last executing test programs: 13.059254443s ago: executing program 2 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) 12.863970178s ago: executing program 2 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) 12.78519529s ago: executing program 2 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x932, 0x0) 12.720143331s ago: executing program 2 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x75}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 12.640390464s ago: executing program 2 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r3, r0, 0x0, 0x7ffff000) 11.719754066s ago: executing program 2 (id=650): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20}}}}}, 0x0) 3.171998803s ago: executing program 4 (id=726): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044810) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000b80)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000004e23000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.228144066s ago: executing program 4 (id=732): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x2, 0x8}, 0x59}, 0x10) 2.162634998s ago: executing program 4 (id=734): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x1b5d) 2.039236521s ago: executing program 4 (id=737): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x400, 0x3, 0x1fb}) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002a80)="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", 0x2000, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004c00)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0x61001838, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004cc0)='./file0/file1\x00', 0x40, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.972009132s ago: executing program 3 (id=739): socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa000}], 0x2, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) shutdown(r3, 0x0) shutdown(r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvfrom(r3, 0x0, 0x0, 0x3, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close_range(r2, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020751ff", @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r7, 0x2f, 0x5, 0xe5, 0x3, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x0, 0x7}}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x3, {{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x20, 0xf}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, {}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x1}}, [@etimer_thresh={0x8, 0xc, 0x8}, @policy_type={0xa, 0x10, {0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x665c3ed30a41084f}, 0x0) r8 = fsopen(&(0x7f0000000540)='cgroup2\x00', 0x1) fsmount(r8, 0x0, 0x0) 1.914132484s ago: executing program 1 (id=741): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x60000, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9e0903, 0x0, '\x00', @value64=0x4}}) 1.789930227s ago: executing program 1 (id=742): syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x20, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xd, 0x7, 0x5}}}}}, 0x0) 1.6441162s ago: executing program 1 (id=743): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r0, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8) read(r2, 0x0, 0x0) 1.606702061s ago: executing program 1 (id=744): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc6902, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) openat$kvm(0xffffff9c, &(0x7f0000000480), 0x20840, 0x0) write(r0, &(0x7f0000000140)='never', 0x5) 1.467666895s ago: executing program 1 (id=745): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.312064338s ago: executing program 0 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) close(0x3) 1.311985878s ago: executing program 1 (id=747): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x40) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x6, 0x8, 0x3, 0x98, "2a00000000000000441d220fe0bd40edb4b62483d1c87e95d93f18520c4f24b3"}) 1.23570356s ago: executing program 3 (id=748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b14, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.164489282s ago: executing program 3 (id=749): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0xfffffff8) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x81, 0x4) 1.104035913s ago: executing program 4 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x404c050) syz_emit_ethernet(0x16, &(0x7f0000000780)={@local, @remote, @void, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0xaa, '!', "468b7f", 0xfbfb}}}}}}, 0x0) 1.046702774s ago: executing program 4 (id=751): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000bc0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000c80)={0x100000, 0x1, 0xffffff7f, 0x0, 0x3, 0xfffffffc}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = fanotify_init(0xf00, 0x2) fanotify_mark(r3, 0x105, 0x8971, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) 1.025069275s ago: executing program 3 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x900}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000000c0)=0x783a, 0x4) 980.128956ms ago: executing program 0 (id=753): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x80240) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000240)={"00000016", 0x0, 0x6, 0x4, 0x7, 0x2, "f759ca34000400", '\t\x00', "03000600", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", "000011cedce100000000ef00", "00080001000000000100"]}) 913.829428ms ago: executing program 0 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, r1, 0xfe0cef4d0db3b49, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x10) 819.7902ms ago: executing program 0 (id=755): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000c40)='2', 0x1}], 0x1}, 0x8400) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000003c0)="3f03fe7f0312140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000440)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 620.176315ms ago: executing program 0 (id=756): syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffcd0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3668}}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @string={0x4, 0x3, "5b04"}}}, 0x0) 131.762087ms ago: executing program 3 (id=757): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 91.238018ms ago: executing program 0 (id=758): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1c9442, 0x19c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0xf, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000014c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) close_range(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f00000015c0)='270', 0x3) r3 = syz_open_dev$mtd(&(0x7f0000001600), 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001640)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x20, 0x42, 0x100, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r7}, &(0x7f00000017c0), &(0x7f0000001800)=r5}, 0x20) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)={0x20, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) ioctl$BLKPG(r3, 0x1269, &(0x7f0000001940)={0x1, 0x1f, 0x98, &(0x7f0000001980)={0x3, 0xfffe, 0x12}}) io_setup(0x20fe, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r9, &(0x7f0000000380)=""/4082, 0xff2, 0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, 0x0, 0x800) io_submit(0x0, 0x0, &(0x7f00000000c0)) 0s ago: executing program 3 (id=759): socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa000}], 0x2, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) shutdown(r3, 0x0) shutdown(r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvfrom(r3, 0x0, 0x0, 0x3, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close_range(r2, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020751ff", @ANYRES32=r7, @ANYBLOB="08000200"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r7, 0x2f, 0x5, 0xe5, 0x3, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0x0, 0x7}}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x3, {{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x20, 0xf}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, {}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x1}}, [@etimer_thresh={0x8, 0xc, 0x8}, @policy_type={0xa, 0x10, {0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x665c3ed30a41084f}, 0x0) r8 = fsopen(&(0x7f0000000540)='cgroup2\x00', 0x1) fsmount(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): n1: link becomes ready [ 72.362372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.369998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.379004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.388353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.398040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.407822][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.415374][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.429894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.448710][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.462608][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.500488][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.509231][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.524111][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.531665][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.574627][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.587233][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.598958][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.609071][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.620198][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.631310][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.641487][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.651730][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.661107][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.685656][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.725234][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.749723][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.762020][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.771638][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.790726][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.801388][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.812349][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.821468][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.831108][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.839574][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.860826][ T4185] device veth0_vlan entered promiscuous mode [ 72.876611][ T4194] device veth0_vlan entered promiscuous mode [ 72.911553][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.925727][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.939173][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.950927][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.970447][ T4185] device veth1_vlan entered promiscuous mode [ 72.999155][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.011438][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.021848][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.040924][ T4194] device veth1_vlan entered promiscuous mode [ 73.096449][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.112820][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.132425][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.149578][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.170305][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.181769][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.220911][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.231369][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.240804][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.251138][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.259227][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.268948][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.278161][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.286942][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.295482][ T4189] device veth0_vlan entered promiscuous mode [ 73.304185][ T4195] device veth0_vlan entered promiscuous mode [ 73.321906][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.331567][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.341751][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.366442][ T4189] device veth1_vlan entered promiscuous mode [ 73.382554][ T4195] device veth1_vlan entered promiscuous mode [ 73.398134][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.409666][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.419452][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.429269][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.438774][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.448247][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 73.455574][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 73.457187][ T4185] device veth0_macvtap entered promiscuous mode [ 73.462302][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 73.476455][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 73.484662][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 73.488814][ T4194] device veth0_macvtap entered promiscuous mode [ 73.514246][ T4194] device veth1_macvtap entered promiscuous mode [ 73.552502][ T4185] device veth1_macvtap entered promiscuous mode [ 73.563050][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.582527][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.597920][ T4195] device veth0_macvtap entered promiscuous mode [ 73.609272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.625102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.637459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.648692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.659437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.670793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.682118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.696603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.706976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.719668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.730581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.741135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.771248][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.784460][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.796680][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.809230][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.818620][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.828328][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.851887][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.870607][ T4195] device veth1_macvtap entered promiscuous mode [ 73.881345][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.890604][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.900389][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.909596][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.919166][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.929043][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.938635][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.987287][ T4189] device veth0_macvtap