last executing test programs: 25.306300669s ago: executing program 3 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000940)={0x20071026}, &(0x7f0000000980)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x87a) 25.184298052s ago: executing program 3 (id=390): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001680), 0x1c5801) 23.732603163s ago: executing program 3 (id=396): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 23.254160492s ago: executing program 3 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xc) 22.891854213s ago: executing program 3 (id=405): sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYRESHEX], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 22.573790253s ago: executing program 3 (id=408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 22.13535836s ago: executing program 32 (id=408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.90814615s ago: executing program 0 (id=566): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2016}}}, 0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 1.0500265s ago: executing program 2 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[=]=\"s\\\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 1.048592856s ago: executing program 4 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x90, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {0x7fff}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x7c, 0xd}}, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000020000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) 1.016519724s ago: executing program 0 (id=571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x488, 0x0, 0x7ffffffffffffffd}]}) 865.445375ms ago: executing program 1 (id=573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0x100, &(0x7f0000000340)=[0x7, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0xffffffffffffffff, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0xfffffffffffffffd, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x4, 0x7, 0x67c0000000000000, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x1f35c00, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x100000000, 0xfffffffffffffffe, 0x8, 0x9, 0x7fff, 0x8, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xfffffffffffeffff, 0xd, 0x40000000012, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x81, 0xa, 0x0, 0x4000008, 0x4, 0xe90, 0x7, 0xfffffffffffffffc, 0xa7, 0x80000040ba00, 0x3, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x11, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x29}) 821.238946ms ago: executing program 4 (id=574): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000020c0)=""/4080, 0xff0}], 0x1, 0x1, 0x9) 797.485484ms ago: executing program 2 (id=575): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x6, 0x7fffffff, 0x0, 'queue0\x00', 0x8000000}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x306575}, 0x0, {0x3}}) 689.954062ms ago: executing program 0 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x100005, 0xe8e8, 0xfffffffa}]}) 668.814961ms ago: executing program 1 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x103, 0x0, 0x2080, {0x0, 0x0, {0x1}, 0x0, 0x2000000000000}, {'\x00', "0000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800"}}) 644.697357ms ago: executing program 4 (id=578): r0 = epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000540)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 541.917555ms ago: executing program 2 (id=579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000052c0)=[{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001cc0)="9eb5cfec3ddf8ba0ffc0cded0c0c681bbd75cdb86d762f8b24f9864338f17f1ceff0f126975bcf29c86ddf9d18e8be6cc81f0d2e1810a0664c898ba3c17c9c7f38f6383c7e69bc27b07278ad2f6558389c121002d3819e", 0x57}, {&(0x7f0000001dc0)="b9d9974d510b932bd914515387802fa17bb865c69c139ffdc9722b1412033e1403e10482cc56ae9b059d2f2661598456da7b03596d7d951a4a1bee8f32d31555ec95d8c9e190287a2f8cd74473fd72a18b2d55fe0c2d1f441de49d1311de79d852ea3ee3745dd59ddd25aa1a4c06b972b7cb30cfdb85903b64bba384ecf45002366557e95454225a0ad780b014db6e51f11fda348267de894908e4016688a0a86581e33d742641f0abff4ba023eefd3dd844e2ade67c1136a00ddbc77e6c283b79b523dd4026", 0xc6}, {&(0x7f0000001ec0)="b23a", 0x2}, {&(0x7f0000001f80)="2c53b4", 0x3}], 0x4, 0x0, 0x0, 0x40020}], 0x1, 0x4010) 486.987276ms ago: executing program 1 (id=580): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 406.34082ms ago: executing program 4 (id=581): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r1, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) 393.175799ms ago: executing program 2 (id=582): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000ac0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000b00)='fd', 0x0, r1) close_range(r0, 0xffffffffffffffff, 0x0) 348.094758ms ago: executing program 0 (id=583): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) 331.289268ms ago: executing program 1 (id=584): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) ptrace(0x10, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 277.46461ms ago: executing program 4 (id=585): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f000000e0c0)="217e85b50586813ca8a29f0bdf5bb78bdd034138e14fa3a60caaf3caa33ef3ac5446d296c0b5a5b2157c895e6457352b974be5d8495b0cfa2fd9e415a7463985c43b2564de27eef8faa79255da6af97b1e19a8e727bb964a9a3fb93940601c7dc725320e1de1a10f8992426b7f0d0ff3673cc472b2abfdb32c6cbf971b5f7cdea13c5291cfc5287ce6a6cd32a5a8ca4ab7cc4f3a1fc30c0cb02053cdd7fc9d102abf87d5e1cef13cf43dcd650235f0026b894b6bb5294daaf514e9617d38da63fde1dcc8d40e1ca0493e90b7e0f0398d649e8f69684bcc313fc26d49911b0ffaaf4a7ab1086dcaf191ab50b635a0342f36c4831e232edc85015f78357bdc17ada03b92b7fdc851b4659fe1d258e3109eba19622fbebb132ecfcd1aa0081bede5ecb8787200fedd2661e5e0bdbce9b19452db8d2d986a97ab8d2ea573820b4d951ad616aac4eff6830600000000000000af7e7b0a87b09fb022b4ef85c199e9a99e79a4eb37fd58266f679ded3c0ea8dfc64ba57c3d319a4d9787a189de901bb28cd022c44a2024a617f7deee79cbfde0c0eeac0f18baace936480d489c0ddb1350bc5594a5182438e1278095a249aabcfe98de26fab3871d83fe674eb12a2538737fe416fe75473b6253dbbd23559b0be2131fdf644171f4684500f1bc0ebf91a8010f3853123a5e2357bb5fac0e3cc74ad6d7a3b2a4972481ca3ba3c1af3c18387849af8f21f3d81f0770fa667a9e07c1210106e9c81cfedadc39dc4d5668be6a0ac01f957a3bf8ae9de500201bb288888ac969660c05bf71dfcdff1098b5a134affd08d5316d0c4e99df5751e2cab9444b7655d37ff65fc0c1de768f4ebf01aa3533809108ed4853c2c0cfe07824c6ade0b1863bdaa464d06332402b30bbfc2599e16531e3e3afc90be506e114bbb3fd72a86b1f571a5380fb0c8635b350c11ce5538b3706b2a690c89de7b39588f92cf9a47d4f3b63bf789a61c1f5bec772e131a6fc079bc311b0c56ae75bc01d8c7437f296c2fb2974a822ead41c9f333d4834a4d6a58dbe579b3577a5998659765ef83b2efb601eeb7e7725925c4a1f6786d1abb971a3e18b624e303dd9b1b2a7a284e4ffd9ddcbe9ed0968ed3241dd9be99de9d6140668663c6a931bcd86e4cc5df973296b62ac7bba1ce6761c2f1562d3033cd1d731fe976ac29503a044c7eb66b8cd2037b2b66f6cc7cf5a33698f6bf4d602741d25345bfea19336599fec791a0c64f13ba537bc156e62c8eace5e117f2652b2851800064ab021ee2addc40ed8b3c67ad0c98f71de6e7e68112fa9d689141c6d5a15da4e472176e77315df003f97f0db3bd6b7d55b804e5f809c3f2773d1e4db7ba762d22715889dd09e9d8ebd87ade42da1e85a98524f48777773a95c97fc3cb6e7a2416b871164a01a7ff32bf444bd905176f5a0a87d13b37499aa33b38ce14720980012fe0dc7dc07061eff65f7a66df8c16489c99de167feea2527869be27520192e3ca6c78b43ce4dbfae087d4e1785fbd0ab3d5c4f2a8c178dce6c32c73ba6c0d0d2767b938559f66038aaa6ee766e568062a56556b2dc5d0064af675d422b8bd676ddc236d4d271518cf5ddec3c3a230e38377ee08dc25d5784db2cfa6c779de55afb6f82e49d56e79c488fb9bf8ad771e518b03187e07ef8bdd5bc9bab3dd6dd0bbdc5d04adbe8ee210069f0ec51759b102597063532168935731781e3281e0a971b502fd8a563ec0724571fb61f0c32355956b3cd8b9bc3279eecdfc81151b2657e58305d332a711c05031b93d03a233d770d4717f0dc9bd97f807bc343f806be3e9030a83b6dc6a3d731dc1daae0109b73c00386a379e84fa661ff41300a712af3b1f9a2858a5f5d191c5dde9f95c250277be32b760b95f453de22dbd6dd970622e3f5d6830375850a9b2e275a913e48f808d8dda5c07d32e464179257fab8ce92e33f086484ff8448ae413a0e1478dfdecbf477b26d5aee75cbf1f2a5a06079cb534b67718ebb51f704985c19f2580241728bb2faff29ebd81a67f6f44e61ad42a5da18f939da47ddc52474871521ac733da45cf1a521ab3196996553261ae53478fae33afd36b7e2125ad7dc38b62657e35748809191997377ed18bca857822f21e4e66960060ab48539725e316e1f8244b35e805cf6f01b32c95abb527a1954870d9d11cde762e19788b2ac837f7d0726231090a22431366ffd8b8fa12a8aa3c3793c2970152fe7f75955d34580e00049628b1bfeab69378a38106f7451cc7e3f8336966a6f2e362912ebe34fbf5aa33d56bfe5dfe4c3c0e2298ad11053bb83816c744b3df38aab86202a2362543c511ea66a0ec3c4711c626cc4e377ee764c9dd51b7dd77fff5c2783bf403e1ceac5ce7dd5f8e4a95a38d491c690d6403e83e899d2ce2dd44f309418e8381fd93823206811edcbab2bd3d3a210b1c1392fe4abbb85eab303792f0dc393d2cac4003f30e77cc8d7541e532ba11397670f280b6f9388cf61108a56483488c3fa7e358eede7b5314549f52bb4ef295fafa6092fa8dbba94b27380258f4a4b3ee37185b16fd73c75b730d46a05efa868cc90b2b3617cd7de1b3de758d55cdc53a1f2ddf0211caa9a5d9a864becfa74e9a47fa31d7856a9a30bda4743b60ab4d4b36d588abcd0b4dfd2d835d10d5bef098e2fd0f617fd59468859cd13664329cc011ac4e677336516d1c853e8c5a37e09c2f7168d78998a9584ce5a666f418f9fba55857c6e80caf101daf48566c3b1e69bcf5b32bdd756b39da5268c1c38a859e8d0f80d16cbd8db33b1d3d4784259234733511701eb5c889f39051a499f9403566199a8b0fe06ec5c41beca27115befebbd1c0281a3722fc2d77d092c4509fe5589525c868be4ff1e2df53be13e28d725a7c1da6905e1ee0b8c26ba5029763e805c1946d404cc60b65ea516bff59d7258c8a5fdab53123aac6e12e6c4ddcbe01ff2e7950aaafd6970b5b05f45ed1985aa2322fed508850aa0674e0c855f58a557c301e8d1d7d60599fcf67a0d10c5064fcdc1df9759cd81c734b9cc5ac00773890c37f719288efb6ab9903d11f9d3caf78cbd885fb45cd52c00b04a421a76c38aa3f75fef04b48840ee05e49f80b104f086d3c5ffa517356030101e9752a600a6f67399897dbc3698616508b6a70ab8aca3547a798a1716cebe5d5af4a366bc77848470be6bf91f4c115568870d830cf1ccae377dcb7cdd6b5b9ee64de6529a0cd683ea80569b57d81c0f529bf3d6df3e930d3af6585911d46d5d8954c97747b05ecae1437af3ac9a3760fa5d60da3778b040c40259ee7f632f8db2da53c703365908d6e4281bea8ecbc13d88d87533f048fd5629937a5e79fa0bf993ceb11304dfb210e68a39cb53969203fbaebe084c61f3a9c38b6b89791a2285c4584ea977d47e31b7d4cf98b19b9fbfbb0229d3033bbf9973f106a93952126599ee4574bdd47cdfa5094eb970b24b9d44b7041a422ec06fb698a7c0638731bcef5354657248119095b484e90d96021e79875c353076ec8b96e2c3448f6575cb4cdf730cd37189ccaedea1e8de21a722fd72ad28b38d11fd0a49007eeea677c5aa16ad3e4577481cb848bc7eb860e005a9ffccee69670941c1d70971d6000000000000beaf37a02306ce348dc2a841d6cbaeecbe7a0276cccd9f0292e59f51aa99f16430991258f1c208454ac122f9b5c43642b326535c8a795757ddc10cd4ed8391d6cabc42a584e10d93988b6e36ed37bba5d7bbc6ba1b15c77945587a50e22d71ed3f6465a8c7ae90eb21e71f31c80e8dfea7711dd12984ca0e7c07c481639d87e249c6ebd1ca43715a775ee9b15752b273ef98e0d352e72a13ef21bfbed0fc9d5d5bde441692478d9e40bd59013fcdb55aa3323328a9ea77354b1ec7635cde81fae541676d06b324de2efe1fa286bd1faa6b9890fae9800ab4cde88e6be93c733537ccaaed0101bfd2416cf48b17455c1a9dc5353c48c2d07e1daec97f785850ff72e4dd0092bf7d0da19a61075fd395fcf86203b119ae1de4024c2002367a316a6443ff723437c6bf4ea33b07d8b81dfd56fd4749d6bc3fe6b1a65f09479b17d04f89a93ddde114ae2ffad05e6fe15a70145dca7c9bdd3b1f6706e9f78ab7af02553586a7fd950974137cb974ad4307a965efa529aa219d0f4f5075d10b3442cb02017af4b6519fb49d47c9020a3b12bbd391c442fa5ebdd0d3716ae2442604c678ce4af0b9dc21f66685b4c3ba7fbba6a9bcd2eeda1eb216185bdfdfc6971c5ed277b165e07dba10e7e7bd861f5e0755fe200000e1f7bace178011853c740294683f15709ff2cfc42580342bb0a1408e78658d1aa49aa87f35c89eb17a6b99c18ce6d6c6d2fc46b98cb4b0ce4f8a22852fe9d068977582c29d070f2d533f47a1d069eccf5ff85006c324f342ffa8275a1df254fc7c7e3844aef51b00b2ef655b5fcd4664021f79bd9f118665b24668053ab692ebffb4ea4daa2ea4fce9b32d18204bfdee826a11c9e10f48bfc338a46e7d58ab52749d979b5ab2ce630e9fa73842774896ecb367e8d1724a2a964177f5f2555e046d0da97d75aa1cb7869b11dc781537482408f1565c41a7581a00cbdb823e8865068056664ee1d696f02b6dfa0a0e659a9d6a0ad4fe378cc15a2963c4d0f049dae9aa8c3617ab692124a741511be9f1cb445351312d013168d7eee8f12d48126757ca06bee5e43f05284efe9c6cbd7b1f623139e93d8fcadd7e2fc53cf4c00f7fb0493292d753170cc67af99ac69757d71cbc54b1c1bdaa96eb73eab23a6163d5506aac1def5190dd7f73de5e27c8df56fe3b5079b1a28032450e09022095098f26d29d976b6891febd0346dbe917b725aa7dc28ce70c3503cf7fb0257a23fd179da04e141502117e39f5a208b17dcae08a3b5ce63f95baa61b2b9dfd358ac11e532b9a188e317b91c6ad11c67f9c933be582bcd87846088c98e00c26394292d2265f27595c45393210ca03211108e686fb0ff569e3085584daf7d4d2eab0380fbb3a7a5a25730997f59cf465c64ae4002c895e2a7de0ad735c366214e3df2bec29012324a298e4768fdcb560c07839cb4479c06d4499a7f984e3f4a8593fab553d144851441c6e91759b8e97b4a625effd6a5a197995da366bcdcff8bac79838ced68b6c31d242e60bed0853f150d103c81f2fd19e247d407ec00156c4b4e384f1a6bb86424f53fb9dded096e9f75bdc8c6d8c2a4b1c4f8afd728976c5ba804f9a2d3f5f94f73988431621808f67f35d0feda71238084411276150c0fb067a475ec2800bdb5b966c968187fccb7cefc43ecce8392a14962ed82eb34b7d118792efd0cf67061c43f240c5f82d723730153d38290968a405fd6ab4388079bc5b5b2392ab4f1cb16b6323822f174a324624c322224bcc709d9fd96d91e6bb244f510ed507d4d49a97330f6e12da2a1a274ff41b587f664af0ff775ab7379e49dd3f4c9ae00f4e1b309724f1defeb6bed948c047e94688d0ddc8bad8605e88fe810f9a89a072c4e2b6feddad1feae1ac92dc8b1f07b86d623b1ad4f3df359b03b829cdcede14b6dd29a58e7c5c6e1340d345b62a8ff8150d2dd22a631bc557f8760c26be00647d62291504f70c4f0d1c919d0beede001d3e8d24fc2ec95be1f33c44c7bb0b9764c9e5c38405bf7788da5c7883af3c31ad5c8ddb7b9f84a792d50b1597dc6454a2bc1254321f0a9d633437310fb25db7733c201371f0eb73506f4ecdb58b4c3e0b7a223ff20dbdeafd449de5968078eae4d758878fc18065a20c519a505d3bb07c4801634dea3410824e5f35d4caae801bdd2630141b944c1cbced4eaf1c74b4c59f7d00c97a7cc94084cfd84e4104c317a39f0b8ff9c4c8afefcd94833aa10fba9268d364af3e26a96cfead99f9b31e53725613343fc102c90d99bcdeaf43aa5052d9caf68953a0add5cffca28d3b23ae5dd6ae898325b6adbf95105afe7bd415839ea26db9fbd06b7de8747780d779f9589994e3d4efc717a5556073965b0fd35f2499120481baacb3f60563f68da9bbe1096484855b842b6b5f4d1e3f357e8001572bba4b366d9eeeb197832306af70f24610c6bb95cf58e484d25f4f11f2afadc5642a92717bda44cc5dba5d9e85474f8b49a042ceb8f0788bfca8168b54457a44ee0816bd4be191d18f67389766c41377da920036b1220ae14f05a332b59c5ecf66f50c4906834cd12a86d925dd58cb9ce7b502faf6859bdff36bf99020748307c38dbf110ffaf61491b7a5866e7f57314140f696fa4af9be0d83a1ce88b9eaa66581471aeb1cf15d8dd7362fa9f540515025aec1f2e98b141c97829d8a3edff5fb9f6881dc7486085658434504a5f24c597bcd1783ceec8c82fd17f29c5cb056764102bfd174aa82e17f7a4fc8720e7af98cf23a1dbe64dcc3d3420b4386e58798e0e0f46fc4feb11578ae384a8badd3828fd5118d6615fad7558387841199084b08d20ba3ebea818fc13d502f303dd2c192f3ee536e17889419c6f4024e2d130f4f60b956934df00fabe44739b1d356bf8e8cbe4f20eda6686bcbb4000000000000009e99e65a3bf002635ba5f1bd724057e1809976d11a87b6d31731577b0a8ff572ecf83a23807673e4e475f7cc0a96840e25b31c4b9064eef35502b681bb7f2c74071848aa2e92d73221e965df1aba81169436a809400caa4beaf44972411bcaa1770177b964635e9b45b42ddeea85f5643031cb421b8b90f95200960dc6b008baf4c1efcd9a267cb136450fb3c38bb6030589de0d666090c2259f1b4cd97083e092e8f28e617e510f66baa15d93111b0696a12e590f0b14f3834dce2a50413b8aa67c0a4e8971572dfd81dcaa2dec1ff79a2248404af4261c4d238e55d6e5c613ad9a06651cec8aa76fb0e458919795aae4e5c2f29b0f4ee062c83a09ff100bc4f95d3dd1852a8b727afc2b69e82d648f6bf67e6a2c9b3f13550a53b6219cd3c95c5bde422fd5e554585f81e3c5abd2c32bdc70c61f298cff392af03bbb12ac42590744eddbf79d85591a152d5b4d8062262a222afa343609e7bd48344610c7ca1d17837a33c6e5cf2843bfe65af61dc597fd9c56add05defbcba3735a2784506742b27dfd3d2301667d257c84f06a79eb43fbaadda1ec74a39ef30b51945d3d0ef217a3b9b3d96bf6c1ae06d9cfe1f44d37c7306aaf801ee99a599975833799de20b2837b0684f5af828401a83cc0f530e746997d187894ac95a3133216fefdec90ecdca21c96f76e5bf32094e62d700306cffe229f02f96eaf6956bf07278891aa8e4740813be862bee76607238a9daad12f68c9633b4f000703256e0fffaedd88f4386472578b38fc11dcb7367d7489bda56a78c94f3140c8b1abf2960d5ca0dd438eafd47fb499f6a9279f4eb5546c229bf7cf27cd655e91efc0c845e1afc9791afd87bba759ef1486493e99d01e99afd017fbfca764f690abdd2201dcd21b44164b38742cb27866aba9077b744c2c686191e5313477b7baeb7fdeae840b250e8339fcf4b709a5b6706972bbb48458881b4b68c228867a096454a36d869089446a3c784841d4e97aacead4d43c24062a15a8f3506ca8c860314fe4103bd4d39c090d80df4bfd773f468a71b332bb18c9416000b0b79d14369e922fa5f617aff95508c53287d0c780f2b4902f47f1c0741d4f919c64fc8198c995caefca90008ab94d337c41fd4e89a937a972bf4210925b3d2db1e0b3ec73d5b24308f5361ef0a8a3aff1e2c88bff171ddb2c57023ab709c73f3fd58060d99c7d04b7915e1b83c26ebe5dbaa3be454157b77b0f95a10ed9c028f9c5748684da343d61972e73ef35d82638476481395e62e9840465a20ed6b55ef42557869e071fe7e52aee1481fa12f4baf60c7dea1d8da27e51c76bb37a67cd3165c3865797f8a125e822e15b0c5749de618a62c3894e1a1e3a8c7f75001dbfc26fd62540bd5f58d2116f357ca73b157850d722b3b43ceac1b22849773b0c08e263993a86215e2e3b670c271f9aff66da80a991516e65d29a5586269993aea24ac5bf6aa5a1a5480b25cce76ff6914139d925f1b270102f38084334bd105c50658330eb3b1a96045b8f46397eee5e5db2980e23ff7aa59075a8083f8da0120a6f090a512d9995551bad82