last executing test programs: 40.237134561s ago: executing program 2 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0x478c}], 0x1, 0x10040, 0x0) 39.211945283s ago: executing program 2 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000180), 0x4000095, 0x0) 38.804442522s ago: executing program 2 (id=96): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000001000), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 38.419871904s ago: executing program 2 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000001a40)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(&(0x7f0000001ac0)='./file0/file0\x00', &(0x7f0000001d40)='./file0\x00', 0x0, 0x18d093, 0x0) mount$bind(&(0x7f0000001d80)='.\x00', &(0x7f0000001dc0)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000001e00)='./file0\x00', 0xb) 38.02374113s ago: executing program 2 (id=102): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 35.95073037s ago: executing program 2 (id=112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000240)={r1, r0, 0x800}) 35.486075761s ago: executing program 32 (id=112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000240)={r1, r0, 0x800}) 22.557832286s ago: executing program 1 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0) 22.319822382s ago: executing program 1 (id=176): set_mempolicy(0x3, 0x0, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0xfd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x80) write(r1, &(0x7f0000000140)='3', 0x4e) read$FUSE(r0, 0x0, 0x0) 21.644530362s ago: executing program 1 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000006ac0)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.084672321s ago: executing program 1 (id=183): mkdir(&(0x7f0000000500)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x800800, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x10454ca, 0x0) 20.543129148s ago: executing program 1 (id=185): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 16.702330838s ago: executing program 1 (id=203): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_TXQLEN={0x8, 0xd, 0x3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 16.006013513s ago: executing program 33 (id=203): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_TXQLEN={0x8, 0xd, 0x3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 5.554773313s ago: executing program 0 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a566b9700b00000f3266b80e5ca48f0f20e06635040000000f22e0bafc0cec0f0131660f38805dcc0f01c2", 0x81}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.961551736s ago: executing program 0 (id=260): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mremap(&(0x7f0000a26000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000067000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) 4.667895722s ago: executing program 0 (id=262): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x7, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.601660255s ago: executing program 3 (id=263): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 4.429379157s ago: executing program 3 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x20000001}) close_range(r0, 0xffffffffffffffff, 0x0) 4.322328072s ago: executing program 4 (id=266): r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000680)=@userptr={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x8, 0x0, 0x7}, 0x0, 0x2, {&(0x7f0000000080)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x8, "00000010"}, 0x0, 0x2, {&(0x7f0000000300)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000340)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000380)=0x1) 4.186260154s ago: executing program 3 (id=267): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000400)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1c8080, 0x81) getdents(r2, &(0x7f0000001cc0)=""/4096, 0x1000) 3.554364371s ago: executing program 3 (id=268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000280)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.554386206s ago: executing program 3 (id=269): mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x21c0, 0x103) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x108843, 0x98) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a40)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000b80)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c00)=@new_dev={0x2, 0xcb6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, &(0x7f0000000c40)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000c80)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x100032b0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x200, 0x0, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000f80)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r5, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) 2.48163398s ago: executing program 0 (id=270): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 2.326249148s ago: executing program 4 (id=271): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000600)={0x1, 0x0, 0x2}, &(0x7f0000000640)=0x8) 2.259515869s ago: executing program 0 (id=272): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd28, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4054}, 0x0) setns(0xc9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a29a75ac180000000200000000ddffff00000004010100000000000002"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 2.184844613s ago: executing program 4 (id=273): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x40000140) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10004) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.847064565s ago: executing program 4 (id=274): mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) 1.762515238s ago: executing program 0 (id=275): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x10, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.253378972s ago: executing program 3 (id=276): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x20000005) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000240)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) 630.270818ms ago: executing program 4 (id=277): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000005000000000000000200000d0000000000000000020000000000000000001800030000000000000e01000000000000000000005f"], &(0x7f00000000c0)=""/169, 0x49, 0xa9, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 0s ago: executing program 4 (id=278): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000540)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 65.518539][ T5268] 8021q: adding VLAN 0 to HW filter on device bond0 Starting crond: [ 65.583720][ T5268] eql: remember to turn off Van-Jacobson compression on your slave devices OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.11' (ED25519) to the list of known hosts. syzkaller login: [ 92.109810][ T30] cfg80211: failed to load regulatory.db [ 94.257760][ T5594] cgroup: Unknown subsys name 'net' [ 94.488865][ T5594] cgroup: Unknown subsys name 'cpuset' [ 94.563426][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.488261][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.573273][ T4923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.576258][ T4923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.578223][ T4923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.580446][ T4923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.583648][ T4923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.646124][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.680940][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.687617][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.706299][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.719272][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.722492][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.722879][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.723832][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.727276][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.731865][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.732246][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.738255][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.740011][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.751228][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.751297][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.752368][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.762571][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.792201][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.865319][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.875601][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.235559][ T5611] rdma_rxe: Failed to create IPv4 UDP tunnel [ 102.270339][ T5610] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 102.270682][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 102.279570][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.296753][ T5612] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 102.333591][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.361216][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.866837][ T5614] infiniband rxe0: set active [ 102.869352][ T5614] infiniband rxe0: added rxe_eth0 [ 102.974495][ T1245] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.978457][ T5614] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 102.978498][ T5614] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 102.978542][ T5614] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 103.144352][ T5617] Bluetooth: hci1: command tx timeout [ 103.144516][ T5617] Bluetooth: hci0: command tx timeout [ 103.144612][ T5617] Bluetooth: hci2: command tx timeout [ 103.144696][ T5617] Bluetooth: hci4: command tx timeout [ 103.145005][ T5631] Bluetooth: hci3: command tx timeout [ 103.227782][ T5614] RDS/IB: rxe0: added [ 103.228498][ T5614] smc: adding ib device rxe0 with port count 1 [ 103.232600][ T5614] smc: ib device rxe0 port 1 has no pnetid [ 103.299432][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.356830][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.479331][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.509546][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.874753][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.474359][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.814273][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.846830][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.849339][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.849539][ T5610] bridge_slave_0: entered allmulticast mode [ 104.852615][ T5610] bridge_slave_0: entered promiscuous mode [ 104.885088][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.885221][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.885760][ T5611] bridge_slave_0: entered allmulticast mode [ 104.890800][ T5611] bridge_slave_0: entered promiscuous mode [ 104.894925][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.895239][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.915619][ T5612] bridge_slave_0: entered allmulticast mode [ 104.944592][ T5612] bridge_slave_0: entered promiscuous mode [ 104.950933][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.951067][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.951599][ T5613] bridge_slave_0: entered allmulticast mode [ 104.980555][ T5613] bridge_slave_0: entered promiscuous mode [ 104.983209][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.983536][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.983958][ T5610] bridge_slave_1: entered allmulticast mode [ 105.001906][ T5610] bridge_slave_1: entered promiscuous mode [ 105.007202][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.007646][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.008105][ T5611] bridge_slave_1: entered allmulticast mode [ 105.023116][ T5611] bridge_slave_1: entered promiscuous mode [ 105.043731][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.043874][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.044075][ T5612] bridge_slave_1: entered allmulticast mode [ 105.047542][ T5612] bridge_slave_1: entered promiscuous mode [ 105.051532][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.051687][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.051869][ T5613] bridge_slave_1: entered allmulticast mode [ 105.060391][ T5613] bridge_slave_1: entered promiscuous mode [ 105.222833][ T5620] Bluetooth: hci4: command tx timeout [ 105.222869][ T5620] Bluetooth: hci2: command tx timeout [ 105.222894][ T5620] Bluetooth: hci0: command tx timeout [ 105.222926][ T5620] Bluetooth: hci1: command tx timeout [ 105.223174][ T5631] Bluetooth: hci3: command tx timeout [ 105.310161][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.328911][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.339623][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.357948][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.372458][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.387830][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.391925][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.414342][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.587343][ T5610] team0: Port device team_slave_0 added [ 105.589792][ T5611] team0: Port device team_slave_0 added [ 105.607472][ T5612] team0: Port device team_slave_0 added [ 105.610188][ T5613] team0: Port device team_slave_0 added [ 105.615828][ T5610] team0: Port device team_slave_1 added [ 105.635395][ T5611] team0: Port device team_slave_1 added [ 105.640860][ T5612] team0: Port device team_slave_1 added [ 105.654688][ T5613] team0: Port device team_slave_1 added [ 105.712237][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.832041][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.832063][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.832104][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.862518][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.862579][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.862643][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.881023][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.881073][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.881165][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.894006][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.894058][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.894162][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.901545][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.901595][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.901645][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.926344][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.926396][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.926502][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.930943][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.930985][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.931059][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.940130][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.940182][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.940263][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.674617][ T5610] hsr_slave_0: entered promiscuous mode [ 106.676153][ T5610] hsr_slave_1: entered promiscuous mode [ 106.689007][ T5611] hsr_slave_0: entered promiscuous mode [ 106.698304][ T5611] hsr_slave_1: entered promiscuous mode [ 106.701409][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 106.701501][ T5611] Cannot create hsr debugfs directory [ 106.730847][ T5612] hsr_slave_0: entered promiscuous mode [ 106.731907][ T5612] hsr_slave_1: entered promiscuous mode [ 106.732542][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 106.732566][ T5612] Cannot create hsr debugfs directory [ 106.757105][ T5613] hsr_slave_0: entered promiscuous mode [ 106.758546][ T5613] hsr_slave_1: entered promiscuous mode [ 106.760839][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 106.760859][ T5613] Cannot create hsr debugfs directory [ 107.302941][ T5617] Bluetooth: hci1: command tx timeout [ 107.302980][ T5617] Bluetooth: hci0: command tx timeout [ 107.303005][ T5617] Bluetooth: hci2: command tx timeout [ 107.303028][ T5617] Bluetooth: hci4: command tx timeout [ 107.303033][ T5631] Bluetooth: hci3: command tx timeout [ 107.852533][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.902541][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.927634][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.959189][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.990445][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.019419][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.019970][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.020115][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.020292][ T5614] bridge_slave_0: entered allmulticast mode [ 108.022134][ T5614] bridge_slave_0: entered promiscuous mode [ 108.077058][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.099217][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.099939][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.100049][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.100216][ T5614] bridge_slave_1: entered allmulticast mode [ 108.104071][ T5614] bridge_slave_1: entered promiscuous mode [ 108.215929][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.239747][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.311431][ T5614] team0: Port device team_slave_0 added [ 108.338298][ T5614] team0: Port device team_slave_1 added [ 108.339222][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.367417][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.485415][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.509130][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.547059][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.590064][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.592082][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.592103][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.592122][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.607296][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.666650][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.691499][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.691522][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.691542][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.886977][ T5614] hsr_slave_0: entered promiscuous mode [ 108.888355][ T5614] hsr_slave_1: entered promiscuous mode [ 108.889341][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 108.889359][ T5614] Cannot create hsr debugfs directory [ 108.891445][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.938165][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.954270][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.995979][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.018587][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.056344][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.099172][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.137924][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.375575][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.384367][ T5631] Bluetooth: hci0: command tx timeout [ 109.384397][ T5620] Bluetooth: hci3: command tx timeout [ 109.384402][ T5631] Bluetooth: hci4: command tx timeout [ 109.384427][ T5620] Bluetooth: hci2: command tx timeout [ 109.384431][ T5631] Bluetooth: hci1: command tx timeout [ 109.448662][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.478290][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.506434][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.577205][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.606345][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.626063][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.667185][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.901649][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.012260][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.036586][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.055895][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.086461][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.097076][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.122479][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.146478][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.161089][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.188870][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.212299][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.247559][ T3402] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.248156][ T3402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.299030][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.299199][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.377777][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.385128][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.438901][ T3402] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.439036][ T3402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.499137][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.499257][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.537621][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.596639][ T3402] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.596795][ T3402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.643109][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.651746][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.651984][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.831235][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.880520][ T3358] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.880750][ T3358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.990227][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.990363][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.056525][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.232563][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.300757][ T3358] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.300972][ T3358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.351393][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.351609][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.393171][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.514792][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.939622][ T5611] veth0_vlan: entered promiscuous mode [ 113.017148][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.078137][ T5611] veth1_vlan: entered promiscuous mode [ 113.141503][ T5612] veth0_vlan: entered promiscuous mode [ 113.163847][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.253934][ T5612] veth1_vlan: entered promiscuous mode [ 113.297159][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.402288][ T5611] veth0_macvtap: entered promiscuous mode [ 113.436420][ T5611] veth1_macvtap: entered promiscuous mode [ 113.564789][ T5612] veth0_macvtap: entered promiscuous mode [ 113.582982][ T5610] veth0_vlan: entered promiscuous mode [ 113.601596][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.617620][ T5612] veth1_macvtap: entered promiscuous mode [ 113.653018][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.676647][ T5610] veth1_vlan: entered promiscuous mode [ 113.720903][ T5614] veth0_vlan: entered promiscuous mode [ 113.747925][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.779468][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.893455][ T5614] veth1_vlan: entered promiscuous mode [ 114.059604][ T5613] veth0_vlan: entered promiscuous mode [ 114.241026][ T5610] veth0_macvtap: entered promiscuous mode [ 114.366064][ T5613] veth1_vlan: entered promiscuous mode [ 114.379168][ T5610] veth1_macvtap: entered promiscuous mode [ 114.594546][ T3401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.594575][ T3401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.702629][ T5614] veth0_macvtap: entered promiscuous mode [ 114.703707][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.703730][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.773494][ T3401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.773516][ T3401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.789046][ T5614] veth1_macvtap: entered promiscuous mode [ 