last executing test programs: 1m58.81706384s ago: executing program 1 (id=394): request_key(&(0x7f0000004380)='asymmetric\x00', &(0x7f00000043c0)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) 1m58.768622119s ago: executing program 1 (id=395): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000039c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0), 0xe8}, 0x0) close(0x3) signalfd(0xffffffffffffffff, &(0x7f0000003b00)={[0x57b]}, 0x8) syz_open_procfs(0x0, 0x0) 1m58.673613691s ago: executing program 1 (id=398): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000600)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x1400, 0x0, 0xfe, 0x1, 0x0, @private=0xa0100fd, @local}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x3, 0x10000, 0x4, 0x10001}}}, 0xfdef) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, 0x0, 0x0) 1m58.30350026s ago: executing program 1 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m58.182618711s ago: executing program 1 (id=407): r0 = msgget(0x2, 0x10) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001b80)=""/4096) 1m58.047831095s ago: executing program 1 (id=411): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x40, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x4, 0x16d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000140)="9001000000000000") close(0x3) read$char_usb(r2, &(0x7f0000001640)=""/243, 0xf3) 1m57.103535707s ago: executing program 0 (id=419): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xdc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m56.899262836s ago: executing program 2 (id=422): r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002100)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_create_resource$kvm_nested_state(&(0x7f0000002200)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE_res(r3, 0xc080aebe, r4) ioctl$KVM_SET_NESTED_STATE_res(r3, 0x4080aebf, r4) 1m56.043896271s ago: executing program 3 (id=424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m55.98748735s ago: executing program 3 (id=425): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x1000131) ptrace$pokeuser(0x6, r0, 0x388, 0xb000000) 1m55.919209195s ago: executing program 2 (id=426): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{&(0x7f0000002240)={0xa, 0x4e21, 0x196f8a4, @remote, 0x7}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000022c0)="b4", 0x1}], 0x1}}], 0x1, 0x48051) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002440)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfff7, 0x7}, 0x90) 1m55.919071319s ago: executing program 3 (id=427): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000240)={0x3b, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 1m55.855603578s ago: executing program 2 (id=428): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='fd/3\x00') 1m55.844308832s ago: executing program 3 (id=429): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) dup3(r0, r2, 0x80000) 1m55.755734268s ago: executing program 2 (id=430): r0 = add_key$keyring(&(0x7f0000001d80), &(0x7f0000001dc0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000001e00), &(0x7f0000001e40)={'fscrypt:', @desc4}, &(0x7f0000001e80)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001f00), &(0x7f0000001f40)={'fscrypt:', @desc1}, &(0x7f0000001f80)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002000), &(0x7f0000002040)={'fscrypt:', @auto=[0x1a83fea49a0a00b0, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000002080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002100), &(0x7f0000002140)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000002180)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002200), &(0x7f0000002240)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000002280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002300), &(0x7f0000002340)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000002380)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002400), &(0x7f0000002440)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000002480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002500), &(0x7f0000002540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000002580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002600), &(0x7f0000002640)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000002680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002700), &(0x7f0000002740)={'fscrypt:', @desc2}, &(0x7f0000002780)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002800), &(0x7f0000002840)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000002880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002900), &(0x7f0000002940)={'fscrypt:', @desc3}, &(0x7f0000002980)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000002a40)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x34, 0x30, 0x75a52dfb969e39f, 0x30, 0x30, 0x61]}, &(0x7f0000002a80)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$keyring(&(0x7f0000002b00), &(0x7f0000002b40)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000002b80), &(0x7f0000002bc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000002c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900112233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002c80), &(0x7f0000002cc0)={'fscrypt:', @auto=[0x65, 0x65, 0x30, 0x30, 0x35, 0x63, 0x62, 0x38, 0x62, 0x39, 0x38, 0x62, 0x37, 0xf, 0x62, 0x39]}, &(0x7f0000002d00)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000002d80), &(0x7f0000002dc0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000002e00), &(0x7f0000002e40)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000002e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r0) 1m55.706854248s ago: executing program 0 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000100)="0400000000000000000000003801000000080000000000000000006ddd000000000000000000000000000000000000002e92") 1m55.706523945s ago: executing program 3 (id=432): r0 = socket(0xa, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000007c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000900), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000a40)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed82, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.680390828s ago: executing program 2 (id=433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m55.674328092s ago: executing program 0 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000200)='27', 0x2) sigaltstack(&(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000400)={&(0x7f0000000440)}) sigaltstack(0x0, &(0x7f0000000580)={0x0}) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r1) 1m55.571223194s ago: executing program 2 (id=435): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000005300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='serialize_policy\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000100)=@dev={'1:', 0x0}, 0x16) mount$9p_unix(&(0x7f0000005380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000053c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000005400), 0x0, &(0x7f0000005440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='lock'], 0xa) accept4$unix(r0, &(0x7f0000005480)=@abs, 0x0, 0x80000) recvmmsg(r0, &(0x7f00000014c0), 0x0, 0x61, &(0x7f0000001540)={0x0, 0x989680}) 1m55.220426309s ago: executing program 0 (id=436): ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x1000131) ptrace$pokeuser(0x6, 0x0, 0x388, 0xb000000) 1m54.85727685s ago: executing program 0 (id=437): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000011) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000c80)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000cc0)={0xa, 0x0, 0x100, @empty, 0x8d}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x3, 0x4) 1m54.854341414s ago: executing program 3 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f0000000400)='./file1\x00') userfaultfd(0x80001) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 1m54.762755335s ago: executing program 0 (id=439): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000002340)={0x0, &(0x7f0000002380)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000023c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002400)={[0x9, 0x10000000000, 0x41005c, 0x8000000000f30, 0x42, 0x400000000000004, 0xffff, 0xd, 0x4, 0x8, 0x1, 0xffffffffffff9867, 0x100000001, 0x5, 0x4], 0x0, 0x110900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m23.835335743s ago: executing program 32 (id=411): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x40, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x4, 0x16d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000140)="9001000000000000") close(0x3) read$char_usb(r2, &(0x7f0000001640)=""/243, 0xf3) 53.584691597s ago: executing program 33 (id=439): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000002340)={0x0, &(0x7f0000002380)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000023c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002400)={[0x9, 0x10000000000, 0x41005c, 0x8000000000f30, 0x42, 0x400000000000004, 0xffff, 0xd, 0x4, 0x8, 0x1, 0xffffffffffff9867, 0x100000001, 0x5, 0x4], 0x0, 0x110900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.317778203s ago: executing program 34 (id=435): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000005300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='serialize_policy\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000100)=@dev={'1:', 0x0}, 0x16) mount$9p_unix(&(0x7f0000005380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000053c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000005400), 0x0, &(0x7f0000005440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='lock'], 0xa) accept4$unix(r0, &(0x7f0000005480)=@abs, 0x0, 0x80000) recvmmsg(r0, &(0x7f00000014c0), 0x0, 0x61, &(0x7f0000001540)={0x0, 0x989680}) 0s ago: executing program 35 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(&(0x7f0000000400)='./file1\x00') userfaultfd(0x80001) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 73.768698][ T5622] cgroup: Unknown subsys name 'net' [ 73.881392][ T5622] cgroup: Unknown subsys name 'cpuset' [ 73.890853][ T5622] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.242867][ T5622] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.571627][ T5646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.572717][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.572946][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.573955][ T5646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.574337][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.575929][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.577001][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.577449][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.585200][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.585646][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.586383][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.589808][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.590978][ T5646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.591717][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.592247][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.594284][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.596599][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.597866][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.603879][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.616072][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.396255][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.408469][ T5632] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.409837][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.429869][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.433537][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.436785][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.700770][ T5635] infiniband rxe0: set active [ 78.702913][ T5635] infiniband rxe0: added rxe_eth0 [ 78.722432][ T916] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.746249][ T5635] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 78.746284][ T5635] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 78.746317][ T5635] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 78.773508][ T5635] RDS/IB: rxe0: added [ 78.773847][ T5635] smc: adding ib device rxe0 with port count 1 [ 78.773932][ T5635] smc: ib device rxe0 port 1 has no pnetid [ 78.811929][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.813456][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.111645][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.262867][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.263774][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.263912][ T5633] bridge_slave_0: entered allmulticast mode [ 79.266167][ T5633] bridge_slave_0: entered promiscuous mode [ 79.327740][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.327907][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.328030][ T5633] bridge_slave_1: entered allmulticast mode [ 79.330122][ T5633] bridge_slave_1: entered promiscuous mode [ 79.401002][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.432753][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.455169][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.455275][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.455387][ T5632] bridge_slave_0: entered allmulticast mode [ 79.457328][ T5632] bridge_slave_0: entered promiscuous mode [ 79.466292][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.494674][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.494877][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.495326][ T5634] bridge_slave_0: entered allmulticast mode [ 79.497055][ T5634] bridge_slave_0: entered promiscuous mode [ 79.500388][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.500482][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.500829][ T5632] bridge_slave_1: entered allmulticast mode [ 79.503275][ T5632] bridge_slave_1: entered promiscuous mode [ 79.548177][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.548276][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.548655][ T5634] bridge_slave_1: entered allmulticast mode [ 79.552922][ T5634] bridge_slave_1: entered promiscuous mode [ 79.582767][ T5633] team0: Port device team_slave_0 added [ 79.629539][ T55] Bluetooth: hci1: command tx timeout [ 79.629724][ T55] Bluetooth: hci0: command tx timeout [ 79.650722][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.652905][ T5633] team0: Port device team_slave_1 added [ 79.656355][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.661014][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.677099][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.707905][ T55] Bluetooth: hci2: command tx timeout [ 79.708225][ T5646] Bluetooth: hci3: command tx timeout [ 79.759466][ T5632] team0: Port device team_slave_0 added [ 79.761781][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.761795][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.761818][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.766774][ T5634] team0: Port device team_slave_0 added [ 79.770615][ T5632] team0: Port device team_slave_1 added [ 79.771510][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.771523][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.771546][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.784719][ T5634] team0: Port device team_slave_1 added [ 79.863663][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.863683][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.863707][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.894928][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.894948][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.894972][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.947220][ T5633] hsr_slave_0: entered promiscuous mode [ 79.951057][ T5633] hsr_slave_1: entered promiscuous mode [ 79.954307][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.954322][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.954347][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.030309][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.030329][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.030351][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.089123][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.163622][ T5632] hsr_slave_0: entered promiscuous mode [ 80.164707][ T5632] hsr_slave_1: entered promiscuous mode [ 80.165454][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 80.165485][ T5632] Cannot create hsr debugfs directory [ 80.216309][ T5634] hsr_slave_0: entered promiscuous mode [ 80.217338][ T5634] hsr_slave_1: entered promiscuous mode [ 80.218562][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 80.218577][ T5634] Cannot create hsr debugfs directory [ 80.654689][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.665879][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.666981][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.676829][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.682249][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.697219][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.700463][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.710165][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.852765][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.858742][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.859617][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.870793][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.892954][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.897309][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.899318][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.907277][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.950500][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.950684][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.950916][ T5635] bridge_slave_0: entered allmulticast mode [ 80.951849][ T5635] bridge_slave_0: entered promiscuous mode [ 80.982457][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.982845][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.982965][ T5635] bridge_slave_1: entered allmulticast mode [ 80.984031][ T5635] bridge_slave_1: entered promiscuous mode [ 81.031135][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.049362][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.065662][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.071936][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.074227][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.081394][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.101005][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.103801][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.104752][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.107658][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.112546][ T5635] team0: Port device team_slave_0 added [ 81.130407][ T5635] team0: Port device team_slave_1 added [ 81.172376][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.172396][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.172417][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.182010][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.182028][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.182051][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.263162][ T5635] hsr_slave_0: entered promiscuous mode [ 81.264169][ T5635] hsr_slave_1: entered promiscuous mode [ 81.265699][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 81.265714][ T5635] Cannot create hsr debugfs directory [ 81.294486][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.411155][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.451688][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.451817][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.476148][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.476256][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.509617][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.576521][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.582255][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.592484][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.601065][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.602007][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.611181][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.612986][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.636932][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.645377][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.650341][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.674532][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.674593][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.707643][ T55] Bluetooth: hci1: command tx timeout [ 81.707786][ T5646] Bluetooth: hci0: command tx timeout [ 81.711064][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.728858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.728950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.765718][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.765896][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.787741][ T55] Bluetooth: hci2: command tx timeout [ 81.787841][ T5646] Bluetooth: hci3: command tx timeout [ 81.829663][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.829771][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.031428][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.077186][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.100510][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.100612][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.112681][ T2222] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.112778][ T2222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.669322][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.850223][ T5633] veth0_vlan: entered promiscuous mode [ 82.884511][ T5633] veth1_vlan: entered promiscuous mode [ 82.974197][ T5633] veth0_macvtap: entered promiscuous mode [ 83.011926][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.031730][ T5633] veth1_macvtap: entered promiscuous mode [ 83.105067][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.140498][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.164322][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.230067][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.230241][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.230278][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.235939][ T5634] veth0_vlan: entered promiscuous mode [ 83.257836][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.286878][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.325220][ T5634] veth1_vlan: entered promiscuous mode [ 83.359547][ T2222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.359572][ T2222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.370657][ T5632] veth0_vlan: entered promiscuous mode [ 83.419125][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.419145][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.419656][ T5632] veth1_vlan: entered promiscuous mode [ 83.501195][ T5634] veth0_macvtap: entered promiscuous mode [ 83.503418][ T5635] veth0_vlan: entered promiscuous mode [ 83.510206][ T5633] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.543043][ T5634] veth1_macvtap: entered promiscuous mode [ 83.575472][ T5635] veth1_vlan: entered promiscuous mode [ 83.576824][ T5632] veth0_macvtap: entered promiscuous mode [ 83.604555][ T5632] veth1_macvtap: entered promiscuous mode [ 83.630571][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.657039][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.675780][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.703017][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.709354][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.709399][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.709433][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.709467][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.710210][ T5635] veth0_macvtap: entered promiscuous mode [ 83.732259][ T5635] veth1_macvtap: entered promiscuous mode [ 83.787680][ T55] Bluetooth: hci1: command tx timeout [ 83.787766][ T5646] Bluetooth: hci0: command tx timeout [ 83.789647][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.790204][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.791013][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.831398][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.866668][ T5792] Bluetooth: MGMT ver 1.23 [ 83.867991][ T55] Bluetooth: hci2: command tx timeout [ 83.868073][ T5646] Bluetooth: hci3: command tx timeout [ 83.870978][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.968934][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.968953][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.972600][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.972795][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.998015][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.002905][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.013970][ T162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.079585][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.079605][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.122955][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.122975][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.180674][ T2222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.180703][ T2222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.251132][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.251153][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.343352][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.343374][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.356578][ T5798] Set syz1 is full, maxelem 2 reached [ 84.988593][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.192306][ T11] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 85.256396][ T11] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.256426][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.256445][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.256492][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.302358][ T11] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.302386][ T11] usb 2-1: Product: syz [ 85.302400][ T11] usb 2-1: Manufacturer: syz [ 85.378511][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 85.378531][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 85.442439][ T11] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 85.442477][ T11] cdc_wdm 2-1:1.0: Unknown control protocol [ 85.588090][ T5826] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.635248][ T916] usb 2-1: USB disconnect, device number 2 [ 85.712757][ T5831] Set syz1 is full, maxelem 2 reached [ 85.868605][ T5646] Bluetooth: hci1: command tx timeout [ 85.948019][ T5646] Bluetooth: hci3: command tx timeout [ 86.137583][ T916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.258125][ T46] IPVS: starting estimator thread 0... [ 86.290890][ T916] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 86.293332][ T916] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.293357][ T916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.293376][ T916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.293418][ T916] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.297361][ T916] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.297384][ T916] usb 2-1: Product: syz [ 86.297398][ T916] usb 2-1: Manufacturer: syz [ 86.322173][ T916] cdc_wdm 2-1:1.0: skipping garbage [ 86.322192][ T916] cdc_wdm 2-1:1.0: skipping garbage [ 86.336853][ T916] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 86.336872][ T916] cdc_wdm 2-1:1.0: Unknown control protocol [ 86.370751][ T5863] IPVS: using max 30 ests per chain, 72000 per kthread [ 86.532156][ C1] cdc_wdm 2-1:1.0: unknown notification 22 received: index 45315 len 58389 [ 86.532385][ C1] cdc_wdm 2-1:1.0: unknown notification 107 received: index 44786 len 33558 [ 86.532601][ C1] cdc_wdm 2-1:1.0: unknown notification 198 received: index 22061 len 37043 [ 86.745689][ T5713] usb 2-1: USB disconnect, device number 3 [ 86.785633][ T5816] IPVS: starting estimator thread 0... [ 86.842882][ T5896] FAULT_INJECTION: forcing a failure. [ 86.842882][ T5896] name failslab, interval 1, probability 0, space 0, times 1 [ 86.842925][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 86.842947][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 86.842966][ T5896] Call Trace: [ 86.842974][ T5896] [ 86.842982][ T5896] dump_stack_lvl+0xe8/0x150 [ 86.843018][ T5896] should_fail_ex+0x3eb/0x540 [ 86.843044][ T5896] should_failslab+0xa8/0x100 [ 86.843077][ T5896] __kmalloc_cache_noprof+0x9e/0x600 [ 86.843103][ T5896] ? __kmalloc_cache_noprof+0x148/0x600 [ 86.843125][ T5896] ? assoc_array_insert+0x417/0x2f60 [ 86.843146][ T5896] ? assoc_array_insert+0x417/0x2f60 [ 86.843176][ T5896] assoc_array_insert+0x417/0x2f60 [ 86.843203][ T5896] ? __key_link_lock+0x9b/0xb0 [ 86.843226][ T5896] ? __pfx___mutex_lock+0x10/0x10 [ 86.843264][ T5896] ? __pfx_down_write+0x10/0x10 [ 86.843303][ T5896] __key_link_begin+0xd6/0x1f0 [ 86.843326][ T5896] __key_create_or_update+0x427/0xab0 [ 86.843366][ T5896] ? __pfx___key_create_or_update+0x10/0x10 [ 86.843397][ T5896] ? lookup_user_key+0x112c/0x12c0 [ 86.843452][ T5896] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 86.843483][ T5896] ? __pfx_keyring_search_iterator+0x10/0x10 [ 86.843507][ T5896] ? __might_fault+0xaf/0x130 [ 86.843533][ T5896] key_create_or_update+0x42/0x60 [ 86.843569][ T5896] __se_sys_add_key+0x349/0x420 [ 86.843597][ T5896] ? __pfx___se_sys_add_key+0x10/0x10 [ 86.843632][ T5896] ? __x64_sys_add_key+0x20/0xc0 [ 86.843656][ T5896] do_syscall_64+0x16a/0x530 [ 86.843684][ T5896] ? trace_irq_disable+0x3b/0x140 [ 86.843710][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.843731][ T5896] ? clear_bhb_loop+0x70/0xc0 [ 86.843756][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.843777][ T5896] RIP: 0033:0x7f54f179fb19 [ 86.843802][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.843837][ T5896] RSP: 002b:00007f54f2581028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 86.843864][ T5896] RAX: ffffffffffffffda RBX: 00007f54f1a25fa0 RCX: 00007f54f179fb19 [ 86.843879][ T5896] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00002000000002c0 [ 86.843893][ T5896] RBP: 00007f54f1837b70 R08: 0000000020a03aeb R09: 0000000000000000 [ 86.843906][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.843918][ T5896] R13: 00007f54f1a26038 R14: 00007f54f1a25fa0 R15: 00007fff36929fb8 [ 86.843952][ T5896] [ 86.868870][ T5891] IPVS: using max 33 ests per chain, 79200 per kthread [ 87.235875][ T32] cfg80211: failed to load regulatory.db [ 87.419876][ T5816] IPVS: starting estimator thread 0... [ 87.517625][ T5920] IPVS: using max 29 ests per chain, 69600 per kthread [ 87.807701][ T5782] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.842324][ T5816] IPVS: starting estimator thread 0... [ 87.927587][ T5946] IPVS: using max 38 ests per chain, 91200 per kthread [ 87.963144][ T5782] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 87.964475][ T5782] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.964500][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.964518][ T5782] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.964560][ T5782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.967078][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.967100][ T5782] usb 2-1: Product: syz [ 87.967114][ T5782] usb 2-1: Manufacturer: syz [ 87.992820][ T5782] cdc_wdm 2-1:1.0: skipping garbage [ 87.992838][ T5782] cdc_wdm 2-1:1.0: skipping garbage [ 87.999361][ T5782] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 87.999380][ T5782] cdc_wdm 2-1:1.0: Unknown control protocol [ 88.200569][ T11] usb 2-1: USB disconnect, device number 4 [ 88.273221][ T5966] IPVS: sed: FWM 3 0x00000003 - no destination available [ 88.547656][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.667590][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.698522][ T32] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 88.700219][ T32] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.700243][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.700261][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.700302][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.702182][ T32] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.702206][ T32] usb 3-1: Product: syz [ 88.702220][ T32] usb 3-1: Manufacturer: syz [ 88.716081][ T32] cdc_wdm 3-1:1.0: skipping garbage [ 88.716100][ T32] cdc_wdm 3-1:1.0: skipping garbage [ 88.719495][ T32] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 88.719514][ T32] cdc_wdm 3-1:1.0: Unknown control protocol [ 88.848745][ T11] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 88.851572][ T11] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.851599][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.851617][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.851658][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.854658][ T11] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.854682][ T11] usb 2-1: Product: syz [ 88.854695][ T11] usb 2-1: Manufacturer: syz [ 88.928626][ T32] usb 3-1: USB disconnect, device number 2 [ 88.938966][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 88.938985][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 88.941817][ T11] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 88.941837][ T11] cdc_wdm 2-1:1.0: Unknown control protocol [ 89.447724][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.598372][ T32] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 89.599319][ T32] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.599361][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.599380][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.599419][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.600794][ T32] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.600818][ T32] usb 3-1: Product: syz [ 89.600832][ T32] usb 3-1: Manufacturer: syz [ 89.610210][ T32] cdc_wdm 3-1:1.0: skipping garbage [ 89.610229][ T32] cdc_wdm 3-1:1.0: skipping garbage [ 89.613432][ T32] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 89.613452][ T32] cdc_wdm 3-1:1.0: Unknown control protocol [ 89.992653][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.177108][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 90.186090][ C0] cdc_wdm 3-1:1.0: unknown notification 22 received: index 45315 len 58389 [ 90.186304][ C0] cdc_wdm 3-1:1.0: unknown notification 107 received: index 44786 len 33558 [ 90.186509][ C0] cdc_wdm 3-1:1.0: unknown notification 198 received: index 22061 len 37043 [ 90.419011][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 90.419326][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 90.419424][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 90.419640][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 90.419662][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 90.419960][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 90.419981][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 90.420183][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 90.420204][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 90.420436][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 90.420458][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 90.420538][ T11] usb 3-1: USB disconnect, device number 3 [ 90.420662][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 90.420680][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 90.420699][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 90.659109][ T5730] usb 2-1: USB disconnect, device number 5 [ 90.945377][ T6094] FAULT_INJECTION: forcing a failure. [ 90.945377][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 90.945414][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 90.945438][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 90.945451][ T6094] Call Trace: [ 90.945460][ T6094] [ 90.945469][ T6094] dump_stack_lvl+0xe8/0x150 [ 90.945510][ T6094] should_fail_ex+0x3eb/0x540 [ 90.945538][ T6094] should_failslab+0xa8/0x100 [ 90.945570][ T6094] __kmalloc_cache_noprof+0x9e/0x600 [ 90.945606][ T6094] ? __raw_spin_lock_init+0x45/0x100 [ 90.945639][ T6094] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 90.945665][ T6094] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 90.945705][ T6094] io_uring_alloc_task_context+0xa2/0x6c0 [ 90.945731][ T6094] ? __asan_memcpy+0x40/0x70 [ 90.945755][ T6094] ? errseq_sample+0x40/0x70 [ 90.945780][ T6094] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 90.945810][ T6094] ? alloc_file_pseudo+0x151/0x1e0 [ 90.945838][ T6094] __io_uring_add_tctx_node+0x499/0x640 [ 90.945877][ T6094] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 90.945912][ T6094] ? __anon_inode_getfile+0x169/0x200 [ 90.945940][ T6094] io_uring_create+0x591/0x980 [ 90.945967][ T6094] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 90.945991][ T6094] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 90.946027][ T6094] ? rcu_is_watching+0x16/0xb0 [ 90.946067][ T6094] do_syscall_64+0x16a/0x530 [ 90.946096][ T6094] ? trace_irq_disable+0x3b/0x140 [ 90.946123][ T6094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.946144][ T6094] ? clear_bhb_loop+0x70/0xc0 [ 90.946170][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.946190][ T6094] RIP: 0033:0x7f54f179fb19 [ 90.946208][ T6094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.946224][ T6094] RSP: 002b:00007f54f2580fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 90.946243][ T6094] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f54f179fb19 [ 90.946257][ T6094] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000003d9a [ 90.946269][ T6094] RBP: 00007f54f1837b70 