entered promiscuous mode [ 74.005997][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.020746][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.035058][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.048578][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.058085][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.067783][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.077213][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.089213][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.101880][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.111775][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.128413][ T4189] device veth1_macvtap entered promiscuous mode [ 74.150541][ T4186] device veth0_vlan entered promiscuous mode [ 74.159386][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.169145][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.205977][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.220129][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.236404][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.248242][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.260919][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.271937][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.284469][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.302604][ T4186] device veth1_vlan entered promiscuous mode [ 74.347203][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.359216][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.368379][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.418913][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.430939][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.446360][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.458082][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.475584][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.493967][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.506302][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.518742][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.530921][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.541473][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.553122][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.566709][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.596005][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.604580][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.615081][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.624440][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.632951][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.642178][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.652267][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.666898][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.677543][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.687627][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697720][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.717407][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.728217][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.739409][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.753049][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.763873][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.775136][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.785511][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.796568][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.808933][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.820891][ T4186] device veth0_macvtap entered promiscuous mode [ 74.834690][ T4186] device veth1_macvtap entered promiscuous mode [ 74.849809][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.859876][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.869519][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.878948][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.888450][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.900441][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.909870][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.919688][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.928920][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.946914][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.955245][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.973535][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.997503][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.008192][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.038408][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.047507][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.055186][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.070424][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.078325][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.097688][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.110092][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.122462][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.136660][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.151034][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.164227][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.173440][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.182333][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.198307][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.217573][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.252168][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.269748][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.280175][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.292748][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.304200][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.316102][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.327149][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.340436][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.361875][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.405597][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.420548][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.430148][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.439930][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.453647][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.465745][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.480508][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.491599][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.501077][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.537461][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 75.547185][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 75.553821][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 75.567668][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 75.574178][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 75.633055][ T4305] loop2: detected capacity change from 0 to 512 [ 75.689024][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.707282][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.750840][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.774387][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.798710][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.808115][ T4305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.826383][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.902740][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.928739][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.021688][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.046435][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.049814][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.073862][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.077180][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.104813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.134580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.897028][ T4320] futex_wake_op: syz.1.2 tries to shift op by -1; fix this program [ 77.441679][ T4330] loop1: detected capacity change from 0 to 512 [ 77.585636][ T4330] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.683905][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.718503][ T4338] loop3: detected capacity change from 0 to 256 [ 77.888880][ T4338] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 77.899589][ T4328] loop0: detected capacity change from 0 to 40427 [ 77.982853][ T4328] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 78.022517][ T4328] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 78.054363][ T4328] F2FS-fs (loop0): invalid crc value [ 78.080243][ T4328] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 78.114098][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.205664][ T4328] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 78.213937][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.236491][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.238720][ T4328] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 78.487752][ T23] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 78.520289][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.543608][ T23] usb 3-1: Product: syz [ 78.547846][ T23] usb 3-1: Manufacturer: syz [ 78.562939][ T23] usb 3-1: SerialNumber: syz [ 79.198737][ T23] usb 3-1: selecting invalid altsetting 1 [ 79.525886][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.552777][ T23] usb 3-1: unit 3 not found! [ 79.561593][ T4345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 79.561678][ T23] usb 3-1: unit 6 not found! [ 79.640380][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.705120][ T4364] loop4: detected capacity change from 0 to 512 [ 79.767469][ T4195] attempt to access beyond end of device [ 79.767469][ T4195] loop0: rw=2049, want=45104, limit=40427 [ 79.800545][ T4364] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.920856][ T4370] loop3: detected capacity change from 0 to 512 [ 80.000156][ T4370] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.17: inode has both inline data and extents flags [ 80.055129][ T4370] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.17: couldn't read orphan inode 15 (err -117) [ 80.068714][ T4370] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.253542][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 81.332147][ T23] usb 3-1: USB disconnect, device number 2 [ 81.370616][ T4388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 81.678785][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 81.749524][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.993568][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.186552][ T4423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 83.741166][ T4299] Bluetooth: hci5: command 0x1003 tx timeout [ 83.832315][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 84.366367][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.463805][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.488039][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.542775][ T4460] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.41'. [ 84.610432][ T4464] netlink: 'syz.4.42': attribute type 16 has an invalid length. [ 84.620926][ T4464] netlink: 'syz.4.42': attribute type 25 has an invalid length. [ 84.629695][ T4464] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42'. [ 84.684008][ T13] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 84.698718][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.716783][ T13] usb 4-1: Product: syz [ 84.721532][ T13] usb 4-1: Manufacturer: syz [ 84.733497][ T13] usb 4-1: SerialNumber: syz [ 85.019866][ T13] usb 4-1: selecting invalid altsetting 1 [ 85.032068][ T13] usb 4-1: unit 3 not found! [ 85.049506][ T13] usb 4-1: unit 6 not found! [ 85.148674][ T4476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.48'. [ 85.219056][ T4427] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.496603][ T4484] syz.1.51 (4484) used greatest stack depth: 19360 bytes left [ 85.843617][ T4299] Bluetooth: hci5: command 0x1001 tx timeout [ 85.851796][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 85.998852][ T4505] loop1: detected capacity change from 0 to 512 [ 86.081163][ T4505] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.131545][ T4503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'. [ 86.423899][ T13] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 86.460033][ T13] usb 4-1: USB disconnect, device number 2 [ 86.533305][ T4521] loop4: detected capacity change from 0 to 512 [ 86.593149][ T4521] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.647767][ T4526] netlink: 'syz.0.69': attribute type 3 has an invalid length. [ 86.669393][ T4526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.69'. [ 86.706429][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.952575][ T4541] loop4: detected capacity change from 0 to 512 [ 87.009275][ T4541] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.149787][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.210597][ T7] cfg80211: failed to load regulatory.db [ 87.536010][ T4557] netlink: 132 bytes leftover after parsing attributes in process `syz.4.83'. [ 87.583780][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.587809][ T4544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.77'. [ 87.650599][ T4559] loop1: detected capacity change from 0 to 512 [ 87.673747][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.695561][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.715375][ T4559] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.876015][ T13] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 87.889524][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.890263][ T4570] netlink: 144 bytes leftover after parsing attributes in process `syz.3.90'. [ 87.898519][ T13] usb 1-1: Product: syz [ 87.898542][ T13] usb 1-1: Manufacturer: syz [ 87.898558][ T13] usb 1-1: SerialNumber: syz [ 87.943627][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 87.996811][ T4572] loop1: detected capacity change from 0 to 512 [ 88.098931][ T4572] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.207289][ T13] usb 1-1: selecting invalid altsetting 1 [ 88.226774][ T13] usb 1-1: unit 3 not found! [ 88.247357][ T13] usb 1-1: unit 6 not found! [ 88.405368][ T4537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.478867][ T13] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 88.571170][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.669792][ T23] usb 1-1: USB disconnect, device number 2 [ 88.687152][ T4590] device veth1_to_bridge entered promiscuous mode [ 88.773046][ T4596] loop1: detected capacity change from 0 to 512 [ 88.841254][ T4602] loop3: detected capacity change from 0 to 512 [ 88.875395][ T4596] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.908635][ T4602] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.188348][ T4608] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.234433][ T4598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 89.377727][ T4619] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.108'. [ 89.429113][ T4618] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.108'. [ 89.646033][ T4626] netlink: 'syz.4.111': attribute type 10 has an invalid length. [ 89.673653][ T4626] netlink: 2 bytes leftover after parsing attributes in process `syz.4.111'. [ 89.699883][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.708904][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.760896][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.768341][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.776828][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.784242][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.817303][ T4626] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 89.878432][ T4634] loop3: detected capacity change from 0 to 512 [ 89.932535][ T4639] netlink: 'syz.4.117': attribute type 10 has an invalid length. [ 89.935458][ T4634] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.969335][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.969905][ T4641] loop0: detected capacity change from 0 to 512 [ 89.987084][ T4639] device bridge_slave_1 left promiscuous mode [ 89.993800][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.027572][ T4639] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 90.060902][ T4641] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.139723][ T4645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.119'. [ 90.163816][ T26] audit: type=1400 audit(1792268111.640:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4643 comm="syz.4.120" [ 90.193673][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.220594][ T4648] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 90.440717][ T4656] netlink: 'syz.3.125': attribute type 22 has an invalid length. [ 90.461449][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 90.491515][ T4646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.120'. [ 90.604124][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.694300][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.721184][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.904568][ T13] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 90.924045][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.948324][ T13] usb 2-1: Product: syz [ 90.962793][ T13] usb 2-1: Manufacturer: syz [ 90.980248][ T13] usb 2-1: SerialNumber: syz [ 91.230228][ T4669] loop4: detected capacity change from 0 to 512 [ 91.266337][ T13] usb 2-1: selecting invalid altsetting 1 [ 91.300403][ T13] usb 2-1: unit 3 not found! [ 91.329887][ T13] usb 2-1: unit 6 not found! [ 91.420308][ T4669] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.465334][ T4640] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.584524][ T13] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 91.748059][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.783022][ T7] usb 2-1: USB disconnect, device number 2 [ 91.811264][ T4675] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.875623][ T4674] loop3: detected capacity change from 0 to 512 [ 92.003209][ T4674] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.223137][ T4689] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.138'. [ 92.378243][ T26] audit: type=1400 audit(1792268113.860:3): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4694 comm="syz.1.140" [ 92.440052][ T4697] loop3: detected capacity change from 0 to 512 [ 92.522163][ T4697] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.612406][ T4706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.143'. [ 92.644598][ T4705] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 92.693559][ T4705] team0: Port device netdevsim0 added [ 92.700693][ T4706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.143'. [ 92.726473][ T4701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.143'. [ 92.792183][ T4695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 92.825341][ T4703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.143'. [ 93.004911][ T4718] loop0: detected capacity change from 0 to 512 [ 93.143014][ T4718] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.173970][ T4726] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 93.263549][ T4198] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.284607][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.334626][ T4726] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.516529][ T4734] loop3: detected capacity change from 0 to 512 [ 93.599975][ T4734] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.679135][ T4198] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.770019][ T4198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.814576][ T4198] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.898960][ T26] audit: type=1400 audit(1792268115.380:4): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4750 comm="syz.1.164" [ 94.034318][ T4198] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 94.063489][ T4198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.099781][ T4198] usb 3-1: Product: syz [ 94.109765][ T4198] usb 3-1: Manufacturer: syz [ 94.129014][ T4198] usb 3-1: SerialNumber: syz [ 94.406174][ T4198] usb 3-1: selecting invalid altsetting 1 [ 94.433998][ T4198] usb 3-1: unit 3 not found! [ 94.438776][ T4198] usb 3-1: unit 6 not found! [ 94.646583][ T4198] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 94.740396][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.820729][ T4807] __nla_validate_parse: 6 callbacks suppressed [ 94.820748][ T4807] netlink: 132 bytes leftover after parsing attributes in process `syz.3.190'. [ 94.844714][ T4198] usb 3-1: USB disconnect, device number 3 [ 95.012269][ T26] audit: type=1400 audit(1792268116.490:5): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4818 comm="syz.1.196" [ 95.239444][ T4831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.201'. [ 95.256168][ T4831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.201'. [ 95.268559][ T4829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.201'. [ 95.279492][ T4833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.202'. [ 95.290032][ T4831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.201'. [ 95.301908][ T4820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.196'. [ 95.327420][ T4835] netlink: 'syz.0.203': attribute type 29 has an invalid length. [ 95.341172][ T4835] netlink: 'syz.0.203': attribute type 29 has an invalid length. [ 95.356424][ T4835] netlink: 'syz.0.203': attribute type 29 has an invalid length. [ 95.538468][ T4845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.206'. [ 95.543761][ T4846] netlink: 'syz.2.208': attribute type 25 has an invalid length. [ 95.564425][ T4846] netlink: 'syz.2.208': attribute type 6 has an invalid length. [ 95.572397][ T4846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.208'. [ 95.591280][ T4845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.206'. [ 95.796204][ T4868] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 95.823340][ T4868] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 95.904067][ T26] audit: type=1400 audit(1792268117.390:6): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4870 comm="syz.1.220" [ 95.934403][ T4875] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 96.013583][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.413814][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.499671][ T4913] bridge0: port 3(batadv0) entered blocking state [ 96.508580][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.531488][ T4913] bridge0: port 3(batadv0) entered disabled state [ 96.538819][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.556521][ T4913] device batadv0 entered promiscuous mode [ 96.573474][ T4913] bridge0: port 3(batadv0) entered blocking state [ 96.580894][ T4913] bridge0: port 3(batadv0) entered forwarding state [ 96.641037][ T4919] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 96.652490][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.703924][ T4919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.741004][ T13] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 96.744662][ T4919] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 96.772417][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.786624][ T4270] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 96.796675][ T4270] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 96.816422][ T13] usb 1-1: Product: syz [ 96.821010][ T13] usb 1-1: Manufacturer: syz [ 96.832993][ T13] usb 1-1: SerialNumber: syz [ 96.949158][ T4935] netlink: 'syz.1.250': attribute type 11 has an invalid length. [ 96.960565][ T26] audit: type=1400 audit(1792268118.440:7): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4937 comm="syz.2.252" [ 97.111267][ T4946] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 97.126631][ T13] usb 1-1: selecting invalid altsetting 1 [ 97.140129][ T13] usb 1-1: unit 3 not found! [ 97.147993][ T13] usb 1-1: unit 6 not found! [ 97.187831][ T4946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.229159][ T4946] team0: Port device bond0 added [ 97.357336][ T13] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 97.467843][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.539857][ T7] usb 1-1: USB disconnect, device number 3 [ 97.722351][ T4969] netlink: 'syz.3.267': attribute type 21 has an invalid length. [ 98.589524][ T4989] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 98.627511][ T26] audit: type=1400 audit(1792268120.110:8): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4992 comm="syz.0.279" [ 99.163463][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.579185][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.679958][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.703477][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.799778][ T26] audit: type=1400 audit(1792268121.280:9): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5061 comm="syz.2.311" [ 99.866872][ T5064] team0: Device wg1 is of different type [ 99.903723][ T7] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 99.937156][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.979437][ T7] usb 5-1: Product: syz [ 99.984120][ T7] usb 5-1: Manufacturer: syz [ 99.989010][ T7] usb 5-1: SerialNumber: syz [ 100.097515][ T5073] __nla_validate_parse: 9 callbacks suppressed [ 100.097535][ T5073] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.316'. [ 100.306005][ T7] usb 5-1: selecting invalid altsetting 1 [ 100.331194][ T7] usb 5-1: unit 3 not found! [ 100.343869][ T7] usb 5-1: unit 6 not found! [ 100.344015][ T5062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.311'. [ 100.489153][ T5100] validate_nla: 6 callbacks suppressed [ 100.489170][ T5100] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 100.539238][ T5100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.329'. [ 100.552491][ T7] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 100.602779][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.622502][ T5100] batman_adv: batadv0: Adding interface: virt_wifi0 [ 100.645508][ T5100] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.677601][ T5100] batman_adv: batadv0: Interface activated: virt_wifi0 [ 100.735095][ T1344] usb 5-1: USB disconnect, device number 2 [ 100.767780][ T5115] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 100.782853][ T5115] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 100.823042][ T5119] netlink: 'syz.2.339': attribute type 10 has an invalid length. [ 100.833931][ T5119] netlink: 168 bytes leftover after parsing attributes in process `syz.2.339'. [ 100.853802][ T5115] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 100.877112][ T5115] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 100.954686][ T5115] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 101.518272][ T26] audit: type=1400 audit(1792268123.000:10): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5136 comm="syz.1.346" [ 101.875665][ T5141] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 102.067574][ T5141] team0: Device gre0 is of different type [ 102.223595][ T5137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.346'. [ 102.307210][ T5141] syz.2.348 (5141) used greatest stack depth: 19184 bytes left [ 102.426262][ T5154] netlink: 'syz.2.353': attribute type 5 has an invalid length. [ 102.730197][ T5167] tipc: Started in network mode [ 102.741404][ T5167] tipc: Node identity 3ae60d648ec6, cluster identity 4711 [ 102.752501][ T5167] tipc: Enabled bearer , priority 1 [ 102.762525][ T5172] process 'syz.0.362' launched './file0' with NULL argv: empty string added [ 102.777865][ T5166] tipc: Resetting bearer [ 102.793807][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.813930][ T5166] tipc: Disabling bearer [ 102.947611][ T5183] FAULT_INJECTION: forcing a failure. [ 102.947611][ T5183] name failslab, interval 1, probability 0, space 0, times 1 [ 102.994332][ T5183] CPU: 1 PID: 5183 Comm: syz.2.366 Not tainted syzkaller #0 [ 103.002047][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.013123][ T5183] Call Trace: [ 103.016697][ T5183] [ 103.019667][ T5183] dump_stack_lvl+0x188/0x250 [ 103.024620][ T5183] ? show_regs_print_info+0x20/0x20 [ 103.029955][ T5183] ? load_image+0x410/0x410 [ 103.035115][ T5183] ? __might_sleep+0xf0/0xf0 [ 103.040016][ T5183] ? __lock_acquire+0x7d40/0x7d40 [ 103.045270][ T5183] should_fail+0x383/0x4b0 [ 103.050292][ T5183] should_failslab+0x5/0x20 [ 103.054933][ T5183] slab_pre_alloc_hook+0x51/0xc0 [ 103.059907][ T5183] ? __d_alloc+0x27/0x6d0 [ 103.064471][ T5183] kmem_cache_alloc+0x3d/0x280 [ 103.069412][ T5183] __d_alloc+0x27/0x6d0 [ 103.073778][ T5183] ? d_alloc_pseudo+0xe/0x70 [ 103.079195][ T5183] d_alloc_pseudo+0x19/0x70 [ 103.084559][ T5183] alloc_file_pseudo+0xe0/0x200 [ 103.090163][ T5183] ? alloc_empty_file_noaccount+0x80/0x80 [ 103.093555][ T26] audit: type=1400 audit(1792268124.550:11): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5188 comm="syz.1.368" [ 103.096242][ T5183] ? alloc_fd+0x59e/0x650 [ 103.096276][ T5183] sock_alloc_file+0xb3/0x240 [ 103.124315][ T5183] __sys_socket+0x11d/0x170 [ 103.129617][ T5183] __x64_sys_socket+0x76/0x80 [ 103.136209][ T5183] do_syscall_64+0x4c/0xa0 [ 103.142190][ T5183] ? clear_bhb_loop+0x30/0x80 [ 103.147010][ T5183] ? clear_bhb_loop+0x30/0x80 [ 103.152760][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.158877][ T5183] RIP: 0033:0x7f8e52305559 [ 103.163921][ T5183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.184344][ T5183] RSP: 002b:00007f8e5055d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.192802][ T5183] RAX: ffffffffffffffda RBX: 00007f8e5258cfa0 RCX: 00007f8e52305559 [ 103.200815][ T5183] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 103.208999][ T5183] RBP: 00007f8e5239cab8 R08: 0000000000000000 R09: 0000000000000000 [ 103.217256][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.225722][ T5183] R13: 00007f8e5258d038 R14: 00007f8e5258cfa0 R15: 00007ffe61fd76f8 [ 103.234355][ T5183] [ 103.343226][ T5189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'. [ 103.348268][ T5194] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.386101][ T5194] Cannot find add_set index 0 as target [ 103.488724][ T4299] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.554683][ T5206] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.586340][ T5209] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 103.603097][ T4299] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.634357][ T4299] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.712103][ T5215] jffs2: notice: (5215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.851884][ T4299] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 103.860912][ T5215] input: syz0 as /devices/virtual/input/input5 [ 103.886626][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.892888][ T5215] input: failed to attach handler leds to device input5, error: -6 [ 103.918744][ T4299] usb 5-1: Product: syz [ 103.923008][ T4299] usb 5-1: Manufacturer: syz [ 103.932412][ T4299] usb 5-1: SerialNumber: syz [ 103.974271][ T5223] tipc: Started in network mode [ 103.980662][ T5223] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 104.000275][ T5223] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 104.010639][ T5223] tipc: Enabled bearer , priority 10 [ 104.024477][ T4298] udevd[4298]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 104.256466][ T4299] usb 5-1: selecting invalid altsetting 1 [ 104.273660][ T4299] usb 5-1: unit 3 not found! [ 104.278511][ T4299] usb 5-1: unit 6 not found! [ 104.297248][ T4198] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.353997][ T26] audit: type=1400 audit(1792268125.840:12): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5231 comm="syz.3.387" [ 104.520377][ T4299] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 104.543631][ T4198] usb 3-1: Using ep0 maxpacket: 32 [ 104.605152][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.668725][ T4198] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 104.689440][ T4299] usb 5-1: USB disconnect, device number 3 [ 104.693846][ T4198] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 104.738876][ T4198] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 104.763701][ T4198] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 104.792518][ T4198] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.797681][ T4357] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.818550][ T5242] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 104.900023][ T5232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.387'. [ 104.973813][ T4198] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 104.993524][ T4198] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 105.004012][ T4198] usb 3-1: Product: syz [ 105.008536][ T4198] usb 3-1: Manufacturer: syz [ 105.023579][ T4198] usb 3-1: SerialNumber: syz [ 105.033056][ T4198] usb 3-1: config 0 descriptor?? [ 105.087429][ T4198] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 105.118034][ T4198] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 105.122875][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 105.157841][ T4198] tipc: Node number set to 1 [ 105.344974][ T5271] 9pnet_virtio: no channels available for device syz [ 105.360306][ T4299] usb 3-1: USB disconnect, device number 4 [ 105.363732][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 105.374098][ T5225] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 105.393736][ T4299] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 105.494868][ T26] audit: type=1400 audit(1792268126.980:13): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5275 comm="syz.3.407" [ 105.843060][ T5276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'. [ 106.080433][ T5287] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.130599][ T5287] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.283244][ T5298] ======================================================= [ 106.283244][ T5298] WARNING: The mand mount option has been deprecated and [ 106.283244][ T5298] and is ignored by this kernel. Remove the mand [ 106.283244][ T5298] option from the mount to silence this warning. [ 106.283244][ T5298] ======================================================= [ 106.297241][ T5267] ODEBUG: Out of memory. ODEBUG disabled [ 106.318949][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.349171][ T5298] overlayfs: failed to resolve './file1/file0': -2 [ 106.517404][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.749501][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.778900][ T5310] ip_tables: iptables: counters copy to user failed while replacing table [ 106.813576][ T1344] Bluetooth: hci5: command 0x1003 tx timeout [ 106.823510][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 106.933655][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.023592][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.037487][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.124301][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.136294][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.147489][ T7] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 107.162448][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 107.213725][ T13] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 107.223140][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.243555][ T13] usb 5-1: Product: syz [ 107.248409][ T13] usb 5-1: Manufacturer: syz [ 107.263491][ T13] usb 5-1: SerialNumber: syz [ 107.277513][ T26] audit: type=1400 audit(1792268128.760:14): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5315 comm="syz.2.421" [ 107.356651][ T5267] Set syz0 is full, maxelem 65536 reached [ 107.373762][ T7] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 107.384547][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.392879][ T7] usb 4-1: Product: syz [ 107.398170][ T7] usb 4-1: Manufacturer: syz [ 107.402981][ T7] usb 4-1: SerialNumber: syz [ 107.443968][ T5304] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 107.465297][ T7] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 107.474874][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 107.483166][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 107.495151][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 107.503762][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 107.513801][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 107.522615][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 107.542180][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 107.558977][ T13] usb 5-1: selecting invalid altsetting 1 [ 107.565037][ T7] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 107.574769][ T13] usb 5-1: unit 3 not found! [ 107.579898][ T13] usb 5-1: unit 6 not found! [ 107.587087][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 107.595433][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 107.603779][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 107.611997][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 107.620211][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 107.628423][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 107.637533][ T7] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 107.785264][ T13] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 107.817887][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.850229][ T13] usb 4-1: USB disconnect, device number 3 [ 107.866366][ T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 107.894139][ T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 107.905490][ T13] keyspan 4-1:1.0: device disconnected [ 107.978958][ T4299] usb 5-1: USB disconnect, device number 4 [ 108.075387][ T5335] tipc: New replicast peer: 172.20.20.187 [ 108.091064][ T5335] tipc: Enabled bearer , priority 10 [ 108.171255][ T5341] tipc: Enabling of bearer rejected, already enabled [ 108.222453][ T5345] FAULT_INJECTION: forcing a failure. [ 108.222453][ T5345] name failslab, interval 1, probability 0, space 0, times 0 [ 108.237048][ T5345] CPU: 1 PID: 5345 Comm: syz.2.431 Not tainted syzkaller #0 [ 108.245714][ T5345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.256793][ T5345] Call Trace: [ 108.260464][ T5345] [ 108.263754][ T5345] dump_stack_lvl+0x188/0x250 [ 108.268813][ T5345] ? show_regs_print_info+0x20/0x20 [ 108.276229][ T5345] ? load_image+0x410/0x410 [ 108.281020][ T5345] ? __might_sleep+0xf0/0xf0 [ 108.285654][ T5345] ? __lock_acquire+0x7d40/0x7d40 [ 108.291076][ T5345] ? verify_lock_unused+0x140/0x140 [ 108.298299][ T5345] should_fail+0x383/0x4b0 [ 108.302868][ T5345] should_failslab+0x5/0x20 [ 108.307586][ T5345] slab_pre_alloc_hook+0x51/0xc0 [ 108.312667][ T5345] ? __d_alloc+0x27/0x6d0 [ 108.317029][ T5345] kmem_cache_alloc+0x3d/0x280 [ 108.321887][ T5345] __d_alloc+0x27/0x6d0 [ 108.326051][ T5345] ? d_alloc_pseudo+0xe/0x70 [ 108.330839][ T5345] d_alloc_pseudo+0x19/0x70 [ 108.335340][ T5345] alloc_file_pseudo+0xe0/0x200 [ 108.340423][ T5345] ? alloc_empty_file_noaccount+0x80/0x80 [ 108.346300][ T5345] ? _raw_spin_unlock+0x24/0x40 [ 108.351200][ T5345] ? alloc_fd+0x59e/0x650 [ 108.356603][ T5345] __anon_inode_getfd+0x26b/0x3d0 [ 108.361699][ T5345] ? anon_inode_getfd+0x40/0x40 [ 108.366840][ T5345] ? vfs_submount+0xb0/0xb0 [ 108.371935][ T5345] fscontext_create_fd+0x27/0x50 [ 108.377047][ T5345] __se_sys_fspick+0x364/0x410 [ 108.381836][ T5345] ? __x64_sys_fspick+0x80/0x80 [ 108.386869][ T5345] ? lockdep_hardirqs_on+0x94/0x140 [ 108.392570][ T5345] do_syscall_64+0x4c/0xa0 [ 108.397178][ T5345] ? clear_bhb_loop+0x30/0x80 [ 108.403550][ T5345] ? clear_bhb_loop+0x30/0x80 [ 108.408460][ T5345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.414505][ T5345] RIP: 0033:0x7f8e52305559 [ 108.419009][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.439050][ T5345] RSP: 002b:00007f8e5055d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 108.447650][ T5345] RAX: ffffffffffffffda RBX: 00007f8e5258cfa0 RCX: 00007f8e52305559 [ 108.456520][ T5345] RDX: 0000000000000000 RSI: 0000200000002280 RDI: ffffffffffffff9c [ 108.464736][ T5345] RBP: 00007f8e5239cab8 R08: 0000000000000000 R09: 0000000000000000 [ 108.472944][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.481033][ T5345] R13: 00007f8e5258d038 R14: 00007f8e5258cfa0 R15: 00007ffe61fd76f8 [ 108.489037][ T5345] [ 108.492108][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.579162][ T26] audit: type=1400 audit(1792268130.060:15): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5350 comm="syz.0.433" [ 108.883639][ T4299] Bluetooth: hci5: command 0x1001 tx timeout [ 108.898129][ T5361] 9pnet_virtio: no channels available for device syz [ 108.915235][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 109.210351][ T7] tipc: Node number set to 3021999460 [ 109.343205][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 109.360085][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 109.583618][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.609377][ T26] audit: type=1400 audit(1792268131.090:16): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5406 comm="syz.2.457" [ 110.033637][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.123830][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.134104][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.275976][ T5430] device syzkaller0 entered promiscuous mode [ 110.323919][ T7] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 110.333601][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.342140][ T7] usb 1-1: Product: syz [ 110.347357][ T7] usb 1-1: Manufacturer: syz [ 110.352747][ T7] usb 1-1: SerialNumber: syz [ 110.396037][ T5432] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 110.423483][ T4198] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.462111][ T26] audit: type=1400 audit(1792268131.940:17): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5435 comm="syz.3.470" [ 110.628080][ T7] usb 1-1: selecting invalid altsetting 1 [ 110.640741][ T7] usb 1-1: unit 3 not found! [ 110.645942][ T7] usb 1-1: unit 6 not found! [ 110.833748][ T4198] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 110.844935][ T4198] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.869240][ T7] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 110.923691][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.970065][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 111.043821][ T4198] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.064752][ T4198] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.074619][ T4198] usb 3-1: Product: syz [ 111.079717][ T4198] usb 3-1: Manufacturer: syz [ 111.086005][ T4198] usb 3-1: SerialNumber: syz [ 111.093265][ T4198] usb 3-1: config 0 descriptor?? [ 111.099679][ T7] usb 1-1: USB disconnect, device number 4 [ 111.124015][ T5422] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.146817][ T4198] usb 3-1: selecting invalid altsetting 0 [ 111.366919][ T5422] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 111.379042][ T7] usb 3-1: USB disconnect, device number 5 [ 111.409767][ T26] audit: type=1400 audit(1792268132.890:18): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5468 comm="syz.3.484" [ 111.692789][ T5480] FAULT_INJECTION: forcing a failure. [ 111.692789][ T5480] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.708696][ T5480] CPU: 0 PID: 5480 Comm: syz.0.488 Not tainted syzkaller #0 [ 111.716475][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.727827][ T5480] Call Trace: [ 111.731232][ T5480] [ 111.734653][ T5480] dump_stack_lvl+0x188/0x250 [ 111.739553][ T5480] ? show_regs_print_info+0x20/0x20 [ 111.744794][ T5480] ? load_image+0x410/0x410 [ 111.749602][ T5480] ? kernfs_fop_write_iter+0x14f/0x500 [ 111.755212][ T5480] ? __lock_acquire+0x7d40/0x7d40 [ 111.760374][ T5480] should_fail+0x383/0x4b0 [ 111.764929][ T5480] _copy_from_iter+0x234/0x1160 [ 111.769924][ T5480] ? __lock_acquire+0x7d40/0x7d40 [ 111.775004][ T5480] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 111.780586][ T5480] ? __virt_addr_valid+0x3c6/0x470 [ 111.785753][ T5480] ? __check_object_size+0x30c/0x410 [ 111.791191][ T5480] kernfs_fop_write_iter+0x195/0x500 [ 111.796673][ T5480] ? iov_iter_init+0xb4/0x170 [ 111.801483][ T5480] vfs_write+0x748/0xd70 [ 111.805774][ T5480] ? file_end_write+0x250/0x250 [ 111.810863][ T5480] ? mutex_lock_nested+0x17/0x20 [ 111.816286][ T5480] ? __fdget_pos+0x2bf/0x370 [ 111.821312][ T5480] ? ksys_write+0x70/0x260 [ 111.825996][ T5480] ksys_write+0x153/0x260 [ 111.830674][ T5480] ? __ia32_sys_read+0x80/0x80 [ 111.835582][ T5480] ? lockdep_hardirqs_on+0x94/0x140 [ 111.841489][ T5480] do_syscall_64+0x4c/0xa0 [ 111.846237][ T5480] ? clear_bhb_loop+0x30/0x80 [ 111.852035][ T5480] ? clear_bhb_loop+0x30/0x80 [ 111.857126][ T5480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.863579][ T5480] RIP: 0033:0x7ff50db5b559 [ 111.868424][ T5480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.889596][ T5480] RSP: 002b:00007ff50bdb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.898290][ T5480] RAX: ffffffffffffffda RBX: 00007ff50dde2fa0 RCX: 00007ff50db5b559 [ 111.907065][ T5480] RDX: 0000000000000005 RSI: 0000200000000800 RDI: 0000000000000003 [ 111.915697][ T5480] RBP: 00007ff50dbf2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 111.924291][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.932647][ T5480] R13: 00007ff50dde3038 R14: 00007ff50dde2fa0 R15: 00007fff6c884928 [ 111.941054][ T5480] [ 112.220244][ T26] audit: type=1400 audit(1792268133.700:19): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5505 comm="syz.4.500" [ 112.228253][ T5508] ip_tables: iptables: counters copy to user failed while replacing table [ 112.393518][ T4299] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.493353][ T5511] validate_nla: 1 callbacks suppressed [ 112.499367][ T5511] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 112.508246][ T5511] netlink: 'syz.0.502': attribute type 2 has an invalid length. [ 112.634527][ T5517] FAULT_INJECTION: forcing a failure. [ 112.634527][ T5517] name failslab, interval 1, probability 0, space 0, times 0 [ 112.648265][ T5517] CPU: 0 PID: 5517 Comm: syz.0.505 Not tainted syzkaller #0 [ 112.656238][ T5517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.666768][ T5517] Call Trace: [ 112.670108][ T5517] [ 112.673279][ T5517] dump_stack_lvl+0x188/0x250 [ 112.678600][ T5517] ? show_regs_print_info+0x20/0x20 [ 112.684049][ T5517] ? load_image+0x410/0x410 [ 112.688692][ T5517] should_fail+0x383/0x4b0 [ 112.693555][ T5517] should_failslab+0x5/0x20 [ 112.698285][ T5517] slab_pre_alloc_hook+0x51/0xc0 [ 112.703692][ T5517] kmem_cache_alloc_trace+0x47/0x290 [ 112.709419][ T5517] ? io_cqring_event_overflow+0x59/0x310 [ 112.715272][ T5517] io_cqring_event_overflow+0x59/0x310 [ 112.721091][ T5517] ? __io_fill_cqe+0x14d/0x400 [ 112.726195][ T5517] io_req_complete_post+0x7d/0x820 [ 112.731578][ T5517] io_submit_sqes+0x5d56/0xa0a0 [ 112.736661][ T5517] ? io_uring_del_tctx_node+0x280/0x280 [ 112.742389][ T5517] __se_sys_io_uring_enter+0x273/0x1e50 [ 112.748038][ T5517] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 112.753960][ T5517] ? __context_tracking_exit+0x4c/0x80 [ 112.759642][ T5517] ? __lock_acquire+0x7d40/0x7d40 [ 112.764857][ T5517] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.771122][ T5517] ? lock_chain_count+0x20/0x20 [ 112.776249][ T5517] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 112.782158][ T5517] do_syscall_64+0x4c/0xa0 [ 112.786595][ T5517] ? clear_bhb_loop+0x30/0x80 [ 112.791497][ T5517] ? clear_bhb_loop+0x30/0x80 [ 112.796287][ T5517] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.802215][ T5517] RIP: 0033:0x7ff50db5b559 [ 112.803765][ T4299] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.806641][ T5517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.806683][ T5517] RSP: 002b:00007ff50bdb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 112.843533][ T5517] RAX: ffffffffffffffda RBX: 00007ff50dde2fa0 RCX: 00007ff50db5b559 [ 112.851956][ T5517] RDX: 0000000000000020 RSI: 0000000000000020 RDI: 0000000000000003 [ 112.860142][ T5517] RBP: 00007ff50dbf2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 112.868849][ T5517] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 112.877079][ T5517] R13: 00007ff50dde3038 R14: 00007ff50dde2fa0 R15: 00007fff6c884928 [ 112.885563][ T5517] [ 112.893747][ T4299] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.904940][ T4299] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.074751][ T4299] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 113.084825][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.094046][ T4299] usb 4-1: Product: syz [ 113.098733][ T4299] usb 4-1: Manufacturer: syz [ 113.104478][ T4299] usb 4-1: SerialNumber: syz [ 113.143448][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 113.193676][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.376308][ T4299] usb 4-1: selecting invalid altsetting 1 [ 113.382686][ T4299] usb 4-1: unit 3 not found! [ 113.387634][ T4299] usb 4-1: unit 6 not found! [ 113.433623][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 113.553870][ T21] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 113.563257][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.573321][ T21] usb 1-1: config 0 descriptor?? [ 113.594711][ T4299] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 113.617967][ T21] as10x_usb: device has been detected [ 113.634142][ T21] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 113.637084][ T5458] udevd[5458]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.674263][ T21] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 113.732293][ T21] as10x_usb: error during firmware upload part1 [ 113.739182][ T21] Registered device nBox DVB-T Dongle [ 113.790257][ T7] usb 4-1: USB disconnect, device number 4 [ 113.820403][ T13] usb 1-1: USB disconnect, device number 5 [ 113.841472][ T13] Unregistered device nBox DVB-T Dongle [ 113.842531][ T13] as10x_usb: device has been disconnected [ 114.294354][ T26] audit: type=1400 audit(1792268135.780:20): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5538 comm="syz.2.516" [ 114.378705][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 114.390555][ T5543] block nbd0: Unsupported socket: shutdown callout must be supported. [ 114.550939][ T5552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.522'. [ 114.619495][ T5559] mmap: syz.4.525 (5559): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 114.933527][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.043589][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.103588][ T1344] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.123655][ T4299] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.173513][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 115.293691][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.304981][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.314944][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 115.328181][ T7] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 115.337306][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.348017][ T7] usb 4-1: config 0 descriptor?? [ 115.353911][ T1344] usb 3-1: Using ep0 maxpacket: 16 [ 115.399666][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 115.493939][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.502012][ T1344] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 115.512172][ T1344] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 115.524062][ T1344] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 115.534480][ T1344] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.543915][ T4299] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 115.552393][ T4299] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.562652][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.573007][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.584042][ T4299] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.597335][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.608077][ T4299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.617527][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.627422][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.683589][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 115.689947][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 115.705652][ T7] usb 4-1: USB disconnect, device number 5 [ 115.723924][ T1344] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 115.746982][ T1344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.763411][ T1344] usb 3-1: Product: syz [ 115.767662][ T1344] usb 3-1: Manufacturer: syz [ 115.772295][ T1344] usb 3-1: SerialNumber: syz [ 115.794422][ T1344] usb 3-1: config 0 descriptor?? [ 115.814014][ T21] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 115.823316][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.831840][ T21] usb 1-1: Product: syz [ 115.842497][ T21] usb 1-1: Manufacturer: syz [ 115.855312][ T21] usb 1-1: SerialNumber: syz [ 115.913769][ T4299] usb 5-1: GET_CAPABILITIES returned 0 [ 115.919499][ T4299] usbtmc 5-1:16.0: can't read capabilities [ 116.057754][ T1344] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 116.077678][ T3543] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.093159][ T3543] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.154931][ T21] usb 1-1: selecting invalid altsetting 1 [ 116.167677][ T4384] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.173184][ T21] usb 1-1: unit 3 not found! [ 116.185040][ T3543] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.202589][ T21] usb 1-1: unit 6 not found! [ 116.207943][ T3543] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.233699][ T3543] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.243958][ T3543] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.263939][ T5569] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 116.273907][ T4299] usb 3-1: USB disconnect, device number 6 [ 116.335204][ T5589] device syzkaller0 entered promiscuous mode [ 116.361680][ T21] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 116.417328][ T5458] udevd[5458]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.483920][ T5590] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 116.566267][ T4299] usb 1-1: USB disconnect, device number 6 [ 116.690251][ T13] usb 5-1: USB disconnect, device number 5 [ 116.694999][ T26] audit: type=1400 audit(1792268138.170:21): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5595 comm="syz.3.540" [ 116.973258][ T5606] binder: 5605:5606 ioctl c0306201 200000000180 returned -14 [ 116.996510][ T5606] binder: 5605:5606 ioctl c0306201 200000000300 returned -14 [ 117.347130][ T5630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 117.367179][ T4203] Bluetooth: Wrong link type (-22) [ 117.583924][ T5645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.562'. [ 117.779713][ T26] audit: type=1400 audit(1792268139.260:22): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5651 comm="syz.1.565" [ 117.816554][ T4299] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.857711][ T5656] binder: 5655:5656 unknown command 1074553619 [ 117.866097][ T5656] binder: 5655:5656 ioctl c0306201 200000006e80 returned -22 [ 118.129762][ T5669] FAULT_INJECTION: forcing a failure. [ 118.129762][ T5669] name failslab, interval 1, probability 0, space 0, times 0 [ 118.143059][ T5669] CPU: 0 PID: 5669 Comm: syz.3.574 Not tainted syzkaller #0 [ 118.150615][ T5669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.161123][ T5669] Call Trace: [ 118.164523][ T5669] [ 118.167491][ T5669] dump_stack_lvl+0x188/0x250 [ 118.172337][ T5669] ? show_regs_print_info+0x20/0x20 [ 118.178118][ T5669] ? load_image+0x410/0x410 [ 118.182851][ T5669] should_fail+0x383/0x4b0 [ 118.187602][ T5669] should_failslab+0x5/0x20 [ 118.192360][ T5669] slab_pre_alloc_hook+0x51/0xc0 [ 118.197389][ T5669] kmem_cache_alloc_trace+0x47/0x290 [ 118.203165][ T5669] ? tipc_nametbl_insert_publ+0x885/0x1380 [ 118.209325][ T5669] tipc_nametbl_insert_publ+0x885/0x1380 [ 118.215466][ T5669] tipc_nametbl_publish+0x11d/0x270 [ 118.220865][ T5669] tipc_sk_publish+0x1c8/0x420 [ 118.225771][ T5669] ? __lock_acquire+0x7d40/0x7d40 [ 118.230996][ T5669] ? tipc_sk_withdraw+0x640/0x640 [ 118.236137][ T5669] ? tipc_nametbl_build_group+0x447/0x480 [ 118.241920][ T5669] ? tipc_group_create+0x357/0x4e0 [ 118.247263][ T5669] tipc_sk_join+0x3ac/0x6a0 [ 118.251908][ T5669] ? __tipc_sendstream+0x1280/0x1280 [ 118.257553][ T5669] tipc_setsockopt+0x6b8/0x960 [ 118.262449][ T5669] ? tipc_shutdown+0x4d0/0x4d0 [ 118.267422][ T5669] ? aa_sock_opt_perm+0x74/0x100 [ 118.272475][ T5669] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 118.278097][ T5669] ? security_socket_setsockopt+0x7a/0xa0 [ 118.284207][ T5669] ? tipc_shutdown+0x4d0/0x4d0 [ 118.289123][ T5669] __sys_setsockopt+0x2bf/0x3d0 [ 118.294285][ T5669] __x64_sys_setsockopt+0xb1/0xc0 [ 118.299348][ T5669] do_syscall_64+0x4c/0xa0 [ 118.304070][ T5669] ? clear_bhb_loop+0x30/0x80 [ 118.309359][ T5669] ? clear_bhb_loop+0x30/0x80 [ 118.314379][ T5669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.320411][ T5669] RIP: 0033:0x7fb5c8730559 [ 118.324947][ T5669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.335383][ T5675] tmpfs: Unknown parameter 'quota' [ 118.344775][ T5669] RSP: 002b:00007fb5c6988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.344855][ T5669] RAX: ffffffffffffffda RBX: 00007fb5c89b7fa0 RCX: 00007fb5c8730559 [ 118.344870][ T5669] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 118.344883][ T5669] RBP: 00007fb5c87c7ab8 R08: 000000000000002e R09: 0000000000000000 [ 118.344895][ T5669] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 118.344907][ T5669] R13: 00007fb5c89b8038 R14: 00007fb5c89b7fa0 R15: 00007ffc4451a2e8 [ 118.344936][ T5669] [ 118.344988][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.345034][ T5669] tipc: Failed to bind to 66,4294966268,4294966268 [ 118.413527][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.461935][ T5678] 9pnet_virtio: no channels available for device syz [ 118.483783][ T4299] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.573643][ T4299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.602508][ T4299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.749588][ T4198] input: syz0 as /devices/virtual/misc/uhid/0003:1B1C:0101.0001/input/input7 [ 118.799664][ T5687] kvm: pic: non byte read [ 118.803683][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.821362][ T4198] hid-generic 0003:1B1C:0101.0001: input,hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 118.827596][ T4299] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 118.853912][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.885893][ T4299] usb 1-1: Product: syz [ 118.903570][ T4299] usb 1-1: Manufacturer: syz [ 118.908402][ T4299] usb 1-1: SerialNumber: syz [ 118.962837][ T5698] fido_id[5698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.993857][ T13] usb 3-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 119.005530][ T5702] FAULT_INJECTION: forcing a failure. [ 119.005530][ T5702] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 119.024295][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.028805][ T5702] CPU: 1 PID: 5702 Comm: syz.3.585 Not tainted syzkaller #0 [ 119.050510][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.062462][ T13] usb 3-1: Product: syz [ 119.065809][ T5702] Call Trace: [ 119.065839][ T5702] [ 119.065855][ T5702] dump_stack_lvl+0x188/0x250 [ 119.065885][ T5702] ? show_regs_print_info+0x20/0x20 [ 119.065904][ T5702] ? load_image+0x410/0x410 [ 119.065926][ T5702] ? uncharge_page+0x490/0x490 [ 119.065949][ T5702] should_fail+0x383/0x4b0 [ 119.105476][ T13] usb 3-1: Manufacturer: syz [ 119.109038][ T5702] prepare_alloc_pages+0x1e3/0x5b0 [ 119.109091][ T5702] __alloc_pages+0x11b/0x480 [ 119.109116][ T5702] ? zone_statistics+0x170/0x170 [ 119.140165][ T13] usb 3-1: SerialNumber: syz [ 119.143964][ T5702] ? rcu_lock_acquire+0x30/0x30 [ 119.144003][ T5702] ? alloc_pages+0x452/0x560 [ 119.144028][ T5702] __get_free_pages+0x8/0x30 [ 119.144048][ T5702] __tlb_remove_page_size+0x1f2/0x3f0 [ 119.144074][ T5702] unmap_page_range+0xfcf/0x2410 [ 119.144123][ T5702] unmap_vmas+0x131/0x250 [ 119.144144][ T5702] ? unmap_page_range+0x2410/0x2410 [ 119.144158][ T5702] ? __mutex_lock_common+0x435/0x2400 [ 119.144181][ T5702] ? exit_mm_release+0x16/0x30 [ 119.144213][ T5702] exit_mmap+0x3b9/0x640 [ 119.144235][ T5702] ? vm_brk+0x20/0x20 [ 119.242440][ T13] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 119.243814][ T5702] ? uprobe_clear_state+0x2f6/0x460 [ 119.243855][ T5702] __mmput+0x115/0x390 [ 119.243879][ T5702] exit_mm+0x632/0x7b0 [ 119.243896][ T5702] ? perf_pmu_migrate_context+0xb70/0xb70 [ 119.243923][ T5702] ? do_exit+0x2110/0x2110 [ 119.243939][ T5702] ? __ia32_sys_timer_delete+0x40/0x40 [ 119.243959][ T5702] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 119.292941][ T5702] ? tty_audit_exit+0x149/0x1f0 [ 119.297949][ T5702] do_exit+0x5b8/0x2110 [ 119.302255][ T5702] ? put_task_struct+0x80/0x80 [ 