114.812130][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.886849][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.886871][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.911842][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.016944][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.052132][ T5613] veth0_macvtap: entered promiscuous mode [ 115.100580][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.151057][ T5613] veth1_macvtap: entered promiscuous mode [ 115.485540][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.568006][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.614700][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.635093][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 115.840177][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.840201][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.405767][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.405793][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.958774][ T3358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.958800][ T3358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.475323][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.475349][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.650832][ T5845] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.829724][ T3401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.829750][ T3401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.839615][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.747387][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.747414][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.853682][ T1192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.874779][ T1192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.934882][ T1192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.936394][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.195435][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.237407][ T3369] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.505969][ T5873] FAULT_INJECTION: forcing a failure. [ 119.505969][ T5873] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.506040][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.506067][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.506088][ T5873] Call Trace: [ 119.506098][ T5873] [ 119.506109][ T5873] dump_stack_lvl+0xe8/0x150 [ 119.506162][ T5873] should_fail_ex+0x447/0x5e0 [ 119.506195][ T5873] _copy_from_iter+0x1d3/0x1680 [ 119.506221][ T5873] ? __alloc_frozen_pages_noprof+0x279/0x440 [ 119.506252][ T5873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 119.506281][ T5873] ? __pfx__copy_from_iter+0x10/0x10 [ 119.506318][ T5873] ? alloc_pages_mpol+0x11b/0x280 [ 119.506351][ T5873] copy_page_from_iter+0x219/0x2d0 [ 119.506382][ T5873] anon_pipe_write+0xdb8/0x1a90 [ 119.506414][ T5873] ? anon_pipe_write+0x1011/0x1a90 [ 119.506455][ T5873] ? __pfx_anon_pipe_write+0x10/0x10 [ 119.506490][ T5873] ? futex_wait+0x2a2/0x390 [ 119.506523][ T5873] ? __pfx_autoremove_wake_function+0x10/0x10 [ 119.506554][ T5873] ? __pfx_futex_wait+0x10/0x10 [ 119.506586][ T5873] ? bpf_lsm_file_permission+0x9/0x20 [ 119.506611][ T5873] ? security_file_permission+0x75/0x260 [ 119.506662][ T5873] vfs_write+0x61e/0xbb0 [ 119.506707][ T5873] ? __pfx_vfs_write+0x10/0x10 [ 119.506746][ T5873] ? __fget_files+0x3a8/0x420 [ 119.506778][ T5873] ? __fget_files+0x2a/0x420 [ 119.506814][ T5873] ? fdget+0x1b2/0x250 [ 119.506854][ T5873] ksys_write+0x156/0x270 [ 119.506892][ T5873] ? __pfx_ksys_write+0x10/0x10 [ 119.506960][ T5873] do_syscall_64+0x166/0x520 [ 119.506986][ T5873] ? trace_irq_disable+0x3b/0x140 [ 119.507010][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.507032][ T5873] ? clear_bhb_loop+0x70/0xc0 [ 119.507060][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.507082][ T5873] RIP: 0033:0x7f39092cf559 [ 119.507117][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.507138][ T5873] RSP: 002b:00007f3907526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.507163][ T5873] RAX: ffffffffffffffda RBX: 00007f3909555fa0 RCX: 00007f39092cf559 [ 119.507179][ T5873] RDX: 00000000fffffede RSI: 0000200000000400 RDI: 0000000000000005 [ 119.507192][ T5873] RBP: 00007f3909366b50 R08: 0000000000000000 R09: 0000000000000000 [ 119.507205][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.507219][ T5873] R13: 00007f3909556038 R14: 00007f3909555fa0 R15: 00007ffd2c4a0dc8 [ 119.507257][ T5873] [ 120.280289][ T5884] ======================================================= [ 120.280289][ T5884] WARNING: The mand mount option has been deprecated and [ 120.280289][ T5884] and is ignored by this kernel. Remove the mand [ 120.280289][ T5884] option from the mount to silence this warning. [ 120.280289][ T5884] ======================================================= [ 120.555748][ T3401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.622424][ T3358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.624504][ T3358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.624779][ T3358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.624957][ T3358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.625186][ T3358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.713233][ T3358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.793857][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.915526][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.163153][ T1192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.166715][ T3358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.166937][ T3358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.213815][ T1002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.625734][ T5898] FAULT_INJECTION: forcing a failure. [ 121.625734][ T5898] name failslab, interval 1, probability 0, space 0, times 1 [ 121.625771][ T5898] CPU: 0 UID: 0 PID: 5898 Comm: syz.4.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.625798][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.625812][ T5898] Call Trace: [ 121.625821][ T5898] [ 121.625831][ T5898] dump_stack_lvl+0xe8/0x150 [ 121.625876][ T5898] should_fail_ex+0x447/0x5e0 [ 121.625912][ T5898] should_failslab+0xa8/0x100 [ 121.625942][ T5898] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 121.625967][ T5898] ? __kasan_kmalloc+0x93/0xb0 [ 121.625991][ T5898] ? v9fs_init_fs_context+0x10a/0x540 [ 121.626022][ T5898] ? v9fs_init_fs_context+0x10a/0x540 [ 121.626062][ T5898] kstrdup+0x42/0x100 [ 121.626087][ T5898] v9fs_init_fs_context+0x10a/0x540 [ 121.626122][ T5898] alloc_fs_context+0x99e/0xd00 [ 121.626156][ T5898] do_new_mount+0x177/0xb00 [ 121.626186][ T5898] ? cap_capable+0x123/0x460 [ 121.626228][ T5898] ? __pfx_do_new_mount+0x10/0x10 [ 121.626262][ T5898] ? ns_capable+0x84/0xe0 [ 121.626297][ T5898] ? path_mount+0x647/0x1050 [ 121.626332][ T5898] ? user_path_at+0xd4/0x160 [ 121.626368][ T5898] __se_sys_mount+0x31d/0x420 [ 121.626407][ T5898] ? __pfx___se_sys_mount+0x10/0x10 [ 121.626447][ T5898] ? __x64_sys_mount+0x20/0xc0 [ 121.626487][ T5898] do_syscall_64+0x166/0x520 [ 121.626512][ T5898] ? trace_irq_disable+0x3b/0x140 [ 121.626537][ T5898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.626561][ T5898] ? clear_bhb_loop+0x70/0xc0 [ 121.626590][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.626613][ T5898] RIP: 0033:0x7f665cadf559 [ 121.626636][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.626655][ T5898] RSP: 002b:00007f665ad2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.626681][ T5898] RAX: ffffffffffffffda RBX: 00007f665cd65fa0 RCX: 00007f665cadf559 [ 121.626699][ T5898] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000200 [ 121.626733][ T5898] RBP: 00007f665cb76b50 R08: 00002000000002c0 R09: 0000000000000000 [ 121.626749][ T5898] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 121.626765][ T5898] R13: 00007f665cd66038 R14: 00007f665cd65fa0 R15: 00007fff5c457ee8 [ 121.626801][ T5898] [ 122.562620][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.243952][ T5919] mmap: syz.1.25 (5919) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.513020][ T5924] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 125.325738][ T5735] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.400069][ T5955] FAULT_INJECTION: forcing a failure. [ 125.400069][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 125.400107][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.400135][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.400149][ T5955] Call Trace: [ 125.400158][ T5955] [ 125.400167][ T5955] dump_stack_lvl+0xe8/0x150 [ 125.400207][ T5955] should_fail_ex+0x447/0x5e0 [ 125.400237][ T5955] should_failslab+0xa8/0x100 [ 125.400265][ T5955] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 125.400289][ T5955] ? request_key_auth_new+0x17f/0xa00 [ 125.400311][ T5955] ? request_key_auth_new+0x17f/0xa00 [ 125.400332][ T5955] ? request_key_auth_new+0xff/0xa00 [ 125.400359][ T5955] kmemdup_noprof+0x2b/0x70 [ 125.400384][ T5955] request_key_auth_new+0x17f/0xa00 [ 125.400418][ T5955] ? __pfx_request_key_auth_new+0x10/0x10 [ 125.400453][ T5955] request_key_and_link+0xe86/0x15a0 [ 125.400496][ T5955] ? __pfx_request_key_and_link+0x10/0x10 [ 125.400532][ T5955] ? lock_acquire+0x115/0x350 [ 125.400587][ T5955] ? __pfx_key_default_cmp+0x10/0x10 [ 125.400613][ T5955] ? __pfx_keyring_search_iterator+0x10/0x10 [ 125.400641][ T5955] ? down_read+0x151/0x200 [ 125.400669][ T5955] ? __pfx_down_read+0x10/0x10 [ 125.400698][ T5955] ? _copy_from_user+0x94/0xb0 [ 125.400733][ T5955] __se_sys_request_key+0x29a/0x350 [ 125.400766][ T5955] ? __pfx___se_sys_request_key+0x10/0x10 [ 125.400814][ T5955] do_syscall_64+0x166/0x520 [ 125.400841][ T5955] ? trace_irq_disable+0x3b/0x140 [ 125.400865][ T5955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.400889][ T5955] ? clear_bhb_loop+0x70/0xc0 [ 125.400918][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.400942][ T5955] RIP: 0033:0x7f39092cf559 [ 125.400965][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.400985][ T5955] RSP: 002b:00007f3907526028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 125.401011][ T5955] RAX: ffffffffffffffda RBX: 00007f3909555fa0 RCX: 00007f39092cf559 [ 125.401029][ T5955] RDX: 0000200000001f80 RSI: 0000200000001f40 RDI: 0000200000001f00 [ 125.401045][ T5955] RBP: 00007f3909366b50 R08: 0000000000000000 R09: 0000000000000000 [ 125.401058][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.401071][ T5955] R13: 00007f3909556038 R14: 00007f3909555fa0 R15: 00007ffd2c4a0dc8 [ 125.401106][ T5955] [ 125.816598][ T5735] usb 4-1: New USB device found: idVendor=047f, idProduct=0418, bcdDevice=0.00 [ 125.851901][ T5735] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.851937][ T5735] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.851960][ T5735] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.851988][ T5735] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.852024][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.376053][ T5735] usb 4-1: config 0 descriptor?? [ 126.929466][ T5735] plantronics 0003:047F:0418.0001: ignoring exceeding usage max [ 127.293550][ T5735] plantronics 0003:047F:0418.0001: hiddev0,hidraw0: USB HID v0.10 Joystick [HID 047f:0418] on usb-dummy_hcd.3-1/input0 [ 127.547815][ T5977] FAULT_INJECTION: forcing a failure. [ 127.547815][ T5977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.547856][ T5977] CPU: 1 UID: 0 PID: 5977 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.547885][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.547899][ T5977] Call Trace: [ 127.547908][ T5977] [ 127.547922][ T5977] dump_stack_lvl+0xe8/0x150 [ 127.547969][ T5977] should_fail_ex+0x447/0x5e0 [ 127.548004][ T5977] _copy_from_user+0x2d/0xb0 [ 127.548036][ T5977] ___sys_recvmsg+0x173/0x5a0 [ 127.548068][ T5977] ? __pfx____sys_recvmsg+0x10/0x10 [ 127.548098][ T5977] ? lock_acquire+0x115/0x350 [ 127.548167][ T5977] do_recvmmsg+0x320/0x800 [ 127.548202][ T5977] ? __pfx_do_recvmmsg+0x10/0x10 [ 127.548228][ T5977] ? do_futex+0x3e7/0x4e0 [ 127.548267][ T5977] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 127.548317][ T5977] __x64_sys_recvmmsg+0x198/0x250 [ 127.548346][ T5977] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 127.548393][ T5977] do_syscall_64+0x166/0x520 [ 127.548418][ T5977] ? trace_irq_disable+0x3b/0x140 [ 127.548443][ T5977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.548468][ T5977] ? clear_bhb_loop+0x70/0xc0 [ 127.548497][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.548522][ T5977] RIP: 0033:0x7f023572f559 [ 127.548543][ T5977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.548563][ T5977] RSP: 002b:00007f0233986028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.548588][ T5977] RAX: ffffffffffffffda RBX: 00007f02359b5fa0 RCX: 00007f023572f559 [ 127.548606][ T5977] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 127.548621][ T5977] RBP: 00007f02357c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 127.548635][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.548649][ T5977] R13: 00007f02359b6038 R14: 00007f02359b5fa0 R15: 00007ffd01ff1b98 [ 127.548686][ T5977] [ 127.931413][ T5982] FAULT_INJECTION: forcing a failure. [ 127.931413][ T5982] name failslab, interval 1, probability 0, space 0, times 0 [ 127.931463][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.931490][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.931503][ T5982] Call Trace: [ 127.931512][ T5982] [ 127.931523][ T5982] dump_stack_lvl+0xe8/0x150 [ 127.931566][ T5982] should_fail_ex+0x447/0x5e0 [ 127.931600][ T5982] should_failslab+0xa8/0x100 [ 127.931631][ T5982] __kmalloc_cache_noprof+0x9c/0x670 [ 127.931654][ T5982] ? alloc_netdev_mqs+0xc5f/0x1260 [ 127.931679][ T5982] ? alloc_netdev_mqs+0xc5f/0x1260 [ 127.931706][ T5982] ? __xdp_rxq_info_reg+0x171/0x280 [ 127.931736][ T5982] alloc_netdev_mqs+0xc5f/0x1260 [ 127.931769][ T5982] ipip6_tunnel_locate+0x557/0x940 [ 127.931810][ T5982] ? __pfx_ipip6_tunnel_locate+0x10/0x10 [ 127.931862][ T5982] ipip6_tunnel_ctl+0x76a/0xac0 [ 127.931898][ T5982] ip_tunnel_siocdevprivate+0x12a/0x1e0 [ 127.931937][ T5982] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 127.931993][ T5982] ipip6_tunnel_siocdevprivate+0x2b6/0x15c0 [ 127.932027][ T5982] ? __lock_acquire+0x747/0x2de0 [ 127.932066][ T5982] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 127.932106][ T5982] ? tomoyo_path_number_perm+0x219/0x5f0 [ 127.932139][ T5982] ? tomoyo_path_number_perm+0x219/0x5f0 [ 127.932177][ T5982] ? do_raw_spin_lock+0x12b/0x2f0 [ 127.932206][ T5982] ? lock_acquire+0x115/0x350 [ 127.932251][ T5982] ? full_name_hash+0x92/0xe0 [ 127.932291][ T5982] dev_ifsioc+0xb56/0x1360 [ 127.932335][ T5982] dev_ioctl+0x84c/0x1150 [ 127.932374][ T5982] sock_ioctl+0x756/0x7f0 [ 127.932404][ T5982] ? __pfx_sock_ioctl+0x10/0x10 [ 127.932435][ T5982] ? __fget_files+0x2a/0x420 [ 127.932473][ T5982] ? bpf_lsm_file_ioctl+0x9/0x20 [ 127.932500][ T5982] ? __pfx_sock_ioctl+0x10/0x10 [ 127.932527][ T5982] __se_sys_ioctl+0xff/0x170 [ 127.932555][ T5982] do_syscall_64+0x166/0x520 [ 127.932580][ T5982] ? trace_irq_disable+0x3b/0x140 [ 127.932605][ T5982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.932634][ T5982] ? clear_bhb_loop+0x70/0xc0 [ 127.932662][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.932685][ T5982] RIP: 0033:0x7f1d673ff559 [ 127.932708][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.932727][ T5982] RSP: 002b:00007f1d65656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.932753][ T5982] RAX: ffffffffffffffda RBX: 00007f1d67685fa0 RCX: 00007f1d673ff559 [ 127.932770][ T5982] RDX: 0000200000000940 RSI: 00000000000089f1 RDI: 0000000000000004 [ 127.932786][ T5982] RBP: 00007f1d67496b50 R08: 0000000000000000 R09: 0000000000000000 [ 127.932800][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.932813][ T5982] R13: 00007f1d67686038 R14: 00007f1d67685fa0 R15: 00007fff87e03b78 [ 127.932856][ T5982] [ 127.938581][ T5735] usb 4-1: USB disconnect, device number 2 [ 128.466271][ T5978] fido_id[5978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 129.202212][ T6001] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 130.207505][ T6020] syz.0.59 uses obsolete (PF_INET,SOCK_PACKET) [ 130.569756][ T6030] FAULT_INJECTION: forcing a failure. [ 130.569756][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 130.569797][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.569824][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.569839][ T6030] Call Trace: [ 130.569847][ T6030] [ 130.569857][ T6030] dump_stack_lvl+0xe8/0x150 [ 130.569905][ T6030] should_fail_ex+0x447/0x5e0 [ 130.569942][ T6030] should_failslab+0xa8/0x100 [ 130.569973][ T6030] __kmalloc_cache_noprof+0x9c/0x670 [ 130.569999][ T6030] ? ucma_alloc_ctx+0x4e/0x330 [ 130.570034][ T6030] ? ucma_alloc_ctx+0x4e/0x330 [ 130.570077][ T6030] ucma_alloc_ctx+0x4e/0x330 [ 130.570117][ T6030] ucma_create_id+0x1e3/0x370 [ 130.570154][ T6030] ? __pfx_ucma_create_id+0x10/0x10 [ 130.570206][ T6030] ucma_write+0x252/0x2f0 [ 130.570243][ T6030] ? __pfx_ucma_write+0x10/0x10 [ 130.570276][ T6030] ? security_file_permission+0x75/0x260 [ 130.570311][ T6030] ? rw_verify_area+0x209/0x4d0 [ 130.570348][ T6030] ? __pfx_ucma_write+0x10/0x10 [ 130.570381][ T6030] vfs_write+0x29f/0xbb0 [ 130.570433][ T6030] ? __pfx_vfs_write+0x10/0x10 [ 130.570472][ T6030] ? __fget_files+0x2a/0x420 [ 130.570505][ T6030] ? __fget_files+0x3a8/0x420 [ 130.570537][ T6030] ? __fget_files+0x2a/0x420 [ 130.570575][ T6030] ? fdget+0x1b2/0x250 [ 130.570616][ T6030] ksys_write+0x156/0x270 [ 130.570654][ T6030] ? __pfx_ksys_write+0x10/0x10 [ 130.570702][ T6030] do_syscall_64+0x166/0x520 [ 130.570727][ T6030] ? trace_irq_disable+0x3b/0x140 [ 130.570753][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.570777][ T6030] ? clear_bhb_loop+0x70/0xc0 [ 130.570806][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.570830][ T6030] RIP: 0033:0x7f39092cf559 [ 130.570853][ T6030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.570873][ T6030] RSP: 002b:00007f3907526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.570899][ T6030] RAX: ffffffffffffffda RBX: 00007f3909555fa0 RCX: 00007f39092cf559 [ 130.570917][ T6030] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000003 [ 130.570932][ T6030] RBP: 00007f3909366b50 R08: 0000000000000000 R09: 0000000000000000 [ 130.570947][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.570962][ T6030] R13: 00007f3909556038 R14: 00007f3909555fa0 R15: 00007ffd2c4a0dc8 [ 130.570999][ T6030] [ 131.672373][ T6053] input: syz1 as /devices/virtual/input/input6 [ 132.626984][ T6091] netlink: 'syz.0.88': attribute type 2 has an invalid length. [ 133.081738][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.081838][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.527081][ T6117] FAULT_INJECTION: forcing a failure. [ 133.527081][ T6117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.527120][ T6117] CPU: 0 UID: 0 PID: 6117 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.527149][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.527172][ T6117] Call Trace: [ 133.527182][ T6117] [ 133.527192][ T6117] dump_stack_lvl+0xe8/0x150 [ 133.527237][ T6117] should_fail_ex+0x447/0x5e0 [ 133.527272][ T6117] _copy_from_user+0x2d/0xb0 [ 133.527307][ T6117] ___sys_sendmsg+0x1c6/0x360 [ 133.527330][ T6117] ? __lock_acquire+0x747/0x2de0 [ 133.527371][ T6117] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.527392][ T6117] ? __lock_acquire+0x747/0x2de0 [ 133.527434][ T6117] ? __pfx_futex_wake_mark+0x10/0x10 [ 133.527513][ T6117] __sys_sendmmsg+0x279/0x4e0 [ 133.527543][ T6117] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.527565][ T6117] ? do_futex+0x3e7/0x4e0 [ 133.527605][ T6117] ? __sys_connect+0x3b7/0x470 [ 133.527657][ T6117] ? rcu_is_watching+0x16/0xb0 [ 133.527694][ T6117] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.527720][ T6117] do_syscall_64+0x166/0x520 [ 133.527746][ T6117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.527769][ T6117] ? clear_bhb_loop+0x70/0xc0 [ 133.527799][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.527822][ T6117] RIP: 0033:0x7f39092cf559 [ 133.527844][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.527863][ T6117] RSP: 002b:00007f3907526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.527888][ T6117] RAX: ffffffffffffffda RBX: 00007f3909555fa0 RCX: 00007f39092cf559 [ 133.527906][ T6117] RDX: 0000000004000095 RSI: 0000200000000180 RDI: 0000000000000004 [ 133.527922][ T6117] RBP: 00007f3909366b50 R08: 0000000000000000 R09: 0000000000000000 [ 133.527936][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.527950][ T6117] R13: 00007f3909556038 R14: 00007f3909555fa0 R15: 00007ffd2c4a0dc8 [ 133.527988][ T6117] [ 134.792468][ T6153] loop0: detected capacity change from 0 to 4096 [ 134.918817][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.938802][ T6154] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 134.938827][ T6154] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 134.938881][ T6154] loop0: [ 135.085983][ T10] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 135.087557][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.087585][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.087606][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.087654][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.090028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.090056][ T10] usb 2-1: Product: syz [ 135.090072][ T10] usb 2-1: Manufacturer: syz [ 135.331927][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 135.331952][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 135.436237][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 135.436283][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 135.558737][ T10] usb 2-1: USB disconnect, device number 2 [ 136.103001][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.311159][ T10] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 136.314428][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.314459][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.314490][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.314542][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.370871][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.370902][ T10] usb 2-1: Product: syz [ 136.370918][ T10] usb 2-1: Manufacturer: syz [ 136.532288][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 136.532310][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 136.551962][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 136.551984][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 137.180982][ T3402] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.752928][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.795839][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.801046][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.806439][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.828479][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.021274][ T3402] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.123294][ T1245] usb 2-1: USB disconnect, device number 3 [ 138.489167][ T3402] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.539820][ T6231] FAULT_INJECTION: forcing a failure. [ 138.539820][ T6231] name failslab, interval 1, probability 0, space 0, times 0 [ 138.539857][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.0.125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.539885][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.539899][ T6231] Call Trace: [ 138.539909][ T6231] [ 138.539920][ T6231] dump_stack_lvl+0xe8/0x150 [ 138.539967][ T6231] should_fail_ex+0x447/0x5e0 [ 138.540005][ T6231] should_failslab+0xa8/0x100 [ 138.540035][ T6231] ? __inet_hash_connect+0x1670/0x2640 [ 138.540067][ T6231] kmem_cache_alloc_noprof+0x99/0x680 [ 138.540107][ T6231] ? __inet_hash_connect+0x1670/0x2640 [ 138.540145][ T6231] __inet_hash_connect+0x1670/0x2640 [ 138.540190][ T6231] ? __inet_hash_connect+0x64d/0x2640 [ 138.540232][ T6231] ? __pfx___inet_hash_connect+0x10/0x10 [ 138.540262][ T6231] ? inet6_ehashfn+0x2f/0x3b0 [ 138.540297][ T6231] ? inet6_hash_connect+0xeb/0x170 [ 138.540329][ T6231] tcp_v6_connect+0x1386/0x1e60 [ 138.540357][ T6231] ? kasan_save_track+0x3e/0x80 [ 138.540379][ T6231] ? __kasan_kmalloc+0x93/0xb0 [ 138.540422][ T6231] ? __pfx_tcp_v6_connect+0x10/0x10 [ 138.540469][ T6231] __inet_stream_connect+0x28c/0xf50 [ 138.540523][ T6231] ? __pfx___inet_stream_connect+0x10/0x10 [ 138.540559][ T6231] ? __kasan_kmalloc+0x93/0xb0 [ 138.540587][ T6231] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 138.540612][ T6231] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 