last executing test programs: 4m47.45165428s ago: executing program 0 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c003300d0200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4m47.028145195s ago: executing program 0 (id=125): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 4m46.181549738s ago: executing program 0 (id=129): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) writev(r2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="041b000000b7c22cc34999cd2331001949fe2be3aa5debae35dfc170f5d0b9bde39195"], 0x6) syz_emit_vhci(0x0, 0x16) 4m44.307943641s ago: executing program 0 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x202001, 0x0) mkdir(&(0x7f0000000bc0)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x0, 0x0) read(r0, &(0x7f0000000c80), 0xfa0) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x87) write(r1, &(0x7f0000000f00)='Mid', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001080)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001140)='dummy_udc.0\n', 0xc) 4m41.946718364s ago: executing program 0 (id=140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000000300), 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4m39.597275569s ago: executing program 0 (id=147): unshare(0x64000600) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4m24.475426044s ago: executing program 32 (id=147): unshare(0x64000600) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 14.322474545s ago: executing program 5 (id=756): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1}, 0x4}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 11.907814529s ago: executing program 4 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x10) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='numa_maps\x00') 11.526341912s ago: executing program 4 (id=769): r0 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000340)='./proc\x00', 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f0000000380)='cgroup2\x00', 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x121000, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r2], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 9.114808727s ago: executing program 1 (id=772): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, 0x0) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) 7.77072269s ago: executing program 5 (id=776): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000006c0), 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0xea13, 0x10000, 0x3, 0x12}, 0x0, 0x4, 0x0, &(0x7f00000019c0)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="03dd10ff"], 0x9) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, &(0x7f0000001b40)=""/4098, 0x1002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x401, 0xffffffff, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) r3 = fsopen(&(0x7f00000001c0)='overlay\x00', 0x1) io_setup(0x2, &(0x7f00000005c0)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='workdir', 0x0, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.4924426s ago: executing program 1 (id=777): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010025bd7000ffdbdf25020000000800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x800) 6.841234733s ago: executing program 4 (id=778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000e40)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000e80)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1a, 0xf, &(0x7f00000012c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000013c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r3, 0xffffffffffffffff, 0x2b, 0x4001, @void}, 0x10) 6.686704275s ago: executing program 4 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys_sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='select \n', 0x10) write(r0, &(0x7f0000000180)='file read @etc/passwd /as/\\Aid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]2\"/bin=\n', 0x4c) 6.532565585s ago: executing program 4 (id=782): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="20b52c02"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000200)={0x0, 0x280, 0x1e0, 0x9, 0x3, [0x2], [0x80ffff, 0x0, 0x2], [0x0, 0x0, 0xfffffffe, 0x6], [0x400000000000000, 0x0, 0x3]}) 6.322616038s ago: executing program 1 (id=783): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000280)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x20040090) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x75) open(&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000380)='./file0/file0\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 6.24905627s ago: executing program 2 (id=784): msgget$private(0x0, 0x11) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffdcf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 6.23416403s ago: executing program 5 (id=785): syz_usb_connect(0x6, 0x24, &(0x7f0000000600)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000002bc0)='./myproc\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002c40)=0x5) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x8000) 4.613100221s ago: executing program 1 (id=788): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x340460c1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000015c0)=0x4, 0x4) 4.350649882s ago: executing program 3 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000e40)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000e80)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1a, 0xf, &(0x7f00000012c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000013c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r3, 0xffffffffffffffff, 0x2b, 0x4001, @void}, 0x10) 4.203731281s ago: executing program 1 (id=790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x1004}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0) semget(0x2, 0x3, 0x39c) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f00000199c0)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) epoll_create1(0x0) connect$unix(r1, &(0x7f0000019a40)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x120}}, 0x40) 4.128257s ago: executing program 3 (id=791): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1, 0x3, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000001780)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') fanotify_init(0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/4098, 0x1002) 4.07884069s ago: executing program 2 (id=792): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.438284203s ago: executing program 1 (id=793): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010025bd7000ffdbdf25020000000800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 2.438098177s ago: executing program 2 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./mnt\x00', &(0x7f0000001c40)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, 0x0, 0x0) 2.310748466s ago: executing program 4 (id=795): socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) socket(0x25, 0x5, 0x20000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000240)={r1, 0x58, &(0x7f0000000280)}, 0x10) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, &(0x7f0000000380)}) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="03c900bc58862c0a5a0983ba6222a9fa640f277895df7da75693bf8fb1c1f3d776330914ceab78c96a19d9312cd7b371d2f71cae174e22645289140b170ab1fe602c6b44b4bd184574b218c4323c121a935b7741"], 0xc0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x9, 0x0, 0x7fffffff}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) connect$inet(r3, &(0x7f0000000440)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, &(0x7f0000000480)=""/147) r4 = fsopen(&(0x7f0000000540)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) openat$cgroup_procs(r5, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./config\x00', &(0x7f00000006c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) rmdir(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0\x00') 2.190688318s ago: executing program 5 (id=796): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000580)=0x239, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000004c0)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_destroy(r5) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) 2.178284747s ago: executing program 2 (id=797): mknodat$md(0xffffffffffffff9c, &(0x7f00000009c0)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000a00)='./md0\x00', 0x2, 0x0) ioctl$STOP_ARRAY(r0, 0x4004092b, 0x0) 2.122881575s ago: executing program 3 (id=798): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000280)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x20040090) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x75) open(0x0, 0x0, 0x0) rmdir(&(0x7f0000000380)='./file0/file0\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 795.427605ms ago: executing program 2 (id=799): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x86, 0x5, 0xfff, 0x4, 0x8, 0x9, 0xfffffffe, 0x92e}}) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x10000}], 0x38) 605.469908ms ago: executing program 5 (id=800): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000300)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000340), 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x57) socket(0xa, 0x3, 0x87) sendmsg$xdp(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="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", 0x3f1}, {&(0x7f0000000840)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000880)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000900)=0x1, 0x4) 567.281471ms ago: executing program 3 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000e40)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000e80)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1a, 0xf, &(0x7f00000012c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000013c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r3, 0xffffffffffffffff, 0x2b, 0x4001, @void}, 0x10) 471.966726ms ago: executing program 5 (id=802): msgget$private(0x0, 0x11) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffdcf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 339.86507ms ago: executing program 3 (id=803): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1, &(0x7f00000005c0)=@raw=[@generic={0x40, 0x0, 0x0, 0x0, 0x18}], &(0x7f0000000600)='GPL\x00', 0xb, 0x1000, &(0x7f0000001700)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 338.404096ms ago: executing program 2 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x189001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) 0s ago: executing program 3 (id=805): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010025bd7000ffdbdf25020000000800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0), 0x0) nanosleep(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) kernel console output (not intermixed with test programs): ] team0: Port device team_slave_1 added [ 88.835999][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.906897][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.920878][ T5610] Bluetooth: hci4: command tx timeout [ 88.940857][ T5619] team0: Port device team_slave_0 added [ 88.992523][ T5618] team0: Port device team_slave_0 added [ 88.998184][ T5619] team0: Port device team_slave_1 added [ 88.999785][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.999800][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.999823][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.001979][ T5610] Bluetooth: hci3: command tx timeout [ 89.026224][ T5618] team0: Port device team_slave_1 added [ 89.046700][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.046724][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.046748][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.053624][ T5621] team0: Port device team_slave_0 added [ 89.080839][ T5610] Bluetooth: hci2: command tx timeout [ 89.176438][ T5621] team0: Port device team_slave_1 added [ 89.200457][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.200476][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.200498][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.278011][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.278030][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.278056][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.281662][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.281676][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.281701][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.306402][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.306421][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.306445][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.341609][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.341626][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.341654][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.381717][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.381735][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.381760][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.394882][ T5612] hsr_slave_0: entered promiscuous mode [ 89.396494][ T5612] hsr_slave_1: entered promiscuous mode [ 89.540222][ T5619] hsr_slave_0: entered promiscuous mode [ 89.542906][ T5619] hsr_slave_1: entered promiscuous mode [ 89.544054][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 89.544091][ T5619] Cannot create hsr debugfs directory [ 89.568996][ T5618] hsr_slave_0: entered promiscuous mode [ 89.569734][ T5618] hsr_slave_1: entered promiscuous mode [ 89.570241][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 89.570258][ T5618] Cannot create hsr debugfs directory [ 90.008444][ T5621] hsr_slave_0: entered promiscuous mode [ 90.009235][ T5621] hsr_slave_1: entered promiscuous mode [ 90.012066][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 90.012085][ T5621] Cannot create hsr debugfs directory [ 90.713182][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.748516][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.760423][ T61] Bluetooth: hci1: command tx timeout [ 90.760577][ T5610] Bluetooth: hci0: command tx timeout [ 90.776322][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.825160][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.839903][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.873607][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.899087][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.935519][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.001572][ T5610] Bluetooth: hci4: command tx timeout [ 91.027891][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.027989][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.028095][ T5608] bridge_slave_0: entered allmulticast mode [ 91.029380][ T5608] bridge_slave_0: entered promiscuous mode [ 91.042351][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.042552][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.042748][ T5608] bridge_slave_1: entered allmulticast mode [ 91.045808][ T5608] bridge_slave_1: entered promiscuous mode [ 91.081059][ T5610] Bluetooth: hci3: command tx timeout [ 91.113513][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.151497][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.151603][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.160561][ T5610] Bluetooth: hci2: command tx timeout [ 91.213797][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.238073][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.284734][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.305068][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.345034][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.348222][ T5608] team0: Port device team_slave_0 added [ 91.372556][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.407051][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.410239][ T5608] team0: Port device team_slave_1 added [ 91.478832][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.478850][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.478873][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.492040][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.492059][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.492085][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.623601][ T5608] hsr_slave_0: entered promiscuous mode [ 91.624388][ T5608] hsr_slave_1: entered promiscuous mode [ 91.624890][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 91.624907][ T5608] Cannot create hsr debugfs directory [ 91.897429][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.923637][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.946485][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.984109][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.008129][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.047759][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.083765][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.125458][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.291690][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.325752][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.341876][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.373783][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.394061][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.434975][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.452609][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.479773][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.537114][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.677675][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.687930][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.714537][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.723417][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.746604][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.753702][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.794120][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.810454][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.812012][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.840664][ T5610] Bluetooth: hci0: command tx timeout [ 92.840710][ T5610] Bluetooth: hci1: command tx timeout [ 92.864893][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.870232][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.872116][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.947718][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.947809][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.007081][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.054940][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.055077][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.081409][ T61] Bluetooth: hci4: command tx timeout [ 93.108571][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.108669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.136160][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.172483][ T61] Bluetooth: hci3: command tx timeout [ 93.240445][ T61] Bluetooth: hci2: command tx timeout [ 93.242931][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.277739][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.313876][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.314359][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.384902][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.385067][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.459231][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.526077][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.526286][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.599483][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.599558][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.647682][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.804524][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.862403][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.862528][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.923222][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.923357][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.495727][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.853609][ T5612] veth0_vlan: entered promiscuous mode [ 94.873951][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.935179][ T5612] veth1_vlan: entered promiscuous mode [ 95.174475][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.179228][ T5612] veth0_macvtap: entered promiscuous mode [ 95.237897][ T5618] veth0_vlan: entered promiscuous mode [ 95.239804][ T5612] veth1_macvtap: entered promiscuous mode [ 95.343412][ T5618] veth1_vlan: entered promiscuous mode [ 95.355794][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.380185][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.457360][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.545193][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.702599][ T5619] veth0_vlan: entered promiscuous mode [ 95.703545][ T5618] veth0_macvtap: entered promiscuous mode [ 95.794574][ T5618] veth1_macvtap: entered promiscuous mode [ 95.888334][ T5619] veth1_vlan: entered promiscuous mode [ 96.007974][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.023424][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.023477][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.077054][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.148493][ T5608] veth0_vlan: entered promiscuous mode [ 96.185866][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.185889][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.212044][ T5619] veth0_macvtap: entered promiscuous mode [ 96.215298][ T5621] veth0_vlan: entered promiscuous mode [ 96.363251][ T5608] veth1_vlan: entered promiscuous mode [ 96.376814][ T5619] veth1_macvtap: entered promiscuous mode [ 96.446952][ T5621] veth1_vlan: entered promiscuous mode [ 96.701568][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.754086][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.754108][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.793620][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.794270][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.916112][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.916135][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.978085][ T5608] veth0_macvtap: entered promiscuous mode [ 97.043754][ T5621] veth0_macvtap: entered promiscuous mode [ 97.063140][ T5608] veth1_macvtap: entered promiscuous mode [ 97.129553][ T5621] veth1_macvtap: entered promiscuous mode [ 97.409559][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.447496][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.447519][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.470217][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.500443][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.543754][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.713292][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.713323][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.718621][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.840878][ T5830] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 98.713622][ T5827] Zero length message leads to an empty skb [ 99.934684][ T5610] Bluetooth: hci1: command 0x2016 tx timeout [ 100.911157][ T5863] ======================================================= [ 100.911157][ T5863] WARNING: The mand mount option has been deprecated and [ 100.911157][ T5863] and is ignored by this kernel. Remove the mand [ 100.911157][ T5863] option from the mount to silence this warning. [ 100.911157][ T5863] ======================================================= [ 101.108920][ T5863] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 101.173447][ T5869] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 101.195063][ T5866] overlayfs: overlapping lowerdir path [ 101.515171][ T61] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 101.515984][ T61] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 101.638711][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.638725][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.746828][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.746854][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.898998][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.899021][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.970484][ T61] Bluetooth: hci1: command 0x2016 tx timeout [ 102.063744][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.063759][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.127816][ T791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.185693][ T1170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.438413][ T5883] binfmt_misc: register: failed to install interpreter ./file0 [ 102.455572][ T168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.718133][ T1247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.842458][ T1247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.842759][ T1247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.843173][ T1247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.856800][ T1247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.878206][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.942309][ T791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.280555][ T791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.282376][ T791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.282565][ T791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.402286][ T791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.474935][ T791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.041932][ T61] Bluetooth: hci1: command 0x2016 tx timeout [ 104.303141][ T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.308707][ T1252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.308992][ T1252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.309109][ T1252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.309449][ T1252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.124419][ T5610] Bluetooth: hci1: command 0x2016 tx timeout [ 107.640301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.696237][ T5937] warning: `syz.4.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.773633][ T5941] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.930333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.950359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.960338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.970327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.109451][ T5610] Bluetooth: hci0: command 0x2016 tx timeout [ 112.377378][ T5954] FAULT_INJECTION: forcing a failure. [ 112.377378][ T5954] name failslab, interval 1, probability 0, space 0, times 1 [ 112.378891][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.378920][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.378940][ T5954] Call Trace: [ 112.378949][ T5954] [ 112.378958][ T5954] dump_stack_lvl+0xe8/0x150 [ 112.379006][ T5954] should_fail_ex+0x447/0x5e0 [ 112.379039][ T5954] should_failslab+0xa8/0x100 [ 112.379064][ T5954] __kmalloc_noprof+0xf6/0x790 [ 112.379085][ T5954] ? tomoyo_realpath_from_path+0xf2/0x640 [ 112.379105][ T5954] ? tomoyo_realpath_from_path+0xf2/0x640 [ 112.379135][ T5954] tomoyo_realpath_from_path+0xf2/0x640 [ 112.379171][ T5954] tomoyo_check_open_permission+0x229/0x470 [ 112.379203][ T5954] ? tomoyo_check_open_permission+0x1d3/0x470 [ 112.379234][ T5954] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 112.379265][ T5954] ? __asan_memset+0x22/0x50 [ 112.379326][ T5954] ? mnt_get_write_access+0x66/0x2d0 [ 112.379357][ T5954] security_file_open+0xa9/0x240 [ 112.379389][ T5954] do_dentry_open+0x4b3/0x1410 [ 112.379426][ T5954] vfs_open_consume+0x4a/0x360 [ 112.379451][ T5954] ? path_openat+0x16e6/0x2100 [ 112.379481][ T5954] path_openat+0x1701/0x2100 [ 112.379522][ T5954] do_file_open+0x23e/0x4a0 [ 112.379541][ T5954] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 112.379571][ T5954] ? __pfx_do_file_open+0x10/0x10 [ 112.379614][ T5954] ? alloc_fd+0x6b2/0x760 [ 112.379656][ T5954] do_sys_openat2+0x115/0x200 [ 112.379683][ T5954] ? __se_sys_futex+0x3a8/0x450 [ 112.379712][ T5954] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.379745][ T5954] ? rcu_is_watching+0x16/0xb0 [ 112.379775][ T5954] __x64_sys_openat+0x138/0x170 [ 112.379808][ T5954] do_syscall_64+0x166/0x520 [ 112.379831][ T5954] ? trace_irq_disable+0x3b/0x140 [ 112.379854][ T5954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.379875][ T5954] ? clear_bhb_loop+0x70/0xc0 [ 112.379902][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.379923][ T5954] RIP: 0033:0x7f6a2dc0fb19 [ 112.379954][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.379972][ T5954] RSP: 002b:00007f6a2be5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.379997][ T5954] RAX: ffffffffffffffda RBX: 00007f6a2de95fa0 RCX: 00007f6a2dc0fb19 [ 112.380013][ T5954] RDX: 0000000000000002 RSI: 0000200000000c00 RDI: ffffffffffffff9c [ 112.380028][ T5954] RBP: 00007f6a2dca7b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.380042][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.380054][ T5954] R13: 00007f6a2de96038 R14: 00007f6a2de95fa0 R15: 00007ffc08863348 [ 112.380088][ T5954] [ 112.380098][ T5954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.164791][ T5610] Bluetooth: hci0: command 0x2016 tx timeout [ 115.220325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.240327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.280321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.290332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.300343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.623283][ T5610] Bluetooth: hci1: command 0x2016 tx timeout [ 117.881308][ T5986] syz.1.45 (5986): drop_caches: 2 [ 118.316112][ T35] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.345874][ T5991] overlayfs: missing 'lowerdir' [ 118.376139][ T5995] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 118.760647][ T61] Bluetooth: hci1: command 0x2016 tx timeout [ 121.772019][ T6036] overlayfs: missing 'lowerdir' [ 121.882686][ T5610] Bluetooth: hci2: command 0x2016 tx timeout [ 124.204217][ T5610] Bluetooth: hci2: command 0x2016 tx timeout [ 125.536835][ T36] audit: type=1326 audit(1793799945.992:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 125.536883][ T36] audit: type=1326 audit(1793799945.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 125.536920][ T36] audit: type=1326 audit(1793799945.