last executing test programs: 40.735339103s ago: executing program 2 (id=252): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) userfaultfd(0x801) userfaultfd(0x1) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/sda\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 39.831176374s ago: executing program 2 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) 39.690254268s ago: executing program 2 (id=257): socket(0x2, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x0, 0x10, &(0x7f0000000bc0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) openat$sysctl(0xffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000c40), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000cc0)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./config\x00', &(0x7f0000000dc0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x7, r4, 0x1, 0x0, 0x6, @local}, 0x14) 39.528857882s ago: executing program 2 (id=261): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc00000}, [@generic={0x2, 0x6, 0x7, 0x1, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xd2, &(0x7f0000000140)=""/210, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0xffffff9c, 0x5}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0x8, 0xa}, {0x2, 0x4, 0x10}, {0x3, 0x1, 0x8, 0xb}, {0x2, 0x2, 0x5, 0x2}, {0x2, 0x4, 0xa, 0x5}, {0x5, 0x3, 0x8, 0x1}, {0x3, 0x4, 0xb, 0x3}, {0x4, 0x4, 0xd, 0xc}, {0x4, 0x3, 0xe, 0x5}], 0x10, 0x1}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0xa8, 0xb, 0xffffffff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x20, 0x80, 0x9, 0x850}}) r2 = socket(0x10, 0x803, 0x0) r3 = open(&(0x7f0000000540)='./file1\x00', 0x80242, 0x8) fstat(r3, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000580)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x805, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r2, 0x1, 0x1, 0x7, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r5, &(0x7f00000008c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@map=r5, r3, 0x1e, 0x201c, 0x0, @value=r3, @void, @void, @void, r4}, 0x20) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x8}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r0, r1, 0x25, 0x8, @val=@tcx={@void, @value=r6, @void, @void, r4}}, 0x1c) unshare(0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x143942, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000a80)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 38.341776311s ago: executing program 2 (id=266): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vimc2(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x9, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='on', 0x2) r2 = getpgrp(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0x7ffc0001}]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002180)={0x2020}, 0x2020) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r4, &(0x7f0000000180)="e2", 0xff0f) lseek(r3, 0xfffffffffffffff5, 0x2) openat(r3, &(0x7f0000002140)='./file0\x00', 0x44800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chown(0x0, 0x0, 0xee00) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 38.086624197s ago: executing program 2 (id=269): socket(0x2, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x0, 0x10, &(0x7f0000000bc0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) openat$sysctl(0xffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000c40), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000cc0)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./config\x00', &(0x7f0000000dc0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @local}, 0x14) write(r3, &(0x7f00000010c0)='fc', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001180)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) symlinkat(&(0x7f0000001200)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./config/nvmet/ports/1/subsystems/testsubsys\x00') landlock_create_ruleset(&(0x7f0000001300)={0x7f6e}, 0x18, 0x0) 22.800778502s ago: executing program 32 (id=269): socket(0x2, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x0, 0x10, &(0x7f0000000bc0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) openat$sysctl(0xffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000c40), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000cc0)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./config\x00', &(0x7f0000000dc0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @local}, 0x14) write(r3, &(0x7f00000010c0)='fc', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001180)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) symlinkat(&(0x7f0000001200)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./config/nvmet/ports/1/subsystems/testsubsys\x00') landlock_create_ruleset(&(0x7f0000001300)={0x7f6e}, 0x18, 0x0) 3.802117557s ago: executing program 4 (id=498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_VERSION(r0, 0xc0046209, &(0x7f0000003380)) 3.370101867s ago: executing program 4 (id=502): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = fsopen(&(0x7f0000000100)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='uid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x28041, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0) r1 = syz_io_uring_setup(0x26af, &(0x7f00000006c0)={0x0, 0xa30d, 0x10000, 0x0, 0x3a5}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r1, 0xed4, 0x3766, 0x1, 0x0, 0x0) 3.244870861s ago: executing program 4 (id=504): socket(0x2, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @local}, 0x14) 3.146636493s ago: executing program 0 (id=506): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000540)='W', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f00000005c0), 0xfd31) 3.098511254s ago: executing program 4 (id=507): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="aefdda9d240391005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) 2.972830587s ago: executing program 4 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2c4e3a38"], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2400c014) 2.831407021s ago: executing program 4 (id=509): socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 1.692176459s ago: executing program 0 (id=514): io_setup(0x202, &(0x7f0000004640)) 1.394081136s ago: executing program 1 (id=518): syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r0) 1.077403274s ago: executing program 0 (id=520): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7001fbdbdf251d00000008001e00043a000008001d008b00000008000100f0"], 0x2c}, 0x1, 0x0, 0x0, 0x20004011}, 0x810) 1.036918904s ago: executing program 0 (id=521): syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0xfffe, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "4f46b51f"}, @sack={0x5, 0xe, [0x394, 0x6, 0x6]}, @nop, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x1a, [0x5, 0x95, 0x5, 0xfffffff8, 0x8000, 0x3]}, @mss={0x2, 0x4, 0x6}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f0000000180)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) write$tun(r0, &(0x7f0000000200)=ANY=[], 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f00000023c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002400)='./dev\x00', &(0x7f0000002440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000002700)=@filename='./dev/sda1\x00', &(0x7f0000002740)='./mnt\x00', &(0x7f0000002780)='ext4\x00', 0x8410, 0x0) symlink(&(0x7f00000027c0)='./dev\x00', &(0x7f0000002800)='./mnt/file0\x00') 804.494701ms ago: executing program 3 (id=522): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x7, 0x0, 0x0, 0x84}, 0x2400c089) 659.445544ms ago: executing program 0 (id=523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000b80)=ANY=[@ANYBLOB='pB=!']) 659.270734ms ago: executing program 3 (id=524): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x801) userfaultfd(0x1) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/sda\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 586.538555ms ago: executing program 1 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ab) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') sendfile(r0, r1, 0x0, 0x6) 492.830198ms ago: executing program 3 (id=526): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x1c0102, 0x0) close_range(r2, r2, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 435.86643ms ago: executing program 1 (id=527): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @local}, 0x14) 396.16776ms ago: executing program 5 (id=391): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="000000f6"], 0x22) 394.57229ms ago: executing program 3 (id=528): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 331.359852ms ago: executing program 0 (id=529): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x42, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001640), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001680)={0x80001003, 0x0, 0x0, 'queue1\x00', 0xfffffffd}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, 0x0, &(0x7f00000000c0)}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x642a20, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001a40)=[{&(0x7f0000001a80)=""/156, 0x9c}], 0x53, &(0x7f0000001b40)=[{&(0x7f0000001b80)=""/109, 0x20001c34}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000001d40)=ANY=[@ANYBLOB="043e"], 0x1d) 307.944402ms ago: executing program 1 (id=530): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000040)) 290.186293ms ago: executing program 3 (id=531): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc00000}, [@generic={0x2, 0x6, 0x7, 0x1, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xd2, &(0x7f0000000140)=""/210, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0xffffff9c, 0x5}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0x8, 0xa}, {0x2, 0x4, 0x10}, {0x3, 0x1, 0x8, 0xb}, {0x2, 0x2, 0x5, 0x2}, {0x2, 0x4, 0xa, 0x5}, {0x5, 0x3, 0x8, 0x1}, {0x3, 0x4, 0xb, 0x3}, {0x4, 0x4, 0xd, 0xc}, {0x4, 0x3, 0xe, 0x5}], 0x10, 0x1}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0xa8, 0xb, 0xffffffff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x20, 0x80, 0x9, 0x850}}) r0 = socket(0x10, 0x803, 0x0) open(&(0x7f0000000540)='./file1\x00', 0x80242, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r0, 0x1, 0x1, 0x7, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x143942, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000a80)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 183.352275ms ago: executing program 1 (id=532): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000540)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) umount2(&(0x7f0000000900)='./dir0\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000006c0)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8000]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 45.146949ms ago: executing program 1 (id=533): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x1, 0x0, 0xffffffff}, 0x1c) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) 19.567399ms ago: executing program 5 (id=534): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/54) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 3 (id=535): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) userfaultfd(0x801) userfaultfd(0x1) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/sda\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) kernel console output (not intermixed with test programs): o_team: link becomes ready [ 67.450679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.458916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.467233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.475851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.483970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.503975][ T4205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.516215][ T4205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.533247][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.542581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.556320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.565034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.573530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.581688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.593270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.602196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.611091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.619383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.629321][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.651328][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.658724][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.678429][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.703024][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.717870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.726046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.755074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.787614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.796697][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.803793][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.812016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.820710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.829412][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.836459][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.850473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.858273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.892093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.900068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.922936][ T4205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.931337][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 67.937352][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 67.947129][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.954576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.963507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.972153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.980650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.989335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.997585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.009811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.018076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.026155][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 68.026400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.037368][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 68.043125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.046331][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 68.081496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.090532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.098086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.107197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.115749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.124124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.132606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.140590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.148100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.158773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.175860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.184421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.195462][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.203476][ T4191] device veth0_vlan entered promiscuous mode [ 68.212409][ T4205] device veth0_vlan entered promiscuous mode [ 