last executing test programs: 6.644353107s ago: executing program 0 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='res', 0x3) 5.254868508s ago: executing program 3 (id=206): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x240240, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) migrate_pages(r2, 0xfffffeff, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) 5.140400297s ago: executing program 2 (id=208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 4.168754021s ago: executing program 3 (id=210): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1e6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 3.846223701s ago: executing program 3 (id=212): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000540)={0xff, "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"}) syz_usb_connect(0x0, 0x39, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(0x0, 0x5, 0x80000002, 0x0, 0x0, 0x14ffffff) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x6, 0x3, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x50c00, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x6, 0x7, 0x7ff, 0x7fffffff, 0xffff, 0xffffffffffffffff}) syz_open_procfs(r3, &(0x7f0000000240)='net/ip_tables_matches\x00') r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x90000001}) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) ioctl(r1, 0x400448c9, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x18002) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r1, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) 3.845409172s ago: executing program 1 (id=220): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) 3.751540407s ago: executing program 0 (id=213): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000380)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) 3.505559106s ago: executing program 0 (id=214): socket$netlink(0x10, 0x3, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000ac0)={r2}, &(0x7f0000000bc0)=0x8) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r3, &(0x7f0000000040)=@unlock_all, 0xb) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x206) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) 3.405153694s ago: executing program 1 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./security\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000a80)='securityfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000ac0)='./security/ima/policy\x00', 0x2000, 0x149) pread64(r0, &(0x7f0000000b00)=""/259, 0xfffffe7b, 0x91) 1.850144481s ago: executing program 2 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 1.817188549s ago: executing program 0 (id=217): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x181002, 0x0) write(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'dt2815\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x4, 0x1008, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x200d, 0x8, 0x4ce, 0xfffffffe, 0xf8, 0x3, 0x6, 0x8, 0xfe, 0x0, 0x39, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.753059792s ago: executing program 1 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 1.752679138s ago: executing program 2 (id=219): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000000)) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='bf', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2202, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 1.513933343s ago: executing program 1 (id=221): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x397) 1.13943473s ago: executing program 2 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[0x0]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 923.114894ms ago: executing program 3 (id=223): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x50, 0x37, 0xfc, 0x2}, {0x28, 0x6, 0xef, 0xfffff010}, {0x6, 0x6, 0xfe, 0x1057c}]}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 397.863311ms ago: executing program 1 (id=224): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800007, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x73a, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001000)=""/46, 0x2e}], 0x1}, 0x40000100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='fi'], 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 301.098778ms ago: executing program 0 (id=225): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=[@out_dx={0x6a, 0x28, {0xa20f}}], 0x28}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x40000003a, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x800000005, 0x4005, 0x8, 0x0, 0x4045, 0x2, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 300.803025ms ago: executing program 3 (id=226): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 273.658337ms ago: executing program 3 (id=227): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x4, 0x10, 0x2, &(0x7f0000000100)="8ab0"}, {0x9cde, 0x1001, 0x5, &(0x7f0000000200)="5334800fb1"}], 0x2}) 91.849612ms ago: executing program 2 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) 8.511607ms ago: executing program 0 (id=229): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='t', 0x1) close(r3) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r4, 0x0) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58) tkill(r6, 0x34) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x14fffffd) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) writev(r7, &(0x7f0000000480)=[{&(0x7f0000000000)='d', 0x1}], 0x1) 8.117397ms ago: executing program 2 (id=230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 0s ago: executing program 1 (id=231): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1e6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 82.042539][ T5607] cgroup: Unknown subsys name 'net' [ 82.130993][ T5607] cgroup: Unknown subsys name 'cpuset' [ 82.140569][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.738003][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.393535][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.404257][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.406023][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.421809][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.422933][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.509105][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.510598][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.511537][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.513835][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.514695][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.617071][ T4936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.618077][ T4936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.632547][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.651491][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.652242][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.684801][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.686747][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.706526][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.710377][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.711353][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.265429][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.265603][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.265751][ T5620] bridge_slave_0: entered allmulticast mode [ 89.272104][ T5620] bridge_slave_0: entered promiscuous mode [ 89.321657][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.321791][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.321887][ T5620] bridge_slave_1: entered allmulticast mode [ 89.323185][ T5620] bridge_slave_1: entered promiscuous mode [ 89.356666][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.356770][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.357118][ T5626] bridge_slave_0: entered allmulticast mode [ 89.358483][ T5626] bridge_slave_0: entered promiscuous mode [ 89.404621][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.404804][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.404935][ T5626] bridge_slave_1: entered