last executing test programs: 7.759504957s ago: executing program 0 (id=153): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "82dc05", 0x10, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x5e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfd, 0x100}}}}}}}}, 0x0) 7.491942893s ago: executing program 3 (id=154): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 7.201923455s ago: executing program 0 (id=157): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x12df00, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.928951445s ago: executing program 3 (id=158): pipe2(0x0, 0x4080) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xffffffff}, 0x0, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4622}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.329147222s ago: executing program 5 (id=162): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x5, @mcast1, 0xff}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.886137426s ago: executing program 5 (id=163): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 5.04134367s ago: executing program 4 (id=166): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeee8000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.735970966s ago: executing program 0 (id=167): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.579192928s ago: executing program 2 (id=168): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) close_range(r1, 0xffffffffffffffff, 0x0) 4.515770429s ago: executing program 1 (id=169): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 4.250200672s ago: executing program 2 (id=170): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 4.163169276s ago: executing program 4 (id=171): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000631803002c0012800b000100697036746e6c00001c00028014000200fc0100000000000000000000000000000400130008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 4.045244612s ago: executing program 3 (id=172): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 3.579984595s ago: executing program 1 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) chdir(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 3.559054129s ago: executing program 5 (id=174): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408, &(0x7f0000000000), 0x26, 0x768, &(0x7f0000001300)="$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") chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.484352688s ago: executing program 2 (id=175): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r2 = syz_open_pts(r1, 0x141401) ioctl$TIOCCONS(r2, 0x541d) close_range(r0, 0xffffffffffffffff, 0x0) 3.386008278s ago: executing program 3 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be000000030c000800050086dd88"], 0x7a) 3.286695634s ago: executing program 4 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r0) 3.276208702s ago: executing program 1 (id=178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xad, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x1, 0x9f, 0x68, 0x0, 0xff, 0x6, 0x0, @multicast1, @empty, {[@generic={0x94, 0xa, "9b40f51983638a38"}, @ssrr={0x89, 0x17, 0x74, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x20, [@local, @loopback, @empty]}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0xa, 0x8, 0x0, 0x80, {[@mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0xc, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}]}}, {"3b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.064538536s ago: executing program 5 (id=179): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180)=""/98}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2.919591657s ago: executing program 4 (id=180): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000200)=0x2) 2.627255049s ago: executing program 4 (id=181): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) read$char_usb(r2, &(0x7f0000000180)=""/4096, 0x1000) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x103) 2.501870475s ago: executing program 2 (id=182): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 2.493564674s ago: executing program 3 (id=183): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x7d64884cba6ba51f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x30, 0x5, 0xc80f}, 0x10) 2.116423854s ago: executing program 1 (id=184): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.731708494s ago: executing program 2 (id=185): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.647576671s ago: executing program 4 (id=186): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618c, 0x0) 1.450405443s ago: executing program 3 (id=187): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1.450112964s ago: executing program 5 (id=188): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 1.356449298s ago: executing program 0 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) chdir(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 1.154591232s ago: executing program 1 (id=190): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000631803002c0012800b000100697036746e6c00001c00028014000200fc0100000000000000000000000000000400130008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 1.046840521s ago: executing program 0 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x3, 0x0, 0x5f, 0x3}) 908.502218ms ago: executing program 2 (id=192): r0 = gettid() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20020000) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 457.311625ms ago: executing program 5 (id=193): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0xe8241, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 225.219666ms ago: executing program 0 (id=194): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x4008af13, &(0x7f0000000380)) 0s ago: executing program 1 (id=195): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 86.134829][ T902] cfg80211: failed to load regulatory.db [ 88.210382][ T5598] cgroup: Unknown subsys name 'net' [ 88.356573][ T5598] cgroup: Unknown subsys name 'cpuset' [ 88.360865][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.978226][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.405022][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.415463][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.425829][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.427008][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.427384][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.428003][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.436209][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.438192][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.438925][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.441853][ T4926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.447459][ T4926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.457486][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.467408][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.468304][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.468537][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.490484][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.501589][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.502122][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.503353][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.504805][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.611929][ T4926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.613653][ T4926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.614830][ T4926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.617766][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.618493][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.629911][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.642611][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.643379][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.644531][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.645389][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.454519][ T4926] Bluetooth: hci0: command tx timeout [ 96.531654][ T4926] Bluetooth: hci3: command tx timeout [ 96.531805][ T4926] Bluetooth: hci2: command tx timeout [ 96.531906][ T4926] Bluetooth: hci1: command tx timeout [ 96.691497][ T5618] Bluetooth: hci5: command tx timeout [ 96.691582][ T4926] Bluetooth: hci4: command tx timeout [ 97.639312][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.639502][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.639899][ T5631] bridge_slave_0: entered allmulticast mode [ 97.642628][ T5631] bridge_slave_0: entered promiscuous mode [ 97.688982][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.689151][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.689293][ T5614] bridge_slave_0: entered allmulticast mode [ 97.691236][ T5614] bridge_slave_0: entered promiscuous mode [ 97.694648][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.694771][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.694926][ T5614] bridge_slave_1: entered allmulticast mode [ 97.697072][ T5614] bridge_slave_1: entered promiscuous mode [ 97.734322][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.734439][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.734668][ T5631] bridge_slave_1: entered allmulticast mode [ 97.737155][ T5631] bridge_slave_1: entered promiscuous mode [ 97.740148][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.740583][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.740739][ T5615] bridge_slave_0: entered allmulticast mode [ 97.743566][ T5615] bridge_slave_0: entered promiscuous mode [ 97.747777][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.747894][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.748043][ T5615] bridge_slave_1: entered allmulticast mode [ 97.750258][ T5615] bridge_slave_1: entered promiscuous mode [ 97.819591][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.819708][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.820358][ T5628] bridge_slave_0: entered allmulticast mode [ 97.824648][ T5628] bridge_slave_0: entered promiscuous mode [ 97.862191][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.862364][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.862481][ T5622] bridge_slave_0: entered allmulticast mode [ 97.864060][ T5622] bridge_slave_0: entered promiscuous mode [ 97.866054][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.866171][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.866827][ T5625] bridge_slave_0: entered allmulticast mode [ 97.869898][ T5625] bridge_slave_0: entered promiscuous mode [ 97.877586][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.877779][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.877898][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.878324][ T5628] bridge_slave_1: entered allmulticast mode [ 97.881822][ T5628] bridge_slave_1: entered promiscuous mode [ 97.905520][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.923599][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.923715][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.923865][ T5622] bridge_slave_1: entered allmulticast mode [ 97.927135][ T5622] bridge_slave_1: entered promiscuous mode [ 97.945801][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.945918][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.946603][ T5625] bridge_slave_1: entered allmulticast mode [ 97.949154][ T5625] bridge_slave_1: entered promiscuous mode [ 97.989027][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.027243][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.045150][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.094018][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.118405][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.121050][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.126606][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.149500][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.153327][ T5631] team0: Port device team_slave_0 added [ 98.171264][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.187413][ T5614] team0: Port device team_slave_0 added [ 98.204484][ T5631] team0: Port device team_slave_1 added [ 98.207289][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.246208][ T5614] team0: Port device team_slave_1 added [ 98.286322][ T5615] team0: Port device team_slave_0 added [ 98.288512][ T5625] team0: Port device team_slave_0 added [ 98.307058][ T5628] team0: Port device team_slave_0 added [ 98.335817][ T5615] team0: Port device team_slave_1 added [ 98.337948][ T5625] team0: Port device team_slave_1 added [ 98.356008][ T5628] team0: Port device team_slave_1 added [ 98.356933][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.356950][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.356984][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.360108][ T5622] team0: Port device team_slave_0 added [ 98.419628][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.419648][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.419688][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.467252][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.467271][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.467312][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.493712][ T5622] team0: Port device team_slave_1 added [ 98.512017][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.512039][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.512082][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.516486][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.516523][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.516572][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.517930][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.517950][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.517994][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.531961][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.531982][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.532025][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.541793][ T5618] Bluetooth: hci0: command tx timeout [ 98.546682][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.546703][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.546747][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.591079][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.591100][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.591144][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.611530][ T5618] Bluetooth: hci2: command tx timeout [ 98.611576][ T5618] Bluetooth: hci3: command tx timeout [ 98.617486][ T4926] Bluetooth: hci1: command tx timeout [ 