119.307055][ T5702] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.313079][ T5702] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.318257][ T5702] do_group_exit+0x12c/0x2f0 [ 119.323081][ T5702] ? lockdep_hardirqs_on+0x94/0x140 [ 119.328491][ T5702] get_signal+0x7eb/0x12e0 [ 119.333229][ T5702] arch_do_signal_or_restart+0xe6/0x12a0 [ 119.339052][ T5702] ? futex_exit_release+0x1c0/0x1c0 [ 119.344298][ T5702] ? get_sigframe_size+0x10/0x10 [ 119.349406][ T5702] ? __context_tracking_exit+0x4c/0x80 [ 119.354920][ T5702] ? exit_to_user_mode_loop+0x3b/0x130 [ 119.360410][ T5702] exit_to_user_mode_loop+0x9e/0x130 [ 119.365888][ T5702] exit_to_user_mode_prepare+0xee/0x180 [ 119.371475][ T5702] syscall_exit_to_user_mode+0x16/0x40 [ 119.376972][ T5702] do_syscall_64+0x58/0xa0 [ 119.381435][ T5702] ? clear_bhb_loop+0x30/0x80 [ 119.386137][ T5702] ? clear_bhb_loop+0x30/0x80 [ 119.391033][ T5702] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.397156][ T5702] RIP: 0033:0x7fb5c8730559 [ 119.401600][ T5702] Code: Unable to access opcode bytes at RIP 0x7fb5c873052f. [ 119.409246][ T5702] RSP: 002b:00007fb5c69880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.417899][ T5702] RAX: 0000000000000001 RBX: 00007fb5c89b7fa8 RCX: 00007fb5c8730559 [ 119.426076][ T5702] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb5c89b7fac [ 119.434161][ T5702] RBP: 00007fb5c89b7fa0 R08: 0037ef014ad7eb00 R09: 0000000000000000 [ 119.442331][ T5702] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 119.450908][ T5702] R13: 00007fb5c89b8038 R14: 00007ffc4451a200 R15: 00007ffc4451a2e8 [ 119.458911][ T5702] [ 119.473522][ T13] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 119.490450][ T26] audit: type=1400 audit(1792268140.970:23): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5703 comm="syz.4.587" [ 119.501032][ T13] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.509786][ T4299] usb 1-1: selecting invalid altsetting 1 [ 119.532168][ T13] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 119.542552][ T13] usb 3-1: media controller created [ 119.553885][ T4299] usb 1-1: unit 3 not found! [ 119.558663][ T4299] usb 1-1: unit 6 not found! [ 119.572572][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.694555][ T13] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 119.762600][ T13] usb 3-1: USB disconnect, device number 7 [ 119.783733][ T4299] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 119.852951][ T5707] udevd[5707]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.951761][ T4261] usb 1-1: USB disconnect, device number 7 [ 120.143915][ T4299] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.346773][ T26] audit: type=1400 audit(1792268141.830:24): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5733 comm="syz.4.601" [ 120.423450][ T4299] usb 2-1: Using ep0 maxpacket: 32 [ 120.573597][ T4299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.595162][ T4299] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.604909][ T4299] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 120.615868][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.650117][ T4299] usb 2-1: config 0 descriptor?? [ 120.902188][ T5766] tmpfs: Unknown parameter 'quota' [ 120.913268][ T4299] usb 2-1: USB disconnect, device number 3 [ 121.141273][ T5788] sg_write: data in/out 10193/20 bytes for SCSI command 0x0-- guessing data in; [ 121.141273][ T5788] program syz.2.624 not setting count and/or reply_len properly [ 121.213628][ T4261] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.221519][ T26] audit: type=1400 audit(1792268142.700:25): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5791 comm="syz.4.626" [ 121.713585][ T4261] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.768767][ T5824] overlayfs: unrecognized mount option "upperdir=" or missing value [ 121.813755][ T4261] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.830278][ T4261] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.881701][ T5826] 9pnet_virtio: no channels available for device syz [ 122.004005][ T4261] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 122.016665][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.035155][ T4261] usb 1-1: Product: syz [ 122.045413][ T4261] usb 1-1: Manufacturer: syz [ 122.054167][ T4261] usb 1-1: SerialNumber: syz [ 122.308907][ T5838] tipc: Started in network mode [ 122.321381][ T5838] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 122.348382][ T5838] tipc: Enabled bearer , priority 10 [ 122.366019][ T4261] usb 1-1: selecting invalid altsetting 1 [ 122.378065][ T4261] usb 1-1: unit 3 not found! [ 122.392921][ T4261] usb 1-1: unit 6 not found! [ 122.561712][ T26] audit: type=1400 audit(1792268144.040:26): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5844 comm="syz.1.649" [ 122.631751][ T4261] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 122.670455][ T4261] usb 1-1: USB disconnect, device number 8 [ 122.705585][ T5458] udevd[5458]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.803553][ T4299] Bluetooth: hci3: command 0x0439 tx timeout [ 123.268168][ T5845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.649'. [ 123.464276][ T7] tipc: Node number set to 4269801491 [ 123.660022][ T5859] team0: No ports can be present during mode change [ 123.833090][ T5869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.661'. [ 123.834875][ T5868] FAULT_INJECTION: forcing a failure. [ 123.834875][ T5868] name fail_futex, interval 1, probability 0, space 0, times 1 [ 123.862402][ T5869] netlink: 'syz.0.661': attribute type 10 has an invalid length. [ 123.885809][ T5869] device syz_tun entered promiscuous mode [ 123.914978][ T5868] CPU: 1 PID: 5868 Comm: syz.1.660 Not tainted syzkaller #0 [ 123.922348][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.932652][ T5868] Call Trace: [ 123.935956][ T5868] [ 123.938996][ T5868] dump_stack_lvl+0x188/0x250 [ 123.943794][ T5868] ? unwind_get_return_address+0x49/0x80 [ 123.949635][ T5868] ? stack_trace_save+0xf0/0xf0 [ 123.953832][ T5869] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.954522][ T5868] ? show_regs_print_info+0x20/0x20 [ 123.954552][ T5868] ? load_image+0x410/0x410 [ 123.974021][ T5868] ? kmem_cache_free+0x8f/0x210 [ 123.979441][ T5868] ? stack_trace_save+0xa6/0xf0 [ 123.985616][ T5868] ? stack_trace_snprint+0xe0/0xe0 [ 123.990869][ T5868] should_fail+0x383/0x4b0 [ 123.995758][ T5868] get_futex_key+0x1a1/0x12d0 [ 124.000569][ T5868] ? __lock_acquire+0x13b3/0x7d40 [ 124.005642][ T5868] ? futex_wait_restart+0x250/0x250 [ 124.010910][ T5868] futex_wake+0x101/0x540 [ 124.015280][ T5868] ? futex_wait+0x680/0x680 [ 124.019817][ T5868] ? verify_lock_unused+0x140/0x140 [ 124.025040][ T5868] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.031279][ T5868] ? verify_lock_unused+0x140/0x140 [ 124.036623][ T5868] do_futex+0xd83/0x12b0 [ 124.040933][ T5868] ? kasan_quarantine_put+0xd4/0x210 [ 124.046435][ T5868] ? lockdep_hardirqs_on+0x94/0x140 [ 124.051771][ T5868] ? futex_exit_release+0x1c0/0x1c0 [ 124.057011][ T5868] ? __context_tracking_exit+0x4c/0x80 [ 124.062772][ T5868] __se_sys_futex+0x389/0x420 [ 124.067499][ T5868] ? __x64_sys_futex+0xf0/0xf0 [ 124.072388][ T5868] ? __x64_sys_futex+0x1d/0xf0 [ 124.077185][ T5868] do_syscall_64+0x4c/0xa0 [ 124.081895][ T5868] ? clear_bhb_loop+0x30/0x80 [ 124.086688][ T5868] ? clear_bhb_loop+0x30/0x80 [ 124.091662][ T5868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.097581][ T5868] RIP: 0033:0x7fd355c6f559 [ 124.102312][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.122673][ T5868] RSP: 002b:00007fd353ec70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.131510][ T5868] RAX: ffffffffffffffda RBX: 00007fd355ef6fa8 RCX: 00007fd355c6f559 [ 124.139727][ T5868] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd355ef6fac [ 124.147993][ T5868] RBP: 00007fd355ef6fa0 R08: 002dcd0324412992 R09: 0000000000000000 [ 124.156007][ T5868] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 124.164198][ T5868] R13: 00007fd355ef7038 R14: 00007ffcea3bff40 R15: 00007ffcea3c0028 [ 124.172501][ T5868] [ 124.435382][ T5879] page:ffffea0001c90000 refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72400 [ 124.453477][ T4264] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.474062][ T5879] head:ffffea0001c90000 order:3 compound_mapcount:0 compound_pincount:0 [ 124.494577][ T4261] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 124.505219][ T5879] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff) [ 124.523614][ T4261] Bluetooth: hci1: Injecting HCI hardware error event [ 124.531978][ T4193] Bluetooth: hci1: hardware error 0x00 [ 124.555884][ T5879] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000 [ 124.597536][ T5879] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 124.627167][ T5879] page dumped because: unmovable page [ 124.669617][ T5879] page_owner tracks the page as allocated [ 124.683472][ T5879] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4036, ts 56441139175, free_ts 26271593642 [ 124.760911][ T5879] get_page_from_freelist+0x24f6/0x2670 [ 124.766691][ T5879] __alloc_pages+0x1ee/0x480 [ 124.771536][ T5879] skb_page_frag_refill+0x225/0x4c0 [ 124.779212][ T26] audit: type=1400 audit(1792268146.260:27): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5883 comm="syz.1.667" [ 124.849590][ T5879] try_fill_recv+0x6c8/0x1720 [ 124.854499][ T5879] virtnet_poll+0x746/0xfb0 [ 124.859049][ T5879] __napi_poll+0xbb/0x430 [ 124.883535][ T4261] Bluetooth: hci3: command 0x0405 tx timeout [ 124.897142][ T5879] net_rx_action+0x522/0xa80 [ 124.901807][ T5879] handle_softirqs+0x336/0x830 [ 124.907160][ T4264] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.925438][ T5879] do_softirq+0x142/0x210 [ 124.932957][ T5879] __local_bh_enable_ip+0x180/0x1c0 [ 124.938891][ T5879] ip_finish_output2+0xd6e/0x10e0 [ 124.958691][ T5879] ip_output+0x2ba/0x3e0 [ 124.963106][ T5879] __ip_queue_xmit+0x11fc/0x1c60 [ 124.978647][ T5879] __tcp_transmit_skb+0x1ca3/0x31e0 [ 124.986958][ T5879] tcp_write_xmit+0x1a8d/0x65c0 [ 124.992098][ T5879] __tcp_push_pending_frames+0x92/0x250 [ 125.002657][ T5879] page last free stack trace: [ 125.012127][ T4264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.038168][ T4264] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.048852][ T5879] free_unref_page_prepare+0x637/0x6c0 [ 125.060150][ T5879] free_unref_page+0x8f/0x2a0 [ 125.080818][ T5879] free_contig_range+0x96/0xf0 [ 125.090699][ T5879] destroy_args+0xef/0xa00 [ 125.109456][ T5879] debug_vm_pgtable+0x321/0x380 [ 125.120192][ T5879] do_one_initcall+0x272/0x730 [ 125.126978][ T5879] do_initcall_level+0x13d/0x1f0 [ 125.140346][ T5879] do_initcalls+0x4b/0x90 [ 125.146750][ T5879] kernel_init_freeable+0x3d5/0x560 [ 125.152282][ T5879] kernel_init+0x19/0x1b0 [ 125.162193][ T5879] ret_from_fork+0x1f/0x30 [ 125.223982][ T4264] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 125.243933][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.260947][ T4264] usb 1-1: Product: syz [ 125.265795][ T4264] usb 1-1: Manufacturer: syz [ 125.270835][ T4264] usb 1-1: SerialNumber: syz [ 125.352135][ T5884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.667'. [ 125.586254][ T4264] usb 1-1: selecting invalid altsetting 1 [ 125.612980][ T4264] usb 1-1: unit 3 not found! [ 125.618312][ T4264] usb 1-1: unit 6 not found! [ 125.836032][ T4264] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 125.853982][ T4264] usb 1-1: USB disconnect, device number 9 [ 126.118451][ T5458] udevd[5458]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.215534][ T5910] ALSA: seq fatal error: cannot create timer (-22) [ 126.253983][ T5912] device syzkaller0 entered promiscuous mode [ 126.280131][ T5916] 9pnet_virtio: no channels available for device syz [ 126.295632][ T5912] 0: reclassify loop, rule prio 0, protocol 800 [ 126.482462][ T26] audit: type=1400 audit(1792268147.960:28): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5930 comm="syz.1.687" [ 126.961675][ T5948] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 127.024550][ T5948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.077317][ T5950] bond1: (slave veth3): Enslaving as an active interface with a down link [ 127.197609][ T5948] device wlan1 entered promiscuous mode [ 127.254551][ T5948] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 127.259167][ T5953] syz.3.693 uses obsolete (PF_INET,SOCK_PACKET) [ 127.324293][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 127.737732][ T5964] syz.1.697 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 127.753550][ T4264] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.780632][ T5964] CPU: 0 PID: 5964 Comm: syz.1.697 Not tainted syzkaller #0 [ 127.788081][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.798270][ T5964] Call Trace: [ 127.801753][ T5964] [ 127.804926][ T5964] dump_stack_lvl+0x188/0x250 [ 127.809730][ T5964] ? show_regs_print_info+0x20/0x20 [ 127.815046][ T5964] ? load_image+0x410/0x410 [ 127.819587][ T5964] ? local_lock_release+0x170/0x170 [ 127.824822][ T5964] ? __rwlock_init+0x140/0x140 [ 127.829621][ T5964] dump_header+0xd9/0x780 [ 127.834206][ T5964] oom_kill_process+0x20e/0x3d0 [ 127.839127][ T5964] out_of_memory+0xdb2/0x1190 [ 127.843844][ T5964] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 127.849690][ T5964] ? mutex_lock_io_nested+0x60/0x60 [ 127.855329][ T5964] ? unregister_oom_notifier+0x20/0x20 [ 127.860849][ T5964] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 127.866694][ T5964] ? mem_cgroup_oom_trylock+0x210/0x210 [ 127.872565][ T5964] ? do_raw_spin_unlock+0x11d/0x230 [ 127.877895][ T5964] try_charge_memcg+0x1075/0x15b0 [ 127.883064][ T5964] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 127.889081][ T5964] ? rcu_lock_acquire+0x30/0x30 [ 127.894056][ T5964] ? __lock_acquire+0x13b3/0x7d40 [ 127.899334][ T5964] obj_cgroup_charge_pages+0x87/0x190 [ 127.904742][ T5964] ? __memcg_kmem_charge_page+0x380/0x380 [ 127.910503][ T5964] ? rcu_lock_acquire+0x30/0x30 [ 127.915391][ T5964] obj_cgroup_charge+0x19f/0x320 [ 127.920370][ T5964] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 127.925877][ T5964] slab_pre_alloc_hook+0x9d/0xc0 [ 127.930876][ T5964] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 127.937320][ T5964] ? proc_alloc_inode+0x19/0xa0 [ 127.942212][ T5964] kmem_cache_alloc+0x3d/0x280 [ 127.947096][ T5964] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 127.953464][ T5964] proc_alloc_inode+0x19/0xa0 [ 127.958186][ T5964] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 127.964649][ T5964] new_inode_pseudo+0x5f/0x210 [ 127.969728][ T5964] new_inode+0x25/0x1d0 [ 127.974024][ T5964] proc_get_inode+0x1e/0x6d0 [ 127.978663][ T5964] proc_lookup_de+0x244/0x2f0 [ 127.983480][ T5964] ? proc_lookup_de+0x2f0/0x2f0 [ 127.988379][ T5964] path_openat+0x1046/0x2fb0 [ 127.993064][ T5964] ? do_filp_open+0x400/0x400 [ 127.997824][ T5964] do_filp_open+0x1df/0x400 [ 128.002546][ T5964] ? vfs_tmpfile+0x300/0x300 [ 128.007287][ T5964] ? _raw_spin_unlock+0x24/0x40 [ 128.012256][ T5964] ? alloc_fd+0x59e/0x650 [ 128.016640][ T5964] do_sys_openat2+0x14b/0x500 [ 128.021349][ T5964] ? __lock_acquire+0x7d40/0x7d40 [ 128.026498][ T5964] ? do_sys_open+0xe0/0xe0 [ 128.030951][ T5964] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.037201][ T5964] ? lock_chain_count+0x20/0x20 [ 