allmulticast mode [ 89.407115][ T5626] bridge_slave_1: entered promiscuous mode [ 89.457761][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.487373][ T4936] Bluetooth: hci0: command tx timeout [ 89.507665][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.510100][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.533284][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.533560][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.533890][ T5616] bridge_slave_0: entered allmulticast mode [ 89.547557][ T5616] bridge_slave_0: entered promiscuous mode [ 89.566659][ T4936] Bluetooth: hci1: command tx timeout [ 89.575431][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.576155][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.576320][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.579768][ T5625] bridge_slave_0: entered allmulticast mode [ 89.584244][ T5625] bridge_slave_0: entered promiscuous mode [ 89.596127][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.596423][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.610047][ T5616] bridge_slave_1: entered allmulticast mode [ 89.620026][ T5616] bridge_slave_1: entered promiscuous mode [ 89.671766][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.671907][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.672252][ T5625] bridge_slave_1: entered allmulticast mode [ 89.673676][ T5625] bridge_slave_1: entered promiscuous mode [ 89.709699][ T5620] team0: Port device team_slave_0 added [ 89.727422][ T54] Bluetooth: hci3: command tx timeout [ 89.727659][ T4936] Bluetooth: hci2: command tx timeout [ 89.743655][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.753109][ T5620] team0: Port device team_slave_1 added [ 89.763062][ T5626] team0: Port device team_slave_0 added [ 89.780510][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.799638][ T5626] team0: Port device team_slave_1 added [ 89.802218][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.853486][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.881982][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.882003][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.882026][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.941539][ T5616] team0: Port device team_slave_0 added [ 89.942121][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.942135][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.942163][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.945715][ T5616] team0: Port device team_slave_1 added [ 89.946363][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.946376][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.946398][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.982379][ T5625] team0: Port device team_slave_0 added [ 89.997685][ T5625] team0: Port device team_slave_1 added [ 90.072785][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.072802][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.072825][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.148745][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.148762][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.148784][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.151570][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.151582][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.151600][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.186010][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.186063][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.186150][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.198597][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.198641][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.198714][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.350011][ T5620] hsr_slave_0: entered promiscuous mode [ 90.350886][ T5620] hsr_slave_1: entered promiscuous mode [ 90.382135][ T5626] hsr_slave_0: entered promiscuous mode [ 90.382951][ T5626] hsr_slave_1: entered promiscuous mode [ 90.383494][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 90.383578][ T5626] Cannot create hsr debugfs directory [ 90.495221][ T5616] hsr_slave_0: entered promiscuous mode [ 90.496047][ T5616] hsr_slave_1: entered promiscuous mode [ 90.497589][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 90.497649][ T5616] Cannot create hsr debugfs directory [ 90.530614][ T5625] hsr_slave_0: entered promiscuous mode [ 90.531382][ T5625] hsr_slave_1: entered promiscuous mode [ 90.532163][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 90.532183][ T5625] Cannot create hsr debugfs directory [ 90.966535][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.974885][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.975895][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.001034][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.002207][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.006158][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.018991][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.039538][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.113477][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.125508][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.139217][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.144677][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.162962][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.174557][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.198339][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.201561][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.286793][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.301194][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.309123][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.325143][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.350209][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.353407][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.356347][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.374220][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.465663][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.475983][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.492366][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.498118][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.513248][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.518160][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.522583][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.540127][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.545728][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.567424][ T4936] Bluetooth: hci0: command tx timeout [ 91.627253][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.657202][ T4936] Bluetooth: hci1: command tx timeout [ 91.661629][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.661738][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.696131][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.706806][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.706913][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.782480][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.806670][ T54] Bluetooth: hci3: command tx timeout [ 91.806762][ T4936] Bluetooth: hci2: command tx timeout [ 91.809896][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.809973][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.861424][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.861527][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.926176][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.960003][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.976234][ T127] cfg80211: failed to load regulatory.db [ 92.038630][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.060758][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.062699][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.062798][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.105526][ T5626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.124352][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.124463][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.160002][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.160136][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.214653][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.214760][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.923790][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.072297][ T5620] veth0_vlan: entered promiscuous mode [ 93.101216][ T5620] veth1_vlan: entered promiscuous mode [ 93.154692][ T5620] veth0_macvtap: entered promiscuous mode [ 93.174849][ T5620] veth1_macvtap: entered promiscuous mode [ 93.224254][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.256443][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.283631][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.360383][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360609][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360653][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360692][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.442148][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.550872][ T5626] veth0_vlan: entered promiscuous mode [ 93.600571][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.600599][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.624607][ T5626] veth1_vlan: entered promiscuous mode [ 93.642569][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.647954][ T4936] Bluetooth: hci0: command tx timeout [ 93.709645][ T5616] veth0_vlan: entered promiscuous mode [ 93.738052][ T4936] Bluetooth: hci1: command tx timeout [ 93.738824][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.738842][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.771677][ T5626] veth0_macvtap: entered promiscuous mode [ 93.787587][ T5616] veth1_vlan: entered promiscuous mode [ 93.810882][ T5626] veth1_macvtap: entered promiscuous mode [ 93.884676][ T5620] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.887007][ T54] Bluetooth: hci3: command tx timeout [ 93.887378][ T4936] Bluetooth: hci2: command tx timeout [ 93.919192][ T5625] veth0_vlan: entered promiscuous mode [ 93.930060][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.959869][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.974253][ T5625] veth1_vlan: entered promiscuous mode [ 94.038064][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.039827][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.039877][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.039915][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.091433][ T5616] veth0_macvtap: entered promiscuous mode [ 94.117745][ T5616] veth1_macvtap: entered promiscuous mode [ 94.179638][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.180923][ T5625] veth0_macvtap: entered promiscuous mode [ 94.222389][ T5625] veth1_macvtap: entered promiscuous mode [ 94.228191][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.239405][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.239460][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.320627][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.320650][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.325764][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.375126][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.427484][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.428101][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.589044][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.589240][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.589409][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.595250][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.595277][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.637437][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.698774][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.705976][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.705997][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.761913][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.830401][ T5776] FAULT_INJECTION: forcing a failure. [ 94.830401][ T5776] name failslab, interval 1, probability 0, space 0, times 1 [ 94.830457][ T5776] CPU: 0 UID: 0 PID: 5776 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 94.830488][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.830509][ T5776] Call Trace: [ 94.830521][ T5776] [ 94.830530][ T5776] dump_stack_lvl+0xe8/0x150 [ 94.830560][ T5776] should_fail_ex+0x3eb/0x540 [ 94.830589][ T5776] should_failslab+0xa8/0x100 [ 94.830612][ T5776] __kmalloc_noprof+0xf9/0x710 [ 94.830636][ T5776] ? vhost_dev_set_owner+0x2a7/0xb00 [ 94.830657][ T5776] ? vhost_dev_set_owner+0x2a7/0xb00 [ 94.830686][ T5776] vhost_dev_set_owner+0x2a7/0xb00 [ 94.830721][ T5776] vhost_dev_ioctl+0xcf/0x11f0 [ 94.830743][ T5776] ? vhost_vsock_dev_ioctl+0x245/0xfc0 [ 94.830768][ T5776] ? __pfx___mutex_lock+0x10/0x10 [ 94.830793][ T5776] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 94.830829][ T5776] vhost_vsock_dev_ioctl+0x253/0xfc0 [ 94.830857][ T5776] ? __fget_files+0x2a/0x420 [ 94.830878][ T5776] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 94.830900][ T5776] ? __fget_files+0x2a/0x420 [ 94.830920][ T5776] ? __fget_files+0x2a/0x420 [ 94.830945][ T5776] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.830967][ T5776] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 94.830990][ T5776] __se_sys_ioctl+0xfc/0x170 [ 94.831014][ T5776] do_syscall_64+0x166/0x520 [ 94.831034][ T5776] ? trace_irq_disable+0x3b/0x140 [ 94.831053][ T5776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.831086][ T5776] ? clear_bhb_loop+0x70/0xc0 [ 94.831110][ T5776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.831132][ T5776] RIP: 0033:0x7f060239e1d9 [ 94.831161][ T5776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.831179][ T5776] RSP: 002b:00007f06005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.831207][ T5776] RAX: ffffffffffffffda RBX: 00007f0602625fa0 RCX: 00007f060239e1d9 [ 94.831223][ T5776] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 94.831236][ T5776] RBP: 00007f0602435888 R08: 0000000000000000 R09: 0000000000000000 [ 94.831255][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.831267][ T5776] R13: 00007f0602626038 R14: 00007f0602625fa0 R15: 00007ffca32c9158 [ 94.831302][ T5776] [ 94.833201][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.833222][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.036026][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.036092][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.282865][ T5778] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.787820][ T4936] Bluetooth: hci0: command tx timeout [ 95.824330][ T4936] Bluetooth: hci1: command tx timeout [ 95.968514][ T54] Bluetooth: hci3: command tx timeout [ 95.970100][ T4936] Bluetooth: hci2: command tx timeout [ 96.164168][ T5351] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 96.235199][ T5789] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 96.329207][ T5351] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.346381][ T5351] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.346421][ T5351] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.374212][ T5351] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.427608][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.427640][ T5351] usb 2-1: Product: syz [ 96.427655][ T5351] usb 2-1: Manufacturer: syz [ 96.427670][ T5351] usb 2-1: SerialNumber: syz [ 96.490460][ T5351] usb 2-1: config 0 descriptor?? [ 96.518065][ T5351] usb 2-1: selecting invalid altsetting 0 [ 98.479017][ T5351] usb 2-1: USB disconnect, device number 2 [ 98.630469][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.874081][ T5815] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 100.162236][ T5837] device-mapper: ioctl: name not supplied when creating device [ 103.072867][ T33] audit: type=1326 audit(1791571011.425:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 103.072929][ T33] audit: type=1326 