98.620597][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.620618][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.620661][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.622360][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.622380][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.622423][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.636910][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.636931][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.636975][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.772090][ T4926] Bluetooth: hci4: command tx timeout [ 98.779507][ T4926] Bluetooth: hci5: command tx timeout [ 98.814662][ T5615] hsr_slave_0: entered promiscuous mode [ 98.816044][ T5615] hsr_slave_1: entered promiscuous mode [ 98.865732][ T5631] hsr_slave_0: entered promiscuous mode [ 98.866981][ T5631] hsr_slave_1: entered promiscuous mode [ 98.868013][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 98.868711][ T5631] Cannot create hsr debugfs directory [ 98.994118][ T5614] hsr_slave_0: entered promiscuous mode [ 98.995091][ T5614] hsr_slave_1: entered promiscuous mode [ 98.995706][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 98.995734][ T5614] Cannot create hsr debugfs directory [ 99.015105][ T5628] hsr_slave_0: entered promiscuous mode [ 99.016354][ T5628] hsr_slave_1: entered promiscuous mode [ 99.017299][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 99.017324][ T5628] Cannot create hsr debugfs directory [ 99.026430][ T5625] hsr_slave_0: entered promiscuous mode [ 99.028022][ T5625] hsr_slave_1: entered promiscuous mode [ 99.028939][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 99.028964][ T5625] Cannot create hsr debugfs directory [ 99.157203][ T5622] hsr_slave_0: entered promiscuous mode [ 99.158242][ T5622] hsr_slave_1: entered promiscuous mode [ 99.158892][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 99.158923][ T5622] Cannot create hsr debugfs directory [ 99.990561][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.011809][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.012983][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.028075][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.035451][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.048387][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.065690][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.070320][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.145765][ T5631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.152442][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.153599][ T5631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.172391][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.176121][ T5631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.188254][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.189605][ T5631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.197336][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.377195][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.381076][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.383257][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.395389][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.412309][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.417736][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.418897][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.434303][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.569730][ T5615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.586943][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.604870][ T5615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.610246][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.611968][ T4926] Bluetooth: hci0: command tx timeout [ 100.613087][ T5615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.629024][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.659668][ T5615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.667280][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.683723][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.692222][ T5618] Bluetooth: hci3: command tx timeout [ 100.692269][ T5618] Bluetooth: hci2: command tx timeout [ 100.692429][ T4926] Bluetooth: hci1: command tx timeout [ 100.718564][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.838956][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.839417][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.853304][ T4926] Bluetooth: hci5: command tx timeout [ 100.853349][ T4926] Bluetooth: hci4: command tx timeout [ 100.865928][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.878102][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.882690][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.896069][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.913245][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.918242][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.948778][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.960342][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.969106][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.969298][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.974752][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.974878][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.030117][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.030219][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.039470][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.039601][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.154102][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.157712][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.158588][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.163806][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.166424][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.196996][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.211610][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.225861][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.229444][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.317615][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.406383][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.406508][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.447060][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.447190][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.569495][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.764230][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.770869][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.803892][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.804026][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.904848][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.904998][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.963070][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.025890][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.026021][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.057295][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.057432][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.207234][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.353953][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.474883][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.475020][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.592593][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.592723][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.676605][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.693194][ T5616] Bluetooth: hci0: command tx timeout [ 102.772373][ T5616] Bluetooth: hci1: command tx timeout [ 102.772419][ T5616] Bluetooth: hci3: command tx timeout [ 102.785065][ T4926] Bluetooth: hci2: command tx timeout [ 102.927048][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.931954][ T5616] Bluetooth: hci4: command tx timeout [ 102.931996][ T5616] Bluetooth: hci5: command tx timeout [ 103.121138][ T5614] veth0_vlan: entered promiscuous mode [ 103.238724][ T5614] veth1_vlan: entered promiscuous mode [ 103.517370][ T5614] veth0_macvtap: entered promiscuous mode [ 103.563282][ T5614] veth1_macvtap: entered promiscuous mode [ 103.727355][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.815698][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.898133][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.023069][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.025485][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.025858][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.292220][ T1183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.332890][ T5628] veth0_vlan: entered promiscuous mode [ 104.354609][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.387634][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.406011][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.406038][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.451252][ T5628] veth1_vlan: entered promiscuous mode [ 104.505771][ T5631] veth0_vlan: entered promiscuous mode [ 104.519350][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.597004][ T5631] veth1_vlan: entered promiscuous mode [ 104.637848][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.637882][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.798335][ T5628] veth0_macvtap: entered promiscuous mode [ 104.809381][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.906914][ T5628] veth1_macvtap: entered promiscuous mode [ 104.908611][ T5625] veth0_vlan: entered promiscuous mode [ 104.940817][ T5631] veth0_macvtap: entered promiscuous mode [ 104.960332][ T5631] veth1_macvtap: entered promiscuous mode [ 104.981175][ T5622] veth0_vlan: entered promiscuous mode [ 105.038084][ T5625] veth1_vlan: entered promiscuous mode [ 105.079303][ T5622] veth1_vlan: entered promiscuous mode [ 105.120476][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.129150][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.175070][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.187372][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.269025][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 105.296767][ T5625] veth0_macvtap: entered promiscuous mode [ 105.321525][ T86] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.321601][ T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.321667][ T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.321730][ T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.374500][ T1356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.377347][ T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.377518][ T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.377580][ T86] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.378733][ T5622] veth0_macvtap: entered promiscuous mode [ 105.390292][ T5625] veth1_macvtap: entered promiscuous mode [ 105.401204][ T5615] veth0_vlan: entered promiscuous mode [ 105.462072][ T5615] veth1_vlan: entered promiscuous mode [ 105.487859][ T5622] veth1_macvtap: entered promiscuous mode [ 105.599898][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.641215][ T1356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.641247][ T1356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.650169][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.674361][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.703301][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.818786][ T1183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.818861][ T1183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.822162][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.822188][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.851494][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.862150][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.862218][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.862279][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.862339][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.862399][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.913865][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.913896][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.946399][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.946432][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.948322][ T5615] veth0_macvtap: entered promiscuous mode [ 106.087261][ T5615] veth1_macvtap: entered promiscuous mode [ 106.275063][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.349830][ T5856] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 106.386801][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.467151][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.494578][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.513216][ T5856] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 106.516021][ T5856] bond0 (unregistering): Released all slaves [ 106.559922][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.559951][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.659974][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.660002][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.823461][ T1183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.909320][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.909347][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.963341][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.132017][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.192776][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.192814][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.209471][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.445537][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.445573][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.714994][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.715032][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.061087][ T5870] loop3: detected capacity change from 0 to 256 [ 108.105948][ T5870] ======================================================= [ 108.105948][ T5870] WARNING: The mand mount option has been deprecated and [ 108.105948][ T5870] and is ignored by this kernel. Remove the mand [ 108.105948][ T5870] option from the mount to silence this warning. [ 108.105948][ T5870] ======================================================= [ 108.344681][ T5870] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 109.238180][ T5882] loop1: detected capacity change from 0 to 2048 [ 109.525098][ T5887] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.690955][ T31] audit: type=1800 audit(1789991922.230:2): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 