138.540660][ T6231] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 138.540706][ T6231] tcp_sendmsg_locked+0x4d31/0x53c0 [ 138.540739][ T6231] ? __lock_acquire+0x747/0x2de0 [ 138.540799][ T6231] ? __lock_acquire+0x747/0x2de0 [ 138.540846][ T6231] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 138.540877][ T6231] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 138.540904][ T6231] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 138.540952][ T6231] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 138.540989][ T6231] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 138.541024][ T6231] ? lockdep_hardirqs_on+0x7b/0x110 [ 138.541056][ T6231] tcp_sendmsg+0x2f/0x50 [ 138.541079][ T6231] ? __pfx_inet6_sendmsg+0x10/0x10 [ 138.541106][ T6231] sock_sendmsg_nosec+0x90/0x190 [ 138.541144][ T6231] __sys_sendto+0x41e/0x5d0 [ 138.541189][ T6231] ? __pfx___sys_sendto+0x10/0x10 [ 138.541260][ T6231] ? rcu_is_watching+0x16/0xb0 [ 138.541298][ T6231] __x64_sys_sendto+0xde/0x100 [ 138.541338][ T6231] do_syscall_64+0x166/0x520 [ 138.541363][ T6231] ? trace_irq_disable+0x3b/0x140 [ 138.541388][ T6231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.541413][ T6231] ? clear_bhb_loop+0x70/0xc0 [ 138.541444][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.541469][ T6231] RIP: 0033:0x7f023572f559 [ 138.541492][ T6231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.541511][ T6231] RSP: 002b:00007f0233986028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 138.541538][ T6231] RAX: ffffffffffffffda RBX: 00007f02359b5fa0 RCX: 00007f023572f559 [ 138.541556][ T6231] RDX: 0000000000000091 RSI: 0000000000000000 RDI: 0000000000000003 [ 138.541571][ T6231] RBP: 00007f02357c6b50 R08: 00002000000001c0 R09: 000000000000001c [ 138.541587][ T6231] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 138.541603][ T6231] R13: 00007f02359b6038 R14: 00007f02359b5fa0 R15: 00007ffd01ff1b98 [ 138.541644][ T6231] [ 138.973308][ T1245] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 139.163696][ T1245] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.168384][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.168415][ T1245] usb 5-1: Product: syz [ 139.168431][ T1245] usb 5-1: Manufacturer: syz [ 139.168448][ T1245] usb 5-1: SerialNumber: syz [ 139.236934][ T1245] usb 5-1: config 0 descriptor?? [ 139.466593][ T1245] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.862925][ T5620] Bluetooth: hci4: command tx timeout [ 139.863434][ T3402] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.712423][ T1245] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 140.899650][ T1245] usb 5-1: USB disconnect, device number 2 [ 141.220227][ T6204] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.944463][ T5620] Bluetooth: hci4: command tx timeout [ 142.388944][ T3402] bridge_slave_1: left allmulticast mode [ 142.436957][ T3402] bridge_slave_1: left promiscuous mode [ 142.494200][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.842126][ T3402] bridge_slave_0: left allmulticast mode [ 142.842165][ T3402] bridge_slave_0: left promiscuous mode [ 142.842413][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.032198][ T5620] Bluetooth: hci4: command tx timeout [ 144.072256][ T6327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.146881][ T5626] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.312763][ T5626] usb 5-1: Using ep0 maxpacket: 32 [ 144.319698][ T5626] usb 5-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 144.324796][ T5626] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 144.324904][ T5626] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 144.324967][ T5626] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 144.325022][ T5626] usb 5-1: config 1 has no interface number 0 [ 144.325146][ T5626] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.325228][ T5626] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 144.325344][ T5626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.561155][ T5626] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 144.889870][ T5626] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 145.257850][ T5339] usb 5-1: USB disconnect, device number 3 [ 145.296287][ T5339] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 145.473750][ T3402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.696061][ T3402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.754054][ T3402] bond0 (unregistering): Released all slaves [ 145.921950][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 146.102943][ T5620] Bluetooth: hci4: command tx timeout [ 146.925075][ T6368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.014488][ T5626] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.171768][ T5626] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 147.178582][ T5626] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.178679][ T5626] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.178732][ T5626] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.178867][ T5626] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.230162][ T5626] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.230193][ T5626] usb 2-1: Product: syz [ 147.230210][ T5626] usb 2-1: Manufacturer: syz [ 147.430533][ T5626] cdc_wdm 2-1:1.0: skipping garbage [ 147.430557][ T5626] cdc_wdm 2-1:1.0: skipping garbage [ 147.624888][ T5626] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 147.624914][ T5626] cdc_wdm 2-1:1.0: Unknown control protocol [ 147.664512][ T5626] usb 2-1: USB disconnect, device number 4 [ 147.761763][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 147.882785][ T5735] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.032496][ T6391] FAULT_INJECTION: forcing a failure. [ 148.032496][ T6391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.032535][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.032569][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 148.032583][ T6391] Call Trace: [ 148.032596][ T6391] [ 148.032607][ T6391] dump_stack_lvl+0xe8/0x150 [ 148.032652][ T6391] should_fail_ex+0x447/0x5e0 [ 148.032689][ T6391] _copy_from_user+0x2d/0xb0 [ 148.032721][ T6391] sctp_getsockopt_local_auth_chunks+0xdd/0x470 [ 148.032749][ T6391] ? __local_bh_enable+0x1e3/0x2f0 [ 148.032785][ T6391] ? __pfx_sctp_getsockopt_local_auth_chunks+0x10/0x10 [ 148.032813][ T6391] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 148.032847][ T6391] ? lockdep_hardirqs_on+0x7b/0x110 [ 148.032879][ T6391] sctp_getsockopt+0x3e0/0xb90 [ 148.032907][ T6391] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 148.032942][ T6391] do_sock_getsockopt+0x4aa/0x640 [ 148.032988][ T6391] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 148.033044][ T6391] ? __fget_files+0x3a8/0x420 [ 148.033076][ T6391] ? __fget_files+0x2a/0x420 [ 148.033118][ T6391] __x64_sys_getsockopt+0x1aa/0x250 [ 148.033166][ T6391] do_syscall_64+0x166/0x520 [ 148.033190][ T6391] ? trace_irq_disable+0x3b/0x140 [ 148.033215][ T6391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.033240][ T6391] ? clear_bhb_loop+0x70/0xc0 [ 148.033270][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.033293][ T6391] RIP: 0033:0x7f1d673ff559 [ 148.033315][ T6391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.033336][ T6391] RSP: 002b:00007f1d65656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 148.033361][ T6391] RAX: ffffffffffffffda RBX: 00007f1d67685fa0 RCX: 00007f1d673ff559 [ 148.033378][ T6391] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000003 [ 148.033393][ T6391] RBP: 00007f1d67496b50 R08: 0000200000000300 R09: 0000000000000000 [ 148.033409][ T6391] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 148.033424][ T6391] R13: 00007f1d67686038 R14: 00007f1d67685fa0 R15: 00007fff87e03b78 [ 148.033463][ T6391] [ 148.128630][ T5735] usb 1-1: Using ep0 maxpacket: 32 [ 148.219531][ T5735] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.219586][ T5735] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 148.229023][ T5735] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 148.229052][ T5735] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 148.229075][ T5735] usb 1-1: config 14 has no interface number 0 [ 148.229093][ T5735] usb 1-1: config 14 has no interface number 1 [ 148.229169][ T5735] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 148.229196][ T5735] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 148.229225][ T5735] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 148.229255][ T5735] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 148.229286][ T5735] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 148.229316][ T5735] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.229346][ T5735] usb 1-1: config 14 interface 57 has no altsetting 0 [ 148.229367][ T5735] usb 1-1: config 14 interface 228 has no altsetting 0 [ 148.255500][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.255531][ T5735] usb 1-1: Product: syz [ 148.255549][ T5735] usb 1-1: Manufacturer: syz [ 148.255566][ T5735] usb 1-1: SerialNumber: syz [ 148.787345][ T5626] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.788579][ T6399] FAULT_INJECTION: forcing a failure. [ 148.788579][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.788613][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.788641][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 148.788655][ T6399] Call Trace: [ 148.788664][ T6399] [ 148.788675][ T6399] dump_stack_lvl+0xe8/0x150 [ 148.788722][ T6399] should_fail_ex+0x447/0x5e0 [ 148.788758][ T6399] _copy_to_iter+0x404/0x17e0 [ 148.788805][ T6399] ? __pfx__copy_to_iter+0x10/0x10 [ 148.788838][ T6399] ? igmp6_mcf_seq_stop+0x15d/0x190 [ 148.788872][ T6399] seq_read_iter+0xaaf/0xcb0 [ 148.788918][ T6399] seq_read+0x36a/0x490 [ 148.788954][ T6399] ? __pfx_seq_read+0x10/0x10 [ 148.788981][ T6399] ? __lock_acquire+0x747/0x2de0 [ 148.789034][ T6399] ? __pfx_seq_read+0x10/0x10 [ 148.789057][ T6399] proc_reg_read+0x1f6/0x2f0 [ 148.789090][ T6399] ? __pfx_proc_reg_read+0x10/0x10 [ 148.789119][ T6399] vfs_read+0x219/0xa90 [ 148.789165][ T6399] ? __pfx_vfs_read+0x10/0x10 [ 148.789203][ T6399] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.789232][ T6399] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 148.789257][ T6399] ? mutex_lock_nested+0x14d/0x1d0 [ 148.789289][ T6399] ? fdget_pos+0x11e/0x160 [ 148.789341][ T6399] ksys_read+0x156/0x270 [ 148.789379][ T6399] ? __pfx_ksys_read+0x10/0x10 [ 148.789429][ T6399] do_syscall_64+0x166/0x520 [ 148.789454][ T6399] ? trace_irq_disable+0x3b/0x140 [ 148.789479][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.789503][ T6399] ? clear_bhb_loop+0x70/0xc0 [ 148.789533][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.789556][ T6399] RIP: 0033:0x7f1d673ff559 [ 148.789578][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.789599][ T6399] RSP: 002b:00007f1d65656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.789624][ T6399] RAX: ffffffffffffffda RBX: 00007f1d67685fa0 RCX: 00007f1d673ff559 [ 148.789642][ T6399] RDX: 0000000000002020 RSI: 0000200000000b00 RDI: 0000000000000003 [ 148.789657][ T6399] RBP: 00007f1d67496b50 R08: 0000000000000000 R09: 0000000000000000 [ 148.789672][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.789686][ T6399] R13: 00007f1d67686038 R14: 00007f1d67685fa0 R15: 00007fff87e03b78 [ 148.789725][ T6399] [ 149.075793][ T5735] legousbtower 1-1:14.57: interrupt endpoints not found [ 149.225521][ T6403] FAULT_INJECTION: forcing a failure. [ 149.225521][ T6403] name failslab, interval 1, probability 0, space 0, times 0 [ 149.225560][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.4.171 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.225587][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 149.225601][ T6403] Call Trace: [ 149.225610][ T6403] [ 149.225620][ T6403] dump_stack_lvl+0xe8/0x150 [ 149.225667][ T6403] should_fail_ex+0x447/0x5e0 [ 149.225701][ T6403] ? alloc_slab_obj_exts+0x5c/0x180 [ 149.225736][ T6403] should_failslab+0xa8/0x100 [ 149.225766][ T6403] ? alloc_slab_obj_exts+0x5c/0x180 [ 149.225799][ T6403] __kmalloc_flags_noprof+0x123/0x800 [ 149.225827][ T6403] ? alloc_slab_obj_exts+0x5c/0x180 [ 149.225869][ T6403] alloc_slab_obj_exts+0x5c/0x180 [ 149.225908][ T6403] __memcg_slab_post_alloc_hook+0x63d/0xe00 [ 149.225971][ T6403] ? sk_prot_alloc+0x57/0x210 [ 149.226010][ T6403] kmem_cache_alloc_noprof+0x41c/0x680 [ 149.226045][ T6403] ? rcu_is_watching+0x16/0xb0 [ 149.226070][ T6403] ? sk_prot_alloc+0x57/0x210 [ 149.226105][ T6403] ? sk_prot_alloc+0x57/0x210 [ 149.226150][ T6403] sk_prot_alloc+0x57/0x210 [ 149.226186][ T6403] ? sk_alloc+0x27/0x390 [ 149.226223][ T6403] sk_alloc+0x3a/0x390 [ 149.226263][ T6403] unix_create1+0xb0/0x7d0 [ 149.226296][ T6403] unix_create+0x14c/0x1d0 [ 149.226322][ T6403] __sock_create+0x4b5/0xac0 [ 149.226362][ T6403] __sys_socketpair+0x19d/0x5e0 [ 149.226403][ T6403] __x64_sys_socketpair+0x9b/0xb0 [ 149.226448][ T6403] do_syscall_64+0x166/0x520 [ 149.226475][ T6403] ? trace_irq_disable+0x3b/0x140 [ 149.226501][ T6403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.226524][ T6403] ? clear_bhb_loop+0x70/0xc0 [ 149.226554][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.226577][ T6403] RIP: 0033:0x7f665cae0dfa [ 149.226599][ T6403] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.226619][ T6403] RSP: 002b:00007f665ad2df68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 149.226645][ T6403] RAX: ffffffffffffffda RBX: 00007f665cd65f00 RCX: 00007f665cae0dfa [ 149.226661][ T6403] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 149.226675][ T6403] RBP: 00007f665cb76b50 R08: 0000000000000000 R09: 0000000000000000 [ 149.226689][ T6403] R10: 00007f665ad2df88 R11: 0000000000000246 R12: 0000000000000004 [ 149.226705][ T6403] R13: 00007f665cd66038 R14: 00007f665cd65fa0 R15: 00007fff5c457ee8 [ 149.226742][ T6403] [ 149.287459][ T5626] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 149.315413][ T5626] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.315505][ T5626] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.315528][ T5626] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.315658][ T5626] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.438947][ T5626] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.439022][ T5626] usb 2-1: Product: syz [ 149.439040][ T5626] usb 2-1: Manufacturer: syz [ 149.454414][ T6403] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 149.454495][ T6403] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 149.606386][ T5735] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 149.609981][ T5735] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 149.767559][ T5626] cdc_wdm 2-1:1.0: skipping garbage [ 149.767576][ T5626] cdc_wdm 2-1:1.0: skipping garbage [ 149.830688][ T5626] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 149.830714][ T5626] cdc_wdm 2-1:1.0: Unknown control protocol [ 149.841902][ T6403] vhci_hcd vhci_hcd.0: Device attached [ 149.958035][ T5626] usb 2-1: USB disconnect, device number 5 [ 149.963262][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 150.033118][ T10] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 150.271548][ T6417] usb 1-1: LEGO USB Tower reset control request failed [ 150.301648][ T1245] usb 1-1: USB disconnect, device number 2 [ 150.408726][ T1245] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 150.525691][ T6407] vhci_hcd: connection reset by peer [ 150.562442][ T6424] FAULT_INJECTION: forcing a failure. [ 150.562442][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 150.562480][ T6424] CPU: 0 UID: 0 PID: 6424 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.562507][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.562522][ T6424] Call Trace: [ 150.562531][ T6424] [ 150.562542][ T6424] dump_stack_lvl+0xe8/0x150 [ 150.562584][ T6424] should_fail_ex+0x447/0x5e0 [ 150.562616][ T6424] should_failslab+0xa8/0x100 [ 150.562649][ T6424] __kmalloc_cache_noprof+0x9c/0x670 [ 150.562671][ T6424] ? environ_read+0xe3/0x430 [ 150.562712][ T6424] ? environ_read+0xe3/0x430 [ 150.562752][ T6424] environ_read+0xe3/0x430 [ 150.562789][ T6424] ? rw_verify_area+0x250/0x4d0 [ 150.562826][ T6424] ? __pfx_environ_read+0x10/0x10 [ 150.562861][ T6424] vfs_read+0x219/0xa90 [ 150.562905][ T6424] ? __pfx_vfs_read+0x10/0x10 [ 150.562941][ T6424] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 150.562970][ T6424] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 150.562993][ T6424] ? mutex_lock_nested+0x14d/0x1d0 [ 150.563023][ T6424] ? fdget_pos+0x11e/0x160 [ 150.563066][ T6424] ksys_read+0x156/0x270 [ 150.563104][ T6424] ? __pfx_ksys_read+0x10/0x10 [ 150.563149][ T6424] do_syscall_64+0x166/0x520 [ 150.563172][ T6424] ? trace_irq_disable+0x3b/0x140 [ 150.563196][ T6424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.563220][ T6424] ? clear_bhb_loop+0x70/0xc0 [ 150.563246][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.563269][ T6424] RIP: 0033:0x7ff700b1f559 [ 150.563290][ T6424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.563310][ T6424] RSP: 002b:00007ff6fed76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.563334][ T6424] RAX: ffffffffffffffda RBX: 00007ff700da5fa0 RCX: 00007ff700b1f559 [ 150.563352][ T6424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 150.563365][ T6424] RBP: 00007ff700bb6b50 R08: 0000000000000000 R09: 0000000000000000 [ 150.563378][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.563390][ T6424] R13: 00007ff700da6038 R14: 00007ff700da5fa0 R15: 00007ffc46fa4688 [ 150.563424][ T6424] [ 150.707429][ T1002] vhci_hcd vhci_hcd.4: stop threads [ 150.813863][ T1002] vhci_hcd vhci_hcd.4: release socket [ 150.814360][ T1002] vhci_hcd vhci_hcd.4: disconnect device [ 151.332263][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 151.802093][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.814261][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.814500][ T6204] bridge_slave_0: entered allmulticast mode [ 151.850482][ T6204] bridge_slave_0: entered promiscuous mode [ 151.898825][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 152.092297][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.100081][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.100336][ T6204] bridge_slave_1: entered allmulticast mode [ 152.120398][ T6204] bridge_slave_1: entered promiscuous mode [ 152.129409][ T6460] gretap0: entered promiscuous mode [ 152.457606][ T3402] hsr_slave_0: left promiscuous mode [ 152.514286][ T3402] hsr_slave_1: left promiscuous mode [ 152.515908][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.516057][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.581278][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.581309][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.903575][ T3402] veth1_macvtap: left promiscuous mode [ 152.931198][ T3402] veth0_macvtap: left promiscuous mode [ 152.931488][ T3402] veth1_vlan: left promiscuous mode [ 152.931892][ T3402] veth0_vlan: left promiscuous mode [ 152.997727][ T6487] process 'syz.4.192' launched './file2' with NULL argv: empty string added [ 153.048085][ T6487] FAULT_INJECTION: forcing a failure. [ 153.048085][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 153.048122][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.4.192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.048149][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 153.048162][ T6487] Call Trace: [ 153.048170][ T6487] [ 153.048180][ T6487] dump_stack_lvl+0xe8/0x150 [ 153.048222][ T6487] should_fail_ex+0x447/0x5e0 [ 153.048248][ T6487] should_failslab+0xa8/0x100 [ 153.048269][ T6487] __kmalloc_noprof+0xf6/0x790 [ 153.048285][ T6487] ? tomoyo_init_log+0x1a6c/0x1f60 [ 153.048325][ T6487] ? tomoyo_init_log+0x1a6c/0x1f60 [ 153.048357][ T6487] tomoyo_init_log+0x1a6c/0x1f60 [ 153.048407][ T6487] ? __pfx_tomoyo_init_log+0x10/0x10 [ 153.048431][ T6487] ? tomoyo_profile+0x11/0x50 [ 153.048458][ T6487] ? tomoyo_domain_quota_is_ok+0x422/0x570 [ 153.048486][ T6487] tomoyo_supervisor+0x35f/0x1550 [ 153.048513][ T6487] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 153.048544][ T6487] ? snprintf+0xe8/0x140 [ 153.048573][ T6487] ? __pfx_snprintf+0x10/0x10 [ 153.048599][ T6487] ? tomoyo_check_acl+0x386/0x400 [ 153.048626][ T6487] tomoyo_path_number_perm+0x463/0x5f0 [ 153.048649][ T6487] ? tomoyo_path_number_perm+0x219/0x5f0 [ 153.048671][ T6487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.048724][ T6487] ? __pfx_current_check_access_path+0x10/0x10 [ 153.048744][ T6487] ? d_splice_alias_ops+0x11c/0x440 [ 153.048760][ T6487] ? d_splice_alias+0x12/0x30 [ 153.048777][ T6487] ? lookup_one_qstr_excl+0x1d4/0x360 [ 153.048807][ T6487] tomoyo_path_mkdir+0xb0/0xf0 [ 153.048824][ T6487] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 153.048844][ T6487] ? __pfx_filename_create+0x10/0x10 [ 153.048865][ T6487] security_path_mkdir+0x169/0x350 [ 153.048886][ T6487] filename_mkdirat+0x203/0x560 [ 153.048908][ T6487] ? __pfx_filename_mkdirat+0x10/0x10 [ 153.048928][ T6487] ? do_getname+0x151/0x250 [ 153.048950][ T6487] __se_sys_mkdirat+0x35/0x150 [ 153.048970][ T6487] do_syscall_64+0x166/0x520 [ 153.048986][ T6487] ? trace_irq_disable+0x3b/0x140 [ 153.049004][ T6487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.049020][ T6487] ? clear_bhb_loop+0x70/0xc0 [ 153.049043][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.049064][ T6487] RIP: 0033:0x7f665cadf559 [ 153.049080][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.049093][ T6487] RSP: 002b:00007f665ad2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 153.049110][ T6487] RAX: ffffffffffffffda RBX: 00007f665cd65fa0 RCX: 00007f665cadf559 [ 153.049122][ T6487] RDX: 00000000000001ff RSI: 0000200000000ec0 RDI: ffffffffffffff9c [ 153.049133][ T6487] RBP: 00007f665cb76b50 R08: 0000000000000000 R09: 0000000000000000 [ 153.049143][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.049153][ T6487] R13: 00007f665cd66038 R14: 00007f665cd65fa0 R15: 00007fff5c457ee8 [ 153.049199][ T6487] [ 154.317569][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 154.554551][ T3402] team0 (unregistering): Port device team_slave_1 removed [ 154.613518][ T3402] team0 (unregistering): Port device team_slave_0 removed [ 155.212873][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 155.606288][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 156.017857][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.059696][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.393311][ T6204] team0: Port device team_slave_0 added [ 156.424777][ T6204] team0: Port device team_slave_1 added [ 156.567935][ T6511] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.833166][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.833187][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.833216][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.914652][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.914671][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.914702][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.046078][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.085378][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.087086][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.093588][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.121824][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.563952][ T6527] fscrypt (sda1, inode 1262): Unsupported encryption flags (0x10) [ 157.588754][ T6204] hsr_slave_0: entered promiscuous mode [ 157.589874][ T6204] hsr_slave_1: entered promiscuous mode [ 157.602075][ T6204] debugfs: 'hsr0' already exists in 'hsr' [ 157.602136][ T6204] Cannot create hsr debugfs directory [ 157.641789][ T6530] capability: warning: `syz.3.208' uses deprecated v2 capabilities in a way that may be insecure [ 159.156154][ T5620] Bluetooth: hci0: command tx timeout [ 159.399655][ T3402] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.682964][ T6521] rxe_eth0 speed is unknown, defaulting to 1000 [ 159.950422][ T6580] FAULT_INJECTION: forcing a failure. [ 159.950422][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 159.950460][ T6580] CPU: 1 UID: 0 PID: 6580 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.950488][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.950502][ T6580] Call Trace: [ 159.950512][ T6580] [ 159.950522][ T6580] dump_stack_lvl+0xe8/0x150 [ 159.950568][ T6580] should_fail_ex+0x447/0x5e0 [ 159.950606][ T6580] should_failslab+0xa8/0x100 [ 159.950638][ T6580] __kmalloc_cache_noprof+0x9c/0x670 [ 159.950663][ T6580] ? reuseport_alloc+0x13d/0x520 [ 159.950685][ T6580] ? reuseport_alloc+0x13d/0x520 [ 159.950716][ T6580] ? reuseport_alloc+0x25/0x520 [ 159.950736][ T6580] reuseport_alloc+0x13d/0x520 [ 159.950758][ T6580] ? reuseport_alloc+0x25/0x520 [ 159.950786][ T6580] udp_lib_get_port+0xf85/0x1cb0 [ 159.950848][ T6580] ? __pfx_udp_lib_get_port+0x10/0x10 [ 159.950897][ T6580] ? lockdep_hardirqs_on+0x7b/0x110 [ 159.950923][ T6580] ? udp_v4_get_port+0xac/0x210 [ 159.950955][ T6580] inet_sendmsg+0x1b8/0x320 [ 159.950993][ T6580] ? __pfx_inet_sendmsg+0x10/0x10 [ 159.951026][ T6580] sock_sendmsg_nosec+0x10f/0x190 [ 159.951061][ T6580] sock_write_iter+0x2e4/0x3f0 [ 159.951093][ T6580] ? __pfx_sock_write_iter+0x10/0x10 [ 159.951124][ T6580] ? bpf_lsm_file_permission+0x9/0x20 [ 159.951146][ T6580] ? security_file_permission+0x75/0x260 [ 159.951184][ T6580] vfs_write+0x61e/0xbb0 [ 159.951229][ T6580] ? __pfx_vfs_write+0x10/0x10 [ 159.951265][ T6580] ? __fget_files+0x3a8/0x420 [ 159.951296][ T6580] ? __fget_files+0x2a/0x420 [ 159.951332][ T6580] ? fdget+0x1b2/0x250 [ 159.951383][ T6580] ksys_write+0x156/0x270 [ 159.951417][ T6580] ? __pfx_ksys_write+0x10/0x10 [ 159.951462][ T6580] do_syscall_64+0x166/0x520 [ 159.951487][ T6580] ? trace_irq_disable+0x3b/0x140 [ 159.951511][ T6580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.951534][ T6580] ? clear_bhb_loop+0x70/0xc0 [ 159.951562][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.951585][ T6580] RIP: 0033:0x7f023572f559 [ 159.951608][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.951627][ T6580] RSP: 002b:00007f0233986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.951651][ T6580] RAX: ffffffffffffffda RBX: 00007f02359b5fa0 RCX: 00007f023572f559 [ 159.951669][ T6580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 159.951683][ T6580] RBP: 00007f02357c6b50 R08: 0000000000000000 R09: 0000000000000000 [ 159.951698][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.951711][ T6580] R13: 00007f02359b6038 R14: 00007f02359b5fa0 R15: 00007ffd01ff1b98 [ 159.951753][ T6580] [ 160.580301][ T3402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.223008][ T5620] Bluetooth: hci0: command tx timeout [ 161.248137][ T3402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.480445][ T6204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.942301][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.998160][ T6204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.191796][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.498143][ T3402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.575579][ T6204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.631098][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.656252][ T6204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.698284][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.302795][ T5617] Bluetooth: hci0: command tx timeout [ 163.435120][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.660633][ T6648] tap0: tun_chr_ioctl cmd 1074025677 [ 163.660661][ T6648] tap0: Linktype set failed because interface is up [ 164.630746][ T5617] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 164.835994][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.959410][ T6669] FAULT_INJECTION: forcing a failure. [ 164.959410][ T6669] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 164.959446][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.4.251 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.959473][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 164.959487][ T6669] Call Trace: [ 164.959496][ T6669] [ 164.959507][ T6669] dump_stack_lvl+0xe8/0x150 [ 164.959552][ T6669] should_fail_ex+0x447/0x5e0 [ 164.959588][ T6669] prepare_alloc_pages+0x21e/0x650 [ 164.959620][ T6669] __alloc_frozen_pages_noprof+0x1a1/0x440 [ 164.959651][ T6669] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 164.959679][ T6669] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.959706][ T6669] ? policy_nodemask+0x31b/0x980 [ 164.959731][ T6669] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 164.959769][ T6669] alloc_pages_mpol+0xd4/0x280 [ 164.959800][ T6669] alloc_pages_noprof+0xd2/0x2f0 [ 164.959836][ T6669] get_free_pages_noprof+0xf/0x80 [ 164.959863][ T6669] __kasan_populate_vmalloc+0x38/0x1c0 [ 164.959909][ T6669] ? rt_spin_unlock+0x165/0x200 [ 164.959942][ T6669] alloc_vmap_area+0xd10/0x1410 [ 164.959990][ T6669] ? __pfx_alloc_vmap_area+0x10/0x10 [ 164.960024][ T6669] ? __get_vm_area_node+0x155/0x2f0 [ 164.960060][ T6669] __get_vm_area_node+0x200/0x2f0 [ 164.960100][ T6669] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 164.960135][ T6669] ? n_tty_open+0x1d/0x150 [ 164.960171][ T6669] ? __lock_acquire+0x747/0x2de0 [ 164.960214][ T6669] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.960258][ T6669] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.960286][ T6669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.960314][ T6669] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 164.960347][ T6669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.960385][ T6669] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 164.960418][ T6669] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.960445][ T6669] ? n_tty_open+0x1d/0x150 [ 164.960483][ T6669] vzalloc_noprof+0xb2/0xe0 [ 164.960514][ T6669] ? n_tty_open+0x1d/0x150 [ 164.960551][ T6669] n_tty_open+0x1d/0x150 [ 164.960583][ T6669] tty_ldisc_setup+0x1b6/0x270 [ 164.960613][ T6669] tty_init_dev+0x279/0x4d0 [ 164.960643][ T6669] ptmx_open+0xf4/0x2e0 [ 164.960672][ T6669] chrdev_open+0x4dc/0x600 [ 164.960701][ T6669] ? __pfx_chrdev_open+0x10/0x10 [ 164.960725][ T6669] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 164.960758][ T6669] ? __pfx_chrdev_open+0x10/0x10 [ 164.960784][ T6669] do_dentry_open+0x841/0x1410 [ 164.960821][ T6669] vfs_open_consume+0x4a/0x360 [ 164.960844][ T6669] ? path_openat+0x16e6/0x2100 [ 164.960868][ T6669] path_openat+0x1701/0x2100 [ 164.960922][ T6669] do_file_open+0x23e/0x4a0 [ 164.960941][ T6669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.960972][ T6669] ? __pfx_do_file_open+0x10/0x10 [ 164.961020][ T6669] ? alloc_fd+0x6b2/0x760 [ 164.961066][ T6669] do_sys_openat2+0x115/0x200 [ 164.961095][ T6669] ? __se_sys_futex+0x3a8/0x450 [ 164.961126][ T6669] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.961161][ T6669] ? rcu_is_watching+0x16/0xb0 [ 164.961192][ T6669] __x64_sys_openat+0x138/0x170 [ 164.961230][ T6669] do_syscall_64+0x166/0x520 [ 164.961256][ T6669] ? trace_irq_disable+0x3b/0x140 [ 164.961280][ T6669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.961306][ T6669] ? clear_bhb_loop+0x70/0xc0 [ 164.961336][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.961360][ T6669] RIP: 0033:0x7f665cadf559 [ 164.961382][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.961403][ T6669] RSP: 002b:00007f665ad2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.961427][ T6669] RAX: ffffffffffffffda RBX: 00007f665cd65fa0 RCX: 00007f665cadf559 [ 164.961445][ T6669] RDX: 0000000000121301 RSI: 000020000001d9c0 RDI: ffffffffffffff9c [ 164.961462][ T6669] RBP: 00007f665cb76b50 R08: 0000000000000000 R09: 0000000000000000 [ 164.961477][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.961491][ T6669] R13: 00007f665cd66038 R14: 00007f665cd65fa0 R15: 00007fff5c457ee8 [ 164.961530][ T6669] [ 164.968506][ T6669] syz.4.251: vmalloc error: size 9096, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.969303][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.4.251 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.969379][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 164.969418][ T6669] Call Trace: [ 164.969440][ T6669] [ 164.969468][ T6669] dump_stack_lvl+0xe8/0x150 [ 164.969584][ T6669] warn_alloc+0x24d/0x270 [ 164.969653][ T6669] ? lockdep_hardirqs_on+0x7b/0x110 [ 164.969732][ T6669] ? __pfx_warn_alloc+0x10/0x10 [ 164.969785][ T6669] ? kfree+0x1c5/0x6d0 [ 164.969898][ T6669] ? __get_vm_area_node+0x219/0x2f0 [ 164.970009][ T6669] __vmalloc_node_range_noprof+0x396/0x16f0 [ 164.970105][ T6669] ? __lock_acquire+0x747/0x2de0 [ 164.970222][ T6669] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.970269][ T6669] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.970299][ T6669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.970351][ T6669] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 164.970393][ T6669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.970468][ T6669] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 164.970549][ T6669] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.970612][ T6669] ? n_tty_open+0x1d/0x150 [ 164.970704][ T6669] vzalloc_noprof+0xb2/0xe0 [ 164.970798][ T6669] ? n_tty_open+0x1d/0x150 [ 164.970900][ T6669] n_tty_open+0x1d/0x150 [ 164.971004][ T6669] tty_ldisc_setup+0x1b6/0x270 [ 164.971087][ T6669] tty_init_dev+0x279/0x4d0 [ 164.971170][ T6669] ptmx_open+0xf4/0x2e0 [ 164.971252][ T6669] chrdev_open+0x4dc/0x600 [ 164.971331][ T6669] ? __pfx_chrdev_open+0x10/0x10 [ 164.971365][ T6669] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 164.971400][ T6669] ? __pfx_chrdev_open+0x10/0x10 [ 164.971426][ T6669] do_dentry_open+0x841/0x1410 [ 164.971526][ T6669] vfs_open_consume+0x4a/0x360 [ 164.971610][ T6669] ? path_openat+0x16e6/0x2100 [ 164.971673][ T6669] path_openat+0x1701/0x2100 [ 164.971793][ T6669] do_file_open+0x23e/0x4a0 [ 164.971844][ T6669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.971906][ T6669] ? __pfx_do_file_open+0x10/0x10 [ 164.972006][ T6669] ? alloc_fd+0x6b2/0x760 [ 164.972119][ T6669] do_sys_openat2+0x115/0x200 [ 164.972200][ T6669] ? __se_sys_futex+0x3a8/0x450 [ 164.972312][ T6669] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.972399][ T6669] ? rcu_is_watching+0x16/0xb0 [ 164.972484][ T6669] __x64_sys_openat+0x138/0x170 [ 164.972521][ T6669] do_syscall_64+0x166/0x520 [ 164.972546][ T6669] ? trace_irq_disable+0x3b/0x140 [ 164.972570][ T6669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.972629][ T6669] ? clear_bhb_loop+0x70/0xc0 [ 164.972658][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.972720][ T6669] RIP: 0033:0x7f665cadf559 [ 164.972782][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.972835][ T6669] RSP: 002b:00007f665ad2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.972918][ T6669] RAX: ffffffffffffffda RBX: 00007f665cd65fa0 RCX: 00007f665cadf559 [ 164.972973][ T6669] RDX: 0000000000121301 RSI: 000020000001d9c0 RDI: ffffffffffffff9c [ 164.973009][ T6669] RBP: 00007f665cb76b50 R08: 0000000000000000 R09: 0000000000000000 [ 164.973049][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.973088][ T6669] R13: 00007f665cd66038 R14: 00007f665cd65fa0 R15: 00007fff5c457ee8 [ 164.973182][ T6669] [ 164.978697][ T6669] Mem-Info: [ 164.978718][ T6669] active_anon:188 inactive_anon:6897 isolated_anon:0 [ 164.978718][ T6669] active_file:5425 inactive_file:37932 isolated_file:0 [ 164.978718][ T6669] unevictable:0 dirty:145 writeback:0 [ 164.978718][ T6669] slab_reclaimable:11867 slab_unreclaimable:104113 [ 164.978718][ T6669] mapped:29983 shmem:1277 pagetables:1305 [ 164.978718][ T6669] sec_pagetables:0 bounce:0 [ 164.978718][ T6669] kernel_misc_reclaimable:0 [ 164.978718][ T6669] free:1314273 free_pcp:4046 free_cma:0 [ 164.978779][ T6669] Node 0 active_anon:752kB inactive_anon:27588kB active_file:21512kB inactive_file:151724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119932kB dirty:576kB writeback:0kB shmem:5108kB kernel_stack:13452kB pagetables:5028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 164.978834][ T6669] Node 1 active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 164.978896][ T6669] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.978964][ T6669] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 164.979015][ T6669] Node 0 DMA32 free:1309092kB boost:0kB min:3896kB low:6404kB high:8912kB reserved_highatomic:0kB free_highatomic:0kB active_anon:752kB inactive_anon:27588kB active_file:21512kB inactive_file:151724kB unevictable:0kB writepending:576kB zspages:0kB present:3129332kB managed:2537892kB mlocked:0kB bounce:0kB free_pcp:15172kB local_pcp:7152kB free_cma:0kB [ 164.979086][ T6669] lowmem_reserve[]: 0 0 1 1 1 [ 164.979127][ T6669] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1464kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 