R08: 0000000000000000 R09: 0000000000000000 [ 90.946281][ T6094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 90.946292][ T6094] R13: 0000000000000000 R14: 00002000000000c0 R15: 00007fff36929fb8 [ 90.946330][ T6094] [ 91.477996][ T5730] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.638249][ T5730] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 91.639199][ T5730] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.639225][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.639243][ T5730] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.639288][ T5730] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.640608][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.640623][ T5730] usb 2-1: Product: syz [ 91.640630][ T5730] usb 2-1: Manufacturer: syz [ 91.646806][ T5730] cdc_wdm 2-1:1.0: skipping garbage [ 91.646818][ T5730] cdc_wdm 2-1:1.0: skipping garbage [ 91.660133][ T5730] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 91.660155][ T5730] cdc_wdm 2-1:1.0: Unknown control protocol [ 91.777717][ T5782] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.848479][ T32] usb 2-1: USB disconnect, device number 6 [ 91.928461][ T5782] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 91.929381][ T5782] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.929408][ T5782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.929488][ T5782] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.929533][ T5782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.931047][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.931070][ T5782] usb 1-1: Product: syz [ 91.931085][ T5782] usb 1-1: Manufacturer: syz [ 91.935722][ T5782] cdc_wdm 1-1:1.0: skipping garbage [ 91.935733][ T5782] cdc_wdm 1-1:1.0: skipping garbage [ 91.947967][ T5782] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 91.947988][ T5782] cdc_wdm 1-1:1.0: Unknown control protocol [ 92.142643][ T11] usb 1-1: USB disconnect, device number 2 [ 92.288712][ T5730] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 92.438367][ T5730] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 92.439416][ T5730] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.439439][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.439457][ T5730] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.439499][ T5730] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.442245][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.442269][ T5730] usb 2-1: Product: syz [ 92.442282][ T5730] usb 2-1: Manufacturer: syz [ 92.448716][ T5730] cdc_wdm 2-1:1.0: skipping garbage [ 92.448734][ T5730] cdc_wdm 2-1:1.0: skipping garbage [ 92.532585][ T5730] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 92.532606][ T5730] cdc_wdm 2-1:1.0: Unknown control protocol [ 92.656324][ C1] cdc_wdm 2-1:1.0: unknown notification 22 received: index 45315 len 58389 [ 92.656550][ C1] cdc_wdm 2-1:1.0: unknown notification 107 received: index 44786 len 33558 [ 92.656771][ C1] cdc_wdm 2-1:1.0: unknown notification 198 received: index 22061 len 37043 [ 92.674996][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.838566][ T11] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 92.839913][ T11] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.839938][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.839957][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.839999][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.841627][ T11] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.841650][ T11] usb 1-1: Product: syz [ 92.841664][ T11] usb 1-1: Manufacturer: syz [ 92.873116][ T32] usb 2-1: USB disconnect, device number 7 [ 92.929475][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 92.929495][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 92.933105][ T11] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 92.933124][ T11] cdc_wdm 1-1:1.0: Unknown control protocol [ 93.436671][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 93.440599][ C1] cdc_wdm 1-1:1.0: unknown notification 22 received: index 45315 len 58389 [ 93.440807][ C1] cdc_wdm 1-1:1.0: unknown notification 107 received: index 44786 len 33558 [ 93.441009][ C1] cdc_wdm 1-1:1.0: unknown notification 198 received: index 22061 len 37043 [ 93.650211][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 93.650293][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.650311][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.650563][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.650582][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.650779][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.650799][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.651012][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.651030][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.651116][ T32] usb 1-1: USB disconnect, device number 3 [ 93.651237][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 93.873302][ T6178] netlink: 'syz.3.162': attribute type 11 has an invalid length. [ 94.600469][ T6201] FAULT_INJECTION: forcing a failure. [ 94.600469][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 94.600514][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.0.172 Not tainted syzkaller #0 PREEMPT(full) [ 94.600537][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 94.600549][ T6201] Call Trace: [ 94.600556][ T6201] [ 94.600564][ T6201] dump_stack_lvl+0xe8/0x150 [ 94.600601][ T6201] should_fail_ex+0x3eb/0x540 [ 94.600628][ T6201] should_failslab+0xa8/0x100 [ 94.600659][ T6201] ? security_file_alloc+0x34/0x310 [ 94.600685][ T6201] kmem_cache_alloc_noprof+0x9c/0x600 [ 94.600708][ T6201] ? rcu_is_watching+0x16/0xb0 [ 94.600736][ T6201] ? security_file_alloc+0x34/0x310 [ 94.600767][ T6201] security_file_alloc+0x34/0x310 [ 94.600793][ T6201] init_file+0x90/0x2b0 [ 94.600818][ T6201] alloc_empty_file+0x74/0x1d0 [ 94.600840][ T6201] alloc_file_pseudo+0x110/0x1e0 [ 94.600866][ T6201] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 94.600888][ T6201] ? _raw_spin_unlock+0x28/0x50 [ 94.600921][ T6201] sock_alloc_file+0xb8/0x2e0 [ 94.600950][ T6201] ? __sys_socket+0x12b/0x1b0 [ 94.600982][ T6201] __sys_socket+0x13f/0x1b0 [ 94.601016][ T6201] __x64_sys_socket+0x7a/0x90 [ 94.601048][ T6201] do_syscall_64+0x16a/0x530 [ 94.601075][ T6201] ? trace_irq_disable+0x3b/0x140 [ 94.601109][ T6201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.601130][ T6201] ? clear_bhb_loop+0x70/0xc0 [ 94.601155][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.601174][ T6201] RIP: 0033:0x7f54f179fb19 [ 94.601193][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.601209][ T6201] RSP: 002b:00007f54f2581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 94.601233][ T6201] RAX: ffffffffffffffda RBX: 00007f54f1a25fa0 RCX: 00007f54f179fb19 [ 94.601248][ T6201] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 94.601260][ T6201] RBP: 00007f54f1837b70 R08: 0000000000000000 R09: 0000000000000000 [ 94.601272][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.601283][ T6201] R13: 00007f54f1a26038 R14: 00007f54f1a25fa0 R15: 00007fff36929fb8 [ 94.601315][ T6201] [ 96.234202][ T33] audit: type=1326 audit(1794250741.535:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.3.213" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f432979fb19 code=0x0 [ 97.017616][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.179102][ T27] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 97.180077][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.180101][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.180119][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.180159][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.181972][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.181994][ T27] usb 2-1: Product: syz [ 97.182007][ T27] usb 2-1: Manufacturer: syz [ 97.187360][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 97.187371][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 97.269396][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 97.269421][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 97.398827][ T10] usb 2-1: USB disconnect, device number 8 [ 97.847709][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.002708][ T27] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 98.003873][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.003901][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.003920][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.003964][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.017327][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.017352][ T27] usb 2-1: Product: syz [ 98.017367][ T27] usb 2-1: Manufacturer: syz [ 98.083771][ T6352] fuse: Unknown parameter '0x0000000000000004' [ 98.086209][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 98.086228][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 98.107355][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 98.107377][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 98.114830][ T6352] FAULT_INJECTION: forcing a failure. [ 98.114830][ T6352] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.114871][ T6352] CPU: 0 UID: 0 PID: 6352 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(full) [ 98.114900][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 98.114915][ T6352] Call Trace: [ 98.114926][ T6352] [ 98.114937][ T6352] dump_stack_lvl+0xe8/0x150 [ 98.114977][ T6352] should_fail_ex+0x3eb/0x540 [ 98.115017][ T6352] copy_folio_from_iter_atomic+0x45a/0x1a80 [ 98.115069][ T6352] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 98.115108][ T6352] ? shmem_write_begin+0x1d8/0x330 [ 98.115141][ T6352] generic_perform_write+0x5c7/0x8e0 [ 98.115187][ T6352] ? __pfx_generic_perform_write+0x10/0x10 [ 98.115217][ T6352] ? do_raw_spin_unlock+0xf5/0x200 [ 98.115251][ T6352] ? mnt_put_write_access_file+0xc3/0x100 [ 98.115286][ T6352] ? file_update_time_flags+0x3ab/0x440 [ 98.115319][ T6352] shmem_file_write_iter+0xf8/0x120 [ 98.115349][ T6352] vfs_write+0x612/0xba0 [ 98.115384][ T6352] ? __pfx_vfs_write+0x10/0x10 [ 98.115415][ T6352] ? __fget_files+0x3a2/0x420 [ 98.115438][ T6352] ? __fget_files+0x2a/0x420 [ 98.115465][ T6352] ? fdget+0x1ac/0x250 [ 98.115495][ T6352] ksys_write+0x150/0x270 [ 98.115525][ T6352] ? __pfx_ksys_write+0x10/0x10 [ 98.115564][ T6352] do_syscall_64+0x16a/0x530 [ 98.115591][ T6352] ? trace_irq_disable+0x3b/0x140 [ 98.115615][ T6352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.115637][ T6352] ? clear_bhb_loop+0x70/0xc0 [ 98.115663][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.115684][ T6352] RIP: 0033:0x7f54f179fb19 [ 98.115704][ T6352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.115721][ T6352] RSP: 002b:00007f54f2581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.115742][ T6352] RAX: ffffffffffffffda RBX: 00007f54f1a25fa0 RCX: 00007f54f179fb19 [ 98.115757][ T6352] RDX: 00000000fffffdef RSI: 0000200000006ac0 RDI: 0000000000000005 [ 98.115770][ T6352] RBP: 00007f54f1837b70 R08: 0000000000000000 R09: 0000000000000000 [ 98.115782][ T6352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.115794][ T6352] R13: 00007f54f1a26038 R14: 00007f54f1a25fa0 R15: 00007fff36929fb8 [ 98.115827][ T6352] [ 98.609272][ T6370] FAULT_INJECTION: forcing a failure. [ 98.609272][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 98.609303][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.3.242 Not tainted syzkaller #0 PREEMPT(full) [ 98.609326][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 98.609338][ T6370] Call Trace: [ 98.609346][ T6370] [ 98.609355][ T6370] dump_stack_lvl+0xe8/0x150 [ 98.609391][ T6370] should_fail_ex+0x3eb/0x540 [ 98.609418][ T6370] should_failslab+0xa8/0x100 [ 98.609449][ T6370] __kmalloc_cache_noprof+0x9e/0x600 [ 98.609475][ T6370] ? __kmalloc_cache_noprof+0x148/0x600 [ 98.609497][ T6370] ? assoc_array_insert+0x417/0x2f60 [ 98.609519][ T6370] ? assoc_array_insert+0x417/0x2f60 [ 98.609549][ T6370] assoc_array_insert+0x417/0x2f60 [ 98.609570][ T6370] ? __key_link_lock+0x9b/0xb0 [ 98.609591][ T6370] ? __pfx___mutex_lock+0x10/0x10 [ 98.609627][ T6370] ? __pfx_down_write+0x10/0x10 [ 98.609669][ T6370] __key_link_begin+0xd6/0x1f0 [ 98.609694][ T6370] __key_create_or_update+0x427/0xab0 [ 98.609729][ T6370] ? __pfx___key_create_or_update+0x10/0x10 [ 98.609761][ T6370] ? lookup_user_key+0x112c/0x12c0 [ 98.609805][ T6370] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 98.609835][ T6370] ? __pfx_keyring_search_iterator+0x10/0x10 [ 98.609858][ T6370] ? __might_fault+0xaf/0x130 [ 98.609885][ T6370] key_create_or_update+0x42/0x60 [ 98.609920][ T6370] __se_sys_add_key+0x349/0x420 [ 98.609948][ T6370] ? __pfx___se_sys_add_key+0x10/0x10 [ 98.609982][ T6370] ? __x64_sys_add_key+0x20/0xc0 [ 98.610008][ T6370] do_syscall_64+0x16a/0x530 [ 98.610035][ T6370] ? trace_irq_disable+0x3b/0x140 [ 98.610061][ T6370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.610082][ T6370] ? clear_bhb_loop+0x70/0xc0 [ 98.610108][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.610128][ T6370] RIP: 0033:0x7f432979fb19 [ 98.610147][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.610164][ T6370] RSP: 002b:00007f432a57e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 98.610185][ T6370] RAX: ffffffffffffffda RBX: 00007f4329a25fa0 RCX: 00007f432979fb19 [ 98.610201][ T6370] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00002000000002c0 [ 98.610214][ T6370] RBP: 00007f4329837b70 R08: 0000000033acd956 R09: 0000000000000000 [ 98.610227][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.610247][ T6370] R13: 00007f4329a26038 R14: 00007f4329a25fa0 R15: 00007ffc2f3b0e88 [ 98.610283][ T6370] [ 99.814563][ T5730] usb 2-1: USB disconnect, device number 9 [ 99.952863][ T6392] fuse: Unknown parameter '0x0000000000000004' [ 99.970737][ T6392] FAULT_INJECTION: forcing a failure. [ 99.970737][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.970772][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.1.252 Not tainted syzkaller #0 PREEMPT(full) [ 99.970796][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.970809][ T6392] Call Trace: [ 99.970817][ T6392] [ 99.970826][ T6392] dump_stack_lvl+0xe8/0x150 [ 99.970865][ T6392] should_fail_ex+0x3eb/0x540 [ 99.970893][ T6392] copy_folio_from_iter_atomic+0x45a/0x1a80 [ 99.970952][ T6392] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 99.971002][ T6392] ? shmem_write_begin+0x1d8/0x330 [ 99.971035][ T6392] generic_perform_write+0x5c7/0x8e0 [ 99.971079][ T6392] ? __pfx_generic_perform_write+0x10/0x10 [ 99.971109][ T6392] ? do_raw_spin_unlock+0xf5/0x200 [ 99.971139][ T6392] ? mnt_put_write_access_file+0xc3/0x100 [ 99.971172][ T6392] ? file_update_time_flags+0x3ab/0x440 [ 99.971206][ T6392] shmem_file_write_iter+0xf8/0x120 [ 99.971233][ T6392] vfs_write+0x612/0xba0 [ 99.971265][ T6392] ? __pfx_vfs_write+0x10/0x10 [ 99.971296][ T6392] ? __fget_files+0x3a2/0x420 [ 99.971319][ T6392] ? __fget_files+0x2a/0x420 [ 99.971348][ T6392] ? fdget+0x1ac/0x250 [ 99.971378][ T6392] ksys_write+0x150/0x270 [ 99.971407][ T6392] ? __pfx_ksys_write+0x10/0x10 [ 99.971446][ T6392] do_syscall_64+0x16a/0x530 [ 99.971475][ T6392] ? trace_irq_disable+0x3b/0x140 [ 99.971500][ T6392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.971521][ T6392] ? clear_bhb_loop+0x70/0xc0 [ 99.971546][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.971566][ T6392] RIP: 0033:0x7feecbb9fb19 [ 99.971585][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.971601][ T6392] RSP: 002b:00007feecca59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.971622][ T6392] RAX: ffffffffffffffda RBX: 00007feecbe25fa0 RCX: 00007feecbb9fb19 [ 99.971638][ T6392] RDX: 00000000fffffdef RSI: 0000200000006ac0 RDI: 0000000000000005 [ 99.971652][ T6392] RBP: 00007feecbc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 99.971665][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.971677][ T6392] R13: 00007feecbe26038 R14: 00007feecbe25fa0 R15: 00007ffc3a3ca1b8 [ 99.971711][ T6392] [ 100.707809][ T5730] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.726352][ T6421] Zero length message leads to an empty skb [ 100.862331][ T5730] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 100.863327][ T5730] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.863353][ T5730] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.863372][ T5730] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.864130][ T5730] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.866253][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.866278][ T5730] usb 1-1: Product: syz [ 100.866293][ T5730] usb 1-1: Manufacturer: syz [ 100.899899][ T6432] fuse: Unknown parameter '0x0000000000000004' [ 100.907345][ T6432] FAULT_INJECTION: forcing a failure. [ 100.907345][ T6432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.907375][ T6432] CPU: 1 UID: 0 PID: 6432 Comm: syz.1.270 Not tainted syzkaller #0 PREEMPT(full) [ 100.907399][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 100.907411][ T6432] Call Trace: [ 100.907419][ T6432] [ 100.907427][ T6432] dump_stack_lvl+0xe8/0x150 [ 100.907468][ T6432] should_fail_ex+0x3eb/0x540 [ 100.907493][ T6432] copy_folio_from_iter_atomic+0x45a/0x1a80 [ 100.907554][ T6432] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 100.907597][ T6432] ? shmem_write_begin+0x1d8/0x330 [ 100.907631][ T6432] generic_perform_write+0x5c7/0x8e0 [ 100.907675][ T6432] ? __pfx_generic_perform_write+0x10/0x10 [ 100.907702][ T6432] ? down_write+0x166/0x200 [ 100.907733][ T6432] ? generic_write_checks_count+0x41a/0x520 [ 100.907761][ T6432] ? file_update_time_flags+0x2d5/0x440 [ 100.907791][ T6432] shmem_file_write_iter+0xf8/0x120 [ 100.907820][ T6432] vfs_write+0x612/0xba0 [ 100.907850][ T6432] ? __pfx_vfs_write+0x10/0x10 [ 100.907876][ T6432] ? __fget_files+0x3a2/0x420 [ 100.907899][ T6432] ? __fget_files+0x2a/0x420 [ 100.907925][ T6432] ? fdget+0x1ac/0x250 [ 100.907957][ T6432] ksys_write+0x150/0x270 [ 100.907985][ T6432] ? __pfx_ksys_write+0x10/0x10 [ 100.908027][ T6432] do_syscall_64+0x16a/0x530 [ 100.908055][ T6432] ? trace_irq_disable+0x3b/0x140 [ 100.908081][ T6432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.908101][ T6432] ? clear_bhb_loop+0x70/0xc0 [ 100.908122][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.908139][ T6432] RIP: 0033:0x7feecbb9fb19 [ 100.908157][ T6432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.908173][ T6432] RSP: 002b:00007feecca59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.908196][ T6432] RAX: ffffffffffffffda RBX: 00007feecbe25fa0 RCX: 00007feecbb9fb19 [ 100.908211][ T6432] RDX: 00000000fffffdef RSI: 0000200000006ac0 RDI: 0000000000000005 [ 100.908224][ T6432] RBP: 00007feecbc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.908236][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.908247][ T6432] R13: 00007feecbe26038 R14: 00007feecbe25fa0 R15: 00007ffc3a3ca1b8 [ 100.908281][ T6432] [ 101.189298][ T5730] cdc_wdm 1-1:1.0: skipping garbage [ 101.189318][ T5730] cdc_wdm 1-1:1.0: skipping garbage [ 101.192098][ T5730] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 101.192118][ T5730] cdc_wdm 1-1:1.0: Unknown control protocol [ 101.292133][ T5782] usb 1-1: USB disconnect, device number 4 [ 101.737734][ T5782] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.892574][ T5782] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 101.893707][ T5782] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.893732][ T5782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.893750][ T5782] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.893793][ T5782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.899691][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.899713][ T5782] usb 1-1: Product: syz [ 101.899726][ T5782] usb 1-1: Manufacturer: syz [ 101.912963][ T5782] cdc_wdm 1-1:1.0: skipping garbage [ 101.912980][ T5782] cdc_wdm 1-1:1.0: skipping garbage [ 101.919032][ T5782] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 101.919051][ T5782] cdc_wdm 1-1:1.0: Unknown control protocol [ 102.082334][ T6462] fuse: Unknown parameter 'fd0x0000000000000004' [ 102.085907][ T6462] FAULT_INJECTION: forcing a failure. [ 102.085907][ T6462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.085939][ T6462] CPU: 0 UID: 0 PID: 6462 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(full) [ 102.085962][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 102.085974][ T6462] Call Trace: [ 102.085983][ T6462] [ 102.085991][ T6462] dump_stack_lvl+0xe8/0x150 [ 102.086028][ T6462] should_fail_ex+0x3eb/0x540 [ 102.086054][ T6462] copy_folio_from_iter_atomic+0x45a/0x1a80 [ 102.086108][ T6462] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 102.086150][ T6462] ? shmem_write_begin+0x1d8/0x330 [ 102.086184][ T6462] generic_perform_write+0x5c7/0x8e0 [ 102.086225][ T6462] ? __pfx_generic_perform_write+0x10/0x10 [ 102.086250][ T6462] ? down_write+0x166/0x200 [ 102.086280][ T6462] ? generic_write_checks_count+0x41a/0x520 [ 102.086307][ T6462] ? file_update_time_flags+0x2d5/0x440 [ 102.086340][ T6462] shmem_file_write_iter+0xf8/0x120 [ 102.086371][ T6462] vfs_write+0x612/0xba0 [ 102.086406][ T6462] ? __pfx_vfs_write+0x10/0x10 [ 102.086438][ T6462] ? __fget_files+0x3a2/0x420 [ 102.086461][ T6462] ? __fget_files+0x2a/0x420 [ 102.086489][ T6462] ? fdget+0x1ac/0x250 [ 102.086520][ T6462] ksys_write+0x150/0x270 [ 102.086550][ T6462] ? __pfx_ksys_write+0x10/0x10 [ 102.086589][ T6462] do_syscall_64+0x16a/0x530 [ 102.086616][ T6462] ? trace_irq_disable+0x3b/0x140 [ 102.086641][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.086662][ T6462] ? clear_bhb_loop+0x70/0xc0 [ 102.086687][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.086707][ T6462] RIP: 0033:0x7feecbb9fb19 [ 102.086726][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.086741][ T6462] RSP: 002b:00007feecca59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.086762][ T6462] RAX: ffffffffffffffda RBX: 00007feecbe25fa0 RCX: 00007feecbb9fb19 [ 102.086777][ T6462] RDX: 00000000fffffdef RSI: 0000200000006ac0 RDI: 0000000000000005 [ 102.086789][ T6462] RBP: 00007feecbc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 102.086801][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.086812][ T6462] R13: 00007feecbe26038 R14: 00007feecbe25fa0 R15: 00007ffc3a3ca1b8 [ 102.086846][ T6462] [ 102.121861][ C1] cdc_wdm 1-1:1.0: unknown notification 22 received: index 45315 len 58389 [ 102.122063][ C1] cdc_wdm 1-1:1.0: unknown notification 107 received: index 44786 len 33558 [ 102.122260][ C1] cdc_wdm 1-1:1.0: unknown notification 198 received: index 22061 len 37043 [ 102.329056][ T32] usb 1-1: USB disconnect, device number 5 [ 102.495127][ T6471] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.033930][ T6492] fuse: Unknown parameter 'fd0x0000000000000004' [ 103.045109][ T6492] FAULT_INJECTION: forcing a failure. [ 103.045109][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.045139][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.2.296 Not tainted syzkaller #0 PREEMPT(full) [ 103.045162][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 103.045174][ T6492] Call Trace: [ 103.045181][ T6492] [ 103.045189][ T6492] dump_stack_lvl+0xe8/0x150 [ 103.045224][ T6492] should_fail_ex+0x3eb/0x540 [ 103.045251][ T6492] copy_folio_from_iter_atomic+0x45a/0x1a80 [ 103.045307][ T6492] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 103.045347][ T6492] ? shmem_write_begin+0x1d8/0x330 [ 103.045379][ T6492] generic_perform_write+0x5c7/0x8e0 [ 103.045420][ T6492] ? __pfx_generic_perform_write+0x10/0x10 [ 103.045447][ T6492] ? down_write+0x166/0x200 [ 103.045476][ T6492] ? generic_write_checks_count+0x41a/0x520 [ 103.045503][ T6492] ? file_update_time_flags+0x2d5/0x440 [ 103.045536][ T6492] shmem_file_write_iter+0xf8/0x120 [ 103.045566][ T6492] vfs_write+0x612/0xba0 [ 103.045601][ T6492] ? __pfx_vfs_write+0x10/0x10 [ 103.045631][ T6492] ? __fget_files+0x3a2/0x420 [ 103.045654][ T6492] ? __fget_files+0x2a/0x420 [ 103.045681][ T6492] ? fdget+0x1ac/0x250 [ 103.045712][ T6492] ksys_write+0x150/0x270 [ 103.045741][ T6492] ? __pfx_ksys_write+0x10/0x10 [ 103.045779][ T6492] do_syscall_64+0x16a/0x530 [ 103.045812][ T6492] ? trace_irq_disable+0x3b/0x140 [ 103.045836][ T6492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.045857][ T6492] ? clear_bhb_loop+0x70/0xc0 [ 103.045882][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.045901][ T6492] RIP: 0033:0x7f512f79fb19 [ 103.045920][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.045936][ T6492] RSP: 002b:00007f51306eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.045957][ T6492] RAX: ffffffffffffffda RBX: 00007f512fa25fa0 RCX: 00007f512f79fb19 [ 103.045972][ T6492] RDX: 00000000fffffdef RSI: 0000200000006ac0 RDI: 0000000000000005 [ 103.045985][ T6492] RBP: 00007f512f837b70 R08: 0000000000000000 R09: 0000000000000000 [ 103.045996][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.046008][ T6492] R13: 00007f512fa26038 R14: 00007f512fa25fa0 R15: 00007ffeb451d108 [ 103.046040][ T6492] [ 104.026108][ T6516] FAULT_INJECTION: forcing a failure. [ 104.026108][ T6516] name fail_futex, interval 1, probability 0, space 0, times 1 [ 104.026140][ T6516] CPU: 0 UID: 0 PID: 6516 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 104.026162][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.026183][ T6516] Call Trace: [ 104.026191][ T6516] [ 104.026199][ T6516] dump_stack_lvl+0xe8/0x150 [ 104.026234][ T6516] should_fail_ex+0x3eb/0x540 [ 104.026261][ T6516] get_futex_key+0x1ab/0x1410 [ 104.026301][ T6516] ? __pfx_get_futex_key+0x10/0x10 [ 104.026330][ T6516] ? __cgroup_account_cputime+0xe8/0x120 [ 104.026364][ T6516] futex_wait_setup+0x4a/0x590 [ 104.026391][ T6516] ? update_se+0x90/0x1080 [ 104.026428][ T6516] ? __futex_wait+0xdb/0x470 [ 104.026458][ T6516] __futex_wait+0x175/0x470 [ 104.026486][ T6516] ? __pfx___futex_wait+0x10/0x10 [ 104.026511][ T6516] ? __pfx_futex_wake_mark+0x10/0x10 [ 104.026538][ T6516] ? try_to_wake_up+0x84b/0x13d0 [ 104.026579][ T6516] futex_wait+0x121/0x390 [ 104.026605][ T6516] ? __pfx_futex_wait+0x10/0x10 [ 104.026646][ T6516] do_futex+0x3e7/0x4e0 [ 104.026681][ T6516] ? __pfx_do_futex+0x10/0x10 [ 104.026720][ T6516] __se_sys_futex+0x3a8/0x450 [ 104.026757][ T6516] ? __pfx___se_sys_futex+0x10/0x10 [ 104.026796][ T6516] ? __x64_sys_futex+0x21/0xf0 [ 104.026830][ T6516] do_syscall_64+0x16a/0x530 [ 104.026858][ T6516] ? trace_irq_disable+0x3b/0x140 [ 104.026883][ T6516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.026904][ T6516] ? clear_bhb_loop+0x70/0xc0 [ 104.026928][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.026949][ T6516] RIP: 0033:0x7f432979fb19 [ 104.026968][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.026985][ T6516] RSP: 002b:00007f432a57e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.027007][ T6516] RAX: ffffffffffffffda RBX: 00007f4329a25fa8 RCX: 00007f432979fb19 [ 104.027022][ T6516] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4329a25fa8 [ 104.027035][ T6516] RBP: 00007f4329a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 104.027048][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.027060][ T6516] R13: 00007f4329a26038 R14: 00007ffc2f3b0da0 R15: 00007ffc2f3b0e88 [ 104.027092][ T6516] [ 104.138487][ T5782] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.311482][ T5782] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 104.312936][ T5782] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.312961][ T5782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.312979][ T5782] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.313023][ T5782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.317388][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.317411][ T5782] usb 3-1: Product: syz [ 104.317425][ T5782] usb 3-1: Manufacturer: syz [ 104.333616][ T5782] cdc_wdm 3-1:1.0: skipping garbage [ 104.333635][ T5782] cdc_wdm 3-1:1.0: skipping garbage [ 104.345125][ T5782] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 104.345144][ T5782] cdc_wdm 3-1:1.0: Unknown control protocol [ 104.536579][ T6526] fuse: Unknown parameter 'fd0x0000000000000004' [ 104.540647][ T5782] usb 3-1: USB disconnect, device number 4 [ 104.554415][ T6526] FAULT_INJECTION: forcing a failure. [ 104.554415][ T6526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.554451][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.1.310 Not tainted syzkaller #0 PREEMPT(full) [ 104.554475][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.554487][ T6526] Call Trace: [ 104.554496][ T6526] [ 104.554505][ T6526] dump_stack_lvl+0xe8/0x150 [ 104.554544][ T6526] should_fail_ex+0x3eb/0x540 [ 104.554575][ T6526] prepare_alloc_pages+0x21e/0x5f0 [ 104.554612][ T6526] __alloc_frozen_pages_noprof+0x189/0x450 [ 104.554638][ T6526] ? __lock_acquire+0x747/0x2de0 [ 104.554666][ T6526] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.554703][ T6526] ? policy_nodemask+0x31b/0x980 [ 104.554733][ T6526] ? do_user_addr_fault+0x10b1/0x1480 [ 104.554758][ T6526] alloc_pages_mpol+0x21e/0x390 [ 104.554793][ T6526] folio_alloc_mpol_noprof+0x39/0x160 [ 104.554827][ T6526] shmem_alloc_and_add_folio+0x43e/0xf60 [ 104.554856][ T6526] ? filemap_get_entry+0xcd/0x3f0 [ 104.554889][ T6526] ? __pfx_filemap_get_entry+0x10/0x10 [ 104.554912][ T6526] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 104.554940][ T6526] ? copy_folio_from_iter_atomic+0x19c6/0x1a80 [ 104.554983][ T6526] shmem_get_folio_gfp+0x594/0x1330 [ 104.555023][ T6526] shmem_write_begin+0x16c/0x330 [ 104.555052][ T6526] generic_perform_write+0x2d5/0x8e0 [ 104.555098][ T6526] ? __pfx_generic_perform_write+0x10/0x10 [ 104.555125][ T6526] ? do_raw_spin_unlock+0xf5/0x200 [ 104.555156][ T6526] ? mnt_put_write_access_file+0xc3/0x100 [ 104.555188][ T6526] ? file_update_time_flags+0x3ab/0x440 [ 104.555222][ T6526] shmem_file_write_iter+0xf8/0x120 [ 104.555253][ T6526] vfs_write+0x612/0xba0 [ 104.555289][ T6526] ? __pfx_vfs_write+0x10/0x10 [ 104.555318][ T6526] ? __fget_files+0x3a2/0x420 [ 104.555338][ T6526] ? __fget_files+0x2a/0x420 [ 104.555375][ T6526] ? fdget+0x1ac/0x250 [ 104.555408][ T6526] ksys_write+0x150/0x270 [ 104.555438][ T6526] ? __pfx_ksys_write+0x10/0x10 [ 104.555477][ T6526] do_syscall_64+0x16a/0x530 [ 104.555505][ T6526] ? trace_irq_disable+0x3b/0x140 [ 104.555530][ T6526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.555550][ T6526] ? clear_bhb_loop+0x70/0xc0 [ 104.555573][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.555592][ T6526] RIP: 0033:0x7feecbb9fb19 [ 104.555610][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.555625][ T6526] RSP: 002b:00007feecca59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.555648][ T6526] RAX: ffffffffffffffda RBX: 00007feecbe25fa0 RCX: 00007feecbb9fb19 [ 104.555664][ T6526] RDX: 00000000fffffdef RSI: 0000200000006ac0 RDI: 0000000000000005 [ 104.555676][ T6526] RBP: 00007feecbc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.555686][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.555697][ T6526] R13: 00007feecbe26038 R14: 00007feecbe25fa0 R15: 00007ffc3a3ca1b8 [ 104.555729][ T6526] [ 105.077651][ T5782] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.169042][ T6543] syz.0.320 (6543) used obsolete PPPIOCDETACH ioctl [ 105.243961][ T6549] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.244098][ T6549] block device autoloading is deprecated and will be removed. [ 105.249420][ T5782] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 105.250393][ T5782] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.250417][ T5782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.250435][ T5782] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.250476][ T5782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.251903][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.251925][ T5782] usb 3-1: Product: syz [ 105.251939][ T5782] usb 3-1: Manufacturer: syz [ 105.257615][ T5782] cdc_wdm 3-1:1.0: skipping garbage [ 105.257632][ T5782] cdc_wdm 3-1:1.0: skipping garbage [ 105.260226][ T5782] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 105.260244][ T5782] cdc_wdm 3-1:1.0: Unknown control protocol [ 105.473280][ C1] cdc_wdm 3-1:1.0: unknown notification 22 received: index 45315 len 58389 [ 105.473510][ C1] cdc_wdm 3-1:1.0: unknown notification 107 received: index 44786 len 33558 [ 105.473723][ C1] cdc_wdm 3-1:1.0: unknown notification 198 received: index 22061 len 37043 [ 105.545659][ T6560] FAULT_INJECTION: forcing a failure. [ 105.545659][ T6560] name fail_futex, interval 1, probability 0, space 0, times 0 [ 105.545697][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.0.325 Not tainted syzkaller #0 PREEMPT(full) [ 105.545718][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 105.545731][ T6560] Call Trace: [ 105.545739][ T6560] [ 105.545747][ T6560] dump_stack_lvl+0xe8/0x150 [ 105.545789][ T6560] should_fail_ex+0x3eb/0x540 [ 105.545819][ T6560] get_futex_key+0x1ab/0x1410 [ 105.545850][ T6560] ? stack_depot_save_flags+0x33/0x840 [ 105.545874][ T6560] ? __lock_acquire+0x747/0x2de0 [ 105.545902][ T6560] ? kasan_save_free_info+0x40/0x50 [ 105.545925][ T6560] ? __pfx_get_futex_key+0x10/0x10 [ 105.545951][ T6560] ? do_syscall_64+0x16a/0x530 [ 105.545979][ T6560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.546008][ T6560] futex_wake+0x119/0x5f0 [ 105.546034][ T6560] ? __pfx_futex_wake+0x10/0x10 [ 105.546067][ T6560] do_futex+0x458/0x4e0 [ 105.546101][ T6560] ? __pfx_do_futex+0x10/0x10 [ 105.546136][ T6560] __se_sys_futex+0x3a8/0x450 [ 105.546171][ T6560] ? __pfx___se_sys_futex+0x10/0x10 [ 105.546207][ T6560] ? __x64_sys_futex+0x21/0xf0 [ 105.546239][ T6560] do_syscall_64+0x16a/0x530 [ 105.546274][ T6560] ? trace_irq_disable+0x3b/0x140 [ 105.546302][ T6560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.546324][ T6560] ? clear_bhb_loop+0x70/0xc0 [ 105.546351][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.546373][ T6560] RIP: 0033:0x7f54f179fb19 [ 105.546393][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.546410][ T6560] RSP: 002b:00007f54f25810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.546434][ T6560] RAX: ffffffffffffffda RBX: 00007f54f1a25fa8 RCX: 00007f54f179fb19 [ 105.546449][ T6560] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54f1a25fac [ 105.546463][ T6560] RBP: 00007f54f1a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 105.546477][ T6560] R10: 000000002bbf12f0 R11: 0000000000000246 R12: 0000000000000000 [ 105.546490][ T6560] R13: 00007f54f1a26038 R14: 00007fff36929ed0 R15: 00007fff36929fb8 [ 105.546521][ T6560] [ 105.683601][ T5782] usb 3-1: USB disconnect, device number 5 [ 105.813681][ T6566] ======================================================= [ 105.813681][ T6566] WARNING: The mand mount option has been deprecated and [ 105.813681][ T6566] and is ignored by this kernel. Remove the mand [ 105.813681][ T6566] option from the mount to silence this warning. [ 105.813681][ T6566] ======================================================= [ 105.813758][ T6566] devpts: Invalid gid '0x00000000ffffffff' [ 106.132066][ T6581] program syz.0.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.193287][ T6586] FAULT_INJECTION: forcing a failure. [ 106.193287][ T6586] name fail_futex, interval 1, probability 0, space 0, times 0 [ 106.193322][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: syz.0.336 Not tainted syzkaller #0 PREEMPT(full) [ 106.193342][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 106.193354][ T6586] Call Trace: [ 106.193362][ T6586] [ 106.193371][ T6586] dump_stack_lvl+0xe8/0x150 [ 106.193408][ T6586] should_fail_ex+0x3eb/0x540 [ 106.193435][ T6586] get_futex_key+0x1ab/0x1410 [ 106.193471][ T6586] ? __pfx_get_futex_key+0x10/0x10 [ 106.193503][ T6586] ? __lock_acquire+0x747/0x2de0 [ 106.193534][ T6586] futex_wait_setup+0x4a/0x590 [ 106.193563][ T6586] ? __futex_wait+0xdb/0x470 [ 106.193590][ T6586] __futex_wait+0x175/0x470 [ 106.193611][ T6586] ? __pfx___futex_wait+0x10/0x10 [ 106.193625][ T6586] ? __pfx_futex_wake_mark+0x10/0x10 [ 106.193640][ T6586] ? try_to_wake_up+0x84b/0x13d0 [ 106.193660][ T6586] futex_wait+0x121/0x390 [ 106.193673][ T6586] ? __pfx_futex_wait+0x10/0x10 [ 106.193694][ T6586] do_futex+0x3e7/0x4e0 [ 106.193714][ T6586] ? __pfx_do_futex+0x10/0x10 [ 106.193734][ T6586] __se_sys_futex+0x3a8/0x450 [ 106.193753][ T6586] ? __pfx___se_sys_futex+0x10/0x10 [ 106.193773][ T6586] ? __x64_sys_futex+0x21/0xf0 [ 106.193791][ T6586] do_syscall_64+0x16a/0x530 [ 106.193807][ T6586] ? trace_irq_disable+0x3b/0x140 [ 106.193822][ T6586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.193833][ T6586] ? clear_bhb_loop+0x70/0xc0 [ 106.193847][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.193858][ T6586] RIP: 0033:0x7f54f179fb19 [ 106.193870][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.193880][ T6586] RSP: 002b:00007f54f25810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.193902][ T6586] RAX: ffffffffffffffda RBX: 00007f54f1a25fa8 RCX: 00007f54f179fb19 [ 106.193910][ T6586] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54f1a25fa8 [ 106.193918][ T6586] RBP: 00007f54f1a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 106.193925][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.193931][ T6586] R13: 00007f54f1a26038 R14: 00007fff36929ed0 R15: 00007fff36929fb8 [ 106.193949][ T6586] [ 106.507765][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'. [ 106.987105][ T6608] FAULT_INJECTION: forcing a failure. [ 106.987105][ T6608] name fail_futex, interval 1, probability 0, space 0, times 0 [ 106.987139][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.0.345 Not tainted syzkaller #0 PREEMPT(full) [ 106.987162][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 106.987174][ T6608] Call Trace: [ 106.987182][ T6608] [ 106.987191][ T6608] dump_stack_lvl+0xe8/0x150 [ 106.987231][ T6608] should_fail_ex+0x3eb/0x540 [ 106.987258][ T6608] get_futex_key+0x1ab/0x1410 [ 106.987300][ T6608] ? __pfx_get_futex_key+0x10/0x10 [ 106.987332][ T6608] ? __cgroup_account_cputime+0xe8/0x120 [ 106.987365][ T6608] futex_wait_setup+0x4a/0x590 [ 106.987388][ T6608] ? update_se+0x90/0x1080 [ 106.987422][ T6608] ? __futex_wait+0xdb/0x470 [ 106.987448][ T6608] __futex_wait+0x175/0x470 [ 106.987478][ T6608] ? __pfx___futex_wait+0x10/0x10 [ 106.987503][ T6608] ? __pfx_futex_wake_mark+0x10/0x10 [ 106.987528][ T6608] ? try_to_wake_up+0x84b/0x13d0 [ 106.987562][ T6608] futex_wait+0x121/0x390 [ 106.987586][ T6608] ? __pfx_futex_wait+0x10/0x10 [ 106.987627][ T6608] do_futex+0x3e7/0x4e0 [ 106.987670][ T6608] ? __pfx_do_futex+0x10/0x10 [ 106.987706][ T6608] __se_sys_futex+0x3a8/0x450 [ 106.987743][ T6608] ? __pfx___se_sys_futex+0x10/0x10 [ 106.987784][ T6608] ? __x64_sys_futex+0x21/0xf0 [ 106.987818][ T6608] do_syscall_64+0x16a/0x530 [ 106.987847][ T6608] ? trace_irq_disable+0x3b/0x140 [ 106.987873][ T6608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.987895][ T6608] ? clear_bhb_loop+0x70/0xc0 [ 106.987922][ T6608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.987943][ T6608] RIP: 0033:0x7f54f179fb19 [ 106.987963][ T6608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.987980][ T6608] RSP: 002b:00007f54f25810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.988003][ T6608] RAX: ffffffffffffffda RBX: 00007f54f1a25fa8 RCX: 00007f54f179fb19 [ 106.988018][ T6608] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f54f1a25fa8 [ 106.988031][ T6608] RBP: 00007f54f1a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 106.988043][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.988055][ T6608] R13: 00007f54f1a26038 R14: 00007fff36929ed0 R15: 00007fff36929fb8 [ 106.988087][ T6608] [ 107.703712][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.360'. [ 108.123350][ T6654] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 109.006205][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 109.110004][ T6728] loop2: detected capacity change from 0 to 7 [ 109.121483][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.121602][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.122461][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.122525][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.123383][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.123441][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.123566][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.123622][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.123759][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.123814][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.124344][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.124405][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.124561][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.124616][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.124654][ T6728] ldm_validate_partition_table(): Disk read failed. [ 109.124781][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.124837][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.125054][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.125109][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.125598][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.125658][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 109.125852][ T6728] Dev loop2: unable to read RDB block 0 [ 109.126967][ T6728] loop2: unable to read partition table [ 109.127156][ T6728] loop2: partition table beyond EOD, truncated [ 109.128510][ T6728] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 109.264380][ T6729] fscrypt (sda1, inode 1262): Mutually exclusive encryption flags (0x14) [ 109.729233][ T6755] capability: warning: `syz.3.410' uses 32-bit capabilities (legacy support in use) [ 109.729741][ T6755] program syz.3.410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.592128][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 110.628086][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 110.778947][ T27] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 110.780006][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.780032][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.780050][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.780094][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.781615][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.781640][ T27] usb 2-1: Product: syz [ 110.781654][ T27] usb 2-1: Manufacturer: syz [ 110.797948][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 110.797968][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 110.803237][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 110.803258][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 111.000005][ T27] usb 2-1: USB disconnect, device number 10 [ 112.017619][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.169000][ T27] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 112.172259][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.172303][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.172322][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.172367][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.175888][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.175913][ T27] usb 2-1: Product: syz [ 112.175927][ T27] usb 2-1: Manufacturer: syz [ 112.185636][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 112.185655][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 112.193243][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 112.193263][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 113.064676][ T6839] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 118.543616][ T27] usb 2-1: USB disconnect, device number 11 [ 133.415931][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.430826][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.075115][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.125086][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.951404][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 201.952183][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 202.147253][ T4955] Bluetooth: hci2: command 0x0406 tx timeout [ 202.162630][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 256.315185][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.321161][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.621263][ T35] INFO: task kworker/1:3:5370 blocked for more than 143 seconds. [ 278.621341][ T35] Not tainted syzkaller #0 [ 278.621389][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.621437][ T35] task:kworker/1:3 state:D stack:24424 pid:5370 tgid:5370 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 278.621632][ T35] Workqueue: events_power_efficient crda_timeout_work [ 278.621857][ T35] Call Trace: [ 278.621912][ T35] [ 278.622499][ T35] __schedule+0x18a6/0x5c10 [ 278.740954][ T35] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 278.804333][ T35] ? __pfx___schedule+0x10/0x10 [ 278.804421][ T35] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 278.804708][ T35] ? schedule+0x90/0x2b0 [ 278.992742][ T35] ? schedule+0x90/0x2b0 [ 278.993584][ T35] schedule+0x164/0x2b0 [ 278.993917][ T35] schedule_preempt_disabled+0x13/0x30 [ 279.059150][ T35] __mutex_lock+0x7c4/0x15a0 [ 279.059841][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 279.060583][ T35] ? crda_timeout_work+0x1f/0x90 [ 279.122129][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 279.241588][ T35] ? rcu_is_watching+0x16/0xb0 [ 279.241796][ T35] ? process_scheduled_works+0x97a/0x1630 [ 279.242103][ T35] crda_timeout_work+0x1f/0x90 [ 279.242361][ T35] process_scheduled_works+0xc3d/0x1630 [ 279.418454][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.489128][ T35] ? assign_work+0x3cf/0x5d0 [ 279.553975][ T35] worker_thread+0xa47/0xfb0 [ 279.637130][ T35] kthread+0x38b/0x480 [ 279.736928][ T35] ? __pfx_worker_thread+0x10/0x10 [ 279.737057][ T35] ? __pfx_kthread+0x10/0x10 [ 279.737279][ T35] ret_from_fork+0x514/0xb70 [ 279.778733][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 279.778957][ T35] ? __switch_to+0xc78/0x1410 [ 279.779602][ T35] ? __pfx_kthread+0x10/0x10 [ 280.007123][ T35] ret_from_fork_asm+0x1a/0x30 [ 280.041719][ T35] [ 280.041868][ T35] INFO: task kworker/1:4:5713 blocked for more than 144 seconds. [ 280.041896][ T35] Not tainted syzkaller #0 [ 280.042009][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.042037][ T35] task:kworker/1:4 state:D stack:23304 pid:5713 tgid:5713 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 280.189080][ T35] Workqueue: events reg_todo [ 280.189338][ T35] Call Trace: [ 280.189408][ T35] [ 280.189587][ T35] __schedule+0x18a6/0x5c10 [ 280.245731][ T35] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 280.246529][ T35] ? __pfx___schedule+0x10/0x10 [ 280.247229][ T35] ? schedule+0x90/0x2b0 [ 280.387190][ T35] ? schedule+0x90/0x2b0 [ 280.418726][ T35] schedule+0x164/0x2b0 [ 280.419021][ T35] schedule_preempt_disabled+0x13/0x30 [ 280.419159][ T35] __mutex_lock+0x7c4/0x15a0 [ 280.420020][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 280.582230][ T35] ? reg_process_self_managed_hints+0xae/0x170 [ 280.582780][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 280.583720][ T35] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 280.650131][ T35] reg_process_self_managed_hints+0xae/0x170 [ 280.655488][ T35] reg_todo+0xe6e/0xff0 [ 280.656125][ T35] ? lock_acquire+0x115/0x350 [ 280.656741][ T35] ? __pfx_reg_todo+0x10/0x10 [ 280.744504][ T35] ? rcu_is_watching+0x16/0xb0 [ 280.744827][ T35] ? process_scheduled_works+0x97a/0x1630 [ 280.745187][ T35] process_scheduled_works+0xc3d/0x1630 [ 280.820824][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.858776][ T35] ? assign_work+0x3cf/0x5d0 [ 280.859816][ T35] worker_thread+0xa47/0xfb0 [ 280.993729][ T35] ? __kthread_parkme+0x71/0x1f0 [ 281.066910][ T35] kthread+0x38b/0x480 [ 281.067511][ T35] ? __pfx_worker_thread+0x10/0x10 [ 281.067597][ T35] ? __pfx_kthread+0x10/0x10 [ 281.067988][ T35] ret_from_fork+0x514/0xb70 [ 281.111129][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 281.111283][ T35] ? __switch_to+0xc78/0x1410 [ 281.111802][ T35] ? __pfx_kthread+0x10/0x10 [ 281.186430][ T35] ret_from_fork_asm+0x1a/0x30 [ 281.390729][ T35] [ 281.391093][ T35] [ 281.391093][ T35] Showing all locks held in the system: [ 281.391125][ T35] locks held by rcu_preempt/17: 1, on CPU#1: [ 281.391154][ T35] #0: ffff8880b83264d8 (&base->lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 281.391364][ T35] locks held by khungtaskd/35: 1, on CPU#0: [ 281.391401][ T35] #0: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 281.391683][ T35] locks held by kworker/u8:2/46: 3, on CPU#0: [ 281.391731][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.392111][ T35] #1: ffffc90000b67c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.392560][ T35] #2: ffff888057be0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.392995][ T35] locks held by kworker/u8:3/53: 3, on CPU#1: [ 281.393016][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.393176][ T35] #1: ffffc90000bd7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.393416][ T35] #2: ffff888057910800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.393745][ T35] locks held by kworker/u8:4/64: 5, on CPU#1: [ 281.393799][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.394223][ T35] #1: ffffc9000205fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.394712][ T35] #2: ffff888057fb0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.394971][ T35] #3: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: ieee80211_ibss_rx_queued_mgmt+0xf10/0x2c40 [ 281.395161][ T35] #4: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: sta_info_get+0x4f/0x300 [ 281.395438][ T35] locks held by kworker/u8:5/140: 3, on CPU#1: [ 281.395485][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.395858][ T35] #1: ffffc900026bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.396303][ T35] #2: ffff888067b20800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.396762][ T35] locks held by kworker/u8:6/162: 3, on CPU#1: [ 281.396782][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.396938][ T35] #1: ffffc90002ebfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.397167][ T35] #2: ffff888057bf0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.782325][ T35] locks held by kworker/0:2/995: 3, on CPU#0: [ 281.782401][ T35] #0: ffff88813fe61d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.782755][ T35] #1: ffffc90004c87c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.782916][ T35] #2: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 281.783142][ T35] locks held by kworker/u8:7/1043: 3, on CPU#0: [ 281.783183][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.783502][ T35] #1: ffffc90004e17c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.783908][ T35] #2: ffff8880679f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.886659][ T35] locks held by kworker/u8:8/2222: 3, on CPU#0: [ 281.886698][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.886978][ T35] #1: ffffc90006a97c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.887342][ T35] #2: ffff888067980800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.887671][ T35] locks held by klogd/4993: 1, on CPU#0: [ 281.887704][ T35] #0: ffffffff904b3910 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 281.887959][ T35] locks held by kworker/1:3/5370: 3, last CPU#1: [ 281.888003][ T35] #0: ffff88813fe61d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.933603][ T35] #1: ffffc9000356fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.933901][ T35] #2: ffffffff91b0c4a0 (cfg80211_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x1f/0x90 [ 281.934295][ T35] locks held by getty/5392: 2, last CPU#0: [ 281.934356][ T35] #0: ffff8880353130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 282.085414][ T35] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 282.085702][ T35] locks held by syz-executor/5634: 1, on CPU#0: [ 282.085750][ T35] #0: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 282.086126][ T35] locks held by kworker/1:4/5713: 4, last CPU#1: [ 282.086185][ T35] #0: ffff88813fe62d50 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.086640][ T35] #1: ffffc90004a1fc40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.087010][ T35] #2: ffffffff91b0c4a0 (cfg80211_mutex){+.