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 125.536957][ T36] audit: type=1326 audit(1793799945.992:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 125.536995][ T36] audit: type=1326 audit(1793799945.992:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 125.537031][ T36] audit: type=1326 audit(1793799945.992:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 125.537066][ T36] audit: type=1326 audit(1793799945.992:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 125.537108][ T36] audit: type=1326 audit(1793799945.992:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc781a034e code=0x7ffc0000 [ 125.562813][ T36] audit: type=1326 audit(1793799945.992:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc781a034e code=0x7ffc0000 [ 125.562869][ T36] audit: type=1326 audit(1793799946.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 125.737106][ T6076] overlayfs: missing 'lowerdir' [ 127.000596][ T61] Bluetooth: hci3: command 0x2016 tx timeout [ 129.323234][ T61] Bluetooth: hci3: command 0x2016 tx timeout [ 132.701327][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 132.701347][ T36] audit: type=1800 audit(1793799952.382:15): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.88" name=08 dev="sda1" ino=2047 res=0 errno=-22 [ 133.007548][ T1348] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.007660][ T1348] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242106][ T5610] Bluetooth: hci1: command 0x2016 tx timeout [ 134.184484][ T6157] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.184616][ T6157] block device autoloading is deprecated and will be removed. [ 135.401743][ T61] Bluetooth: hci1: command 0x2016 tx timeout [ 138.506257][ T6233] md: md1 stopped. [ 138.526400][ T5610] Bluetooth: hci1: command 0x2016 tx timeout [ 139.624179][ T5732] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.907781][ T5732] usb 4-1: New USB device found: idVendor=056a, idProduct=0063, bcdDevice=0.00 [ 140.079974][ T5732] usb 4-1: config 0 has no interfaces? [ 140.080071][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.260318][ T6269] syz.0.116 uses obsolete (PF_INET,SOCK_PACKET) [ 140.602779][ T4925] Bluetooth: hci1: command 0x2016 tx timeout [ 141.103927][ T5732] usb 4-1: config 0 descriptor?? [ 141.185401][ T5732] usb 4-1: can't set config #0, error -71 [ 141.282288][ T5732] usb 4-1: USB disconnect, device number 3 [ 142.680400][ T5610] Bluetooth: hci4: command 0x2016 tx timeout [ 143.198110][ T6287] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.198133][ T6287] block device autoloading is deprecated and will be removed. [ 144.589123][ T6296] Bluetooth: MGMT ver 1.23 [ 144.762815][ T4925] Bluetooth: hci4: command 0x2016 tx timeout [ 146.683873][ T61] Bluetooth: hci0: command 0x2016 tx timeout [ 146.695712][ T5610] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 146.722995][ T6326] FAULT_INJECTION: forcing a failure. [ 146.722995][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 146.723021][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.2.134 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.723034][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.723042][ T6326] Call Trace: [ 146.723047][ T6326] [ 146.723053][ T6326] dump_stack_lvl+0xe8/0x150 [ 146.723078][ T6326] should_fail_ex+0x447/0x5e0 [ 146.723097][ T6326] should_failslab+0xa8/0x100 [ 146.723111][ T6326] ? trace_define_field+0xb7/0x350 [ 146.723132][ T6326] kmem_cache_alloc_noprof+0x99/0x680 [ 146.723151][ T6326] ? trace_define_field+0xb7/0x350 [ 146.723171][ T6326] trace_define_field+0xb7/0x350 [ 146.723191][ T6326] uprobe_event_define_fields+0xe3/0x190 [ 146.723206][ T6326] event_define_fields+0x70a/0x750 [ 146.723225][ T6326] event_create_dir+0xbf/0xb60 [ 146.723242][ T6326] trace_add_event_call+0x142/0x1e0 [ 146.723255][ T6326] trace_probe_register_event_call+0x397/0x470 [ 146.723269][ T6326] register_trace_uprobe+0x817/0x1320 [ 146.723284][ T6326] ? traceprobe_set_print_fmt+0x78/0xc0 [ 146.723303][ T6326] __trace_uprobe_create+0xc42/0xe50 [ 146.723320][ T6326] ? __pfx___trace_uprobe_create+0x10/0x10 [ 146.723333][ T6326] ? __kmalloc_noprof+0x439/0x790 [ 146.723345][ T6326] ? argv_split+0x18d/0x400 [ 146.723365][ T6326] ? argv_split+0x18d/0x400 [ 146.723392][ T6326] ? argv_split+0x378/0x400 [ 146.723410][ T6326] trace_probe_create+0xce/0x130 [ 146.723421][ T6326] ? __pfx___trace_uprobe_create+0x10/0x10 [ 146.723433][ T6326] ? __pfx_trace_probe_create+0x10/0x10 [ 146.723445][ T6326] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.723459][ T6326] ? mutex_lock_nested+0x14d/0x1d0 [ 146.723474][ T6326] ? dyn_event_create+0x2a/0x80 [ 146.723491][ T6326] dyn_event_create+0x59/0x80 [ 146.723506][ T6326] create_or_delete_trace_uprobe+0x65/0xa0 [ 146.723520][ T6326] trace_parse_run_command+0x1f3/0x380 [ 146.723532][ T6326] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 146.723546][ T6326] ? __pfx_probes_write+0x10/0x10 [ 146.723558][ T6326] vfs_write+0x29f/0xbb0 [ 146.723580][ T6326] ? __pfx_vfs_write+0x10/0x10 [ 146.723604][ T6326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 146.723639][ T6326] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.723662][ T6326] ? mutex_lock_nested+0x14d/0x1d0 [ 146.723689][ T6326] ? fdget_pos+0x11e/0x160 [ 146.723725][ T6326] ksys_write+0x156/0x270 [ 146.723746][ T6326] ? __pfx_ksys_write+0x10/0x10 [ 146.723776][ T6326] do_syscall_64+0x166/0x520 [ 146.723798][ T6326] ? trace_irq_disable+0x3b/0x140 [ 146.723818][ T6326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.723838][ T6326] ? clear_bhb_loop+0x70/0xc0 [ 146.723863][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.723883][ T6326] RIP: 0033:0x7f477b0bfb19 [ 146.723900][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.723916][ T6326] RSP: 002b:00007f477930e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.723935][ T6326] RAX: ffffffffffffffda RBX: 00007f477b345fa0 RCX: 00007f477b0bfb19 [ 146.723948][ T6326] RDX: 000000000000000f RSI: 0000200000001d80 RDI: 0000000000000004 [ 146.723960][ T6326] RBP: 00007f477b157b70 R08: 0000000000000000 R09: 0000000000000000 [ 146.723972][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.723984][ T6326] R13: 00007f477b346038 R14: 00007f477b345fa0 R15: 00007ffe579434c8 [ 146.724015][ T6326] [ 147.956603][ T6332] TC_ACT_REPEAT abuse ? [ 148.086714][ T6335] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 148.086747][ T6335] device-mapper: raid: Choosing default region size of 4MiB [ 148.125505][ T6335] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 148.319444][ T6335] mdX: WARNING: ram5 appears to be on the same physical disk as ram5. [ 148.319469][ T6335] True protection against single-disk failure might be compromised. [ 148.380002][ T6335] md/raid1:mdX: active with 1 out of 2 mirrors [ 148.389322][ T6335] mdX: invalid bitmap file superblock: bad magic [ 148.404185][ T6335] md: mdX: invalid bitmap magic 0x0 [ 148.404226][ T6335] mdX: failed to create bitmap (-22) [ 148.463039][ T6335] device-mapper: table: 248:0: raid: Failed to run raid array (-EINVAL) [ 148.463081][ T6335] device-mapper: ioctl: error adding target to table [ 148.620722][ T5754] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.785237][ T5754] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 148.787473][ T5754] usb 1-1: Dual-Role OTG device on HNP port [ 148.790448][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.150435][ T5732] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 149.221554][ T5754] gspca_main: spca501-2.14.0 probing 0000:0000 [ 149.322258][ T5754] gspca_spca501: reg write: error -32 [ 149.322281][ T5754] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 149.322374][ T5754] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 149.338610][ T5732] usb 5-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 149.371016][ T5732] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 149.371045][ T5732] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 149.405323][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.405353][ T5732] usb 5-1: Product: syz [ 149.405369][ T5732] usb 5-1: Manufacturer: syz [ 149.405384][ T5732] usb 5-1: SerialNumber: syz [ 149.426091][ T5754] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.961637][ T6357] fuse: Bad value for 'fd' [ 150.715494][ T5732] usb 5-1: failed to send ARPC request 1: -110 [ 150.719332][ T5732] usb 5-1: failed to execute ARPC: -110 [ 150.719392][ T5732] usb 5-1: failed to set connected state for cport 0: -110 [ 150.719404][ T5732] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 150.801768][ T5732] usb 5-1: failed to send ARPC request 3: -32 [ 150.801879][ T5732] usb 5-1: failed to execute ARPC: -32 [ 150.801889][ T5732] usb 5-1: failed to clear cport 0: -32 [ 150.801917][ T5732] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 151.288740][ C0] usb 5-1: failed to resubmit arpc in-urb: -1 [ 151.342242][ T5732] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 151.386513][ T5732] usb 5-1: USB disconnect, device number 2 [ 151.856407][ T6370] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.999734][ T6383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.018418][ T6383] block device autoloading is deprecated and will be removed. [ 152.450437][ T1239] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.633425][ T1239] usb 2-1: New USB device found: idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 152.635992][ T1239] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 152.636021][ T1239] usb 2-1: Product: syz [ 152.764139][ T1239] ftdi_sio 2-1:5.0: FTDI USB Serial Device converter detected [ 153.735144][ T1239] usb 2-1: Detected FT4233HP [ 153.784298][ T1239] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 153.800059][ T1239] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 153.919971][ T1239] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.999979][ T1239] usb 2-1: USB disconnect, device number 2 [ 154.104645][ T1239] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 154.105399][ T1239] ftdi_sio 2-1:5.0: device disconnected [ 158.291687][ T168] IPVS: starting estimator thread 0... [ 158.380453][ T6426] IPVS: using max 12 ests per chain, 28800 per kthread [ 158.420419][ T6431] md: md1 stopped. [ 161.790960][ T6461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.790996][ T6461] block device autoloading is deprecated and will be removed. [ 165.679925][ T5610] Bluetooth: hci3: unexpected subevent 0x0e length: 12 < 15 [ 166.695233][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.722142][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.739564][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.750164][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.759671][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.921745][ T5610] Bluetooth: hci5: command tx timeout [ 170.235014][ T6512] syz.3.191 (6512) used greatest stack depth: 18952 bytes left [ 170.309963][ T6521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 170.309990][ T6521] block device autoloading is deprecated and will be removed. [ 171.300417][ T5610] Bluetooth: hci5: command tx timeout [ 173.607123][ T5610] Bluetooth: hci5: command tx timeout [ 175.155030][ T168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.049063][ T61] Bluetooth: hci5: command tx timeout [ 176.392261][ T6570] md: md3 stopped. [ 177.265079][ T168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.493267][ T6500] rxe_eth0 speed is unknown, defaulting to 1000 [ 181.421477][ T168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.094102][ T168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.285001][ T6606] trusted_key: encrypted_key: insufficient parameters specified [ 183.553337][ T6614] Can't find ip_set type hash:net, [ 184.783409][ T6623] md: md4 stopped. [ 185.089479][ T168] bridge_slave_1: left allmulticast mode [ 185.089610][ T168] bridge_slave_1: left promiscuous mode [ 185.142800][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.435689][ T168] bridge_slave_0: left allmulticast mode [ 185.435727][ T168] bridge_slave_0: left promiscuous mode [ 185.435979][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.521246][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.561176][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.583365][ T168] bond0 (unregistering): Released all slaves [ 188.844025][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 189.475168][ T6669] trusted_key: encrypted_key: insufficient parameters specified [ 190.911831][ T6686] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.911858][ T6686] block device autoloading is deprecated and will be removed. [ 194.461907][ T1348] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.470184][ T1348] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.317787][ T6718] FAULT_INJECTION: forcing a failure. [ 195.317787][ T6718] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 195.317830][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.317854][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.317867][ T6718] Call Trace: [ 195.317875][ T6718] [ 195.317884][ T6718] dump_stack_lvl+0xe8/0x150 [ 195.317926][ T6718] should_fail_ex+0x447/0x5e0 [ 195.317970][ T6718] prepare_alloc_pages+0x21e/0x650 [ 195.318000][ T6718] __alloc_frozen_pages_noprof+0x1a1/0x440 [ 195.318028][ T6718] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.318063][ T6718] ? policy_nodemask+0x31b/0x980 [ 195.318094][ T6718] alloc_pages_mpol+0xd4/0x280 [ 195.318124][ T6718] alloc_pages_noprof+0xd2/0x2f0 [ 195.318154][ T6718] kimage_alloc_pages+0xbe/0x3c0 [ 195.318174][ T6718] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.318203][ T6718] kimage_alloc_control_pages+0x49b/0xbc0 [ 195.318236][ T6718] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 195.318268][ T6718] machine_kexec_prepare+0x16d/0x1710 [ 195.318296][ T6718] ? kimage_alloc_control_pages+0xae8/0xbc0 [ 195.318319][ T6718] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 195.318343][ T6718] ? __pfx_alloc_pgt_page+0x10/0x10 [ 195.318379][ T6718] do_kexec_load+0x5ee/0x7c0 [ 195.318409][ T6718] ? __pfx_do_kexec_load+0x10/0x10 [ 195.318435][ T6718] ? _copy_from_user+0x94/0xb0 [ 195.318465][ T6718] __se_sys_kexec_load+0x134/0x160 [ 195.318492][ T6718] do_syscall_64+0x166/0x520 [ 195.318516][ T6718] ? trace_irq_disable+0x3b/0x140 [ 195.318537][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.318559][ T6718] ? clear_bhb_loop+0x70/0xc0 [ 195.318585][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.318606][ T6718] RIP: 0033:0x7fdae9c8fb19 [ 195.318627][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.318648][ T6718] RSP: 002b:00007fdae7ede028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 195.318671][ T6718] RAX: ffffffffffffffda RBX: 00007fdae9f15fa0 RCX: 00007fdae9c8fb19 [ 195.318687][ T6718] RDX: 0000200000004b00 RSI: 0000000000000001 RDI: 0000000000000000 [ 195.318701][ T6718] RBP: 00007fdae9d27b70 R08: 0000000000000000 R09: 0000000000000000 [ 195.318713][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.318726][ T6718] R13: 00007fdae9f16038 R14: 00007fdae9f15fa0 R15: 00007ffe052ebf38 [ 195.318767][ T6718] [ 198.063824][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 