eaad75e12817f8b3e235ff93a08f454c3f3afc9bd1e99cbaaab16abf57a729ed2ea5374e328074fe709861916aaad610dc1949ae917569982d42d54108f6d0a532e59d7699cea8bf4e3fc5a66e9d399700b079c94ac22044ae6dbae5d3942e1b4076b10213749b54d80ca0d682713481c2c1630853e133682b0ea0bb4ff6e045d085c03881ec84e83cc0f9c4cacd1e3dc7a71e8c7c49e008820e2382db7eccd726dcb12800cffc195faaffa409e2cfcf94425af3b19f60fab2f5b601c3593aeeca90d60bf6f41fbf3a07808689842f3be70d08e9f1ade2a196330264206b1cdbdf3dbaa13bac630a6021b59c593716a80f8adeff1f155fbc44c281aa4b968d480184967554923fd08b43e239c49d0d7df6f7ed078d9d147a5cbbcbca837b2f55d6e888200813e6eb4453e9142206f93a7f89d264f013345162564aa49a6fe0f51184ccf9a0743df5873450b06d5ff90b6c3cbcccb66f4f1998eabcca5e0ffb452ad32f2816f575de99ffb56260d339cf2a2a36e9fbd8e911e9b240de3819afa860f8998940ab55c49189718a3f445c8254a74b2f3ca7340b7643e0d1a9f5bb22bfc1ba134762566df2af9bd5f12d36289aa1348e6966837260e79390c9f205b11a909994d21329c3ce4c33d0100de5aa63caae95de56ca34fff766e9589ae364b88e482e62428505554a6ffd25e28356531a39c393af359d80918fe3d7c0333db79a7a45d9afcee10da3285434a11cb3e1953348c02a41aa763cf92a34fa69f4ddfd992e3156c3163cdccbfaf28bce5412e744d8859b44d2166ee9ed7fb15d22a96de8301798216850ecfbeb2a32781082c1a6c758b98e8f2320d9b5cc1ae2d3b8d22de4e4bf23314f987e5d59a34c2a80177ef111b3b0109ff4af1d198ac058746168796a60d769ba4b53bb791e3a8bc1baa73b0eaa33830776ca8a810ff99f67f22de4fdd566823b4bea4f7ee38ccbe3298b04d567a6f4cbad957f6a2f4886af4ba357f2f4cb6b8f01be26120e83c8728da8ed86057b44d27705e9bc31b676c8bb0bd70ab478525b071388cd4b6be2c9ba3314323a938fc89548703599c6a78fd770129e3bd53a9a71e6b3b4fbbd7f8fd744c7a12a3cdfd98ba206b372ae643640f1e6e78adc23f859493f30fc560f67ad91cd988074f8a5b503cc0b332486696cbd786cf7556744762ad2874771a78a79a51946fb59989a19d3056aae52d988e9db95e9bb7209398ffd1b5301d88909131308377705089ef4747918d12402b54fe246c6589caec249bff4ffee2b6a135c108ea457bf3cafcac7582737ea7a1b65dc24bee4544cff0f6ce806384f6a28b7af0251a1fa5b4630e4710ff652a3ee72b0e6259f30ec16a52dcfeff64fb1b6f4c10c06e998ebda1cce43f926d82382a86d7b533fd7a65eb54ae6cb66276199888cc5ea4216ceb04db6bf5ece68a20b645b7792aba12702397cec110f9bdc58aa6819b7605eff0e68ce2a83d4f99319e391f35d7f810714d97318e01c0d91d8fecf3a1549cd51295da3b92c56eee965cab7db912c3fba86365693bfd2f357c4210737ce3697145852195336cbe89e6b7c0ee8620715ab330046cc2faf98bcce66d764b42b02451f665cb906558da6ed1c0a67e0cd1259dab5536e66988271256eadca86edf0ce071326abe01a20937aa62db7460d013dcbc2fb911de352cd5dc4480a09a393777e3ea7eb456feb9b94b8cf1df36355aa6bd635939e1981130c52d4195f90000845c0e0717b69148a3d78af78370593cc6ed18398ce7a36d1b2fa9a9b6041054e2899f135263a49b43d7cb207cacfb9cdc38beb4c2ec8edb128bab00ecf95906c82814b3b02230e1f94cb2811073d75da43d0d7c5ae5ad54d594a27a513cfd2c01e2ab33f4a9682d64cd4c5d9ee9d9c18684cd670f49849b8a3a8eefa0624bbf84fcea69c2d768a832f4433a563936131963f15de4ee43b6865a033b0129ee6ef26e5070a3ede03cefdb05dceef804f0aae68a59db56c64f5447ed9a2e865b5b81eee816ea18b1efbede2e71ac1dc45353431f5bdf361c1bb0d2fcf74b2af95ab47aec8563f60cceba7295a21b58baccd076b49faed2de8e4beb7c10694f86bf4aee05f5e64b21c4652eea9aa71fc3ec25205b5d06fa6c327e64df753cfe64233972639aad0a8f452379f1f598fb49e044d9572076d75a4726bdc8f03a9c51b000ea80cfb42716cdc23d990e5adf071a711b0512b2151d4c51465d73f0a90194fe71214d0ec867e67e5c6c57ad4fb76217559018e9572082c6ec99ab02c056c5c561efc254f6d3a551cff108195b74bbe21ccaab79bc942d32d976deb15b2926faa5459a9a34887555c0793912f93a60bb8a9fdf7164c6fecbdccfa6318bce178584221d1f4a445dab00c4a7acf28104bee65723141a4e2e31ce51aa54158e0ad875d852c89dbf02d371c08217bc84ac8ab8e6af7f5d81d8b428e8e1e4cb7c0cc33642440506ac4c5f0c91fa1d3a75246aa024ec5e6f72341a500b9308862ba45d588b1a5fa903a4dde04054d50d1241e0682c7479e237642168f9918fd133c0c32e570b7775901492b3aea72770f6f86e6443b9b04c384693ef7f2f085ae08c767f231dc8435ec123db3de1e44ae6c88216aaae35b23583152806225cbea39aecb768e37c8ef2635a910d1657fe5c32fd8415b1afe3d1e530fdcfde0173623de4f6cf7bceaa9e8e7ae95b865289b8cd640721a07f48895e0af73acb7610253b4267be9488d9922bcb183a6e8f0b4d549b53ec3166a3e5ce9739ef650af8b10600a94f1afb7cc281227408a7e48b29a86dc9d2bd410c54465dd7acc1ac062b761bdb298a9d609a71b4b905d7dae8bc27f24d8f1e9acb5501934da6c0807996f61252b60e04105e311248c1b7b0cdda7ee77db36a507bc4b476d9d88b7ece67c6bbccee8f6a85b0f1d7b70a14ea4a9e033778ce05de5503dcff0ec317f7ad2f40e773592e04d2109d757e8a274ecc4605acd2dd29173476dc2603507ae0486e1f3ae5b057b9c4f759fc071d9e1da59ee87343d8dfbad6d51920228148b2a9ae5d1d7e53cad8c5b09423c90c2abd098ed359e9098291ebf7efd5d7584c30541eb63e85553068e62e07bb764fe81b2d723d90d280a7eba95c581865c33d2ee5d112b58a1640283948379e894109c07eb39422cb55c9d690a9f55b9853ba030db2234eb3636cf2c981a907d710bfbbe666e701baba9aee635e664e83603662a8ff41ac146aae68df29010158f453b2027d54dc6976ca29533f8fff64f316cd3fd7b2f3bfcf7c07107d9725375bef48027bf27fa17c6eedec5e651abf98efdf675761397abdd30c8aa263e89008e0516cd199e10b60b800", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 252.809077ms ago: executing program 2 (id=586): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a80)={[0x5]}, 0x8, 0x80000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x148b83, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 226.474091ms ago: executing program 0 (id=587): socketpair(0x2, 0x2, 0x6, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x6, 0x4) syz_genetlink_get_family_id$tipc(0x0, r0) 225.587955ms ago: executing program 1 (id=588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40800c5}, 0x8004) accept4(r1, 0x0, 0x0, 0x800) 66.724389ms ago: executing program 2 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='bus/pci/drivers/gve/bind\x00', 0x0, 0x180) 66.400499ms ago: executing program 1 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) 66.168825ms ago: executing program 4 (id=591): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 0s ago: executing program 0 (id=592): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xad35}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) kernel console output (not intermixed with test programs): 00][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.000200][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.131177][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.132884][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.135465][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.137054][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.137629][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.138959][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.139886][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.140288][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.141739][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.143603][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.146549][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.153057][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.154511][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.156474][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.163311][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.172211][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.199221][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.199811][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.203234][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.236083][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.056495][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.057389][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.072783][ T5611] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.078712][ T5612] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 97.079949][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.114975][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.413795][ T5614] infiniband rxe0: set active [ 97.413867][ T5614] infiniband rxe0: added rxe_eth0 [ 97.439249][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.455632][ T5614] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 97.455670][ T5614] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 97.455711][ T5614] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 97.539969][ T5614] RDS/IB: rxe0: added [ 97.540546][ T5614] smc: adding ib device rxe0 with port count 1 [ 97.555378][ T5614] smc: ib device rxe0 port 1 has no pnetid [ 97.584215][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.605598][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.936389][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.168424][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.169344][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.169638][ T5612] bridge_slave_0: entered allmulticast mode [ 98.192728][ T5612] bridge_slave_0: entered promiscuous mode [ 98.218013][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.219074][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.219258][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.219657][ T5613] bridge_slave_0: entered allmulticast mode [ 98.221301][ T5613] bridge_slave_0: entered promiscuous mode [ 98.221587][ T5622] Bluetooth: hci3: command tx timeout [ 98.235227][ T5622] Bluetooth: hci0: command tx timeout [ 98.265594][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.265745][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.265935][ T5612] bridge_slave_1: entered allmulticast mode [ 98.267854][ T5612] bridge_slave_1: entered promiscuous mode [ 98.301455][ T5622] Bluetooth: hci1: command tx timeout [ 98.301463][ T4926] Bluetooth: hci2: command tx timeout [ 98.351215][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.351322][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.351464][ T5613] bridge_slave_1: entered allmulticast mode [ 98.353186][ T5613] bridge_slave_1: entered promiscuous mode [ 98.390216][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.397507][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.419840][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.419941][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.420374][ T5611] bridge_slave_0: entered allmulticast mode [ 98.427708][ T5611] bridge_slave_0: entered promiscuous mode [ 98.472945][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.473042][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.473455][ T5611] bridge_slave_1: entered allmulticast mode [ 98.475453][ T5611] bridge_slave_1: entered promiscuous mode [ 98.511516][ T5612] team0: Port device team_slave_0 added [ 98.549635][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.563351][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.565835][ T5612] team0: Port device team_slave_1 added [ 98.598727][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.637965][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.664541][ T5613] team0: Port device team_slave_0 added [ 98.665654][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.665679][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.665714][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.675429][ T5613] team0: Port device team_slave_1 added [ 98.746899][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.746917][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.746943][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.800276][ T5611] team0: Port device team_slave_0 added [ 98.800327][ T5614] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.840010][ T5611] team0: Port device team_slave_1 added [ 98.849835][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.849852][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.849879][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.935809][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.935829][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.935856][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.937861][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.937876][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.937902][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.944689][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.944719][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.944782][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.098669][ T5612] hsr_slave_0: entered promiscuous mode [ 99.099965][ T5612] hsr_slave_1: entered promiscuous mode [ 99.153833][ T5613] hsr_slave_0: entered promiscuous mode [ 99.154972][ T5613] hsr_slave_1: entered promiscuous mode [ 99.155783][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 99.155912][ T5613] Cannot create hsr debugfs directory [ 99.195046][ T10] cfg80211: failed to load regulatory.db [ 99.264833][ T5611] hsr_slave_0: entered promiscuous mode [ 99.265701][ T5611] hsr_slave_1: entered promiscuous mode [ 99.266233][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 99.266253][ T5611] Cannot create hsr debugfs directory [ 99.701125][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.724930][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.734018][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.750633][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.758885][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.773831][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.776381][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.798743][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.952892][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.957192][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.957969][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.967919][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.989738][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.989841][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.989969][ T5614] bridge_slave_0: entered allmulticast mode [ 100.012941][ T5614] bridge_slave_0: entered promiscuous mode [ 100.022078][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.022208][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.022555][ T5614] bridge_slave_1: entered allmulticast mode [ 100.024314][ T5614] bridge_slave_1: entered promiscuous mode [ 100.028936][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.044631][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.049309][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.072767][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.126714][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.151664][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.202454][ T5614] team0: Port device team_slave_0 added [ 100.205075][ T5614] team0: Port device team_slave_1 added [ 100.248314][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.248330][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.248357][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.250508][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.250522][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.250547][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.263928][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.303098][ T5622] Bluetooth: hci3: command tx timeout [ 100.303578][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.304764][ T4926] Bluetooth: hci0: command tx timeout [ 100.354992][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.374942][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.376020][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.379599][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.381885][ T5622] Bluetooth: hci2: command tx timeout [ 100.382426][ T4926] Bluetooth: hci1: command tx timeout [ 100.437750][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.444503][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.463675][ T5614] hsr_slave_0: entered promiscuous mode [ 100.464549][ T5614] hsr_slave_1: entered promiscuous mode [ 100.465223][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 100.465239][ T5614] Cannot create hsr debugfs directory [ 100.659591][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.732508][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.779571][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.779668][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.809618][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.819431][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.820311][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.833286][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.848971][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.858342][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.869392][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.881258][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.881332][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.886788][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.890160][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.944786][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.952691][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.982012][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.982314][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.017354][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.017462][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.067550][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.104363][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.104435][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.132729][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.132823][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.337862][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.383191][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.409476][ T2178] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.409596][ T2178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.449208][ T2178] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.449328][ T2178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.126608][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.256034][ T5612] veth0_vlan: entered promiscuous mode [ 102.267510][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.273304][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.311830][ T5612] veth1_vlan: entered promiscuous mode [ 102.380965][ T5622] Bluetooth: hci3: command tx timeout [ 102.381068][ T4926] Bluetooth: hci0: command tx timeout [ 102.437001][ T5613] veth0_vlan: entered promiscuous mode [ 102.462540][ T5622] Bluetooth: hci2: command tx timeout [ 102.462628][ T4926] Bluetooth: hci1: command tx timeout [ 102.484274][ T5612] veth0_macvtap: entered promiscuous mode [ 102.486926][ T5613] veth1_vlan: entered promiscuous mode [ 102.488339][ T5611] veth0_vlan: entered promiscuous mode [ 102.515101][ T5612] veth1_macvtap: entered promiscuous mode [ 102.548922][ T5611] veth1_vlan: entered promiscuous mode [ 102.568042][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.600476][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.629964][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.646507][ T5613] veth0_macvtap: entered promiscuous mode [ 102.676551][ T5613] veth1_macvtap: entered promiscuous mode [ 102.692927][ T5611] veth0_macvtap: entered promiscuous mode [ 102.704873][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.705473][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.705588][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.705689][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.750219][ T5611] veth1_macvtap: entered promiscuous mode [ 102.786890][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.824269][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.849636][ T5614] veth0_vlan: entered promiscuous mode [ 102.858969][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.892459][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.954634][ T5614] veth1_vlan: entered promiscuous mode [ 102.960090][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.960141][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.081526][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.081548][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.092402][ T206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.148823][ T2178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.148843][ T2178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.153634][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.154215][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.202580][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.263392][ T1011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.268774][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.305333][ T2178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.305354][ T2178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.312067][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.314238][ T206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.319513][ T5614] veth0_macvtap: entered promiscuous mode [ 103.332328][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.385977][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.385999][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.430500][ T5614] veth1_macvtap: entered promiscuous mode [ 103.470926][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.470948][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.542810][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.585370][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.723432][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.846631][ T33] audit: type=1326 audit(1792077502.003:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 103.846720][ T33] audit: type=1326 audit(1792077502.003:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 103.850566][ T33] audit: type=1326 audit(1792077502.003:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 103.850622][ T33] audit: type=1326 audit(1792077502.003:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 103.850664][ T33] audit: type=1326 audit(1792077502.003:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 103.850718][ T33] audit: type=1326 audit(1792077502.003:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 103.884535][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.887231][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.087338][ T2178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.087362][ T2178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.116434][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.224292][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.224315][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.272711][ T5777] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.331495][ T33] audit: type=1326 audit(1792077502.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 104.331549][ T33] audit: type=1326 audit(1792077502.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 104.461922][ T5622] Bluetooth: hci3: command tx timeout [ 104.461976][ T4926] Bluetooth: hci0: command tx timeout [ 104.485863][ T33] audit: type=1326 audit(1792077502.653:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 104.486658][ T33] audit: type=1326 audit(1792077502.653:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz.3.6" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fffb9e559 code=0x7ffc0000 [ 104.543472][ T5622] Bluetooth: hci2: command tx timeout [ 104.543524][ T4926] Bluetooth: hci1: command tx timeout [ 104.649955][ T5785] MTRR 1 not used [ 105.417870][ T5806] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 105.725016][ T5821] FAULT_INJECTION: forcing a failure. [ 105.725016][ T5821] name failslab, interval 1, probability 0, space 0, times 1 [ 105.725155][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.3.25 Not tainted syzkaller #0 PREEMPT(full) [ 105.725182][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.725204][ T5821] Call Trace: [ 105.725253][ T5821] [ 105.725294][ T5821] dump_stack_lvl+0xe8/0x150 [ 105.725415][ T5821] should_fail_ex+0x3eb/0x540 [ 105.725465][ T5821] should_failslab+0xa8/0x100 [ 105.725489][ T5821] ? alloc_empty_file+0x5b/0x1d0 [ 105.725569][ T5821] kmem_cache_alloc_noprof+0x9c/0x600 [ 105.725602][ T5821] ? alloc_empty_file+0x5b/0x1d0 [ 105.725667][ T5821] alloc_empty_file+0x5b/0x1d0 [ 105.725698][ T5821] alloc_file_pseudo+0x110/0x1e0 [ 105.725730][ T5821] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 105.725765][ T5821] ? alloc_anon_inode+0x194/0x330 [ 105.725801][ T5821] aio_setup_ring+0x1eb/0xe20 [ 105.725835][ T5821] ? pcpu_alloc_noprof+0x1036/0x1900 [ 105.725862][ T5821] ? __pfx_aio_setup_ring+0x10/0x10 [ 105.725898][ T5821] ioctx_alloc+0x313/0x830 [ 105.725922][ T5821] ? __might_fault+0xaf/0x130 [ 105.725952][ T5821] __se_sys_io_setup+0x7b/0x1d0 [ 105.725977][ T5821] do_syscall_64+0x166/0x520 [ 105.726009][ T5821] ? trace_irq_disable+0x3b/0x140 [ 105.726033][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.726057][ T5821] ? clear_bhb_loop+0x70/0xc0 [ 105.726085][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.726107][ T5821] RIP: 0033:0x7f0fffb9e559 [ 105.726164][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.726212][ T5821] RSP: 002b:00007f1000a0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 105.726316][ T5821] RAX: ffffffffffffffda RBX: 00007f0fffe25fa0 RCX: 00007f0fffb9e559 [ 105.726332][ T5821] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 105.726347][ T5821] RBP: 00007f0fffc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 105.726361][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.726375][ T5821] R13: 00007f0fffe26038 R14: 00007f0fffe25fa0 R15: 00007fffd4eeedb8 [ 105.726411][ T5821] [ 106.519050][ T5847] syzkaller1: entered promiscuous mode [ 106.519075][ T5847] syzkaller1: entered allmulticast mode [ 106.661866][ T5853] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 106.752896][ T5858] sg_write: data in/out 373125/136 bytes for SCSI command 0x0-- guessing data in; [ 106.752896][ T5858] program syz.2.40 not setting count and/or reply_len properly [ 106.856823][ T5862] FAULT_INJECTION: forcing a failure. [ 106.856823][ T5862] name failslab, interval 1, probability 0, space 0, times 0 [ 106.856856][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 106.856892][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.856909][ T5862] Call Trace: [ 106.856918][ T5862] [ 106.856927][ T5862] dump_stack_lvl+0xe8/0x150 [ 106.856962][ T5862] should_fail_ex+0x3eb/0x540 [ 106.856995][ T5862] should_failslab+0xa8/0x100 [ 106.857022][ T5862] __kmalloc_cache_noprof+0x9e/0x600 [ 106.857054][ T5862] ? userio_char_open+0x51/0x1a0 [ 106.857109][ T5862] ? userio_char_open+0x51/0x1a0 [ 106.857146][ T5862] ? __pfx_userio_char_open+0x10/0x10 [ 106.857169][ T5862] userio_char_open+0x51/0x1a0 [ 106.857265][ T5862] ? __pfx_userio_char_open+0x10/0x10 [ 106.857288][ T5862] misc_open+0x2d5/0x350 [ 106.857339][ T5862] chrdev_open+0x4d9/0x600 [ 106.857368][ T5862] ? __pfx_chrdev_open+0x10/0x10 [ 106.857391][ T5862] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 106.857441][ T5862] ? devcgroup_check_permission+0x31/0x8f0 [ 106.857470][ T5862] ? __pfx_chrdev_open+0x10/0x10 [ 106.857493][ T5862] do_dentry_open+0x80e/0x1360 [ 106.857531][ T5862] vfs_open_consume+0x4a/0x350 [ 106.857554][ T5862] ? path_openat+0x16e1/0x20f0 [ 106.857578][ T5862] path_openat+0x16fc/0x20f0 [ 106.857619][ T5862] do_file_open+0x258/0x570 [ 106.857641][ T5862] ? __pfx_do_file_open+0x10/0x10 [ 106.857683][ T5862] ? _raw_spin_unlock+0x28/0x50 [ 106.857705][ T5862] ? alloc_fd+0x6af/0x760 [ 106.857746][ T5862] do_sys_openat2+0x115/0x200 [ 106.857772][ T5862] ? __se_sys_futex+0x3a8/0x450 [ 106.857802][ T5862] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.857835][ T5862] ? rcu_is_watching+0x16/0xb0 [ 106.857867][ T5862] __x64_sys_openat+0x138/0x170 [ 106.857899][ T5862] do_syscall_64+0x166/0x520 [ 106.857923][ T5862] ? trace_irq_disable+0x3b/0x140 [ 106.857945][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.857967][ T5862] ? clear_bhb_loop+0x70/0xc0 [ 106.857993][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.858014][ T5862] RIP: 0033:0x7f1b1cb9e559 [ 106.858034][ T5862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.858052][ T5862] RSP: 002b:00007f1b1daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.858075][ T5862] RAX: ffffffffffffffda RBX: 00007f1b1ce25fa0 RCX: 00007f1b1cb9e559 [ 106.858090][ T5862] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 106.858105][ T5862] RBP: 00007f1b1cc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 106.858128][ T5862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.858141][ T5862] R13: 00007f1b1ce26038 R14: 00007f1b1ce25fa0 R15: 00007ffeec300858 [ 106.858176][ T5862] [ 107.205282][ T5864] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.43'. [ 107.452577][ T5877] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 107.672075][ T5887] gadgetfs: bound to dummy_udc driver [ 107.802813][ T5891] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.871851][ T193] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.016856][ T5897] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 108.049142][ T193] usb 2-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 108.079283][ T193] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.079425][ T193] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 108.079451][ T193] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.122346][ T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.122376][ T193] usb 2-1: Product: syz [ 108.122391][ T193] usb 2-1: Manufacturer: syz [ 108.144977][ T5898] syz.3.59 (5898) used greatest stack depth: 19376 bytes left [ 108.157528][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.195733][ T5885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.224218][ T193] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 108.260727][ T193] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 108.321605][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 108.322605][ T27] usb 1-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 108.323135][ T27] usb 1-1: config 0 has no interfaces? [ 108.323165][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.366919][ T27] usb 1-1: config 0 descriptor?? [ 108.456193][ T5700] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.482793][ T193] usb 2-1: USB disconnect, device number 2 [ 108.526661][ T5700] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.552208][ T193] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 108.554592][ T193] garmin_gps 2-1:1.0: device disconnected [ 108.676963][ T5700] usb 1-1: USB disconnect, device number 2 [ 108.728891][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.104036][ T5918] syzkaller1: entered promiscuous mode [ 109.104076][ T5918] syzkaller1: entered allmulticast mode [ 109.421915][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.593916][ T32] usb 2-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 109.595953][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16398, setting to 1024 [ 109.596004][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.640593][ T32] usb 2-1: config 0 descriptor?? [ 110.287911][ T5955] warning: `syz.0.