68.218759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.226729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.247213][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.262828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.272431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.281382][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.288436][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.301633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.313970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.322533][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.329594][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.337993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.345702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.353357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.365245][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.377953][ T4205] device veth1_vlan entered promiscuous mode [ 68.391295][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.400900][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.412628][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.427593][ T4191] device veth1_vlan entered promiscuous mode [ 68.470385][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.478654][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.487652][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.498371][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.507152][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.516376][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.525133][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.534487][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.542938][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.551361][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.559554][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.567674][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.581741][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.596468][ T4205] device veth0_macvtap entered promiscuous mode [ 68.611602][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.620088][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.628398][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.637867][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.665784][ T4191] device veth0_macvtap entered promiscuous mode [ 68.673443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.681126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.688472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.697351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.709294][ T4205] device veth1_macvtap entered promiscuous mode [ 68.721978][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.754208][ T4192] device veth0_vlan entered promiscuous mode [ 68.761404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.773900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.791178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.805076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.817538][ T4191] device veth1_macvtap entered promiscuous mode [ 68.830733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.838636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.860551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.890341][ T4205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.898219][ T4192] device veth1_vlan entered promiscuous mode [ 68.918054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.927788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.936737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.961318][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.973709][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.985839][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.996939][ T4205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.008458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.016669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.025354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.033996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.043042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.061962][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.075371][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.086145][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.095834][ T4205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.105131][ T4205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.114087][ T4205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.122868][ T4205] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.140293][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.147683][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.156368][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.165081][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.173784][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.182925][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.194596][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.203689][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.213418][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.222382][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.231278][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.246765][ T4192] device veth0_macvtap entered promiscuous mode [ 69.263832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.272822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.284272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.296218][ T4192] device veth1_macvtap entered promiscuous mode [ 69.326391][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.337678][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.348269][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.358753][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.371050][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.399335][ T4194] device veth0_vlan entered promiscuous mode [ 69.406995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.415953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.424768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.433277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.441900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.451453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.459640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.467748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.475517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.493597][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.505038][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.517849][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.529189][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.540491][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.555067][ T4194] device veth1_vlan entered promiscuous mode [ 69.572164][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.581196][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.590005][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.598011][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.606709][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.615592][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.628063][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.636896][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.645736][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.654512][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.689454][ T4193] device veth0_vlan entered promiscuous mode [ 69.699900][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.716794][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.750907][ T4193] device veth1_vlan entered promiscuous mode [ 69.765437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.773686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.782230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.791267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.802961][ T4194] device veth0_macvtap entered promiscuous mode [ 69.815954][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.829892][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.845391][ T4194] device veth1_macvtap entered promiscuous mode [ 69.860601][ T4193] device veth0_macvtap entered promiscuous mode [ 69.867806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.876161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.884335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.892310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.900271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.908531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.917154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.937380][ T4193] device veth1_macvtap entered promiscuous mode [ 69.950696][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.961107][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.984362][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.995813][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.015632][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.024078][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.027039][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.035964][ T4195] Bluetooth: hci2: command 0x040f tx timeout [ 70.046671][ T4195] Bluetooth: hci1: command 0x040f tx timeout [ 70.051610][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.063115][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.076554][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.086563][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.097603][ T4195] Bluetooth: hci4: command 0x040f tx timeout [ 70.102055][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.104967][ T4195] Bluetooth: hci3: command 0x040f tx timeout [ 70.114601][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.123614][ T4195] Bluetooth: hci0: command 0x040f tx timeout [ 70.131419][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.147428][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.168334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.177000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.185884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.196229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.216592][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.228466][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.239133][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.250456][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.261749][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.272363][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.282369][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.292859][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.306085][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.315274][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.325814][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.336099][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.346743][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.356750][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.367210][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.378049][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.389464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.398613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.411468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.420908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.437969][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.449279][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.460108][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.470833][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.481049][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.491800][ T4299] FAULT_INJECTION: forcing a failure. [ 70.491800][ T4299] name failslab, interval 1, probability 0, space 0, times 1 [ 70.493321][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.515608][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.518497][ T4299] CPU: 0 PID: 4299 Comm: syz.3.4 Not tainted syzkaller #0 [ 70.526401][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.533098][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.533118][ T4299] Call Trace: [ 70.533125][ T4299] [ 70.533132][ T4299] dump_stack_lvl+0x188/0x250 [ 70.533164][ T4299] ? show_regs_print_info+0x20/0x20 [ 70.533182][ T4299] ? load_image+0x410/0x410 [ 70.545019][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.552995][ T4299] ? __might_sleep+0xf0/0xf0 [ 70.553019][ T4299] ? __lock_acquire+0x7d40/0x7d40 [ 70.553037][ T4299] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 70.553058][ T4299] ? stack_depot_save+0x41b/0x460 [ 70.553079][ T4299] should_fail+0x383/0x4b0 [ 70.558601][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.559256][ T4299] should_failslab+0x5/0x20 [ 70.559278][ T4299] slab_pre_alloc_hook+0x51/0xc0 [ 70.559297][ T4299] ? __d_alloc+0x27/0x6d0 [ 70.559315][ T4299] kmem_cache_alloc+0x3d/0x280 [ 70.559336][ T4299] __d_alloc+0x27/0x6d0 [ 70.559351][ T4299] ? d_alloc_pseudo+0xe/0x70 [ 70.566688][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.569172][ T4299] d_alloc_pseudo+0x19/0x70 [ 70.569195][ T4299] alloc_file_pseudo+0xe0/0x200 [ 70.569216][ T4299] ? alloc_empty_file_noaccount+0x80/0x80 [ 70.569237][ T4299] ? lockdep_softirqs_off+0x430/0x430 [ 70.569264][ T4299] anon_inode_getfile+0xc1/0x1a0 [ 70.569285][ T4299] do_seccomp+0xc92/0x16a0 [ 70.569311][ T4299] ? prctl_set_seccomp+0x60/0x60 [ 70.569327][ T4299] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 70.569353][ T4299] ? lockdep_hardirqs_on+0x94/0x140 [ 70.569375][ T4299] do_syscall_64+0x4c/0xa0 [ 70.569391][ T4299] ? clear_bhb_loop+0x30/0x80 [ 70.569410][ T4299] ? clear_bhb_loop+0x30/0x80 [ 70.569428][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.569453][ T4299] RIP: 0033:0x7ffa0fd48559 [ 70.569473][ T4299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.569486][ T4299] RSP: 002b:00007ffa0dfa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 70.569507][ T4299] RAX: ffffffffffffffda RBX: 00007ffa0ffcffa0 RCX: 00007ffa0fd48559 [ 70.569519][ T4299] RDX: 00002000000002c0 RSI: 000000000000000c RDI: 0000000000000001 [ 70.569530][ T4299] RBP: 00007ffa0fddfab8 R08: 0000000000000000 R09: 0000000000000000 [ 70.569541][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.569552][ T4299] R13: 00007ffa0ffd0038 R14: 00007ffa0ffcffa0 R15: 00007fffda799f08 [ 70.569578][ T4299] [ 70.589100][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.603612][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.812685][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.824536][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.849444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.867022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.884471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.894794][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.904106][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.913277][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.923783][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.924353][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.116220][ T4312] ima: rule for LSM 'u' is undefined [ 71.123863][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.134779][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.136001][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.141393][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.158647][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.163860][ T25] audit: type=1807 audit(1792335716.232:2): action=measure func=FILE_CHECK obj_type=u res=0 [ 71.170383][ T4311] ima: policy update failed [ 71.182368][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.188344][ T25] audit: type=1802 audit(1792335716.272:3): pid=4312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.8" res=0 errno=0 [ 71.212369][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.228132][ T25] audit: type=1802 audit(1792335716.332:4): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.8" res=0 errno=0 [ 71.246006][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.258122][ T4307] 9pnet_virtio: no channels available for device syz [ 71.276862][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.308206][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.333370][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.351249][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.382312][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.410879][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.436340][ T4315] process 'syz.3.9' launched './file0' with NULL argv: empty string added [ 71.980347][ T4305] CacheFiles: Failed to register: -95 [ 72.098269][ T4308] Bluetooth: hci1: command 0x0419 tx timeout [ 72.104999][ T4308] Bluetooth: hci2: command 0x0419 tx timeout [ 72.111045][ T4263] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.174919][ T4308] Bluetooth: hci0: command 0x0419 tx timeout [ 72.181561][ T4308] Bluetooth: hci3: command 0x0419 tx timeout [ 72.201759][ T4308] Bluetooth: hci4: command 0x0419 tx timeout [ 72.429447][ T4341] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 72.442945][ T150] block nbd0: Attempted send on invalid socket [ 72.451434][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.464306][ T4341] exFAT-fs (nbd0): unable to read boot sector [ 72.470492][ T4341] exFAT-fs (nbd0): failed to read boot sector [ 72.480914][ T4309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.500538][ T4263] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.530775][ T4341] exFAT-fs (nbd0): failed to recognize exfat type [ 72.571983][ T4263] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 72.718086][ T4263] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 72.830478][ T4263] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 72.879213][ T4309] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.908741][ T4309] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.942448][ T4263] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.013502][ T4309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.040962][ T4263] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 73.105756][ T4309] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 73.141909][ T4263] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 73.202799][ T4309] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 74.059028][ T4355] ip_tables: iptables: counters copy to user failed while replacing table [ 74.209369][ T4263] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 74.230707][ T4309] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.269685][ T4263] usb 4-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 74.286766][ T4309] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.366580][ T4263] usb 4-1: Product: syz [ 74.386533][ T4309] usb 3-1: Product: syz [ 74.423528][ T4263] usb 4-1: Manufacturer: syz [ 74.465610][ T4309] usb 3-1: Manufacturer: syz [ 74.516020][ T4263] usb 4-1: SerialNumber: syz [ 74.742062][ T4329] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.808025][ T4329] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.817180][ T4329] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.833683][ T4309] cdc_wdm 3-1:1.0: skipping garbage [ 74.849083][ T4263] usb 4-1: can't set config #1, error -71 [ 74.880702][ T4309] cdc_wdm 3-1:1.0: skipping garbage [ 74.889341][ T4263] usb 4-1: USB disconnect, device number 2 [ 74.903240][ T4362] Zero length message leads to an empty skb [ 74.938740][ T4309] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 74.951112][ T4309] cdc_wdm 3-1:1.0: Unknown control protocol [ 74.968669][ T4364] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 74.985466][ T4363] device bridge0 entered promiscuous mode [ 75.019619][ T4363] device bridge0 left promiscuous mode [ 75.051516][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 75.061033][ T4365] device bridge_slave_1 left promiscuous mode [ 75.067623][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.081816][ T4365] device bridge_slave_0 left promiscuous mode [ 75.087978][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.204095][ T4263] usb 3-1: USB disconnect, device number 2 [ 75.275746][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 75.390276][ T4380] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 75.523488][ T4381] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 75.583106][ T4381] gadgetfs: bound to dummy_udc driver [ 75.859309][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.918943][ C0] gadgetfs: connected [ 75.924513][ T7] gadgetfs: disconnected [ 76.148873][ C0] gadgetfs: connected [ 76.250100][ T7] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 76.273485][ T1107] cfg80211: failed to load regulatory.db [ 76.314372][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 76.377854][ T4377] gadgetfs: suspended from state 3 [ 76.383513][ T4377] gadgetfs: disconnected [ 76.450853][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.518997][ T7] usb 1-1: can't set config #1, error -71 [ 76.538260][ T7] usb 1-1: USB disconnect, device number 2 [ 76.768924][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.002925][ T4403] block device autoloading is deprecated and will be removed. [ 77.025041][ T4267] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.140398][ T1107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.157945][ T1107] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.381884][ T1107] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 77.401995][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.428952][ T4263] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.438819][ T1107] usb 2-1: Product: syz [ 77.474412][ T1107] usb 2-1: Manufacturer: syz [ 77.488900][ T1107] usb 2-1: SerialNumber: syz [ 77.549467][ T1107] usb 2-1: NFC: intf ffff88801e7a2000 id ffffffff8d963720 [ 77.630771][ T1107] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 77.813410][ T4388] jffs2: notice: (4388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.839126][ T4263] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 77.865165][ T4263] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.895027][ T4263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.089125][ T4263] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.919435][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.998407][ T4263] usb 3-1: Product: syz [ 79.004838][ T4263] usb 3-1: Manufacturer: syz [ 79.019362][ T4263] usb 3-1: SerialNumber: syz [ 79.049157][ T4263] usb 3-1: config 0 descriptor?? [ 79.058181][ T4461] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 79.111014][ T4263] hub 3-1:0.0: bad descriptor, ignoring hub [ 79.142757][ T4263] hub: probe of 3-1:0.0 failed with error -5 [ 79.156030][ T4263] usb 3-1: selecting invalid altsetting 0 [ 79.335321][ T4263] usb 2-1: USB disconnect, device number 2 [ 79.369903][ T4263] usb 2-1: NFC: intf ffff88801e7a2000 [ 79.552457][ T1107] usb 3-1: USB disconnect, device number 3 [ 80.429329][ T4487] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.501245][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 80.510903][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 80.518434][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.528483][ T4202] Workqueue: hci1 hci_rx_work [ 80.533145][ T4202] Call Trace: [ 80.536404][ T4202] [ 80.539329][ T4202] dump_stack_lvl+0x188/0x250 [ 80.544003][ T4202] ? show_regs_print_info+0x20/0x20 [ 80.549197][ T4202] ? load_image+0x410/0x410 [ 80.553683][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 80.558772][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 80.563423][ T4202] ? kthread+0x42e/0x520 [ 80.567641][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 80.572828][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 80.578031][ T4202] kobject_add+0x160/0x230 [ 80.582457][ T4202] ? kobject_init+0x1c0/0x1c0 [ 80.587140][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 80.590237][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 80.592422][ T4202] ? klist_children_get+0x50/0x50 [ 80.606097][ T4202] ? get_device_parent+0x121/0x3e0 [ 80.611193][ T4202] device_add+0x470/0x1050 [ 80.615593][ T4202] ? device_initialize+0x2a5/0x4d0 [ 80.620696][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 80.625643][ T4202] le_conn_complete_evt+0xc55/0x14d0 [ 80.630938][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 80.636035][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 80.641569][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 80.646418][ T4202] ? hci_event_packet+0x363/0x1310 [ 80.651508][ T4202] ? __lock_acquire+0x7d40/0x7d40 [ 80.656526][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 80.662587][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 80.668200][ T4202] ? mark_lock+0x94/0x320 [ 80.672513][ T4202] ? mutex_unlock+0x10/0x10 [ 80.676999][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.682960][ T4202] ? lock_chain_count+0x20/0x20 [ 80.687787][ T4202] ? __rwlock_init+0x140/0x140 [ 80.692535][ T4202] hci_event_packet+0xe0b/0x1310 [ 80.697453][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 80.702283][ T4202] ? rcu_lock_release+0x20/0x20 [ 80.707114][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 80.712300][ T4202] hci_rx_work+0x255/0xa10 [ 80.716741][ T4202] process_one_work+0x867/0xff0 [ 80.721610][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 80.727241][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 80.732508][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.737513][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.743035][ T4202] ? wq_worker_running+0x97/0x170 [ 80.748039][ T4202] worker_thread+0xad7/0x12a0 [ 80.752717][ T4202] kthread+0x42e/0x520 [ 80.756762][ T4202] ? rcu_lock_release+0x20/0x20 [ 80.761587][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 80.766157][ T4202] ret_from_fork+0x1f/0x30 [ 80.770570][ T4202] [ 80.773607][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.783511][ T4202] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 80.796837][ T4202] Bluetooth: hci1: failed to register connection device [ 80.816428][ T4489] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.825824][ T4489] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.834562][ T4489] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.843263][ T4489] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.257364][ T4525] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 82.358011][ T4525] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 82.617947][ T4530] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.668264][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 83.938316][ T4530] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.968470][ T4551] UBIFS error (pid: 4551): cannot open "ubi0_0", error -19 [ 84.087682][ T4552] 9pnet_virtio: no channels available for device syz [ 84.541431][ T4546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.605153][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.689858][ T4530] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.710248][ T4556] FAULT_INJECTION: forcing a failure. [ 84.710248][ T4556] name failslab, interval 1, probability 0, space 0, times 0 [ 84.723103][ T4556] CPU: 0 PID: 4556 Comm: syz.0.66 Not tainted syzkaller #0 [ 84.730306][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.740357][ T4556] Call Trace: [ 84.743637][ T4556] [ 84.746568][ T4556] dump_stack_lvl+0x188/0x250 [ 84.751253][ T4556] ? show_regs_print_info+0x20/0x20 [ 84.756459][ T4556] ? load_image+0x410/0x410 [ 84.760974][ T4556] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 84.766968][ T4556] should_fail+0x383/0x4b0 [ 84.771402][ T4556] should_failslab+0x5/0x20 [ 84.775916][ T4556] slab_pre_alloc_hook+0x51/0xc0 [ 84.780864][ T4556] __kmalloc+0x6b/0x340 [ 84.785027][ T4556] ? hash_ipport6_add+0xd99/0x1fa0 [ 84.790148][ T4556] hash_ipport6_add+0xd99/0x1fa0 [ 84.795120][ T4556] hash_ipport6_uadt+0x770/0x9b0 [ 84.800061][ T4556] ? hash_ipport6_uadt+0x9b0/0x9b0 [ 84.805179][ T4556] ? hash_ipport6_kadt+0x480/0x480 [ 84.810317][ T4556] call_ad+0x182/0x9a0 [ 84.814393][ T4556] ? __nla_validate+0x50/0x50 [ 84.819075][ T4556] ? ip_set_ad+0x9c0/0x9c0 [ 84.823495][ T4556] ? __nla_parse+0x3c/0x50 [ 84.827902][ T4556] ip_set_ad+0x816/0x9c0 [ 84.832140][ T4556] ? ip_set_dump_done+0x2f0/0x2f0 [ 84.837178][ T4556] nfnetlink_rcv_msg+0xbf7/0x1180 [ 84.842192][ T4556] ? arch_stack_walk+0xf2/0x140 [ 84.847044][ T4556] ? nfnetlink_bind+0x280/0x280 [ 84.851911][ T4556] netlink_rcv_skb+0x1e9/0x430 [ 84.856657][ T4556] ? nfnetlink_bind+0x280/0x280 [ 84.861493][ T4556] ? netlink_ack+0xb10/0xb10 [ 84.866068][ T4556] ? bpf_lsm_capable+0x5/0x10 [ 84.870722][ T4556] ? security_capable+0x85/0xb0 [ 84.875562][ T4556] nfnetlink_rcv+0x2b4/0x2450 [ 84.880224][ T4556] ? __local_bh_enable_ip+0x136/0x1c0 [ 84.885582][ T4556] ? lockdep_hardirqs_on+0x94/0x140 [ 84.890768][ T4556] ? __local_bh_enable_ip+0x136/0x1c0 [ 84.896120][ T4556] ? _local_bh_enable+0xa0/0xa0 [ 84.900959][ T4556] ? __dev_queue_xmit+0x1b64/0x2e50 [ 84.906138][ T4556] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 84.911675][ T4556] ? dev_queue_xmit+0x20/0x20 [ 84.916331][ T4556] ? memcpy+0x3c/0x60 [ 84.920293][ T4556] ? __copy_skb_header+0x3ba/0x4f0 [ 84.925397][ T4556] ? skb_clone+0x1f1/0x350 [ 84.929794][ T4556] ? rcu_lock_release+0x5/0x20 [ 84.934540][ T4556] ? __lock_acquire+0x7d40/0x7d40 [ 84.939555][ T4556] netlink_unicast+0x78f/0x940 [ 84.944312][ T4556] netlink_sendmsg+0x8ba/0xbe0 [ 84.949061][ T4556] ? netlink_getsockopt+0x570/0x570 [ 84.954241][ T4556] ? aa_sock_msg_perm+0x94/0x150 [ 84.959162][ T4556] ? apparmor_socket_sendmsg+0x88/0x230 [ 84.964688][ T4556] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 84.969958][ T4556] ? security_socket_sendmsg+0x7c/0xa0 [ 84.975400][ T4556] ? netlink_getsockopt+0x570/0x570 [ 84.980585][ T4556] ____sys_sendmsg+0x5be/0x8f0 [ 84.985338][ T4556] ? __sys_sendmsg_sock+0x30/0x30 [ 84.990351][ T4556] ? import_iovec+0x6f/0xa0 [ 84.994839][ T4556] ___sys_sendmsg+0x236/0x2e0 [ 84.999505][ T4556] ? __sys_sendmsg+0x290/0x290 [ 85.004278][ T4556] __se_sys_sendmsg+0x1b7/0x2a0 [ 85.009111][ T4556] ? __x64_sys_sendmsg+0x80/0x80 [ 85.014027][ T4556] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.019998][ T4556] ? lockdep_hardirqs_on+0x94/0x140 [ 85.025183][ T4556] do_syscall_64+0x4c/0xa0 [ 85.029579][ T4556] ? clear_bhb_loop+0x30/0x80 [ 85.034235][ T4556] ? clear_bhb_loop+0x30/0x80 [ 85.038893][ T4556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.044770][ T4556] RIP: 0033:0x7f1b66e35559 [ 85.049171][ T4556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.068754][ T4556] RSP: 002b:00007f1b6508d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.077150][ T4556] RAX: ffffffffffffffda RBX: 00007f1b670bcfa0 RCX: 00007f1b66e35559 [ 85.085105][ T4556] RDX: 0000000000000080 RSI: 00002000000007c0 RDI: 000000000000000c [ 85.093064][ T4556] RBP: 00007f1b66eccab8 R08: 0000000000000000 R09: 0000000000000000 [ 85.101025][ T4556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.108983][ T4556] R13: 00007f1b670bd038 R14: 00007f1b670bcfa0 R15: 00007ffd961a35c8 [ 85.116947][ T4556] [ 85.122913][ T7] Bluetooth: hci0: command 0x0c24 tx