109.749976][ T31] audit: type=1804 audit(1789991922.290:3): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.16" name="/newroot/1/file2/file1" dev="loop1" ino=15 res=1 errno=0 [ 110.042612][ T5896] loop3: detected capacity change from 0 to 16 [ 110.203712][ T5896] erofs (device loop3): mounted with root inode @ nid 36. [ 111.689668][ T5897] loop2: detected capacity change from 0 to 32768 [ 111.712086][ T5780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.901637][ T5897] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.911973][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 111.916590][ T5780] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.943983][ T5780] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.944031][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.944083][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.944127][ T5780] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.944193][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.382466][ T5780] usb 2-1: GET_CAPABILITIES returned 0 [ 112.382529][ T5780] usbtmc 2-1:16.0: can't read capabilities [ 112.726864][ T5897] XFS (loop2): Ending clean mount [ 112.787965][ T5594] usb 2-1: USB disconnect, device number 2 [ 112.853863][ T5780] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.879732][ T5897] XFS (loop2): Quotacheck needed: Please wait. [ 112.949285][ T5963] loop3: detected capacity change from 0 to 512 [ 112.965444][ T5963] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.965472][ T5963] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.965493][ T5963] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.035279][ T5897] XFS (loop2): Quotacheck: Done. [ 113.048558][ T5780] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 113.052187][ T5780] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.052253][ T5780] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.052293][ T5780] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 113.052336][ T5780] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.055081][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.055118][ T5780] usb 6-1: Product: syz [ 113.055144][ T5780] usb 6-1: Manufacturer: syz [ 113.055170][ T5780] usb 6-1: SerialNumber: syz [ 113.089502][ T5963] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.31: bad orphan inode 131083 [ 113.089681][ T5963] loop3: lost filesystem error report for type 5 error -117 [ 113.093167][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 113.093197][ C0] EXT4-fs (loop3): initial error at time 1789991925: ext4_orphan_get:1429 [ 113.093234][ C0] EXT4-fs (loop3): last error at time 1789991925: ext4_orphan_get:1429 [ 113.132870][ T5780] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 113.132906][ T5780] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 113.132963][ T5780] usbserial_generic 6-1:1.0: generic converter detected [ 113.155356][ T5963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.229671][ T5780] usb 6-1: generic converter now attached to ttyUSB0 [ 113.303474][ T5963] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 113.387354][ T5963] EXT4-fs (loop3): shut down requested (1) [ 113.454592][ T5625] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.464925][ T5780] usb 6-1: USB disconnect, device number 2 [ 113.687493][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.745639][ T5780] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 113.746523][ T5780] usbserial_generic 6-1:1.0: device disconnected [ 113.961017][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 114.042112][ T5880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.198181][ T5880] usb 2-1: New USB device found, idVendor=0a0c, idProduct=100b, bcdDevice= 0.40 [ 114.201746][ T5880] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 114.201783][ T5880] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 114.224929][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.224972][ T5880] usb 2-1: Product: syz [ 114.224999][ T5880] usb 2-1: Manufacturer: syz [ 114.225025][ T5880] usb 2-1: SerialNumber: syz [ 114.528657][ T5991] loop5: detected capacity change from 0 to 512 [ 114.536333][ T5880] usb 2-1: USB disconnect, device number 3 [ 114.565886][ T5991] EXT4-fs: Ignoring removed i_version option [ 114.565951][ T5991] EXT4-fs: Ignoring removed oldalloc option [ 114.614109][ T5991] EXT4-fs (loop5): Test dummy encryption mode enabled [ 114.701646][ T5991] EXT4-fs (loop5): 1 truncate cleaned up [ 114.732190][ T5991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.750834][ T5999] blk-mq: reduced tag depth (128 -> 64) [ 115.012682][ T1213] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.074683][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.119990][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 115.166344][ T1213] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 115.168089][ T1213] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 115.168133][ T1213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.195284][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.195330][ T1213] usb 1-1: Product: syz [ 115.195356][ T1213] usb 1-1: Manufacturer: syz [ 115.195383][ T1213] usb 1-1: SerialNumber: syz [ 115.293294][ T5594] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.294592][ T25] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 115.296188][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.296263][ T25] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.296363][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.341249][ T1213] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 115.462827][ T5594] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.471151][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.471229][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.471269][ T5594] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.471429][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.485820][ T6007] FAULT_INJECTION: forcing a failure. [ 115.485820][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 115.485871][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.5.48 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.485926][ T6007] Tainted: [L]=SOFTLOCKUP [ 115.485940][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 115.485962][ T6007] Call Trace: [ 115.485975][ T6007] [ 115.485990][ T6007] dump_stack_lvl+0x100/0x190 [ 115.486049][ T6007] should_fail_ex.cold+0x5/0xa [ 115.486093][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.486146][ T6007] should_failslab+0xc2/0x120 [ 115.486186][ T6007] __kmalloc_cache_noprof+0x91/0x6d0 [ 115.486239][ T6007] ? sctp_stream_init_ext+0x4e/0x1b0 [ 115.486291][ T6007] sctp_stream_init_ext+0x4e/0x1b0 [ 115.486336][ T6007] sctp_sendmsg_to_asoc+0x1748/0x1c50 [ 115.486385][ T6007] ? __asan_memcpy+0x3c/0x60 [ 115.486438][ T6007] ? sctp_assoc_set_primary+0x276/0x310 [ 115.486490][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.486535][ T6007] ? sctp_assoc_add_peer+0x256/0x1550 [ 115.486603][ T6007] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 115.486650][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.486695][ T6007] ? sctp_connect_new_asoc+0x41e/0x770 [ 115.486754][ T6007] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 115.486816][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.486864][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.486909][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.486963][ T6007] sctp_sendmsg+0x1144/0x22e0 [ 115.487030][ T6007] ? __pfx_sctp_sendmsg+0x10/0x10 [ 115.487087][ T6007] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 115.487130][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.487184][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.487229][ T6007] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 115.487287][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.487333][ T6007] ? aa_sock_msg_perm+0x11e/0x200 [ 115.487385][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.487432][ T6007] ? __pfx_sctp_sendmsg+0x10/0x10 [ 115.487490][ T6007] inet_sendmsg+0x11c/0x140 [ 115.487537][ T6007] ____sys_sendmsg+0x9c9/0xbe0 [ 115.487583][ T6007] ? __pfx_inet_sendmsg+0x10/0x10 [ 115.487631][ T6007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.487681][ T6007] ? futex_unqueue+0x133/0x2c0 [ 115.487725][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.487784][ T6007] ___sys_sendmsg+0x190/0x1e0 [ 115.487832][ T6007] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.487876][ T6007] ? __pfx___futex_wait+0x10/0x10 [ 115.487932][ T6007] ? __pfx_try_to_wake_up+0x10/0x10 [ 115.487974][ T6007] ? futex_hash+0x311/0x400 [ 115.488033][ T6007] ? __fget_files+0x34/0x3d0 [ 115.488071][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.488150][ T6007] __sys_sendmmsg+0x20c/0x440 [ 115.488215][ T6007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.488272][ T6007] ? file_init_path+0x48e/0x670 [ 115.488327][ T6007] ? __pfx_do_futex+0x10/0x10 [ 115.488397][ T6007] ? __sys_socket+0xac/0x260 [ 115.488442][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.488488][ T6007] ? xfd_validate_state+0x129/0x190 [ 115.488540][ T6007] __x64_sys_sendmmsg+0x9c/0x100 [ 115.488604][ T6007] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.488650][ T6007] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.488691][ T6007] do_syscall_64+0x123/0x790 [ 115.488736][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.488777][ T6007] RIP: 0033:0x7f113079e159 [ 115.488807][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.488844][ T6007] RSP: 002b:00007f1131628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.488881][ T6007] RAX: ffffffffffffffda RBX: 00007f1130a25fa0 RCX: 00007f113079e159 [ 115.488907][ T6007] RDX: 0000000000000001 RSI: 0000200000000e80 RDI: 0000000000000004 [ 115.488931][ T6007] RBP: 00007f113083506b R08: 0000000000000000 R09: 0000000000000000 [ 115.488955][ T6007] R10: 0000000020040055 R11: 0000000000000246 R12: 0000000000000000 [ 115.488979][ T6007] R13: 00007f1130a26038 R14: 00007f1130a25fa0 R15: 00007ffd05370518 [ 115.489031][ T6007] [ 115.729013][ T4962] bcm5974 1-1:1.0: could not read from device [ 115.783669][ T1213] bcm5974 1-1:1.0: could not read from device [ 115.870661][ T4962] bcm5974 1-1:1.0: could not read from device [ 115.923336][ T6013] loop3: detected capacity change from 0 to 512 [ 115.937655][ T1213] input: failed to attach handler mousedev to device input5, error: -5 [ 115.948190][ T5594] usb 5-1: config 0 descriptor?? [ 115.979876][ T6013] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.989634][ T4962] bcm5974 1-1:1.0: could not read from device [ 115.998720][ T1213] usb 1-1: USB disconnect, device number 2 [ 116.007413][ T6013] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.50: invalid indirect mapped block 9 (level 0) [ 116.015607][ T4962] bcm5974 1-1:1.0: could not read from device [ 116.024730][ T6013] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.031839][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 116.031873][ C0] EXT4-fs (loop3): initial error at time 1789991928: ext4_free_branches:1020: inode 11 [ 116.031920][ C0] EXT4-fs (loop3): last error at time 1789991928: ext4_free_branches:1020: inode 11 [ 116.043610][ T6013] EXT4-fs (loop3): 1 truncate cleaned up [ 116.057382][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.072032][ T5780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.131447][ T25] dvb_ttusb_budget: ttusb_init_controller: error [ 116.131523][ T25] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 116.205355][ T6018] loop5: detected capacity change from 0 to 64 [ 116.224496][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 116.233711][ T5780] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 116.253986][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.254037][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.254075][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.254137][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.305668][ T5780] usb 2-1: config 0 descriptor?? [ 116.516366][ T25] DVB: Unable to find symbol stv0299_attach() [ 116.546438][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.550896][ T6020] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 116.598341][ T5594] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 116.911249][ T25] DVB: Unable to find symbol tda8083_attach() [ 116.911274][ T25] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 116.953774][ T25] usb 3-1: USB disconnect, device number 2 [ 117.577121][ T5780] sony 0003:054C:042F.0002: can't set operational mode: step 2 [ 117.577194][ T5780] sony 0003:054C:042F.0002: Failed to set controller into operational mode [ 117.588382][ T5780] sony 0003:054C:042F.0002: hidraw1: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 117.588437][ T5780] sony 0003:054C:042F.0002: failed to claim input [ 117.608400][ T5780] usb 2-1: USB disconnect, device number 4 [ 117.946269][ T6039] fido_id[6039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 118.580314][ T5880] usb 5-1: USB disconnect, device number 2 [ 118.633554][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 118.634008][ T6054] FAULT_INJECTION: forcing a failure. [ 118.634008][ T6054] name failslab, interval 1, probability 0, space 0, times 0 [ 118.634058][ T6054] CPU: 0 UID: 0 PID: 6054 Comm: syz.0.60 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.634117][ T6054] Tainted: [L]=SOFTLOCKUP [ 118.634130][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 118.634152][ T6054] Call Trace: [ 118.634163][ T6054] [ 118.634177][ T6054] dump_stack_lvl+0x100/0x190 [ 118.634237][ T6054] should_fail_ex.cold+0x5/0xa [ 118.634281][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.634334][ T6054] should_failslab+0xc2/0x120 [ 118.634377][ T6054] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 118.634440][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.634488][ T6054] ? kernel_text_address+0x8d/0x100 [ 118.634550][ T6054] ? kstrdup_const+0x63/0x80 [ 118.634612][ T6054] kstrdup+0x51/0xe0 [ 118.634663][ T6054] kstrdup_const+0x63/0x80 [ 118.634713][ T6054] __kernfs_new_node+0x9b/0xa10 [ 118.634764][ T6054] ? mark_held_locks+0x40/0x70 [ 118.634803][ T6054] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.634881][ T6054] ? __pfx___kernfs_new_node+0x10/0x10 [ 118.634940][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.634988][ T6054] ? lock_acquire+0x1d1/0x380 [ 118.635026][ T6054] ? kernfs_root+0x23/0x2a0 [ 118.635075][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.635122][ T6054] ? find_held_lock+0x2b/0x80 [ 118.635175][ T6054] ? kernfs_root+0xee/0x2a0 [ 118.635217][ T6054] ? kernfs_root+0xee/0x2a0 [ 118.635255][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.635314][ T6054] kernfs_create_dir_ns+0xa6/0x2b0 [ 118.635377][ T6054] sysfs_create_dir_ns+0x13a/0x2b0 [ 118.635421][ T6054] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 118.635462][ T6054] ? find_held_lock+0x2b/0x80 [ 118.635516][ T6054] ? kobject_add_internal+0x25f/0x930 [ 118.635570][ T6054] ? kobject_add_internal+0x25f/0x930 [ 118.635627][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.635696][ T6054] ? class_dir_child_ns_type+0xd/0x60 [ 118.635766][ T6054] kobject_add_internal+0x2c8/0x930 [ 118.635829][ T6054] kobject_add+0x16a/0x1e0 [ 118.635883][ T6054] ? __pfx_kobject_add+0x10/0x10 [ 118.635938][ T6054] ? get_device_parent+0x1b3/0x4c0 [ 118.635995][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.636047][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.636096][ T6054] ? kobject_put+0xb9/0x640 [ 118.636154][ T6054] device_add+0x294/0x1970 [ 118.636188][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.636234][ T6054] ? __pfx_device_add+0x10/0x10 [ 118.636265][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.636308][ T6054] ? kfree+0x1e5/0x6d0 [ 118.636365][ T6054] device_create_groups_vargs+0x1f8/0x270 [ 118.636408][ T6054] device_create+0xed/0x130 [ 118.636444][ T6054] ? __pfx_device_create+0x10/0x10 [ 118.636476][ T6054] ? lockdep_init_map_type+0x5c/0x250 [ 118.636516][ T6054] ? timer_init_key+0x150/0x310 [ 118.636559][ T6054] ? ieee80211_roc_setup+0x136/0x270 [ 118.636614][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.636657][ T6054] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 118.636705][ T6054] mac80211_hwsim_new_radio+0x37c/0x6510 [ 118.636767][ T6054] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 118.636839][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.636881][ T6054] ? rcu_is_watching+0x13/0xc0 [ 118.636927][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.636970][ T6054] ? do_trace_netlink_extack+0x72/0x1e0 [ 118.637010][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.637053][ T6054] ? __nla_validate_parse+0x1e7/0x28b0 [ 118.637101][ T6054] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 118.637176][ T6054] hwsim_new_radio_nl+0xc6b/0x13f0 [ 118.637240][ T6054] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.637312][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.637359][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.637405][ T6054] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 118.637481][ T6054] genl_family_rcv_msg_doit+0x214/0x300 [ 118.637548][ T6054] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 118.637608][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.637656][ T6054] ? genl_get_cmd+0x3e7/0x760 [ 118.637725][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.637773][ T6054] ? security_capable+0x80/0x260 [ 118.637827][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.637874][ T6054] ? ns_capable+0xd2/0xf0 [ 118.637943][ T6054] genl_rcv_msg+0x560/0x800 [ 118.638005][ T6054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.638059][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.638171][ T6054] ? __lock_acquire+0x5c0/0x1f40 [ 118.638207][ T6054] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.638276][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.638327][ T6054] netlink_rcv_skb+0x159/0x420 [ 118.638378][ T6054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.638437][ T6054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.638505][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.638549][ T6054] ? netlink_deliver_tap+0x1ae/0xcc0 [ 118.638603][ T6054] genl_rcv+0x28/0x40 [ 118.638654][ T6054] netlink_unicast+0x585/0x850 [ 118.638711][ T6054] ? __pfx_netlink_unicast+0x10/0x10 [ 118.638774][ T6054] netlink_sendmsg+0x8b0/0xda0 [ 118.638831][ T6054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.638887][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.638930][ T6054] ? apparmor_socket_sendmsg+0x165/0x280 [ 118.638989][ T6054] ____sys_sendmsg+0xa4d/0xbe0 [ 118.639027][ T6054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.639086][ T6054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.639147][ T6054] ___sys_sendmsg+0x190/0x1e0 [ 118.639192][ T6054] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.639234][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.639277][ T6054] ? futex_wait+0x11e/0x370 [ 118.639348][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.639391][ T6054] ? find_held_lock+0x2b/0x80 [ 118.639468][ T6054] __sys_sendmsg+0x160/0x210 [ 118.639523][ T6054] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.639593][ T6054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.639644][ T6054] do_syscall_64+0x123/0x790 [ 118.639686][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.639723][ T6054] RIP: 0033:0x7fbf6419e159 [ 118.639752][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.639786][ T6054] RSP: 002b:00007fbf6507e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.639821][ T6054] RAX: ffffffffffffffda RBX: 00007fbf64425fa0 RCX: 00007fbf6419e159 [ 118.639845][ T6054] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 118.639867][ T6054] RBP: 00007fbf6423506b R08: 0000000000000000 R09: 0000000000000000 [ 118.639890][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.639912][ T6054] R13: 00007fbf64426038 R14: 00007fbf64425fa0 R15: 00007ffe8de3a018 [ 118.639959][ T6054] [ 118.691223][ T6054] kobject: kobject_add_internal failed for hwsim14 (error: -12 parent: mac80211_hwsim) [ 118.991807][ T6058] loop4: detected capacity change from 0 to 512 [ 119.184354][ T20] MTRR: CPU 0: Writing MSR 202 to 2002:0 failed [ 119.184403][ T23] MTRR: CPU 1: Writing MSR 202 to 2002:0 failed [ 119.451439][ T1213] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.601667][ T1213] usb 3-1: Using ep0 maxpacket: 16 [ 119.859713][ T1213] usb 3-1: unable to get BOS descriptor or descriptor too short [ 119.859781][ T1213] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 119.862331][ T1213] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 119.862380][ T1213] usb 3-1: can't read configurations, error -71 [ 120.089029][ T6072] bridge0: port 3(erspan0) entered blocking state [ 120.089185][ T6072] bridge0: port 3(erspan0) entered disabled state [ 120.107865][ T6072] erspan0: entered allmulticast mode [ 120.125738][ T6072] erspan0: entered promiscuous mode [ 120.133981][ T6072] bridge0: port 3(erspan0) entered blocking state [ 120.134554][ T6072] bridge0: port 3(erspan0) entered forwarding state [ 120.146387][ T6074] erspan0: left allmulticast mode [ 120.146421][ T6074] erspan0: left promiscuous mode [ 120.147304][ T6074] bridge0: port 3(erspan0) entered disabled state [ 120.422808][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.473860][ T5780] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.571360][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 120.573969][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 120.574023][ T10] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 120.581133][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.588542][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.599130][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.600413][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.611919][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.613307][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.623698][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.634098][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.644177][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 120.644215][ T10] usb 2-1: SerialNumber: syz [ 120.655718][ T5780] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.655773][ T5780] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 120.663892][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.663927][ T5780] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.663988][ T5780] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 120.664043][ T5780] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 120.664110][ T5780] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 120.664174][ T5780] usb 4-1: config 1 interface 1 has no altsetting 0 [ 120.678342][ T10] usb 2-1: config 0 descriptor?? [ 120.780582][ T5780] usb 4-1: string descriptor 0 read error: -22 [ 120.780743][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.920302][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 121.041097][ T6075] input: syz0 as /devices/virtual/input/input8 [ 121.180329][ T4962] bcm5974 2-1:0.0: could not read from device [ 121.230120][ T4962] bcm5974 2-1:0.0: could not read from device [ 121.231023][ T10] usb 2-1: USB disconnect, device number 5 [ 121.566417][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.567563][ T6070] loop0: detected capacity change from 0 to 32768 [ 121.624382][ T6070] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 121.694420][ T6070] XFS (loop0): Ending clean mount [ 121.989176][ T5628] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 122.060032][ T5780] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 122.191424][ T5763] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.353062][ T5763] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 122.356757][ T5763] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 122.361257][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.361441][ T5763] usb 5-1: Product: syz [ 122.361469][ T5763] usb 5-1: Manufacturer: syz [ 122.361496][ T5763] usb 5-1: SerialNumber: syz [ 122.446113][ T6096] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.593909][ T5594] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 122.605300][ T5780] usb 4-1: USB disconnect, device number 2 [ 122.744036][ T5594] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 122.746926][ T5594] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.747031][ T5594] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.747095][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.937728][ T5763] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 123.150405][ T5594] dvb_ttusb_budget: ttusb_init_controller: error [ 123.150429][ T5594] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 123.546232][ T5594] DVB: Unable to find symbol stv0299_attach() [ 123.734599][ T6120] loop0: detected capacity change from 0 to 512 [ 123.872687][ T5594] DVB: Unable to find symbol tda8083_attach() [ 123.872711][ T5594] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 123.905128][ T6120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.905293][ T6120] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.946141][ T5594] usb 3-1: USB disconnect, device number 5 [ 124.221730][ T6138] af_packet: packet size is too long (65578 > 2016) [ 124.337213][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.087487][ T5752] usb 5-1: USB disconnect, device number 3 [ 125.216194][ T6140] loop3: detected capacity change from 0 to 32768 [ 125.216620][ T5752] usblp0: removed [ 125.342763][ T6140] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.463733][ T6151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.537377][ T6140] XFS (loop3): Ending clean mount [ 125.552833][ T902] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.691648][ T5752] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.712523][ T6168] XFS (loop3): User initiated shutdown received. [ 125.713237][ T6168] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:467). Shutting down filesystem. [ 125.713362][ T6168] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 125.756613][ T902] usb 3-1: Using ep0 maxpacket: 16 [ 125.772943][ T902] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 125.773048][ T902] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 125.792643][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.838280][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.839883][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.847666][ T5752] usb 5-1: Using ep0 maxpacket: 16 [ 125.852532][ T5752] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 125.868567][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.873198][ T5752] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.873256][ T5752] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.873298][ T5752] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.873350][ T5752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.889539][ T5752] usb 5-1: config 0 descriptor?? [ 125.909528][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.930702][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.979931][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.994194][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.997281][ T902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 125.997327][ T902] usb 3-1: SerialNumber: syz [ 126.030407][ T902] usb 3-1: config 0 descriptor?? [ 126.053483][ T902] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 126.155404][ T5614] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.268221][ T6165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.427262][ T5752] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 126.427310][ T5752] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 126.427346][ T5752] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 126.427416][ T5752] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 126.427453][ T5752] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 126.435212][ T6152] input: syz0 as /devices/virtual/input/input10 [ 126.439919][ T5752] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 126.762227][ T4962] bcm5974 3-1:0.0: could not read from device [ 126.781221][ T4962] bcm5974 3-1:0.0: could not read from device [ 126.798251][ T902] usb 3-1: USB disconnect, device number 6 [ 126.986951][ T5752] usb 5-1: USB disconnect, device number 4 [ 127.734348][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.800611][ T6198] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 127.805029][ T6197] loop3: detected capacity change from 0 to 512 [ 127.854633][ T6197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.854763][ T6197] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.885968][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 127.887353][ T10] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 127.887392][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.892526][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.892564][ T10] usb 5-1: Product: syz [ 127.892590][ T10] usb 5-1: Manufacturer: syz [ 127.892616][ T10] usb 5-1: SerialNumber: syz [ 127.948652][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 