164.979195][ T6669] lowmem_reserve[]: 0 0 0 0 0 [ 164.979312][ T6669] Node 1 Normal free:3932640kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:1004kB free_cma:0kB [ 164.979493][ T6669] lowmem_reserve[]: 0 0 0 0 0 [ 164.979598][ T6669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.985717][ T6669] Node 0 DMA32: 21*4kB (U) 60*8kB (UM) 95*16kB (UME) 128*32kB (UM) 92*64kB (UME) 40*128kB (UM) 6*256kB (UM) 14*512kB (UM) 19*1024kB (UM) 9*2048kB (UM) 304*4096kB (UM) = 1308964kB [ 165.106914][ T6669] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 165.107393][ T6669] Node 1 Normal: 2*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3932640kB [ 165.118728][ T6669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.118780][ T6669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.118830][ T6669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.118882][ T6669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.118926][ T6669] 44630 total pagecache pages [ 165.118977][ T6669] 0 pages in swap cache [ 165.118998][ T6669] Free swap = 124996kB [ 165.119026][ T6669] Total swap = 124996kB [ 165.119050][ T6669] 2097051 pages RAM [ 165.119077][ T6669] 0 pages HighMem/MovableOnly [ 165.119099][ T6669] 430596 pages reserved [ 165.119120][ T6669] 0 pages cma reserved [ 165.293245][ T6669] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 165.397239][ T5617] Bluetooth: hci0: command tx timeout [ 166.398436][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.398551][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.413607][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.414358][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.414927][ T6521] bridge_slave_0: entered allmulticast mode [ 166.458711][ T6521] bridge_slave_0: entered promiscuous mode [ 166.634387][ T3402] bridge_slave_1: left allmulticast mode [ 166.634426][ T3402] bridge_slave_1: left promiscuous mode [ 166.634783][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.814568][ T3402] bridge_slave_0: left allmulticast mode [ 166.814606][ T3402] bridge_slave_0: left promiscuous mode [ 166.814827][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.292790][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.361329][ T3402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.447512][ T9] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 168.449100][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.449135][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.449160][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.449203][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.524667][ T9] usb 1-1: config 0 descriptor?? [ 168.547283][ T3402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.673936][ T3402] bond0 (unregistering): Released all slaves [ 168.786344][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.796863][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.826521][ T6521] bridge_slave_1: entered allmulticast mode [ 168.860310][ T6521] bridge_slave_1: entered promiscuous mode [ 168.962716][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.962856][ T3404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.298274][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 169.347940][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.428738][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.431502][ T5762] usb 1-1: USB disconnect, device number 3 [ 169.675542][ T6719] fido_id[6719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 170.498791][ T6521] team0: Port device team_slave_0 added [ 170.498920][ T6729] netlink: 198072 bytes leftover after parsing attributes in process `syz.4.273'. [ 170.498960][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 170.556130][ T6521] team0: Port device team_slave_1 added [ 170.946712][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.946732][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.946762][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.999345][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.999364][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.999395][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.462866][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.615074][ T9] usb 1-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 171.619002][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.619062][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.715245][ T6521] hsr_slave_0: entered promiscuous mode [ 171.736288][ T6521] hsr_slave_1: entered promiscuous mode [ 171.755684][ T6521] debugfs: 'hsr0' already exists in 'hsr' [ 171.755711][ T6521] Cannot create hsr debugfs directory [ 171.978953][ T9] as10x_usb: device has been detected [ 171.998959][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 172.518085][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 172.707744][ T6760] INFO: trying to register non-static key. [ 172.711322][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 172.720227][ T6760] The code is fine but needs lockdep annotation, or maybe [ 172.727361][ T6760] you didn't initialize this object before use? [ 172.733630][ T6760] turning off the locking correctness validator. [ 172.739992][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.0.275 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.741920][ T6759] futex_wake_op: syz.4.278 tries to shift op by 144; fix this program [ 172.742416][ T6759] futex_wake_op: syz.4.278 tries to shift op by 144; fix this program [ 172.766084][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.776176][ T6760] Call Trace: [ 172.779491][ T6760] [ 172.782471][ T6760] dump_stack_lvl+0xe8/0x150 [ 172.787123][ T6760] assign_lock_key+0x133/0x150 [ 172.791933][ T6760] register_lock_class+0xcc/0x2e0 [ 172.797018][ T6760] __lock_acquire+0x10c/0x2de0 [ 172.801836][ T6760] ? add_lock_to_list+0xc7/0x100 [ 172.806819][ T6760] ? lockdep_unlock+0x5c/0xd0 [ 172.811552][ T6760] ? __lock_acquire+0x1511/0x2de0 [ 172.816639][ T6760] lock_acquire+0x115/0x350 [ 172.821209][ T6760] ? as102_stream_ctrl+0x27/0xc0 [ 172.826190][ T6760] ? as102_stream_ctrl+0x27/0xc0 [ 172.831179][ T6760] ? as102_stream_ctrl+0x27/0xc0 [ 172.836162][ T6760] mutex_lock_interruptible_nested+0x55/0x1c0 [ 172.842279][ T6760] ? as102_stream_ctrl+0x27/0xc0 [ 172.847272][ T6760] as102_stream_ctrl+0x27/0xc0 [ 172.852080][ T6760] __dvb_frontend_open+0x2ef/0xcb0 [ 172.857234][ T6760] ? dvb_frontend_open+0x1d4/0x880 [ 172.862386][ T6760] ? mutex_lock_nested+0x14d/0x1d0 [ 172.867549][ T6760] ? __pfx_dvb_frontend_open+0x10/0x10 [ 172.873051][ T6760] dvb_device_open+0x258/0x350 [ 172.877847][ T6760] chrdev_open+0x4dc/0x600 [ 172.882283][ T6760] ? __pfx_chrdev_open+0x10/0x10 [ 172.887241][ T6760] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 172.893685][ T6760] ? __pfx_chrdev_open+0x10/0x10 [ 172.898645][ T6760] do_dentry_open+0x841/0x1410 [ 172.903430][ T6760] vfs_open_consume+0x4a/0x360 [ 172.908216][ T6760] ? path_openat+0x16e6/0x2100 [ 172.912995][ T6760] path_openat+0x1701/0x2100 [ 172.917608][ T6760] do_file_open+0x23e/0x4a0 [ 172.922128][ T6760] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.927975][ T6760] ? __pfx_do_file_open+0x10/0x10 [ 172.933028][ T6760] ? alloc_fd+0x6b2/0x760 [ 172.937382][ T6760] do_sys_openat2+0x115/0x200 [ 172.942080][ T6760] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.947316][ T6760] __x64_sys_openat+0x138/0x170 [ 172.952190][ T6760] do_syscall_64+0x166/0x520 [ 172.956803][ T6760] ? trace_irq_disable+0x3b/0x140 [ 172.961847][ T6760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.967929][ T6760] ? clear_bhb_loop+0x70/0xc0 [ 172.972627][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.978561][ T6760] RIP: 0033:0x7f02356efd8e [ 172.982996][ T6760] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.002622][ T6760] RSP: 002b:00007f0233943b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.011075][ T6760] RAX: ffffffffffffffda RBX: 00007f02339446c0 RCX: 00007f02356efd8e [ 173.019063][ T6760] RDX: 0000000000000802 RSI: 00007f0233943c00 RDI: ffffffffffffff9c [ 173.027053][ T6760] RBP: 00007f0233943c00 R08: 0000000000000000 R09: 0000000000000000 [ 173.035040][ T6760] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 173.043025][ T6760] R13: 00007f02359b6218 R14: 00007f02359b6180 R15: 00007ffd01ff1b98 [ 173.051026][ T6760] [ 173.096416][ T9] as10x_usb: error during firmware upload part1 [ 173.096806][ T9] Registered device Abilis Systems DVB-Titan [ 173.292916][ T3402] hsr_slave_0: left promiscuous mode [ 173.332885][ T3402] hsr_slave_1: left promiscuous mode [ 173.334245][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.334267][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.386250][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.386275][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.483412][ T3402] veth1_macvtap: left promiscuous mode [ 173.483530][ T3402] veth0_macvtap: left promiscuous mode [ 173.483715][ T3402] veth1_vlan: left promiscuous mode [ 173.483870][ T3402] veth0_vlan: left promiscuous mode [ 174.114997][ T3402] team0 (unregistering): Port device team_slave_1 removed [ 174.153512][ T3402] team0 (unregistering): Port device team_slave_0 removed [ 174.537800][ T5735] usb 1-1: USB disconnect, device number 4 [ 174.568679][ T5735] Unregistered device Abilis Systems DVB-Titan [ 174.571437][ T5735] as10x_usb: device has been disconnected [ 175.845056][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 176.323756][ T5268] 8021q: adding VLAN 0 to HW filter on device eth7 [ 176.636326][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 177.704903][ T3402] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.831552][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 177.974686][ T3402] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.234381][ T3402] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.290390][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 178.514388][ T3402] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.993974][ T3402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.276258][ T3402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.527207][ T3402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.630584][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 179.805014][ T3402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.313987][ T3402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.354228][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 180.594572][ T3402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.668408][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 180.864298][ T3402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.124516][ T3402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.144158][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 181.563069][ T3402] bridge_slave_1: left allmulticast mode [ 181.563102][ T3402] bridge_slave_1: left promiscuous mode [ 181.563291][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.683389][ T3402] bridge_slave_0: left allmulticast mode [ 181.683412][ T3402] bridge_slave_0: left promiscuous mode [ 181.683575][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.903014][ T3402] bridge_slave_1: left allmulticast mode [ 181.903038][ T3402] bridge_slave_1: left promiscuous mode [ 181.903164][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.023737][ T3402] bridge_slave_0: left allmulticast mode [ 182.023760][ T3402] bridge_slave_0: left promiscuous mode [ 182.023882][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.243027][ T3402] bridge_slave_1: left allmulticast mode [ 182.243051][ T3402] bridge_slave_1: left promiscuous mode [ 182.243174][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.353346][ T3402] bridge_slave_0: left allmulticast mode [ 182.353371][ T3402] bridge_slave_0: left promiscuous mode [ 182.353496][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.563049][ T3402] bridge_slave_1: left allmulticast mode [ 182.563072][ T3402] bridge_slave_1: left promiscuous mode [ 182.563215][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.653317][ T3402] bridge_slave_0: left allmulticast mode [ 182.653341][ T3402] bridge_slave_0: left promiscuous mode [ 182.653489][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state