128.042097][ T5964] __x64_sys_openat+0x135/0x160 [ 128.047068][ T5964] do_syscall_64+0x4c/0xa0 [ 128.051518][ T5964] ? clear_bhb_loop+0x30/0x80 [ 128.056228][ T5964] ? clear_bhb_loop+0x30/0x80 [ 128.060938][ T5964] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.066911][ T5964] RIP: 0033:0x7fd355c6f559 [ 128.071546][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.091363][ T5964] RSP: 002b:00007fd353ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.100075][ T5964] RAX: ffffffffffffffda RBX: 00007fd355ef6fa0 RCX: 00007fd355c6f559 [ 128.108782][ T5964] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 128.116789][ T5964] RBP: 00007fd355d06ab8 R08: 0000000000000000 R09: 0000000000000000 [ 128.125008][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.133736][ T5964] R13: 00007fd355ef7038 R14: 00007fd355ef6fa0 R15: 00007ffcea3c0028 [ 128.141766][ T5964] [ 128.145148][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.160942][ T5964] memory: usage 8kB, limit 8kB, failcnt 21 [ 128.168501][ T5964] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 128.183573][ T5964] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 128.195990][ T5964] Memory cgroup stats for /syz1/test: [ 128.197824][ T5964] anon 0 [ 128.197824][ T5964] file 0 [ 128.197824][ T5964] kernel_stack 0 [ 128.197824][ T5964] pagetables 0 [ 128.197824][ T5964] percpu 0 [ 128.197824][ T5964] sock 0 [ 128.197824][ T5964] shmem 0 [ 128.197824][ T5964] file_mapped 0 [ 128.197824][ T5964] file_dirty 0 [ 128.197824][ T5964] file_writeback 0 [ 128.197824][ T5964] swapcached 0 [ 128.197824][ T5964] anon_thp 0 [ 128.197824][ T5964] file_thp 0 [ 128.197824][ T5964] shmem_thp 0 [ 128.197824][ T5964] inactive_anon 0 [ 128.197824][ T5964] active_anon 0 [ 128.197824][ T5964] inactive_file 0 [ 128.197824][ T5964] active_file 0 [ 128.197824][ T5964] unevictable 0 [ 128.197824][ T5964] slab_reclaimable 5832 [ 128.197824][ T5964] slab_unreclaimable 1296 [ 128.197824][ T5964] slab 7128 [ 128.197824][ T5964] workingset_refault_anon 0 [ 128.197824][ T5964] workingset_refault_file 0 [ 128.197824][ T5964] workingset_activate_anon 0 [ 128.197824][ T5964] workingset_activate_file 0 [ 128.295886][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.321801][ T5964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.697,pid=5963,uid=0 [ 128.340220][ T5964] Memory cgroup out of memory: Killed process 5963 (syz.1.697) total-vm:102260kB, anon-rss:1412kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 128.375844][ T13] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 128.404274][ T4264] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.503839][ T4264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.519024][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.662490][ T26] audit: type=1400 audit(1792268150.140:29): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5984 comm="syz.1.708" [ 128.739073][ T4264] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 128.753740][ T13] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 128.756512][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.773406][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.788264][ T4264] usb 4-1: Product: syz [ 128.790484][ T13] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 128.796927][ T4264] usb 4-1: Manufacturer: syz [ 128.812692][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.834146][ T4264] usb 4-1: SerialNumber: syz [ 128.834975][ T13] usb 5-1: config 0 descriptor?? [ 128.873763][ T5966] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 129.050089][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'. [ 129.116052][ T4264] usb 4-1: selecting invalid altsetting 1 [ 129.126108][ T4264] usb 4-1: unit 3 not found! [ 129.136390][ T4264] usb 4-1: unit 6 not found! [ 129.242298][ T5988] FAULT_INJECTION: forcing a failure. [ 129.242298][ T5988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.257242][ T5988] CPU: 1 PID: 5988 Comm: syz.1.709 Not tainted syzkaller #0 [ 129.264835][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.275136][ T5988] Call Trace: [ 129.278531][ T5988] [ 129.281568][ T5988] dump_stack_lvl+0x188/0x250 [ 129.286364][ T5988] ? show_regs_print_info+0x20/0x20 [ 129.291593][ T5988] ? load_image+0x410/0x410 [ 129.296224][ T5988] ? __lock_acquire+0x7d40/0x7d40 [ 129.301555][ T5988] should_fail+0x383/0x4b0 [ 129.306032][ T5988] prepare_alloc_pages+0x1e3/0x5b0 [ 129.311186][ T5988] __alloc_pages+0x11b/0x480 [ 129.315821][ T5988] ? zone_statistics+0x170/0x170 [ 129.320823][ T5988] ? __rwlock_init+0x140/0x140 [ 129.325715][ T5988] ? alloc_pages+0x452/0x560 [ 129.330372][ T5988] __get_free_pages+0x8/0x30 [ 129.335103][ T5988] kasan_populate_vmalloc_pte+0x21/0xc0 [ 129.340684][ T5988] __apply_to_page_range+0x987/0xd10 [ 129.341438][ T13] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x3 [ 129.346048][ T5988] ? kasan_populate_vmalloc+0x70/0x70 [ 129.359143][ T5988] alloc_vmap_area+0x19e8/0x1b30 [ 129.364312][ T5988] ? vm_map_ram+0xba0/0xba0 [ 129.368868][ T5988] __get_vm_area_node+0x14f/0x2d0 [ 129.374035][ T5988] __vmalloc_node_range+0xef/0x8b0 [ 129.378987][ T13] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 129.379181][ T5988] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 129.391860][ T5988] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 129.397574][ T5988] ? mutex_unlock+0x10/0x10 [ 129.399198][ T13] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 129.402202][ T5988] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 129.415060][ T5988] __vmalloc+0x76/0x80 [ 129.419225][ T5988] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 129.424462][ T5988] snd_dma_alloc_pages+0xfb/0x1d0 [ 129.429659][ T5988] do_alloc_pages+0xee/0x210 [ 129.434476][ T5988] snd_pcm_lib_malloc_pages+0x2e5/0x720 [ 129.438824][ T13] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 129.440236][ T5988] snd_pcm_hw_params+0x814/0x1cf0 [ 129.452864][ T5988] ? kasan_quarantine_put+0xd4/0x210 [ 129.458553][ T5988] ? slab_free_freelist_hook+0xec/0x170 [ 129.463479][ T13] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 129.464224][ T5988] ? snd_pcm_hw_param_first+0x5de/0xa60 [ 129.471644][ T13] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 129.477145][ T5988] ? snd_pcm_forward+0x580/0x580 [ 129.477182][ T5988] ? snd_pcm_hw_param_near+0x3da/0x460 [ 129.477204][ T5988] ? snd_pcm_kernel_ioctl+0xf1/0x340 [ 129.477228][ T5988] snd_pcm_oss_change_params_locked+0x1e46/0x3cf0 [ 129.477283][ T5988] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 129.477312][ T5988] ? memset+0x1e/0x40 [ 129.477332][ T5988] ? __fsnotify_parent+0x72a/0x820 [ 129.477361][ T5988] snd_pcm_oss_read+0x26f/0x890 [ 129.518855][ T13] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 129.521565][ T5988] ? snd_pcm_oss_unregister_minor+0x210/0x210 [ 129.540402][ T5988] vfs_read+0x2ff/0xd50 [ 129.541773][ T13] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 129.544681][ T5988] ? __lock_acquire+0x7d40/0x7d40 [ 129.544716][ T5988] ? kernel_read+0x1e0/0x1e0 [ 129.544752][ T5988] ? __fget_files+0x402/0x470 [ 129.544779][ T5988] ? __fdget_pos+0x1e2/0x370 [ 129.544797][ T5988] ? ksys_read+0x70/0x260 [ 129.544819][ T5988] ksys_read+0x153/0x260 [ 129.544843][ T5988] ? vfs_write+0xd70/0xd70 [ 129.544867][ T5988] ? lockdep_hardirqs_on+0x94/0x140 [ 129.544895][ T5988] do_syscall_64+0x4c/0xa0 [ 129.594517][ T5988] ? clear_bhb_loop+0x30/0x80 [ 129.599232][ T5988] ? clear_bhb_loop+0x30/0x80 [ 129.603957][ T5988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.610513][ T5988] RIP: 0033:0x7fd355c6f559 [ 129.615063][ T5988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.635059][ T5988] RSP: 002b:00007fd353ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.643222][ T13] hid-generic 0003:28DE:1205.0002: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 129.643601][ T5988] RAX: ffffffffffffffda RBX: 00007fd355ef6fa0 RCX: 00007fd355c6f559 [ 129.643622][ T5988] RDX: 0000000000001000 RSI: 0000200000001340 RDI: 0000000000000005 [ 129.643634][ T5988] RBP: 00007fd355d06ab8 R08: 0000000000000000 R09: 0000000000000000 [ 129.643647][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.643661][ T5988] R13: 00007fd355ef7038 R14: 00007fd355ef6fa0 R15: 00007ffcea3c0028 [ 129.695562][ T5988] [ 129.716200][ T13] usb 5-1: USB disconnect, device number 6 [ 129.724344][ T5988] syz.1.709: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 129.753201][ T5988] CPU: 0 PID: 5988 Comm: syz.1.709 Not tainted syzkaller #0 [ 129.760916][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.771010][ T5988] Call Trace: [ 129.774404][ T5988] [ 129.777365][ T5988] dump_stack_lvl+0x188/0x250 [ 129.782269][ T5988] ? rcu_lock_release+0x5/0x20 [ 129.787168][ T5988] ? show_regs_print_info+0x20/0x20 [ 129.792435][ T5988] ? load_image+0x410/0x410 [ 129.797067][ T5988] warn_alloc+0x245/0x320 [ 129.801439][ T5988] ? zone_watermark_ok_safe+0x250/0x250 [ 129.807131][ T5988] ? __get_vm_area_node+0x164/0x2d0 [ 129.812375][ T5988] __vmalloc_node_range+0x2b1/0x8b0 [ 129.812934][ T4264] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 129.817708][ T5988] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 129.817742][ T5988] ? mutex_unlock+0x10/0x10 [ 129.817764][ T5988] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 129.817784][ T5988] __vmalloc+0x76/0x80 [ 129.817804][ T5988] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 129.817825][ T5988] snd_dma_alloc_pages+0xfb/0x1d0 [ 129.817851][ T5988] do_alloc_pages+0xee/0x210 [ 129.817878][ T5988] snd_pcm_lib_malloc_pages+0x2e5/0x720 [ 129.817909][ T5988] snd_pcm_hw_params+0x814/0x1cf0 [ 129.817933][ T5988] ? kasan_quarantine_put+0xd4/0x210 [ 129.817964][ T5988] ? slab_free_freelist_hook+0xec/0x170 [ 129.817985][ T5988] ? snd_pcm_hw_param_first+0x5de/0xa60 [ 129.877929][ T4264] usb 4-1: USB disconnect, device number 6 [ 129.881826][ T5988] ? snd_pcm_forward+0x580/0x580 [ 129.898130][ T5988] ? snd_pcm_hw_param_near+0x3da/0x460 [ 129.903801][ T5988] ? snd_pcm_kernel_ioctl+0xf1/0x340 [ 129.909214][ T5988] snd_pcm_oss_change_params_locked+0x1e46/0x3cf0 [ 129.915745][ T5988] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 129.920983][ T5988] ? memset+0x1e/0x40 [ 129.925081][ T5988] ? __fsnotify_parent+0x72a/0x820 [ 129.930277][ T5988] snd_pcm_oss_read+0x26f/0x890 [ 129.931118][ T5707] udevd[5707]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.935167][ T5988] ? snd_pcm_oss_unregister_minor+0x210/0x210 [ 129.935195][ T5988] vfs_read+0x2ff/0xd50 [ 129.961739][ T5988] ? __lock_acquire+0x7d40/0x7d40 [ 129.966923][ T5988] ? kernel_read+0x1e0/0x1e0 [ 129.971581][ T5988] ? __fget_files+0x402/0x470 [ 129.976394][ T5988] ? __fdget_pos+0x1e2/0x370 [ 129.981123][ T5988] ? ksys_read+0x70/0x260 [ 129.985497][ T5988] ksys_read+0x153/0x260 [ 129.989787][ T5988] ? vfs_write+0xd70/0xd70 [ 129.994239][ T5988] ? lockdep_hardirqs_on+0x94/0x140 [ 129.999597][ T5988] do_syscall_64+0x4c/0xa0 [ 130.004218][ T5988] ? clear_bhb_loop+0x30/0x80 [ 130.008935][ T5988] ? clear_bhb_loop+0x30/0x80 [ 130.013858][ T5988] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.019790][ T5988] RIP: 0033:0x7fd355c6f559 [ 130.024357][ T5988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.044278][ T5988] RSP: 002b:00007fd353ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.052731][ T5988] RAX: ffffffffffffffda RBX: 00007fd355ef6fa0 RCX: 00007fd355c6f559 [ 130.060844][ T5988] RDX: 0000000000001000 RSI: 0000200000001340 RDI: 0000000000000005 [ 130.068863][ T5988] RBP: 00007fd355d06ab8 R08: 0000000000000000 R09: 0000000000000000 [ 130.077043][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.086087][ T5988] R13: 00007fd355ef7038 R14: 00007fd355ef6fa0 R15: 00007ffcea3c0028 [ 130.094388][ T5988] [ 130.097744][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.130657][ T5988] Mem-Info: [ 130.133994][ T5988] active_anon:280 inactive_anon:22416 isolated_anon:0 [ 130.133994][ T5988] active_file:14432 inactive_file:38490 isolated_file:0 [ 130.133994][ T5988] unevictable:768 dirty:151 writeback:0 [ 130.133994][ T5988] slab_reclaimable:20702 slab_unreclaimable:104548 [ 130.133994][ T5988] mapped:30158 shmem:18094 pagetables:666 bounce:0 [ 130.133994][ T5988] kernel_misc_reclaimable:0 [ 130.133994][ T5988] free:1340382 free_pcp:8758 free_cma:0 [ 130.176553][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.236529][ T5991] fido_id[5991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 130.270172][ T5988] Node 0 active_anon:1088kB inactive_anon:89052kB active_file:57524kB inactive_file:153960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120632kB dirty:596kB writeback:0kB shmem:70296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10608kB pagetables:2564kB all_unreclaimable? no [ 130.334651][ T5988] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 130.364532][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.401749][ T5988] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.428424][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.484763][ T5988] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 130.493710][ T5988] Node 0 DMA32 free:1433204kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1088kB inactive_anon:89152kB active_file:57524kB inactive_file:153960kB unevictable:1536kB writepending:596kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:28152kB local_pcp:8580kB free_cma:0kB [ 130.524517][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.558053][ T5988] lowmem_reserve[]: 0 0 0 0 0 [ 130.566079][ T5988] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.593017][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.604701][ T26] audit: type=1400 audit(1792268152.090:30): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6011 comm="syz.0.720" [ 130.629124][ T5988] lowmem_reserve[]: 0 0 0 0 0 [ 130.634732][ T5988] Node 1 Normal free:3912964kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8388kB local_pcp:2556kB free_cma:0kB [ 130.664121][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.675689][ T5988] lowmem_reserve[]: 0 0 0 0 0 [ 130.680562][ T5988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 130.702266][ T5988] Node 0 DMA32: 85*4kB (UM) 96*8kB (UME) 46*16kB (UME) 18*32kB (UME) 8*64kB (UME) 7*128kB (U) 6*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (UE) 347*4096kB (M) = 1432308kB [ 130.737444][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.746815][ T5988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 130.759363][ T5988] Node 1 Normal: 142*4kB (UME) 43*8kB (UME) 27*16kB (UME) 146*32kB (UME) 65*64kB (UME) 17*128kB (UE) 7*256kB (UM) 7*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 950*4096kB (M) = 3913024kB [ 130.778133][ T5988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.801653][ T5988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.814273][ T5988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.831948][ T5988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.856323][ T5988] 72416 total pagecache pages [ 130.861067][ T5988] 0 pages in swap cache [ 130.872451][ T5988] Swap cache stats: add 70, delete 70, find 19/28 [ 130.879454][ T5988] Free swap = 124728kB [ 130.891756][ T5988] Total swap = 124996kB [ 130.898552][ T5988] 2097051 pages RAM [ 130.902567][ T5988] 0 pages HighMem/MovableOnly [ 130.918392][ T5988] 415313 pages