128.030086][ T6198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.094379][ T6198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.133289][ T6198] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 128.169882][ T6198] bond0 (unregistering): Released all slaves [ 128.291203][ T4962] bcm5974 5-1:1.0: could not read from device [ 128.317555][ T10] bcm5974 5-1:1.0: could not read from device [ 128.324061][ T4962] bcm5974 5-1:1.0: could not read from device [ 128.364628][ T10] input: failed to attach handler mousedev to device input11, error: -5 [ 128.386083][ T4962] bcm5974 5-1:1.0: could not read from device [ 128.390440][ T4962] bcm5974 5-1:1.0: could not read from device [ 128.424221][ T10] usb 5-1: USB disconnect, device number 5 [ 128.521389][ T5763] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.261430][ T5763] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 129.262993][ T5763] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 129.265776][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.265816][ T5763] usb 3-1: Product: syz [ 129.265843][ T5763] usb 3-1: Manufacturer: syz [ 129.265870][ T5763] usb 3-1: SerialNumber: syz [ 129.305349][ T6207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 129.652118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.771332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.931376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 129.951336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 130.601328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.931329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.951320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.001320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.201369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 131.251328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.186151][ T1183] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 132.215961][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.223225][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.227060][ T1183] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 132.227105][ T1183] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.227105][ T1183] [ 132.227130][ T1183] EXT4-fs (loop3): Total free blocks count 0 [ 132.227185][ T1183] EXT4-fs (loop3): Free/Dirty block details [ 132.227222][ T1183] EXT4-fs (loop3): free_blocks=65280 [ 132.227258][ T1183] EXT4-fs (loop3): dirty_blocks=4095 [ 132.227281][ T1183] EXT4-fs (loop3): Block reservation details [ 132.227329][ T1183] EXT4-fs (loop3): i_reserved_data_blocks=4095 [ 132.399455][ T5763] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 132.418290][ T5763] usb 3-1: USB disconnect, device number 7 [ 132.439273][ T5763] usblp0: removed [ 132.615955][ T1183] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 67586 with max blocks 2046 with error 28 [ 132.747784][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 132.815071][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 132.815261][ T6227] Zero length message leads to an empty skb [ 132.822013][ T38] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.822078][ T38] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.822137][ T38] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.831770][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.916393][ T5614] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 133.014877][ T6229] loop2: detected capacity change from 0 to 164 [ 133.100480][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.219240][ T5614] EXT4-fs: 7 callbacks suppressed [ 133.219271][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.738136][ T6235] binder: 6233:6235 ioctl c0306201 200000000080 returned -14 [ 133.800389][ T6235] binder: 6233:6235 ioctl c0306201 2000000003c0 returned -14 [ 133.929101][ T6224] loop5: detected capacity change from 0 to 32768 [ 133.931406][ T1213] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.992747][ T6224] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.081415][ T1213] usb 4-1: Using ep0 maxpacket: 16 [ 134.086096][ T1213] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 134.086155][ T1213] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 134.087640][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.089047][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.090344][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.095313][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.107593][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.117179][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.120211][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.125512][ T1213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.127213][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 134.127251][ T1213] usb 4-1: SerialNumber: syz [ 134.161467][ T1213] usb 4-1: config 0 descriptor?? [ 134.223636][ T1213] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 134.282533][ T6224] XFS (loop5): Ending clean mount [ 134.480659][ T6236] input: syz0 as /devices/virtual/input/input13 [ 134.489977][ T6253] evm: overlay not supported [ 134.572468][ T6254] overlay: filesystem on ./file0 not supported as upperdir [ 134.640592][ T4962] bcm5974 4-1:0.0: could not read from device [ 134.769404][ T6260] FAULT_INJECTION: forcing a failure. [ 134.769404][ T6260] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 134.769465][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz.0.115 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.769520][ T6260] Tainted: [L]=SOFTLOCKUP [ 134.769534][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 134.769555][ T6260] Call Trace: [ 134.769567][ T6260] [ 134.769581][ T6260] dump_stack_lvl+0x100/0x190 [ 134.769640][ T6260] should_fail_ex.cold+0x5/0xa [ 134.769687][ T6260] ? prepare_alloc_pages+0x16d/0x5b0 [ 134.769731][ T6260] should_fail_alloc_page+0xeb/0x140 [ 134.769774][ T6260] prepare_alloc_pages+0x1f0/0x5b0 [ 134.769812][ T6260] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 134.769861][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.769915][ T6260] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 134.769978][ T6260] ? __entry_text_end+0x102036/0x102039 [ 134.770023][ T6260] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.770078][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770124][ T6260] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.770190][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770237][ T6260] ? rcu_is_watching+0x13/0xc0 [ 134.770286][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770332][ T6260] ? trace_hrtimer_start+0x77/0x220 [ 134.770386][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770435][ T6260] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 134.770496][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770543][ T6260] ? hrtimer_reprogram+0x165/0x6c0 [ 134.770593][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770639][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770685][ T6260] ? find_held_lock+0x2b/0x80 [ 134.770736][ T6260] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 134.770781][ T6260] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 134.770823][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770871][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.770917][ T6260] ? rcu_is_watching+0x13/0xc0 [ 134.770966][ T6260] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 134.771009][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.771063][ T6260] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.771100][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.771150][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.771195][ T6260] ? rcu_is_watching+0x13/0xc0 [ 134.771243][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.771287][ T6260] ? trace_sched_exit_tp+0x120/0x160 [ 134.771343][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.771390][ T6260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.771435][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.771481][ T6260] ? policy_nodemask+0xed/0x4f0 [ 134.771527][ T6260] alloc_pages_mpol+0x201/0x550 [ 134.771572][ T6260] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 134.771617][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.771663][ T6260] ? lock_acquire+0x1d1/0x380 [ 134.771707][ T6260] alloc_pages_noprof+0x1a/0x160 [ 134.771757][ T6260] anon_pipe_prefill_and_lock+0x102/0x580 [ 134.771805][ T6260] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 134.771859][ T6260] ? __pfx_aa_file_perm+0x10/0x10 [ 134.771913][ T6260] anon_pipe_write+0x164/0x1b50 [ 134.771952][ T6260] ? find_held_lock+0x2b/0x80 [ 134.772003][ T6260] ? futex_wake+0x4ea/0x5e0 [ 134.772068][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.772123][ T6260] ? __pfx_anon_pipe_write+0x10/0x10 [ 134.772158][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.772202][ T6260] ? common_file_perm+0x266/0x500 [ 134.772266][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.772311][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.772357][ T6260] ? security_file_permission+0x76/0x210 [ 134.772396][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.772442][ T6260] ? rw_verify_area+0xce/0x6d0 [ 134.772497][ T6260] vfs_write+0x6af/0x1050 [ 134.772553][ T6260] ? __pfx_anon_pipe_write+0x10/0x10 [ 134.772595][ T6260] ? __pfx_vfs_write+0x10/0x10 [ 134.772648][ T6260] ? find_held_lock+0x2b/0x80 [ 134.772732][ T6260] ksys_write+0x1f8/0x250 [ 134.772787][ T6260] ? __pfx_ksys_write+0x10/0x10 [ 134.772848][ T6260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.772904][ T6260] do_syscall_64+0x123/0x790 [ 134.772950][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.772990][ T6260] RIP: 0033:0x7fbf6419e159 [ 134.773020][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.773064][ T6260] RSP: 002b:00007fbf6507e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.773101][ T6260] RAX: ffffffffffffffda RBX: 00007fbf64425fa0 RCX: 00007fbf6419e159 [ 134.773127][ T6260] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004 [ 134.773151][ T6260] RBP: 00007fbf6423506b R08: 0000000000000000 R09: 0000000000000000 [ 134.773175][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.773198][ T6260] R13: 00007fbf64426038 R14: 00007fbf64425fa0 R15: 00007ffe8de3a018 [ 134.773249][ T6260] [ 134.939069][ T4962] bcm5974 4-1:0.0: could not read from device [ 134.951094][ T5615] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.980762][ T1213] usb 4-1: USB disconnect, device number 3 [ 134.987981][ T4962] bcm5974 4-1:0.0: could not read from device [ 136.056236][ T6279] input: syz1 as /devices/virtual/input/input14 [ 136.094982][ T6286] loop1: detected capacity change from 0 to 512 [ 136.304789][ T6286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.304929][ T6286] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.677802][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.898107][ T6305] bond0: (slave ip6tnl1): refused to change device type [ 137.532394][ T6323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.012771][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.058363][ T6331] FAULT_INJECTION: forcing a failure. [ 138.058363][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 138.058419][ T6331] CPU: 1 UID: 0 PID: 6331 Comm: syz.1.133 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.058473][ T6331] Tainted: [L]=SOFTLOCKUP [ 138.058487][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 138.058510][ T6331] Call Trace: [ 138.058523][ T6331] [ 138.058538][ T6331] dump_stack_lvl+0x100/0x190 [ 138.058610][ T6331] should_fail_ex.cold+0x5/0xa [ 138.058653][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.058706][ T6331] should_failslab+0xc2/0x120 [ 138.058747][ T6331] __kvmalloc_node_noprof+0x113/0x9b0 [ 138.058810][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.058857][ T6331] ? vmemdup_user+0x2a/0xe0 [ 138.058918][ T6331] vmemdup_user+0x2a/0xe0 [ 138.058970][ T6331] __sys_bpf+0x3195/0x4a30 [ 138.059038][ T6331] ? __pfx___sys_bpf+0x10/0x10 [ 138.059089][ T6331] ? find_held_lock+0x2b/0x80 [ 138.059142][ T6331] ? futex_wake+0x4ea/0x5e0 [ 138.059201][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059250][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059322][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059370][ T6331] ? rcu_read_lock_any_held+0x6a/0x90 [ 138.059428][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059477][ T6331] ? find_held_lock+0x2b/0x80 [ 138.059531][ T6331] ? ksys_write+0x190/0x250 [ 138.059596][ T6331] ? ksys_write+0x190/0x250 [ 138.059656][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059726][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059772][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059819][ T6331] ? __x64_sys_futex+0x358/0x4d0 [ 138.059871][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059919][ T6331] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.059965][ T6331] ? xfd_validate_state+0x129/0x190 [ 138.060011][ T6331] ? __x64_sys_bpf+0xce/0x140 [ 138.060066][ T6331] __x64_sys_bpf+0xce/0x140 [ 138.060125][ T6331] ? do_syscall_64+0xae/0x790 [ 138.060169][ T6331] do_syscall_64+0x123/0x790 [ 138.060213][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.060252][ T6331] RIP: 0033:0x7fc4b679e159 [ 138.060282][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.060319][ T6331] RSP: 002b:00007fc4b76b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.060355][ T6331] RAX: ffffffffffffffda RBX: 00007fc4b6a25fa0 RCX: 00007fc4b679e159 [ 138.060381][ T6331] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 138.060405][ T6331] RBP: 00007fc4b683506b R08: 0000000000000000 R09: 0000000000000000 [ 138.060429][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.060452][ T6331] R13: 00007fc4b6a26038 R14: 00007fc4b6a25fa0 R15: 00007ffd2ef0f328 [ 138.060503][ T6331] [ 138.106655][ T6315] loop3: detected capacity change from 0 to 32768 [ 138.185284][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.223678][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.223721][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 138.223759][ T25] usb 6-1: config 1 has no interface number 0 [ 138.223814][ T25] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.223862][ T25] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 138.223909][ T25] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.311692][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.311735][ T25] usb 6-1: Product: syz [ 138.311760][ T25] usb 6-1: Manufacturer: syz [ 138.311785][ T25] usb 6-1: SerialNumber: syz [ 139.380870][ T25] cdc_ncm 6-1:1.1: bind() failure [ 139.611262][ T5763] usb 6-1: USB disconnect, device number 3 [ 139.980594][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 140.101419][ T5763] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.149517][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.150262][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 140.150311][ T10] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 140.153094][ T10] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 140.153135][ T10] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 140.153170][ T10] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 140.153204][ T10] usb 1-1: config 14 has no interface number 0 [ 140.153233][ T10] usb 1-1: config 14 has no interface number 1 [ 140.153315][ T10] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 140.153356][ T10] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 140.153402][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.153448][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.153489][ T10] usb 1-1: config 14 interface 57 has no altsetting 0 [ 140.153521][ T10] usb 1-1: config 14 interface 228 has no altsetting 0 [ 140.156271][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.156311][ T10] usb 1-1: Product: syz [ 140.156337][ T10] usb 1-1: Manufacturer: syz [ 140.156363][ T10] usb 1-1: SerialNumber: syz [ 140.331670][ T902] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.392083][ T5763] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 140.393440][ T5763] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 140.393481][ T5763] usb 4-1: config 0 has no interface number 0 [ 140.393537][ T5763] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.396758][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.396797][ T5763] usb 4-1: Product: syz [ 140.396823][ T5763] usb 4-1: Manufacturer: syz [ 140.396850][ T5763] usb 4-1: SerialNumber: syz [ 140.412308][ T5763] usb 4-1: config 0 descriptor?? [ 140.444298][ T6377] FAULT_INJECTION: forcing a failure. [ 140.444298][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 140.444382][ T6377] CPU: 0 UID: 0 PID: 6377 Comm: syz.5.