last executing test programs: 3m0.516503161s ago: executing program 3 (id=92): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x18003, 0x0) fdatasync(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth0_macvtap\x00', 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 2m59.793820608s ago: executing program 3 (id=96): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe5e9, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) 2m58.718957664s ago: executing program 3 (id=102): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket(0x28, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m58.624720726s ago: executing program 3 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m58.50652147s ago: executing program 3 (id=104): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040010) 2m58.134702598s ago: executing program 3 (id=108): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x20040010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000480)}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/3, 0x3}], 0x2, 0x0, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m42.921396675s ago: executing program 32 (id=108): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x20040010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000480)}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/3, 0x3}], 0x2, 0x0, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.414150295s ago: executing program 2 (id=2124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, 0x0) ioctl(r0, 0xc138fd04, &(0x7f0000000700)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70") 2.251666123s ago: executing program 2 (id=2125): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.283461279s ago: executing program 2 (id=2131): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1.011180516s ago: executing program 4 (id=2134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1f, 0x0, &(0x7f00000001c0)) 1.010902215s ago: executing program 1 (id=2135): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x7, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 865.56451ms ago: executing program 4 (id=2137): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write(r0, &(0x7f0000001e00)="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", 0x171) close(r0) 863.102894ms ago: executing program 2 (id=2138): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0xd000) 748.942835ms ago: executing program 1 (id=2140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r1, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 691.079967ms ago: executing program 4 (id=2141): socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) open$dir(&(0x7f0000000580)='./dev/rfcomm0\x00', 0x40000, 0x235) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 604.686357ms ago: executing program 1 (id=2142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r1, 0x6}, 0x8) 528.269334ms ago: executing program 1 (id=2144): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000002925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 441.933296ms ago: executing program 1 (id=2146): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0xff, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000940)={r1, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000a00)=0x84) 403.05408ms ago: executing program 0 (id=2147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r2, 0x401, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xed}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000095}, 0x24000084) 374.184307ms ago: executing program 1 (id=2148): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f00000001c0)=[{0xd0, 0x8801, 0x0, 0x0}, {0x4, 0x800, 0x0, 0x0}], 0x2}) 349.816919ms ago: executing program 0 (id=2149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, 0x0, 0x0) 303.087992ms ago: executing program 0 (id=2150): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000083b00000008000300", @ANYRES32=r3, @ANYBLOB="25003300d00000000802110000"], 0x4c}}, 0x0) 235.601435ms ago: executing program 0 (id=2151): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 221.654823ms ago: executing program 4 (id=2152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x40) setresuid(0x0, 0xee00, 0x0) write(r0, &(0x7f00000004c0)='r', 0x1) 175.481729ms ago: executing program 2 (id=2153): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x7c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @device_a, @initial, {0xd, 0x4}}, 0x0, @random=0x3, 0x200, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x6, 0x6, 0x6}}, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x3, 0x0, {0x7fffffff, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x300, 0x10001, 0x80}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x8, 0x21}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 157.471355ms ago: executing program 4 (id=2154): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 130.280696ms ago: executing program 2 (id=2155): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 85.854313ms ago: executing program 0 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000002a40)=""/72, 0x48}, {&(0x7f0000000080)=""/35, 0x23}], 0x4}, 0x400000}], 0x1, 0x22000, 0x0) 23.555769ms ago: executing program 4 (id=2157): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c840) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 0s ago: executing program 0 (id=2158): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x2c, r0, 0x5, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x24000800) kernel console output (not intermixed with test programs): swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.858795][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.860200][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.865464][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.876202][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.877846][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.878483][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.879397][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.879854][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.888444][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.889048][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.889375][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.892945][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.893618][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.898444][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.929273][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.929509][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.937994][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.939099][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.949658][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.951534][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.371651][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.371812][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.372006][ T5609] bridge_slave_0: entered allmulticast mode [ 78.374934][ T5609] bridge_slave_0: entered promiscuous mode [ 78.431893][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.432063][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.432181][ T5609] bridge_slave_1: entered allmulticast mode [ 78.433584][ T5609] bridge_slave_1: entered promiscuous mode [ 78.505098][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.536826][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.557801][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.557948][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.558035][ T5610] bridge_slave_0: entered allmulticast mode [ 78.559219][ T5610] bridge_slave_0: entered promiscuous mode [ 78.563431][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.563528][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.563652][ T5610] bridge_slave_1: entered allmulticast mode [ 78.565279][ T5610] bridge_slave_1: entered promiscuous mode [ 78.635755][ T5609] team0: Port device team_slave_0 added [ 78.636053][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.636204][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.636459][ T5607] bridge_slave_0: entered allmulticast mode [ 78.638634][ T5607] bridge_slave_0: entered promiscuous mode [ 78.642407][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.642503][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.642641][ T5607] bridge_slave_1: entered allmulticast mode [ 78.644140][ T5607] bridge_slave_1: entered promiscuous mode [ 78.689483][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.692739][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.709132][ T5609] team0: Port device team_slave_1 added [ 78.759815][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.760029][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.760123][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.760236][ T5608] bridge_slave_0: entered allmulticast mode [ 78.761652][ T5608] bridge_slave_0: entered promiscuous mode [ 78.767055][ T5610] team0: Port device team_slave_0 added [ 78.768821][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.768835][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.768858][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.774505][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.790284][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.790381][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.790495][ T5608] bridge_slave_1: entered allmulticast mode [ 78.793033][ T5608] bridge_slave_1: entered promiscuous mode [ 78.796932][ T5610] team0: Port device team_slave_1 added [ 78.797803][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.797814][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.797838][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.860865][ T5607] team0: Port device team_slave_0 added [ 78.902433][ T5607] team0: Port device team_slave_1 added [ 78.906084][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.907602][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.907615][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.907638][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.912004][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.956149][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.956167][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.956192][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.980740][ T5609] hsr_slave_0: entered promiscuous mode [ 78.981869][ T5609] hsr_slave_1: entered promiscuous mode [ 79.006223][ T5616] Bluetooth: hci0: command tx timeout [ 79.006634][ T5616] Bluetooth: hci2: command tx timeout [ 79.006751][ T5616] Bluetooth: hci1: command tx timeout [ 79.052171][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.052187][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.052217][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.083024][ T5613] Bluetooth: hci3: command tx timeout [ 79.084493][ T5608] team0: Port device team_slave_0 added [ 79.109499][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.109514][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.109538][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.118111][ T5610] hsr_slave_0: entered promiscuous mode [ 79.119140][ T5610] hsr_slave_1: entered promiscuous mode [ 79.119824][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 79.119917][ T5610] Cannot create hsr debugfs directory [ 79.141550][ T5608] team0: Port device team_slave_1 added [ 79.260098][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.260119][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.260140][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.301738][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.301754][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.301778][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.385232][ T5607] hsr_slave_0: entered promiscuous mode [ 79.385897][ T5607] hsr_slave_1: entered promiscuous mode [ 79.386296][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 79.386317][ T5607] Cannot create hsr debugfs directory [ 79.474694][ T5608] hsr_slave_0: entered promiscuous mode [ 79.475311][ T5608] hsr_slave_1: entered promiscuous mode [ 79.475682][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 79.475694][ T5608] Cannot create hsr debugfs directory [ 79.716297][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.720900][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.738913][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.748984][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.749877][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.754276][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.781656][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.791232][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.840731][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.850432][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.853123][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.867483][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.875736][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.885351][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.893884][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.904047][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.978395][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.980728][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.981467][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.993891][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.012399][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.025407][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.043770][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.047847][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.119308][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.122288][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.123071][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.125776][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.142550][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.157402][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.161555][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.170508][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.197162][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.252316][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.273557][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.298677][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.298760][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.326073][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.326130][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.367392][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.405041][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.405129][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.445620][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.445743][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.481375][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.514729][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.545834][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.564261][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.591120][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.591222][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.621225][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.621329][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.623787][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.623888][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.661874][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.661932][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.077554][ T5613] Bluetooth: hci1: command tx timeout [ 81.077588][ T5613] Bluetooth: hci2: command tx timeout [ 81.077610][ T5613] Bluetooth: hci0: command tx timeout [ 81.156800][ T5616] Bluetooth: hci3: command tx timeout [ 81.277061][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.415261][ T5609] veth0_vlan: entered promiscuous mode [ 81.432145][ T5609] veth1_vlan: entered promiscuous mode [ 81.533402][ T5609] veth0_macvtap: entered promiscuous mode [ 81.561177][ T5609] veth1_macvtap: entered promiscuous mode [ 81.624126][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.636074][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.659600][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.709942][ T1132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.710270][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.710307][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.710342][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.845792][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.972241][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.074583][ T5610] veth0_vlan: entered promiscuous mode [ 82.081263][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.081290][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.150040][ T5610] veth1_vlan: entered promiscuous mode [ 82.155223][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.155244][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.202415][ T5608] veth0_vlan: entered promiscuous mode [ 82.218642][ T5607] veth0_vlan: entered promiscuous mode [ 82.249441][ T5608] veth1_vlan: entered promiscuous mode [ 82.252268][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.254725][ T5607] veth1_vlan: entered promiscuous mode [ 82.322771][ T5610] veth0_macvtap: entered promiscuous mode [ 82.343725][ T5610] veth1_macvtap: entered promiscuous mode [ 82.394472][ T5608] veth0_macvtap: entered promiscuous mode [ 82.425120][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.425608][ T5608] veth1_macvtap: entered promiscuous mode [ 82.441022][ T5607] veth0_macvtap: entered promiscuous mode [ 82.472892][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.473279][ T5607] veth1_macvtap: entered promiscuous mode [ 82.541648][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.567709][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.567870][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.567910][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.607887][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.608944][ T1132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.619402][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.688012][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.776897][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.776921][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.933083][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.933111][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.028259][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.028278][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.037281][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037688][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037723][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037755][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037786][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037817][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037848][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037879][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.114187][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.114224][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.159736][ T5616] Bluetooth: hci0: command tx timeout [ 83.159769][ T5616] Bluetooth: hci2: command tx timeout [ 83.159792][ T5616] Bluetooth: hci1: command tx timeout [ 83.188508][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.188527][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.239961][ T5613] Bluetooth: hci3: command tx timeout [ 83.301880][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.301913][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.419716][ T5766] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 83.425277][ T153] IPVS: starting estimator thread 0... [ 83.507028][ T5772] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.516562][ T5769] IPVS: using max 30 ests per chain, 72000 per kthread [ 83.617771][ T5782] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.276268][ T5786] : renamed from vlan0 (while UP) [ 84.870113][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 85.236757][ T5613] Bluetooth: hci1: command tx timeout [ 85.236790][ T5613] Bluetooth: hci0: command tx timeout [ 85.329089][ T5616] Bluetooth: hci3: command tx timeout [ 85.330653][ T5822] CIFS: Attempting to mount //127.0.0.1/share [ 85.428147][ T5822] CIFS: VFS: cifs_mount failed w/return code = -112 [ 85.535425][ T5831] Bluetooth: ISO socket layer initialized [ 85.562223][ T5778] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.656437][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.720983][ T5778] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 85.724816][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.724843][ T5778] usb 3-1: Product: syz [ 85.724857][ T5778] usb 3-1: Manufacturer: syz [ 85.724871][ T5778] usb 3-1: SerialNumber: syz [ 85.806511][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 85.808089][ T10] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 85.809465][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 85.809494][ T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 85.809515][ T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.809542][ T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 85.811332][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.811354][ T10] usb 4-1: Product: syz [ 85.811368][ T10] usb 4-1: Manufacturer: syz [ 85.811390][ T10] usb 4-1: SerialNumber: syz [ 85.822432][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 85.827898][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input5 [ 86.032038][ T5834] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.051007][ T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 86.051022][ T10] (id 0x00) [ 86.120761][ T10] rc_core: IR keymap rc-imon-pad not found [ 86.120781][ T10] Registered IR keymap rc-empty [ 86.123364][ T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 86.123380][ T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 86.177904][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 86.177962][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 86.250557][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 86.253422][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input6 [ 86.292231][ T10] imon 4-1:155.0: iMON device (15c2:ffdc) on usb<4:2> initialized [ 86.362610][ T5841] X.509: Couldn't decode AuthKeyIdentifier [ 86.623499][ T32] audit: type=1800 audit(1791300251.371:2): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29" name=08 dev="sda1" ino=2043 res=0 errno=-22 [ 86.848757][ T46] cfg80211: failed to load regulatory.db [ 87.262143][ T5853] imon:send_packet: task interrupted [ 87.262205][ T5853] imon:send_packet: packet tx failed (-512) [ 87.262534][ T5853] imon:vfd_write: send packet #2 failed [ 87.414507][ T5716] usb 4-1: USB disconnect, device number 2 [ 87.425229][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 87.549178][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 87.549238][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 88.029622][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 88.030251][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 88.030304][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 88.031364][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 88.041660][ T5778] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 88.054695][ T5778] usb 3-1: USB disconnect, device number 2 [ 88.189305][ T32] audit: type=1804 audit(1791300252.941:3): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.38" name="bus" dev="ramfs" ino=8345 res=1 errno=0 [ 88.189920][ T32] audit: type=1804 audit(1791300252.941:4): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.38" name="bus" dev="ramfs" ino=8345 res=1 errno=0 [ 88.838087][ T5850] mount: server 127.0.0.1 not responding, timed out [ 88.998757][ T5885] Bluetooth: MGMT ver 1.23 [ 89.864164][ T5917] syzkaller0: entered promiscuous mode [ 89.864187][ T5917] syzkaller0: entered allmulticast mode [ 90.825133][ T5946] Zero length message leads to an empty skb [ 91.196441][ T5778] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.202203][ T5961] mac80211_hwsim hwsim8 ..cmit_in_by: renamed from wlan1 (while UP) [ 91.348507][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 91.351061][ T5778] usb 1-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 91.354443][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.401315][ T5969] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 91.407821][ T5778] usb 1-1: config 0 descriptor?? [ 91.420547][ T5778] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 91.786304][ T5975] FAULT_INJECTION: forcing a failure. [ 91.786304][ T5975] name failslab, interval 1, probability 0, space 0, times 1 [ 91.786712][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT(full) [ 91.786743][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.786762][ T5975] Call Trace: [ 91.786771][ T5975] [ 91.786785][ T5975] dump_stack_lvl+0xe8/0x150 [ 91.786816][ T5975] should_fail_ex+0x3eb/0x540 [ 91.786847][ T5975] should_failslab+0xa8/0x100 [ 91.786868][ T5975] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 91.786892][ T5975] kmem_cache_alloc_noprof+0x9c/0x600 [ 91.786911][ T5975] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 91.786929][ T5975] ? kmem_cache_alloc_noprof+0x151/0x600 [ 91.786949][ T5975] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 91.786988][ T5975] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 91.787024][ T5975] mmu_topup_memory_caches+0x21/0x1a0 [ 91.787048][ T5975] kvm_mmu_load+0x9d/0x21e0 [ 91.787074][ T5975] ? kvm_msr_allowed+0x9a/0x490 [ 91.787093][ T5975] ? kvm_msr_allowed+0x3f4/0x490 [ 91.787112][ T5975] ? kvm_msr_allowed+0x9a/0x490 [ 91.787129][ T5975] ? kvm_msr_allowed+0x9a/0x490 [ 91.787154][ T5975] ? kvm_apic_has_interrupt+0x740/0x770 [ 91.787188][ T5975] vcpu_run+0x4f5b/0x7a90 [ 91.787239][ T5975] ? __pfx___loaded_vmcs_clear+0x10/0x10 [ 91.787261][ T5975] ? __pfx___smp_call_function_single+0x10/0x10 [ 91.787317][ T5975] ? __pfx_vcpu_run+0x10/0x10 [ 91.787338][ T5975] ? lock_acquire+0x115/0x350 [ 91.787374][ T5975] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 91.787403][ T5975] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 91.787428][ T5975] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 91.787450][ T5975] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 91.787476][ T5975] kvm_vcpu_ioctl+0xa61/0xfd0 [ 91.787501][ T5975] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 91.787520][ T5975] ? do_futex+0x3e7/0x4e0 [ 91.787558][ T5975] ? __fget_files+0x2a/0x420 [ 91.787580][ T5975] ? __fget_files+0x2a/0x420 [ 91.787599][ T5975] ? __fget_files+0x2a/0x420 [ 91.787622][ T5975] ? bpf_lsm_file_ioctl+0x9/0x20 [ 91.787643][ T5975] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 91.787663][ T5975] __se_sys_ioctl+0xfc/0x170 [ 91.787687][ T5975] do_syscall_64+0x166/0x520 [ 91.787708][ T5975] ? trace_irq_disable+0x3b/0x140 [ 91.787726][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.787749][ T5975] ? clear_bhb_loop+0x70/0xc0 [ 91.787772][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.787794][ T5975] RIP: 0033:0x7fc6ce39e199 [ 91.787822][ T5975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.787840][ T5975] RSP: 002b:00007fc6cf348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.787862][ T5975] RAX: ffffffffffffffda RBX: 00007fc6ce625fa0 RCX: 00007fc6ce39e199 [ 91.787879][ T5975] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 91.787892][ T5975] RBP: 00007fc6ce4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 91.787906][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.787919][ T5975] R13: 00007fc6ce626038 R14: 00007fc6ce625fa0 R15: 00007ffe44d83978 [ 91.787952][ T5975] [ 92.148065][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.310290][ T46] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 