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.309601][ T32] usb 2-1: string descriptor 0 read error: -22 [ 110.713441][ T32] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 110.713535][ T32] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 110.713571][ T32] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 110.713674][ T32] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 110.713786][ T32] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 110.768723][ T32] usb 2-1: USB disconnect, device number 3 [ 110.950496][ T5980] capability: warning: `syz.3.91' uses deprecated v2 capabilities in a way that may be insecure [ 110.982687][ T5700] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.009549][ T5982] FAULT_INJECTION: forcing a failure. [ 111.009549][ T5982] name failslab, interval 1, probability 0, space 0, times 0 [ 111.009578][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(full) [ 111.009599][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.009611][ T5982] Call Trace: [ 111.009619][ T5982] [ 111.009628][ T5982] dump_stack_lvl+0xe8/0x150 [ 111.009660][ T5982] should_fail_ex+0x3eb/0x540 [ 111.009702][ T5982] should_failslab+0xa8/0x100 [ 111.009722][ T5982] ? copy_fs_struct+0x4f/0x270 [ 111.009769][ T5982] kmem_cache_alloc_noprof+0x9c/0x600 [ 111.009796][ T5982] ? copy_fs_struct+0x4f/0x270 [ 111.009825][ T5982] copy_fs_struct+0x4f/0x270 [ 111.009851][ T5982] ksys_unshare+0x4ab/0x890 [ 111.009877][ T5982] ? __pfx_ksys_unshare+0x10/0x10 [ 111.009903][ T5982] ? rcu_is_watching+0x16/0xb0 [ 111.009935][ T5982] __x64_sys_unshare+0x38/0x50 [ 111.009956][ T5982] do_syscall_64+0x166/0x520 [ 111.010016][ T5982] ? trace_irq_disable+0x3b/0x140 [ 111.010036][ T5982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.010055][ T5982] ? clear_bhb_loop+0x70/0xc0 [ 111.010079][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.010097][ T5982] RIP: 0033:0x7fbe1c19e559 [ 111.010115][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.010131][ T5982] RSP: 002b:00007fbe1d094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.010151][ T5982] RAX: ffffffffffffffda RBX: 00007fbe1c425fa0 RCX: 00007fbe1c19e559 [ 111.010165][ T5982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 111.010176][ T5982] RBP: 00007fbe1c2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 111.010187][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.010197][ T5982] R13: 00007fbe1c426038 R14: 00007fbe1c425fa0 R15: 00007ffce6d3ac88 [ 111.010234][ T5982] [ 111.132330][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 111.158094][ T5700] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 111.163021][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.163085][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.163194][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.228817][ T5700] usb 1-1: config 0 descriptor?? [ 111.276589][ T5700] hub 1-1:0.0: USB hub found [ 111.483143][ T5700] hub 1-1:0.0: 1 port detected [ 111.538749][ T5997] FAULT_INJECTION: forcing a failure. [ 111.538749][ T5997] name failslab, interval 1, probability 0, space 0, times 0 [ 111.538784][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(full) [ 111.538810][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.538823][ T5997] Call Trace: [ 111.538831][ T5997] [ 111.538841][ T5997] dump_stack_lvl+0xe8/0x150 [ 111.538878][ T5997] should_fail_ex+0x3eb/0x540 [ 111.538913][ T5997] ? __pfx_proc_alloc_inode+0x10/0x10 [ 111.538952][ T5997] should_failslab+0xa8/0x100 [ 111.538978][ T5997] ? __pfx_proc_alloc_inode+0x10/0x10 [ 111.539001][ T5997] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 111.539032][ T5997] ? proc_alloc_inode+0x2a/0xc0 [ 111.539054][ T5997] ? proc_alloc_inode+0x2a/0xc0 [ 111.539084][ T5997] ? __pfx_proc_alloc_inode+0x10/0x10 [ 111.539108][ T5997] proc_alloc_inode+0x2a/0xc0 [ 111.539135][ T5997] alloc_inode+0x6a/0x1b0 [ 111.539166][ T5997] new_inode+0x1f/0x170 [ 111.539193][ T5997] ? proc_get_inode+0x1a/0x6a0 [ 111.539222][ T5997] proc_get_inode+0x22/0x6a0 [ 111.539252][ T5997] proc_lookup_de+0x251/0x340 [ 111.539285][ T5997] __lookup_slow+0x1fb/0x2f0 [ 111.539322][ T5997] lookup_slow+0x59/0x80 [ 111.539355][ T5997] link_path_walk+0xd22/0x1910 [ 111.539408][ T5997] path_openat+0x1b7/0x20f0 [ 111.539451][ T5997] do_file_open+0x258/0x570 [ 111.539477][ T5997] ? __pfx_do_file_open+0x10/0x10 [ 111.539553][ T5997] ? _raw_spin_unlock+0x28/0x50 [ 111.539574][ T5997] ? alloc_fd+0x6af/0x760 [ 111.539612][ T5997] do_sys_openat2+0x115/0x200 [ 111.539638][ T5997] ? __se_sys_futex+0x3a8/0x450 [ 111.539665][ T5997] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.539704][ T5997] ? rcu_is_watching+0x16/0xb0 [ 111.539754][ T5997] __x64_sys_openat+0x138/0x170 [ 111.539787][ T5997] do_syscall_64+0x166/0x520 [ 111.539811][ T5997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.539834][ T5997] ? clear_bhb_loop+0x70/0xc0 [ 111.539861][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.539882][ T5997] RIP: 0033:0x7fdc7559e559 [ 111.539902][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.539920][ T5997] RSP: 002b:00007fdc76437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.539949][ T5997] RAX: ffffffffffffffda RBX: 00007fdc75825fa0 RCX: 00007fdc7559e559 [ 111.539966][ T5997] RDX: 0000000000000002 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 111.539981][ T5997] RBP: 00007fdc756358b0 R08: 0000000000000000 R09: 0000000000000000 [ 111.539994][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.540006][ T5997] R13: 00007fdc75826038 R14: 00007fdc75825fa0 R15: 00007ffdc26f2e88 [ 111.540042][ T5997] [ 111.747344][ T5700] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 111.795037][ T5700] usbhid 1-1:0.0: can't add hid device: -71 [ 111.795276][ T5700] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 111.874290][ T5700] usb 1-1: USB disconnect, device number 3 [ 111.981894][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.142286][ T32] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 112.143433][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.148435][ T32] usb 3-1: config 0 descriptor?? [ 112.362206][ T32] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 112.491450][ T5615] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.655240][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 112.656551][ T32] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 112.656603][ T32] [drm] Initialized udl on minor 1 [ 112.657703][ T5615] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 112.658889][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.658921][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.658963][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.694136][ T5615] usb 2-1: config 0 descriptor?? [ 113.198589][ T5615] HID 045e:07da: Invalid code 65791 type 1 [ 113.199109][ T5615] HID 045e:07da: Invalid code 768 type 1 [ 113.199127][ T5615] HID 045e:07da: Invalid code 769 type 1 [ 113.199168][ T5615] HID 045e:07da: Invalid code 770 type 1 [ 113.199182][ T5615] HID 045e:07da: Invalid code 771 type 1 [ 113.199196][ T5615] HID 045e:07da: Invalid code 772 type 1 [ 113.199210][ T5615] HID 045e:07da: Invalid code 773 type 1 [ 113.199224][ T5615] HID 045e:07da: Invalid code 774 type 1 [ 113.199237][ T5615] HID 045e:07da: Invalid code 775 type 1 [ 113.199278][ T5615] HID 045e:07da: Invalid code 776 type 1 [ 113.291615][ T5615] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input6 [ 113.338940][ T6031] FAULT_INJECTION: forcing a failure. [ 113.338940][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 113.339019][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 113.339046][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.339068][ T6031] Call Trace: [ 113.339083][ T6031] [ 113.339097][ T6031] dump_stack_lvl+0xe8/0x150 [ 113.339151][ T6031] should_fail_ex+0x3eb/0x540 [ 113.339188][ T6031] should_failslab+0xa8/0x100 [ 113.339214][ T6031] __kmalloc_noprof+0xf9/0x710 [ 113.339246][ T6031] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 113.339282][ T6031] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 113.339319][ T6031] __memcg_list_lru_alloc+0x1d9/0x760 [ 113.339359][ T6031] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 113.339387][ T6031] ? xa_load+0x60/0x210 [ 113.339444][ T6031] __memcg_slab_post_alloc_hook+0x3b2/0xdb0 [ 113.339482][ T6031] ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0 [ 113.339546][ T6031] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 113.339573][ T6031] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 113.339599][ T6031] ? aio_alloc_inode+0x2a/0x80 [ 113.339619][ T6031] ? aio_alloc_inode+0x2a/0x80 [ 113.339645][ T6031] ? __pfx_aio_alloc_inode+0x10/0x10 [ 113.339666][ T6031] aio_alloc_inode+0x2a/0x80 [ 113.339687][ T6031] alloc_inode+0x6a/0x1b0 [ 113.339715][ T6031] alloc_anon_inode+0x1e/0x330 [ 113.339778][ T6031] aio_setup_ring+0x104/0xe20 [ 113.339804][ T6031] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 113.339832][ T6031] ? pcpu_alloc_noprof+0x1036/0x1900 [ 113.339857][ T6031] ? __pfx_aio_setup_ring+0x10/0x10 [ 113.339893][ T6031] ioctx_alloc+0x313/0x830 [ 113.339915][ T6031] ? __might_fault+0xaf/0x130 [ 113.339944][ T6031] __se_sys_io_setup+0x7b/0x1d0 [ 113.339967][ T6031] do_syscall_64+0x166/0x520 [ 113.339992][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.340014][ T6031] ? clear_bhb_loop+0x70/0xc0 [ 113.340041][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.340119][ T6031] RIP: 0033:0x7f1b1cb9e559 [ 113.340144][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.340165][ T6031] RSP: 002b:00007f1b1daa3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 113.340194][ T6031] RAX: ffffffffffffffda RBX: 00007f1b1ce25fa0 RCX: 00007f1b1cb9e559 [ 113.340211][ T6031] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000007e [ 113.340224][ T6031] RBP: 00007f1b1cc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 113.340238][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.340251][ T6031] R13: 00007f1b1ce26038 R14: 00007f1b1ce25fa0 R15: 00007ffeec300858 [ 113.340286][ T6031] [ 113.669379][ T5615] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 113.725016][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 113.735387][ T5615] usb 2-1: USB disconnect, device number 4 [ 113.783340][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.114'. [ 113.783832][ T6033] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 114.000212][ T6034] fido_id[6034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 114.459045][ T6050] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 114.485044][ T193] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.501187][ T193] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.747115][ T6056] ALSA: mixer_oss: invalid OSS volume '' [ 114.872103][ T6060] input: syz0 as /devices/virtual/input/input7 [ 117.104476][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.107680][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.107760][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 117.266423][ T5700] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.388812][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.146'. [ 117.414119][ T5700] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 117.417433][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.417465][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.417488][ T5700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.417529][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.481807][ T5700] usb 1-1: config 0 descriptor?? [ 117.822258][ T32] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 117.832478][ T32] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 117.877219][ T32] usb 3-1: USB disconnect, device number 2 [ 117.908272][ T5700] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 117.908332][ T5700] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 117.909670][ T5700] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 118.013858][ T5700] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.066116][ T6172] FAULT_INJECTION: forcing a failure. [ 118.066116][ T6172] name failslab, interval 1, probability 0, space 0, times 0 [ 118.066150][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.2.149 Not tainted syzkaller #0 PREEMPT(full) [ 118.066175][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.066195][ T6172] Call Trace: [ 118.066204][ T6172] [ 118.066213][ T6172] dump_stack_lvl+0xe8/0x150 [ 118.066250][ T6172] should_fail_ex+0x3eb/0x540 [ 118.066286][ T6172] should_failslab+0xa8/0x100 [ 118.066313][ T6172] __kmalloc_cache_noprof+0x9e/0x600 [ 118.066349][ T6172] ? pstore_init_fs_context+0x50/0x130 [ 118.066376][ T6172] ? pstore_init_fs_context+0x50/0x130 [ 118.066412][ T6172] pstore_init_fs_context+0x50/0x130 [ 118.066582][ T6172] alloc_fs_context+0x99e/0xd00 [ 118.066619][ T6172] __se_sys_fsopen+0x118/0x370 [ 118.066659][ T6172] do_syscall_64+0x166/0x520 [ 118.066686][ T6172] ? trace_irq_disable+0x3b/0x140 [ 118.066719][ T6172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.066742][ T6172] ? clear_bhb_loop+0x70/0xc0 [ 118.066796][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.066818][ T6172] RIP: 0033:0x7fbe1c19e559 [ 118.066852][ T6172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.066870][ T6172] RSP: 002b:00007fbe1d094028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 118.066893][ T6172] RAX: ffffffffffffffda RBX: 00007fbe1c425fa0 RCX: 00007fbe1c19e559 [ 118.066910][ T6172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 118.066932][ T6172] RBP: 00007fbe1c2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 118.066945][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.066959][ T6172] R13: 00007fbe1c426038 R14: 00007fbe1c425fa0 R15: 00007ffce6d3ac88 [ 118.066994][ T6172] [ 118.379055][ T5615] usb 1-1: USB disconnect, device number 4 [ 118.891995][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 118.931263][ T5615] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.081811][ T5615] usb 3-1: Using ep0 maxpacket: 16 [ 119.082531][ T5615] usb 3-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 119.083576][ T5615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.083624][ T5615] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.083652][ T5615] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.083684][ T5615] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 119.083712][ T5615] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.083747][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.087887][ T5615] usb 3-1: config 0 descriptor?? [ 119.261381][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 119.261407][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 119.263244][ T4926] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.561687][ T5615] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 119.710935][ T5720] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.745072][ T5788] usb 3-1: USB disconnect, device number 3 [ 119.841771][ T6231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.861786][ T5720] usb 1-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 119.862874][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.862900][ T5720] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.865477][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.865502][ T5720] usb 1-1: Product: syz [ 119.865517][ T5720] usb 1-1: Manufacturer: syz [ 119.865532][ T5720] usb 1-1: SerialNumber: syz [ 120.139258][ T5720] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 120.371918][ T6244] sd 0:0:1:0: PR command failed: 1026 [ 120.372192][ T6244] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 120.372301][ T6244] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 120.574311][ T5615] usb 1-1: USB disconnect, device number 5 [ 120.601337][ T5615] usblp0: removed [ 120.860350][ T6266] FAULT_INJECTION: forcing a failure. [ 120.860350][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.860382][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.1.183 Not tainted syzkaller #0 PREEMPT(full) [ 120.860405][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.860417][ T6266] Call Trace: [ 120.860495][ T6266] [ 120.860504][ T6266] dump_stack_lvl+0xe8/0x150 [ 120.860539][ T6266] should_fail_ex+0x3eb/0x540 [ 120.860576][ T6266] core_sys_select+0x8be/0xb40 [ 120.860619][ T6266] ? __pfx_core_sys_select+0x10/0x10 [ 120.860672][ T6266] ? __pfx_set_user_sigmask+0x10/0x10 [ 120.860697][ T6266] ? __fget_files+0x3a2/0x420 [ 120.860727][ T6266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.860768][ T6266] __se_sys_pselect6+0x267/0x320 [ 120.860804][ T6266] ? __pfx___se_sys_pselect6+0x10/0x10 [ 120.860840][ T6266] ? __x64_sys_pselect6+0x21/0xf0 [ 120.860871][ T6266] do_syscall_64+0x166/0x520 [ 120.860896][ T6266] ? trace_irq_disable+0x3b/0x140 [ 120.860919][ T6266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.860942][ T6266] ? clear_bhb_loop+0x70/0xc0 [ 120.860969][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.860990][ T6266] RIP: 0033:0x7fdc7559e559 [ 120.861010][ T6266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.861028][ T6266] RSP: 002b:00007fdc76437028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 120.861075][ T6266] RAX: ffffffffffffffda RBX: 00007fdc75825fa0 RCX: 00007fdc7559e559 [ 120.861091][ T6266] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 120.861105][ T6266] RBP: 00007fdc756358b0 R08: 0000200000000200 R09: 0000200000000280 [ 120.861120][ T6266] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 120.861133][ T6266] R13: 00007fdc75826038 R14: 00007fdc75825fa0 R15: 00007ffdc26f2e88 [ 120.861165][ T6266] [ 121.311118][ T5615] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.341031][ T4926] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.341203][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 121.341221][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 121.474887][ T5615] usb 3-1: Using ep0 maxpacket: 16 [ 121.475599][ T5615] usb 3-1: New USB device found: idVendor=17ef, idProduct=60fe, bcdDevice=0.00 [ 121.477941][ T5615] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 121.477972][ T5615] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.478004][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.525946][ T5615] usb 3-1: config 0 descriptor?? [ 121.767629][ T5615] usbhid 3-1:0.0: can't add hid device: -71 [ 121.767731][ T5615] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.788926][ T5615] usb 3-1: USB disconnect, device number 4 [ 121.829522][ T6292] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.181293][ T5788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.333499][ T5788] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 122.335047][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.372992][ T5788] usb 1-1: config 0 descriptor?? [ 122.584166][ T5788] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 122.678663][ T6317] tipc: Started in network mode [ 122.678775][ T6317] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 