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.444434][ T6377] Tainted: [L]=SOFTLOCKUP [ 140.444448][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 140.444470][ T6377] Call Trace: [ 140.444482][ T6377] [ 140.444499][ T6377] dump_stack_lvl+0x100/0x190 [ 140.444559][ T6377] should_fail_ex.cold+0x5/0xa [ 140.444602][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.444656][ T6377] should_failslab+0xc2/0x120 [ 140.444697][ T6377] kmem_cache_alloc_noprof+0x92/0x6a0 [ 140.444757][ T6377] ? mas_preallocate+0xc22/0xee0 [ 140.444810][ T6377] mas_preallocate+0xc22/0xee0 [ 140.444860][ T6377] ? __pfx_mas_preallocate+0x10/0x10 [ 140.444917][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.444962][ T6377] ? anon_vma_name+0x5a/0x250 [ 140.445006][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.445059][ T6377] __split_vma+0x2f8/0x1de0 [ 140.445121][ T6377] ? register_lock_class+0x3f/0x7b0 [ 140.445165][ T6377] ? __pfx___split_vma+0x10/0x10 [ 140.445210][ T6377] ? ima_match_policy+0x8c4/0x23f0 [ 140.445283][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.445333][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.445387][ T6377] vma_modify+0x1ef4/0x29b0 [ 140.445455][ T6377] ? __pfx_vma_modify+0x10/0x10 [ 140.445503][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.445549][ T6377] ? __lock_acquire+0x5c0/0x1f40 [ 140.445590][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.445655][ T6377] vma_modify_flags_uffd+0x312/0x470 [ 140.445712][ T6377] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 140.445785][ T6377] ? __pfx_vma_can_userfault+0x10/0x10 [ 140.445837][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.445886][ T6377] ? __pfx___might_resched+0x10/0x10 [ 140.445955][ T6377] userfaultfd_register_range+0x4be/0x770 [ 140.446022][ T6377] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 140.446086][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.446138][ T6377] ? vma_can_userfault+0x124/0x3f0 [ 140.446194][ T6377] ? __pfx_vma_can_userfault+0x10/0x10 [ 140.446248][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.446293][ T6377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.446345][ T6377] userfaultfd_register+0x900/0xe40 [ 140.446413][ T6377] ? __pfx_userfaultfd_register+0x10/0x10 [ 140.446468][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.446515][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.446576][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.446621][ T6377] ? tomoyo_path_number_perm+0x188/0x580 [ 140.446684][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.446736][ T6377] userfaultfd_ioctl+0x2e6e/0x61d0 [ 140.446799][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.446844][ T6377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.446891][ T6377] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 140.446944][ T6377] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 140.447010][ T6377] ? __fget_files+0x34/0x3d0 [ 140.447047][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.447092][ T6377] ? find_held_lock+0x2b/0x80 [ 140.447147][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.447192][ T6377] ? hook_file_ioctl_common+0x140/0x440 [ 140.447265][ T6377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 140.447311][ T6377] ? __fget_files+0x21f/0x3d0 [ 140.447353][ T6377] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 140.447411][ T6377] ? __x64_sys_ioctl+0x18e/0x210 [ 140.447463][ T6377] __x64_sys_ioctl+0x18e/0x210 [ 140.447522][ T6377] do_syscall_64+0x123/0x790 [ 140.447567][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.447606][ T6377] RIP: 0033:0x7f113079e159 [ 140.447636][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.447672][ T6377] RSP: 002b:00007f1131628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.447708][ T6377] RAX: ffffffffffffffda RBX: 00007f1130a25fa0 RCX: 00007f113079e159 [ 140.447734][ T6377] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 140.447758][ T6377] RBP: 00007f113083506b R08: 0000000000000000 R09: 0000000000000000 [ 140.447781][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.447805][ T6377] R13: 00007f1130a26038 R14: 00007f1130a25fa0 R15: 00007ffd05370518 [ 140.447855][ T6377] [ 140.522058][ T5752] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 140.604290][ T902] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 140.626240][ T902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.626309][ T902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.626348][ T902] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 140.626390][ T902] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.666057][ T10] legousbtower 1-1:14.57: interrupt endpoints not found [ 140.676723][ T5752] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.702333][ T5752] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 140.702406][ T5752] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 140.702454][ T5752] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 140.716984][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.717024][ T5752] usb 2-1: Product: syz [ 140.717046][ T5752] usb 2-1: Manufacturer: syz [ 140.717070][ T5752] usb 2-1: SerialNumber: syz [ 140.732638][ T902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.732681][ T902] usb 5-1: Product: syz [ 140.732708][ T902] usb 5-1: Manufacturer: syz [ 140.732735][ T902] usb 5-1: SerialNumber: syz [ 140.768634][ T6375] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 141.152386][ T6375] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 141.152551][ T6375] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 141.154481][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.5.148'. [ 141.169459][ T10] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 142.217482][ T6375] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 142.221200][ T6375] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 142.383763][ T5763] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 142.390347][ T5763] usb 4-1: USB disconnect, device number 4 [ 142.419428][ T10] legousbtower 1-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 142.438132][ T5763] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 142.471601][ T5958] udevd[5958]: setting owner of /dev/bus/usb/004/004 to uid=0, gid=0 failed: No such file or directory [ 142.478831][ T5752] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 142.705312][ T902] usb 5-1: usb_control_msg returned -71 [ 142.705361][ T902] usbtmc 5-1:1.0: can't read capabilities [ 142.749891][ T902] usb 5-1: USB disconnect, device number 6 [ 142.773452][ T5594] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.903330][ T5594] usb 6-1: device descriptor read/64, error -71 [ 143.022816][ T5752] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 143.058256][ T5752] usb 2-1: USB disconnect, device number 6 [ 143.074147][ T5752] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 143.143542][ T5594] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 143.185182][ T6400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.227767][ T10] usb 1-1: USB disconnect, device number 3 [ 143.272766][ T902] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.275054][ T5594] usb 6-1: device descriptor read/64, error -71 [ 143.368746][ T10] legousbtower 1-1:14.228: LEGO USB Tower #-159 now disconnected [ 143.391961][ T5594] usb usb6-port1: attempt power cycle [ 143.422486][ T902] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 143.425406][ T902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.425469][ T902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.425498][ T902] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.425530][ T902] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.433318][ T902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.433358][ T902] usb 5-1: Product: syz [ 143.433384][ T902] usb 5-1: Manufacturer: syz [ 143.433410][ T902] usb 5-1: SerialNumber: syz [ 143.636286][ T6407] FAULT_INJECTION: forcing a failure. [ 143.636286][ T6407] name failslab, interval 1, probability 0, space 0, times 0 [ 143.636346][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.3.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.636405][ T6407] Tainted: [L]=SOFTLOCKUP [ 143.636420][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 143.636443][ T6407] Call Trace: [ 143.636456][ T6407] [ 143.636471][ T6407] dump_stack_lvl+0x100/0x190 [ 143.636534][ T6407] should_fail_ex.cold+0x5/0xa [ 143.636578][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.636634][ T6407] should_failslab+0xc2/0x120 [ 143.636676][ T6407] __kmalloc_cache_node_noprof+0x94/0x720 [ 143.636745][ T6407] ? __alloc_workqueue+0x6f2/0x1950 [ 143.636804][ T6407] __alloc_workqueue+0x6f2/0x1950 [ 143.636868][ T6407] alloc_workqueue_noprof+0xc7/0x130 [ 143.636918][ T6407] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 143.636978][ T6407] ? __pfx___debug_object_init+0x10/0x10 [ 143.637051][ T6407] nci_register_device+0x21e/0xb80 [ 143.637121][ T6407] ? __pfx_nci_register_device+0x10/0x10 [ 143.637187][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.637236][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.637283][ T6407] ? lockdep_init_map_type+0x5c/0x250 [ 143.637326][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.637382][ T6407] virtual_ncidev_open+0x141/0x220 [ 143.637428][ T6407] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 143.637470][ T6407] misc_open+0x26d/0x450 [ 143.637524][ T6407] ? __pfx_misc_open+0x10/0x10 [ 143.637571][ T6407] chrdev_open+0x234/0x6a0 [ 143.637609][ T6407] ? __pfx_apparmor_file_open+0x10/0x10 [ 143.637652][ T6407] ? __pfx_chrdev_open+0x10/0x10 [ 143.637691][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.637739][ T6407] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 143.637803][ T6407] do_dentry_open+0x6ab/0x14d0 [ 143.637861][ T6407] ? __pfx_chrdev_open+0x10/0x10 [ 143.637902][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.637954][ T6407] vfs_open+0x82/0x3f0 [ 143.637991][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.638043][ T6407] path_openat+0x19fa/0x2440 [ 143.638169][ T6407] ? __pfx_path_openat+0x10/0x10 [ 143.638224][ T6407] do_file_open+0x20e/0x430 [ 143.638268][ T6407] ? __pfx_do_file_open+0x10/0x10 [ 143.638341][ T6407] ? _raw_spin_unlock+0x28/0x50 [ 143.638400][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.638446][ T6407] ? alloc_fd+0x471/0x7a0 [ 143.638498][ T6407] do_sys_openat2+0x10f/0x1e0 [ 143.638543][ T6407] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.638606][ T6407] __x64_sys_openat+0x12d/0x210 [ 143.638651][ T6407] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.638706][ T6407] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.638761][ T6407] do_syscall_64+0x123/0x790 [ 143.638806][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.638847][ T6407] RIP: 0033:0x7faff519e159 [ 143.638879][ T6407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.638916][ T6407] RSP: 002b:00007faff60c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.638953][ T6407] RAX: ffffffffffffffda RBX: 00007faff5425fa0 RCX: 00007faff519e159 [ 143.638979][ T6407] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 143.639005][ T6407] RBP: 00007faff523506b R08: 0000000000000000 R09: 0000000000000000 [ 143.639029][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.639053][ T6407] R13: 00007faff5426038 R14: 00007faff5425fa0 R15: 00007ffc56d9d168 [ 143.639111][ T6407] [ 143.742526][ T902] usb 5-1: usb_control_msg returned -32 [ 143.742594][ T902] usbtmc 5-1:1.0: can't read capabilities [ 143.774657][ T5594] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 143.807426][ T5594] usb 6-1: device descriptor read/8, error -71 [ 144.051715][ T5594] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 144.135111][ T6409] loop2: detected capacity change from 0 to 4096 [ 144.152388][ T6409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.152414][ T6409] EXT4-fs (loop2): Test dummy encryption mode enabled [ 144.167778][ T6409] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 144.167923][ T6409] System zones: 0-5 [ 144.208526][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.230461][ T5594] usb 6-1: device descriptor read/8, error -71 [ 144.306920][ T6409] fscrypt: AES-256-XTS using blk-crypto-fallback [ 144.331742][ T5594] usb usb6-port1: unable to enumerate USB device [ 144.416983][ T31] audit: type=1800 audit(1789991956.960:4): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.155" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 