timeout [ 85.223797][ T4530] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.279562][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.430218][ T4581] FAULT_INJECTION: forcing a failure. [ 85.430218][ T4581] name failslab, interval 1, probability 0, space 0, times 0 [ 85.476708][ T4581] CPU: 1 PID: 4581 Comm: syz.2.70 Not tainted syzkaller #0 [ 85.483928][ T4581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.493982][ T4581] Call Trace: [ 85.497265][ T4581] [ 85.500202][ T4581] dump_stack_lvl+0x188/0x250 [ 85.504890][ T4581] ? show_regs_print_info+0x20/0x20 [ 85.510096][ T4581] ? load_image+0x410/0x410 [ 85.514605][ T4581] ? __might_sleep+0xf0/0xf0 [ 85.519200][ T4581] ? __lock_acquire+0x7d40/0x7d40 [ 85.524233][ T4581] should_fail+0x383/0x4b0 [ 85.528661][ T4581] should_failslab+0x5/0x20 [ 85.533168][ T4581] slab_pre_alloc_hook+0x51/0xc0 [ 85.538107][ T4581] ? __proc_create+0x36f/0x8b0 [ 85.542878][ T4581] kmem_cache_alloc+0x3d/0x280 [ 85.547651][ T4581] __proc_create+0x36f/0x8b0 [ 85.552253][ T4581] ? proc_symlink+0x210/0x210 [ 85.556935][ T4581] ? proc_symlink+0x210/0x210 [ 85.561618][ T4581] proc_create_data+0xa0/0x2d0 [ 85.566389][ T4581] cache_register_net+0x425/0x480 [ 85.571425][ T4581] nfsd_export_init+0x157/0x1e0 [ 85.576281][ T4581] nfsd_init_net+0x29/0x1e0 [ 85.580780][ T4581] ops_init+0x360/0x5f0 [ 85.584938][ T4581] setup_net+0x39e/0xa10 [ 85.589170][ T4581] ? copy_net_ns+0x5b0/0x5b0 [ 85.593746][ T4581] ? copy_net_ns+0x324/0x5b0 [ 85.598320][ T4581] ? down_read_killable+0x1ce/0x340 [ 85.603504][ T4581] copy_net_ns+0x33e/0x5b0 [ 85.607905][ T4581] create_new_namespaces+0x3ce/0x700 [ 85.613182][ T4581] unshare_nsproxy_namespaces+0x116/0x160 [ 85.618886][ T4581] ksys_unshare+0x4f6/0x8e0 [ 85.623375][ T4581] ? __lock_acquire+0x7d40/0x7d40 [ 85.628388][ T4581] ? sighand_ctor+0x40/0x40 [ 85.632872][ T4581] ? lock_chain_count+0x20/0x20 [ 85.637709][ T4581] ? syscall_enter_from_user_mode+0x21/0x70 [ 85.643587][ T4581] __x64_sys_unshare+0x34/0x40 [ 85.648334][ T4581] do_syscall_64+0x4c/0xa0 [ 85.652731][ T4581] ? clear_bhb_loop+0x30/0x80 [ 85.657389][ T4581] ? clear_bhb_loop+0x30/0x80 [ 85.662052][ T4581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.667932][ T4581] RIP: 0033:0x7f521b091559 [ 85.672329][ T4581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.691917][ T4581] RSP: 002b:00007f52192e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 85.700314][ T4581] RAX: ffffffffffffffda RBX: 00007f521b318fa0 RCX: 00007f521b091559 [ 85.708267][ T4581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 85.716222][ T4581] RBP: 00007f521b128ab8 R08: 0000000000000000 R09: 0000000000000000 [ 85.724172][ T4581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.732124][ T4581] R13: 00007f521b319038 R14: 00007f521b318fa0 R15: 00007ffc90b9c198 [ 85.740089][ T4581] [ 85.786263][ T25] audit: type=1800 audit(1792335986.909:5): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="attr_allow_any_host" dev="configfs" ino=34216 res=0 errno=0 [ 85.790024][ T7] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.819185][ T4589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 85.896651][ T7] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 85.921931][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 85.967167][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.033478][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 86.095184][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 86.276558][ T25] audit: type=1800 audit(1792335987.399:6): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.73" name="addr_trtype" dev="configfs" ino=34223 res=0 errno=0 [ 86.305657][ T7] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.324723][ T7] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.378741][ T7] usb 4-1: Product: syz [ 86.396925][ T7] usb 4-1: Manufacturer: syz [ 86.450327][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 86.460902][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 86.516652][ T7] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 86.534142][ T26] nvmet: creating controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:ea7e72ab-b581-437f-bbf2-1903038152f9. [ 86.557838][ T7] cdc_wdm 4-1:1.0: Unknown control protocol [ 86.744598][ T4589] nvme nvme0: creating 2 I/O queues. [ 86.867418][ T4589] nvme nvme0: new ctrl: "testsubsys" [ 87.204304][ T4264] usb 4-1: USB disconnect, device number 3 [ 87.210275][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 87.210831][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 87.210987][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 87.211003][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 88.391936][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 88.489666][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 88.688945][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.059069][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.086892][ T13] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.118949][ T13] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 89.128004][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.427128][ T7] usb 2-1: USB disconnect, device number 3 [ 89.658968][ T4678] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 89.679587][ T4678] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 89.967821][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.061566][ T4652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.674226][ T4652] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.694311][ T4652] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.706204][ T4652] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.720575][ T4652] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.882533][ T4652] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.891705][ T4652] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.901097][ T4652] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.910053][ T4652] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.121538][ T25] audit: type=1400 audit(1792335992.249:7): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4690 comm="syz.1.94" [ 91.140486][ T4691] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.415961][ T4686] ODEBUG: Out of memory. ODEBUG disabled [ 92.572244][ T4647] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 92.913116][ T4647] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 93.082935][ T4711] device bond0 entered promiscuous mode [ 93.088631][ T4711] device bond_slave_0 entered promiscuous mode [ 93.097052][ T4711] device bond_slave_1 entered promiscuous mode [ 93.175799][ T4715] FAULT_INJECTION: forcing a failure. [ 93.175799][ T4715] name failslab, interval 1, probability 0, space 0, times 0 [ 93.198987][ T4715] CPU: 1 PID: 4715 Comm: syz.2.100 Not tainted syzkaller #0 [ 93.206279][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.206321][ T4715] Call Trace: [ 93.206330][ T4715] [ 93.206338][ T4715] dump_stack_lvl+0x188/0x250 [ 93.227385][ T4715] ? show_regs_print_info+0x20/0x20 [ 93.232586][ T4715] ? load_image+0x410/0x410 [ 93.237096][ T4715] ? __lock_acquire+0x7d40/0x7d40 [ 93.242127][ T4715] ? lockdep_softirqs_off+0x430/0x430 [ 93.247508][ T4715] should_fail+0x383/0x4b0 [ 93.251934][ T4715] should_failslab+0x5/0x20 [ 93.253340][ T4702] ceph: No mds server is up or the cluster is laggy [ 93.256438][ T4715] slab_pre_alloc_hook+0x51/0xc0 [ 93.256464][ T4715] __kmalloc+0x6b/0x340 [ 93.272208][ T4715] ? __netlink_kernel_create+0x1f8/0x7d0 [ 93.277850][ T4715] __netlink_kernel_create+0x1f8/0x7d0 [ 93.283319][ T4715] ? netlink_set_err+0x3c0/0x3c0 [ 93.288264][ T4715] uevent_net_init+0xf8/0x2d0 [ 93.288288][ T4715] ? audit_net_init+0xed/0x1f0 [ 93.297689][ T4715] ? alloc_uevent_skb+0x230/0x230 [ 93.302740][ T4715] ? uevent_net_exit+0x1d0/0x1d0 [ 93.307692][ T4715] ops_init+0x360/0x5f0 [ 93.311868][ T4715] setup_net+0x39e/0xa10 [ 93.316113][ T4715] ? copy_net_ns+0x5b0/0x5b0 [ 93.320715][ T4715] ? copy_net_ns+0x324/0x5b0 [ 93.325305][ T4715] ? down_read_killable+0x1ce/0x340 [ 93.325332][ T4715] copy_net_ns+0x33e/0x5b0 [ 93.334905][ T4715] create_new_namespaces+0x3ce/0x700 [ 93.340208][ T4715] unshare_nsproxy_namespaces+0x116/0x160 [ 93.345933][ T4715] ksys_unshare+0x4f6/0x8e0 [ 93.350441][ T4715] ? __lock_acquire+0x7d40/0x7d40 [ 93.355483][ T4715] ? sighand_ctor+0x40/0x40 [ 93.359987][ T4715] ? lock_chain_count+0x20/0x20 [ 93.364846][ T4715] ? syscall_enter_from_user_mode+0x21/0x70 [ 93.370746][ T4715] __x64_sys_unshare+0x34/0x40 [ 93.375505][ T4715] do_syscall_64+0x4c/0xa0 [ 93.379912][ T4715] ? clear_bhb_loop+0x30/0x80 [ 93.384582][ T4715] ? clear_bhb_loop+0x30/0x80 [ 93.384603][ T4715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.395130][ T4715] RIP: 0033:0x7f521b091559 [ 93.399546][ T4715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.419148][ T4715] RSP: 002b:00007f52192e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.427561][ T4715] RAX: ffffffffffffffda RBX: 00007f521b318fa0 RCX: 00007f521b091559 [ 93.435524][ T4715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 93.443484][ T4715] RBP: 00007f521b128ab8 R08: 0000000000000000 R09: 0000000000000000 [ 93.443498][ T4715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.443509][ T4715] R13: 00007f521b319038 R14: 00007f521b318fa0 R15: 00007ffc90b9c198 [ 93.443535][ T4715] [ 93.492823][ T4264] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 93.507889][ T4715] kobject_uevent: unable to create netlink socket! [ 94.379250][ C0] net_ratelimit: 54 callbacks suppressed [ 95.889475][ T4777] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 95.921298][ T4777] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 96.105551][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 97.539437][ T25] audit: type=1326 audit(1792335999.669:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118c7a2559 code=0x7ffc0000 [ 97.624052][ T25] audit: type=1326 audit(1792335999.699:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f118c7a2559 code=0x7ffc0000 [ 97.668347][ T25] audit: type=1326 audit(1792335999.699:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118c7a2559 code=0x7ffc0000 [ 97.704259][ T25] audit: type=1326 audit(1792335999.699:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f118c7a2559 code=0x7ffc0000 [ 97.762054][ T25] audit: type=1326 audit(1792335999.699:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118c7a2559 code=0x7ffc0000 [ 97.802631][ T25] audit: type=1326 audit(1792335999.699:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f118c7a2559 code=0x7ffc0000 [ 97.840154][ T25] audit: type=1326 audit(1792335999.699:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.4.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118c7a2559 code=0x7ffc0000 [ 98.295672][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 99.162748][ T4889] FAULT_INJECTION: forcing a failure. [ 99.162748][ T4889] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.176929][ T4889] CPU: 0 PID: 4889 Comm: syz.0.148 Not tainted syzkaller #0 [ 99.184210][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.194268][ T4889] Call Trace: [ 99.197541][ T4889] [ 99.200472][ T4889] dump_stack_lvl+0x188/0x250 [ 99.205149][ T4889] ? show_regs_print_info+0x20/0x20 [ 99.210342][ T4889] ? load_image+0x410/0x410 [ 99.210506][ T4889] ? uncharge_page+0x490/0x490 [ 99.220002][ T4889] should_fail+0x383/0x4b0 [ 99.220028][ T4889] prepare_alloc_pages+0x1e3/0x5b0 [ 99.220055][ T4889] __alloc_pages+0x11b/0x480 [ 99.220077][ T4889] ? zone_statistics+0x170/0x170 [ 99.220099][ T4889] ? rcu_lock_acquire+0x30/0x30 [ 99.220120][ T4889] ? alloc_pages+0x452/0x560 [ 99.220144][ T4889] __get_free_pages+0x8/0x30 [ 99.220161][ T4889] __tlb_remove_page_size+0x1f2/0x3f0 [ 99.220185][ T4889] unmap_page_range+0xfcf/0x2410 [ 99.220234][ T4889] unmap_vmas+0x131/0x250 [ 99.248561][ T4889] ? unmap_page_range+0x2410/0x2410 [ 99.248582][ T4889] ? __mutex_lock_common+0x435/0x2400 [ 99.263419][ T4889] ? exit_mm_release+0x16/0x30 [ 99.272906][ T4889] exit_mmap+0x3b9/0x640 [ 99.272929][ T4889] ? vm_brk+0x20/0x20 [ 99.272956][ T4889] ? uprobe_clear_state+0x2f6/0x460 [ 99.283311][ T4889] __mmput+0x115/0x390 [ 99.283334][ T4889] exit_mm+0x632/0x7b0 [ 99.300961][ T4889] ? perf_pmu_migrate_context+0xb70/0xb70 [ 99.300992][ T4889] ? do_exit+0x2110/0x2110 [ 99.301008][ T4889] ? __ia32_sys_timer_delete+0x40/0x40 [ 99.315134][ T4889] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 99.326013][ T4889] ? tty_audit_exit+0x149/0x1f0 [ 99.330867][ T4889] do_exit+0x5b8/0x2110 [ 99.335024][ T4889] ? put_task_struct+0x80/0x80 [ 99.339782][ T4889] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.345766][ T4889] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.350794][ T4889] do_group_exit+0x12c/0x2f0 [ 99.355376][ T4889] ? lockdep_hardirqs_on+0x94/0x140 [ 99.360578][ T4889] get_signal+0x7eb/0x12e0 [ 99.360619][ T4889] arch_do_signal_or_restart+0xe6/0x12a0 [ 99.360652][ T4889] ? futex_exit_release+0x1c0/0x1c0 [ 99.360674][ T4889] ? get_sigframe_size+0x10/0x10 [ 99.360691][ T4889] ? __context_tracking_exit+0x4c/0x80 [ 99.370952][ T4889] ? exit_to_user_mode_loop+0x3b/0x130 [ 99.370975][ T4889] exit_to_user_mode_loop+0x9e/0x130 [ 99.381045][ T4889] exit_to_user_mode_prepare+0xee/0x180 [ 99.381065][ T4889] syscall_exit_to_user_mode+0x16/0x40 [ 99.391924][ T4889] do_syscall_64+0x58/0xa0 [ 99.391943][ T4889] ? clear_bhb_loop+0x30/0x80 [ 99.402718][ T4889] ? clear_bhb_loop+0x30/0x80 [ 99.402739][ T4889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.412557][ T4889] RIP: 0033:0x7f1b66e35559 [ 99.412573][ T4889] Code: Unable to access opcode bytes at RIP 0x7f1b66e3552f. [ 99.421869][ T4889] RSP: 002b:00007f1b6508d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.421890][ T4889] RAX: 0000000000000001 RBX: 00007f1b670bcfa8 RCX: 00007f1b66e35559 [ 99.432146][ T4889] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1b670bcfac [ 99.432159][ T4889] RBP: 00007f1b670bcfa0 R08: 00071ee7ae8f68a8 R09: 0000000000000000 [ 99.447883][ T4889] R10: 000000000000004c R11: 0000000000000246 R12: 0000000000000000 [ 99.463780][ T4889] R13: 00007f1b670bd038 R14: 00007ffd961a34e0 R15: 00007ffd961a35c8 [ 99.463808][ T4889] [ 99.487707][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.521506][ T25] audit: type=1326 audit(1792336001.649:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.2.150" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 99.568296][ T25] audit: type=1326 audit(1792336001.649:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.2.150" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 99.592184][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.611793][ T25] audit: type=1326 audit(1792336001.649:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.2.150" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 99.768882][ C0] net_ratelimit: 50 callbacks suppressed [ 100.567713][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 100.697969][ T4925] device bridge1 entered promiscuous mode [ 101.117372][ T4940] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 101.149440][ T4940] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 101.329617][ T4971] FAULT_INJECTION: forcing a failure. [ 101.329617][ T4971] name failslab, interval 1, probability 0, space 0, times 0 [ 101.444436][ T4971] CPU: 0 PID: 4971 Comm: syz.4.174 Not tainted syzkaller #0 [ 101.451749][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.461800][ T4971] Call Trace: [ 101.465073][ T4971] [ 101.465104][ T4971] dump_stack_lvl+0x188/0x250 [ 101.465133][ T4971] ? show_regs_print_info+0x20/0x20 [ 101.473005][ T4971] ? load_image+0x410/0x410 [ 101.473032][ T4971] ? __might_sleep+0xf0/0xf0 [ 101.482687][ T4971] ? __lock_acquire+0x7d40/0x7d40 [ 101.482718][ T4971] should_fail+0x383/0x4b0 [ 101.492281][ T4971] should_failslab+0x5/0x20 [ 101.492304][ T4971] slab_pre_alloc_hook+0x51/0xc0 [ 101.501167][ T4971] kmem_cache_alloc_trace+0x47/0x290 [ 101.501185][ T4971] ? nfc_allocate_device+0x125/0x550 [ 101.511361][ T4971] ? nci_deactivate_target+0x4f0/0x4f0 [ 101.511381][ T4971] nfc_allocate_device+0x125/0x550 [ 101.522066][ T4971] ? __init_swait_queue_head+0xa4/0x140 [ 101.522094][ T4971] nci_allocate_device+0x1d8/0x350 [ 101.532689][ T4971] virtual_ncidev_open+0x41/0xc0 [ 101.532711][ T4971] ? virtual_ncidev_ioctl+0x90/0x90 [ 101.542697][ T4971] misc_open+0x31f/0x390 [ 101.542724][ T4971] chrdev_open+0x585/0x5f0 [ 101.552107][ T4971] ? cd_forget+0x160/0x160 [ 101.552133][ T4971] ? fsnotify_perm+0x3a7/0x560 [ 101.560915][ T4971] ? cd_forget+0x160/0x160 [ 101.560936][ T4971] do_dentry_open+0x7f7/0xf90 [ 101.570061][ T4971] ? vfs_open+0x2b/0x80 [ 101.570086][ T4971] path_openat+0x2718/0x2fb0 [ 101.578872][ T4971] ? __kasan_slab_alloc+0xa9/0xc0 [ 101.588430][ T4971] ? do_filp_open+0x400/0x400 [ 101.593121][ T4971] do_filp_open+0x1df/0x400 [ 101.597623][ T4971] ? vfs_tmpfile+0x300/0x300 [ 101.602228][ T4971] ? _raw_spin_unlock+0x24/0x40 [ 101.602250][ T4971] ? alloc_fd+0x59e/0x650 [ 101.602274][ T4971] do_sys_openat2+0x14b/0x500 [ 101.602289][ T4971] ? __lock_acquire+0x7d40/0x7d40 [ 101.611735][ T4971] ? do_sys_open+0xe0/0xe0 [ 101.611755][ T4971] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.621408][ T4971] ? lock_chain_count+0x20/0x20 [ 101.621434][ T4971] __x64_sys_openat+0x135/0x160 [ 101.631771][ T4971] do_syscall_64+0x4c/0xa0 [ 101.631792][ T4971] ? clear_bhb_loop+0x30/0x80 [ 101.641431][ T4971] ? clear_bhb_loop+0x30/0x80 [ 101.641454][ T4971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.650488][ T4971] RIP: 0033:0x7f118c7a2559 [ 101.650508][ T4971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.650523][ T4971] RSP: 002b:00007f118a9fa028 EFLAGS: 00000246 [ 101.661031][ T4971] ORIG_RAX: 0000000000000101 [ 101.661041][ T4971] RAX: ffffffffffffffda RBX: 00007f118ca29fa0 RCX: 00007f118c7a2559 [ 101.661055][ T4971] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 101.685018][ T4971] RBP: 00007f118c839ab8 R08: 0000000000000000 R09: 0000000000000000 [ 101.685033][ T4971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.685044][ T4971] R13: 00007f118ca2a038 R14: 00007f118ca29fa0 R15: 00007ffde19164b8 [ 101.685073][ T4971] [ 101.685128][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.975362][ T4987] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.031092][ T4987] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.226624][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 102.322247][ T5014] tmpfs: Unknown parameter 'noswap' [ 102.510858][ T5006] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 102.636858][ T5006] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 102.824620][ T25] kauditd_printk_skb: 26 callbacks suppressed [ 102.824631][ T25] audit: type=1326 audit(1792336004.949:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 102.854658][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.928977][ T4308] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.964575][ T25] audit: type=1326 audit(1792336004.999:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 102.988492][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.002565][ T25] audit: type=1326 audit(1792336004.999:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 103.038977][ T25] audit: type=1326 audit(1792336005.009:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 103.082091][ T5059] ======================================================= [ 103.082091][ T5059] WARNING: The mand mount option has been deprecated and [ 103.082091][ T5059] and is ignored by this kernel. Remove the mand [ 103.082091][ T5059] option from the mount to silence this warning. [ 103.082091][ T5059] ======================================================= [ 103.082658][ T25] audit: type=1326 audit(1792336005.009:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 103.116919][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.140923][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.160877][ T25] audit: type=1326 audit(1792336005.009:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 103.192888][ T25] audit: type=1326 audit(1792336005.009:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 103.238703][ T25] audit: type=1326 audit(1792336005.009:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 103.339044][ T25] audit: type=1326 audit(1792336005.009:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 103.382167][ T25] audit: type=1326 audit(1792336005.009:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.2.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 103.430697][ T5068] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 103.446315][ T5068] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 103.519548][ T4308] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.547722][ T4308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.581610][ T4308] usb 2-1: Product: syz [ 103.585803][ T4308] usb 2-1: Manufacturer: syz [ 103.603255][ T4308] usb 2-1: SerialNumber: syz [ 104.369254][ T13] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.868295][ T5129] FAULT_INJECTION: forcing a failure. [ 104.868295][ T5129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.882668][ T5129] CPU: 0 PID: 5129 Comm: syz.3.224 Not tainted syzkaller #0 [ 104.889963][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.900013][ T5129] Call Trace: [ 104.903290][ T5129] [ 104.906215][ T5129] dump_stack_lvl+0x188/0x250 [ 104.910901][ T5129] ? show_regs_print_info+0x20/0x20 [ 104.916107][ T5129] ? load_image+0x410/0x410 [ 104.920615][ T5129] ? __lock_acquire+0x7d40/0x7d40 [ 104.925652][ T5129] should_fail+0x383/0x4b0 [ 104.930086][ T5129] prepare_alloc_pages+0x1e3/0x5b0 [ 104.935210][ T5129] __alloc_pages+0x11b/0x480 [ 104.939800][ T5129] ? unwind_get_return_address+0x49/0x80 [ 104.945444][ T5129] ? zone_statistics+0x170/0x170 [ 104.950397][ T5129] ? alloc_pages+0x452/0x560 [ 104.954988][ T5129] stack_depot_save+0x356/0x460 [ 104.959842][ T5129] ? kfree+0xef/0x2a0 [ 104.963827][ T5129] kasan_set_track+0x62/0x70 [ 104.968414][ T5129] ? kasan_set_track+0x4b/0x70 [ 104.973173][ T5129] ? kasan_set_free_info+0x1f/0x40 [ 104.978279][ T5129] ? ____kasan_slab_free+0xd5/0x110 [ 104.978322][ T5129] ? slab_free_freelist_hook+0xec/0x170 [ 104.978341][ T5129] ? kfree+0xef/0x2a0 [ 104.978356][ T5129] ? ima_calc_file_hash+0xb09/0x1940 [ 104.989362][ T5129] ? ima_collect_measurement+0x335/0x7e0 [ 104.989387][ T5129] ? process_measurement+0x1185/0x1c20 [ 104.989405][ T5129] ? ima_file_mmap+0xec/0x140 [ 104.989421][ T5129] ? vm_mmap_pgoff+0x12e/0x2d0 [ 104.989438][ T5129] ? ksys_mmap_pgoff+0x5c9/0x790 [ 104.989457][ T5129] ? do_syscall_64+0x4c/0xa0 [ 104.989477][ T5129] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.989535][ T5129] kasan_set_free_info+0x1f/0x40 [ 104.989555][ T5129] ____kasan_slab_free+0xd5/0x110 [ 104.989576][ T5129] slab_free_freelist_hook+0xec/0x170 [ 104.989596][ T5129] ? ima_calc_file_hash+0xb09/0x1940 [ 104.989613][ T5129] kfree+0xef/0x2a0 [ 104.989632][ T5129] ima_calc_file_hash+0xb09/0x1940 [ 104.989651][ T5129] ? _find_first_zero_bit+0xd1/0xf0 [ 104.989686][ T5129] ? ima_alloc_tfm+0x2f0/0x2f0 [ 104.989747][ T5129] ? __mutex_trylock_common+0x15c/0x260 [ 104.989770][ T5129] ? rcu_lock_release+0x20/0x20 [ 104.989810][ T5129] ima_collect_measurement+0x335/0x7e0 [ 104.999056][ T5129] ? ima_get_action+0xa0/0xa0 [ 105.010093][ T5129] ? is_bad_inode+0x9/0x40 [ 105.019494][ T5129] process_measurement+0x1185/0x1c20 [ 105.019528][ T5129] ? ima_file_mmap+0x140/0x140 [ 105.029251][ T5129] ? rcu_lock_release+0x5/0x20 [ 105.029315][ T5129] ima_file_mmap+0xec/0x140 [ 105.029335][ T5129] ? ima_file_free+0x3e0/0x3e0 [ 105.040516][ T5129] ? common_file_perm+0x171/0x1c0 [ 105.040541][ T5129] ? bpf_lsm_mmap_file+0x5/0x10 [ 105.040559][ T5129] ? security_mmap_file+0x11b/0x180 [ 105.040581][ T5129] vm_mmap_pgoff+0x12e/0x2d0 [ 105.040606][ T5129] ? account_locked_vm+0xe0/0xe0 [ 105.040629][ T5129] ? __lock_acquire+0x7d40/0x7d40 [ 105.040654][ T5129] ksys_mmap_pgoff+0x5c9/0x790 [ 105.040678][ T5129] ? mmap_region+0x1730/0x1730 [ 105.051021][ T5129] ? lockdep_hardirqs_on+0x94/0x140 [ 105.060075][ T5129] do_syscall_64+0x4c/0xa0 [ 105.060099][ T5129] ? clear_bhb_loop+0x30/0x80 [ 105.070363][ T5129] ? clear_bhb_loop+0x30/0x80 [ 105.070387][ T5129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.080640][ T5129] RIP: 0033:0x7ffa0fd48559 [ 105.080659][ T5129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.091191][ T5129] RSP: 002b:00007ffa0dfa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 105.091216][ T5129] RAX: ffffffffffffffda RBX: 00007ffa0ffcffa0 RCX: 00007ffa0fd48559 [ 105.091228][ T5129] RDX: 000000000200000e RSI: 0000000000800000 RDI: 0000200000000000 [ 105.091241][ T5129] RBP: 00007ffa0fddfab8 R08: ffffffffffffffff R09: 0000000000000000 [ 105.091253][ T5129] R10: 000000000006c2f2 R11: 0000000000000246 R12: 0000000000000000 [ 105.091264][ T5129] R13: 00007ffa0ffd0038 R14: 00007ffa0ffcffa0 R15: 00007fffda799f08 [ 105.091298][ T5129] [ 105.091340][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.091569][ C0] net_ratelimit: 42 callbacks suppressed [ 105.294503][ T21] usb 2-1: USB disconnect, device number 4 [ 105.395651][ T5135] FAULT_INJECTION: forcing a failure. [ 105.395651][ T5135] name failslab, interval 1, probability 0, space 0, times 0 [ 105.424509][ T5135] CPU: 1 PID: 5135 Comm: syz.4.227 Not tainted syzkaller #0 [ 105.431807][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.441858][ T5135] Call Trace: [ 105.445136][ T5135] [ 105.448069][ T5135] dump_stack_lvl+0x188/0x250 [ 105.448982][ T13] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 105.452749][ T5135] ? show_regs_print_info+0x20/0x20 [ 105.452773][ T5135] ? load_image+0x410/0x410 [ 105.469264][ T5135] ? __might_sleep+0xf0/0xf0 [ 105.469288][ T5135] ? __lock_acquire+0x7d40/0x7d40 [ 105.478875][ T5135] should_fail+0x383/0x4b0 [ 105.483303][ T5135] should_failslab+0x5/0x20 [ 105.487809][ T5135] slab_pre_alloc_hook+0x51/0xc0 [ 105.492752][ T5135] ? getname_flags+0xb7/0x4f0 [ 105.497432][ T5135] kmem_cache_alloc+0x3d/0x280 [ 105.502193][ T5135] getname_flags+0xb7/0x4f0 [ 105.506693][ T5135] user_path_at_empty+0x2a/0x190 [ 105.511638][ T5135] __se_sys_mount+0x2a4/0x3d0 [ 105.516314][ T5135] ? __x64_sys_mount+0xc0/0xc0 [ 105.521077][ T5135] ? lockdep_hardirqs_on+0x94/0x140 [ 105.521099][ T5135] ? __x64_sys_mount+0x1c/0xc0 [ 105.521120][ T5135] do_syscall_64+0x4c/0xa0 [ 105.521136][ T5135] ? clear_bhb_loop+0x30/0x80 [ 105.521156][ T5135] ? clear_bhb_loop+0x30/0x80 [ 105.531065][ T5135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.550632][ T5135] RIP: 0033:0x7f118c7a2559 [ 105.555048][ T5135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.558620][ T13] ath9k_htc: Failed to initialize the device [ 105.574646][ T5135] RSP: 002b:00007f118a9fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.574669][ T5135] RAX: ffffffffffffffda RBX: 00007f118ca29fa0 RCX: 00007f118c7a2559 [ 105.574682][ T5135] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 105.574694][ T5135] RBP: 00007f118c839ab8 R08: 0000000000000000 R09: 0000000000000000 [ 105.574706][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.574717][ T5135] R13: 00007f118ca2a038 R14: 00007f118ca29fa0 R15: 00007ffde19164b8 [ 105.574743][ T5135] [ 105.634890][ T21] usb 2-1: ath9k_htc: USB layer deinitialized [ 105.708967][ T4647] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.001904][ T4647] usb 3-1: Using ep0 maxpacket: 8 [ 106.159710][ T4647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.178698][ T4647] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.215509][ T4647] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 106.250557][ T4647] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 106.286701][ T4647] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 106.315800][ T4647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.411966][ T4647] hub 3-1:1.0: bad descriptor, ignoring hub [ 106.417878][ T4647] hub: probe of 3-1:1.0 failed with error -5 [ 106.441775][ T4647] cdc_wdm 3-1:1.0: skipping garbage [ 106.447613][ T4647] cdc_wdm 3-1:1.0: skipping garbage [ 106.456990][ T4647] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 106.470402][ T4647] cdc_wdm 3-1:1.0: Unknown control protocol [ 106.637593][ T5182] 9pnet_virtio: no channels available for device syz [ 107.127159][ T5118] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 108.120208][ T4285] usb 3-1: USB disconnect, device number 4 [ 108.718759][ T4263] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 108.863304][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 108.871664][ T4263] wiimote 0005:057E:0306.0001: New device registered [ 109.034472][ T5198] wiimote 0005:057E:0306.0001: Device removed [ 109.789747][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 109.827776][ T5200] fido_id[5200]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.912940][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 110.054265][ T5216] input: syz0 as /devices/virtual/input/input6 [ 110.168893][ C0] net_ratelimit: 41 callbacks suppressed [ 110.537069][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 110.631821][ T5232] FAULT_INJECTION: forcing a failure. [ 110.631821][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 110.767387][ T5232] CPU: 1 PID: 5232 Comm: syz.4.263 Not tainted syzkaller #0 [ 110.774696][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.784749][ T5232] Call Trace: [ 110.788023][ T5232] [ 110.790953][ T5232] dump_stack_lvl+0x188/0x250 [ 110.795638][ T5232] ? show_regs_print_info+0x20/0x20 [ 110.800844][ T5232] ? load_image+0x410/0x410 [ 110.805353][ T5232] ? __lock_acquire+0x7d40/0x7d40 [ 110.810387][ T5232] should_fail+0x383/0x4b0 [ 110.814808][ T5232] should_failslab+0x5/0x20 [ 110.819315][ T5232] slab_pre_alloc_hook+0x51/0xc0 [ 110.824251][ T5232] ? __anon_vma_prepare+0xb6/0x430 [ 110.829361][ T5232] kmem_cache_alloc+0x3d/0x280 [ 110.834120][ T5232] ? find_mergeable_anon_vma+0x388/0x590 [ 110.839754][ T5232] __anon_vma_prepare+0xb6/0x430 [ 110.844689][ T5232] ? __pte_alloc+0x10f/0x150 [ 110.849277][ T5232] handle_mm_fault+0x3c1b/0x4440 [ 110.854228][ T5232] ? get_page+0xe0/0xe0 [ 110.858392][ T5232] ? follow_page_mask+0x272/0x12b0 [ 110.863510][ T5232] ? vma_is_secretmem+0x9/0x40 [ 110.868277][ T5232] ? check_vma_flags+0x359/0x470 [ 110.873220][ T5232] __get_user_pages+0x952/0x11e0 [ 110.878173][ T5232] ? populate_vma_page_range+0x290/0x290 [ 110.883814][ T5232] ? preempt_schedule_irq+0xe6/0x160 [ 110.889107][ T5232] ? __might_sleep+0xf0/0xf0 [ 110.893691][ T5232] ? lockdep_hardirqs_off+0x70/0x100 [ 110.898976][ T5232] ? read_lock_is_recursive+0x10/0x10 [ 110.904357][ T5232] __get_user_pages_remote+0x1c2/0x730 [ 110.909826][ T5232] ? lock_chain_count+0x20/0x20 [ 110.914679][ T5232] ? get_user_pages_remote+0x55/0xa0 [ 110.919971][ T5232] get_arg_page+0x11b/0x350 [ 110.924474][ T5232] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 110.930113][ T5232] ? copy_string_kernel+0x280/0x280 [ 110.935307][ T5232] ? copy_string_kernel+0x23/0x280 [ 110.940426][ T5232] copy_string_kernel+0x14d/0x280 [ 110.945449][ T5232] do_execveat_common+0x360/0x6b0 [ 110.950476][ T5232] __x64_sys_execveat+0xc0/0xe0 [ 110.955327][ T5232] do_syscall_64+0x4c/0xa0 [ 110.959746][ T5232] ? clear_bhb_loop+0x30/0x80 [ 110.964419][ T5232] ? clear_bhb_loop+0x30/0x80 [ 110.969098][ T5232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.974994][ T5232] RIP: 0033:0x7f118c7a2559 [ 110.979410][ T5232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.999014][ T5232] RSP: 002b:00007f118a9fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 111.007433][ T5232] RAX: ffffffffffffffda RBX: 00007f118ca29fa0 RCX: 00007f118c7a2559 [ 111.015407][ T5232] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000008 [ 111.023374][ T5232] RBP: 00007f118c839ab8 R08: 0000000000001000 R09: 0000000000000000 [ 111.031338][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.039305][ T5232] R13: 00007f118ca2a038 R14: 00007f118ca29fa0 R15: 00007ffde19164b8 [ 111.047290][ T5232] [ 111.319889][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 111.319901][ T25] audit: type=1326 audit(1792336013.439:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 111.350483][ T25] audit: type=1326 audit(1792336013.449:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 111.374370][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.380854][ T25] audit: type=1326 audit(1792336013.449:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 111.404734][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.405356][ T25] audit: type=1326 audit(1792336013.449:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 111.495496][ T25] audit: type=1326 audit(1792336013.449:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 111.519405][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.578723][ T5246] FAULT_INJECTION: forcing a failure. [ 111.578723][ T5246] name failslab, interval 1, probability 0, space 0, times 0 [ 111.614078][ T5247] device syzkaller0 entered promiscuous mode [ 111.618892][ T25] audit: type=1326 audit(1792336013.449:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 111.644180][ T5246] CPU: 0 PID: 5246 Comm: syz.4.267 Not tainted syzkaller #0 [ 111.651460][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.661526][ T5246] Call Trace: [ 111.664803][ T5246] [ 111.664812][ T5246] dump_stack_lvl+0x188/0x250 [ 111.664833][ T5246] ? preempt_count_add+0x8d/0x190 [ 111.672399][ T5246] ? show_regs_print_info+0x20/0x20 [ 111.672423][ T5246] ? load_image+0x410/0x410 [ 111.682593][ T5246] ? _printk+0xda/0x130 [ 111.682621][ T5246] should_fail+0x383/0x4b0 [ 111.691225][ T5246] should_failslab+0x5/0x20 [ 111.691246][ T5246] slab_pre_alloc_hook+0x51/0xc0 [ 111.700114][ T5246] kmem_cache_alloc_trace+0x47/0x290 [ 111.700137][ T5246] ? sctp_add_bind_addr+0x89/0x350 [ 111.710308][ T5246] sctp_add_bind_addr+0x89/0x350 [ 111.710333][ T5246] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 111.720322][ T5246] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 111.731982][ T5246] ? sctp_v4_is_any+0x31/0x50 [ 111.736647][ T5246] ? sctp_copy_one_addr+0x93/0x660 [ 111.741751][ T5246] sctp_bind_addr_copy+0xaf/0x3c0 [ 111.741773][ T5246] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 111.753079][ T5246] sctp_connect_new_asoc+0x2f5/0x6a0 [ 111.758355][ T5246] ? __sctp_connect+0xd80/0xd80 [ 111.763194][ T5246] ? __local_bh_enable_ip+0x136/0x1c0 [ 111.763216][ T5246] ? _local_bh_enable+0xa0/0xa0 [ 111.763237][ T5246] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 111.773719][ T5246] ? security_sctp_bind_connect+0x85/0xb0 [ 111.784943][ T5246] sctp_sendmsg+0x15e1/0x2940 [ 111.789634][ T5246] ? sctp_getsockopt+0x8a0/0x8a0 [ 111.789662][ T5246] ? aa_af_perm+0x340/0x340 [ 111.799050][ T5246] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 111.799075][ T5246] ? aa_sock_msg_perm+0x94/0x150 [ 111.810368][ T5246] ? sock_rps_record_flow+0x17/0x3b0 [ 111.810392][ T5246] ? inet_sendmsg+0x7a/0x2a0 [ 111.820216][ T5246] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 111.820242][ T5246] __sys_sendto+0x46d/0x620 [ 111.829975][ T5246] ? __ia32_sys_getpeername+0x80/0x80 [ 111.835370][ T5246] ? lock_chain_count+0x20/0x20 [ 111.840219][ T5246] __x64_sys_sendto+0xda/0xf0 [ 111.840242][ T5246] do_syscall_64+0x4c/0xa0 [ 111.849294][ T5246] ? clear_bhb_loop+0x30/0x80 [ 111.849316][ T5246] ? clear_bhb_loop+0x30/0x80 [ 111.858623][ T5246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.858645][ T5246] RIP: 0033:0x7f118c7a2559 [ 111.868910][ T5246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.888522][ T5246] RSP: 002b:00007f118a9fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 111.896955][ T5246] RAX: ffffffffffffffda RBX: 00007f118ca29fa0 RCX: 00007f118c7a2559 [ 111.896973][ T5246] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 111.896984][ T5246] RBP: 00007f118c839ab8 R08: 0000200000000340 R09: 0000000000000010 [ 111.896997][ T5246] R10: e61e2840a154b0c1 R11: 0000000000000246 R12: 0000000000000000 [ 111.897009][ T5246] R13: 00007f118ca2a038 R14: 00007f118ca29fa0 R15: 00007ffde19164b8 [ 111.920879][ T5246] [ 111.939827][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.948134][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 111.954291][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 111.968906][ T25] audit: type=1326 audit(1792336013.449:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 112.018194][ T25] audit: type=1326 audit(1792336013.449:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 112.042080][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.068926][ T25] audit: type=1326 audit(1792336013.449:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 112.102831][ T25] audit: type=1326 audit(1792336013.449:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b091559 code=0x7ffc0000 [ 113.195565][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 114.009060][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 114.022952][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 114.570243][ T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 114.594228][ T7] Bluetooth: hci4: Injecting HCI hardware error event [ 114.616167][ T4204] Bluetooth: hci4: hardware error 0x00 [ 115.049081][ T7] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 115.366540][ T5350] device syzkaller1 entered promiscuous mode [ 115.378878][ C1] net_ratelimit: 47 callbacks suppressed [ 115.420553][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.440760][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.493035][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.525735][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.728570][ T5364] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 115.771543][ T4278] Bluetooth: hci6: Frame reassembly failed (-84) [ 115.838752][ T5326] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(3) [ 115.874734][ T5326] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(1) [ 115.899356][ T7] usb 2-1: usb_control_msg returned -32 [ 115.905025][ T7] usbtmc 2-1:16.0: can't read capabilities [ 116.273185][ T1107] usb 2-1: USB disconnect, device number 5 [ 116.289089][ T5386] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -71 [ 116.751792][ T5400] binder: 5398:5400 ioctl c0306201 200000000080 returned -14 [ 117.234810][ T4264] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.498920][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 117.640258][ T4264] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.670870][ T4264] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.769451][ T21] Bluetooth: hci6: command 0x1003 tx timeout [ 117.776106][ T4202] Bluetooth: hci6: sending frame failed (-49) [ 117.849298][ T4264] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 117.868523][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.899645][ T4264] usb 2-1: Product: syz [ 117.903816][ T4264] usb 2-1: Manufacturer: syz [ 117.908404][ T4264] usb 2-1: SerialNumber: syz [ 117.937991][ T4264] usb 2-1: config 0 descriptor?? [ 117.959021][ T4263] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.217776][ T4264] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 118.230374][ T4263] usb 5-1: Using ep0 maxpacket: 16 [ 118.379437][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.538915][ T4264] rc_core: IR keymap rc-imon-pad not found [ 118.548796][ T4264] Registered IR keymap rc-empty [ 118.565582][ T4264] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 118.582192][ T4264] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 118.593136][ T4263] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.608945][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.621460][ T4263] usb 5-1: Product: syz [ 118.627218][ T4263] usb 5-1: Manufacturer: syz [ 118.635528][ T4263] usb 5-1: SerialNumber: syz [ 118.645855][ T4263] usb 5-1: config 0 descriptor?? [ 118.671257][ T4264] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 118.690031][ T4264] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 118.703806][ T4263] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.717435][ T4263] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 118.730343][ T4264] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:6> initialized [ 118.880385][ T4264] usb 2-1: USB disconnect, device number 6 [ 118.889021][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 119.359406][ T4263] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 119.658469][ T5446] jffs2: notice: (5446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.849046][ T1107] Bluetooth: hci6: command 0x1001 tx timeout [ 119.855188][ T4202] Bluetooth: hci6: sending frame failed (-49) [ 120.054183][ T5457] 9pnet_virtio: no channels available for device syz [ 120.173757][ T4263] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 120.189486][ T4263] em28xx 5-1:0.0: board has no eeprom [ 120.340154][ T4263] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 120.347980][ T4263] em28xx 5-1:0.0: dvb set to bulk mode. [ 120.357184][ T5472] 9pnet_virtio: no channels available for device syz [ 120.408887][ C0] net_ratelimit: 41 callbacks suppressed [ 120.420971][ T4263] usb 5-1: USB disconnect, device number 2 [ 120.441957][ T4263] em28xx 5-1:0.0: Disconnecting em28xx [ 120.471923][ T4285] em28xx 5-1:0.0: Binding DVB extension [ 120.561581][ T4285] em28xx 5-1:0.0: Registering input extension [ 120.576601][ T4263] em28xx 5-1:0.0: Closing input extension [ 120.645329][ T4263] em28xx 5-1:0.0: Freeing device [ 120.826735][ T5489] FAULT_INJECTION: forcing a failure. [ 120.826735][ T5489] name failslab, interval 1, probability 0, space 0, times 0 [ 120.854218][ T5489] CPU: 0 PID: 5489 Comm: syz.1.352 Not tainted syzkaller #0 [ 120.861523][ T5489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.871582][ T5489] Call Trace: [ 120.874869][ T5489] [ 120.877802][ T5489] dump_stack_lvl+0x188/0x250 [ 120.882491][ T5489] ? show_regs_print_info+0x20/0x20 [ 120.887703][ T5489] ? load_image+0x410/0x410 [ 120.892218][ T5489] ? __might_sleep+0xf0/0xf0 [ 120.896815][ T5489] ? __lock_acquire+0x7d40/0x7d40 [ 120.901847][ T5489] ? _copy_from_iter+0x5bf/0x1160 [ 120.906890][ T5489] should_fail+0x383/0x4b0 [ 120.911318][ T5489] should_failslab+0x5/0x20 [ 120.915835][ T5489] slab_pre_alloc_hook+0x51/0xc0 [ 120.920780][ T5489] ? skb_clone+0x1bd/0x350 [ 120.925196][ T5489] kmem_cache_alloc+0x3d/0x280 [ 120.929964][ T5489] skb_clone+0x1bd/0x350 [ 120.934241][ T5489] pfkey_sendmsg+0x4c8/0x1130 [ 120.938938][ T5489] ? pfkey_release+0x340/0x340 [ 120.943702][ T5489] ? aa_sk_perm+0x7dc/0x910 [ 120.948212][ T5489] ? aa_af_perm+0x340/0x340 [ 120.948237][ T5489] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 120.948261][ T5489] ? aa_sock_msg_perm+0x94/0x150 [ 120.964549][ T5489] ? apparmor_socket_sendmsg+0x88/0x230 [ 120.970109][ T5489] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 120.975406][ T5489] ? security_socket_sendmsg+0x7c/0xa0 [ 120.980864][ T5489] ? pfkey_release+0x340/0x340 [ 120.985621][ T5489] ____sys_sendmsg+0x5be/0x8f0 [ 120.990393][ T5489] ? __sys_sendmsg_sock+0x30/0x30 [ 120.995446][ T5489] ? import_iovec+0x6f/0xa0 [ 120.999956][ T5489] ___sys_sendmsg+0x236/0x2e0 [ 121.004641][ T5489] ? __sys_sendmsg+0x290/0x290 [ 121.009437][ T5489] __se_sys_sendmsg+0x1b7/0x2a0 [ 121.014292][ T5489] ? __x64_sys_sendmsg+0x80/0x80 [ 121.014315][ T5489] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.014348][ T5489] ? lockdep_hardirqs_on+0x94/0x140 [ 121.014371][ T5489] do_syscall_64+0x4c/0xa0 [ 121.030746][ T5489] ? clear_bhb_loop+0x30/0x80 [ 121.030771][ T5489] ? clear_bhb_loop+0x30/0x80 [ 121.044484][ T5489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.050391][ T5489] RIP: 0033:0x7f210a4eb559 [ 121.054817][ T5489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.074426][ T5489] RSP: 002b:00007f2108743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.082846][ T5489] RAX: ffffffffffffffda RBX: 00007f210a772fa0 RCX: 00007f210a4eb559 [ 121.090822][ T5489] RDX: 0000000000000000 RSI: 0000200000005b40 RDI: 0000000000000004 [ 121.098798][ T5489] RBP: 00007f210a582ab8 R08: 0000000000000000 R09: 0000000000000000 [ 121.106774][ T5489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.114748][ T5489] R13: 00007f210a773038 R14: 00007f210a772fa0 R15: 00007ffdbf984328 [ 121.122743][ T5489] [ 121.125856][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.857559][ T5504] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff00000000000000000000' [ 121.930799][ T7] Bluetooth: hci6: command 0x1009 tx timeout [ 122.095417][ T5514] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 122.696275][ T5518] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11 [ 123.847159][ T5536] netlink: 'syz.4.369': attribute type 6 has an invalid length. [ 124.597508][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 124.637716][ T7] hid-generic 0005:0008:0009.0002: unknown main item tag 0x0 [ 124.662087][ T7] hid-generic 0005:0008:0009.0002: unknown main item tag 0x0 [ 124.679102][ T7] hid-generic 0005:0008:0009.0002: unknown main item tag 0x0 [ 124.723669][ T7] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 125.448904][ C1] net_ratelimit: 43 callbacks suppressed [ 125.784404][ T4264] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.106423][ T4204] Bluetooth: hci0: Received unexpected HCI Event 00000000 [ 126.538473][ T5595] jffs2: notice: (5595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.209514][ T4264] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.309107][ T4264] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 127.367562][ T4264] usb 2-1: can't read configurations, error -71 [ 127.629202][ T5605] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 127.780943][ T5605] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 127.904830][ T5609] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.970617][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 128.188679][ T5626] block device autoloading is deprecated and will be removed. [ 128.509965][ T4278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.701856][ T4278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.835556][ T4278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.917731][ T5638] loop3: detected capacity change from 0 to 7 [ 128.933489][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.944478][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 128.961619][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.972548][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.058452][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.069423][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.083260][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.094167][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.108490][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.119427][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.127452][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.138345][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.151661][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.162566][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.170535][ T5638] ldm_validate_partition_table(): Disk read failed. [ 129.177660][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.188564][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.230285][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.241188][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.259299][ T4278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.262583][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.280466][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 129.342872][ T5638] Dev loop3: unable to read RDB block 0 [ 129.380828][ T5638] loop3: unable to read partition table [ 129.404399][ T5638] loop3: partition table beyond EOD, truncated [ 129.441145][ T4185] ldm_validate_partition_table(): Disk read failed. [ 129.452822][ T5638] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5@) failed (rc=-5) [ 129.466836][ T4185] Dev loop3: unable to read RDB block 0 [ 129.513825][ T4185] loop3: unable to read partition table [ 129.548641][ T4185] loop3: partition table beyond EOD, truncated [ 129.593100][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 129.660521][ T5639] ldm_validate_partition_table(): Disk read failed. [ 129.689935][ T5639] Dev loop3: unable to read RDB block 0 [ 129.983086][ T5639] loop3: unable to read partition table [ 130.233290][ T5639] loop3: partition table beyond EOD, truncated [ 130.326949][ T4308] Bluetooth: hci5: command 0x0409 tx timeout [ 130.344363][ T5639] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5@) failed (rc=-5) [ 130.552829][ T5609] chnl_net:caif_netlink_parms(): no params data found [ 130.649616][ C1] net_ratelimit: 36 callbacks suppressed [ 130.763651][ T4308] libceph: connect (1)[c::]:6789 error -101 [ 130.773552][ T4308] libceph: mon0 (1)[c::]:6789 connect error [ 130.824849][ T7] libceph: connect (1)[c::]:6789 error -101 [ 130.831777][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 130.858919][ T5693] capability: warning: `syz.0.415' uses deprecated v2 capabilities in a way that may be insecure [ 130.969210][ T4308] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.089645][ T13] libceph: connect (1)[c::]:6789 error -101 [ 131.329117][ T4308] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.562320][ T5682] ceph: No mds server is up or the cluster is laggy [ 131.877553][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 131.889010][ T5688] ceph: No mds server is up or the cluster is laggy [ 131.914572][ T4264] libceph: connect (1)[c::]:6789 error -101 [ 131.923224][ T4264] libceph: mon0 (1)[c::]:6789 connect error [ 132.039146][ T4308] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 132.108460][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.138238][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.150869][ T4308] usb 4-1: Product: syz [ 132.155046][ T4308] usb 4-1: Manufacturer: syz [ 132.192253][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.199828][ T4308] usb 4-1: SerialNumber: syz [ 132.244095][ T5609] device bridge_slave_0 entered promiscuous mode [ 132.315638][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.323437][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.358068][ T5609] device bridge_slave_1 entered promiscuous mode [ 132.409460][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 132.480081][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.509191][ T4308] usb 4-1: Cannot retrieve CPort count: 0 [ 132.514989][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.515001][ T4308] usb 4-1: Cannot retrieve CPort count: -5 [ 132.549996][ T4308] es2_ap_driver: probe of 4-1:1.0 failed with error -5 [ 132.581117][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.587539][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.627435][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 132.830196][ T5609] team0: Port device team_slave_0 added [ 132.843197][ T5609] team0: Port device team_slave_1 added [ 133.453853][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.453864][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.486756][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.874259][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.176229][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.490512][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 134.776017][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.802044][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.808661][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.821533][ T7] usb 4-1: USB disconnect, device number 4 [ 135.232196][ T5762] input: syz1 as /devices/virtual/input/input12 [ 135.770075][ C0] net_ratelimit: 36 callbacks suppressed [ 136.454977][ T5609] device hsr_slave_0 entered promiscuous mode [ 136.479315][ T5609] device hsr_slave_1 entered promiscuous mode [ 136.506481][ T5609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.537302][ T5609] Cannot create hsr debugfs directory [ 136.632688][ T5798] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 136.809021][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 138.976615][ T4647] FS-Cache: Duplicate cookie detected [ 138.982871][ T4647] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 138.990640][ T4647] FS-Cache: O-cookie d=ffffffff8d547b60{AFS.cell} n=ffff8880764da800 [ 138.998703][ T4647] FS-Cache: O-key=[1] '6c' [ 139.003167][ T4647] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 139.010468][ T4647] FS-Cache: N-cookie d=ffffffff8d547b60{AFS.cell} n=ffff88807d5ba000 [ 139.018523][ T4647] FS-Cache: N-key=[1] '6c' [ 139.029848][ T5839] kAFS: No cell specified [ 139.547891][ T5841] mmap: syz.3.450 (5841) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 139.724277][ T4278] device hsr_slave_0 left promiscuous mode [ 139.798018][ T5841] FAULT_INJECTION: forcing a failure. [ 139.798018][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 139.927588][ T5841] CPU: 0 PID: 5841 Comm: syz.3.450 Not tainted syzkaller #0 [ 139.934885][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.944938][ T5841] Call Trace: [ 139.948216][ T5841] [ 139.951138][ T5841] dump_stack_lvl+0x188/0x250 [ 139.955821][ T5841] ? show_regs_print_info+0x20/0x20 [ 139.961023][ T5841] ? load_image+0x410/0x410 [ 139.965538][ T5841] ? __lock_acquire+0x7d40/0x7d40 [ 139.970587][ T5841] should_fail+0x383/0x4b0 [ 139.975006][ T5841] should_failslab+0x5/0x20 [ 139.975059][ T5841] slab_pre_alloc_hook+0x51/0xc0 [ 139.975081][ T5841] __kmalloc+0x6b/0x340 [ 139.989133][ T5841] ? afs_lookup_cell+0x57e/0x1680 [ 139.994173][ T5841] afs_lookup_cell+0x57e/0x1680 [ 139.999038][ T5841] ? __lock_acquire+0x7d40/0x7d40 [ 140.004066][ T5841] ? afs_find_cell+0x310/0x310 [ 140.004104][ T5841] afs_cell_init+0x6a/0x300 [ 140.013330][ T5841] proc_simple_write+0x102/0x130 [ 140.018275][ T5841] ? PDE_DATA+0x60/0x60 [ 140.022424][ T5841] proc_reg_write+0x1dd/0x2c0 [ 140.022451][ T5841] ? proc_reg_llseek+0x280/0x280 [ 140.032007][ T5841] vfs_write+0x304/0xd70 [ 140.032037][ T5841] ? file_end_write+0x250/0x250 [ 140.032071][ T5841] ? mutex_lock_nested+0x17/0x20 [ 140.041103][ T5841] ? __fdget_pos+0x2bf/0x370 [ 140.041121][ T5841] ? ksys_write+0x70/0x260 [ 140.050600][ T5841] ksys_write+0x153/0x260 [ 140.050623][ T5841] ? __ia32_sys_read+0x80/0x80 [ 140.059307][ T5841] ? lockdep_hardirqs_on+0x94/0x140 [ 140.069233][ T5841] do_syscall_64+0x4c/0xa0 [ 140.073639][ T5841] ? clear_bhb_loop+0x30/0x80 [ 140.078308][ T5841] ? clear_bhb_loop+0x30/0x80 [ 140.082975][ T5841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.082996][ T5841] RIP: 0033:0x7ffa0fd48559 [ 140.093258][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.112862][ T5841] RSP: 002b:00007ffa0dfa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.121278][ T5841] RAX: ffffffffffffffda RBX: 00007ffa0ffcffa0 RCX: 00007ffa0fd48559 [ 140.129247][ T5841] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 140.129262][ T5841] RBP: 00007ffa0fddfab8 R08: 0000000000000000 R09: 0000000000000000 [ 140.129274][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.129286][ T5841] R13: 00007ffa0ffd0038 R14: 00007ffa0ffcffa0 R15: 00007fffda799f08 [ 140.129313][ T5841] [ 140.129343][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.170767][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.239203][ T4278] device hsr_slave_1 left promiscuous mode [ 140.349772][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.370950][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.461958][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.488784][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.541686][ T4278] device bridge_slave_1 left promiscuous mode [ 140.549019][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.635088][ T4278] device bridge_slave_0 left promiscuous mode [ 140.649040][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.771421][ T4278] device veth1_macvtap left promiscuous mode [ 140.779973][ T4278] device veth0_macvtap left promiscuous mode [ 140.786051][ T4278] device veth1_vlan left promiscuous mode [ 140.843234][ T4278] device veth0_vlan left promiscuous mode [ 140.859104][ T4278] net_ratelimit: 31 callbacks suppressed [ 141.322943][ T4203] block nbd1: Receive control failed (result -32) [ 141.356696][ T5864] block nbd1: shutting down sockets [ 141.612750][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 141.650050][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 141.676430][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.712039][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.854970][ T4278] bond0 (unregistering): Released all slaves [ 142.586088][ T5609] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.606560][ T5609] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.650268][ T5609] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.770112][ T5609] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.251443][ T5938] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.298934][ T4267] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.453994][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.484783][ T5949] page:ffffea0000400000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 143.513948][ T5949] flags: 0xfff00000001000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 143.548269][ T5938] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.549324][ T4267] usb 5-1: Using ep0 maxpacket: 8 [ 143.575090][ T5949] raw: 00fff00000001000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 143.605736][ T5949] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 143.645100][ T5949] page dumped because: unmovable page [ 143.664187][ T5949] page_owner info is not present (never set?) [ 143.679433][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.709149][ T4267] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 143.717380][ T4267] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.736311][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.770169][ T4267] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.805833][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.813991][ T4267] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.842614][ T4267] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.878953][ T4267] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.904176][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.948430][ T5938] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.005290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.024336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.047877][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.054951][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.161563][ T5938] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.189068][ T4267] usb 5-1: usb_control_msg returned -32 [ 144.194700][ T4267] usbtmc 5-1:16.0: can't read capabilities [ 144.245563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.263439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.300128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.334498][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.341592][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.374276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.439476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.448185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.490531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.507734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.534517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.562071][ T5609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.581858][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.650693][ T5938] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.673601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.694033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.717921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.732722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.745369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.780251][ T5938] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.794523][ T13] usb 5-1: USB disconnect, device number 3 [ 144.820099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.894980][ T5938] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.958560][ T5938] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.089055][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.102615][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.153227][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.271192][ T5993] FAULT_INJECTION: forcing a failure. [ 145.271192][ T5993] name failslab, interval 1, probability 0, space 0, times 0 [ 145.352467][ T5997] tmpfs: Unknown parameter 'noswap' [ 145.430459][ T5993] CPU: 0 PID: 5993 Comm: syz.0.497 Not tainted syzkaller #0 [ 145.438208][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.448266][ T5993] Call Trace: [ 145.451542][ T5993] [ 145.454471][ T5993] dump_stack_lvl+0x188/0x250 [ 145.459152][ T5993] ? show_regs_print_info+0x20/0x20 [ 145.464346][ T5993] ? load_image+0x410/0x410 [ 145.468849][ T5993] ? __might_sleep+0xf0/0xf0 [ 145.473434][ T5993] ? __lock_acquire+0x7d40/0x7d40 [ 145.478464][ T5993] should_fail+0x383/0x4b0 [ 145.482884][ T5993] should_failslab+0x5/0x20 [ 145.487385][ T5993] slab_pre_alloc_hook+0x51/0xc0 [ 145.492325][ T5993] kmem_cache_alloc_trace+0x47/0x290 [ 145.497607][ T5993] ? mon_bin_open+0xd8/0x500 [ 145.502203][ T5993] mon_bin_open+0xd8/0x500 [ 145.506618][ T5993] ? do_raw_spin_unlock+0x11d/0x230 [ 145.511826][ T5993] chrdev_open+0x585/0x5f0 [ 145.516242][ T5993] ? cd_forget+0x160/0x160 [ 145.520659][ T5993] ? fsnotify_perm+0x3a7/0x560 [ 145.525426][ T5993] ? cd_forget+0x160/0x160 [ 145.529848][ T5993] do_dentry_open+0x7f7/0xf90 [ 145.534530][ T5993] ? vfs_open+0x2b/0x80 [ 145.538690][ T5993] path_openat+0x2718/0x2fb0 [ 145.543301][ T5993] ? __kasan_slab_alloc+0xa9/0xc0 [ 145.548335][ T5993] ? do_filp_open+0x400/0x400 [ 145.553034][ T5993] do_filp_open+0x1df/0x400 [ 145.557542][ T5993] ? vfs_tmpfile+0x300/0x300 [ 145.562148][ T5993] ? _raw_spin_unlock+0x24/0x40 [ 145.566996][ T5993] ? alloc_fd+0x59e/0x650 [ 145.571333][ T5993] do_sys_openat2+0x14b/0x500 [ 145.576009][ T5993] ? __lock_acquire+0x7d40/0x7d40 [ 145.581035][ T5993] ? do_sys_open+0xe0/0xe0 [ 145.585450][ T5993] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.591433][ T5993] ? lock_chain_count+0x20/0x20 [ 145.596286][ T5993] __x64_sys_openat+0x135/0x160 [ 145.601141][ T5993] do_syscall_64+0x4c/0xa0 [ 145.605558][ T5993] ? clear_bhb_loop+0x30/0x80 [ 145.610238][ T5993] ? clear_bhb_loop+0x30/0x80 [ 145.614928][ T5993] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.620826][ T5993] RIP: 0033:0x7f1b66df5d8e [ 145.625236][ T5993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.644837][ T5993] RSP: 002b:00007f1b6508cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.653251][ T5993] RAX: ffffffffffffffda RBX: 00007f1b6508d6c0 RCX: 00007f1b66df5d8e [ 145.661216][ T5993] RDX: 0000000000000000 RSI: 00007f1b6508cc00 RDI: ffffffffffffff9c [ 145.669184][ T5993] RBP: 00007f1b6508cc00 R08: 0000000000000000 R09: 0000000000000000 [ 145.677153][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 145.685117][ T5993] R13: 00007f1b670bd038 R14: 00007f1b670bcfa0 R15: 00007ffd961a35c8 [ 145.693096][ T5993] [ 145.696155][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.178888][ C1] net_ratelimit: 40 callbacks suppressed [ 146.703158][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.726642][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.820940][ T5609] device veth0_vlan entered promiscuous mode [ 146.856916][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.874711][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.907308][ T5609] device veth1_vlan entered promiscuous mode [ 146.928998][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.952995][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.030472][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.078919][ T4263] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.234802][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.600186][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.659852][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.814011][ T5609] device veth0_macvtap entered promiscuous mode [ 147.838266][ T5609] device veth1_macvtap entered promiscuous mode [ 147.858377][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.879358][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.903354][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.946775][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.956751][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.967836][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.979423][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.998549][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.042254][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.101313][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.119032][ T4263] usb 5-1: Using ep0 maxpacket: 8 [ 148.147837][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.197750][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.222730][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.270148][ T4263] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 148.279600][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.293277][ T4263] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.318799][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.340374][ T4263] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.367756][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.380502][ T4263] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.416027][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.430671][ T4263] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.454213][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.462395][ T4263] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.487038][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.500400][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.509661][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.535353][ T5609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.569129][ T5609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.599474][ T5609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.623726][ T5609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.799226][ T4263] usb 5-1: usb_control_msg returned -32 [ 148.805278][ T4263] usbtmc 5-1:16.0: can't read capabilities [ 148.912792][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.958026][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.003178][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.077134][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.092500][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.127601][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.363934][ T6116] device syzkaller1 entered promiscuous mode [ 149.659403][ T6129] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 149.680053][ T6134] netlink: 25 bytes leftover after parsing attributes in process `syz.1.533'. [ 149.737907][ T4203] Bluetooth: hci5: Unknown advertising packet type: 0x22df [ 149.738077][ T4203] ================================================================== [ 149.745835][ T4203] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0 [ 149.761701][ T4203] Read of size 1 at addr ffff88807e213405 by task kworker/u5:4/4203 [ 149.769676][ T4203] [ 149.769684][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 149.769702][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.769714][ T4203] Workqueue: hci5 hci_rx_work [ 149.769738][ T4203] Call Trace: [ 149.769745][ T4203] [ 149.789604][ T4203] dump_stack_lvl+0x188/0x250 [ 149.789632][ T4203] ? show_regs_print_info+0x20/0x20 [ 149.789649][ T4203] ? load_image+0x410/0x410 [ 149.797930][ T4203] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 149.805508][ T4203] print_address_description+0x60/0x2d0 [ 149.805532][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 149.815510][ T4203] kasan_report+0xdf/0x130 [ 149.826467][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 149.835941][ T4203] hci_le_meta_evt+0x12ea/0x3ca0 [ 149.845932][ T4203] ? hci_event_packet+0x363/0x1310 [ 149.851038][ T4203] ? __lock_acquire+0x7d40/0x7d40 [ 149.856060][ T4203] ? _printk+0xda/0x130 [ 149.856081][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 149.866244][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 149.871871][ T4203] ? mark_lock+0x94/0x320 [ 149.871890][ T4203] ? mutex_unlock+0x10/0x10 [ 149.880673][ T4203] ? __dynamic_pr_debug+0x196/0x240 [ 149.885864][ T4203] ? __rwlock_init+0x140/0x140 [ 149.890617][ T4203] hci_event_packet+0xe0b/0x1310 [ 149.890642][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 149.890661][ T4203] ? rcu_lock_release+0x20/0x20 [ 149.890685][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 149.890708][ T4203] hci_rx_work+0x255/0xa10 [ 149.900796][ T4203] process_one_work+0x867/0xff0 [ 149.910818][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 149.910839][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 149.920065][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 149.920086][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 149.930948][ T4203] ? wq_worker_running+0x97/0x170 [ 149.930970][ T4203] worker_thread+0xad7/0x12a0 [ 149.941513][ T4203] kthread+0x42e/0x520 [ 149.951158][ T4203] ? rcu_lock_release+0x20/0x20 [ 149.951177][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 149.960043][ T4203] ret_from_fork+0x1f/0x30 [ 149.960077][ T4203] [ 149.969010][ T4203] [ 149.969015][ T4203] Allocated by task 6138: [ 149.969036][ T4203] __kasan_kmalloc+0xaf/0xe0 [ 149.974330][ T4203] __alloc_skb+0x22c/0x750 [ 149.983188][ T4203] vhci_write+0xbd/0x440 [ 149.983206][ T4203] vfs_write+0x748/0xd70 [ 149.991806][ T4203] ksys_write+0x153/0x260 [ 149.991822][ T4203] do_syscall_64+0x4c/0xa0 [ 149.991838][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.000352][ T4203] [ 150.000358][ T4203] The buggy address belongs to the object at ffff88807e213000 [ 150.000358][ T4203] which belongs to the cache kmalloc-1k of size 1024 [ 150.000371][ T4203] The buggy address is located 5 bytes to the right of [ 150.000371][ T4203] 1024-byte region [ffff88807e213000, ffff88807e213400) [ 150.000388][ T4203] The buggy address belongs to the page: [ 150.000396][ T4203] page:ffffea0001f88400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807e217800 pfn:0x7e210 [ 150.010640][ T4203] head:ffffea0001f88400 order:3 compound_mapcount:0 compound_pincount:0 [ 150.010655][ T4203] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 150.026999][ T4203] raw: 00fff00000010200 ffffea0001ec0400 0000000500000005 ffff888017841dc0 [ 150.027016][ T4203] raw: ffff88807e217800 000000008010000e 00000001ffffffff 0000000000000000 [ 150.046292][ T4203] page dumped because: kasan: bad access detected [ 150.046301][ T4203] page_owner tracks the page as allocated [ 150.066005][ T4203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3546, ts 140646985768, free_ts 140641709902 [ 150.082524][ T4203] get_page_from_freelist+0x24f6/0x2670 [ 150.082547][ T4203] __alloc_pages+0x1ee/0x480 [ 150.097484][ T4203] new_slab+0xc0/0x4b0 [ 150.123795][ T4203] ___slab_alloc+0x807/0xdd0 [ 150.123812][ T4203] kmem_cache_alloc_trace+0xf9/0x290 [ 150.133893][ T4203] syslog_print+0x108/0x8d0 [ 150.142498][ T4203] do_syslog+0x83f/0x930 [ 150.142513][ T4203] __x64_sys_syslog+0x78/0x90 [ 150.142527][ T4203] do_syscall_64+0x4c/0xa0 [ 150.152255][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.152275][ T4203] page last free stack trace: [ 150.152281][ T4203] free_unref_page_prepare+0x637/0x6c0 [ 150.161146][ T4203] free_unref_page+0x8f/0x2a0 [ 150.161163][ T4203] __unfreeze_partials+0x188/0x1e0 [ 150.161178][ T4203] put_cpu_partial+0x12d/0x190 [ 150.171427][ T4203] qlist_free_all+0x35/0x90 [ 150.171443][ T4203] kasan_quarantine_reduce+0x150/0x160 [ 150.171457][ T4203] __kasan_slab_alloc+0x2f/0xc0 [ 150.171472][ T4203] slab_post_alloc_hook+0x4c/0x380 [ 150.181553][ T4203] kmem_cache_alloc_node+0x184/0x2c0 [ 150.181570][ T4203] __alloc_skb+0xf4/0x750 [ 150.191304][ T4203] alloc_skb_with_frags+0xa7/0x720 [ 150.191321][ T4203] sock_alloc_send_pskb+0x87f/0x9a0 [ 150.200532][ T4203] unix_dgram_sendmsg+0x6f8/0x19c0 [ 150.200551][ T4203] __sys_sendto+0x46d/0x620 [ 150.210801][ T4203] __x64_sys_sendto+0xda/0xf0 [ 150.210819][ T4203] do_syscall_64+0x4c/0xa0 [ 150.210835][ T4203] [ 150.221168][ T4203] Memory state around the buggy address: [ 150.221179][ T4203] ffff88807e213300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.221190][ T4203] ffff88807e213380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.230576][ T4203] >ffff88807e213400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.230585][ T4203] ^ [ 150.230594][ T4203] ffff88807e213480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.240845][ T4203] ffff88807e213500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.240854][ T4203] ================================================================== [ 150.240862][ T4203] Disabling lock debugging due to kernel taint [ 150.240903][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.245334][ C1] tcp_in_window: sender end=2493733160 maxend=2496877736 maxwin=1339648 scale=7 receiver end=311908875 maxend=313248522 maxwin=3144576 scale=7 [ 150.250051][ C0] virtqueue callback for ffff88801f599f00 (ffffffff84450960) [ 150.254378][ C1] tcp_in_window: [ 150.256700][ C0] virtqueue interrupt with no work for ffff88801f599e00 [ 150.262291][ C1] seq=2493733160 ack=311908875+(0) sack=311908875+(0) win=10466 end=2493733160 [ 150.270313][ C0] virtqueue interrupt with no work for ffff88801f599d00 [ 150.271144][ T6038] udc dummy_udc.4: unregistering UDC driver [USB Raw Gadget] [ 150.278356][ C1] tcp_in_window: sender end=2493733160 maxend=2496877736 maxwin=1339648 scale=7 receiver end=311908875 maxend=313248522 maxwin=3144576 scale=7 [ 150.278380][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 150.278393][ C1] tcp_in_window: res=1 sender end=2493733160 maxend=2496877736 maxwin=1339648 receiver end=311908875 maxend=313248523 maxwin=3144576 [ 150.278415][ C1] tcp_conntracks: [ 150.278422][ C1] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 150.278488][ C1] No more buffers in queue [ 150.278497][ C1] eth0: xmit ffff888024f3dc80 42:01:0a:80:00:01 [ 150.278517][ C1] Added buffer head 9 to ffff888147d7f000 [ 150.278542][ C1] virtqueue callback for ffff888147d7f000 (ffffffff854980c0) [ 150.279973][ C1] Sent skb ffff888024f3dc80 [ 150.286792][ T4308] Added buffer head 0 to ffff88801f599f00 [ 150.290774][ C1] No more buffers in queue [ 150.298931][ T4203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.307149][ T6135] send_to_group: group=ffff888147cec000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888020729190 data_type=1 dir=0000000000000000 cookie=0 [ 150.314856][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 150.314874][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.324582][ T26] nvmet: ctrl 1 update keep-alive timer for 5 secs [ 150.326942][ T4203] Workqueue: hci5 hci_rx_work [ 150.341557][ T6038] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 150.348733][ T4203] [ 150.348740][ T4203] Call Trace: [ 150.358799][ T4470] inotify_handle_inode_event: group=ffff888147cec000 mark=ffff8880584a0a28 mask=8000 [ 150.359242][ T4203] [ 150.359251][ T4203] dump_stack_lvl+0x188/0x250 [ 150.359270][ T4203] ? show_regs_print_info+0x20/0x20 [ 150.374417][ T6134] device eql entered promiscuous mode [ 150.375068][ T4203] ? load_image+0x410/0x410 [ 150.375092][ T4203] panic+0x2f8/0x850 [ 150.404272][ T6038] kobject: 'dummy_udc.4' (ffff88814835c018): kobject_uevent_env [ 150.415733][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 150.415759][ T4203] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 150.415770][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 150.415777][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 150.415791][ C1] kcov: kcov_start: t = ffff8880186a3b80, size = 262144, area = ffffc900022e9000 [ 150.415794][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 150.415812][ T4203] check_panic_on_warn+0x80/0xa0 [ 150.415829][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 150.415840][ C1] kcov: kcov_move_area: ffffc90011d14000 1048576 <= ffffc900022e9000 110 [ 150.415843][ T4203] end_report+0x6d/0xf0 [ 150.415860][ T4203] kasan_report+0x102/0x130 [ 150.415876][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 150.415891][ T4203] hci_le_meta_evt+0x12ea/0x3ca0 [ 150.415907][ T4203] ? hci_event_packet+0x363/0x1310 [ 150.415922][ T4203] ? __lock_acquire+0x7d40/0x7d40 [ 150.415939][ T4203] ? _printk+0xda/0x130 [ 150.415954][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 150.415969][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 150.415985][ T4203] ? mark_lock+0x94/0x320 [ 150.415998][ T4203] ? mutex_unlock+0x10/0x10 [ 150.416014][ T4203] ? __dynamic_pr_debug+0x196/0x240 [ 150.416032][ T4203] ? __rwlock_init+0x140/0x140 [ 150.416048][ T4203] hci_event_packet+0xe0b/0x1310 [ 150.416065][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 150.416081][ T4203] ? rcu_lock_release+0x20/0x20 [ 150.416097][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 150.416115][ T4203] hci_rx_work+0x255/0xa10 [ 150.416136][ T4203] process_one_work+0x867/0xff0 [ 150.416159][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 150.416175][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 150.416194][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 150.416210][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 150.416227][ T4203] ? wq_worker_running+0x97/0x170 [ 150.416243][ T4203] worker_thread+0xad7/0x12a0 [ 150.416269][ T4203] kthread+0x42e/0x520 [ 150.416283][ T4203] ? rcu_lock_release+0x20/0x20 [ 150.416298][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 150.416313][ T4203] ret_from_fork+0x1f/0x30 [ 150.416333][ T4203] [ 150.416572][ T4203] Kernel Offset: disabled [ 150.775277][ T4203] Rebooting in 86400 seconds..