122.687738][ T6317] tipc: Enabled bearer , priority 10 [ 122.763873][ T6319] syzkaller1: entered promiscuous mode [ 122.763897][ T6319] syzkaller1: entered allmulticast mode [ 122.803689][ T5788] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 122.803714][ T5788] [drm] Initialized udl on minor 1 [ 123.420913][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 123.420941][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 123.421002][ T4926] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.804536][ T32] tipc: Node number set to 4269801488 [ 123.896453][ T6336] gadgetfs: bound to dummy_udc driver [ 125.274265][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 125.660963][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 125.661085][ T4926] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.730912][ T193] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.741024][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 125.741031][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 125.882610][ T193] usb 2-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 125.883700][ T193] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.883726][ T193] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 125.885860][ T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.885885][ T193] usb 2-1: Product: syz [ 125.885901][ T193] usb 2-1: Manufacturer: syz [ 125.885978][ T193] usb 2-1: SerialNumber: syz [ 125.944833][ T193] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 125.960215][ T193] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 125.960215][ T193] Please send a copy of this message to and [ 126.554408][ T6375] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.929321][ T193] scsi host1: usb-storage 2-1:1.0 [ 126.944809][ T193] usb 2-1: USB disconnect, device number 5 [ 126.969270][ T6390] syzkaller1: entered promiscuous mode [ 126.969290][ T6390] syzkaller1: entered allmulticast mode [ 127.102903][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.138691][ T6393] ======================================================= [ 127.138691][ T6393] WARNING: The mand mount option has been deprecated and [ 127.138691][ T6393] and is ignored by this kernel. Remove the mand [ 127.138691][ T6393] option from the mount to silence this warning. [ 127.138691][ T6393] ======================================================= [ 127.245234][ T6395] FAULT_INJECTION: forcing a failure. [ 127.245234][ T6395] name failslab, interval 1, probability 0, space 0, times 0 [ 127.245263][ T6395] CPU: 1 UID: 0 PID: 6395 Comm: syz.2.240 Not tainted syzkaller #0 PREEMPT(full) [ 127.245280][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.245290][ T6395] Call Trace: [ 127.245296][ T6395] [ 127.245303][ T6395] dump_stack_lvl+0xe8/0x150 [ 127.245330][ T6395] should_fail_ex+0x3eb/0x540 [ 127.245355][ T6395] should_failslab+0xa8/0x100 [ 127.245373][ T6395] ? alloc_empty_file+0x5b/0x1d0 [ 127.245392][ T6395] kmem_cache_alloc_noprof+0x9c/0x600 [ 127.245416][ T6395] ? alloc_empty_file+0x5b/0x1d0 [ 127.245439][ T6395] alloc_empty_file+0x5b/0x1d0 [ 127.245459][ T6395] alloc_file_pseudo+0x110/0x1e0 [ 127.245481][ T6395] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 127.245527][ T6395] __shmem_file_setup+0x2e9/0x370 [ 127.245622][ T6395] ? __pfx___shmem_file_setup+0x10/0x10 [ 127.245663][ T6395] ? vma_set_pgoff+0x163/0x290 [ 127.245682][ T6395] shmem_zero_setup+0x90/0x130 [ 127.245707][ T6395] mmap_region+0x1ce8/0x2840 [ 127.245739][ T6395] ? __pfx_mmap_region+0x10/0x10 [ 127.245758][ T6395] ? pick_task_fair+0x1112/0x15a0 [ 127.245795][ T6395] ? lock_acquire+0x115/0x350 [ 127.245863][ T6395] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 127.245901][ T6395] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 127.245925][ T6395] ? cap_mmap_addr+0xaa/0xf0 [ 127.245944][ T6395] ? bpf_lsm_mmap_addr+0x9/0x50 [ 127.245957][ T6395] ? security_mmap_addr+0x71/0x240 [ 127.245982][ T6395] do_mmap+0xe0a/0x1300 [ 127.246005][ T6395] ? __pfx_do_mmap+0x10/0x10 [ 127.246029][ T6395] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 127.246056][ T6395] ? down_write_killable+0x179/0x230 [ 127.246086][ T6395] ? __pfx_down_write_killable+0x10/0x10 [ 127.246107][ T6395] ? apparmor_mmap_file+0x1cc/0x390 [ 127.246123][ T6395] ? security_mmap_file+0xf9/0xa20 [ 127.246144][ T6395] vm_mmap_pgoff+0x272/0x4e0 [ 127.246171][ T6395] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 127.246190][ T6395] ? ksys_write+0x242/0x270 [ 127.246213][ T6395] ? __pfx___se_sys_futex+0x10/0x10 [ 127.246235][ T6395] ? __pfx_ksys_write+0x10/0x10 [ 127.246259][ T6395] ? ksys_mmap_pgoff+0xf3/0x760 [ 127.246276][ T6395] ? __x64_sys_mmap+0x7f/0x140 [ 127.246302][ T6395] do_syscall_64+0x166/0x520 [ 127.246320][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.246336][ T6395] ? clear_bhb_loop+0x70/0xc0 [ 127.246355][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.246370][ T6395] RIP: 0033:0x7fbe1c19e559 [ 127.246385][ T6395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.246398][ T6395] RSP: 002b:00007fbe1d094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 127.246415][ T6395] RAX: ffffffffffffffda RBX: 00007fbe1c425fa0 RCX: 00007fbe1c19e559 [ 127.246426][ T6395] RDX: 0000000001000003 RSI: 000000000000c000 RDI: 0000200000ff4000 [ 127.246436][ T6395] RBP: 00007fbe1c2358b0 R08: ffffffffffffffff R09: 00000000ffffe000 [ 127.246446][ T6395] R10: 0000000000020031 R11: 0000000000000246 R12: 0000000000000000 [ 127.246456][ T6395] R13: 00007fbe1c426038 R14: 00007fbe1c425fa0 R15: 00007ffce6d3ac88 [ 127.246480][ T6395] [ 127.274110][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 127.275298][ T32] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.280542][ T32] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 127.280719][ T32] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.281338][ T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.281416][ T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.281520][ T32] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.281617][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.656125][ T32] usb 4-1: usb_control_msg returned -32 [ 127.656177][ T32] usbtmc 4-1:16.0: can't read capabilities [ 127.835990][ T5788] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 127.837120][ T5788] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 127.868006][ T5615] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 127.869677][ T5788] usb 1-1: USB disconnect, device number 6 [ 127.912575][ T5615] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 127.984116][ T6408] syzkaller1: entered promiscuous mode [ 127.984138][ T6408] syzkaller1: entered allmulticast mode [ 128.026298][ T6410] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 128.054760][ T5615] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.130329][ T6414] gadgetfs: bound to dummy_udc driver [ 128.195234][ T6416] FAULT_INJECTION: forcing a failure. [ 128.195234][ T6416] name failslab, interval 1, probability 0, space 0, times 0 [ 128.195260][ T6416] CPU: 0 UID: 0 PID: 6416 Comm: syz.2.249 Not tainted syzkaller #0 PREEMPT(full) [ 128.195283][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.195296][ T6416] Call Trace: [ 128.195304][ T6416] [ 128.195313][ T6416] dump_stack_lvl+0xe8/0x150 [ 128.195342][ T6416] should_fail_ex+0x3eb/0x540 [ 128.195366][ T6416] should_failslab+0xa8/0x100 [ 128.195384][ T6416] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 128.195407][ T6416] ? lockdep_hardirqs_on+0x7b/0x110 [ 128.195425][ T6416] ? setup_mq_sysctls+0x54/0x4b0 [ 128.195443][ T6416] ? setup_mq_sysctls+0x54/0x4b0 [ 128.195485][ T6416] kmemdup_noprof+0x2b/0x70 [ 128.195523][ T6416] setup_mq_sysctls+0x54/0x4b0 [ 128.195540][ T6416] ? copy_ipcs+0x46c/0x6c0 [ 128.195560][ T6416] copy_ipcs+0x483/0x6c0 [ 128.195581][ T6416] create_new_namespaces+0x210/0x6b0 [ 128.195606][ T6416] ? security_capable+0x7e/0x2c0 [ 128.195631][ T6416] unshare_nsproxy_namespaces+0x144/0x190 [ 128.195652][ T6416] ksys_unshare+0x532/0x890 [ 128.195673][ T6416] ? __pfx_ksys_unshare+0x10/0x10 [ 128.195690][ T6416] ? ksys_write+0x242/0x270 [ 128.195714][ T6416] ? __pfx___se_sys_futex+0x10/0x10 [ 128.195735][ T6416] ? __pfx_ksys_write+0x10/0x10 [ 128.195765][ T6416] __x64_sys_unshare+0x38/0x50 [ 128.195784][ T6416] do_syscall_64+0x166/0x520 [ 128.195801][ T6416] ? trace_irq_disable+0x3b/0x140 [ 128.195817][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.195832][ T6416] ? clear_bhb_loop+0x70/0xc0 [ 128.195851][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.195866][ T6416] RIP: 0033:0x7fbe1c19e559 [ 128.195881][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.195893][ T6416] RSP: 002b:00007fbe1d094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 128.195910][ T6416] RAX: ffffffffffffffda RBX: 00007fbe1c425fa0 RCX: 00007fbe1c19e559 [ 128.195965][ T6416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 128.195975][ T6416] RBP: 00007fbe1c2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 128.195984][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.195994][ T6416] R13: 00007fbe1c426038 R14: 00007fbe1c425fa0 R15: 00007ffce6d3ac88 [ 128.196020][ T6416] [ 128.213140][ T5615] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 128.216547][ T5615] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.216686][ T5615] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 128.239266][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.239329][ T5615] usb 2-1: Product: syz [ 128.239369][ T5615] usb 2-1: Manufacturer: syz [ 128.239402][ T5615] usb 2-1: SerialNumber: syz [ 128.288513][ T5788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.481625][ T32] usb 4-1: USB disconnect, device number 2 [ 128.491152][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 128.495923][ T5788] usb 1-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 128.506757][ T5788] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 128.506813][ T5788] usb 1-1: config 0 has no interface number 0 [ 128.506968][ T5788] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.507109][ T5788] usb 1-1: config 0 interface 85 has no altsetting 0 [ 128.527527][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.527639][ T5788] usb 1-1: Product: syz [ 128.527673][ T5788] usb 1-1: Manufacturer: syz [ 128.527713][ T5788] usb 1-1: SerialNumber: syz [ 128.599182][ T5788] usb 1-1: config 0 descriptor?? [ 128.870899][ T5720] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.022239][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 129.028475][ T5720] usb 3-1: New USB device found: idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 129.045398][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.045433][ T5720] usb 3-1: Product: syz [ 129.045449][ T5720] usb 3-1: Manufacturer: syz [ 129.049277][ T5720] usb 3-1: SerialNumber: syz [ 129.071727][ T5720] usb 3-1: config 0 descriptor?? [ 129.077625][ T5720] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 129.230618][ T5788] appletouch 1-1:0.85: Geyser mode initialized. [ 129.239993][ T5788] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input8 [ 129.396839][ T5615] cdc_ncm 2-1:1.0: bind() failure [ 129.409940][ T5615] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 129.422226][ T5615] usb 2-1: USB disconnect, device number 6 [ 129.458604][ T5788] usb 1-1: USB disconnect, device number 7 [ 129.491679][ T5788] appletouch 1-1:0.85: input: appletouch disconnected [ 130.113301][ T5788] usb 3-1: USB disconnect, device number 5 [ 130.342982][ T5720] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 130.447929][ T6462] FAULT_INJECTION: forcing a failure. [ 130.447929][ T6462] name failslab, interval 1, probability 0, space 0, times 0 [ 130.447961][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 130.447985][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.447997][ T6462] Call Trace: [ 130.448062][ T6462] [ 130.448071][ T6462] dump_stack_lvl+0xe8/0x150 [ 130.448105][ T6462] should_fail_ex+0x3eb/0x540 [ 130.448140][ T6462] should_failslab+0xa8/0x100 [ 130.448165][ T6462] __kmalloc_cache_noprof+0x9e/0x600 [ 130.448196][ T6462] ? sctp_auth_shkey_create+0x7a/0x1b0 [ 130.448249][ T6462] ? sctp_auth_shkey_create+0x7a/0x1b0 [ 130.448286][ T6462] sctp_auth_shkey_create+0x7a/0x1b0 [ 130.448334][ T6462] sctp_endpoint_new+0x457/0xa70 [ 130.448377][ T6462] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 130.448417][ T6462] ? __raw_spin_lock_init+0x45/0x100 [ 130.448451][ T6462] sctp_init_sock+0x947/0x1380 [ 130.448480][ T6462] ? sock_init_data_uid+0x706/0x9b0 [ 130.448518][ T6462] inet_create+0xd1c/0xff0 [ 130.448547][ T6462] ? inet_create+0x9d/0xff0 [ 130.448578][ T6462] __sock_create+0x4b5/0xac0 [ 130.448623][ T6462] __sys_socket+0xd6/0x1b0 [ 130.448648][ T6462] __x64_sys_socket+0x7a/0x90 [ 130.448671][ T6462] do_syscall_64+0x166/0x520 [ 130.448696][ T6462] ? trace_irq_disable+0x3b/0x140 [ 130.448720][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.448743][ T6462] ? clear_bhb_loop+0x70/0xc0 [ 130.448771][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.448793][ T6462] RIP: 0033:0x7fdc7559e559 [ 130.448813][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.448833][ T6462] RSP: 002b:00007fdc76437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 130.448864][ T6462] RAX: ffffffffffffffda RBX: 00007fdc75825fa0 RCX: 00007fdc7559e559 [ 130.448880][ T6462] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 130.448894][ T6462] RBP: 00007fdc756358b0 R08: 0000000000000000 R09: 0000000000000000 [ 130.448908][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.448921][ T6462] R13: 00007fdc75826038 R14: 00007fdc75825fa0 R15: 00007ffdc26f2e88 [ 130.448957][ T6462] [ 130.495440][ T5720] usb 1-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 130.501368][ T5720] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 130.501414][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 130.501440][ T5720] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.501465][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 130.501489][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 130.507306][ T5720] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 130.507450][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 130.507521][ T5720] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.507582][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 130.507651][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 130.516145][ T5720] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 130.516288][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 130.516370][ T5720] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.516496][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 130.516566][ T5720] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 130.533908][ T5720] usb 1-1: string descriptor 0 read error: -22 [ 130.534254][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.815673][ T5720] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 131.480894][ T5720] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.557502][ T6482] xt_hashlimit: max too large, truncated to 1048576 [ 131.634317][ T5720] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 131.635455][ T5720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.635500][ T5720] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 131.635525][ T5720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.635546][ T5720] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.635568][ T5720] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 131.635607][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.665676][ T6472] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 131.695150][ T5720] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 131.738016][ T2178] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.741405][ T5700] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.756529][ T5720] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 131.756620][ T5720] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 131.772058][ T5720] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 131.786375][ T5720] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 131.786550][ T5720] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 131.814165][ T5720] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 131.901740][ T5700] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 131.903063][ T5700] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 131.903093][ T5700] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 131.903119][ T5700] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.903160][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.909798][ T6480] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 131.909939][ T6480] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 131.981077][ T5700] pl2303 2-1:1.0: pl2303 converter detected [ 132.000578][ T5700] usb 2-1: pl2303 converter now attached to ttyUSB2 [ 132.138784][ T5700] usb 3-1: USB disconnect, device number 6 [ 132.295897][ T9] usb 2-1: USB disconnect, device number 7 [ 132.328191][ T5700] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 132.330488][ T9] pl2303 ttyUSB2: pl2303 converter now disconnected from ttyUSB2 [ 132.340640][ T9] pl2303 2-1:1.0: device disconnected [ 132.368891][ T5700] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 132.375362][ T5700] keyspan 3-1:1.0: device disconnected [ 133.097547][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 133.097576][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 133.098595][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 133.098619][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 133.342077][ T5700] usb 1-1: USB disconnect, device number 8 [ 133.573923][ T6518] FAULT_INJECTION: forcing a failure. [ 133.573923][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 133.573947][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 133.574005][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.574014][ T6518] Call Trace: [ 133.574020][ T6518] [ 133.574026][ T6518] dump_stack_lvl+0xe8/0x150 [ 133.574051][ T6518] should_fail_ex+0x3eb/0x540 [ 133.574092][ T6518] should_failslab+0xa8/0x100 [ 133.574117][ T6518] __kmalloc_cache_noprof+0x9e/0x600 [ 133.574149][ T6518] ? hugetlbfs_init_fs_context+0x53/0x350 [ 133.574177][ T6518] ? hugetlbfs_init_fs_context+0x53/0x350 [ 133.574214][ T6518] hugetlbfs_init_fs_context+0x53/0x350 [ 133.574236][ T6518] alloc_fs_context+0x99e/0xd00 [ 133.574257][ T6518] __se_sys_fsopen+0x118/0x370 [ 133.574275][ T6518] do_syscall_64+0x166/0x520 [ 133.574291][ T6518] ? trace_irq_disable+0x3b/0x140 [ 133.574307][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.574322][ T6518] ? clear_bhb_loop+0x70/0xc0 [ 133.574338][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.574352][ T6518] RIP: 0033:0x7f1b1cb9e559 [ 133.574365][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.574377][ T6518] RSP: 002b:00007f1b1daa3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 133.574392][ T6518] RAX: ffffffffffffffda RBX: 00007f1b1ce25fa0 RCX: 00007f1b1cb9e559 [ 133.574402][ T6518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000008c0 [ 133.574411][ T6518] RBP: 00007f1b1cc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 133.574419][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.574427][ T6518] R13: 00007f1b1ce26038 R14: 00007f1b1ce25fa0 R15: 00007ffeec300858 [ 133.574468][ T6518] [ 133.745956][ T5622] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 134.371089][ T32] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 134.531585][ T32] usb 1-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 134.534223][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.540052][ T32] usb 1-1: config 0 descriptor?? [ 134.573337][ T32] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 134.777686][ T32] gp8psk: usb in 128 operation failed. [ 134.981789][ T32] gp8psk: usb in 146 operation failed. [ 134.981809][ T32] gp8psk: failed to get FW version [ 134.984694][ T32] gp8psk: FPGA Version = 0 [ 135.033878][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.034649][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.050562][ T6561] capability: warning: `syz.1.315' uses 32-bit capabilities (legacy support in use) [ 135.120222][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 135.185430][ T32] gp8psk: usb in 138 operation failed. [ 135.185560][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 135.185619][ T32] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 135.187716][ T32] usb 1-1: USB disconnect, device number 9 [ 135.272650][ T6566] binder: Failure in copy_transaction_data: EINVAL [ 135.290335][ T6566] syz.1.318 (6566) used greatest stack depth: 11840 bytes left [ 135.324043][ T6569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.319'. [ 136.060996][ T5622] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 136.171412][ T5788] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.238966][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 136.238986][ T33] audit: type=1326 audit(1792077534.399:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.3.334" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fffb9e559 code=0x0 [ 136.364688][ T5788] usb 1-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 136.367207][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.367230][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.367258][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.381082][ T5788] usb 1-1: config 0 descriptor?? [ 136.725613][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 136.728368][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'. [ 136.728447][ T6626] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 136.837517][ T5788] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 136.837555][ T5788] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 136.837581][ T5788] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 136.837607][ T5788] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 136.837632][ T5788] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 137.025965][ T5788] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -71 [ 137.030304][ T5788] usb 1-1: USB disconnect, device number 10 [ 137.472847][ T6650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.654290][ T6654] input: syz0 as /devices/virtual/input/input9 [ 137.870905][ T5615] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.033818][ T5615] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 138.035046][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.060351][ T5615] usb 3-1: config 0 descriptor?? [ 138.278184][ T5615] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 138.483068][ T6688] FAULT_INJECTION: forcing a failure. [ 138.483068][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 138.483103][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(full) [ 138.483128][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.483142][ T6688] Call Trace: [ 138.483151][ T6688] [ 138.483161][ T6688] dump_stack_lvl+0xe8/0x150 [ 138.483197][ T6688] should_fail_ex+0x3eb/0x540 [ 138.483232][ T6688] should_failslab+0xa8/0x100 [ 138.483269][ T6688] __kvmalloc_node_noprof+0x171/0x820 [ 138.483308][ T6688] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 138.483335][ T6688] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 138.483382][ T6688] v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 138.483415][ T6688] vim2m_open+0x111/0x640 [ 138.483455][ T6688] v4l2_open+0x1bc/0x3a0 [ 138.483489][ T6688] chrdev_open+0x4d9/0x600 [ 138.483518][ T6688] ? __pfx_chrdev_open+0x10/0x10 [ 138.483542][ T6688] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 138.483567][ T6688] ? devcgroup_check_permission+0x31/0x8f0 [ 138.483599][ T6688] ? __pfx_chrdev_open+0x10/0x10 [ 138.483623][ T6688] do_dentry_open+0x80e/0x1360 [ 138.483710][ T6688] vfs_open_consume+0x4a/0x350 [ 138.483735][ T6688] ? path_openat+0x16e1/0x20f0 [ 138.483763][ T6688] path_openat+0x16fc/0x20f0 [ 138.483807][ T6688] do_file_open+0x258/0x570 [ 138.483832][ T6688] ? __pfx_do_file_open+0x10/0x10 [ 138.483878][ T6688] ? _raw_spin_unlock+0x28/0x50 [ 138.483901][ T6688] ? alloc_fd+0x6af/0x760 [ 138.483944][ T6688] do_sys_openat2+0x115/0x200 [ 138.483972][ T6688] ? __se_sys_futex+0x3a8/0x450 [ 138.484003][ T6688] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.484038][ T6688] ? rcu_is_watching+0x16/0xb0 [ 138.484072][ T6688] __x64_sys_openat+0x138/0x170 [ 138.484108][ T6688] do_syscall_64+0x166/0x520 [ 138.484134][ T6688] ? trace_irq_disable+0x3b/0x140 [ 138.484157][ T6688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.484180][ T6688] ? clear_bhb_loop+0x70/0xc0 [ 138.484208][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.484230][ T6688] RIP: 0033:0x7f0fffb9e559 [ 138.484260][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.484278][ T6688] RSP: 002b:00007f1000a0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.484304][ T6688] RAX: ffffffffffffffda RBX: 00007f0fffe25fa0 RCX: 00007f0fffb9e559 [ 138.484322][ T6688] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 138.484337][ T6688] RBP: 00007f0fffc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 138.484352][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.484366][ T6688] R13: 00007f0fffe26038 R14: 00007f0fffe25fa0 R15: 00007fffd4eeedb8 [ 138.484402][ T6688] [ 138.788919][ T5615] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 138.788944][ T5615] [drm] Initialized udl on minor 1 [ 138.802884][ T5615] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.803332][ T5615] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 138.806929][ T5713] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.839344][ T5615] usb 3-1: USB disconnect, device number 7 [ 138.849214][ T5713] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.849540][ T5713] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 139.373167][ T5713] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.416230][ T6717] syzkaller1: entered promiscuous mode [ 139.416251][ T6717] syzkaller1: entered allmulticast mode [ 139.521499][ T5713] usb 2-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 139.525068][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.525094][ T5713] usb 2-1: Product: syz [ 139.525110][ T5713] usb 2-1: Manufacturer: syz [ 139.525125][ T5713] usb 2-1: SerialNumber: syz [ 139.565697][ T5713] usb 2-1: config 0 descriptor?? [ 139.739342][ T6729] netlink: 'syz.2.388': attribute type 4 has an invalid length. [ 140.110887][ T5615] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.190903][ T32] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 140.260918][ T5615] usb 4-1: Using ep0 maxpacket: 16 [ 140.262141][ T5615] usb 4-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00 [ 140.262208][ T5615] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 140.263229][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.264200][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.265269][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.266252][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.267206][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.268181][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.269190][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.270190][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.293363][ T5615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 140.293379][ T5615] usb 4-1: SerialNumber: syz [ 140.364819][ T32] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.367720][ T5615] usb 4-1: config 0 descriptor?? [ 140.413327][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.413347][ T32] usb 1-1: Product: syz [ 140.413357][ T32] usb 1-1: Manufacturer: syz [ 140.413367][ T32] usb 1-1: SerialNumber: syz [ 140.417090][ T32] usb 1-1: config 0 descriptor?? [ 140.445417][ T5615] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 140.600497][ T4960] bcm5974 4-1:0.0: could not read from device [ 140.612199][ T5713] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 140.614177][ T4960] bcm5974 4-1:0.0: could not read from device [ 140.639252][ T4960] bcm5974 4-1:0.0: could not read from device [ 140.655297][ T4960] bcm5974 4-1:0.0: could not read from device [ 140.670788][ T5615] usb 4-1: USB disconnect, device number 3 [ 140.701440][ T5713] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 140.702560][ T32] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.737977][ T5713] usb 2-1: USB disconnect, device number 8 [ 140.797094][ T5713] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 140.838950][ T5270] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 140.882498][ T5713] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 141.035605][ T6748] size and base must be multiples of 4 kiB [ 141.035639][ T6748] CPU: 1 UID: 0 PID: 6748 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(full) [ 141.035664][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.035676][ T6748] Call Trace: [ 141.035685][ T6748] [ 141.035694][ T6748] dump_stack_lvl+0xe8/0x150 [ 141.035741][ T6748] mtrr_del+0xc8/0xf0 [ 141.035842][ T6748] mtrr_ioctl+0xcb8/0x13b0 [ 141.035878][ T6748] ? __pfx_mtrr_ioctl+0x10/0x10 [ 141.035923][ T6748] ? __fget_files+0x2a/0x420 [ 141.035993][ T6748] ? __fget_files+0x2a/0x420 [ 141.036021][ T6748] ? __pfx_mtrr_ioctl+0x10/0x10 [ 141.036058][ T6748] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 141.036092][ T6748] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 141.036117][ T6748] __se_sys_ioctl+0xfc/0x170 [ 141.036146][ T6748] do_syscall_64+0x166/0x520 [ 141.036171][ T6748] ? trace_irq_disable+0x3b/0x140 [ 141.036192][ T6748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.036213][ T6748] ? clear_bhb_loop+0x70/0xc0 [ 141.036238][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.036258][ T6748] RIP: 0033:0x7fbe1c19e559 [ 141.036277][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.036294][ T6748] RSP: 002b:00007fbe1d094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.036316][ T6748] RAX: ffffffffffffffda RBX: 00007fbe1c425fa0 RCX: 00007fbe1c19e559 [ 141.036331][ T6748] RDX: 0000200000000240 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 141.036345][ T6748] RBP: 00007fbe1c2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 141.036357][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.036369][ T6748] R13: 00007fbe1c426038 R14: 00007fbe1c425fa0 R15: 00007ffce6d3ac88 [ 141.036400][ T6748] [ 141.408694][ T6757] jffs2: notice: (6757) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.530262][ T32] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 141.549753][ T32] usb 1-1: USB disconnect, device number 11 [ 141.784834][ T6775] FAULT_INJECTION: forcing a failure. [ 141.784834][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 141.784870][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT(full) [ 141.784895][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.784909][ T6775] Call Trace: [ 141.784918][ T6775] [ 141.784928][ T6775] dump_stack_lvl+0xe8/0x150 [ 141.784965][ T6775] should_fail_ex+0x3eb/0x540 [ 141.785013][ T6775] should_failslab+0xa8/0x100 [ 141.785040][ T6775] __kmalloc_cache_noprof+0x9e/0x600 [ 141.785073][ T6775] ? snd_card_file_add+0x58/0x250 [ 141.785100][ T6775] ? snd_card_file_add+0x58/0x250 [ 141.785133][ T6775] snd_card_file_add+0x58/0x250 [ 141.785164][ T6775] snd_pcm_oss_open+0x17f/0x1c60 [ 141.785194][ T6775] ? __lock_acquire+0x747/0x2de0 [ 141.785223][ T6775] ? __lock_acquire+0x747/0x2de0 [ 141.785253][ T6775] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 141.785275][ T6775] ? tomoyo_check_open_permission+0x38e/0x470 [ 141.785311][ T6775] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.785367][ T6775] chrdev_open+0x4d9/0x600 [ 141.785395][ T6775] ? __pfx_chrdev_open+0x10/0x10 [ 141.785418][ T6775] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 141.785442][ T6775] ? devcgroup_check_permission+0x31/0x8f0 [ 141.785470][ T6775] ? __pfx_chrdev_open+0x10/0x10 [ 141.785494][ T6775] do_dentry_open+0x80e/0x1360 [ 141.785532][ T6775] vfs_open_consume+0x4a/0x350 [ 141.785611][ T6775] ? path_openat+0x16e1/0x20f0 [ 141.785636][ T6775] path_openat+0x16fc/0x20f0 [ 141.785696][ T6775] do_file_open+0x258/0x570 [ 141.785720][ T6775] ? __pfx_do_file_open+0x10/0x10 [ 141.785762][ T6775] ? _raw_spin_unlock+0x28/0x50 [ 141.785784][ T6775] ? alloc_fd+0x6af/0x760 [ 141.785823][ T6775] do_sys_openat2+0x115/0x200 [ 141.785849][ T6775] ? __se_sys_futex+0x3a8/0x450 [ 141.785878][ T6775] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.785910][ T6775] ? rcu_is_watching+0x16/0xb0 [ 141.785940][ T6775] __x64_sys_openat+0x138/0x170 [ 141.785972][ T6775] do_syscall_64+0x166/0x520 [ 141.785995][ T6775] ? trace_irq_disable+0x3b/0x140 [ 141.786017][ T6775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.786038][ T6775] ? clear_bhb_loop+0x70/0xc0 [ 141.786063][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.786085][ T6775] RIP: 0033:0x7fbe1c19e559 [ 141.786105][ T6775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.786122][ T6775] RSP: 002b:00007fbe1d094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.786145][ T6775] RAX: ffffffffffffffda RBX: 00007fbe1c425fa0 RCX: 00007fbe1c19e559 [ 141.786162][ T6775] RDX: 00000000000a0201 