144.713359][ T5737] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.859868][ T4926] Bluetooth: hci2: link tx timeout [ 144.860310][ T4926] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.879836][ T4926] Bluetooth: hci2: link tx timeout [ 144.879861][ T4926] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.916151][ T5737] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 144.930789][ T5737] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 144.930839][ T5737] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 144.930884][ T5737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 144.930931][ T5737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 144.930987][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.988651][ T6418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.988830][ T6418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.008661][ T5737] pl2303 1-1:1.0: pl2303 converter detected [ 145.016454][ T5737] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 145.034320][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.161235][ T4926] Bluetooth: hci2: link tx timeout [ 145.161357][ T4926] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 145.161833][ T10] usb 5-1: USB disconnect, device number 7 [ 145.430134][ T6418] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 145.439508][ T6418] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 145.448452][ T6418] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 145.448530][ T6418] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 145.507838][ T10] usb 1-1: USB disconnect, device number 4 [ 145.589724][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 145.590579][ T10] pl2303 1-1:1.0: device disconnected [ 145.613544][ T6439] batman_adv: batadv0: Adding interface: syzkaller0 [ 145.613569][ T6439] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.613618][ T6439] batman_adv: batadv0: Interface activated: syzkaller0 [ 145.682246][ T6433] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 145.758120][ T6433] batman_adv: batadv0: Removing interface: syzkaller0 [ 145.848029][ T4926] Bluetooth: hci2: link tx timeout [ 145.848063][ T4926] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.222893][ T4926] Bluetooth: hci2: link tx timeout [ 146.222925][ T4926] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.230246][ T6430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.882560][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.942108][ T4926] Bluetooth: hci2: command 0x0406 tx timeout [ 146.990607][ T6454] FAULT_INJECTION: forcing a failure. [ 146.990607][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 146.990665][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.1.169 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.990720][ T6454] Tainted: [L]=SOFTLOCKUP [ 146.990735][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 146.990758][ T6454] Call Trace: [ 146.990771][ T6454] [ 146.990785][ T6454] dump_stack_lvl+0x100/0x190 [ 146.990848][ T6454] should_fail_ex.cold+0x5/0xa [ 146.990893][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.990951][ T6454] should_failslab+0xc2/0x120 [ 146.990994][ T6454] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 146.991062][ T6454] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 146.991122][ T6454] kmemdup_nul+0x49/0xd0 [ 146.991178][ T6454] vfs_parse_fs_qstr+0x112/0x1c0 [ 146.991230][ T6454] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 146.991280][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.991334][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.991382][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 146.991426][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.991474][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.991522][ T6454] ? ovl_next_opt+0x143/0x1c0 [ 146.991583][ T6454] ? __pfx_ovl_next_opt+0x10/0x10 [ 146.991647][ T6454] vfs_parse_monolithic_sep+0x195/0x210 [ 146.991707][ T6454] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 146.991763][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.991811][ T6454] ? alloc_fs_context+0x65a/0xf40 [ 146.991872][ T6454] path_mount+0x77f/0x24c0 [ 146.991929][ T6454] ? __pfx_path_mount+0x10/0x10 [ 146.991975][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992023][ T6454] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.992063][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992115][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992162][ T6454] ? kmem_cache_free+0x127/0x6c0 [ 146.992231][ T6454] ? __x64_sys_mount+0x293/0x310 [ 146.992278][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992326][ T6454] __x64_sys_mount+0x293/0x310 [ 146.992377][ T6454] ? __pfx___x64_sys_mount+0x10/0x10 [ 146.992432][ T6454] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.992489][ T6454] do_syscall_64+0x123/0x790 [ 146.992536][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.992577][ T6454] RIP: 0033:0x7fc4b679e159 [ 146.992614][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.992652][ T6454] RSP: 002b:00007fc4b76b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.992690][ T6454] RAX: ffffffffffffffda RBX: 00007fc4b6a25fa0 RCX: 00007fc4b679e159 [ 146.992716][ T6454] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000 [ 146.992741][ T6454] RBP: 00007fc4b683506b R08: 0000200000000240 R09: 0000000000000000 [ 146.992765][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.992789][ T6454] R13: 00007fc4b6a26038 R14: 00007fc4b6a25fa0 R15: 00007ffd2ef0f328 [ 146.992840][ T6454] [ 147.041390][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 147.042306][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 147.043870][ T10] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 147.043910][ T10] usb 1-1: config 0 has no interface number 0 [ 147.043964][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 147.044008][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 147.048924][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.048961][ T10] usb 1-1: Product: syz [ 147.048987][ T10] usb 1-1: Manufacturer: syz [ 147.049013][ T10] usb 1-1: SerialNumber: syz [ 147.061056][ T10] usb 1-1: config 0 descriptor?? [ 147.065746][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.065932][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.239752][ T6458] bond0: (slave ip6tnl1): refused to change device type [ 147.335856][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.336039][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.549869][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 147.669925][ T6465] loop5: detected capacity change from 0 to 2048 [ 147.751868][ T6465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.752005][ T6465] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.900026][ T6475] syz.3.176 uses obsolete (PF_INET,SOCK_PACKET) [ 147.928857][ T6465] EXT4-fs (loop5): shut down requested (1) [ 148.087481][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.788384][ T6486] FAULT_INJECTION: forcing a failure. [ 148.788384][ T6486] name failslab, interval 1, probability 0, space 0, times 0 [ 148.788441][ T6486] CPU: 1 UID: 0 PID: 6486 Comm: syz.2.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.788496][ T6486] Tainted: [L]=SOFTLOCKUP [ 148.788510][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 148.788533][ T6486] Call Trace: [ 148.788545][ T6486] [ 148.788560][ T6486] dump_stack_lvl+0x100/0x190 [ 148.788638][ T6486] should_fail_ex.cold+0x5/0xa [ 148.788685][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.788741][ T6486] should_failslab+0xc2/0x120 [ 148.788783][ T6486] __kmalloc_noprof+0xfc/0x840 [ 148.788845][ T6486] ? mpi_alloc_limb_space+0x31/0x60 [ 148.788911][ T6486] mpi_alloc_limb_space+0x31/0x60 [ 148.788965][ T6486] mpi_powm+0x1083/0x1e50 [ 148.789041][ T6486] ? __pfx_mpi_powm+0x10/0x10 [ 148.789092][ T6486] ? mpi_free+0x20/0x150 [ 148.789141][ T6486] ? mpi_free+0xe1/0x150 [ 148.789189][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.789237][ T6486] ? kfree+0x22b/0x6d0 [ 148.789294][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.789342][ T6486] ? mpi_free+0xe6/0x150 [ 148.789400][ T6486] rsa_enc+0x1fe/0x3b0 [ 148.789457][ T6486] ? __pfx_rsa_enc+0x10/0x10 [ 148.789508][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.789556][ T6486] ? __virt_addr_valid+0x239/0x430 [ 148.789629][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.789676][ T6486] ? sg_init_one+0xf5/0x1b0 [ 148.789722][ T6486] rsassa_pkcs1_verify+0x4eb/0xc20 [ 148.789798][ T6486] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 148.789887][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.789932][ T6486] ? rsa_max_size+0xd/0x70 [ 148.789981][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.790028][ T6486] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 148.790097][ T6486] public_key_verify_signature+0x5ee/0x910 [ 148.790156][ T6486] ? __pfx_public_key_verify_signature+0x10/0x10 [ 148.790230][ T6486] ? asymmetric_key_generate_id+0x7e/0x180 [ 148.790284][ T6486] x509_check_for_self_signed+0x325/0x510 [ 148.790346][ T6486] x509_cert_parse+0x60c/0x910 [ 148.790400][ T6486] x509_key_preparse+0x65/0x9c0 [ 148.790452][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.790509][ T6486] asymmetric_key_preparse+0xce/0x1d0 [ 148.790549][ T6486] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 148.790599][ T6486] __key_create_or_update+0x463/0xe30 [ 148.790648][ T6486] ? __pfx___key_create_or_update+0x10/0x10 [ 148.790690][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.790738][ T6486] ? lookup_user_key+0x3f3/0x1300 [ 148.790823][ T6486] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 148.790886][ T6486] ? __pfx_keyring_search_iterator+0x10/0x10 [ 148.790939][ T6486] key_create_or_update+0x42/0x60 [ 148.790985][ T6486] __do_sys_add_key+0x2e8/0x460 [ 148.791037][ T6486] ? __pfx___do_sys_add_key+0x10/0x10 [ 148.791095][ T6486] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.791151][ T6486] do_syscall_64+0x123/0x790 [ 148.791199][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.791239][ T6486] RIP: 0033:0x7f692d19e159 [ 148.791271][ T6486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.791308][ T6486] RSP: 002b:00007f692e02d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 148.791345][ T6486] RAX: ffffffffffffffda RBX: 00007f692d425fa0 RCX: 00007f692d19e159 [ 148.791371][ T6486] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 148.791396][ T6486] RBP: 00007f692d23506b R08: 000000003ca4598e R09: 0000000000000000 [ 148.791426][ T6486] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 148.791450][ T6486] R13: 00007f692d426038 R14: 00007f692d425fa0 R15: 00007ffcdc5d9bf8 [ 148.791502][ T6486] [ 148.819433][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 148.819481][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 148.819731][ T10] asix 1-1:0.34: probe with driver asix failed with error -71 [ 148.977532][ T10] usb 1-1: USB disconnect, device number 5 [ 148.994303][ T6487] FAULT_INJECTION: forcing a failure. [ 148.994303][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 148.994357][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.5.179 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.994411][ T6487] Tainted: [L]=SOFTLOCKUP [ 148.994425][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 148.994447][ T6487] Call Trace: [ 148.994460][ T6487] [ 148.994474][ T6487] dump_stack_lvl+0x100/0x190 [ 148.994534][ T6487] should_fail_ex.cold+0x5/0xa [ 148.994578][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.994631][ T6487] should_failslab+0xc2/0x120 [ 148.994672][ T6487] kmem_cache_alloc_noprof+0x92/0x6a0 [ 148.994728][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.994773][ T6487] ? __asan_memcpy+0x3c/0x60 [ 148.994823][ T6487] ? __kernfs_new_node+0xd2/0xa10 [ 148.994881][ T6487] __kernfs_new_node+0xd2/0xa10 [ 148.994941][ T6487] ? __pfx___kernfs_new_node+0x10/0x10 [ 148.994994][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.995039][ T6487] ? lock_acquire+0x1d1/0x380 [ 148.995076][ T6487] ? kernfs_root+0x23/0x2a0 [ 148.995124][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.995169][ T6487] ? find_held_lock+0x2b/0x80 [ 148.995220][ T6487] ? kernfs_root+0xee/0x2a0 [ 148.995260][ T6487] ? kernfs_root+0xee/0x2a0 [ 148.995299][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.995358][ T6487] kernfs_new_node+0x117/0x150 [ 148.995416][ T6487] __kernfs_create_file+0x53/0x350 [ 148.995481][ T6487] cgroup_addrm_files+0x4ef/0xdb0 [ 148.995547][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.995594][ T6487] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 148.995657][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.995722][ T6487] ? idr_replace+0xfa/0x170 [ 148.995774][ T6487] css_populate_dir+0x161/0x590 [ 148.995827][ T6487] cgroup_apply_control_enable+0x441/0xdd0 [ 148.995907][ T6487] cgroup_mkdir+0x57f/0x1330 [ 148.995953][ T6487] ? __pfx_cgroup_mkdir+0x10/0x10 [ 148.995995][ T6487] kernfs_iop_mkdir+0x111/0x190 [ 148.996042][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.996099][ T6487] vfs_mkdir+0x364/0x850 [ 148.996158][ T6487] filename_mkdirat+0x48b/0x5e0 [ 148.996205][ T6487] ? __pfx_filename_mkdirat+0x10/0x10 [ 148.996247][ T6487] ? strncpy_from_user+0x19d/0x2d0 [ 148.996306][ T6487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.996352][ T6487] ? do_getname+0x191/0x390 [ 148.996404][ T6487] __x64_sys_mkdirat+0x89/0xc0 [ 148.996446][ T6487] do_syscall_64+0x123/0x790 [ 148.996490][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.996529][ T6487] RIP: 0033:0x7f113079e159 [ 148.996558][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.996594][ T6487] RSP: 002b:00007f1131628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 148.996631][ T6487] RAX: ffffffffffffffda RBX: 00007f1130a25fa0 RCX: 00007f113079e159 [ 148.996656][ T6487] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 148.996681][ T6487] RBP: 00007f113083506b R08: 0000000000000000 R09: 0000000000000000 [ 148.996705][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.996727][ T6487] R13: 00007f1130a26038 R14: 00007f1130a25fa0 R15: 00007ffd05370518 [ 148.996778][ T6487] [ 149.024918][ T6487] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 149.095197][ T6488] FAULT_INJECTION: forcing a failure. [ 149.095197][ T6488] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.095256][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.4.181 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.095309][ T6488] Tainted: [L]=SOFTLOCKUP [ 149.095323][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 149.095346][ T6488] Call Trace: [ 149.095358][ T6488] [ 149.095373][ T6488] dump_stack_lvl+0x100/0x190 [ 149.095436][ T6488] should_fail_ex.cold+0x5/0xa [ 149.095488][ T6488] _copy_from_user+0x2e/0xd0 [ 149.095541][ T6488] sg_write+0x745/0xdb0 [ 149.095604][ T6488] ? __pfx_sg_write+0x10/0x10 [ 149.095662][ T6488] ? __pfx___futex_wait+0x10/0x10 [ 149.095751][ T6488] ? __pfx_aa_file_perm+0x10/0x10 [ 149.095837][ T6488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.095884][ T6488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.095930][ T6488] ? security_file_permission+0x76/0x210 [ 149.095970][ T6488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.096015][ T6488] ? rw_verify_area+0xce/0x6d0 [ 149.096077][ T6488] vfs_write+0x2aa/0x1050 [ 149.096135][ T6488] ? __pfx_sg_write+0x10/0x10 [ 149.096186][ T6488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.096232][ T6488] ? lock_acquire+0x1d1/0x380 [ 149.096270][ T6488] ? __fget_files+0x34/0x3d0 [ 149.096308][ T6488] ? __pfx_vfs_write+0x10/0x10 [ 149.096360][ T6488] ? find_held_lock+0x2b/0x80 [ 149.096411][ T6488] ? __fget_files+0x215/0x3d0 [ 149.096447][ T6488] ? __fget_files+0x215/0x3d0 [ 149.096482][ T6488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.096537][ T6488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.096583][ T6488] ? __fget_files+0x21f/0x3d0 [ 149.096634][ T6488] ksys_write+0x12a/0x250 [ 149.096689][ T6488] ? __pfx_ksys_write+0x10/0x10 [ 149.096749][ T6488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 149.096804][ T6488] do_syscall_64+0x123/0x790 [ 149.096851][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.096892][ T6488] RIP: 0033:0x7f9fbc99e159 [ 149.096923][ T6488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.096959][ T6488] RSP: 002b:00007f9fbd88a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.096996][ T6488] RAX: ffffffffffffffda RBX: 00007f9fbcc25fa0 RCX: 00007f9fbc99e159 [ 149.097022][ T6488] RDX: 0000000000000103 RSI: 0000200000000040 RDI: 0000000000000004 [ 149.097046][ T6488] RBP: 00007f9fbca3506b R08: 0000000000000000 R09: 0000000000000000 [ 149.097077][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.097100][ T6488] R13: 00007f9fbcc26038 R14: 00007f9fbcc25fa0 R15: 00007ffc3022d528 [ 149.097151][ T6488] [ 150.066821][ T6503] syzkaller1: entered promiscuous mode [ 150.066857][ T6503] syzkaller1: entered allmulticast mode [ 150.161392][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.296878][ T6512] loop2: detected capacity change from 0 to 2048 [ 150.333580][ T25] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 150.341062][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.341140][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 150.341187][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 150.341249][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.509172][ T6512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.722766][ T6518] FAULT_INJECTION: forcing a failure. [ 150.722766][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 150.722824][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.5.193 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.722880][ T6518] Tainted: [L]=SOFTLOCKUP [ 150.722894][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 150.722918][ T6518] Call Trace: [ 150.722931][ T6518] [ 150.722947][ T6518] dump_stack_lvl+0x100/0x190 [ 150.723009][ T6518] should_fail_ex.cold+0x5/0xa [ 150.723054][ T6518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.723110][ T6518] should_failslab+0xc2/0x120 [ 150.723151][ T6518] __kmalloc_cache_noprof+0x91/0x6d0 [ 150.723203][ T6518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.723253][ T6518] ? raw_open+0x89/0x490 [ 150.723310][ T6518] raw_open+0x89/0x490 [ 150.723355][ T6518] ? __pfx_raw_open+0x10/0x10 [ 150.723401][ T6518] misc_open+0x26d/0x450 [ 150.723465][ T6518] ? __pfx_misc_open+0x10/0x10 [ 150.723513][ T6518] chrdev_open+0x234/0x6a0 [ 150.723552][ T6518] ? __pfx_apparmor_file_open+0x10/0x10 [ 150.723604][ T6518] ? __pfx_chrdev_open+0x10/0x10 [ 150.723644][ T6518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.723693][ T6518] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 150.723756][ T6518] do_dentry_open+0x6ab/0x14d0 [ 150.723816][ T6518] ? __pfx_chrdev_open+0x10/0x10 [ 150.723858][ T6518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.723913][ T6518] vfs_open+0x82/0x3f0 [ 150.723954][ T6518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.724009][ T6518] path_openat+0x19fa/0x2440 [ 150.724059][ T6518] ? __pfx_path_openat+0x10/0x10 [ 150.724114][ T6518] do_file_open+0x20e/0x430 [ 150.724157][ T6518] ? __pfx_do_file_open+0x10/0x10 [ 150.724233][ T6518] ? _raw_spin_unlock+0x28/0x50 [ 150.724293][ T6518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.724341][ T6518] ? alloc_fd+0x471/0x7a0 [ 150.724396][ T6518] do_sys_openat2+0x10f/0x1e0 [ 150.724441][ T6518] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.724485][ T6518] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 150.724567][ T6518] __x64_sys_openat+0x12d/0x210 [ 150.724620][ T6518] ? __pfx___x64_sys_openat+0x10/0x10 [ 150.724672][ T6518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.724724][ T6518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.724780][ T6518] do_syscall_64+0x123/0x790 [ 150.724832][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.724873][ T6518] RIP: 0033:0x7f113075e98e [ 150.724902][ T6518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.724940][ T6518] RSP: 002b:00007f1131625ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.724979][ T6518] RAX: ffffffffffffffda RBX: 00007f11316286c0 RCX: 00007f113075e98e [ 150.725006][ T6518] RDX: 0000000000000002 RSI: 00007f113083440a RDI: ffffffffffffff9c [ 150.725031][ T6518] RBP: 00007f113083506b R08: 0000000000000000 R09: 0000000000000000 [ 150.725056][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 150.725082][ T6518] R13: 0000200000000040 R14: 0000000000000000 R15: 00007ffd05370518 [ 150.725133][ T6518] [ 150.730378][ T6511] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 150.863532][ T6511] EXT4-fs (loop2): Delayed block allocation ** replaying previous printk message ** [ 150.863532][ T6511] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 150.863579][ T6511] EXT4-fs (loop2): This should not happen!! Data will be lost [ 150.863579][ T6511] [ 150.863604][ T6511] EXT4-fs (loop2): Total free blocks count 0 [ 150.863628][ T6511] EXT4-fs (loop2): Free/Dirty block details [ 150.863667][ T6511] EXT4-fs (loop2): free_blocks=4096 [ 150.863703][ T6511] EXT4-fs (loop2): dirty_blocks=64 [ 150.863725][ T6511] EXT4-fs (loop2): Block reservation details [ 150.863746][ T6511] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 151.002138][ T195] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 151.013248][ T25] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 151.013306][ T25] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 151.013327][ T25] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 151.077128][ T6512] ------------[ cut here ]------------ [ 151.077146][ T6512] !folio_buffers(folio) [ 151.077158][ T6512] WARNING: fs/ext4/inode.c:3937 at ext4_dirty_folio+0x17e/0x1e0, CPU#1: syz.2.192/6512 [ 151.190944][ T6512] Modules linked in: [ 151.196183][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.2.192 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.207027][ T6512] Tainted: [L]=SOFTLOCKUP [ 151.211414][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 151.221514][ T6512] RIP: 0010:ext4_dirty_folio+0x17e/0x1e0 [ 151.227200][ T6512] Code: 28 3c 31 ff 90 0f 0b 90 e9 2e ff ff ff e8 1a 3c 31 ff 48 c7 c6 e0 21 0f 8c 48 89 df e8 5b e6 83 ff 90 0f 0b e8 03 3c 31 ff 90 <0f> 0b 90 e9 38 ff ff ff e8 f5 3b 31 ff 48 c7 c6 e0 21 0f 8c 48 89 [ 151.246951][ T6512] RSP: 0018:ffffc90002fbfa00 EFLAGS: 00010287 [ 151.253325][ T6512] RAX: 000000000000e390 RBX: ffffea0000fbb7c0 RCX: ffffc9000e641000 [ 151.261484][ T6512] RDX: 0000000000080000 RSI: ffffffff82dad56d RDI: ffffea0000fbb7e8 [ 151.270346][ T6512] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 151.278954][ T6512] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888054de55e8 [ 151.287040][ T6512] R13: ffffea0000fbb7c8 R14: ffffea0000fbb7c0 R15: ffff8880334e8000 [ 151.295094][ T6512] FS: 00007f692e02d6c0(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000 [ 151.304941][ T6512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.311634][ T6512] CR2: 00007fbf643ef2f8 CR3: 0000000075839000 CR4: 0000000000350ef0 [ 151.319633][ T6512] Call Trace: [ 151.322996][ T6512] [ 151.325944][ T6512] folio_mark_dirty+0x10a/0x200 [ 151.330852][ T6512] unpin_user_pages_dirty_lock+0x28e/0x350 [ 151.336800][ T6512] process_vm_rw_core.constprop.0+0x805/0x950 [ 151.343031][ T6512] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 151.349701][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.356343][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.363009][ T6512] ? iovec_from_user+0xda/0x140 [ 151.367944][ T6512] process_vm_rw+0x309/0x370 [ 151.373239][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.378986][ T6512] ? __pfx_process_vm_rw+0x10/0x10 [ 151.384254][ T6512] ? find_held_lock+0x2b/0x80 [ 151.388985][ T6512] ? __fget_files+0x215/0x3d0 [ 151.393783][ T6512] ? __fget_files+0x215/0x3d0 [ 151.398515][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.404430][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.410100][ T6512] ? xfd_validate_state+0x129/0x190 [ 151.415780][ T6512] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 151.422169][ T6512] ? do_syscall_64+0xae/0x790 [ 151.427219][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.434757][ T6512] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.439997][ T6512] do_syscall_64+0x123/0x790 [ 151.444722][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.450668][ T6512] RIP: 0033:0x7f692d19e159 [ 151.455246][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.475794][ T6512] RSP: 002b:00007f692e02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 151.484951][ T6512] RAX: ffffffffffffffda RBX: 00007f692d425fa0 RCX: 00007f692d19e159 [ 151.492991][ T6512] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 0000000000000063 [ 151.501024][ T6512] RBP: 00007f692d23506b R08: 0000000000000001 R09: 0000000000000000 [ 151.509067][ T6512] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000 [ 151.517127][ T6512] R13: 00007f692d426038 R14: 00007f692d425fa0 R15: 00007ffcdc5d9bf8 [ 151.525220][ T6512] [ 151.528258][ T6512] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.535562][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.2.192 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.546380][ T6512] Tainted: [L]=SOFTLOCKUP [ 151.550712][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 151.560781][ T6512] Call Trace: [ 151.564071][ T6512] [ 151.567102][ T6512] dump_stack_lvl+0x100/0x190 [ 151.571820][ T6512] vpanic+0x553/0x970 [ 151.575822][ T6512] ? __pfx_vpanic+0x10/0x10 [ 151.580352][ T6512] panic+0xd1/0xe0 [ 151.584085][ T6512] ? __pfx_panic+0x10/0x10 [ 151.588533][ T6512] check_panic_on_warn.cold+0x19/0x34 [ 151.593928][ T6512] ? ext4_dirty_folio+0x17e/0x1e0 [ 151.598988][ T6512] __warn.cold+0x191/0x318 [ 151.603426][ T6512] __report_bug+0x30f/0x440 [ 151.607951][ T6512] ? ext4_dirty_folio+0x17e/0x1e0 [ 151.613017][ T6512] ? __pfx___report_bug+0x10/0x10 [ 151.618067][ T6512] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.623288][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.628945][ T6512] ? irqentry_exit+0x24d/0xa10 [ 151.633754][ T6512] ? ext4_dirty_folio+0x17e/0x1e0 [ 151.638817][ T6512] report_bug+0xb3/0x220 [ 151.643082][ T6512] ? ext4_dirty_folio+0x17e/0x1e0 [ 151.648144][ T6512] handle_bug+0x16a/0x2a0 [ 151.652500][ T6512] exc_invalid_op+0x17/0x50 [ 151.657028][ T6512] asm_exc_invalid_op+0x1a/0x20 [ 151.661899][ T6512] RIP: 0010:ext4_dirty_folio+0x17e/0x1e0 [ 151.667566][ T6512] Code: 28 3c 31 ff 90 0f 0b 90 e9 2e ff ff ff e8 1a 3c 31 ff 48 c7 c6 e0 21 0f 8c 48 89 df e8 5b e6 83 ff 90 0f 0b e8 03 3c 31 ff 90 <0f> 0b 90 e9 38 ff ff ff e8 f5 3b 31 ff 48 c7 c6 e0 21 0f 8c 48 89 [ 151.687197][ T6512] RSP: 0018:ffffc90002fbfa00 EFLAGS: 00010287 [ 151.693284][ T6512] RAX: 000000000000e390 RBX: ffffea0000fbb7c0 RCX: ffffc9000e641000 [ 151.701264][ T6512] RDX: 0000000000080000 RSI: ffffffff82dad56d RDI: ffffea0000fbb7e8 [ 151.709257][ T6512] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 151.717244][ T6512] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888054de55e8 [ 151.725251][ T6512] R13: ffffea0000fbb7c8 R14: ffffea0000fbb7c0 R15: ffff8880334e8000 [ 151.733249][ T6512] ? ext4_dirty_folio+0x17d/0x1e0 [ 151.738332][ T6512] folio_mark_dirty+0x10a/0x200 [ 151.743215][ T6512] unpin_user_pages_dirty_lock+0x28e/0x350 [ 151.749067][ T6512] process_vm_rw_core.constprop.0+0x805/0x950 [ 151.755186][ T6512] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 151.761810][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.767485][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.773143][ T6512] ? iovec_from_user+0xda/0x140 [ 151.778032][ T6512] process_vm_rw+0x309/0x370 [ 151.782653][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.788314][ T6512] ? __pfx_process_vm_rw+0x10/0x10 [ 151.793465][ T6512] ? find_held_lock+0x2b/0x80 [ 151.798169][ T6512] ? __fget_files+0x215/0x3d0 [ 151.802861][ T6512] ? __fget_files+0x215/0x3d0 [ 151.807567][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.813252][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.818911][ T6512] ? xfd_validate_state+0x129/0x190 [ 151.824133][ T6512] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 151.829897][ T6512] ? do_syscall_64+0xae/0x790 [ 151.834594][ T6512] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.840249][ T6512] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.845470][ T6512] do_syscall_64+0x123/0x790 [ 151.850084][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.856000][ T6512] RIP: 0033:0x7f692d19e159 [ 151.860432][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.880066][ T6512] RSP: 002b:00007f692e02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 151.888515][ T6512] RAX: ffffffffffffffda RBX: 00007f692d425fa0 RCX: 00007f692d19e159 [ 151.896505][ T6512] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 0000000000000063 [ 151.904492][ T6512] RBP: 00007f692d23506b R08: 0000000000000001 R09: 0000000000000000 [ 151.912474][ T6512] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000 [ 151.920457][ T6512] R13: 00007f692d426038 R14: 00007f692d425fa0 R15: 00007ffcdc5d9bf8 [ 151.928557][ T6512] [ 151.931821][ T6512] Kernel Offset: disabled [ 151.936148][ T6512] Rebooting in 86400 seconds..