92.313577][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.313601][ T46] usb 3-1: Product: syz [ 92.313615][ T46] usb 3-1: Manufacturer: syz [ 92.313653][ T46] usb 3-1: SerialNumber: syz [ 92.781206][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 92.781289][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 92.896442][ T5702] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.047152][ T5702] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 93.048221][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.048293][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.051947][ T5702] usb 4-1: config 0 descriptor?? [ 93.057246][ T5702] pwc: Askey VC010 type 2 USB webcam detected. [ 93.267853][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.460707][ T5702] pwc: recv_control_msg error -32 req 02 val 2b00 [ 93.461461][ T5702] pwc: recv_control_msg error -32 req 02 val 2700 [ 93.462432][ T5702] pwc: recv_control_msg error -32 req 02 val 2c00 [ 93.463045][ T5702] pwc: recv_control_msg error -32 req 04 val 1000 [ 93.463598][ T5702] pwc: recv_control_msg error -32 req 04 val 1300 [ 93.464212][ T5702] pwc: recv_control_msg error -32 req 04 val 1400 [ 93.465009][ T5702] pwc: recv_control_msg error -32 req 02 val 2000 [ 93.465495][ T5702] pwc: recv_control_msg error -32 req 02 val 2100 [ 93.466310][ T5702] pwc: recv_control_msg error -32 req 04 val 1500 [ 93.467181][ T5702] pwc: recv_control_msg error -32 req 02 val 2500 [ 93.670211][ T5702] pwc: recv_control_msg error -71 req 02 val 2600 [ 93.672152][ T5702] pwc: recv_control_msg error -71 req 02 val 2900 [ 93.673670][ T5702] pwc: recv_control_msg error -71 req 02 val 2800 [ 93.674944][ T5702] pwc: recv_control_msg error -71 req 04 val 1100 [ 93.675929][ T5702] pwc: recv_control_msg error -71 req 04 val 1200 [ 93.695432][ T5702] pwc: Registered as video103. [ 93.703912][ T5702] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 93.734033][ T5702] usb 4-1: USB disconnect, device number 3 [ 93.880711][ T5778] gspca_vc032x: reg_w err -71 [ 93.880753][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880762][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880771][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880780][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880787][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880795][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880803][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880812][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880820][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880827][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880834][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880841][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880848][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880856][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880864][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880893][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880901][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 93.880910][ T5778] gspca_vc032x: Unknown sensor... [ 93.880982][ T5778] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 93.891600][ T5778] usb 1-1: USB disconnect, device number 2 [ 94.108207][ T6006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.76'. [ 94.108241][ T6006] netlink: 43 bytes leftover after parsing attributes in process `syz.1.76'. [ 94.108347][ T6006] netlink: 'syz.1.76': attribute type 5 has an invalid length. [ 94.108355][ T6006] netlink: 43 bytes leftover after parsing attributes in process `syz.1.76'. [ 94.456469][ T5709] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.632641][ T5709] usb 2-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 94.641966][ T5709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.642018][ T5709] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.642039][ T5709] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.642081][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.016069][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 95.016131][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 95.016152][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 95.062262][ T46] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 95.081690][ T46] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 95.090278][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.111338][ T46] usb 3-1: USB disconnect, device number 3 [ 95.247571][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 95.248463][ T10] usb 1-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 95.250123][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 95.250146][ T10] usb 1-1: config 0 has no interface number 0 [ 95.250185][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 95.255194][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.255221][ T10] usb 1-1: Product: syz [ 95.255235][ T10] usb 1-1: Manufacturer: syz [ 95.255247][ T10] usb 1-1: SerialNumber: syz [ 95.264808][ T10] usb 1-1: config 0 descriptor?? [ 95.266253][ T6021] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 95.476549][ T6021] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 95.985098][ T32] audit: type=1800 audit(1791300260.732:5): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.86" name="(" dev="sda1" ino=2044 res=0 errno=-22 [ 97.133184][ T5709] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -22 [ 97.155432][ T5709] usb 2-1: USB disconnect, device number 2 [ 97.481034][ T5616] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 97.481113][ T5616] Bluetooth: hci1: Injecting HCI hardware error event [ 97.485457][ T5616] Bluetooth: hci1: hardware error 0x00 [ 97.533274][ T5709] nintendo 0005:057E:2017.0001: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 97.599734][ T6121] udevd[6121]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 97.926010][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 97.926243][ T10] asix 1-1:0.188: probe with driver asix failed with error -71 [ 97.960364][ T10] usb 1-1: USB disconnect, device number 3 [ 98.464163][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 98.484655][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 98.502627][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 99.557724][ T5616] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 100.407735][ T6208] FAULT_INJECTION: forcing a failure. [ 100.407735][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 100.407767][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 100.407790][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.407803][ T6208] Call Trace: [ 100.407811][ T6208] [ 100.407820][ T6208] dump_stack_lvl+0xe8/0x150 [ 100.407848][ T6208] should_fail_ex+0x3eb/0x540 [ 100.407879][ T6208] should_failslab+0xa8/0x100 [ 100.407899][ T6208] ? security_inode_alloc+0x39/0x310 [ 100.407928][ T6208] kmem_cache_alloc_noprof+0x9c/0x600 [ 100.407951][ T6208] ? __pfx_make_kgid+0x10/0x10 [ 100.407969][ T6208] ? security_inode_alloc+0x39/0x310 [ 100.407995][ T6208] security_inode_alloc+0x39/0x310 [ 100.408018][ T6208] inode_init_always_gfp+0x97e/0xd30 [ 100.408044][ T6208] ? __pfx_proc_alloc_inode+0x10/0x10 [ 100.408064][ T6208] alloc_inode+0x82/0x1b0 [ 100.408086][ T6208] new_inode+0x1f/0x170 [ 100.408107][ T6208] proc_setup_self+0x5c/0x1c0 [ 100.408130][ T6208] proc_fill_super+0x578/0x760 [ 100.408149][ T6208] ? __pfx_proc_fill_super+0x10/0x10 [ 100.408170][ T6208] get_tree_nodev+0xbb/0x150 [ 100.408193][ T6208] vfs_get_tree+0x92/0x2a0 [ 100.408218][ T6208] do_new_mount+0x325/0xb00 [ 100.408244][ T6208] ? __pfx_do_new_mount+0x10/0x10 [ 100.408267][ T6208] ? ns_capable+0x84/0xe0 [ 100.408288][ T6208] ? path_mount+0x647/0x1050 [ 100.408311][ T6208] ? user_path_at+0xd4/0x160 [ 100.408333][ T6208] __se_sys_mount+0x31d/0x420 [ 100.408358][ T6208] ? __pfx___se_sys_mount+0x10/0x10 [ 100.408384][ T6208] ? __x64_sys_mount+0x20/0xc0 [ 100.408405][ T6208] do_syscall_64+0x166/0x520 [ 100.408424][ T6208] ? trace_irq_disable+0x3b/0x140 [ 100.408442][ T6208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.408463][ T6208] ? clear_bhb_loop+0x70/0xc0 [ 100.408485][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.408506][ T6208] RIP: 0033:0x7f3a48f9e199 [ 100.408524][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.408541][ T6208] RSP: 002b:00007f3a49d8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.408563][ T6208] RAX: ffffffffffffffda RBX: 00007f3a49225fa0 RCX: 00007f3a48f9e199 [ 100.408578][ T6208] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 100.408592][ T6208] RBP: 00007f3a490358e0 R08: 0000000000000000 R09: 0000000000000000 [ 100.408605][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.408618][ T6208] R13: 00007f3a49226038 R14: 00007f3a49225fa0 R15: 00007ffdc55754f8 [ 100.408650][ T6208] [ 100.504742][ T6208] proc_fill_super: can't allocate /proc/self [ 100.684559][ T5616] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 100.688117][ T5616] Bluetooth: hci2: Injecting HCI hardware error event [ 100.691490][ T5616] Bluetooth: hci2: hardware error 0x00 [ 101.399429][ T32] audit: type=1800 audit(1791300266.144:6): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.118" name="syzkaller1" dev="sda1" ino=2045 res=0 errno=-22 [ 101.634141][ T5709] nintendo 0005:057E:2017.0001: Failed to get joycon info; ret=-110 [ 101.634166][ T5709] nintendo 0005:057E:2017.0001: Failed to retrieve controller info; ret=-110 [ 101.634182][ T5709] nintendo 0005:057E:2017.0001: Failed to initialize controller; ret=-110 [ 101.660676][ T5709] nintendo 0005:057E:2017.0001: probe - fail = -110 [ 101.660795][ T5709] nintendo 0005:057E:2017.0001: probe with driver nintendo failed with error -110 [ 101.954975][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.103558][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 102.104541][ T46] usb 3-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 102.106403][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.106448][ T46] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 102.106471][ T46] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.106489][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 102.106530][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.190415][ T6225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.192310][ T46] mdc800 3-1:1.0: probe fails -> wrong Interface [ 102.432576][ T5709] usb 3-1: USB disconnect, device number 4 [ 102.603266][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.753661][ T5616] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 102.754255][ T46] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 102.759702][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.759730][ T46] usb 2-1: Product: syz [ 102.759745][ T46] usb 2-1: Manufacturer: syz [ 102.759758][ T46] usb 2-1: SerialNumber: syz [ 103.219622][ T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 103.219699][ T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 103.282981][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.433589][ T10] usb 3-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 103.435152][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.435214][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.435253][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.358714][ T6234] process 'syz.0.123' launched './file1' with NULL argv: empty string added [ 104.429317][ T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 104.702260][ T5688] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.765761][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 104.767643][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 104.767670][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 104.854667][ T5688] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.855831][ T5688] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.855878][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.859701][ T5688] usb 1-1: config 0 descriptor?? [ 104.874033][ T5688] pwc: Askey VC010 type 2 USB webcam detected. [ 105.237017][ T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 105.241052][ T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 105.241105][ T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 105.249001][ T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.258234][ T46] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 105.275299][ T5688] pwc: recv_control_msg error -32 req 02 val 2b00 [ 105.276234][ T5688] pwc: recv_control_msg error -32 req 02 val 2700 [ 105.276452][ T46] usb 2-1: USB disconnect, device number 3 [ 105.280520][ T5688] pwc: recv_control_msg error -32 req 02 val 2c00 [ 105.281122][ T5688] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.283286][ T5688] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.287885][ T5688] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.293969][ T5688] pwc: recv_control_msg error -32 req 02 val 2000 [ 105.295550][ T5688] pwc: recv_control_msg error -32 req 02 val 2100 [ 105.307661][ T5688] pwc: recv_control_msg error -32 req 04 val 1500 [ 105.311735][ T5688] pwc: recv_control_msg error -32 req 02 val 2500 [ 105.320531][ T5688] pwc: recv_control_msg error -32 req 02 val 2400 [ 105.531403][ T5688] pwc: recv_control_msg error -71 req 02 val 2900 [ 105.532041][ T5688] pwc: recv_control_msg error -71 req 02 val 2800 [ 105.535158][ T5688] pwc: recv_control_msg error -71 req 04 val 1100 [ 105.535817][ T5688] pwc: recv_control_msg error -71 req 04 val 1200 [ 105.542238][ T5688] pwc: Registered as video103. [ 105.553845][ T5688] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 105.580297][ T5688] usb 1-1: USB disconnect, device number 4 [ 106.186392][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 106.187716][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 106.189656][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 106.191196][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 106.213966][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 106.225690][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 106.247783][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 106.269726][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 