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 141.786219][ T6775] RBP: 00007fbe1c2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 141.786233][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.786245][ T6775] R13: 00007fbe1c426038 R14: 00007fbe1c425fa0 R15: 00007ffce6d3ac88 [ 141.786277][ T6775] [ 142.431134][ T5720] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.484540][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.581720][ T5720] usb 3-1: New USB device found: idVendor=0ccd, idProduct=0043, bcdDevice=1.01 [ 142.582818][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.582840][ T5720] usb 3-1: config 0 has no interfaces? [ 142.587246][ T5720] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 142.587270][ T5720] usb 3-1: Product: syz [ 142.587285][ T5720] usb 3-1: Manufacturer: syz [ 142.587299][ T5720] usb 3-1: SerialNumber: syz [ 142.643833][ T5720] usb 3-1: config 0 descriptor?? [ 142.682389][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.793865][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.927898][ T5615] usb 3-1: USB disconnect, device number 8 [ 142.976887][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.021731][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 143.021756][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 143.091455][ T4926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.097817][ T4926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.098589][ T4926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.116763][ T4926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.125389][ T4926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.190690][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.193452][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.193835][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.198639][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.200692][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.492073][ T13] bridge_slave_1: left allmulticast mode [ 143.492117][ T13] bridge_slave_1: left promiscuous mode [ 143.492642][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.500584][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 143.539620][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 143.555601][ T13] bridge_slave_0: left allmulticast mode [ 143.555628][ T13] bridge_slave_0: left promiscuous mode [ 143.555821][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.829785][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.842678][ T5720] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 143.844856][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.847969][ T13] bond0 (unregistering): Released all slaves [ 144.184888][ T6814] ceph: No mds server is up or the cluster is laggy [ 144.215161][ T33] audit: type=1326 audit(1792077542.379:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.2.420" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe1c19e559 code=0x0 [ 144.337377][ T6808] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.262659][ T4926] Bluetooth: hci0: command tx timeout [ 145.304530][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 145.382730][ T13] hsr_slave_0: left promiscuous mode [ 145.383947][ T13] hsr_slave_1: left promiscuous mode [ 145.387219][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.387254][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.393586][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.394621][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.488722][ T13] veth1_macvtap: left promiscuous mode [ 145.488782][ T13] veth0_macvtap: left promiscuous mode [ 145.489242][ T13] veth1_vlan: left promiscuous mode [ 145.489328][ T13] veth0_vlan: left promiscuous mode [ 145.808759][ T13] team0 (unregistering): Port device team_slave_1 removed [ 145.831687][ T5615] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.836560][ T13] team0 (unregistering): Port device team_slave_0 removed [ 145.993546][ T5615] usb 3-1: Using ep0 maxpacket: 8 [ 145.995495][ T5615] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.003266][ T5615] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 146.003387][ T5615] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 146.003456][ T5615] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.003516][ T5615] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 146.003576][ T5615] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 146.003628][ T5615] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.003737][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.277793][ T5615] usb 3-1: usb_control_msg returned -32 [ 146.277843][ T5615] usbtmc 3-1:16.0: can't read capabilities [ 146.518414][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.518663][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.518802][ T6808] bridge_slave_0: entered allmulticast mode [ 146.520462][ T6808] bridge_slave_0: entered promiscuous mode [ 146.552368][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.552490][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.552615][ T6808] bridge_slave_1: entered allmulticast mode [ 146.554319][ T6808] bridge_slave_1: entered promiscuous mode [ 146.611326][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.615227][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.667103][ T6808] team0: Port device team_slave_0 added [ 146.670122][ T6808] team0: Port device team_slave_1 added [ 146.711057][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.711073][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.711100][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.713031][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.713044][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.713068][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.973332][ T6808] hsr_slave_0: entered promiscuous mode [ 146.975872][ T6808] hsr_slave_1: entered promiscuous mode [ 147.314515][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 147.340971][ T4926] Bluetooth: hci0: command tx timeout [ 147.480559][ T6808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.498247][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.499467][ T6808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.528258][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.530470][ T6808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.553459][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.556505][ T6808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.586510][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.611476][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.760974][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 147.761665][ T10] usb 1-1: New USB device found: idVendor=0d46, idProduct=2011, bcdDevice=1.00 [ 147.762695][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 147.762724][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.762758][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.814558][ T10] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 147.819923][ T10] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 147.883233][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.922792][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.939799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.939946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.970014][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.970130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.106857][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 148.238065][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 148.580542][ T32] usb 1-1: USB disconnect, device number 12 [ 148.658016][ T32] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 148.658681][ T32] kobil_sct 1-1:1.0: device disconnected [ 148.773790][ T27] usb 3-1: USB disconnect, device number 9 [ 149.125611][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 149.284343][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.431762][ T4926] Bluetooth: hci0: command tx timeout [ 149.475754][ T7025] binder: Write failure EINVAL in pid:379 [ 149.634195][ T2178] Bluetooth: hci4: Frame reassembly failed (-84) [ 149.640007][ T7029] Bluetooth: hci4: Frame reassembly failed (-84) [ 149.958469][ T6808] veth0_vlan: entered promiscuous mode [ 149.980362][ T6808] veth1_vlan: entered promiscuous mode [ 150.058126][ T6808] veth0_macvtap: entered promiscuous mode [ 150.074512][ T6808] veth1_macvtap: entered promiscuous mode [ 150.107471][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.123539][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.147488][ T7043] loop5: detected capacity change from 0 to 7 [ 150.148179][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.148254][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.148326][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.148362][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.225811][ T7043] Dev loop5: unable to read RDB block 7 [ 150.225929][ T7043] loop5: AHDI p1 p2 p4 [ 150.225955][ T7043] loop5: partition table partially beyond EOD, truncated [ 150.226652][ T7043] loop5: p1 size 4261412863 extends beyond EOD, truncated [ 150.230437][ T7043] loop5: p4 start 3288604672 is beyond EOD, truncated [ 150.370089][ T5629] udevd[5629]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.507331][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.507355][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.659083][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.659107][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.707058][ T7047] process 'syz.0.468' launched './file1' with NULL argv: empty string added [ 151.077145][ T7056] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.077335][ T7056] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.120351][ T7056] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.334254][ T7074] ªªªªªª: renamed from vlan0 (while UP) [ 151.401532][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 151.551991][ T32] usb 5-1: New USB device found: idVendor=28bd, idProduct=0094, bcdDevice=0.00 [ 151.553878][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.553925][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.556696][ T32] usb 5-1: config 0 descriptor?? [ 151.671884][ T4926] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.992751][ T32] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring [ 152.070943][ T5720] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.192011][ T32] usb 5-1: USB disconnect, device number 2 [ 152.220839][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 152.221599][ T5720] usb 2-1: New USB device found: idVendor=0423, idProduct=000c, bcdDevice=84.76 [ 152.225240][ T5720] usb 2-1: config 9 has an invalid interface number: 225 but max is 0 [ 152.225274][ T5720] usb 2-1: config 9 has no interface number 0 [ 152.225305][ T5720] usb 2-1: config 9 interface 225 has no altsetting 0 [ 152.228245][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.228278][ T5720] usb 2-1: Product: syz [ 152.228349][ T5720] usb 2-1: Manufacturer: syz [ 152.228364][ T5720] usb 2-1: SerialNumber: syz [ 152.882166][ T32] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 152.903705][ T5720] catc 2-1:9.225: Missing or invalid endpoints [ 153.022390][ T4926] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.041902][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 153.050911][ T32] usb 1-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.058256][ T32] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.058346][ T32] usb 1-1: config 0 has no interface number 0 [ 153.058457][ T32] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.058518][ T32] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 153.058614][ T32] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.058678][ T32] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.058778][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.159815][ T32] usb 1-1: config 0 descriptor?? [ 153.180373][ T27] usb 2-1: USB disconnect, device number 9 [ 153.229192][ T32] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 153.423584][ T5713] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.478959][ T193] usb 1-1: USB disconnect, device number 13 [ 153.479613][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 153.492035][ T7101] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 153.516679][ T193] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 153.588769][ T5713] usb 5-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 153.589866][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.595627][ T5713] usb 5-1: config 0 descriptor?? [ 153.618663][ T5713] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 153.810950][ T5720] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 153.960842][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 153.961794][ T5720] usb 3-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 153.963284][ T5720] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 153.965901][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.965918][ T5720] usb 3-1: Product: syz [ 153.965929][ T5720] usb 3-1: Manufacturer: syz [ 153.965955][ T5720] usb 3-1: SerialNumber: syz [ 153.968758][ T5720] usb 3-1: config 0 descriptor?? [ 153.969618][ T7118] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.972393][ T5720] hub 3-1:0.0: bad descriptor, ignoring hub [ 153.972465][ T5720] hub 3-1:0.0: probe with driver hub failed with error -5 [ 154.039819][ T32] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 154.203624][ T32] usb 2-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 154.206830][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.206859][ T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.232247][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.232270][ T32] usb 2-1: Product: syz [ 154.232283][ T32] usb 2-1: Manufacturer: syz [ 154.232296][ T32] usb 2-1: SerialNumber: syz [ 154.303135][ T7129] netlink: 'syz.0.501': attribute type 26 has an invalid length. [ 154.472563][ T5713] gspca_stv06xx: I2C: Read error writing address: -71 [ 154.477264][ T5713] usb 5-1: USB disconnect, device number 3 [ 154.525880][ T32] usblp 2-1:1.