4403] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.334908][ T4403] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.389278][ T4403] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.435349][ T4403] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.544682][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1027.558062][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1027.573006][ T4403] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.595759][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.607278][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.618045][T14002] device veth0_vlan entered promiscuous mode [ 1027.626940][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.635185][ T1142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.650127][T14002] device veth1_vlan entered promiscuous mode [ 1027.660787][ T4403] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.687242][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.697414][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.706139][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.715411][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.728092][T14002] device veth0_macvtap entered promiscuous mode [ 1027.739475][ T4403] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.753635][T14002] device veth1_macvtap entered promiscuous mode [ 1027.769283][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.781411][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.791736][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.802451][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.812601][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.823230][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.834338][T14002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.845110][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.856402][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.866488][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.877509][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.887783][T14002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.898447][T14002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.909471][T14002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.918404][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.926748][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.934735][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.943479][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.952336][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1027.960695][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1027.974093][ T4403] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.987449][T14002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.996807][T14002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.006189][T14002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.015557][T14002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.063920][T14002] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 1028.089059][ T4403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.117066][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.127935][T14002] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 1028.132346][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.148840][ T4403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.167166][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1028.186054][ T4654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.195360][ T4654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.203740][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1028.223998][ T4403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.265298][T12865] Bluetooth: hci2: command 0x041b tx timeout [ 1028.314368][ T4403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.439940][ T4403] tipc: Left network mode [ 1028.448784][ T4403] tipc: Left network mode [ 1028.461265][ T4403] tipc: Left network mode [ 1030.019895][ T4403] device hsr_slave_0 left promiscuous mode [ 1030.026649][ T4403] device hsr_slave_1 left promiscuous mode [ 1030.034788][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.043212][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.050884][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.058893][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.068045][ T4403] device bridge_slave_1 left promiscuous mode [ 1030.075035][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.084794][ T4403] device bridge_slave_0 left promiscuous mode [ 1030.091560][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.386790][ T4403] device hsr_slave_0 left promiscuous mode [ 1030.395321][ T4403] device hsr_slave_1 left promiscuous mode [ 1030.401953][ T4403] device bridge_slave_1 left promiscuous mode [ 1030.408146][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.418175][ T4403] device bridge_slave_0 left promiscuous mode [ 1030.425093][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.436164][ T4403] device hsr_slave_0 left promiscuous mode [ 1030.442390][ T4403] device hsr_slave_1 left promiscuous mode [ 1030.448476][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.456869][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.464772][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.472298][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.479700][ T4403] device bridge_slave_1 left promiscuous mode [ 1030.485908][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.495014][ T4403] device bridge_slave_0 left promiscuous mode [ 1030.501448][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.511717][ T4403] device hsr_slave_0 left promiscuous mode [ 1030.517858][ T4403] device hsr_slave_1 left promiscuous mode [ 1030.524117][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.531792][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.539550][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.547462][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.555133][ T4403] device bridge_slave_1 left promiscuous mode [ 1030.561354][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.569213][ T4403] device bridge_slave_0 left promiscuous mode [ 1030.575415][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.753135][ T4403] device veth1_macvtap left promiscuous mode [ 1030.759221][ T4403] device veth0_macvtap left promiscuous mode [ 1030.765358][ T4403] device veth1_vlan left promiscuous mode [ 1030.772448][ T4403] device veth0_vlan left promiscuous mode [ 1030.779409][ T4403] device veth1_macvtap left promiscuous mode [ 1030.785522][ T4403] device veth0_macvtap left promiscuous mode [ 1030.792950][ T4403] device veth1_vlan left promiscuous mode [ 1030.798772][ T4403] device veth0_vlan left promiscuous mode [ 1030.806061][ T4403] device veth1_macvtap left promiscuous mode [ 1030.814028][ T4403] device veth0_macvtap left promiscuous mode [ 1030.820117][ T4403] device veth1_vlan left promiscuous mode [ 1030.827113][ T4403] device veth0_vlan left promiscuous mode [ 1030.836692][ T4403] device veth1_macvtap left promiscuous mode [ 1030.844234][ T4403] device veth0_macvtap left promiscuous mode [ 1030.850330][ T4403] device veth1_vlan left promiscuous mode [ 1030.858617][ T4403] device veth0_vlan left promiscuous mode [ 1031.207061][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 1031.231724][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 1031.255769][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.281464][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.324281][ T4403] bond0 (unregistering): Released all slaves [ 1031.516786][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 1031.541984][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 1031.568742][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.595542][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.646725][ T4403] bond0 (unregistering): Released all slaves [ 1031.792995][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 1031.803871][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 1031.813978][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.844895][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.886844][ T4403] bond0 (unregistering): Released all slaves [ 1032.021569][ T4403] team0 (unregistering): Port device team_slave_1 removed [ 1032.047577][ T4403] team0 (unregistering): Port device team_slave_0 removed [ 1032.075308][ T4403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.101769][ T4403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.144060][ T4403] bond0 (unregistering): Released all slaves