198.209924][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.210055][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.210779][ T6500] bridge_slave_0: entered allmulticast mode [ 198.219212][ T6500] bridge_slave_0: entered promiscuous mode [ 198.487298][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.487514][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.487712][ T6500] bridge_slave_1: entered allmulticast mode [ 198.512349][ T6500] bridge_slave_1: entered promiscuous mode [ 198.554079][ T6731] md: md4 stopped. [ 198.570980][ T6727] trusted_key: encrypted_key: insufficient parameters specified [ 198.854981][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.879765][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.441543][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 199.850691][ T6748] gfs2: error -5 reading superblock [ 204.104544][ T6500] team0: Port device team_slave_0 added [ 204.119160][ T6500] team0: Port device team_slave_1 added [ 204.484307][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.484326][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.484351][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.498209][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.498229][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.498255][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.746755][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 206.760644][ T61] Bluetooth: hci0: command 0x2016 tx timeout [ 208.991442][ T5896] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 209.354275][ T6500] hsr_slave_0: entered promiscuous mode [ 209.486249][ T6500] hsr_slave_1: entered promiscuous mode [ 209.572438][ T6500] debugfs: 'hsr0' already exists in 'hsr' [ 209.572463][ T6500] Cannot create hsr debugfs directory [ 209.879924][ T6788] orangefs_mount: mount request failed with -4 [ 210.207530][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.207595][ T5896] usb 4-1: New USB device found: idVendor=0025, idProduct=0000, bcdDevice=0.00 [ 210.207650][ T5896] usb 4-1: no configurations [ 210.207664][ T5896] usb 4-1: can't read configurations, error -22 [ 211.697204][ T168] hsr_slave_0: left promiscuous mode [ 211.953402][ T5628] Bluetooth: hci4: command 0x2016 tx timeout [ 211.968963][ T5613] Bluetooth: hci2: command 0x2016 tx timeout [ 211.969080][ T5613] Bluetooth: hci3: command 0x2016 tx timeout [ 212.355692][ T168] hsr_slave_1: left promiscuous mode [ 212.456034][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.456153][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.503364][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.503394][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.693085][ T168] veth1_macvtap: left promiscuous mode [ 213.693314][ T168] veth0_macvtap: left promiscuous mode [ 213.708624][ T168] veth1_vlan: left promiscuous mode [ 213.709114][ T168] veth0_vlan: left promiscuous mode [ 214.853479][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 215.035997][ T9] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 215.039161][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 215.039259][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.420776][ T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 216.673680][ T5896] usb 3-1: USB disconnect, device number 2 [ 217.200494][ T6844] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 220.103891][ T168] team0 (unregistering): Port device team_slave_1 removed [ 220.154940][ T168] team0 (unregistering): Port device team_slave_0 removed [ 220.951385][ T6844] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 227.079790][ T6917] macsec0: entered promiscuous mode [ 227.145341][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 227.357380][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.428764][ T4925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.429972][ T4925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.474298][ T4925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.475101][ T4925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.658965][ T6916] macsec0: left promiscuous mode [ 228.490426][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 228.693940][ T30] usb 2-1: device descriptor read/64, error -71 [ 229.452385][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 229.640517][ T30] usb 2-1: device descriptor read/64, error -71 [ 229.640638][ T4925] Bluetooth: hci1: command tx timeout [ 229.760781][ T30] usb usb2-port1: attempt power cycle [ 231.600470][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.741472][ T4925] Bluetooth: hci1: command tx timeout [ 232.521284][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 232.819112][ T6941] lo speed is unknown, defaulting to 1000 [ 234.023291][ T4925] Bluetooth: hci1: command tx timeout [ 234.192639][ T6955] hsr_slave_1 (unregistering): left promiscuous mode [ 234.277408][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'. [ 234.277429][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 234.303222][ T6941] lo speed is unknown, defaulting to 1000 [ 234.826261][ T6941] lo speed is unknown, defaulting to 1000 [ 234.886342][ T6922] rxe_eth0 speed is unknown, defaulting to 1000 [ 234.985894][ T6941] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 234.985921][ T6941] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 234.985950][ T6941] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 235.067377][ T6941] FAULT_INJECTION: forcing a failure. [ 235.067377][ T6941] name failslab, interval 1, probability 0, space 0, times 0 [ 235.067416][ T6941] CPU: 0 UID: 0 PID: 6941 Comm: syz.1.291 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.067442][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 235.067454][ T6941] Call Trace: [ 235.067463][ T6941] [ 235.067474][ T6941] dump_stack_lvl+0xe8/0x150 [ 235.067517][ T6941] should_fail_ex+0x447/0x5e0 [ 235.067551][ T6941] should_failslab+0xa8/0x100 [ 235.067579][ T6941] __kmalloc_noprof+0xf6/0x790 [ 235.067601][ T6941] ? uapi_add_get_elm+0x36/0x160 [ 235.067627][ T6941] ? uapi_add_get_elm+0x36/0x160 [ 235.067662][ T6941] uapi_add_get_elm+0x36/0x160 [ 235.067692][ T6941] uapi_merge_def+0xb9e/0x14f0 [ 235.067750][ T6941] uapi_merge_def+0x2ae/0x14f0 [ 235.067786][ T6941] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 235.067820][ T6941] uverbs_alloc_api+0x1bb/0x1ab0 [ 235.067851][ T6941] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 235.067892][ T6941] ? rcu_is_watching+0x16/0xb0 [ 235.067917][ T6941] ? __pfx_uverbs_alloc_api+0x10/0x10 [ 235.067941][ T6941] ? kfree+0x4d/0x6d0 [ 235.067979][ T6941] ? ida_alloc_range+0x80b/0x840 [ 235.068017][ T6941] ? __pfx_ida_alloc_range+0x10/0x10 [ 235.068061][ T6941] ib_uverbs_add_one+0x407/0x700 [ 235.068092][ T6941] add_client_context+0x37c/0x7b0 [ 235.068122][ T6941] ? __pfx_add_client_context+0x10/0x10 [ 235.068141][ T6941] ? xa_find_after+0xae/0x430 [ 235.068180][ T6941] enable_device_and_get+0x19c/0x3e0 [ 235.068201][ T6941] ? __pfx_enable_device_and_get+0x10/0x10 [ 235.068229][ T6941] ? device_add+0x6f6/0xb80 [ 235.068252][ T6941] ib_register_device+0xdc3/0x1080 [ 235.068284][ T6941] ? __pfx_ib_register_device+0x10/0x10 [ 235.068330][ T6941] siw_newlink+0x916/0xe00 [ 235.068363][ T6941] nldev_newlink+0x5be/0x650 [ 235.068396][ T6941] ? __pfx_nldev_newlink+0x10/0x10 [ 235.068530][ T6941] ? __pfx_hook_capable+0x10/0x10 [ 235.068560][ T6941] ? __pfx_hook_capable+0x10/0x10 [ 235.068601][ T6941] ? cap_capable+0x123/0x460 [ 235.068635][ T6941] ? security_capable+0x7e/0x2c0 [ 235.068659][ T6941] ? __pfx_nldev_newlink+0x10/0x10 [ 235.068688][ T6941] rdma_nl_rcv+0x6f6/0xa40 [ 235.068741][ T6941] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 235.068799][ T6941] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.068828][ T6941] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.068863][ T6941] netlink_unicast+0x90c/0xac0 [ 235.068907][ T6941] netlink_sendmsg+0x7f0/0xb20 [ 235.068942][ T6941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.068963][ T6941] ? __lock_acquire+0x747/0x2de0 [ 235.068997][ T6941] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 235.069021][ T6941] ? __lock_acquire+0x747/0x2de0 [ 235.069051][ T6941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.069078][ T6941] sock_sendmsg_nosec+0x14e/0x190 [ 235.069110][ T6941] ____sys_sendmsg+0x565/0x870 [ 235.069140][ T6941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.069174][ T6941] ? import_iovec+0x73/0xa0 [ 235.069207][ T6941] ___sys_sendmsg+0x2a5/0x360 [ 235.069228][ T6941] ? __lock_acquire+0x747/0x2de0 [ 235.069266][ T6941] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.069325][ T6941] ? __fget_files+0x3a8/0x420 [ 235.069350][ T6941] ? __fget_files+0x2a/0x420 [ 235.069383][ T6941] __x64_sys_sendmsg+0x1b7/0x290 [ 235.069406][ T6941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.069450][ T6941] do_syscall_64+0x166/0x520 [ 235.069474][ T6941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.069496][ T6941] ? clear_bhb_loop+0x70/0xc0 [ 235.069522][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.069545][ T6941] RIP: 0033:0x7fdae9c8fb19 [ 235.069565][ T6941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.069584][ T6941] RSP: 002b:00007fdae7ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.069607][ T6941] RAX: ffffffffffffffda RBX: 00007fdae9f15fa0 RCX: 00007fdae9c8fb19 [ 235.069625][ T6941] RDX: 0000000020000000 RSI: 0000200000010b00 RDI: 0000000000000005 [ 235.069640][ T6941] RBP: 00007fdae9d27b70 R08: 0000000000000000 R09: 0000000000000000 [ 235.069654][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.069669][ T6941] R13: 00007fdae9f16038 R14: 00007fdae9f15fa0 R15: 00007ffe052ebf38 [ 235.069703][ T6941] [ 235.538890][ T6941] lo speed is unknown, defaulting to 1000 [ 235.574743][ T6941] lo speed is unknown, defaulting to 1000 [ 235.578832][ T6941] lo speed is unknown, defaulting to 1000 [ 235.601487][ T6941] lo speed is unknown, defaulting to 1000 [ 235.606913][ T6941] lo speed is unknown, defaulting to 1000 [ 235.629515][ T6941] lo speed is unknown, defaulting to 1000 [ 235.721231][ T30] usb 2-1: device descriptor read/8, error -71 [ 235.841977][ T5757] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 236.036246][ T5757] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 236.038692][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.038718][ T5757] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.038752][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.040415][ T4925] Bluetooth: hci1: command tx timeout [ 236.067829][ T5757] usb 5-1: config 0 descriptor?? [ 240.196278][ T7010] binfmt_misc: register: failed to install interpreter ./file0 [ 240.202482][ T10] usb 5-1: USB disconnect, device number 3 [ 240.696575][ T7031] device-mapper: ioctl: Unable to rename non-existent device, syzc1 to uuid LVM-syzc3 [ 243.613358][ T7050] binfmt_misc: register: failed to install interpreter ./file0 [ 243.730755][ T5757] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 243.906133][ T5757] usb 5-1: not running at top speed; connect to a high speed hub [ 243.906176][ T5757] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 243.907683][ T5757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.909921][ T5757] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 243.909942][ T5757] usb 5-1: Product: syz [ 243.909955][ T5757] usb 5-1: Manufacturer: syz [ 243.987573][ T5757] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 243.987665][ T5757] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 244.260632][ T5757] usb 5-1: USB disconnect, device number 4 [ 244.520987][ T168] bridge_slave_1: left allmulticast mode [ 244.521025][ T168] bridge_slave_1: left promiscuous mode [ 244.521286][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.792785][ T168] bridge_slave_0: left allmulticast mode [ 244.792822][ T168] bridge_slave_0: left promiscuous mode [ 244.793082][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.434785][ T7120] binfmt_misc: register: failed to install interpreter ./file0 [ 250.690617][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.883374][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.983225][ T168] bond0 (unregistering): Released all slaves [ 252.307655][ T5757] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 252.997742][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 253.106700][ T5757] usb 5-1: not running at top speed; connect to a high speed hub [ 253.106742][ T5757] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 253.148755][ T5757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.011466][ T5757] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 254.011499][ T5757] usb 5-1: Product: syz [ 254.011514][ T5757] usb 5-1: Manufacturer: syz [ 254.183079][ T5757] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 254.183148][ T5757] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 254.258235][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.258335][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.258496][ T6922] bridge_slave_0: entered allmulticast mode [ 254.289381][ T6922] bridge_slave_0: entered promiscuous mode [ 254.315198][ T5757] usb 5-1: USB disconnect, device number 5 [ 254.344571][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.347748][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.347969][ T6922] bridge_slave_1: entered allmulticast mode [ 254.439301][ T6922] bridge_slave_1: entered promiscuous mode [ 254.726799][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.779148][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.999239][ T1348] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.999314][ T1348] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.308573][ T6922] team0: Port device team_slave_0 added [ 256.909111][ T6922] team0: Port device team_slave_1 added [ 257.004537][ T7181] binfmt_misc: register: failed to install interpreter ./file0 [ 259.808881][ T168] hsr_slave_0: left promiscuous mode [ 259.877548][ T168] hsr_slave_1: left promiscuous mode [ 259.878738][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.919910][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.805438][ T7224] binfmt_misc: register: failed to install interpreter ./file0 [ 262.040705][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 262.130374][ T5753] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 262.789774][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 262.789818][ T10] usb 3-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 262.790408][ T5753] usb 5-1: Using ep0 maxpacket: 8 [ 262.817193][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.075165][ T10] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 263.075276][ T10] usb 3-1: Product: syz [ 263.075292][ T10] usb 3-1: Manufacturer: syz [ 263.076030][ T5753] usb 5-1: unable to get BOS descriptor or descriptor too short [ 263.076082][ T5753] usb 5-1: New USB device found: idVendor=1235, idProduct=8215, bcdDevice=0.40 [ 263.086714][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.086748][ T5753] usb 5-1: Product: syz [ 263.086762][ T5753] usb 5-1: Manufacturer: syz [ 263.086775][ T5753] usb 5-1: SerialNumber: syz [ 263.243452][ T10] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 