106.280988][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 106.292507][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 106.293939][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 106.294719][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 106.296496][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 106.296933][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 106.297363][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 106.297779][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 106.298213][ T10] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.406802][ T10] ax88179_178a 3-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 7a:8e:16:a6:20:ac [ 106.408899][ T10] usb 3-1: USB disconnect, device number 5 [ 106.434245][ T10] ax88179_178a 3-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 107.005788][ T6258] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.391911][ T6315] netlink: 'syz.1.140': attribute type 2 has an invalid length. [ 113.438570][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.589478][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 113.590216][ T10] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 113.591207][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.591233][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.591257][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.594527][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.594547][ T10] usb 3-1: Product: syz [ 113.594560][ T10] usb 3-1: Manufacturer: syz [ 113.594574][ T10] usb 3-1: SerialNumber: syz [ 113.643287][ T10] usb 3-1: config 0 descriptor?? [ 113.847650][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 114.437070][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.447266][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.456556][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.473356][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.474143][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.750831][ T10] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 114.750866][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 115.129627][ T32] audit: type=1800 audit(1791300279.891:7): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.160" name=08 dev="sda1" ino=2043 res=0 errno=-22 [ 115.385347][ T32] audit: type=1326 audit(1791300280.141:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.1.161" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6ce39e199 code=0x0 [ 115.435614][ T6409] syz.1.161 uses obsolete (PF_INET,SOCK_PACKET) [ 115.568831][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.568891][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.568992][ T6380] bridge_slave_0: entered allmulticast mode [ 115.572699][ T6380] bridge_slave_0: entered promiscuous mode [ 115.590536][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.590719][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.591000][ T6380] bridge_slave_1: entered allmulticast mode [ 115.592688][ T6380] bridge_slave_1: entered promiscuous mode [ 115.645237][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.658496][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.701049][ T6380] team0: Port device team_slave_0 added [ 115.704626][ T6380] team0: Port device team_slave_1 added [ 115.779260][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.779278][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.779299][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.782953][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.782971][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.782995][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.053512][ T6380] hsr_slave_0: entered promiscuous mode [ 116.077284][ T6380] hsr_slave_1: entered promiscuous mode [ 116.078043][ T6380] debugfs: 'hsr0' already exists in 'hsr' [ 116.078063][ T6380] Cannot create hsr debugfs directory [ 116.313351][ T6425] FAULT_INJECTION: forcing a failure. [ 116.313351][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 116.313402][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(full) [ 116.313426][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.313439][ T6425] Call Trace: [ 116.313446][ T6425] [ 116.313455][ T6425] dump_stack_lvl+0xe8/0x150 [ 116.313496][ T6425] should_fail_ex+0x3eb/0x540 [ 116.313522][ T6425] should_failslab+0xa8/0x100 [ 116.313543][ T6425] ? ptlock_alloc+0x20/0x70 [ 116.313563][ T6425] kmem_cache_alloc_noprof+0x9c/0x600 [ 116.313588][ T6425] ? ptlock_alloc+0x20/0x70 [ 116.313613][ T6425] ptlock_alloc+0x20/0x70 [ 116.313633][ T6425] pte_alloc_one+0x7a/0x370 [ 116.313655][ T6425] __pte_alloc+0x25/0x1a0 [ 116.313670][ T6425] ? alloc_new_pud+0x185/0x300 [ 116.313693][ T6425] move_page_tables+0x1b08/0x1ed0 [ 116.313735][ T6425] ? move_page_tables+0x5ca/0x1ed0 [ 116.313770][ T6425] ? __pfx_move_page_tables+0x10/0x10 [ 116.313812][ T6425] ? percpu_counter_add_batch+0xec/0x1d0 [ 116.313844][ T6425] move_vma+0xd25/0x1bc0 [ 116.313884][ T6425] ? __pfx_move_vma+0x10/0x10 [ 116.313911][ T6425] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 116.313933][ T6425] ? mtree_load+0x12a/0x780 [ 116.313961][ T6425] ? mtree_load+0x12a/0x780 [ 116.313983][ T6425] ? __futex_wait+0x3c7/0x470 [ 116.314006][ T6425] ? cap_mmap_addr+0xaa/0xf0 [ 116.314026][ T6425] ? bpf_lsm_mmap_addr+0x9/0x50 [ 116.314044][ T6425] ? security_mmap_addr+0x71/0x240 [ 116.314072][ T6425] mremap_to+0x7f9/0x8d0 [ 116.314096][ T6425] ? check_prep_vma+0x81d/0xca0 [ 116.314115][ T6425] ? __pfx_mremap_to+0x10/0x10 [ 116.314153][ T6425] ? __pfx_check_prep_vma+0x10/0x10 [ 116.314175][ T6425] ? mas_find+0x642/0xcb0 [ 116.314200][ T6425] __se_sys_mremap+0xd48/0x12e0 [ 116.314232][ T6425] ? __pfx___se_sys_mremap+0x10/0x10 [ 116.314248][ T6425] ? do_futex+0x3e7/0x4e0 [ 116.314278][ T6425] ? __se_sys_futex+0x3a8/0x450 [ 116.314309][ T6425] ? __x64_sys_mremap+0x20/0xc0 [ 116.314330][ T6425] do_syscall_64+0x166/0x520 [ 116.314350][ T6425] ? trace_irq_disable+0x3b/0x140 [ 116.314452][ T6425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.314478][ T6425] ? clear_bhb_loop+0x70/0xc0 [ 116.314501][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.314522][ T6425] RIP: 0033:0x7fc6ce39e199 [ 116.314553][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.314571][ T6425] RSP: 002b:00007fc6cf348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 116.314597][ T6425] RAX: ffffffffffffffda RBX: 00007fc6ce625fa0 RCX: 00007fc6ce39e199 [ 116.314612][ T6425] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 116.314626][ T6425] RBP: 00007fc6ce4358e0 R08: 0000200000ffd000 R09: 0000000000000000 [ 116.314641][ T6425] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 116.314653][ T6425] R13: 00007fc6ce626038 R14: 00007fc6ce625fa0 R15: 00007ffe44d83978 [ 116.314685][ T6425] [ 116.507291][ T5616] Bluetooth: hci4: command tx timeout [ 116.550075][ T6427] zram0: detected capacity change from 0 to 65536 [ 116.688477][ T6429] syzkaller0: entered promiscuous mode [ 116.688500][ T6429] syzkaller0: entered allmulticast mode [ 116.824100][ T6380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.838772][ T6380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.839863][ T6380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.844053][ T6380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.845021][ T6380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.878817][ T6380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.881020][ T6380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.885183][ T6380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.025340][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.056876][ T6380] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.101526][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.101629][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.120974][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.121097][ T6346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.934888][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.532650][ T6380] veth0_vlan: entered promiscuous mode [ 118.554240][ T6380] veth1_vlan: entered promiscuous mode [ 118.586612][ T5616] Bluetooth: hci4: command tx timeout [ 118.617145][ T6380] veth0_macvtap: entered promiscuous mode [ 118.632560][ T6380] veth1_macvtap: entered promiscuous mode [ 118.653840][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.674463][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.731744][ T6350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.731787][ T6350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.731816][ T6350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.731843][ T6350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.858427][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.858448][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.918413][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.918434][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.481201][ T5616] Bluetooth: hci3: hcon ffff88807eeb0000 sent 1 < count 255 [ 119.481458][ T5616] Bluetooth: hci3: hcon ffff88807eeb0000 sent 0 < count 9 [ 119.482525][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 119.482582][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 119.932087][ T6512] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 120.667174][ T5616] Bluetooth: hci4: command tx timeout [ 120.783364][ T6512] syz.2.186 (6512) used greatest stack depth: 11840 bytes left [ 121.792659][ T6551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.201'. [ 122.744329][ T5616] Bluetooth: hci4: command tx timeout [ 123.313070][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.396473][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.397383][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.468380][ T27] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.472001][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.472056][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.502499][ T27] usb 2-1: config 0 descriptor?? [ 123.514453][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 123.715640][ T27] pwc: send_video_command error -71 [ 123.715661][ T27] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 123.715774][ T27] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 123.717706][ T27] usb 2-1: USB disconnect, device number 4 [ 125.551841][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.551850][ T6592] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 126.389953][ T6592] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.403542][ T6592] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.408570][ T6592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.408832][ T6592] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.410355][ T6592] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.428035][ T6592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.428101][ T6592] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.454635][ T6592] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.871144][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.871158][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.022545][ T9] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 127.029160][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.029186][ T9] usb 2-1: Product: syz [ 127.029209][ T9] usb 2-1: Manufacturer: syz [ 127.029223][ T9] usb 2-1: SerialNumber: syz [ 127.035655][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 127.055167][ T27] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 127.075934][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.075960][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.078418][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.078444][ T27] usb 5-1: Product: syz [ 127.078459][ T27] usb 5-1: Manufacturer: syz [ 127.078473][ T27] usb 5-1: SerialNumber: syz [ 127.140572][ T27] usb 5-1: 0:2 : does not exist [ 127.349958][ T27] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 127.430539][ T27] usb 5-1: USB disconnect, device number 2 [ 127.474272][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 127.474334][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 127.517181][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.623643][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.421143][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.590245][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.296305][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 129.356553][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 129.429905][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 129.580481][ T10] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.584290][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.584316][ T10] usb 1-1: Product: syz [ 129.584330][ T10] usb 1-1: Manufacturer: syz [ 129.584368][ T10] usb 1-1: SerialNumber: syz [ 129.588429][ T10] usb 1-1: config 0 descriptor?? [ 129.701623][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.802001][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.051048][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 130.051104][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 130.051948][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 130.091998][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 130.111412][ T9] usb 2-1: USB disconnect, device number 5 [ 130.499396][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.659883][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.771116][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.771586][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.784613][ T6720] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 130.792824][ T6720] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 130.793026][ T6720] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 130.803304][ T6720] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 130.804972][ T6720] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 130.805185][ T6720] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 130.806221][ T6720] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 130.807106][ T6720] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 130.807971][ T6720] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 130.809564][ T6720] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 131.070075][ T6733] netlink: 'syz.4.265': attribute type 4 has an invalid length. [ 131.083339][ T6733] netlink: 'syz.4.265': attribute type 4 has an invalid length. [ 131.240932][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 131.258985][ T10] usb 1-1: USB disconnect, device number 5 [ 131.328176][ T6740] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.396764][ T6740] jffs2: notice: (6740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.610042][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.613091][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.984293][ T6772] overlayfs: failed to clone upperpath [ 132.536304][ T6775] FAULT_INJECTION: forcing a failure. [ 132.536304][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 132.536325][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT(full) [ 132.536338][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.536345][ T6775] Call Trace: [ 132.536352][ T6775] [ 132.536360][ T6775] dump_stack_lvl+0xe8/0x150 [ 132.536387][ T6775] should_fail_ex+0x3eb/0x540 [ 132.536413][ T6775] should_failslab+0xa8/0x100 [ 132.536437][ T6775] __kmalloc_noprof+0xf9/0x710 [ 132.536459][ T6775] ? init_skcipher_req+0x83/0x1c0 [ 132.536478][ T6775] ? init_skcipher_req+0x83/0x1c0 [ 132.536493][ T6775] init_skcipher_req+0x83/0x1c0 [ 132.536506][ T6775] encrypted_read+0x2ff/0xe70 [ 132.536521][ T6775] ? __pfx_encrypted_read+0x10/0x10 [ 132.536535][ T6775] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 132.536547][ T6775] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 132.536556][ T6775] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 132.536570][ T6775] ? lock_acquire+0x115/0x350 [ 132.536589][ T6775] ? down_read+0x2b9/0x320 [ 132.536606][ T6775] keyctl_read_key+0x29d/0x490 [ 132.536619][ T6775] __se_sys_keyctl+0x38f/0xbc0 [ 132.536631][ T6775] ? __pfx___se_sys_keyctl+0x10/0x10 [ 132.536644][ T6775] ? __pfx_do_futex+0x10/0x10 [ 132.536653][ T6775] ? __fget_files+0x3a2/0x420 [ 132.536664][ T6775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.536679][ T6775] ? __se_sys_futex+0x3a8/0x450 [ 132.536692][ T6775] ? ksys_write+0x242/0x270 [ 132.536703][ T6775] ? __pfx___se_sys_futex+0x10/0x10 [ 132.536713][ T6775] ? __pfx_ksys_write+0x10/0x10 [ 132.536726][ T6775] ? __x64_sys_keyctl+0x20/0xc0 [ 132.536737][ T6775] do_syscall_64+0x166/0x520 [ 132.536747][ T6775] ? trace_irq_disable+0x3b/0x140 [ 132.536757][ T6775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.536768][ T6775] ? clear_bhb_loop+0x70/0xc0 [ 132.536779][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.536790][ T6775] RIP: 0033:0x7f71b579e199 [ 132.536801][ T6775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.536810][ T6775] RSP: 002b:00007f71b6580028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 132.536822][ T6775] RAX: ffffffffffffffda RBX: 00007f71b5a25fa0 RCX: 00007f71b579e199 [ 132.536830][ T6775] RDX: 0000200000000240 RSI: 00000000219f5caa RDI: 000000000000000b [ 132.536837][ T6775] RBP: 00007f71b58358e0 R08: 0000000000000000 R09: 0000000000000000 [ 132.536844][ T6775] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 132.536851][ T6775] R13: 00007f71b5a26038 R14: 00007f71b5a25fa0 R15: 00007ffebb1253c8 [ 132.536867][ T6775] [ 132.536871][ T6775] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 132.578462][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.739188][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.900903][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900965][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.183548][ T6794] FAULT_INJECTION: forcing a failure. [ 133.183548][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 133.183581][ T6794] CPU: 1 UID: 0 PID: 6794 Comm: syz.0.288 Not tainted syzkaller #0 PREEMPT(full) [ 133.183605][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.183618][ T6794] Call Trace: [ 133.183626][ T6794] [ 133.183635][ T6794] dump_stack_lvl+0xe8/0x150 [ 133.183664][ T6794] should_fail_ex+0x3eb/0x540 [ 133.183699][ T6794] should_failslab+0xa8/0x100 [ 133.183721][ T6794] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 133.183745][ T6794] __kmalloc_cache_node_noprof+0xa5/0x620 [ 133.183766][ T6794] ? __kasan_kmalloc+0x93/0xb0 [ 133.183788][ T6794] ? mempool_create_node_noprof+0x95/0x150 [ 133.183812][ T6794] ? mempool_create_node_noprof+0x95/0x150 [ 133.183836][ T6794] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 133.183857][ T6794] mempool_create_node_noprof+0x95/0x150 [ 133.183877][ T6794] ? __pfx_mempool_free_slab+0x10/0x10 [ 133.183902][ T6794] ceph_osdc_init+0x4fa/0x900 [ 133.183932][ T6794] ceph_create_client+0x246/0x310 [ 133.183957][ T6794] ceph_get_tree+0x1ca/0x1a40 [ 133.183979][ T6794] ? apparmor_capable+0x126/0x170 [ 133.184008][ T6794] vfs_get_tree+0x92/0x2a0 [ 133.184031][ T6794] vfs_cmd_create+0xa2/0x200 [ 133.184055][ T6794] __se_sys_fsconfig+0x6b9/0x810 [ 133.184083][ T6794] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 133.184106][ T6794] ? rcu_is_watching+0x16/0xb0 [ 133.184135][ T6794] ? __x64_sys_fsconfig+0x20/0xc0 [ 133.184158][ T6794] do_syscall_64+0x166/0x520 [ 133.184178][ T6794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.184199][ T6794] ? clear_bhb_loop+0x70/0xc0 [ 133.184222][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.184243][ T6794] RIP: 0033:0x7f3a48f9e199 [ 133.184263][ T6794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.184281][ T6794] RSP: 002b:00007f3a49d8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 133.184304][ T6794] RAX: ffffffffffffffda RBX: 00007f3a49225fa0 RCX: 00007f3a48f9e199 [ 133.184320][ T6794] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 133.184332][ T6794] RBP: 00007f3a490358e0 R08: 0800000000000000 R09: 0000000000000000 [ 133.184346][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.184359][ T6794] R13: 00007f3a49226038 R14: 00007f3a49225fa0 R15: 00007ffdc55754f8 [ 133.184392][ T6794] [ 133.998193][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.022536][ T6810] UDC core: g1: couldn't find an available UDC or it's busy [ 134.158750][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 134.160910][ T9] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 134.162812][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.162834][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.166510][ T6815] file system registered [ 134.193672][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.193700][ T9] usb 1-1: Product: syz [ 134.193714][ T9] usb 1-1: Manufacturer: syz [ 134.193728][ T9] usb 1-1: SerialNumber: syz [ 134.258737][ T9] usb 1-1: 0:2 : does not exist [ 134.450045][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 134.604817][ T9] usb 1-1: USB disconnect, device number 6 [ 134.694876][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.710762][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 134.710790][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 135.890047][ T5273] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 138.104188][ T32] audit: type=1804 audit(1791300302.872:9): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.322" name="cgroup.controllers" dev="tmpfs" ino=270 res=1 errno=0 [ 138.107731][ T32] audit: type=1800 audit(1791300302.882:10): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.322" name="cgroup.controllers" dev="tmpfs" ino=270 res=0 errno=-22 [ 140.240849][ T6946] fuse: fd is not a fuse device [ 140.251813][ T5616] Bluetooth: hci4: Invalid handle: 0xff42 > 0x0eff [ 141.418768][ T6973] bond0: entered promiscuous mode [ 141.418793][ T6973] bond_slave_0: entered promiscuous mode [ 141.418991][ T6973] bond_slave_1: entered promiscuous mode [ 141.761139][ T6990] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 142.226978][ T7013] CIFS: Attempting to mount //127.0.0.1/share [ 142.303910][ T7013] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 142.304116][ T7013] CIFS: VFS: cifs_mount failed w/return code = -11 [ 142.781127][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 143.475604][ T5709] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 143.499402][ T5709] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 143.764143][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 143.977621][ T32] audit: type=1800 audit(1791300308.745:11): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.387" name=08 dev="sda1" ino=2043 res=0 errno=-22 [ 144.223917][ T7064] ceph: No mds server is up or the cluster is laggy [ 144.305550][ T5709] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 145.305218][ T7112] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 145.305247][ T7112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 145.309662][ T7112] vhci_hcd vhci_hcd.0: Device attached [ 145.507582][ T7117] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.581889][ T5778] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 145.984754][ T7114] vhci_hcd: connection reset by peer [ 145.997411][ T6344] vhci_hcd vhci_hcd.2: stop threads [ 145.997796][ T6344] vhci_hcd vhci_hcd.2: release socket [ 146.001026][ T6344] vhci_hcd vhci_hcd.2: disconnect device [ 146.031656][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.182315][ T27] usb 1-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00 [ 146.184708][ T27] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.184740][ T27] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 146.184797][ T27] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.184832][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.184865][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.257955][ T27] usb 1-1: config 0 descriptor?? [ 146.258696][ T7136] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.668555][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 146.905513][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 146.905622][ T27] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 146.932536][ T27] usb 1-1: USB disconnect, device number 7 [ 147.721666][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.429'. [ 147.721710][ T7183] openvswitch: netlink: Flow key attr not present in new flow. [ 149.626160][ T7239] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 150.575922][ T7261] loop7: detected capacity change from 0 to 16384 [ 150.704861][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.451'. [ 150.704889][ T7263] openvswitch: netlink: Flow key attr not present in new flow. [ 150.723473][ T5778] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 150.820233][ T7262] loop7: detected capacity change from 16384 to 0 [ 151.363622][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.364035][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.999906][ T7337] digital: digital_start_poll: Unknown protocol [ 154.347683][ T7370] tipc: Started in network mode [ 154.347714][ T7370] tipc: Node identity 4, cluster identity 4711 [ 154.347727][ T7370] tipc: Node number set to 4 [ 158.120168][ T7443] bond0: entered promiscuous mode [ 158.120191][ T7443] bond_slave_0: entered promiscuous mode [ 158.120417][ T7443] bond_slave_1: entered promiscuous mode [ 159.490398][ T7480] capability: warning: `syz.0.523' uses deprecated v2 capabilities in a way that may be insecure [ 159.551321][ T7477] VFS: Mount too revealing [ 159.569566][ T7482] bad cache= option:   [ 159.569566][ T7482] [ 159.570555][ T7482] CIFS: VFS: bad cache= option:   [ 159.659742][ T7480] FAULT_INJECTION: forcing a failure. [ 159.659742][ T7480] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 159.659787][ T7480] CPU: 1 UID: 0 PID: 7480 Comm: syz.0.523 Not tainted syzkaller #0 PREEMPT(full) [ 159.659812][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.659826][ T7480] Call Trace: [ 159.659836][ T7480] [ 159.659846][ T7480] dump_stack_lvl+0xe8/0x150 [ 159.659971][ T7480] should_fail_ex+0x3eb/0x540 [ 159.660119][ T7480] prepare_alloc_pages+0x21e/0x5f0 [ 159.660271][ T7480] __alloc_frozen_pages_noprof+0x17a/0x400 [ 159.660298][ T7480] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 159.660318][ T7480] ? __lock_acquire+0x747/0x2de0 [ 159.660373][ T7480] ? policy_nodemask+0x2cc/0x8e0 [ 159.660400][ T7480] ? __css_rstat_updated+0x237/0x540 [ 159.660444][ T7480] alloc_pages_mpol+0x21e/0x390 [ 159.660472][ T7480] alloc_pages_noprof+0xb1/0x2b0 [ 159.660497][ T7480] __pmd_alloc+0x3a/0x5c0 [ 159.660523][ T7480] copy_pmd_range+0x57f8/0x5c00 [ 159.660544][ T7480] ? register_lock_class+0x31/0x2e0 [ 159.660583][ T7480] ? __pfx___css_rstat_updated+0x10/0x10 [ 159.660614][ T7480] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 159.660648][ T7480] ? __pfx_copy_pmd_range+0x10/0x10 [ 159.660668][ T7480] ? do_raw_spin_lock+0x12b/0x2f0 [ 159.660698][ T7480] ? do_raw_spin_unlock+0xf5/0x200 [ 159.660721][ T7480] ? _raw_spin_unlock+0x28/0x50 [ 159.660827][ T7480] ? __pud_alloc+0x348/0x460 [ 159.660853][ T7480] copy_page_range+0xcc2/0x12b0 [ 159.660909][ T7480] ? __pfx_copy_page_range+0x10/0x10 [ 159.660949][ T7480] dup_mmap+0xf17/0x1dc0 [ 159.660990][ T7480] ? __pfx_dup_mmap+0x10/0x10 [ 159.661012][ T7480] ? do_raw_spin_lock+0x12b/0x2f0 [ 159.661049][ T7480] ? lock_acquire+0x115/0x350 [ 159.661088][ T7480] copy_mm+0x115/0x470 [ 159.661123][ T7480] copy_process+0x1ea2/0x4430 [ 159.661159][ T7480] ? copy_process+0xd11/0x4430 [ 159.661214][ T7480] ? __pfx_copy_process+0x10/0x10 [ 159.661250][ T7480] kernel_clone+0x2d7/0x940 [ 159.661279][ T7480] ? __pfx_kernel_clone+0x10/0x10 [ 159.661311][ T7480] ? do_futex+0x3e7/0x4e0 [ 159.661348][ T7480] __x64_sys_clone+0x1b6/0x230 [ 159.661373][ T7480] ? __pfx___x64_sys_clone+0x10/0x10 [ 159.661407][ T7480] ? rcu_is_watching+0x16/0xb0 [ 159.661449][ T7480] do_syscall_64+0x166/0x520 [ 159.661517][ T7480] ? trace_irq_disable+0x3b/0x140 [ 159.661547][ T7480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.661591][ T7480] ? clear_bhb_loop+0x70/0xc0 [ 159.661615][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.661646][ T7480] RIP: 0033:0x7f3a48f9e199 [ 159.661674][ T7480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.661752][ T7480] RSP: 002b:00007f3a49d8efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 159.661781][ T7480] RAX: ffffffffffffffda RBX: 00007f3a49225fa0 RCX: 00007f3a48f9e199 [ 159.661799][ T7480] RDX: 00002000000003c0 RSI: 00002000000003a0 RDI: 00000000a0000600 [ 159.661816][ T7480] RBP: 00007f3a490358e0 R08: 0000200000000480 R09: 0000200000000480 [ 159.661833][ T7480] R10: 0000200000000440 R11: 0000000000000206 R12: 0000000000000000 [ 159.661848][ T7480] R13: 00007f3a49226038 R14: 00007f3a49225fa0 R15: 00007ffdc55754f8 [ 159.661878][ T7480] [ 162.399247][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.400843][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.499507][ T7602] nfs: Unknown parameter 'noi' [ 166.169594][ T5616] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 167.081092][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 167.231741][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 167.232391][ T46] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 167.233416][ T46] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 167.233430][ T46] usb 1-1: config 0 has no interface number 0 [ 167.233459][ T46] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 167.233533][ T46] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 167.237395][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.237409][ T46] usb 1-1: Product: syz [ 167.237417][ T46] usb 1-1: Manufacturer: syz [ 167.237424][ T46] usb 1-1: SerialNumber: syz [ 167.253453][ T46] usb 1-1: config 0 descriptor?? [ 167.254310][ T7633] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.254434][ T7633] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.525041][ T7633] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.525138][ T7633] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.672719][ T46] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 167.978995][ T7653] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 168.240921][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.292272][ T7669] VFS: Mount too revealing [ 169.342738][ T46] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 169.342769][ T46] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 169.342982][ T46] asix 1-1:0.34: probe with driver asix failed with error -71 [ 169.366544][ T46] usb 1-1: USB disconnect, device number 8 [ 170.968560][ T7730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.616'. [ 171.020333][ T7732] netlink: 'syz.1.617': attribute type 10 has an invalid length. [ 171.022602][ T7732] batman_adv: batadv0: Adding interface: dummy0 [ 171.022617][ T7732] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.022645][ T7732] batman_adv: batadv0: Interface activated: dummy0 [ 171.234694][ T7737] bridge0: port 3(netdevsim0) entered blocking state [ 171.234771][ T7737] bridge0: port 3(netdevsim0) entered disabled state [ 171.234983][ T7737] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 171.237574][ T7737] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 171.238624][ T7737] bridge0: port 3(netdevsim0) entered blocking state [ 171.239365][ T7737] bridge0: port 3(netdevsim0) entered forwarding state [ 171.285830][ T7737] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 171.286704][ T7737] bridge0: port 3(netdevsim0) entered disabled state [ 171.286951][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.288444][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.294927][ T7737] bridge0: port 3(netdevsim0) entered blocking state [ 171.295054][ T7737] bridge0: port 3(netdevsim0) entered forwarding state [ 171.295831][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.295901][ T7737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.296035][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.296103][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.298187][ T7737] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.504095][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'. [ 171.504120][ T7741] openvswitch: netlink: Flow key attr not present in new flow. [ 171.662351][ T7748] kvm: vcpu 0: requested 242 ns lapic timer period limited to 200000 ns [ 171.662666][ T7748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 171.984365][ T5616] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 172.180264][ T7768] VFS: Mount too revealing [ 172.398490][ T5616] Bluetooth: hci4: unexpected event for opcode 0x080f [ 172.701728][ T7787] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 173.185526][ T5616] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 173.362918][ T7796] VFS: Mount too revealing [ 173.370727][ T5616] Bluetooth: hci0: unexpected event 0x10 length: 8 > 1 [ 173.372902][ T5613] Bluetooth: hci0: hardware error 0x00 [ 174.011371][ T5616] Bluetooth: hci0: unexpected event 0x0f length: 29 > 4 [ 174.011442][ T5616] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 175.357802][ T5616] Bluetooth: hci4: unexpected event for opcode 0x040d [ 175.436882][ T5613] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 175.512234][ T5613] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 175.996628][ T5613] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 175.996696][ T5613] Bluetooth: hci3: Injecting HCI hardware error event [ 176.001564][ T5616] Bluetooth: hci3: hardware error 0x00 [ 176.319216][ T5613] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 176.997021][ T5613] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 178.075583][ T5616] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 180.658378][ T5613] Bluetooth: hci4: ISO packet for unknown connection handle 201 [ 180.795591][ T5616] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 180.875523][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.142979][ T7979] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 181.181864][ T7979] cramfs: wrong magic [ 181.614711][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 181.879294][ T9] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 181.890513][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.890550][ T9] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 181.890584][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 181.894034][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.894057][ T9] usb 1-1: SerialNumber: syz [ 181.934143][ T5616] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 181.941492][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 181.941538][ T9] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 181.941587][ T9] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 182.183019][ T9] usb 1-1: USB disconnect, device number 9 [ 182.914672][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.915132][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.049036][ T5616] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 184.320976][ T5616] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 186.037977][ T5616] Bluetooth: hci4: unexpected event for opcode 0x201c [ 186.163717][ T8100] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 186.608740][ T5616] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 187.183191][ T8136] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.0.796: No space for directory leaf checksum. Please run e2fsck -D. [ 187.183250][ T8136] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.0.796: checksumming directory block 0 [ 187.184386][ T8136] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.0.796: No space for directory leaf checksum. Please run e2fsck -D. [ 187.184416][ T8136] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.0.796: checksumming directory block 0 [ 187.184680][ T8136] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.0.796: No space for directory leaf checksum. Please run e2fsck -D. [ 187.184706][ T8136] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.0.796: checksumming directory block 0 [ 187.189654][ T8136] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.0.796: No space for directory leaf checksum. Please run e2fsck -D. [ 187.189690][ T8136] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.0.796: checksumming directory block 0 [ 187.200022][ T8138] netlink: 9 bytes leftover after parsing attributes in process `syz.4.797'. [ 187.219630][ T8138] netlink: 9 bytes leftover after parsing attributes in process `syz.4.797'. [ 188.200199][ T5616] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 189.549560][ T8215] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 189.601538][ T8217] comedi comedi1: 8255: I/O base address not correctly aligned [ 190.273176][ T5616] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 190.687060][ T8263] netlink: 'syz.0.853': attribute type 10 has an invalid length. [ 190.703460][ T8263] team0: Port device macvlan1 added [ 191.114067][ T8281] netlink: 'syz.1.862': attribute type 10 has an invalid length. [ 191.141780][ T8281] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 191.142001][ T8281] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 191.142042][ T8281] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 191.656497][ T8302] ipvlan1: entered promiscuous mode [ 191.658094][ T8302] ipvlan1: entered allmulticast mode [ 191.658111][ T8302] veth0_vlan: entered allmulticast mode [ 191.898455][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.907601][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.662246][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.662708][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.010945][ T8350] mmap: syz.4.892 (8350) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 193.567148][ T8368] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 193.706706][ T8372] random: crng reseeded on system resumption [ 194.313358][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.313408][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.417490][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 195.566756][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 195.567459][ T46] usb 1-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 195.570824][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 195.570855][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 195.570879][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57365, setting to 1024 [ 195.570905][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 195.573035][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.573058][ T46] usb 1-1: Product: syz [ 195.573073][ T46] usb 1-1: Manufacturer: syz [ 195.573087][ T46] usb 1-1: SerialNumber: syz [ 195.592570][ T46] usb 1-1: config 0 descriptor?? [ 195.604610][ T8417] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.604741][ T8417] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.653812][ T8433] comedi comedi3: fl512: I/O base address not correctly aligned [ 195.695839][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 195.696154][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 195.709769][ T46] port100 1-1:0.0: NFC: Could not get supported command types [ 195.845126][ T10] usb 1-1: USB disconnect, device number 10 [ 195.879291][ T8440] comedi comedi1: pcl726: I/O base address not correctly aligned [ 196.776322][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 196.936130][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 196.943307][ T10] usb 1-1: New USB device found: idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 196.944401][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 196.962585][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.962613][ T10] usb 1-1: Product: syz [ 196.962628][ T10] usb 1-1: Manufacturer: syz [ 196.962641][ T10] usb 1-1: SerialNumber: syz [ 196.968060][ T10] usb 1-1: config 0 descriptor?? [ 196.993551][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 197.183457][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 197.185257][ T10] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 197.383969][ T46] usb 1-1: USB disconnect, device number 11 [ 198.697849][ T5616] Bluetooth: hci4: unexpected event for opcode 0x202d [ 199.029482][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 199.037150][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 199.037172][ T8534] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 199.180457][ T8539] netlink: 104 bytes leftover after parsing attributes in process `syz.1.978'. [ 199.387916][ T5616] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 199.609572][ T6275] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.790243][ T6275] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.896538][ T6275] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.029350][ T6275] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.345888][ T5616] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 200.493101][ T6275] bridge_slave_1: left allmulticast mode [ 200.493148][ T6275] bridge_slave_1: left promiscuous mode [ 200.500005][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.532848][ T6275] bridge_slave_0: left allmulticast mode [ 200.532961][ T6275] bridge_slave_0: left promiscuous mode [ 200.533193][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.118533][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.148543][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.152460][ T6275] bond0 (unregistering): Released all slaves [ 201.202977][ T8589] bond0: (slave bond_slave_0): Releasing backup interface [ 201.321630][ T5616] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 201.668974][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 201.858559][ T6275] hsr_slave_0: left promiscuous mode [ 201.875262][ T6275] hsr_slave_1: left promiscuous mode [ 201.876271][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.876310][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.909278][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.909300][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.962346][ T6275] veth1_macvtap: left promiscuous mode [ 201.962410][ T6275] veth0_macvtap: left promiscuous mode [ 201.962509][ T6275] veth1_vlan: left promiscuous mode [ 201.962600][ T6275] veth0_vlan: left promiscuous mode [ 202.926171][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 202.942568][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 203.142263][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 204.182215][ T8705] comedi comedi1: 8255: I/O base address not correctly aligned [ 204.324681][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 205.466719][ T8742] netlink: 'syz.4.1045': attribute type 10 has an invalid length. [ 205.466756][ T8742] bond0: left promiscuous mode [ 205.466773][ T8742] bond_slave_0: left promiscuous mode [ 205.466963][ T8742] bond_slave_1: left promiscuous mode [ 205.499836][ T8742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.551162][ T8742] team0: Port device bond0 added [ 205.555924][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 206.933884][ T8801] comedi comedi0: 8255: I/O base address not correctly aligned [ 207.443770][ T8822] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 207.464410][ T8822] bond0: left promiscuous mode [ 207.464437][ T8822] bond_slave_0: left promiscuous mode [ 207.464633][ T8822] bond_slave_1: left promiscuous mode [ 207.470329][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.475432][ T8822] team0: Port device bond0 added [ 208.116700][ T8844] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 208.222346][ T8820] infiniband syz1: set active [ 208.222368][ T8820] infiniband syz1: added syz_tun [ 208.243919][ T8849] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 208.307974][ T8820] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 208.308015][ T8820] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 208.308068][ T8820] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 208.391990][ T8820] RDS/IB: syz1: added [ 208.392459][ T8820] smc: adding ib device syz1 with port count 1 [ 208.393799][ T8820] smc: ib device syz1 port 1 has no pnetid [ 209.786520][ T8907] comedi comedi4: bad chanlist[0]=0x00080000 chan=0 range length=2 [ 210.455554][ T8949] veth1_macvtap: left promiscuous mode [ 210.455585][ T8949] macsec0: entered promiscuous mode [ 210.455599][ T8949] macsec0: entered allmulticast mode [ 210.470517][ T8949] veth1_macvtap: entered promiscuous mode [ 210.470539][ T8949] veth1_macvtap: entered allmulticast mode [ 210.470882][ T8949] macsec0: left promiscuous mode [ 210.471510][ T8949] macsec0: left allmulticast mode [ 210.471527][ T8949] veth1_macvtap: left allmulticast mode [ 210.924862][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.925398][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.736213][ T8976] capability: warning: `syz.0.1146' uses 32-bit capabilities (legacy support in use) [ 213.392738][ T9023] ======================================================= [ 213.392738][ T9023] WARNING: The mand mount option has been deprecated and [ 213.392738][ T9023] and is ignored by this kernel. Remove the mand [ 213.392738][ T9023] option from the mount to silence this warning. [ 213.392738][ T9023] ======================================================= [ 214.233317][ T8966] Set syz0 is full, maxelem 65536 reached [ 214.543611][ T9061] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 216.056646][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 217.855702][ T9175] x_tables: ip_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 40 [ 217.945597][ T5344] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 218.102438][ T5344] usb 1-1: New USB device found: idVendor=045e, idProduct=009d, bcdDevice=0.00 [ 218.116853][ T5344] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 218.116892][ T5344] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.116928][ T5344] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.116962][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.159170][ T5344] usb 1-1: config 0 descriptor?? [ 218.161348][ T9170] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 218.212731][ T9191] netlink: 'syz.2.1232': attribute type 49 has an invalid length. [ 218.735753][ T5344] microsoft 0003:045E:009D.0002: hidraw0: USB HID v0.09 Device [HID 045e:009d] on usb-dummy_hcd.0-1/input0 [ 218.780755][ T9209] udevd[9209]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 218.802612][ T5344] usb 1-1: USB disconnect, device number 12 [ 219.075353][ T9221] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1242'. [ 219.109114][ T9224] batman_adv: batadv0: Interface deactivated: dummy0 [ 219.163797][ T9224] batman_adv: batadv0: Interface activated: dummy0 [ 219.173204][ T9224] batman_adv: batadv0: Interface deactivated: dummy0 [ 219.483295][ T9242] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1249'. [ 219.632451][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.646109][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.322614][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.323079][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.848019][ T9304] VFS: Mount too revealing [ 221.051861][ T9308] ovs-dp0: entered promiscuous mode [ 221.193465][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.202227][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.745856][ T5778] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 221.895459][ T5778] usb 1-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 221.909627][ T5778] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 221.909663][ T5778] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 221.909689][ T5778] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 221.955091][ T9335] jffs2: notice: (9335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 221.958683][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.958714][ T5778] usb 1-1: Product: syz [ 221.958728][ T5778] usb 1-1: Manufacturer: syz [ 221.958742][ T5778] usb 1-1: SerialNumber: syz [ 221.982026][ T5778] usb 1-1: config 0 descriptor?? [ 221.990890][ T9322] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 221.990995][ T9322] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.025832][ T5778] usb 1-1: ucan: probing device on interface #0 [ 222.198082][ T9348] xt_l2tp: invalid flags combination: 0 [ 222.411588][ T5778] usb 1-1: ucan: device reported invalid tx-fifo size [ 222.411604][ T5778] usb 1-1: ucan: probe failed; try to update the device firmware [ 222.623249][ T5709] usb 1-1: USB disconnect, device number 13 [ 223.704988][ T9392] tipc: Started in network mode [ 223.705007][ T9392] tipc: Node identity , cluster identity 4711 [ 223.705208][ T9392] tipc: Failed to set node id, please configure manually [ 223.705250][ T9392] tipc: Enabling of bearer rejected, failed to enable media [ 223.832646][ T5709] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 223.930567][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.931000][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.993909][ T5709] usb 1-1: New USB device found: idVendor=05ac, idProduct=0242, bcdDevice=0.00 [ 223.994893][ T5709] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.994911][ T5709] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.994924][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.994949][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.999115][ T5709] usb 1-1: config 0 descriptor?? [ 224.410222][ T5709] apple 0003:05AC:0242.0003: unknown global tag 0xe [ 224.410239][ T5709] apple 0003:05AC:0242.0003: item 0 2 1 14 parsing failed [ 224.410697][ T5709] apple 0003:05AC:0242.0003: parse failed [ 224.410757][ T5709] apple 0003:05AC:0242.0003: probe with driver apple failed with error -22 [ 224.612060][ T5709] usb 1-1: USB disconnect, device number 14 [ 224.960387][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.960843][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.502267][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 225.652103][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 225.652896][ T9] usb 1-1: New USB device found: idVendor=05ac, idProduct=0265, bcdDevice=0.00 [ 225.653915][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.653956][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.700121][ T9] usb 1-1: config 0 descriptor?? [ 226.174218][ T9] magicmouse 0003:05AC:0265.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 226.249817][ T9486] udevd[9486]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 226.319206][ T46] usb 1-1: USB disconnect, device number 15 [ 226.408759][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.409290][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.143881][ T9525] IPv6: Can't replace route, no match found [ 227.211145][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 227.361652][ T46] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 227.362612][ T46] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 227.362636][ T46] usb 1-1: config 0 has no interface number 0 [ 227.362673][ T46] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.364773][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.364797][ T46] usb 1-1: Product: syz [ 227.364812][ T46] usb 1-1: Manufacturer: syz [ 227.364827][ T46] usb 1-1: SerialNumber: syz [ 227.367607][ T46] usb 1-1: config 0 descriptor?? [ 227.403367][ T46] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 227.579962][ T9] usb 1-1: USB disconnect, device number 16 [ 227.592806][ T9] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 228.520913][ T192] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 228.671984][ T192] usb 1-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 228.679843][ T192] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 228.679872][ T192] usb 1-1: Product: syz [ 228.679886][ T192] usb 1-1: Manufacturer: syz [ 228.679900][ T192] usb 1-1: SerialNumber: syz [ 228.723254][ T192] usb 1-1: config 0 descriptor?? [ 228.940779][ T192] usb 1-1: USB disconnect, device number 17 [ 230.403973][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.407445][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.003773][ T9647] jffs2: notice: (9647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.794660][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'. [ 231.865292][ T9674] MTRR 1 not used [ 232.429535][ T9699] fuse: fd is not a fuse device [ 232.432023][ T9699] fuse: fd is not a fuse device [ 233.256727][ T32] audit: type=1400 audit(1791300398.070:12): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9724 comm="syz.0.1452" name="unknown" offset=16 [ 233.339667][ T9727] 9p: Bad value for 'rfdno' [ 233.437673][ T9731] netlink: 'syz.0.1454': attribute type 2 has an invalid length. [ 235.795108][ T9808] kernel profiling enabled (shift: 5) [ 236.262545][ T32] audit: type=1400 audit(1791300401.082:13): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9821 comm="syz.2.1497" name="unknown" offset=16 [ 236.352453][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.352937][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.825790][ T5709] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 237.981365][ T5709] usb 1-1: not running at top speed; connect to a high speed hub [ 237.981404][ T5709] usb 1-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 238.118357][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.118386][ T5709] usb 1-1: Product: syz [ 238.118400][ T5709] usb 1-1: Manufacturer: syz [ 238.118414][ T5709] usb 1-1: SerialNumber: syz [ 238.143962][ T5709] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 238.164022][ T5709] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 238.177410][ T5709] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 238.190081][ T5709] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 238.210841][ T5709] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 238.425392][ C0] usb 1-1: malformed indat packet [ 240.277851][ T9957] For dev_enable ops, only valid value is "1" [ 240.633239][ T5778] usb 1-1: USB disconnect, device number 18 [ 240.700490][ T5778] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 240.732090][ T5778] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 240.750372][ T5778] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 240.765094][ T5778] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 240.766662][ T5778] keyspan 1-1:1.0: device disconnected [ 241.127300][ T5778] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 241.304808][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 241.306123][ T5778] usb 1-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 241.308520][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.339411][ T5778] usb 1-1: config 0 descriptor?? [ 241.356598][ T5778] gspca_main: sunplus-2.14.0 probing 041e:400b [ 242.150120][ T5778] gspca_sunplus: reg_w_riv err -71 [ 242.150206][ T5778] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 242.180229][ T5778] usb 1-1: USB disconnect, device number 19 [ 242.908213][T10045] 9p: Bad value for 'rfdno' [ 243.737979][T10091] overlayfs: failed to clone lowerpath [ 244.906558][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.907002][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.787844][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.788342][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.806839][ T32] audit: type=1800 audit(1791300412.627:14): pid=10263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1693" name="bus" dev="tmpfs" ino=2154 res=0 errno=-22 [ 248.298864][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 248.585568][T10305] tun0: tun_chr_ioctl cmd 1074025678 [ 248.585594][T10305] tun0: group set to 1 [ 249.081710][T10329] MTRR 1 not used [ 250.318599][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.319113][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.383694][T10385] 9p: Bad value for 'rfdno' [ 251.451600][T10437] scsi_strcpy_devinfo: vendor string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كXPwe$XPK5'R X7R.]O\kekөopґ 0[{L;ȧ0GIq6?Uq9mߣ7``0I3ŵ' is too long [ 251.577663][T10441] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1774'. [ 252.423673][T10472] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.551552][T10476] 9p: Bad value for 'rfdno' [ 253.028253][T10502] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 