reserved [ 130.929607][ T5988] 0 pages cma reserved [ 131.201208][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.720'. [ 131.277166][ T6030] Zero length message leads to an empty skb [ 132.160241][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 132.306704][ T26] audit: type=1400 audit(1792268153.790:31): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6056 comm="syz.3.739" [ 132.752176][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'. [ 133.203749][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.286855][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.293239][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.456086][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 133.515066][ T4264] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.573664][ T13] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.597279][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.773646][ T13] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 133.787634][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.806031][ T13] usb 2-1: Product: syz [ 133.814932][ T13] usb 2-1: Manufacturer: syz [ 133.825175][ T13] usb 2-1: SerialNumber: syz [ 133.837554][ T13] usb 2-1: config 0 descriptor?? [ 133.843710][ T4264] usb 5-1: Using ep0 maxpacket: 8 [ 133.989720][ T4264] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 134.013545][ T4264] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.043421][ T4264] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.063419][ T4264] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.084340][ T4264] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.103433][ T4264] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.131388][ T13] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 134.146079][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.246362][ T6099] 0x000000000003-0x000000010001 : "" [ 134.264561][ T26] audit: type=1400 audit(1792268155.750:32): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6100 comm="syz.3.759" [ 134.303426][ T6099] ftl_cs: FTL header corrupt! [ 134.321153][ T6099] FAULT_INJECTION: forcing a failure. [ 134.321153][ T6099] name failslab, interval 1, probability 0, space 0, times 0 [ 134.358644][ T6099] CPU: 1 PID: 6099 Comm: syz.0.758 Not tainted syzkaller #0 [ 134.366011][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.376205][ T6099] Call Trace: [ 134.379604][ T6099] [ 134.382577][ T6099] dump_stack_lvl+0x188/0x250 [ 134.387296][ T6099] ? show_regs_print_info+0x20/0x20 [ 134.392628][ T6099] ? load_image+0x410/0x410 [ 134.397174][ T6099] ? __might_sleep+0xf0/0xf0 [ 134.401800][ T6099] ? __lock_acquire+0x7d40/0x7d40 [ 134.406867][ T6099] should_fail+0x383/0x4b0 [ 134.411340][ T6099] should_failslab+0x5/0x20 [ 134.415894][ T6099] slab_pre_alloc_hook+0x51/0xc0 [ 134.420985][ T6099] ? __kernfs_new_node+0xe3/0x6b0 [ 134.426055][ T6099] kmem_cache_alloc+0x3d/0x280 [ 134.430863][ T6099] __kernfs_new_node+0xe3/0x6b0 [ 134.435805][ T6099] ? kernfs_new_node+0x250/0x250 [ 134.440967][ T6099] ? up_write+0x1b6/0x410 [ 134.445569][ T6099] ? kernfs_activate+0x1eb/0x210 [ 134.450770][ T6099] ? kernfs_add_one+0x564/0x6c0 [ 134.455766][ T6099] kernfs_new_node+0x148/0x250 [ 134.460664][ T6099] kernfs_create_dir_ns+0x40/0x120 [ 134.465850][ T6099] internal_create_group+0x21a/0xd00 [ 134.471187][ T6099] ? sysfs_create_group+0x20/0x20 [ 134.476438][ T6099] ? kernfs_activate+0x1eb/0x210 [ 134.481596][ T6099] ? kernfs_add_one+0x564/0x6c0 [ 134.486764][ T6099] sysfs_create_groups+0x55/0x120 [ 134.491919][ T6099] device_add_attrs+0xcc/0x690 [ 134.496817][ T6099] device_add+0x677/0x1050 [ 134.501460][ T6099] device_add_disk+0x3ab/0xde0 [ 134.506730][ T6099] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 134.512329][ T6099] mtdblock_add_mtd+0x186/0x240 [ 134.517254][ T6099] blktrans_notify_add+0x95/0xe0 [ 134.522318][ T6099] add_mtd_device+0xd40/0x1260 [ 134.527175][ T6099] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 134.533036][ T6099] ? mtd_cls_resume+0x130/0x130 [ 134.537951][ T6099] mtd_add_partition+0x25d/0x420 [ 134.542944][ T6099] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 134.548117][ T6099] ? shrink_ecclayout+0xab0/0xab0 [ 134.553381][ T6099] ? __might_fault+0xb3/0x110 [ 134.558104][ T6099] ? _copy_from_user+0x111/0x170 [ 134.563077][ T6099] mtdchar_ioctl+0x14cb/0x1d70 [ 134.567978][ T6099] ? mtdchar_close+0x180/0x180 [ 134.572788][ T6099] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 134.578815][ T6099] ? verify_lock_unused+0x140/0x140 [ 134.584187][ T6099] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 134.589897][ T6099] ? rcu_lock_release+0x5/0x20 [ 134.594733][ T6099] ? __mutex_trylock_common+0x15c/0x260 [ 134.600416][ T6099] ? rcu_lock_release+0x20/0x20 [ 134.605319][ T6099] ? __mutex_lock_common+0x435/0x2400 [ 134.610741][ T6099] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 134.616341][ T6099] ? mutex_lock_io_nested+0x60/0x60 [ 134.621607][ T6099] mtdchar_unlocked_ioctl+0xad/0xd0 [ 134.626867][ T6099] ? mtdchar_write+0x5a0/0x5a0 [ 134.631664][ T6099] __se_sys_ioctl+0xfa/0x170 [ 134.636302][ T6099] do_syscall_64+0x4c/0xa0 [ 134.640777][ T6099] ? clear_bhb_loop+0x30/0x80 [ 134.645496][ T6099] ? clear_bhb_loop+0x30/0x80 [ 134.650486][ T6099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.656437][ T6099] RIP: 0033:0x7ff50db5b559 [ 134.661157][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.681018][ T6099] RSP: 002b:00007ff50bdb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.689561][ T6099] RAX: ffffffffffffffda RBX: 00007ff50dde2fa0 RCX: 00007ff50db5b559 [ 134.697575][ T6099] RDX: 0000200000001940 RSI: 0000000000001269 RDI: 0000000000000005 [ 134.705672][ T6099] RBP: 00007ff50dbf2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 134.713682][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.721789][ T6099] R13: 00007ff50dde3038 R14: 00007ff50dde2fa0 R15: 00007fff6c884928 [ 134.729816][ T6099] [ 134.757376][ T6099] ------------[ cut here ]------------ [ 134.769800][ T4264] usb 5-1: GET_CAPABILITIES returned 0 [ 134.773244][ T6099] WARNING: CPU: 0 PID: 6099 at block/genhd.c:554 device_add_disk+0x8d6/0xde0 [ 134.783677][ T4264] usbtmc 5-1:16.0: can't read capabilities [ 134.800940][ T6099] Modules linked in: [ 134.805802][ T6099] CPU: 0 PID: 6099 Comm: syz.0.758 Not tainted syzkaller #0 [ 134.815815][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.830928][ T6099] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 134.835734][ T6104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.759'. [ 134.838596][ T6099] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 134.871948][ T13] rc_core: IR keymap rc-imon-pad not found [ 134.891287][ T13] Registered IR keymap rc-empty [ 134.893479][ T6099] RSP: 0018:ffffc9000324f470 EFLAGS: 00010246 [ 134.901820][ T13] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 134.920686][ T13] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 134.923671][ T6099] RAX: ffffffff83d31e76 RBX: ffff88805d03a800 RCX: 0000000000080000 [ 134.949608][ T6099] RDX: ffffc90003d23000 RSI: 000000000007ffff RDI: 0000000000080000 [ 134.968857][ T6099] RBP: 000000000000001f R08: ffff888017d023bb R09: 1ffff11002fa0477 [ 134.989774][ T13] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 134.996411][ T6099] R10: dffffc0000000000 R11: ffffed1002fa0478 R12: 1ffff11002fa0477 [ 135.008276][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.008796][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.008842][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.008884][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.008926][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.008968][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009008][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009050][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009092][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009133][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009173][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009227][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009269][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009310][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009351][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.009393][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 135.018753][ T13] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 135.077357][ T6099] R13: 1ffff1100ba07514 R14: dffffc0000000000 R15: ffff888017d02380 [ 135.100080][ T7] usb 5-1: USB disconnect, device number 7 [ 135.122639][ T6099] FS: 00007ff50bdb36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 135.138719][ T13] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:4> initialized [ 135.159315][ T6099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.228418][ T4261] usb 2-1: USB disconnect, device number 4 [ 135.233841][ T6099] CR2: 00007fb5c89852f8 CR3: 000000007b25a000 CR4: 00000000003506e0 [ 135.248016][ T6099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.260505][ T6099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.297182][ T6099] Call Trace: [ 135.300723][ T6099] [ 135.308137][ T6099] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 135.316546][ T6099] mtdblock_add_mtd+0x186/0x240 [ 135.321686][ T6099] blktrans_notify_add+0x95/0xe0 [ 135.331148][ T6099] add_mtd_device+0xd40/0x1260 [ 135.340993][ T6099] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 135.351397][ T6099] ? mtd_cls_resume+0x130/0x130 [ 135.359294][ T6099] mtd_add_partition+0x25d/0x420 [ 135.368513][ T6099] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 135.374525][ T6099] ? shrink_ecclayout+0xab0/0xab0 [ 135.380144][ T6099] ? __might_fault+0xb3/0x110 [ 135.385399][ T6099] ? _copy_from_user+0x111/0x170 [ 135.390458][ T6099] mtdchar_ioctl+0x14cb/0x1d70 [ 135.395730][ T6099] ? mtdchar_close+0x180/0x180 [ 135.400633][ T6099] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.407376][ T6099] ? verify_lock_unused+0x140/0x140 [ 135.412904][ T6099] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 135.419197][ T6099] ? rcu_lock_release+0x5/0x20 [ 135.425103][ T6099] ? __mutex_trylock_common+0x15c/0x260 [ 135.430823][ T6099] ? rcu_lock_release+0x20/0x20 [ 135.436461][ T6099] ? __mutex_lock_common+0x435/0x2400 [ 135.442569][ T6099] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 135.449486][ T6099] ? mutex_lock_io_nested+0x60/0x60 [ 135.455189][ T6099] mtdchar_unlocked_ioctl+0xad/0xd0 [ 135.460529][ T6099] ? mtdchar_write+0x5a0/0x5a0 [ 135.466082][ T6099] __se_sys_ioctl+0xfa/0x170 [ 135.470828][ T6099] do_syscall_64+0x4c/0xa0 [ 135.475723][ T6099] ? clear_bhb_loop+0x30/0x80 [ 135.480631][ T6099] ? clear_bhb_loop+0x30/0x80 [ 135.485899][ T6099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.492404][ T6099] RIP: 0033:0x7ff50db5b559 [ 135.497423][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.519894][ T6099] RSP: 002b:00007ff50bdb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.528863][ T6099] RAX: ffffffffffffffda RBX: 00007ff50dde2fa0 RCX: 00007ff50db5b559 [ 135.547509][ T6099] RDX: 0000200000001940 RSI: 0000000000001269 RDI: 0000000000000005 [ 135.557840][ T6099] RBP: 00007ff50dbf2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 135.575447][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.594214][ T6099] R13: 00007ff50dde3038 R14: 00007ff50dde2fa0 R15: 00007fff6c884928 [ 135.602405][ T6099] [ 135.606693][ T6099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.614092][ T6099] CPU: 0 PID: 6099 Comm: syz.0.758 Not tainted syzkaller #0 [ 135.621408][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.631760][ T6099] Call Trace: [ 135.635134][ T6099] [ 135.638137][ T6099] dump_stack_lvl+0x188/0x250 [ 135.642888][ T6099] ? show_regs_print_info+0x20/0x20 [ 135.648119][ T6099] ? load_image+0x410/0x410 [ 135.652768][ T6099] panic+0x2f8/0x850 [ 135.656701][ T6099] ? bpf_jit_dump+0xd0/0xd0 [ 135.661348][ T6099] ? device_add_disk+0x8d6/0xde0 [ 135.666444][ T6099] __warn+0x248/0x2b0 [ 135.670637][ T6099] ? device_add_disk+0x8d6/0xde0 [ 135.675609][ T6099] report_bug+0x1b9/0x2e0 [ 135.679991][ T6099] handle_bug+0x3a/0x70 [ 135.684219][ T6099] exc_invalid_op+0x16/0x40 [ 135.688759][ T6099] asm_exc_invalid_op+0x16/0x20 [ 135.693729][ T6099] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 135.699566][ T6099] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 135.719214][ T6099] RSP: 0018:ffffc9000324f470 EFLAGS: 00010246 [ 135.725316][ T6099] RAX: ffffffff83d31e76 RBX: ffff88805d03a800 RCX: 0000000000080000 [ 135.733322][ T6099] RDX: ffffc90003d23000 RSI: 000000000007ffff RDI: 0000000000080000 [ 135.741411][ T6099] RBP: 000000000000001f R08: ffff888017d023bb R09: 1ffff11002fa0477 [ 135.749710][ T6099] R10: dffffc0000000000 R11: ffffed1002fa0478 R12: 1ffff11002fa0477 [ 135.757713][ T6099] R13: 1ffff1100ba07514 R14: dffffc0000000000 R15: ffff888017d02380 [ 135.765808][ T6099] ? device_add_disk+0x8d6/0xde0 [ 135.770812][ T6099] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 135.776254][ T6099] mtdblock_add_mtd+0x186/0x240 [ 135.781162][ T6099] blktrans_notify_add+0x95/0xe0 [ 135.786329][ T6099] add_mtd_device+0xd40/0x1260 [ 135.791154][ T6099] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 135.797047][ T6099] ? mtd_cls_resume+0x130/0x130 [ 135.802059][ T6099] mtd_add_partition+0x25d/0x420 [ 135.807166][ T6099] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 135.812402][ T6099] ? shrink_ecclayout+0xab0/0xab0 [ 135.817475][ T6099] ? __might_fault+0xb3/0x110 [ 135.822182][ T6099] ? _copy_from_user+0x111/0x170 [ 135.827317][ T6099] mtdchar_ioctl+0x14cb/0x1d70 [ 135.832300][ T6099] ? mtdchar_close+0x180/0x180 [ 135.837121][ T6099] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.843138][ T6099] ? verify_lock_unused+0x140/0x140 [ 135.848674][ T6099] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 135.854494][ T6099] ? rcu_lock_release+0x5/0x20 [ 135.859323][ T6099] ? __mutex_trylock_common+0x15c/0x260 [ 135.865098][ T6099] ? rcu_lock_release+0x20/0x20 [ 135.869999][ T6099] ? __mutex_lock_common+0x435/0x2400 [ 135.875507][ T6099] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 135.880922][ T6099] ? mutex_lock_io_nested+0x60/0x60 [ 135.886175][ T6099] mtdchar_unlocked_ioctl+0xad/0xd0 [ 135.891525][ T6099] ? mtdchar_write+0x5a0/0x5a0 [ 135.896421][ T6099] __se_sys_ioctl+0xfa/0x170 [ 135.901139][ T6099] do_syscall_64+0x4c/0xa0 [ 135.905683][ T6099] ? clear_bhb_loop+0x30/0x80 [ 135.910485][ T6099] ? clear_bhb_loop+0x30/0x80 [ 135.915204][ T6099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.921139][ T6099] RIP: 0033:0x7ff50db5b559 [ 135.925770][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.945668][ T6099] RSP: 002b:00007ff50bdb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.954123][ T6099] RAX: ffffffffffffffda RBX: 00007ff50dde2fa0 RCX: 00007ff50db5b559 [ 135.962137][ T6099] RDX: 0000200000001940 RSI: 0000000000001269 RDI: 0000000000000005 [ 135.970280][ T6099] RBP: 00007ff50dbf2ab8 R08: 0000000000000000 R09: 0000000000000000 [ 135.978377][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.986394][ T6099] R13: 00007ff50dde3038 R14: 00007ff50dde2fa0 R15: 00007fff6c884928 [ 135.994513][ T6099] [ 135.997919][ T6099] Kernel Offset: disabled [ 136.002921][ T6099] Rebooting in 86400 seconds..