+.}-{4:4}, at: reg_todo+0x80/0xff0 [ 282.087161][ T35] #3: ffff888057400800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xae/0x170 [ 282.388934][ T35] locks held by kworker/u8:9/5815: 3, on CPU#0: [ 282.388998][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.389478][ T35] #1: ffffc90004ec7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.389746][ T35] #2: ffff88807b4d2258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 282.389952][ T35] locks held by kworker/u8:10/5816: 4, on CPU#1: [ 282.389988][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.459101][ T35] #1: ffffc90005007c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.459444][ T35] #2: ffff888057400800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 282.459858][ T35] #3: ffff8880b833c620 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 282.460365][ T35] locks held by kworker/u8:11/6382: 2, on CPU#1: [ 282.460413][ T35] #0: ffff88803428f950 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.460544][ T35] #1: ffffc9000d827c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.460749][ T35] locks held by syz.1.288/6475: 1, on CPU#1: [ 282.460788][ T35] #0: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 282.738447][ T35] locks held by kworker/u8:12/6840: 3, on CPU#1: [ 282.738520][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.738979][ T35] #1: ffffc9000393fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.739486][ T35] #2: ffff88807be8c258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 282.739733][ T35] locks held by kworker/u8:14/6842: 6, on CPU#0: [ 282.739771][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.740057][ T35] #1: ffffc90004d67c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.740426][ T35] #2: ffffffff901e6210 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 282.740874][ T35] #3: ffffffff9043d500 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 282.741284][ T35] #4: ffffffff901fd420 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 282.741439][ T35] #5: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 282.741682][ T35] locks held by kworker/u8:16/6846: 3, on CPU#0: [ 282.875608][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.875800][ T35] #1: ffffc9000446fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.876056][ T35] #2: ffff88807b4f3258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 282.876442][ T35] locks held by syz-executor/6850: 1, on CPU#0: [ 282.876505][ T35] #0: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 282.876940][ T35] locks held by kworker/1:10/6851: 2, on CPU#1: [ 282.877008][ T35] #0: ffff88813fe61d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.913567][ T35] #1: ffffc9000d61fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 282.913806][ T35] locks held by syz-executor/6859: 2, on CPU#0: [ 282.913847][ T35] #0: ffff88807d6ec080 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 282.914159][ T35] #1: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 282.914550][ T35] locks held by dhcpcd/6866: 2, last CPU#0: [ 282.914610][ T35] #0: ffff888023bc8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 282.915215][ T35] #1: ffffffff903610a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 282.960573][ T35] [ 282.960612][ T35] ============================================= [ 282.960612][ T35] [ 282.960668][ T35] NMI backtrace for cpu 0 [ 282.960721][ T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 282.960775][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 282.960818][ T35] Call Trace: [ 282.960932][ T35] [ 282.961066][ T35] dump_stack_lvl+0xe8/0x150 [ 282.961677][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 282.962022][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 282.962251][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 282.962735][ T35] sys_info+0x135/0x170 [ 282.963029][ T35] watchdog+0x1073/0x10f0 [ 282.963883][ T35] ? watchdog+0x209/0x10f0 [ 282.965117][ T35] kthread+0x38b/0x480 [ 282.965288][ T35] ? __pfx_watchdog+0x10/0x10 [ 282.965359][ T35] ? __pfx_kthread+0x10/0x10 [ 282.965729][ T35] ret_from_fork+0x514/0xb70 [ 282.966477][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 282.966813][ T35] ? __switch_to+0xc78/0x1410 [ 282.967182][ T35] ? __pfx_kthread+0x10/0x10 [ 282.967699][ T35] ret_from_fork_asm+0x1a/0x30 [ 282.969432][ T35] [ 283.021719][ T35] Sending NMI from CPU 0 to CPUs 1: [ 283.021802][ C1] NMI backtrace for cpu 1 [ 283.021820][ C1] CPU: 1 UID: 0 PID: 34 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 283.021844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 283.021858][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x8c/0x120 [ 283.021896][ C1] Code: 84 a3 00 00 00 4e 8b 54 ce 10 65 4c 8b 1d bc 70 42 13 41 f7 c3 00 01 00 ff 74 2c 44 89 db 81 e3 00 01 00 0f 81 fb 00 01 00 00 <0f> 95 c3 41 81 fb 00 00 00 10 41 0f 93 c3 41 08 db 75 bc 41 83 b8 [ 283.021914][ C1] RSP: 0000:ffffc90000a383b8 EFLAGS: 00000246 [ 283.021937][ C1] RAX: 0000000000000020 RBX: 0000000000000100 RCX: 0000000000000005 [ 283.021953][ C1] RDX: ffffffff81cdb57a RSI: ffffffff903be050 RDI: 000000000000000a [ 283.021986][ C1] RBP: 00000000000001ec R08: ffff88801feb8000 R09: 000000000000000d [ 283.022003][ C1] R10: 000000000000000d R11: 0000000000000103 R12: 00000041e5a61c82 [ 283.022018][ C1] R13: 000000000000000a R14: 000000000000002c R15: ffff8880236c31fc [ 283.022034][ C1] FS: 0000000000000000(0000) GS:ffff888123262000(0000) knlGS:0000000000000000 [ 283.022052][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.022070][ C1] CR2: 00007fff146a6f52 CR3: 0000000077616000 CR4: 00000000003526f0 [ 283.022089][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.022103][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 283.022118][ C1] Call Trace: [ 283.022131][ C1] [ 283.022169][ C1] rb_read_data_buffer+0x14a/0x5b0 [ 283.022294][ C1] check_buffer+0x288/0x860 [ 283.022348][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 283.022460][ C1] __rb_reserve_next+0x549/0xdd0 [ 283.022682][ C1] ring_buffer_lock_reserve+0xc0d/0x10c0 [ 283.022750][ C1] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 283.022859][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 283.022993][ C1] trace_event_buffer_lock_reserve+0x1d4/0x700 [ 283.023092][ C1] trace_event_buffer_reserve+0x1ef/0x2d0 [ 283.023176][ C1] trace_event_raw_event_lock+0x127/0x280 [ 283.023253][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 283.023284][ C1] ? lock_acquire+0x115/0x350 [ 283.023381][ C1] ? lock_acquire+0x115/0x350 [ 283.023462][ C1] ? unwind_next_frame+0x8f/0x2550 [ 283.023501][ C1] ? unwind_next_frame+0x8f/0x2550 [ 283.023538][ C1] lock_release+0x396/0x3c0 [ 283.023591][ C1] ? deref_stack_reg+0x18e/0x220 [ 283.023648][ C1] ? unwind_next_frame+0x8f/0x2550 [ 283.023698][ C1] unwind_next_frame+0x1baa/0x2550 [ 283.023785][ C1] ? rcu_free_sheaf+0x31/0x200 [ 283.023824][ C1] ? unwind_next_frame+0x8f/0x2550 [ 283.023895][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 283.023939][ C1] arch_stack_walk+0x11b/0x150 [ 283.024033][ C1] ? rcu_core+0x92e/0x1230 [ 283.024119][ C1] stack_trace_save+0xa9/0x100 [ 283.024164][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 283.024247][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 283.024330][ C1] kasan_save_track+0x3f/0x90 [ 283.024366][ C1] ? kasan_save_track+0x3f/0x90 [ 283.024397][ C1] ? kasan_save_free_info+0x40/0x50 [ 283.024426][ C1] ? __kasan_slab_free+0x70/0x90 [ 283.024464][ C1] ? __rcu_free_sheaf_prepare+0x132/0x2b0 [ 283.024499][ C1] ? rcu_free_sheaf+0x31/0x200 [ 283.024984][ C1] kasan_save_free_info+0x40/0x50 [ 283.025023][ C1] __kasan_slab_free+0x70/0x90 [ 283.025079][ C1] __rcu_free_sheaf_prepare+0x132/0x2b0 [ 283.025171][ C1] ? rcu_core+0x8b0/0x1230 [ 283.025214][ C1] rcu_free_sheaf+0x31/0x200 [ 283.025274][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 283.025320][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 283.025365][ C1] ? rcu_core+0x8b0/0x1230 [ 283.025408][ C1] rcu_core+0x92e/0x1230 [ 283.025599][ C1] ? __pfx_rcu_core+0x10/0x10 [ 283.025709][ C1] ? tasklet_action_common+0x3e4/0x490 [ 283.025811][ C1] handle_softirqs+0x265/0x8d0 [ 283.025845][ C1] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 283.026004][ C1] __irq_exit_rcu+0xc6/0x220 [ 283.026058][ C1] irq_exit_rcu+0x9/0x30 [ 283.026091][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 283.026134][ C1] [ 283.026143][ C1] [ 283.026165][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.026198][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 283.026232][ C1] Code: f7 e8 cd 23 85 f5 f7 c3 00 02 00 00 74 05 e8 d0 cc b1 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 0e 76 f5 65 48 8b 05 6c ed eb 08 48 85 c0 74 18 5b 41 5e c3 [ 283.026250][ C1] RSP: 0000:ffffc90000aa7ca8 EFLAGS: 00000206 [ 283.026271][ C1] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 283.026287][ C1] RDX: 0000000000000000 RSI: ffffffff8e9ef404 RDI: 0000000000000001 [ 283.026301][ C1] RBP: ffffc90000aa7e18 R08: ffffffff91e10cbf R09: 1fffffff ** replaying previous printk message ** [ 283.026301][ C1] RBP: ffffc90000aa7e18 R08: ffffffff91e10cbf R09: 1ffffffff23c2197 [ 283.026318][ C1] R10: dffffc0000000000 R11: fffffbfff23c2198 R12: 0000000000000002 [ 283.026334][ C1] R13: ffff88801feb8000 R14: ffffffff9c4ad0c0 R15: dffffc0000000000 [ 283.026516][ C1] nbcon_kthread_func+0x724/0x8d0 [ 283.026623][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 283.026665][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 283.026775][ C1] ? __kthread_parkme+0x71/0x1f0 [ 283.026843][ C1] ? __kthread_parkme+0x199/0x1f0 [ 283.026945][ C1] kthread+0x38b/0x480 [ 283.026994][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 283.027023][ C1] ? __pfx_kthread+0x10/0x10 [ 283.027083][ C1] ret_from_fork+0x514/0xb70 [ 283.027153][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 283.027199][ C1] ? __switch_to+0xc78/0x1410 [ 283.027278][ C1] ? __pfx_kthread+0x10/0x10 [ 283.027339][ C1] ret_from_fork_asm+0x1a/0x30 [ 283.027552][ C1] [ 284.421808][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 284.523677][ T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 284.532827][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 284.542918][ T35] Call Trace: [ 284.546284][ T35] [ 284.549313][ T35] vpanic+0x26f/0x710 [ 284.554012][ T35] panic+0xc5/0xd0 [ 284.558153][ T35] ? __pfx_panic+0x10/0x10 [ 284.562597][ T35] ? preempt_schedule_common+0x7f/0xd0 [ 284.568204][ T35] ? preempt_schedule_thunk+0x16/0x40 [ 284.573890][ T35] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 284.580627][ T35] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 284.587380][ T35] watchdog+0x10e7/0x10f0 [ 284.592627][ T35] ? watchdog+0x209/0x10f0 [ 284.597875][ T35] kthread+0x38b/0x480 [ 284.602270][ T35] ? __pfx_watchdog+0x10/0x10 [ 284.607071][ T35] ? __pfx_kthread+0x10/0x10 [ 284.612317][ T35] ret_from_fork+0x514/0xb70 [ 284.617265][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 284.622627][ T35] ? __switch_to+0xc78/0x1410 [ 284.628307][ T35] ? __pfx_kthread+0x10/0x10 [ 284.633380][ T35] ret_from_fork_asm+0x1a/0x30 [ 284.639825][ T35] [ 284.643187][ T35] Kernel Offset: disabled [ 284.647581][ T35] Rebooting in 86400 seconds..