audit(1791571011.425:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 103.104002][ T33] audit: type=1326 audit(1791571011.455:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 103.158289][ T33] audit: type=1326 audit(1791571011.515:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 103.162654][ T33] audit: type=1326 audit(1791571011.515:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 103.162707][ T33] audit: type=1326 audit(1791571011.515:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 103.162751][ T33] audit: type=1326 audit(1791571011.515:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 103.280200][ T33] audit: type=1326 audit(1791571011.635:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 103.311509][ T33] audit: type=1326 audit(1791571011.665:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.2.40" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f060239e1d9 code=0x7ffc0000 [ 104.428419][ T5891] process 'syz.2.49' launched '/dev/fd/3' with NULL argv: empty string added [ 104.664779][ T5899] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 104.692924][ T47] IPVS: starting estimator thread 0... [ 104.776739][ T5900] IPVS: using max 27 ests per chain, 64800 per kthread [ 106.626732][ T5704] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.047306][ T5704] usb 2-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 107.051180][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.051232][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.385739][ T5704] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 107.417288][ T5704] wwan wwan0: port wwan0qmi0 attached [ 107.621973][ T5704] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 3e:ca:dd:ad:c7:fe [ 107.732081][ T5976] FAULT_INJECTION: forcing a failure. [ 107.732081][ T5976] name failslab, interval 1, probability 0, space 0, times 0 [ 107.732118][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) [ 107.732144][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.732158][ T5976] Call Trace: [ 107.732167][ T5976] [ 107.732176][ T5976] dump_stack_lvl+0xe8/0x150 [ 107.732210][ T5976] should_fail_ex+0x3eb/0x540 [ 107.732240][ T5976] should_failslab+0xa8/0x100 [ 107.732261][ T5976] ? do_getname+0x2e/0x250 [ 107.732283][ T5976] kmem_cache_alloc_noprof+0x9c/0x600 [ 107.732309][ T5976] ? do_getname+0x2e/0x250 [ 107.732337][ T5976] do_getname+0x2e/0x250 [ 107.732356][ T5976] ? __se_sys_mkdirat+0x18/0x150 [ 107.732382][ T5976] __se_sys_mkdirat+0x24/0x150 [ 107.732420][ T5976] do_syscall_64+0x166/0x520 [ 107.732443][ T5976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.732465][ T5976] ? clear_bhb_loop+0x70/0xc0 [ 107.732491][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.732516][ T5976] RIP: 0033:0x7f060239e1d9 [ 107.732536][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.732553][ T5976] RSP: 002b:00007f06005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 107.732575][ T5976] RAX: ffffffffffffffda RBX: 00007f0602625fa0 RCX: 00007f060239e1d9 [ 107.732595][ T5976] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 107.732608][ T5976] RBP: 00007f0602435888 R08: 0000000000000000 R09: 0000000000000000 [ 107.732621][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.732633][ T5976] R13: 00007f0602626038 R14: 00007f0602625fa0 R15: 00007ffca32c9158 [ 107.732665][ T5976] [ 107.934449][ T5718] usb 2-1: USB disconnect, device number 3 [ 107.955520][ T5718] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 108.144274][ T5980] overlayfs: failed to resolve './bus': -2 [ 109.164586][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 109.180095][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 109.184748][ T5718] wwan wwan0: port wwan0qmi0 disconnected [ 109.226938][ T5983] ceph: No mds server is up or the cluster is laggy [ 109.227921][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 109.228121][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 109.936724][ T5711] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 110.098509][ T5711] usb 1-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.099851][ T5711] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 110.099911][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.099942][ T5711] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.099969][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.099996][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.101049][ T5711] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 110.101095][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.101124][ T5711] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.101151][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.101178][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.103208][ T5711] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 110.103256][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.103285][ T5711] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.103312][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.103339][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.322860][ T5711] usb 1-1: string descriptor 0 read error: -22 [ 110.323051][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.356342][ T6014] Bluetooth: MGMT ver 1.23 [ 110.401635][ T5711] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 110.556000][ T155] IPVS: starting estimator thread 0... [ 110.566687][ T6018] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 110.659431][ T6021] IPVS: using max 28 ests per chain, 67200 per kthread [ 112.102205][ T6055] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 113.295049][ T6096] usb usb9: usbfs: process 6096 (syz.1.121) did not claim interface 0 before use [ 113.396921][ T6101] FAULT_INJECTION: forcing a failure. [ 113.396921][ T6101] name failslab, interval 1, probability 0, space 0, times 0 [ 113.396969][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.2.123 Not tainted syzkaller #0 PREEMPT(full) [ 113.396994][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.397008][ T6101] Call Trace: [ 113.397017][ T6101] [ 113.397026][ T6101] dump_stack_lvl+0xe8/0x150 [ 113.397070][ T6101] should_fail_ex+0x3eb/0x540 [ 113.397105][ T6101] should_failslab+0xa8/0x100 [ 113.397127][ T6101] ? do_getname+0x2e/0x250 [ 113.397148][ T6101] kmem_cache_alloc_noprof+0x9c/0x600 [ 113.397179][ T6101] ? do_getname+0x2e/0x250 [ 113.397206][ T6101] do_getname+0x2e/0x250 [ 113.397225][ T6101] ? __se_sys_mkdirat+0x18/0x150 [ 113.397251][ T6101] __se_sys_mkdirat+0x24/0x150 [ 113.397275][ T6101] do_syscall_64+0x166/0x520 [ 113.397296][ T6101] ? trace_irq_disable+0x3b/0x140 [ 113.397316][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.397340][ T6101] ? clear_bhb_loop+0x70/0xc0 [ 113.397364][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.397386][ T6101] RIP: 0033:0x7f060239e1d9 [ 113.397412][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.397430][ T6101] RSP: 002b:00007f06005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 113.397458][ T6101] RAX: ffffffffffffffda RBX: 00007f0602625fa0 RCX: 00007f060239e1d9 [ 113.397482][ T6101] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 113.397498][ T6101] RBP: 00007f0602435888 R08: 0000000000000000 R09: 0000000000000000 [ 113.397511][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.397525][ T6101] R13: 00007f0602626038 R14: 00007f0602625fa0 R15: 00007ffca32c9158 [ 113.397559][ T6101] [ 114.346838][ T5729] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.456638][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.497326][ T5729] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 114.501161][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.501190][ T5729] usb 3-1: Product: syz [ 114.501211][ T5729] usb 3-1: Manufacturer: syz [ 114.501221][ T5729] usb 3-1: SerialNumber: syz [ 114.627779][ T27] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.629143][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.635374][ T27] usb 4-1: config 0 descriptor?? [ 114.659807][ T27] cp210x 4-1:0.0: cp210x converter detected [ 114.720646][ T5711] usb 