263.243568][ T10] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 263.440000][ T10] usb 3-1: USB disconnect, device number 3 [ 263.495889][ T5753] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 263.569935][ T5753] usb 5-1: 2:1 : bogus bTerminalLink 2 [ 263.703521][ T5753] usb 5-1: unit 1 not found! [ 263.703547][ T5753] usb 5-1: unit 8 not found! [ 263.909376][ T5753] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 263.909457][ T5753] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 267.155911][ T5753] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 267.182246][ T5753] usb 5-1: USB disconnect, device number 6 [ 268.017400][ T7230] udevd[7230]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 270.076775][ T168] team0 (unregistering): Port device team_slave_1 removed [ 270.518331][ T168] team0 (unregistering): Port device team_slave_0 removed [ 270.554982][ T7267] binfmt_misc: register: failed to install interpreter ./file0 [ 271.981894][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.981912][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.981938][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.046418][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 272.277634][ T7285] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 273.384165][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.384185][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.384212][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.833130][ T7290] orangefs_mount: mount request failed with -4 [ 275.935529][ T7303] binfmt_misc: register: failed to install interpreter ./file0 [ 275.956750][ T6922] hsr_slave_0: entered promiscuous mode [ 275.963215][ T6922] hsr_slave_1: entered promiscuous mode [ 275.970488][ T5896] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 276.121900][ T5896] usb 4-1: not running at top speed; connect to a high speed hub [ 276.121939][ T5896] usb 4-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 276.126081][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.129427][ T5896] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 276.129456][ T5896] usb 4-1: Product: syz [ 276.129471][ T5896] usb 4-1: Manufacturer: syz [ 276.340828][ T5896] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 276.341146][ T5896] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 277.909013][ T7310] input: syz0 as /devices/virtual/input/input5 [ 279.137404][ T5896] usb 4-1: USB disconnect, device number 6 [ 282.894028][ T7355] binfmt_misc: register: failed to install interpreter ./file0 [ 283.097765][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'. [ 283.097792][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 283.591924][ T5896] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 283.742000][ T5896] usb 2-1: not running at top speed; connect to a high speed hub [ 283.742048][ T5896] usb 2-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 283.743589][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.748803][ T5896] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 283.748832][ T5896] usb 2-1: Product: syz [ 283.748856][ T5896] usb 2-1: Manufacturer: syz [ 284.741997][ T5896] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 284.742067][ T5896] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 284.838579][ T5896] usb 2-1: USB disconnect, device number 7 [ 285.740064][ T7400] can0: slcan on ttyS3. [ 286.092127][ T7400] can0 (unregistered): slcan off ttyS3. [ 288.012212][ T7421] binfmt_misc: register: failed to install interpreter ./file0 [ 289.763719][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.814474][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.834489][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.847976][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.856359][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.350681][ T5754] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 290.523140][ T5754] usb 3-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 290.528672][ T5754] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.528727][ T5754] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.566646][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.566677][ T5754] usb 3-1: Product: syz [ 290.566691][ T5754] usb 3-1: Manufacturer: syz [ 290.566705][ T5754] usb 3-1: SerialNumber: syz [ 291.264311][ T5754] usb 3-1: USB disconnect, device number 4 [ 291.380330][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 291.633840][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.633904][ T10] usb 4-1: New USB device found: idVendor=0025, idProduct=0000, bcdDevice=0.00 [ 291.633966][ T10] usb 4-1: no configurations [ 291.633978][ T10] usb 4-1: can't read configurations, error -22 [ 291.823160][ T1243] bridge_slave_1: left allmulticast mode [ 291.823194][ T1243] bridge_slave_1: left promiscuous mode [ 291.824430][ T1243] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.041999][ T7473] null_blk: disk nullb1 created [ 292.042595][ T5610] Bluetooth: hci5: command tx timeout [ 292.079178][ T1243] bridge_slave_0: left allmulticast mode [ 292.079214][ T1243] bridge_slave_0: left promiscuous mode [ 292.079464][ T1243] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.088531][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.400'. [ 292.088551][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 294.120763][ T5610] Bluetooth: hci5: command tx timeout [ 295.371183][ T7488] binfmt_misc: register: failed to install interpreter ./file0 [ 295.391754][ T1243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.558797][ T7499] FAULT_INJECTION: forcing a failure. [ 295.558797][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 295.558821][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.3.414 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 295.558835][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 295.558855][ T7499] Call Trace: [ 295.558860][ T7499] [ 295.558865][ T7499] dump_stack_lvl+0xe8/0x150 [ 295.558890][ T7499] should_fail_ex+0x447/0x5e0 [ 295.558907][ T7499] should_failslab+0xa8/0x100 [ 295.558923][ T7499] __kmalloc_noprof+0xf6/0x790 [ 295.558934][ T7499] ? __register_sysctl_table+0xc02/0x1370 [ 295.558948][ T7499] ? __register_sysctl_table+0xc02/0x1370 [ 295.558965][ T7499] __register_sysctl_table+0xc02/0x1370 [ 295.558985][ T7499] register_pidns_sysctls+0x105/0x1e0 [ 295.559001][ T7499] copy_pid_ns+0x548/0x940 [ 295.559018][ T7499] ? __pfx_copy_pid_ns+0x10/0x10 [ 295.559030][ T7499] ? rcu_is_watching+0x16/0xb0 [ 295.559044][ T7499] ? __pfx_copy_mnt_ns+0x10/0x10 [ 295.559057][ T7499] ? create_new_namespaces+0x33/0x6b0 [ 295.559077][ T7499] ? copy_ipcs+0x2ad/0x6c0 [ 295.559092][ T7499] ? copy_utsname+0x184/0x620 [ 295.559110][ T7499] create_new_namespaces+0x2ad/0x6b0 [ 295.559128][ T7499] ? security_capable+0x7e/0x2c0 [ 295.559142][ T7499] unshare_nsproxy_namespaces+0x144/0x190 [ 295.559161][ T7499] ksys_unshare+0x532/0x890 [ 295.559179][ T7499] ? __pfx_ksys_unshare+0x10/0x10 [ 295.559199][ T7499] ? rcu_is_watching+0x16/0xb0 [ 295.559218][ T7499] __x64_sys_unshare+0x38/0x50 [ 295.559227][ T7499] do_syscall_64+0x166/0x520 [ 295.559240][ T7499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.559251][ T7499] ? clear_bhb_loop+0x70/0xc0 [ 295.559265][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.559276][ T7499] RIP: 0033:0x7efc781dfb19 [ 295.559287][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.559297][ T7499] RSP: 002b:00007efc76436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 295.559309][ T7499] RAX: ffffffffffffffda RBX: 00007efc78465fa0 RCX: 00007efc781dfb19 [ 295.559317][ T7499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 295.559323][ T7499] RBP: 00007efc78277b70 R08: 0000000000000000 R09: 0000000000000000 [ 295.559329][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.559336][ T7499] R13: 00007efc78466038 R14: 00007efc78465fa0 R15: 00007ffd7dfee518 [ 295.559352][ T7499] [ 295.559358][ T7499] sysctl could not get directory: /kernel -12 [ 295.626692][ T1243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.848620][ T7497] ima: policy update failed [ 295.848751][ T36] audit: type=1802 audit(1793800116.302:16): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.415" res=0 errno=-22 [ 295.876878][ T1243] bond0 (unregistering): Released all slaves [ 296.200377][ T5754] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 296.200433][ T5610] Bluetooth: hci5: command tx timeout [ 299.242870][ T5610] Bluetooth: hci5: command tx timeout [ 299.351495][ T5754] usb 5-1: unable to get BOS descriptor or descriptor too short [ 299.351549][ T5754] usb 5-1: New USB device found: idVendor=0025, idProduct=0000, bcdDevice=0.00 [ 299.351598][ T5754] usb 5-1: no configurations [ 299.351609][ T5754] usb 5-1: can't read configurations, error -22 [ 299.721926][ T7432] rxe_eth0 speed is unknown, defaulting to 1000 [ 301.552285][ T7432] lo speed is unknown, defaulting to 1000 [ 301.707355][ T7533] binfmt_misc: register: failed to install interpreter ./file0 [ 303.460360][ T1239] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 303.631996][ T1239] usb 5-1: not running at top speed; connect to a high speed hub [ 303.632024][ T1239] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 303.662271][ T1239] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.674150][ T1239] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 303.674175][ T1239] usb 5-1: Product: syz [ 303.674187][ T1239] usb 5-1: Manufacturer: syz [ 303.887131][ T1239] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 304.080736][ T1239] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 304.083528][ T1239] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 304.083589][ T1239] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 304.109836][ T1239] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 304.226983][ T1239] usb 5-1: USB disconnect, device number 9 [ 304.744117][ T1243] hsr_slave_0: left promiscuous mode [ 304.797938][ T1243] hsr_slave_1: left promiscuous mode [ 304.799629][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.847160][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.885510][ T7596] FAULT_INJECTION: forcing a failure. [ 306.885510][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 306.885533][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.1.437 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 306.885547][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 306.885554][ T7596] Call Trace: [ 306.885561][ T7596] [ 306.885567][ T7596] dump_stack_lvl+0xe8/0x150 [ 306.885593][ T7596] should_fail_ex+0x447/0x5e0 [ 306.885612][ T7596] should_failslab+0xa8/0x100 [ 306.885628][ T7596] __kmalloc_cache_noprof+0x9c/0x670 [ 306.885640][ T7596] ? sget_fc+0x795/0x1d00 [ 306.885658][ T7596] ? sget_fc+0x795/0x1d00 [ 306.885677][ T7596] sget_fc+0x795/0x1d00 [ 306.885692][ T7596] ? __pfx_kernfs_test_super+0x10/0x10 [ 306.885709][ T7596] ? __pfx_kernfs_set_super+0x10/0x10 [ 306.885721][ T7596] ? __pfx_sget_fc+0x10/0x10 [ 306.885736][ T7596] ? __kasan_kmalloc+0x93/0xb0 [ 306.885750][ T7596] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 306.885761][ T7596] ? kernfs_get_tree+0xc4/0x9a0 [ 306.885771][ T7596] ? kernfs_get_tree+0xc4/0x9a0 [ 306.885784][ T7596] kernfs_get_tree+0x1e9/0x9a0 [ 306.885795][ T7596] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 306.885806][ T7596] ? rt_spin_unlock+0x165/0x200 [ 306.885824][ T7596] ? __pfx_kernfs_get_tree+0x10/0x10 [ 306.885834][ T7596] ? cap_capable+0x123/0x460 [ 306.885851][ T7596] ? bpf_lsm_capable+0x9/0x20 [ 306.885867][ T7596] vfs_get_tree+0x92/0x2a0 [ 306.885879][ T7596] do_new_mount+0x325/0xb00 [ 306.885893][ T7596] ? cap_capable+0x123/0x460 [ 306.885909][ T7596] ? __pfx_do_new_mount+0x10/0x10 [ 306.885927][ T7596] ? ns_capable+0x84/0xe0 [ 306.885944][ T7596] ? path_mount+0x647/0x1050 [ 306.885960][ T7596] ? user_path_at+0xd4/0x160 [ 306.885978][ T7596] __se_sys_mount+0x31d/0x420 [ 306.885996][ T7596] ? __pfx___se_sys_mount+0x10/0x10 [ 306.886014][ T7596] ? __x64_sys_mount+0x20/0xc0 [ 306.886030][ T7596] do_syscall_64+0x166/0x520 [ 306.886041][ T7596] ? trace_irq_disable+0x3b/0x140 [ 306.886053][ T7596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.886064][ T7596] ? clear_bhb_loop+0x70/0xc0 [ 306.886077][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.886087][ T7596] RIP: 0033:0x7fdae9c8fb19 [ 306.886099][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.886108][ T7596] RSP: 002b:00007fdae7ede028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.886120][ T7596] RAX: ffffffffffffffda RBX: 00007fdae9f15fa0 RCX: 00007fdae9c8fb19 [ 306.886128][ T7596] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 306.886135][ T7596] RBP: 00007fdae9d27b70 R08: 0000000000000000 R09: 0000000000000000 [ 306.886142][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.886148][ T7596] R13: 00007fdae9f16038 R14: 00007fdae9f15fa0 R15: 00007ffe052ebf38 [ 306.886165][ T7596] [ 307.314991][ T7600] FAULT_INJECTION: forcing a failure. [ 307.314991][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 307.315026][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.3.432 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.315051][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 307.315063][ T7600] Call Trace: [ 307.315071][ T7600] [ 307.315080][ T7600] dump_stack_lvl+0xe8/0x150 [ 307.315123][ T7600] should_fail_ex+0x447/0x5e0 [ 307.315157][ T7600] should_failslab+0xa8/0x100 [ 307.315185][ T7600] __kmalloc_cache_noprof+0x9c/0x670 [ 307.315208][ T7600] ? ioc_cpd_alloc+0x73/0x120 [ 307.315235][ T7600] ? ioc_cpd_alloc+0x73/0x120 [ 307.315271][ T7600] ioc_cpd_alloc+0x73/0x120 [ 307.315299][ T7600] blkcg_css_alloc+0x45a/0xa90 [ 307.315332][ T7600] cgroup_apply_control_enable+0x5b8/0xd40 [ 307.315386][ T7600] cgroup_mkdir+0x121a/0x1480 [ 307.315423][ T7600] ? __pfx_cgroup_mkdir+0x10/0x10 [ 307.315449][ T7600] kernfs_iop_mkdir+0x213/0x360 [ 307.315482][ T7600] vfs_mkdir+0x417/0x670 [ 307.315516][ T7600] filename_mkdirat+0x288/0x560 [ 307.315546][ T7600] ? __pfx_filename_mkdirat+0x10/0x10 [ 307.315573][ T7600] ? do_getname+0x151/0x250 [ 307.315603][ T7600] __se_sys_mkdirat+0x35/0x150 [ 307.315629][ T7600] do_syscall_64+0x166/0x520 [ 307.315658][ T7600] ? trace_irq_disable+0x3b/0x140 [ 307.315680][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.315701][ T7600] ? clear_bhb_loop+0x70/0xc0 [ 307.315731][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.315751][ T7600] RIP: 0033:0x7efc781dfb19 [ 307.315771][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.315788][ T7600] RSP: 002b:00007efc76436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 307.315810][ T7600] RAX: ffffffffffffffda RBX: 00007efc78465fa0 RCX: 00007efc781dfb19 [ 307.315825][ T7600] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 307.315840][ T7600] RBP: 00007efc78277b70 R08: 0000000000000000 R09: 0000000000000000 [ 307.315853][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.315865][ T7600] R13: 00007efc78466038 R14: 00007efc78465fa0 R15: 00007ffd7dfee518 [ 307.315901][ T7600] [ 308.511233][ T7598] binfmt_misc: register: failed to install interpreter ./file0 [ 308.629886][ T1243] team0 (unregistering): Port device team_slave_1 removed [ 308.690039][ T7612] netlink: 92 bytes leftover after parsing attributes in process `syz.4.440'. [ 308.806834][ T1243] team0 (unregistering): Port device team_slave_0 removed [ 314.282712][ T7662] binfmt_misc: register: failed to install interpreter ./file0 [ 317.034593][ T7691] netlink: 92 bytes leftover after parsing attributes in process `syz.1.459'. [ 317.188645][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.188909][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.189051][ T7432] bridge_slave_0: entered allmulticast mode [ 317.438491][ T1348] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439940][ T1348] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.134538][ T7432] bridge_slave_0: entered promiscuous mode [ 318.263744][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.263874][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.264073][ T7432] bridge_slave_1: entered allmulticast mode [ 318.267673][ T7432] bridge_slave_1: entered promiscuous mode [ 319.869352][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.875395][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.518152][ T7714] binfmt_misc: register: failed to install interpreter ./file0 [ 321.748938][ T7432] team0: Port device team_slave_0 added [ 321.755425][ T7432] team0: Port device team_slave_1 added [ 321.907955][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.907973][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.907999][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.960285][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.468'. [ 321.960319][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 322.206243][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.206258][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.206272][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.140388][ T36] audit: type=1326 audit(1793800143.592:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.177942][ T36] audit: type=1326 audit(1793800143.632:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.212836][ T36] audit: type=1326 audit(1793800143.672:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.212886][ T36] audit: type=1326 audit(1793800143.672:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.213369][ T36] audit: type=1326 audit(1793800143.672:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.213417][ T36] audit: type=1326 audit(1793800143.672:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.213452][ T36] audit: type=1326 audit(1793800143.672:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.215805][ T36] audit: type=1326 audit(1793800143.672:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.215833][ T36] audit: type=1326 audit(1793800143.672:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.215855][ T36] audit: type=1326 audit(1793800143.672:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.470" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdae9c8fb19 code=0x7ffc0000 [ 323.557077][ T7432] hsr_slave_0: entered promiscuous mode [ 323.567958][ T7432] hsr_slave_1: entered promiscuous mode [ 323.690781][ T7737] netlink: 92 bytes leftover after parsing attributes in process `syz.1.472'. [ 327.772395][ T7744] binfmt_misc: register: failed to install interpreter ./file0 [ 329.615352][ T7432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.716848][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.738456][ T7432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.827903][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.829022][ T7432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.897961][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.907988][ T7432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.949610][ T7432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.281772][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 330.488288][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 330.488310][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 330.644243][ T10] usb 4-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 330.645459][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.645512][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 330.645538][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.759242][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.759272][ T10] usb 4-1: Product: syz [ 330.759287][ T10] usb 4-1: Manufacturer: syz [ 330.759301][ T10] usb 4-1: SerialNumber: syz [ 330.854325][ T7766] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.922644][ T10] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 330.922671][ T10] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 330.922716][ T10] usbserial_generic 4-1:1.0: generic converter detected [ 330.971545][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.056999][ T10] usb 4-1: generic converter now attached to ttyUSB0 [ 331.226919][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.292689][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.292848][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.346782][ T10] usb 4-1: USB disconnect, device number 9 [ 331.440586][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.471441][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.556441][ T10] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 331.614143][ T10] usbserial_generic 4-1:1.0: device disconnected [ 332.529206][ T7808] trusted_key: encrypted_key: insufficient parameters specified [ 334.371746][ T61] Bluetooth: hci0: command 0x2016 tx timeout [ 334.471857][ T4925] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 335.253362][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.493'. [ 335.253383][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 335.534202][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.560304][ T4925] Bluetooth: hci3: command 0x2016 tx timeout [ 336.370393][ T202] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 336.579839][ T202] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 336.581418][ T202] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 336.581455][ T202] usb 4-1: can't read configurations, error -71 [ 336.769163][ T7432] veth0_vlan: entered promiscuous mode [ 336.940067][ T7432] veth1_vlan: entered promiscuous mode [ 337.801949][ T7852] trusted_key: encrypted_key: insufficient parameters specified [ 339.204442][ T7432] veth0_macvtap: entered promiscuous mode [ 339.283119][ T7432] veth1_macvtap: entered promiscuous mode [ 339.315065][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.331103][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.393057][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.557295][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.505'. [ 339.557323][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 339.743487][ T1170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.743537][ T1170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.901394][ T1170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.449929][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.449953][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.401937][ T61] Bluetooth: hci0: command 0x2016 tx timeout [ 341.470668][ T5610] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 341.514433][ T5610] Bluetooth: hci2: command 0x2016 tx timeout [ 341.566137][ T791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.566160][ T791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.825282][ T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 341.958986][ T7892] trusted_key: encrypted_key: insufficient parameters specified [ 342.001932][ T10] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 342.002912][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 342.002946][ T10] usb 4-1: can't read configurations, error -71 [ 344.600336][ T61] Bluetooth: hci4: command 0x2016 tx timeout [ 344.689921][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.520'. [ 344.689944][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 346.211908][ T7940] trusted_key: encrypted_key: insufficient parameters specified [ 347.367347][ T7951] binfmt_misc: register: failed to install interpreter ./file0 [ 347.704621][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'. [ 347.704649][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 347.748861][ T35] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 347.913850][ T35] usb 3-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 347.915539][ T35] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 347.915571][ T35] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.957584][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.957612][ T35] usb 3-1: Product: syz [ 347.957627][ T35] usb 3-1: Manufacturer: syz [ 347.957641][ T35] usb 3-1: SerialNumber: syz [ 348.058985][ T7956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.075861][ T35] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 348.076017][ T35] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 348.076150][ T35] usbserial_generic 3-1:1.0: generic converter detected [ 348.105298][ T7968] FAULT_INJECTION: forcing a failure. [ 348.105298][ T7968] name failslab, interval 1, probability 0, space 0, times 0 [ 348.105336][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.5.533 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.105361][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 348.105373][ T7968] Call Trace: [ 348.105381][ T7968] [ 348.105389][ T7968] dump_stack_lvl+0xe8/0x150 [ 348.105431][ T7968] should_fail_ex+0x447/0x5e0 [ 348.105565][ T7968] should_failslab+0xa8/0x100 [ 348.105592][ T7968] __kvmalloc_node_noprof+0x171/0x880 [ 348.105618][ T7968] ? shrinker_alloc+0x55b/0xb90 [ 348.105640][ T7968] ? shrinker_alloc+0x55b/0xb90 [ 348.105669][ T7968] shrinker_alloc+0x55b/0xb90 [ 348.105708][ T7968] sget_fc+0xe96/0x1d00 [ 348.105749][ T7968] ? __pfx_set_anon_super_fc+0x10/0x10 [ 348.105782][ T7968] ? __pfx_sget_fc+0x10/0x10 [ 348.105817][ T7968] ? rcu_is_watching+0x16/0xb0 [ 348.105841][ T7968] ? cap_capable+0x123/0x460 [ 348.105868][ T7968] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 348.105889][ T7968] get_tree_nodev+0x2a/0x150 [ 348.105923][ T7968] vfs_get_tree+0x92/0x2a0 [ 348.105947][ T7968] vfs_cmd_create+0xa2/0x200 [ 348.105974][ T7968] __se_sys_fsconfig+0x6bf/0x810 [ 348.106004][ T7968] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 348.106035][ T7968] ? rcu_is_watching+0x16/0xb0 [ 348.106067][ T7968] ? __x64_sys_fsconfig+0x20/0xc0 [ 348.106094][ T7968] do_syscall_64+0x166/0x520 [ 348.106163][ T7968] ? trace_irq_disable+0x3b/0x140 [ 348.106186][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.106207][ T7968] ? clear_bhb_loop+0x70/0xc0 [ 348.106233][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.106254][ T7968] RIP: 0033:0x7fa39dd3fb19 [ 348.106274][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.106291][ T7968] RSP: 002b:00007fa39bf8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 348.106313][ T7968] RAX: ffffffffffffffda RBX: 00007fa39dfc5fa0 RCX: 00007fa39dd3fb19 [ 348.106328][ T7968] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 348.106340][ T7968] RBP: 00007fa39ddd7b70 R08: 0000000000000000 R09: 0000000000000000 [ 348.106352][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.106365][ T7968] R13: 00007fa39dfc6038 R14: 00007fa39dfc5fa0 R15: 00007ffda69aa5c8 [ 348.106396][ T7968] [ 348.402734][ T35] usb 3-1: generic converter now attached to ttyUSB0 [ 348.430435][ T35] usb 3-1: USB disconnect, device number 5 [ 348.489829][ T35] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 348.500392][ T35] usbserial_generic 3-1:1.0: device disconnected [ 348.526482][ T7977] sctp: [Deprecated]: syz.5.536 (pid 7977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.526482][ T7977] Use struct sctp_sack_info instead [ 350.020413][ T7986] binfmt_misc: register: failed to install interpreter ./file0 [ 350.190576][ T7998] trusted_key: encrypted_key: insufficient parameters specified [ 350.324644][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.545'. [ 350.324672][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 352.398899][ T8033] trusted_key: encrypted_key: insufficient parameters specified [ 352.696500][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.559'. [ 352.696532][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'. [ 354.530031][ T8068] trusted_key: encrypted_key: insufficient parameters specified [ 356.015511][ T8091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.577'. [ 356.349011][ T8099] FAULT_INJECTION: forcing a failure. [ 356.349011][ T8099] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 356.349046][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: syz.3.581 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 356.349070][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 356.349082][ T8099] Call Trace: [ 356.349090][ T8099] [ 356.349099][ T8099] dump_stack_lvl+0xe8/0x150 [ 356.349142][ T8099] should_fail_ex+0x447/0x5e0 [ 356.349183][ T8099] _copy_to_user+0x31/0xb0 [ 356.349316][ T8099] bpf_verifier_vlog+0x606/0x900 [ 356.349360][ T8099] __btf_verifier_log+0xe2/0x140 [ 356.349399][ T8099] ? __pfx___btf_verifier_log+0x10/0x10 [ 356.349444][ T8099] btf_verifier_log_vsi+0x23b/0x3e0 [ 356.349479][ T8099] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 356.349518][ T8099] btf_datasec_check_meta+0x93a/0xad0 [ 356.349561][ T8099] btf_check_all_metas+0x359/0xa80 [ 356.349598][ T8099] btf_parse_type_sec+0xf9/0x1a60 [ 356.349626][ T8099] ? __pfx_btf_check_sec_info+0x10/0x10 [ 356.349664][ T8099] ? btf_parse_hdr+0x5f2/0x810 [ 356.349692][ T8099] ? btf_parse_str_sec+0x244/0x2f0 [ 356.349728][ T8099] btf_new_fd+0x3e0/0x8f0 [ 356.349759][ T8099] __sys_bpf+0xda7/0xe00 [ 356.349794][ T8099] ? __pfx___sys_bpf+0x10/0x10 [ 356.349824][ T8099] ? do_futex+0x458/0x4e0 [ 356.349880][ T8099] ? rcu_is_watching+0x16/0xb0 [ 356.349910][ T8099] __x64_sys_bpf+0xba/0xd0 [ 356.349936][ T8099] do_syscall_64+0x166/0x520 [ 356.349959][ T8099] ? trace_irq_disable+0x3b/0x140 [ 356.349981][ T8099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.350002][ T8099] ? clear_bhb_loop+0x70/0xc0 [ 356.350030][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.350050][ T8099] RIP: 0033:0x7efc781dfb19 [ 356.350070][ T8099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.350087][ T8099] RSP: 002b:00007efc76436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.350110][ T8099] RAX: ffffffffffffffda RBX: 00007efc78465fa0 RCX: 00007efc781dfb19 [ 356.350126][ T8099] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 356.350140][ T8099] RBP: 00007efc78277b70 R08: 0000000000000000 R09: 0000000000000000 [ 356.350152][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.350162][ T8099] R13: 00007efc78466038 R14: 00007efc78465fa0 R15: 00007ffd7dfee518 [ 356.350201][ T8099] [ 357.738115][ T8107] trusted_key: encrypted_key: insufficient parameters specified [ 360.677927][ T8117] orangefs_mount: mount request failed with -4 [ 361.640520][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 361.640540][ T36] audit: type=1326 audit(1793800182.102:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.315148][ T36] audit: type=1326 audit(1793800182.102:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.316829][ T36] audit: type=1326 audit(1793800182.102:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.316866][ T36] audit: type=1326 audit(1793800182.102:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.316905][ T36] audit: type=1326 audit(1793800182.102:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.316939][ T36] audit: type=1326 audit(1793800182.102:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.318619][ T36] audit: type=1326 audit(1793800182.102:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.320875][ T36] audit: type=1326 audit(1793800182.782:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.320921][ T36] audit: type=1326 audit(1793800182.782:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 362.321936][ T36] audit: type=1326 audit(1793800182.782:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc781dfb19 code=0x7ffc0000 [ 365.469568][ T8157] loop3: detected capacity change from 0 to 7 [ 369.138821][ T8161] orangefs_mount: mount request failed with -4 [ 369.302868][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.303082][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.371581][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.371656][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.420246][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.420340][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.422451][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.422531][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.449066][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.449161][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.449414][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.449477][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.449682][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.449745][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.449795][ T8157] ldm_validate_partition_table(): Disk read failed. [ 369.449971][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.450052][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.458576][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.458666][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.460845][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 369.460919][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 369.461076][ T8157] Dev loop3: unable to read RDB block 0 [ 369.462130][ T8157] loop3: unable to read partition table [ 369.462336][ T8157] loop3: partition table beyond EOD, truncated [ 369.462374][ T8157] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 370.520686][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 370.520711][ T36] audit: type=1326 audit(1793800190.972:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8179 comm="syz.5.606" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa39dd3fb19 code=0x0 [ 370.990335][ T7888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 371.012864][ T8188] FAULT_INJECTION: forcing a failure. [ 371.012864][ T8188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 371.012915][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 371.012941][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 371.012959][ T8188] Call Trace: [ 371.012967][ T8188] [ 371.012976][ T8188] dump_stack_lvl+0xe8/0x150 [ 371.013018][ T8188] should_fail_ex+0x447/0x5e0 [ 371.013052][ T8188] prepare_alloc_pages+0x21e/0x650 [ 371.013082][ T8188] __alloc_frozen_pages_noprof+0x1a1/0x440 [ 371.013109][ T8188] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 371.013143][ T8188] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 371.013250][ T8188] alloc_pages_mpol+0xd4/0x280 [ 371.013279][ T8188] alloc_pages_noprof+0xd2/0x2f0 [ 371.013306][ T8188] pte_alloc_one+0x22/0x380 [ 371.013336][ T8188] __pte_alloc+0x25/0x1a0 [ 371.013352][ T8188] ? alloc_new_pud+0x185/0x300 [ 371.013378][ T8188] move_page_tables+0x1a44/0x1da0 [ 371.013419][ T8188] ? move_page_tables+0x675/0x1da0 [ 371.013451][ T8188] ? __pfx_move_page_tables+0x10/0x10 [ 371.013486][ T8188] ? move_vma+0x982/0x1ce0 [ 371.013521][ T8188] move_vma+0xce7/0x1ce0 [ 371.013568][ T8188] ? __pfx_move_vma+0x10/0x10 [ 371.013671][ T8188] ? arch_get_unmapped_area_topdown+0x269/0xc50 [ 371.013709][ T8188] ? mtree_load+0x12a/0x780 [ 371.013823][ T8188] ? mtree_load+0x12a/0x780 [ 371.013851][ T8188] ? __futex_wait+0x3c9/0x480 [ 371.013887][ T8188] ? cap_mmap_addr+0xaa/0xf0 [ 371.013916][ T8188] ? bpf_lsm_mmap_addr+0x9/0x50 [ 371.013938][ T8188] ? security_mmap_addr+0x71/0x240 [ 371.013973][ T8188] mremap_to+0x851/0x950 [ 371.014005][ T8188] ? check_prep_vma+0x817/0xcc0 [ 371.014030][ T8188] ? __pfx_mremap_to+0x10/0x10 [ 371.014064][ T8188] ? __pfx_check_prep_vma+0x10/0x10 [ 371.014127][ T8188] ? mas_find+0x645/0xcb0 [ 371.014158][ T8188] __se_sys_mremap+0xbc9/0x1260 [ 371.014209][ T8188] ? __pfx___se_sys_mremap+0x10/0x10 [ 371.014260][ T8188] ? __x64_sys_mremap+0x20/0xc0 [ 371.014286][ T8188] do_syscall_64+0x166/0x520 [ 371.014308][ T8188] ? trace_irq_disable+0x3b/0x140 [ 371.014329][ T8188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.014348][ T8188] ? clear_bhb_loop+0x70/0xc0 [ 371.014375][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.014406][ T8188] RIP: 0033:0x7fdae9c8fb19 [ 371.014427][ T8188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.014447][ T8188] RSP: 002b:00007fdae7ede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 371.014473][ T8188] RAX: ffffffffffffffda RBX: 00007fdae9f15fa0 RCX: 00007fdae9c8fb19 [ 371.014487][ T8188] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 371.014499][ T8188] RBP: 00007fdae9d27b70 R08: 0000200000ffd000 R09: 0000000000000000 [ 371.014512][ T8188] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 371.014524][ T8188] R13: 00007fdae9f16038 R14: 00007fdae9f15fa0 R15: 00007ffe052ebf38 [ 371.014555][ T8188] [ 371.182197][ T7888] usb 5-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 371.183750][ T7888] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 371.183780][ T7888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 371.183801][ T7888] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 371.186991][ T7888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.187017][ T7888] usb 5-1: Product: syz [ 371.187031][ T7888] usb 5-1: Manufacturer: syz [ 371.187045][ T7888] usb 5-1: SerialNumber: syz [ 371.221436][ T8174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 371.228009][ T7888] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 371.228039][ T7888] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 371.228085][ T7888] usbserial_generic 5-1:1.0: generic converter detected [ 371.371629][ T7888] usb 5-1: generic converter now attached to ttyUSB0 [ 372.779935][ T7888] usb 5-1: USB disconnect, device number 10 [ 372.900620][ T7888] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 372.902129][ T7888] usbserial_generic 5-1:1.0: device disconnected [ 376.610166][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.5.616'. [ 376.610200][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.616'. [ 378.768728][ T1348] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.768800][ T1348] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.940637][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.629'. [ 378.940669][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 380.810804][ T8270] orangefs_mount: mount request failed with -4 [ 380.826746][ T8276] FAULT_INJECTION: forcing a failure. [ 380.826746][ T8276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 380.826779][ T8276] CPU: 1 UID: 0 PID: 8276 Comm: syz.1.634 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.826802][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 380.826814][ T8276] Call Trace: [ 380.826821][ T8276] [ 380.826830][ T8276] dump_stack_lvl+0xe8/0x150 [ 380.826869][ T8276] should_fail_ex+0x447/0x5e0 [ 380.826901][ T8276] prepare_alloc_pages+0x21e/0x650 [ 380.826929][ T8276] __alloc_frozen_pages_noprof+0x1a1/0x440 [ 380.826951][ T8276] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 380.826973][ T8276] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 380.827008][ T8276] ? policy_nodemask+0x31b/0x980 [ 380.827039][ T8276] alloc_pages_mpol+0xd4/0x280 [ 380.827067][ T8276] alloc_pages_noprof+0xd2/0x2f0 [ 380.827096][ T8276] kimage_alloc_pages+0xbe/0x3c0 [ 380.827123][ T8276] kimage_alloc_control_pages+0x49b/0xbc0 [ 380.827157][ T8276] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 380.827189][ T8276] do_kexec_load+0x492/0x7c0 [ 380.827221][ T8276] ? __pfx_do_kexec_load+0x10/0x10 [ 380.827249][ T8276] ? _copy_from_user+0x94/0xb0 [ 380.827279][ T8276] __se_sys_kexec_load+0x134/0x160 [ 380.827306][ T8276] do_syscall_64+0x166/0x520 [ 380.827330][ T8276] ? trace_irq_disable+0x3b/0x140 [ 380.827350][ T8276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.827379][ T8276] ? clear_bhb_loop+0x70/0xc0 [ 380.827404][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.827422][ T8276] RIP: 0033:0x7fdae9c8fb19 [ 380.827440][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.827456][ T8276] RSP: 002b:00007fdae7ede028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 380.827477][ T8276] RAX: ffffffffffffffda RBX: 00007fdae9f15fa0 RCX: 00007fdae9c8fb19 [ 380.827492][ T8276] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 380.827506][ T8276] RBP: 00007fdae9d27b70 R08: 0000000000000000 R09: 0000000000000000 [ 380.827519][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.827532][ T8276] R13: 00007fdae9f16038 R14: 00007fdae9f15fa0 R15: 00007ffe052ebf38 [ 380.827566][ T8276] [ 380.827605][ T8276] kexec: Could not allocate control_code_buffer [ 382.069084][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.261243][ T8294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.399622][ T8299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 382.399645][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 384.580410][ T8323] orangefs_mount: mount request failed with -4 [ 385.158735][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.653'. [ 385.158756][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'. [ 386.716914][ T8354] device-mapper: table: 248:1: multipath: queue-length ps: incorrect number of arguments (-EINVAL) [ 386.716931][ T8354] device-mapper: ioctl: error adding target to table [ 388.550624][ T8364] orangefs_mount: mount request failed with -4 [ 388.710312][ T5757] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 389.211195][ T5757] usb 5-1: device descriptor read/64, error -71 [ 389.884869][ T5757] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 390.140256][ T5757] usb 5-1: device descriptor read/64, error -71 [ 390.262311][ T5757] usb usb5-port1: attempt power cycle [ 390.351344][ T202] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 390.611200][ T202] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 390.613268][ T202] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 390.613388][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.920837][ T202] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 391.234950][ T202] usb 2-1: USB disconnect, device number 8 [ 394.314384][ T8411] orangefs_mount: mount request failed with -4 [ 396.270291][ T202] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 396.451771][ T202] usb 6-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 396.473461][ T202] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 396.473496][ T202] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 396.478316][ T8431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.688'. [ 396.478337][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 396.520334][ T202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.520362][ T202] usb 6-1: Product: syz [ 396.520377][ T202] usb 6-1: Manufacturer: syz [ 396.520391][ T202] usb 6-1: SerialNumber: syz [ 396.595881][ T8423] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 396.596007][ T8423] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 396.626420][ T202] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 396.626446][ T202] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 396.626493][ T202] usbserial_generic 6-1:1.0: generic converter detected [ 396.672267][ T202] usb 6-1: generic converter now attached to ttyUSB0 [ 396.866778][ T5757] usb 6-1: USB disconnect, device number 2 [ 397.015515][ T5757] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 397.020507][ T5757] usbserial_generic 6-1:1.0: device disconnected [ 397.816996][ T8448] FAULT_INJECTION: forcing a failure. [ 397.816996][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 397.817027][ T8448] CPU: 0 UID: 0 PID: 8448 Comm: syz.2.695 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 397.817050][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 397.817062][ T8448] Call Trace: [ 397.817069][ T8448] [ 397.817078][ T8448] dump_stack_lvl+0xe8/0x150 [ 397.817118][ T8448] should_fail_ex+0x447/0x5e0 [ 397.817152][ T8448] should_failslab+0xa8/0x100 [ 397.817181][ T8448] __kmalloc_noprof+0xf6/0x790 [ 397.817202][ T8448] ? security_inode_init_security+0x102/0x3e0 [ 397.817227][ T8448] ? security_inode_init_security+0x102/0x3e0 [ 397.817259][ T8448] security_inode_init_security+0x102/0x3e0 [ 397.817285][ T8448] ? __pfx_shmem_initxattrs+0x10/0x10 [ 397.817309][ T8448] ? __pfx_security_inode_init_security+0x10/0x10 [ 397.817332][ T8448] ? set_cached_acl+0xd2/0x180 [ 397.817356][ T8448] ? simple_acl_create+0x184/0x1b0 [ 397.817389][ T8448] shmem_mknod+0x1ea/0x340 [ 397.817415][ T8448] shmem_mkdir+0x33/0x70 [ 397.817437][ T8448] vfs_mkdir+0x417/0x670 [ 397.817470][ T8448] filename_mkdirat+0x288/0x560 [ 397.817500][ T8448] ? __pfx_filename_mkdirat+0x10/0x10 [ 397.817528][ T8448] ? do_getname+0x151/0x250 [ 397.817559][ T8448] __se_sys_mkdirat+0x35/0x150 [ 397.817586][ T8448] do_syscall_64+0x166/0x520 [ 397.817609][ T8448] ? trace_irq_disable+0x3b/0x140 [ 397.817633][ T8448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.817655][ T8448] ? clear_bhb_loop+0x70/0xc0 [ 397.817681][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.817710][ T8448] RIP: 0033:0x7f477b0bfb19 [ 397.817730][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.817748][ T8448] RSP: 002b:00007f477930e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 397.817770][ T8448] RAX: ffffffffffffffda RBX: 00007f477b345fa0 RCX: 00007f477b0bfb19 [ 397.817786][ T8448] RDX: 00000000000001c0 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 397.817800][ T8448] RBP: 00007f477b157b70 R08: 0000000000000000 R09: 0000000000000000 [ 397.817814][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.817826][ T8448] R13: 00007f477b346038 R14: 00007f477b345fa0 R15: 00007ffe579434c8 [ 397.817860][ T8448] [ 398.180290][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 398.342254][ T10] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 398.402879][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 398.402980][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.675751][ T10] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 398.997572][ T10] usb 6-1: USB disconnect, device number 3 [ 399.029604][ T8449] orangefs_mount: mount request failed with -4 [ 399.502315][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.701'. [ 399.502337][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 402.541489][ T8492] orangefs_mount: mount request failed with -4 [ 402.731309][ T8504] binfmt_misc: register: failed to install interpreter ./file0 [ 403.453028][ T8526] No source specified [ 404.405889][ T8535] syzkaller0: entered promiscuous mode [ 404.405917][ T8535] syzkaller0: entered allmulticast mode [ 404.695114][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.728'. [ 405.393637][ T8540] orangefs_mount: mount request failed with -4 [ 405.621534][ T8547] binfmt_misc: register: failed to install interpreter ./file0 [ 406.091471][ T8570] No source specified [ 407.116739][ T8581] tmpfs: Bad value for 'mpol' [ 408.321294][ T8587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.568176][ T8587] bond1 (unregistering): Released all slaves [ 410.512922][ T8596] tmpfs: Bad value for 'mpol' [ 411.805145][ T8600] binfmt_misc: register: failed to install interpreter ./file0 [ 411.920735][ T8606] syz.3.747 (8606) used greatest stack depth: 17480 bytes left [ 412.364103][ T8616] No source specified [ 413.180322][ T5623] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 413.354411][ T5623] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 413.359009][ T5623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.377747][ T5623] usb 3-1: config 0 descriptor?? [ 414.586476][ T8626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.408021][ T5623] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 416.487233][ T5623] [drm:udl_init] *ERROR* Selecting channel failed [ 416.555157][ T8626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.941971][ T8636] ip6_vti0: entered promiscuous mode [ 416.947630][ T8645] binfmt_misc: register: failed to install interpreter ./file0 [ 416.977746][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 417.307264][ T5623] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 417.307292][ T5623] [drm] Initialized udl on minor 1 [ 417.324997][ T5623] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 417.339722][ T5623] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 417.473330][ T8652] capability: warning: `syz.2.761' uses deprecated v2 capabilities in a way that may be insecure [ 417.505586][ T5623] usb 3-1: USB disconnect, device number 6 [ 417.925534][ T8661] No source specified [ 418.556318][ T8652] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 418.556349][ T8652] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 418.742121][ T8666] FAULT_INJECTION: forcing a failure. [ 418.742121][ T8666] name failslab, interval 1, probability 0, space 0, times 0 [ 418.742150][ T8666] CPU: 1 UID: 0 PID: 8666 Comm: syz.4.765 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 418.742169][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 418.742179][ T8666] Call Trace: [ 418.742185][ T8666] [ 418.742192][ T8666] dump_stack_lvl+0xe8/0x150 [ 418.742226][ T8666] should_fail_ex+0x447/0x5e0 [ 418.742252][ T8666] should_failslab+0xa8/0x100 [ 418.742272][ T8666] ? security_inode_alloc+0x39/0x310 [ 418.742291][ T8666] kmem_cache_alloc_noprof+0x99/0x680 [ 418.742318][ T8666] ? security_inode_alloc+0x39/0x310 [ 418.742341][ T8666] security_inode_alloc+0x39/0x310 [ 418.742361][ T8666] inode_init_always_gfp+0x983/0xd40 [ 418.742390][ T8666] ? __pfx_proc_alloc_inode+0x10/0x10 [ 418.742410][ T8666] alloc_inode+0x82/0x1b0 [ 418.742432][ T8666] new_inode+0x1f/0x170 [ 418.742453][ T8666] ? proc_pid_make_inode+0x19/0x130 [ 418.742478][ T8666] proc_pid_make_inode+0x21/0x130 [ 418.742504][ T8666] proc_pident_instantiate+0x6d/0x2a0 [ 418.742532][ T8666] proc_pident_lookup+0x1b7/0x270 [ 418.742562][ T8666] __lookup_slow+0x1fb/0x2f0 [ 418.742592][ T8666] lookup_slow+0x59/0x80 [ 418.742617][ T8666] link_path_walk+0xd83/0x19a0 [ 418.742662][ T8666] path_openat+0x1bc/0x2100 [ 418.742697][ T8666] do_file_open+0x23e/0x4a0 [ 418.742712][ T8666] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.742815][ T8666] ? __pfx_do_file_open+0x10/0x10 [ 418.742842][ T8666] ? __pfx_kfree_link+0x10/0x10 [ 418.742888][ T8666] ? alloc_fd+0x6b2/0x760 [ 418.742923][ T8666] do_sys_openat2+0x115/0x200 [ 418.742945][ T8666] ? __se_sys_futex+0x3a8/0x450 [ 418.742970][ T8666] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.742998][ T8666] ? rcu_is_watching+0x16/0xb0 [ 418.743025][ T8666] __x64_sys_openat+0x138/0x170 [ 418.743054][ T8666] do_syscall_64+0x166/0x520 [ 418.743077][ T8666] ? trace_irq_disable+0x3b/0x140 [ 418.743096][ T8666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.743114][ T8666] ? clear_bhb_loop+0x70/0xc0 [ 418.743138][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.743155][ T8666] RIP: 0033:0x7fd06a77034e [ 418.743172][ T8666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.743188][ T8666] RSP: 002b:00007fd068a05ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.743209][ T8666] RAX: ffffffffffffffda RBX: 00007fd068a066c0 RCX: 00007fd06a77034e [ 418.743223][ T8666] RDX: 0000000000000002 RSI: 00007fd068a05f90 RDI: ffffffffffffff9c [ 418.743237][ T8666] RBP: 00007fd06a847b70 R08: 0000000000000000 R09: 0000000000000000 [ 418.743249][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.743259][ T8666] R13: 00007fd06aa36038 R14: 00007fd06aa35fa0 R15: 00007ffe43927668 [ 418.743289][ T8666] [ 419.138438][ T5753] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 419.388754][ T5753] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 419.393345][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.880279][ T35] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 419.969915][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 420.100295][ T5753] usb 2-1: config 0 descriptor?? [ 420.340274][ T35] usb 5-1: device descriptor read/64, error -32 [ 420.717487][ T5753] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 420.717973][ T5753] [drm:udl_init] *ERROR* Selecting channel failed [ 420.807893][ T5753] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 420.807920][ T5753] [drm] Initialized udl on minor 1 [ 420.815310][ T5753] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.815784][ T5753] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 420.857539][ T5753] usb 2-1: USB disconnect, device number 9 [ 420.873504][ T5623] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.905643][ T35] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 421.254745][ T8687] binfmt_misc: register: failed to install interpreter ./file0 [ 421.294820][ T35] usb 5-1: not running at top speed; connect to a high speed hub [ 421.294863][ T35] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 421.297946][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.335957][ T35] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 421.335986][ T35] usb 5-1: Product: syz [ 421.336001][ T35] usb 5-1: Manufacturer: syz [ 421.391245][ T35] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 421.597575][ T35] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 421.598582][ T35] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 421.598715][ T35] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 421.627532][ T35] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 421.660818][ T35] usb 5-1: USB disconnect, device number 15 [ 423.074730][ T8707] No source specified [ 424.400531][ T5754] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 424.571366][ T5754] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 424.573856][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.500180][ T5754] usb 5-1: config 0 descriptor?? [ 425.629249][ T8727] binfmt_misc: register: failed to install interpreter ./file0 [ 426.028011][ T5754] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 426.028418][ T5754] [drm:udl_init] *ERROR* Selecting channel failed [ 426.109166][ T5754] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 426.109204][ T5754] [drm] Initialized udl on minor 1 [ 426.191720][ T5754] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 426.192253][ T5754] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 426.197284][ T5754] usb 5-1: USB disconnect, device number 16 [ 428.297637][ T4925] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 428.725481][ T8765] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 428.725511][ T8765] block device autoloading is deprecated and will be removed. [ 429.840614][ T8766] binfmt_misc: register: failed to install interpreter ./file0 [ 430.751351][ T8759] [ 430.753815][ T8759] ====================================================== [ 430.760830][ T8759] WARNING: possible circular locking dependency detected [ 430.767892][ T8759] syzkaller #0 Not tainted [ 430.772317][ T8759] ------------------------------------------------------ [ 430.779454][ T8759] syz.4.795/8759 is trying to acquire lock: [ 430.785436][ T8759] ffffffff901acf60 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5f0/0x950 [ 430.795651][ T8759] [ 430.795651][ T8759] but task is already holding lock: [ 430.803038][ T8759] ffff88803ecadd60 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xf8/0x700 [ 430.812751][ T8759] [ 430.812751][ T8759] which lock already depends on the new lock. [ 430.812751][ T8759] [ 430.823171][ T8759] [ 430.823171][ T8759] the existing dependency chain (in reverse order) is: [ 430.832205][ T8759] [ 430.832205][ T8759] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 430.840926][ T8759] down_write+0x35/0x50 [ 430.845662][ T8759] configfs_depend_item_unlocked+0x153/0x420 [ 430.852176][ T8759] usbg_make_tpg+0x1e0/0x550 [ 430.857433][ T8759] target_fabric_make_tpg+0xa8/0x6d0 [ 430.863328][ T8759] configfs_mkdir+0x4f6/0x9e0 [ 430.868595][ T8759] vfs_mkdir+0x417/0x670 [ 430.873384][ T8759] filename_mkdirat+0x288/0x560 [ 430.878774][ T8759] __se_sys_mkdirat+0x35/0x150 [ 430.884076][ T8759] do_syscall_64+0x166/0x520 [ 430.889194][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.895630][ T8759] [ 430.895630][ T8759] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 430.903537][ T8759] mutex_lock_nested+0x55/0x1d0 [ 430.908939][ T8759] tcm_alloc_inst+0x65/0x1a0 [ 430.914080][ T8759] usb_get_function_instance+0xe3/0x2f0 [ 430.920264][ T8759] function_make+0x127/0x360 [ 430.925387][ T8759] configfs_mkdir+0x4f6/0x9e0 [ 430.930624][ T8759] vfs_mkdir+0x417/0x670 [ 430.935406][ T8759] filename_mkdirat+0x288/0x560 [ 430.940792][ T8759] __se_sys_mkdirat+0x35/0x150 [ 430.946087][ T8759] do_syscall_64+0x166/0x520 [ 430.951207][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.957639][ T8759] [ 430.957639][ T8759] -> #1 (func_lock){+.+.}-{4:4}: [ 430.964756][ T8759] mutex_lock_nested+0x55/0x1d0 [ 430.970153][ T8759] usb_get_function_instance+0x2e/0x2f0 [ 430.976231][ T8759] function_make+0x127/0x360 [ 430.981348][ T8759] configfs_mkdir+0x4f6/0x9e0 [ 430.986545][ T8759] vfs_mkdir+0x417/0x670 [ 430.991320][ T8759] filename_mkdirat+0x288/0x560 [ 430.996702][ T8759] __se_sys_mkdirat+0x35/0x150 [ 431.001982][ T8759] do_syscall_64+0x166/0x520 [ 431.007094][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.013524][ T8759] [ 431.013524][ T8759] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 431.021764][ T8759] __lock_acquire+0x164c/0x2de0 [ 431.027164][ T8759] lock_acquire+0x115/0x350 [ 431.032202][ T8759] mutex_lock_nested+0x55/0x1d0 [ 431.037630][ T8759] configfs_rmdir+0x5f0/0x950 [ 431.042851][ T8759] vfs_rmdir+0x3e9/0x700 [ 431.047628][ T8759] filename_rmdir+0x276/0x510 [ 431.052853][ T8759] __se_sys_rmdir+0x2e/0x140 [ 431.057998][ T8759] do_syscall_64+0x166/0x520 [ 431.063119][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.069527][ T8759] [ 431.069527][ T8759] other info that might help us debug this: [ 431.069527][ T8759] [ 431.079754][ T8759] Chain exists of: [ 431.079754][ T8759] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#27 [ 431.079754][ T8759] [ 431.094706][ T8759] Possible unsafe locking scenario: [ 431.094706][ T8759] [ 431.102167][ T8759] CPU0 CPU1 [ 431.107541][ T8759] ---- ---- [ 431.112913][ T8759] lock(&sb->s_type->i_mutex_key#27); [ 431.118365][ T8759] lock(tpg_instances_lock); [ 431.125580][ T8759] lock(&sb->s_type->i_mutex_key#27); [ 431.133576][ T8759] lock(gadget_subsys.su_mutex); [ 431.138592][ T8759] [ 431.138592][ T8759] *** DEADLOCK *** [ 431.138592][ T8759] [ 431.146737][ T8759] locks held by syz.4.795/8759: 3, last CPU#0: [ 431.152913][ T8759] #0: ffff88801e7ec528 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 431.162145][ T8759] #1: ffff888064e73220 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x1c4/0x510 [ 431.173464][ T8759] #2: ffff88803ecadd60 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xf8/0x700 [ 431.183576][ T8759] [ 431.183576][ T8759] stack backtrace: [ 431.189483][ T8759] CPU: 0 UID: 0 PID: 8759 Comm: syz.4.795 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 431.199211][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 431.209262][ T8759] Call Trace: [ 431.212543][ T8759] [ 431.215479][ T8759] dump_stack_lvl+0xe8/0x150 [ 431.220076][ T8759] print_circular_bug+0x2e2/0x300 [ 431.225102][ T8759] check_noncircular+0x12f/0x150 [ 431.230057][ T8759] __lock_acquire+0x164c/0x2de0 [ 431.234912][ T8759] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 431.240731][ T8759] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 431.246534][ T8759] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 431.251839][ T8759] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 431.257656][ T8759] lock_acquire+0x115/0x350 [ 431.262181][ T8759] ? configfs_rmdir+0x5f0/0x950 [ 431.267034][ T8759] ? configfs_rmdir+0x5f0/0x950 [ 431.271906][ T8759] ? configfs_rmdir+0x5f0/0x950 [ 431.276757][ T8759] mutex_lock_nested+0x55/0x1d0 [ 431.281629][ T8759] ? configfs_rmdir+0x5f0/0x950 [ 431.286477][ T8759] ? fast_dput+0x481/0x690 [ 431.290906][ T8759] configfs_rmdir+0x5f0/0x950 [ 431.295600][ T8759] vfs_rmdir+0x3e9/0x700 [ 431.299851][ T8759] ? bpf_lsm_path_rmdir+0x9/0x20 [ 431.304815][ T8759] filename_rmdir+0x276/0x510 [ 431.309496][ T8759] ? __pfx_filename_rmdir+0x10/0x10 [ 431.314795][ T8759] ? do_getname+0x151/0x250 [ 431.319321][ T8759] __se_sys_rmdir+0x2e/0x140 [ 431.323926][ T8759] do_syscall_64+0x166/0x520 [ 431.328520][ T8759] ? trace_irq_disable+0x3b/0x140 [ 431.333549][ T8759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.339750][ T8759] ? clear_bhb_loop+0x70/0xc0 [ 431.344457][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.350366][ T8759] RIP: 0033:0x7fd06a7afb19 [ 431.354803][ T8759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.374418][ T8759] RSP: 002b:00007fd0689e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 431.382850][ T8759] RAX: ffffffffffffffda RBX: 00007fd06aa36090 RCX: 00007fd06a7afb19 [ 431.390843][ T8759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000740 [ 431.398825][ T8759] RBP: 00007fd06a847b70 R08: 0000000000000000 R09: 0000000000000000 [ 431.406813][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.414795][ T8759] R13: 00007fd06aa36128 R14: 00007fd06aa36090 R15: 00007ffe43927668 [ 431.422799][ T8759] [ 440.201080][ T1348] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.201178][ T1348] ieee802154 phy1 wpan1: encryption failed: -22