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 154.767572][ T10] usb 2-1: USB disconnect, device number 10 [ 154.880908][ T193] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.953659][ T7118] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 155.026644][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 155.032371][ T193] usb 1-1: Using ep0 maxpacket: 32 [ 155.034365][ T193] usb 1-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.038787][ T193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.042592][ T193] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.042654][ T193] usb 1-1: Product: syz [ 155.042689][ T193] usb 1-1: Manufacturer: syz [ 155.042724][ T193] usb 1-1: SerialNumber: syz [ 155.066476][ T193] usb 1-1: config 0 descriptor?? [ 155.074828][ T7137] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 155.076406][ T193] hub 1-1:0.0: bad descriptor, ignoring hub [ 155.076432][ T193] hub 1-1:0.0: probe with driver hub failed with error -5 [ 155.103016][ T4926] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.148211][ T7118] usb 3-1: device firmware changed [ 155.151972][ T5720] usb 3-1: USB disconnect, device number 10 [ 155.169640][ T10] usblp1: removed [ 155.350896][ T5720] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 155.408033][ T193] usb 1-1: USB disconnect, device number 14 [ 155.465481][ T7154] syzkaller1: entered promiscuous mode [ 155.465505][ T7154] syzkaller1: entered allmulticast mode [ 155.510862][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 155.511372][ T5720] usb 3-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.512282][ T5720] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.514969][ T5720] usb 3-1: string descriptor 0 read error: -22 [ 155.515091][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.517285][ T5720] usb 3-1: config 0 descriptor?? [ 155.518117][ T7127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.520500][ T5720] hub 3-1:0.0: bad descriptor, ignoring hub [ 155.520523][ T5720] hub 3-1:0.0: probe with driver hub failed with error -5 [ 155.731276][ T193] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 155.841080][ T5713] usb 3-1: USB disconnect, device number 11 [ 155.880884][ T193] usb 1-1: Using ep0 maxpacket: 32 [ 155.881633][ T193] usb 1-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.882698][ T193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.885789][ T193] usb 1-1: string descriptor 0 read error: -22 [ 155.885879][ T193] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.888050][ T193] usb 1-1: config 0 descriptor?? [ 155.888977][ T7137] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 155.890695][ T193] hub 1-1:0.0: bad descriptor, ignoring hub [ 155.890719][ T193] hub 1-1:0.0: probe with driver hub failed with error -5 [ 156.020867][ T32] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.171799][ T32] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 156.172841][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.176258][ T32] usb 2-1: config 0 descriptor?? [ 156.211454][ T5713] usb 1-1: USB disconnect, device number 15 [ 156.398274][ T32] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 156.632201][ T32] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 156.632230][ T32] [drm] Initialized udl on minor 1 [ 156.789027][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 156.812265][ T193] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 156.963597][ T193] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.964093][ T193] usb 5-1: not running at top speed; connect to a high speed hub [ 156.964122][ T193] usb 5-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 156.965507][ T193] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 156.967815][ T193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.967841][ T193] usb 5-1: Product: syz [ 156.967857][ T193] usb 5-1: Manufacturer: syz [ 156.967872][ T193] usb 5-1: SerialNumber: syz [ 157.091007][ T5713] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.181257][ T4926] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.235462][ T193] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 157.248701][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.248781][ T5713] usb 1-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 157.250199][ T5713] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 157.263066][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.263176][ T5713] usb 1-1: Product: syz [ 157.263214][ T5713] usb 1-1: Manufacturer: syz [ 157.263251][ T5713] usb 1-1: SerialNumber: syz [ 157.430423][ T193] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 157.430518][ T193] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 157.449451][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 157.603338][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.603847][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 157.603899][ T10] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 157.605033][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.605075][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.608214][ T10] usb 3-1: string descriptor 0 read error: -22 [ 157.608412][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.873365][ T193] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 157.873396][ T193] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 158.072755][ T193] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 158.127446][ T5713] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 158.130909][ T5713] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 158.147579][ T193] usb 5-1: USB disconnect, device number 4 [ 158.633439][ T10] usb 3-1: 0:2 : does not exist [ 158.646670][ T5713] usb 1-1: USB disconnect, device number 16 [ 158.855245][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 158.855317][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.532'. [ 158.899506][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 158.917653][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 158.932435][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 158.993203][ T7207] syzkaller1: entered promiscuous mode [ 158.993227][ T7207] syzkaller1: entered allmulticast mode [ 159.046168][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 159.083515][ T10] usb 3-1: USB disconnect, device number 12 [ 159.253362][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.523104][ T6419] udevd[6419]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 160.055667][ T7239] 9pnet: p9_errstr2errno: server reported unknown error  [ 161.400839][ T5713] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 161.553211][ T5713] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 161.554966][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.555022][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.555048][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 161.555070][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.555113][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.634812][ T5713] usb 1-1: config 0 descriptor?? [ 161.663427][ T32] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 161.663940][ T32] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 161.665730][ T6741] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 161.673900][ T6741] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 161.674866][ T6741] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 161.725279][ T32] usb 2-1: USB disconnect, device number 11 [ 161.770908][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 161.790870][ T193] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 161.924880][ T27] usb 5-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 161.930302][ T27] usb 5-1: config index 0 descriptor too short (expected 214, got 36) [ 161.930356][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 161.930410][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 10 [ 161.959654][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.959679][ T27] usb 5-1: Product: syz [ 161.959693][ T27] usb 5-1: Manufacturer: syz [ 161.959707][ T27] usb 5-1: SerialNumber: syz [ 161.992326][ T193] usb 3-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 162.010084][ T193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.010117][ T193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.010167][ T193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.025210][ T27] usb 5-1: config 0 descriptor?? [ 162.029582][ T7302] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 162.052847][ T7302] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 162.055653][ T193] usb 3-1: config 0 descriptor?? [ 162.119117][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119156][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119185][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119239][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119266][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119294][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119320][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119372][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119399][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.119427][ T5713] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 162.236094][ T5713] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 162.290051][ T7302] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 162.290208][ T7302] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 162.442133][ T5713] usb 1-1: USB disconnect, device number 17 [ 162.479846][ T7314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.492042][ T7315] fido_id[7315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 162.612567][ T193] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 162.720663][ T27] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 162.920449][ T7328] batadv_slave_0: entered promiscuous mode [ 162.937795][ T7327] batadv_slave_0: left promiscuous mode [ 162.978238][ T193] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 32: -71 [ 162.978376][ T193] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense firmware info: -71 [ 162.978432][ T193] playstation 0003:054C:0DF2.000A: Failed to get firmware info from DualSense [ 162.978448][ T193] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 163.021267][ T193] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -71 [ 163.027442][ T193] usb 3-1: USB disconnect, device number 13 [ 163.139418][ T27] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 163.165228][ T27] usb 5-1: USB disconnect, device number 5 [ 163.263696][ T7334] syzkaller1: entered promiscuous mode [ 163.263731][ T7334] syzkaller1: entered allmulticast mode [ 163.628621][ T7346] FAULT_INJECTION: forcing a failure. [ 163.628621][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 163.628657][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.1.568 Not tainted syzkaller #0 PREEMPT(full) [ 163.628684][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.628697][ T7346] Call Trace: [ 163.628707][ T7346] [ 163.628716][ T7346] dump_stack_lvl+0xe8/0x150 [ 163.628756][ T7346] should_fail_ex+0x3eb/0x540 [ 163.628792][ T7346] should_failslab+0xa8/0x100 [ 163.628818][ T7346] ? alloc_vfsmnt+0x23/0x510 [ 163.628842][ T7346] kmem_cache_alloc_noprof+0x9c/0x600 [ 163.628875][ T7346] ? alloc_vfsmnt+0x23/0x510 [ 163.628907][ T7346] alloc_vfsmnt+0x23/0x510 [ 163.628945][ T7346] clone_mnt+0x4c/0xad0 [ 163.628969][ T7346] ? is_subdir+0x25e/0x2a0 [ 163.629026][ T7346] ? is_subdir+0x2b/0x2a0 [ 163.629053][ T7346] copy_tree+0x3d8/0x940 [ 163.629083][ T7346] ? __do_loopback+0x218/0x4b0 [ 163.629113][ T7346] open_new_namespace+0x601/0xb50 [ 163.629148][ T7346] ? __pfx_open_new_namespace+0x10/0x10 [ 163.629184][ T7346] ? do_getname+0x151/0x250 [ 163.629216][ T7346] vfs_open_tree+0x3e1/0x480 [ 163.629245][ T7346] ? __pfx_vfs_open_tree+0x10/0x10 [ 163.629278][ T7346] __x64_sys_open_tree+0x93/0x110 [ 163.629310][ T7346] do_syscall_64+0x166/0x520 [ 163.629338][ T7346] ? trace_irq_disable+0x3b/0x140 [ 163.629362][ T7346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.629386][ T7346] ? clear_bhb_loop+0x70/0xc0 [ 163.629413][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.629435][ T7346] RIP: 0033:0x7fdc7559e559 [ 163.629470][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.629488][ T7346] RSP: 002b:00007fdc76437028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 163.629513][ T7346] RAX: ffffffffffffffda RBX: 00007fdc75825fa0 RCX: 00007fdc7559e559 [ 163.629529][ T7346] RDX: 0000000000009902 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 163.629544][ T7346] RBP: 00007fdc756358b0 R08: 0000000000000000 R09: 0000000000000000 [ 163.629558][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.629571][ T7346] R13: 00007fdc75826038 R14: 00007fdc75825fa0 R15: 00007ffdc26f2e88 [ 163.629606][ T7346] [ 164.502441][ T7368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.950155][ T7398] [ 164.952583][ T7398] ====================================================== [ 164.959690][ T7398] WARNING: possible circular locking dependency detected [ 164.966805][ T7398] syzkaller #0 Not tainted [ 164.971294][ T7398] ------------------------------------------------------ [ 164.978388][ T7398] syz.2.589/7398 is trying to acquire lock: [ 164.984346][ T7398] ffff888078b3cac0 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 164.994028][ T7398] [ 164.994028][ T7398] but task is already holding lock: [ 165.001431][ T7398] ffff888079ddd960 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 165.011229][ T7398] [ 165.011229][ T7398] which lock already depends on the new lock. [ 165.011229][ T7398] [ 165.021658][ T7398] [ 165.021658][ T7398] the existing dependency chain (in reverse order) is: [ 165.030691][ T7398] [ 165.030691][ T7398] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 165.038622][ T7398] __d_alloc_parallel+0xc32/0x1700 [ 165.044307][ T7398] __lookup_slow+0x82/0x2f0 [ 165.049354][ T7398] lookup_slow+0x59/0x80 [ 165.054147][ T7398] path_lookupat+0x3f5/0x8c0 [ 165.059290][ T7398] filename_lookup+0x258/0x5f0 [ 165.064629][ T7398] vfs_statx+0xfc/0x200 [ 165.069337][ T7398] vfs_fstatat+0x11b/0x170 [ 165.074336][ T7398] __se_sys_newfstatat+0x118/0x3a0 [ 165.080029][ T7398] do_syscall_64+0x166/0x520 [ 165.085171][ T7398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.091662][ T7398] [ 165.091662][ T7398] -> #0 (&type->i_mutex_dir_key#4){++++}-{4:4}: [ 165.100116][ T7398] __lock_acquire+0x164c/0x2de0 [ 165.105515][ T7398] lock_acquire+0x115/0x350 [ 165.110567][ T7398] down_read+0x45/0x320 [ 165.115280][ T7398] lookup_slow+0x46/0x80 [ 165.120061][ T7398] ovl_lookup_single+0x323/0xe90 [ 165.125533][ T7398] ovl_lookup_layer+0x377/0x440 [ 165.130934][ T7398] ovl_lookup+0x9ae/0x1c80 [ 165.135902][ T7398] __lookup_slow+0x1fb/0x2f0 [ 165.141073][ T7398] lookup_slow+0x59/0x80 [ 165.145910][ T7398] link_path_walk+0xd22/0x1910 [ 165.151232][ T7398] path_openat+0x1b7/0x20f0 [ 165.156473][ T7398] do_file_open+0x258/0x570 [ 165.161526][ T7398] do_sys_openat2+0x115/0x200 [ 165.166755][ T7398] __x64_sys_openat+0x138/0x170 [ 165.172170][ T7398] do_syscall_64+0x166/0x520 [ 165.175929][ T7405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.184080][ T7398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.190517][ T7398] [ 165.190517][ T7398] other info that might help us debug this: [ 165.190517][ T7398] [ 165.200761][ T7398] Possible unsafe locking scenario: [ 165.200761][ T7398] [ 165.208308][ T7398] CPU0 CPU1 [ 165.213818][ T7398] ---- ---- [ 165.219245][ T7398] lock(DCACHE_PAR_LOOKUP); [ 165.223960][ T7398] lock(&type->i_mutex_dir_key#4); [ 165.231756][ T7398] lock(DCACHE_PAR_LOOKUP); [ 165.238932][ T7398] rlock(&type->i_mutex_dir_key#4); [ 165.244254][ T7398] [ 165.244254][ T7398] *** DEADLOCK *** [ 165.244254][ T7398] [ 165.252469][ T7398] locks held by syz.2.589/7398: 2, last CPU#0: [ 165.258710][ T7398] #0: ffff88805ca61cb8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 165.268984][ T7398] #1: ffff888079ddd960 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 165.279231][ T7398] [ 165.279231][ T7398] stack backtrace: [ 165.285153][ T7398] CPU: 0 UID: 0 PID: 7398 Comm: syz.2.589 Not tainted syzkaller #0 PREEMPT(full) [ 165.294365][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.304446][ T7398] Call Trace: [ 165.307787][ T7398] [ 165.310754][ T7398] dump_stack_lvl+0xe8/0x150 [ 165.315411][ T7398] print_circular_bug+0x2e2/0x300 [ 165.320490][ T7398] check_noncircular+0x12f/0x150 [ 165.325474][ T7398] __lock_acquire+0x164c/0x2de0 [ 165.330371][ T7398] ? lock_acquire+0x115/0x350 [ 165.335084][ T7398] lock_acquire+0x115/0x350 [ 165.339614][ T7398] ? lookup_slow+0x46/0x80 [ 165.344082][ T7398] down_read+0x45/0x320 [ 165.348281][ T7398] ? lookup_slow+0x46/0x80 [ 165.352741][ T7398] ? d_lookup+0x8a/0xa0 [ 165.356944][ T7398] lookup_slow+0x46/0x80 [ 165.361227][ T7398] ovl_lookup_single+0x323/0xe90 [ 165.366248][ T7398] ? __pfx_ovl_lookup_single+0x10/0x10 [ 165.371745][ T7398] ? rcu_is_watching+0x16/0xb0 [ 165.376540][ T7398] ovl_lookup_layer+0x377/0x440 [ 165.381419][ T7398] ? __kmalloc_noprof+0x387/0x710 [ 165.386497][ T7398] ? ovl_lookup+0x762/0x1c80 [ 165.391110][ T7398] ovl_lookup+0x9ae/0x1c80 [ 165.395548][ T7398] ? lock_acquire+0x115/0x350 [ 165.400256][ T7398] ? __pfx_ovl_lookup+0x10/0x10 [ 165.405138][ T7398] ? __pfx___d_alloc_parallel+0x10/0x10 [ 165.410722][ T7398] ? lock_acquire+0x115/0x350 [ 165.415429][ T7398] __lookup_slow+0x1fb/0x2f0 [ 165.420055][ T7398] lookup_slow+0x59/0x80 [ 165.424326][ T7398] link_path_walk+0xd22/0x1910 [ 165.429140][ T7398] path_openat+0x1b7/0x20f0 [ 165.433686][ T7398] do_file_open+0x258/0x570 [ 165.438216][ T7398] ? __pfx_do_file_open+0x10/0x10 [ 165.443258][ T7398] ? _raw_spin_unlock+0x28/0x50 [ 165.448121][ T7398] ? alloc_fd+0x6af/0x760 [ 165.452476][ T7398] do_sys_openat2+0x115/0x200 [ 165.457176][ T7398] ? __se_sys_futex+0x3a8/0x450 [ 165.462060][ T7398] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.467333][ T7398] ? rcu_is_watching+0x16/0xb0 [ 165.472117][ T7398] __x64_sys_openat+0x138/0x170 [ 165.476996][ T7398] do_syscall_64+0x166/0x520 [ 165.481627][ T7398] ? trace_irq_disable+0x3b/0x140 [ 165.486694][ T7398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.492771][ T7398] ? clear_bhb_loop+0x70/0xc0 [ 165.497476][ T7398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.503383][ T7398] RIP: 0033:0x7fbe1c19e559 [ 165.507903][ T7398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.527534][ T7398] RSP: 002b:00007fbe1d094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.535969][ T7398] RAX: ffffffffffffffda RBX: 00007fbe1c425fa0 RCX: 00007fbe1c19e559 [ 165.543969][ T7398] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 165.551965][ T7398] RBP: 00007fbe1c2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 165.559962][ T7398] R10: 0000000000000180 R11: 0000000000000246 R12: 0000000000000000 [ 165.567951][ T7398] R13: 00007fbe1c426038 R14: 00007fbe1c425fa0 R15: 00007ffce6d3ac88 [ 165.575959][ T7398] [ 166.540834][ T4926] Bluetooth: hci0: command 0x0c1a tx timeout