1-1: USB disconnect, device number 2 [ 114.760773][ T6126] FAULT_INJECTION: forcing a failure. [ 114.760773][ T6126] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.760808][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.0.133 Not tainted syzkaller #0 PREEMPT(full) [ 114.760833][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.760850][ T6126] Call Trace: [ 114.760859][ T6126] [ 114.760868][ T6126] dump_stack_lvl+0xe8/0x150 [ 114.760901][ T6126] should_fail_ex+0x3eb/0x540 [ 114.760929][ T6126] strncpy_from_user+0x36/0x2c0 [ 114.760956][ T6126] do_getname+0x77/0x250 [ 114.760991][ T6126] __se_sys_mkdirat+0x24/0x150 [ 114.761016][ T6126] do_syscall_64+0x166/0x520 [ 114.761037][ T6126] ? trace_irq_disable+0x3b/0x140 [ 114.761056][ T6126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.761080][ T6126] ? clear_bhb_loop+0x70/0xc0 [ 114.761103][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.761125][ T6126] RIP: 0033:0x7f27bb19e1d9 [ 114.761145][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.761163][ T6126] RSP: 002b:00007f27bbf7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 114.761187][ T6126] RAX: ffffffffffffffda RBX: 00007f27bb425fa0 RCX: 00007f27bb19e1d9 [ 114.761202][ T6126] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 114.761217][ T6126] RBP: 00007f27bb235888 R08: 0000000000000000 R09: 0000000000000000 [ 114.761230][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.761242][ T6126] R13: 00007f27bb426038 R14: 00007f27bb425fa0 R15: 00007ffe244f3cb8 [ 114.761276][ T6126] [ 114.952931][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 114.953009][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 115.130730][ T27] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 115.154988][ T27] usb 4-1: cp210x converter now attached to ttyUSB0 [ 115.341629][ T5711] usb 4-1: USB disconnect, device number 2 [ 115.364811][ T5711] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.374387][ T5711] cp210x 4-1:0.0: device disconnected [ 116.287191][ T6124] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 116.384894][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 116.385492][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 116.388137][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 116.388316][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.438831][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.444329][ T5729] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 116.471297][ T5729] usb 3-1: USB disconnect, device number 2 [ 118.646598][ T5729] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 118.762128][ T6162] FAULT_INJECTION: forcing a failure. [ 118.762128][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 118.762163][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.0.142 Not tainted syzkaller #0 PREEMPT(full) [ 118.762190][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.762203][ T6162] Call Trace: [ 118.762212][ T6162] [ 118.762222][ T6162] dump_stack_lvl+0xe8/0x150 [ 118.762253][ T6162] should_fail_ex+0x3eb/0x540 [ 118.762282][ T6162] should_failslab+0xa8/0x100 [ 118.762303][ T6162] ? do_getname+0x2e/0x250 [ 118.762324][ T6162] kmem_cache_alloc_noprof+0x9c/0x600 [ 118.762349][ T6162] ? do_getname+0x2e/0x250 [ 118.762377][ T6162] do_getname+0x2e/0x250 [ 118.762396][ T6162] ? __se_sys_mkdirat+0x18/0x150 [ 118.762422][ T6162] __se_sys_mkdirat+0x24/0x150 [ 118.762447][ T6162] do_syscall_64+0x166/0x520 [ 118.762468][ T6162] ? trace_irq_disable+0x3b/0x140 [ 118.762488][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.762511][ T6162] ? clear_bhb_loop+0x70/0xc0 [ 118.762541][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.762563][ T6162] RIP: 0033:0x7f27bb19e1d9 [ 118.762589][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.762608][ T6162] RSP: 002b:00007f27bbf7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 118.762632][ T6162] RAX: ffffffffffffffda RBX: 00007f27bb425fa0 RCX: 00007f27bb19e1d9 [ 118.762648][ T6162] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 118.762662][ T6162] RBP: 00007f27bb235888 R08: 0000000000000000 R09: 0000000000000000 [ 118.762676][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.762688][ T6162] R13: 00007f27bb426038 R14: 00007f27bb425fa0 R15: 00007ffe244f3cb8 [ 118.762722][ T6162] [ 118.803248][ T5729] usb 4-1: New USB device found: idVendor=1044, idProduct=7001, bcdDevice=5.20 [ 118.813705][ T5729] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 118.813787][ T5729] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 118.813832][ T5729] usb 4-1: config 4 has no interface number 0 [ 118.813889][ T5729] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.854994][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.855071][ T5729] usb 4-1: Product: syz [ 118.855113][ T5729] usb 4-1: Manufacturer: syz [ 118.855155][ T5729] usb 4-1: SerialNumber: syz [ 120.063067][ T5729] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 120.072752][ T5729] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 120.075534][ T5729] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 120.075603][ T5729] usb 4-1: media controller created [ 120.083568][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.941443][ T6190] Zero length message leads to an empty skb [ 120.992177][ T5729] DVB: Unable to find symbol dib7000p_attach() [ 120.992196][ T5729] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 121.140188][ T5729] rc_core: IR keymap rc-dib0700-rc5 not found [ 121.140209][ T5729] Registered IR keymap rc-empty [ 121.142040][ T6195] FAULT_INJECTION: forcing a failure. [ 121.142040][ T6195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.142067][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.0.158 Not tainted syzkaller #0 PREEMPT(full) [ 121.142086][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.142097][ T6195] Call Trace: [ 121.142103][ T6195] [ 121.142111][ T6195] dump_stack_lvl+0xe8/0x150 [ 121.142135][ T6195] should_fail_ex+0x3eb/0x540 [ 121.142162][ T6195] strncpy_from_user+0x36/0x2c0 [ 121.142186][ T6195] do_getname+0x77/0x250 [ 121.142207][ T6195] __se_sys_mkdirat+0x24/0x150 [ 121.142228][ T6195] do_syscall_64+0x166/0x520 [ 121.142245][ T6195] ? trace_irq_disable+0x3b/0x140 [ 121.142263][ T6195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.142282][ T6195] ? clear_bhb_loop+0x70/0xc0 [ 121.142301][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.142321][ T6195] RIP: 0033:0x7f27bb19e1d9 [ 121.142339][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.142355][ T6195] RSP: 002b:00007f27bbf7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 121.142383][ T6195] RAX: ffffffffffffffda RBX: 00007f27bb425fa0 RCX: 00007f27bb19e1d9 [ 121.142397][ T6195] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 121.142410][ T6195] RBP: 00007f27bb235888 R08: 0000000000000000 R09: 0000000000000000 [ 121.142421][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.142431][ T6195] R13: 00007f27bb426038 R14: 00007f27bb425fa0 R15: 00007ffe244f3cb8 [ 121.142461][ T6195] [ 121.170173][ T5729] dvb-usb: could not initialize remote control. [ 121.170254][ T5729] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 121.473585][ T5729] usb 4-1: USB disconnect, device number 3 [ 121.635201][ T5729] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 121.916631][ T6174] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.017101][ T6209] syz.3.163 uses obsolete (PF_INET,SOCK_PACKET) [ 122.020246][ T6209] FAULT_INJECTION: forcing a failure. [ 122.020246][ T6209] name failslab, interval 1, probability 0, space 0, times 0 [ 122.020281][ T6209] CPU: 0 UID: 0 PID: 6209 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT(full) [ 122.020307][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.020321][ T6209] Call Trace: [ 122.020330][ T6209] [ 122.020340][ T6209] dump_stack_lvl+0xe8/0x150 [ 122.020373][ T6209] should_fail_ex+0x3eb/0x540 [ 122.020402][ T6209] should_failslab+0xa8/0x100 [ 122.020427][ T6209] __kmalloc_cache_noprof+0x9e/0x600 [ 122.020450][ T6209] ? __raw_spin_lock_init+0x45/0x100 [ 122.020470][ T6209] ? __kthread_create_on_node+0x115/0x3d0 [ 122.020492][ T6209] ? __kthread_create_on_node+0x115/0x3d0 [ 122.020514][ T6209] ? __init_swait_queue_head+0xa8/0x150 [ 122.020536][ T6209] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 122.020560][ T6209] __kthread_create_on_node+0x115/0x3d0 [ 122.020586][ T6209] ? __pfx___kthread_create_on_node+0x10/0x10 [ 122.020638][ T6209] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 122.020661][ T6209] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 122.020684][ T6209] kthread_create_on_node+0xeb/0x140 [ 122.020714][ T6209] ? __pfx_kthread_create_on_node+0x10/0x10 [ 122.020744][ T6209] ? do_raw_spin_unlock+0xf5/0x200 [ 122.020771][ T6209] rxrpc_lookup_local+0xf56/0x15d0 [ 122.020804][ T6209] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 122.020827][ T6209] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 122.020848][ T6209] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 122.020874][ T6209] ? preempt_schedule_thunk+0x16/0x40 [ 122.020901][ T6209] ? rxrpc_bind+0x90/0x450 [ 122.020920][ T6209] ? preempt_schedule_thunk+0x16/0x40 [ 122.020943][ T6209] ? rxrpc_bind+0x153/0x450 [ 122.020969][ T6209] rxrpc_bind+0x187/0x450 [ 122.020993][ T6209] __sys_bind+0x2e3/0x410 [ 122.021019][ T6209] ? __pfx___sys_bind+0x10/0x10 [ 122.021053][ T6209] ? rcu_is_watching+0x16/0xb0 [ 122.021085][ T6209] __x64_sys_bind+0x7a/0x90 [ 122.021108][ T6209] do_syscall_64+0x166/0x520 [ 122.021129][ T6209] ? trace_irq_disable+0x3b/0x140 [ 122.021150][ T6209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.021179][ T6209] ? clear_bhb_loop+0x70/0xc0 [ 122.021203][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.021227][ T6209] RIP: 0033:0x7f9b4e19e1d9 [ 122.021248][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.021267][ T6209] RSP: 002b:00007f9b4f123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 122.021292][ T6209] RAX: ffffffffffffffda RBX: 00007f9b4e425fa0 RCX: 00007f9b4e19e1d9 [ 122.021309][ T6209] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000005 [ 122.021329][ T6209] RBP: 00007f9b4e235888 R08: 0000000000000000 R09: 0000000000000000 [ 122.021343][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.021360][ T6209] R13: 00007f9b4e426038 R14: 00007f9b4e425fa0 R15: 00007ffe15860008 [ 122.021397][ T6209] [ 122.666132][ T6215] FAULT_INJECTION: forcing a failure. [ 122.666132][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 122.666166][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.1.167 Not tainted syzkaller #0 PREEMPT(full) [ 122.666191][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.666205][ T6215] Call Trace: [ 122.666214][ T6215] [ 122.666224][ T6215] dump_stack_lvl+0xe8/0x150 [ 122.666255][ T6215] should_fail_ex+0x3eb/0x540 [ 122.666284][ T6215] should_failslab+0xa8/0x100 [ 122.666307][ T6215] ? do_getname+0x2e/0x250 [ 122.666328][ T6215] kmem_cache_alloc_noprof+0x9c/0x600 [ 122.666362][ T6215] ? do_getname+0x2e/0x250 [ 122.666390][ T6215] do_getname+0x2e/0x250 [ 122.666409][ T6215] ? __se_sys_mkdirat+0x18/0x150 [ 122.666438][ T6215] __se_sys_mkdirat+0x24/0x150 [ 122.666461][ T6215] do_syscall_64+0x166/0x520 [ 122.666481][ T6215] ? trace_irq_disable+0x3b/0x140 [ 122.666501][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.666524][ T6215] ? clear_bhb_loop+0x70/0xc0 [ 122.666547][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.666570][ T6215] RIP: 0033:0x7f9c3299e1d9 [ 122.666590][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.666609][ T6215] RSP: 002b:00007f9c33940028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 122.666633][ T6215] RAX: ffffffffffffffda RBX: 00007f9c32c25fa0 RCX: 00007f9c3299e1d9 [ 122.666650][ T6215] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 122.666665][ T6215] RBP: 00007f9c32a35888 R08: 0000000000000000 R09: 0000000000000000 [ 122.666679][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.666693][ T6215] R13: 00007f9c32c26038 R14: 00007f9c32c25fa0 R15: 00007ffcfcf29b18 [ 122.666727][ T6215] [ 123.107018][ T6221] netlink: 596 bytes leftover after parsing attributes in process `syz.2.168'. [ 125.682644][ T6223] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 126.006521][ T6247] FAULT_INJECTION: forcing a failure. [ 126.006521][ T6247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.006558][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(full) [ 126.006580][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.006592][ T6247] Call Trace: [ 126.006601][ T6247] [ 126.006611][ T6247] dump_stack_lvl+0xe8/0x150 [ 126.006642][ T6247] should_fail_ex+0x3eb/0x540 [ 126.006672][ T6247] strncpy_from_user+0x36/0x2c0 [ 126.006705][ T6247] do_getname+0x77/0x250 [ 126.006730][ T6247] __se_sys_mkdirat+0x24/0x150 [ 126.006755][ T6247] do_syscall_64+0x166/0x520 [ 126.006775][ T6247] ? trace_irq_disable+0x3b/0x140 [ 126.006794][ T6247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.006817][ T6247] ? clear_bhb_loop+0x70/0xc0 [ 126.006840][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.006861][ T6247] RIP: 0033:0x7f060239e1d9 [ 126.006880][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.006898][ T6247] RSP: 002b:00007f06005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 126.006920][ T6247] RAX: ffffffffffffffda RBX: 00007f0602625fa0 RCX: 00007f060239e1d9 [ 126.006933][ T6247] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 126.006946][ T6247] RBP: 00007f0602435888 R08: 0000000000000000 R09: 0000000000000000 [ 126.006978][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.006990][ T6247] R13: 00007f0602626038 R14: 00007f0602625fa0 R15: 00007ffca32c9158 [ 126.007019][ T6247] [ 126.826564][ T5725] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.987402][ T5725] usb 4-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 126.989678][ T5725] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.024626][ T5725] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.041434][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.041469][ T5725] usb 4-1: Product: syz [ 127.041486][ T5725] usb 4-1: Manufacturer: syz [ 127.041504][ T5725] usb 4-1: SerialNumber: syz [ 127.083147][ T5725] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 127.118781][ T5725] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 127.157163][ T5725] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 127.879600][ T33] audit: type=1326 audit(1791571036.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.879916][ T33] audit: type=1326 audit(1791571036.235:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.883631][ T33] audit: type=1326 audit(1791571036.235:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.884450][ T33] audit: type=1326 audit(1791571036.235:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.884531][ T33] audit: type=1326 audit(1791571036.235:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.884575][ T33] audit: type=1326 audit(1791571036.235:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.884879][ T33] audit: type=1326 audit(1791571036.235:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.885683][ T33] audit: type=1326 audit(1791571036.235:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.886009][ T33] audit: type=1326 audit(1791571036.235:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.886282][ T33] audit: type=1326 audit(1791571036.235:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.1.188" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f9c3299e1d9 code=0x7ffc0000 [ 127.916133][ T5729] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.217547][ T5729] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 128.225555][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.225586][ T5729] usb 3-1: Product: syz [ 128.225601][ T5729] usb 3-1: Manufacturer: syz [ 128.225615][ T5729] usb 3-1: SerialNumber: syz [ 128.264144][ T5729] usb 3-1: config 0 descriptor?? [ 128.275375][ T5729] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 128.290807][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.291708][ T5729] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 128.291766][ T5729] usb 3-1: media controller created [ 128.329621][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.415365][ T5729] DVB: Unable to find symbol mt352_attach() [ 128.475793][ T5729] DVB: Unable to find symbol nxt6000_attach() [ 128.475808][ T5729] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 128.501550][ T5729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 128.504088][ T6270] dvb-usb: bulk message failed: -22 (7/0) [ 128.540174][ T5729] dvb-usb: schedule remote query interval to 1000 msecs. [ 128.540201][ T5729] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 128.540219][ T5729] dvb-usb: bulk message failed: -22 (7/0) [ 128.540268][ T5729] dvb-usb: bulk message failed: -22 (7/0) [ 128.543547][ T5729] usb 3-1: USB disconnect, device number 3 [ 128.624756][ T5729] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 128.847692][ T6260] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 128.850269][ T5729] usb 4-1: USB disconnect, device number 4 [ 128.883167][ T5729] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 128.904470][ T5729] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 128.905455][ T5729] ti_usb_3410_5052 4-1:2.0: device disconnected [ 129.063902][ T6282] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 129.085068][ T6284] FAULT_INJECTION: forcing a failure. [ 129.085068][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.085211][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.2.191 Not tainted syzkaller #0 PREEMPT(full) [ 129.085237][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.085251][ T6284] Call Trace: [ 129.085259][ T6284] [ 129.085269][ T6284] dump_stack_lvl+0xe8/0x150 [ 129.085300][ T6284] should_fail_ex+0x3eb/0x540 [ 129.085328][ T6284] strncpy_from_user+0x36/0x2c0 [ 129.085357][ T6284] do_getname+0x77/0x250 [ 129.085383][ T6284] __se_sys_mkdirat+0x24/0x150 [ 129.085408][ T6284] do_syscall_64+0x166/0x520 [ 129.085430][ T6284] ? trace_irq_disable+0x3b/0x140 [ 129.085450][ T6284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.085482][ T6284] ? clear_bhb_loop+0x70/0xc0 [ 129.085506][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.085533][ T6284] RIP: 0033:0x7f060239e1d9 [ 129.085554][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.085571][ T6284] RSP: 002b:00007f06005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 129.085595][ T6284] RAX: ffffffffffffffda RBX: 00007f0602625fa0 RCX: 00007f060239e1d9 [ 129.085611][ T6284] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 129.085625][ T6284] RBP: 00007f0602435888 R08: 0000000000000000 R09: 0000000000000000 [ 129.085639][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.085651][ T6284] R13: 00007f0602626038 R14: 00007f0602625fa0 R15: 00007ffca32c9158 [ 129.085686][ T6284] [ 129.570755][ T6265] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 130.045541][ T6304] FAULT_INJECTION: forcing a failure. [ 130.045541][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.045582][ T6304] CPU: 0 UID: 0 PID: 6304 Comm: syz.2.200 Not tainted syzkaller #0 PREEMPT(full) [ 130.045608][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.045622][ T6304] Call Trace: [ 130.045630][ T6304] [ 130.045640][ T6304] dump_stack_lvl+0xe8/0x150 [ 130.045671][ T6304] should_fail_ex+0x3eb/0x540 [ 130.045700][ T6304] strncpy_from_user+0x36/0x2c0 [ 130.045728][ T6304] do_getname+0x77/0x250 [ 130.045755][ T6304] __se_sys_mkdirat+0x24/0x150 [ 130.045780][ T6304] do_syscall_64+0x166/0x520 [ 130.045809][ T6304] ? trace_irq_disable+0x3b/0x140 [ 130.045829][ T6304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.045853][ T6304] ? clear_bhb_loop+0x70/0xc0 [ 130.045887][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.045910][ T6304] RIP: 0033:0x7f060239e1d9 [ 130.045931][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.045950][ T6304] RSP: 002b:00007f06005f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 130.045974][ T6304] RAX: ffffffffffffffda RBX: 00007f0602625fa0 RCX: 00007f060239e1d9 [ 130.045990][ T6304] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 130.046005][ T6304] RBP: 00007f0602435888 R08: 0000000000000000 R09: 0000000000000000 [ 130.046018][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.046031][ T6304] R13: 00007f0602626038 R14: 00007f0602625fa0 R15: 00007ffca32c9158 [ 130.046070][ T6304] [ 130.292371][ T5711] kernel write not supported for file /sg0 (pid: 5711 comm: kworker/0:4) [ 132.310236][ T6319] file system registered [ 132.930878][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930962][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.958566][ T6331] FAULT_INJECTION: forcing a failure. [ 132.958566][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 132.958602][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.3.210 Not tainted syzkaller #0 PREEMPT(full) [ 132.958627][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.958648][ T6331] Call Trace: [ 132.958657][ T6331] [ 132.958667][ T6331] dump_stack_lvl+0xe8/0x150 [ 132.958697][ T6331] should_fail_ex+0x3eb/0x540 [ 132.958726][ T6331] should_failslab+0xa8/0x100 [ 132.958749][ T6331] ? do_getname+0x2e/0x250 [ 132.958775][ T6331] kmem_cache_alloc_noprof+0x9c/0x600 [ 132.958802][ T6331] ? do_getname+0x2e/0x250 [ 132.958830][ T6331] do_getname+0x2e/0x250 [ 132.958849][ T6331] ? __se_sys_mkdirat+0x18/0x150 [ 132.958875][ T6331] __se_sys_mkdirat+0x24/0x150 [ 132.958906][ T6331] do_syscall_64+0x166/0x520 [ 132.958932][ T6331] ? trace_irq_disable+0x3b/0x140 [ 132.958957][ T6331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.958979][ T6331] ? clear_bhb_loop+0x70/0xc0 [ 132.959002][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.959024][ T6331] RIP: 0033:0x7f9b4e19e1d9 [ 132.959043][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.959062][ T6331] RSP: 002b:00007f9b4f123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 132.959086][ T6331] RAX: ffffffffffffffda RBX: 00007f9b4e425fa0 RCX: 00007f9b4e19e1d9 [ 132.959102][ T6331] RDX: 00000000000001e6 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 132.959117][ T6331] RBP: 00007f9b4e235888 R08: 0000000000000000 R09: 0000000000000000 [ 132.959130][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.959142][ T6331] R13: 00007f9b4e426038 R14: 00007f9b4e425fa0 R15: 00007ffe15860008 [ 132.959198][ T6331] [ 133.162239][ T6313] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12 [ 133.311388][ T6338] loop4: detected capacity change from 0 to 8 [ 133.531152][ T6344] mmap: syz.0.214 (6344) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.534298][ T6338] Dev loop4: unable to read RDB block 8 [ 133.534344][ T6338] loop4: unable to read partition table [ 133.534583][ T6338] loop4: partition table beyond EOD, truncated [ 133.534620][ T6338] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 135.274960][ T6353] comedi comedi2: dt2815: I/O base address or length out of range [ 135.294988][ T6356] FAULT_INJECTION: forcing a failure. [ 135.294988][ T6356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.295029][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT(full) [ 135.295055][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.295068][ T6356] Call Trace: [ 135.295077][ T6356] [ 135.295086][ T6356] dump_stack_lvl+0xe8/0x150 [ 135.295115][ T6356] should_fail_ex+0x3eb/0x540 [ 135.295153][ T6356] prepare_alloc_pages+0x21e/0x5f0 [ 135.295183][ T6356] __alloc_frozen_pages_noprof+0x17a/0x400 [ 135.295211][ T6356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.295245][ T6356] ? policy_nodemask+0x2cc/0x8e0 [ 135.295266][ T6356] ? rcu_is_watching+0x16/0xb0 [ 135.295292][ T6356] alloc_pages_mpol+0x21e/0x390 [ 135.295325][ T6356] alloc_pages_noprof+0xb1/0x2b0 [ 135.295354][ T6356] get_zeroed_page_noprof+0x1a/0x90 [ 135.295377][ T6356] rds_cong_from_addr+0x10f/0x370 [ 135.295398][ T6356] ? rds_cong_get_maps+0x1f/0xb0 [ 135.295422][ T6356] rds_cong_get_maps+0x28/0xb0 [ 135.295446][ T6356] __rds_conn_create+0x97a/0x2290 [ 135.295466][ T6356] ? __rds_conn_create+0x2d5/0x2290 [ 135.295502][ T6356] ? __pfx___rds_conn_create+0x10/0x10 [ 135.295524][ T6356] ? trace_kmalloc+0x2a/0xf0 [ 135.295551][ T6356] ? __raw_spin_lock_init+0x45/0x100 [ 135.295576][ T6356] rds_conn_create_outgoing+0x43/0x60 [ 135.295603][ T6356] rds_sendmsg+0xfca/0x20e0 [ 135.295644][ T6356] ? __pfx_rds_sendmsg+0x10/0x10 [ 135.295671][ T6356] ? __lock_acquire+0x747/0x2de0 [ 135.295693][ T6356] ? __pfx_aa_sk_perm+0x10/0x10 [ 135.295717][ T6356] ? aa_sock_msg_perm+0x144/0x210 [ 135.295746][ T6356] ? apparmor_socket_sendmsg+0x98/0x360 [ 135.295771][ T6356] ? __pfx_rds_sendmsg+0x10/0x10 [ 135.295791][ T6356] sock_sendmsg_nosec+0x14e/0x190 [ 135.295817][ T6356] ____sys_sendmsg+0x54e/0x850 [ 135.295844][ T6356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.295876][ T6356] ? import_iovec+0x73/0xa0 [ 135.295907][ T6356] ___sys_sendmsg+0x2a5/0x360 [ 135.295927][ T6356] ? __lock_acquire+0x747/0x2de0 [ 135.295953][ T6356] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.295979][ T6356] ? futex_wait+0x2a2/0x390 [ 135.296040][ T6356] ? __fget_files+0x3a2/0x420 [ 135.296061][ T6356] ? __fget_files+0x2a/0x420 [ 135.296092][ T6356] __x64_sys_sendmsg+0x1b1/0x290 [ 135.296118][ T6356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.296163][ T6356] do_syscall_64+0x166/0x520 [ 135.296184][ T6356] ? trace_irq_disable+0x3b/0x140 [ 135.296204][ T6356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.296227][ T6356] ? clear_bhb_loop+0x70/0xc0 [ 135.296251][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.296273][ T6356] RIP: 0033:0x7f9c3299e1d9 [ 135.296294][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.296312][ T6356] RSP: 002b:00007f9c33940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.296336][ T6356] RAX: ffffffffffffffda RBX: 00007f9c32c25fa0 RCX: 00007f9c3299e1d9 [ 135.296352][ T6356] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 135.296366][ T6356] RBP: 00007f9c32a35888 R08: 0000000000000000 R09: 0000000000000000 [ 135.296380][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.296393][ T6356] R13: 00007f9c32c26038 R14: 00007f9c32c25fa0 R15: 00007ffcfcf29b18 [ 135.296428][ T6356] [ 135.411560][ T6337] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 137.018015][ T6383] Need at least one configuration in g1. [ 137.018285][ T6383] udc dummy_udc.0: failed to start g1: -22 [ 137.018318][ T6383] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 137.023524][ T6383] UDC core: g1: couldn't find an available UDC or it's busy [ 137.036049][ T6383] ------------[ cut here ]------------ [ 137.036068][ T6383] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 137.036094][ T6383] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#1: syz.0.229/6383 [ 137.086397][ T6383] Modules linked in: [ 137.090681][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) [ 137.099983][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.110198][ T6383] RIP: 0010:__fortify_report+0x89/0xa0 [ 137.115705][ T6383] Code: e8 ec f1 4b fd 48 8d 3d c5 7e d7 0c 45 84 e4 49 8b 37 48 c7 c0 40 8d 8d 8c 48 c7 c1 60 8d 8d 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d e9 45 84 14 07 cc cc cc cc [ 137.135499][ T6383] RSP: 0018:ffffc90007cffdc8 EFLAGS: 00010246 [ 137.141772][ T6383] RAX: ffffffff8c8d8d40 RBX: 0000000000000000 RCX: ffffffff8c8d8d40 [ 137.149982][ T6383] RDX: 0000000000000010 RSI: ffffffff8c8d8c20 RDI: ffffffff91c743f0 [ 137.158112][ T6383] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff11006d1dd51 [ 137.167289][ T6383] R10: dffffc0000000000 R11: ffffed1006d1dd52 R12: 0000000000000000 [ 137.176290][ T6383] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c8d8a78 [ 137.184407][ T6383] FS: 00007f27bbf7e6c0(0000) GS:ffff888123529000(0000) knlGS:0000000000000000 [ 137.193419][ T6383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.200545][ T6383] CR2: 000000110c2e5fb4 CR3: 000000002faf2000 CR4: 00000000003526f0 [ 137.208632][ T6383] Call Trace: [ 137.211956][ T6383] [ 137.214953][ T6383] __fortify_panic+0x9/0x10 [ 137.219572][ T6383] landlock_merge_ruleset+0xc46/0xc90 [ 137.225002][ T6383] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 137.231312][ T6383] do_syscall_64+0x166/0x520 [ 137.235944][ T6383] ? trace_irq_disable+0x3b/0x140 [ 137.241097][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.247441][ T6383] ? clear_bhb_loop+0x70/0xc0 [ 137.252179][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.258199][ T6383] RIP: 0033:0x7f27bb19e1d9 [ 137.263830][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.284347][ T6383] RSP: 002b:00007f27bbf7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 137.293214][ T6383] RAX: ffffffffffffffda RBX: 00007f27bb425fa0 RCX: 00007f27bb19e1d9 [ 137.301413][ T6383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 137.309495][ T6383] RBP: 00007f27bb235888 R08: 0000000000000000 R09: 0000000000000000 [ 137.317624][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.325646][ T6383] R13: 00007f27bb426038 R14: 00007f27bb425fa0 R15: 00007ffe244f3cb8 [ 137.333829][ T6383] [ 137.336945][ T6383] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 137.344255][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) [ 137.353500][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.363589][ T6383] Call Trace: [ 137.366906][ T6383] [ 137.369869][ T6383] vpanic+0x26f/0x710 [ 137.373905][ T6383] panic+0xc5/0xd0 [ 137.377663][ T6383] ? __pfx_panic+0x10/0x10 [ 137.382127][ T6383] __warn+0x315/0x4c0 [ 137.386134][ T6383] ? __fortify_report+0x6b/0xa0 [ 137.391023][ T6383] ? __fortify_report+0x6b/0xa0 [ 137.395905][ T6383] __report_bug+0x276/0x570 [ 137.400428][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.406522][ T6383] ? __fortify_report+0x6b/0xa0 [ 137.411390][ T6383] ? __pfx___report_bug+0x10/0x10 [ 137.416458][ T6383] report_bug_entry+0x19b/0x290 [ 137.421336][ T6383] ? __fortify_report+0x89/0xa0 [ 137.426201][ T6383] ? __fortify_report+0x8e/0xa0 [ 137.431073][ T6383] handle_bug+0xce/0x200 [ 137.435343][ T6383] exc_invalid_op+0x1a/0x50 [ 137.439867][ T6383] asm_exc_invalid_op+0x1a/0x20 [ 137.444741][ T6383] RIP: 0010:__fortify_report+0x89/0xa0 [ 137.450227][ T6383] Code: e8 ec f1 4b fd 48 8d 3d c5 7e d7 0c 45 84 e4 49 8b 37 48 c7 c0 40 8d 8d 8c 48 c7 c1 60 8d 8d 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d e9 45 84 14 07 cc cc cc cc [ 137.469861][ T6383] RSP: 0018:ffffc90007cffdc8 EFLAGS: 00010246 [ 137.475976][ T6383] RAX: ffffffff8c8d8d40 RBX: 0000000000000000 RCX: ffffffff8c8d8d40 [ 137.483968][ T6383] RDX: 0000000000000010 RSI: ffffffff8c8d8c20 RDI: ffffffff91c743f0 [ 137.491971][ T6383] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff11006d1dd51 [ 137.499968][ T6383] R10: dffffc0000000000 R11: ffffed1006d1dd52 R12: 0000000000000000 [ 137.507992][ T6383] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c8d8a78 [ 137.516018][ T6383] ? __fortify_report+0x2c/0xa0 [ 137.520914][ T6383] __fortify_panic+0x9/0x10 [ 137.525441][ T6383] landlock_merge_ruleset+0xc46/0xc90 [ 137.530850][ T6383] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 137.537028][ T6383] do_syscall_64+0x166/0x520 [ 137.541646][ T6383] ? trace_irq_disable+0x3b/0x140 [ 137.546688][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.552771][ T6383] ? clear_bhb_loop+0x70/0xc0 [ 137.557592][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.563506][ T6383] RIP: 0033:0x7f27bb19e1d9 [ 137.567948][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.587683][ T6383] RSP: 002b:00007f27bbf7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 137.596127][ T6383] RAX: ffffffffffffffda RBX: 00007f27bb425fa0 RCX: 00007f27bb19e1d9 [ 137.604117][ T6383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 137.612108][ T6383] RBP: 00007f27bb235888 R08: 0000000000000000 R09: 0000000000000000 [ 137.620097][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.628087][ T6383] R13: 00007f27bb426038 R14: 00007f27bb425fa0 R15: 00007ffe244f3cb8 [ 137.636101][ T6383] [ 137.639731][ T6383] Kernel Offset: disabled [ 137.644081][ T6383] Rebooting in 86400 seconds..