254.403313][T10559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.404405][T10559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.582817][T10571] jffs2: notice: (10571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.454391][T10620] overlayfs: failed to clone upperpath [ 255.470471][T10620] overlayfs: missing 'lowerdir' [ 255.649624][ T5616] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 255.720091][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.720148][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.080416][T10644] jffs2: notice: (10644) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 256.142747][T10647] input: syz0 as /devices/virtual/input/input11 [ 256.232802][ T5616] block nbd0: Receive control failed (result -32) [ 256.234049][ T5613] block nbd0: Receive control failed (result -32) [ 256.425571][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 256.425661][T10653] bridge_slave_1: left allmulticast mode [ 256.425682][T10653] bridge_slave_1: left promiscuous mode [ 256.425927][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.463462][T10653] bridge_slave_0: left allmulticast mode [ 256.463491][T10653] bridge_slave_0: left promiscuous mode [ 256.464222][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.676416][ T5778] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 256.833978][ T5778] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 256.850939][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.859011][ T5778] usb 1-1: config 0 descriptor?? [ 256.862775][ T5778] cp210x 1-1:0.0: cp210x converter detected [ 257.272441][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.277814][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.332010][ T5778] usb 1-1: cp210x converter now attached to ttyUSB0 [ 257.358425][T10671] jffs2: notice: (10671) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.408782][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.409232][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.495030][ T5778] usb 1-1: USB disconnect, device number 20 [ 257.534101][ T5778] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 257.540839][ T5778] cp210x 1-1:0.0: device disconnected [ 258.345434][ T5344] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 258.495276][ T5344] usb 1-1: Using ep0 maxpacket: 8 [ 258.495978][ T5344] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.496903][ T5344] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 258.496938][ T5344] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 258.496951][ T5344] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.496967][ T5344] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.496989][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.705213][ T5344] usb 1-1: GET_CAPABILITIES returned 0 [ 258.705243][ T5344] usbtmc 1-1:16.0: can't read capabilities [ 258.920040][ T5344] usb 1-1: USB disconnect, device number 21 [ 259.561080][ T32] audit: type=1400 audit(1791300424.383:15): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=10760 comm="syz.0.1916" name="foo" offset=35 [ 259.627205][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.627738][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.894728][ T5344] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 260.045297][ T5344] usb 1-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.046387][ T5344] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.046419][ T5344] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.046456][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.052261][T10767] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 260.107067][ T5344] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.481733][ T5344] usb 1-1: USB disconnect, device number 22 [ 261.564044][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 261.716061][ T9] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 261.722784][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.722817][ T9] usb 1-1: Product: syz [ 261.722831][ T9] usb 1-1: Manufacturer: syz [ 261.722845][ T9] usb 1-1: SerialNumber: syz [ 261.742396][ T5709] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:5: No space for directory leaf checksum. Please run e2fsck -D. [ 261.742426][ T5709] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:5: checksumming directory block 0 [ 261.753422][ T5709] usb 1-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 261.753961][ T5709] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:5: No space for directory leaf checksum. Please run e2fsck -D. [ 261.753999][ T5709] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:5: checksumming directory block 0 [ 261.754163][ T5709] usb 1-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 261.755820][ T5709] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:5: No space for directory leaf checksum. Please run e2fsck -D. [ 261.755844][ T5709] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:5: checksumming directory block 0 [ 261.755995][ T5709] usb 1-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 261.756079][ T5709] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:5: No space for directory leaf checksum. Please run e2fsck -D. [ 261.756100][ T5709] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:5: checksumming directory block 0 [ 261.756238][ T5709] usb 1-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 261.756269][ T5709] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 261.756286][ T5709] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 264.390624][ T5344] usb 1-1: USB disconnect, device number 23 [ 264.568207][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1983'. [ 264.568232][T10933] openvswitch: netlink: Flow key attr not present in new flow. [ 264.975084][T10962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.976907][T10962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.670221][T10978] Invalid ELF header magic: != ELF [ 265.672930][T10978] Invalid ELF header magic: != ELF [ 265.795120][ T5778] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 265.819598][ T5778] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.847328][T10990] udevd[10990]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 265.895061][T10993] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 266.639292][ T5608] svc: failed to register nfsdv3 RPC service (errno 5). [ 266.639315][ T5608] failed to unregister tcp with rpcbind [ 267.715724][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.716175][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.919281][ T32] audit: type=1326 audit(1791300433.748:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.4.2059" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6621f9e199 code=0x0 [ 269.278640][T11096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.367836][T11124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.840805][T11179] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.2082: No space for directory leaf checksum. Please run e2fsck -D. [ 270.840842][T11179] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.2.2082: checksumming directory block 0 [ 270.852874][T11179] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.2082: No space for directory leaf checksum. Please run e2fsck -D. [ 270.852907][T11179] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.2.2082: checksumming directory block 0 [ 270.854871][T11179] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.2082: No space for directory leaf checksum. Please run e2fsck -D. [ 270.854904][T11179] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.2.2082: checksumming directory block 0 [ 270.855271][T11179] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.2082: No space for directory leaf checksum. Please run e2fsck -D. [ 270.855302][T11179] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.2.2082: checksumming directory block 0 [ 271.027150][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 271.045720][T11185] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2083'. [ 271.048415][T11185] eql: entered promiscuous mode [ 271.051770][ T10] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.063984][T11185] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2083'. [ 271.064148][T11185] 0XD: renamed from eql [ 271.107721][T11185] 0XD: remember to turn off Van-Jacobson compression on your slave devices [ 271.107759][T11185] 0XD: left promiscuous mode [ 271.107774][T11185] 0XD: entered allmulticast mode [ 271.121885][T11188] udevd[11188]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 272.347704][T11224] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2092: No space for directory leaf checksum. Please run e2fsck -D. [ 272.349132][T11224] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.2092: checksumming directory block 0 [ 272.351183][T11224] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2092: No space for directory leaf checksum. Please run e2fsck -D. [ 272.351215][T11224] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.2092: checksumming directory block 0 [ 272.352533][T11224] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2092: No space for directory leaf checksum. Please run e2fsck -D. [ 272.352563][T11224] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.2092: checksumming directory block 0 [ 272.352854][T11224] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2092: No space for directory leaf checksum. Please run e2fsck -D. [ 272.352893][T11224] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.2092: checksumming directory block 0 [ 272.805124][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.805529][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.645162][T11268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.647299][T11268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.876646][T11268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.887825][T11268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.731371][T11297] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 274.735067][ T6344] IPVS: starting estimator thread 0... [ 274.817560][T11298] IPVS: using max 30 ests per chain, 72000 per kthread [ 276.242868][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.260826][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.754338][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'. [ 277.014478][T11380] netlink: 'syz.4.2157': attribute type 4 has an invalid length. [ 277.030851][T11380] ------------[ cut here ]------------ [ 277.030869][T11380] debug_locks && !(lock_is_held(&(&n->tbl->lock)->dep_map) != 0) [ 277.030884][T11380] WARNING: net/core/neighbour.c:154 at neigh_mark_dead+0x2fb/0x340, CPU#0: syz.4.2157/11380 [ 277.056145][T11380] Modules linked in: [ 277.061848][T11380] CPU: 0 UID: 0 PID: 11380 Comm: syz.4.2157 Not tainted syzkaller #0 PREEMPT(full) [ 277.071339][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.081472][T11380] RIP: 0010:neigh_mark_dead+0x2fb/0x340 [ 277.087087][T11380] Code: e8 03 42 80 3c 28 00 74 08 48 89 df e8 be 3a 6a f8 4c 89 33 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 16 48 f8 f7 90 <0f> 0b 90 e9 8f fd ff ff 48 c7 c1 e0 23 bc 90 80 e1 07 80 c1 03 38 [ 277.106756][T11380] RSP: 0018:ffffc9000e556620 EFLAGS: 00010287 [ 277.112943][T11380] RAX: ffffffff89d07ffa RBX: ffff88801e31c800 RCX: 0000000000080000 [ 277.120983][T11380] RDX: ffffc90019801000 RSI: 00000000000028d3 RDI: 00000000000028d4 [ 277.129023][T11380] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 277.137067][T11380] R10: dffffc0000000000 R11: fffff52001caacbc R12: ffff88801e31c93c [ 277.145157][T11380] R13: dffffc0000000000 R14: ffff88801e31c820 R15: ffff88801e31c800 [ 277.153197][T11380] FS: 00007f6622dd46c0(0000) GS:ffff888124633000(0000) knlGS:0000000000000000 [ 277.162192][T11380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.168838][T11380] CR2: 00007f3a49d556c8 CR3: 0000000033772000 CR4: 00000000003526f0 [ 277.176883][T11380] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.184883][T11380] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 277.192924][T11380] Call Trace: [ 277.196225][T11380] [ 277.199229][T11380] neigh_flush_one+0x27c/0x5a0 [ 277.204021][T11380] ? kvfree_call_rcu+0x9c/0x430 [ 277.208945][T11380] __neigh_ifdown+0x1fb/0xc70 [ 277.213667][T11380] ? __fib6_clean_all+0xb8/0x5d0 [ 277.218767][T11380] ? __pfx___neigh_ifdown+0x10/0x10 [ 277.224010][T11380] ? __pfx___fib6_clean_all+0x10/0x10 [ 277.229480][T11380] ? __pfx_fib6_clean_node+0x10/0x10 [ 277.234790][T11380] ? __pfx_fib6_ifdown+0x10/0x10 [ 277.239836][T11380] neigh_ifdown+0x1f/0x30 [ 277.244198][T11380] rt6_disable_ip+0x751/0x7e0 [ 277.248975][T11380] ? trace_contention_end+0x3d/0x140 [ 277.254300][T11380] ? __pfx_rt6_disable_ip+0x10/0x10 [ 277.259602][T11380] addrconf_ifdown+0x155/0x1ad0 [ 277.264592][T11380] ? __mutex_unlock_slowpath+0x731/0x900 [ 277.270409][T11380] ? net_generic+0x1e/0x240 [ 277.275093][T11380] ? __pfx_addrconf_ifdown+0x10/0x10 [ 277.280449][T11380] ? net_generic+0x1e/0x240 [ 277.284990][T11380] addrconf_notify+0x1bc/0x1050 [ 277.290011][T11380] notifier_call_chain+0x1a5/0x3d0 [ 277.295183][T11380] netif_set_mtu_ext+0x5ac/0x830 [ 277.300275][T11380] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 277.305767][T11380] ? __irq_work_queue_local+0x1c0/0x4f0 [ 277.311423][T11380] ? validate_linkmsg+0x809/0xa50 [ 277.316600][T11380] do_setlink+0xa81/0x47a0 [ 277.321085][T11380] ? __pfx_vprintk_emit+0x10/0x10 [ 277.326125][T11380] ? __pfx_do_setlink+0x10/0x10 [ 277.331032][T11380] ? __lock_acquire+0x747/0x2de0 [ 277.336010][T11380] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.341920][T11380] ? ___ratelimit+0x584/0x8e0 [ 277.346836][T11380] ? __mutex_trylock_common+0x15f/0x270 [ 277.352398][T11380] ? __pfx___mutex_trylock_common+0x10/0x10 [ 277.358400][T11380] ? rcu_is_watching+0x16/0xb0 [ 277.363299][T11380] ? trace_contention_end+0x3d/0x140 [ 277.368678][T11380] ? __mutex_lock+0x305/0x15a0 [ 277.373469][T11380] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 277.379994][T11380] ? arch_stack_walk+0xfb/0x150 [ 277.384882][T11380] ? rtnl_setlink+0x4b3/0x820 [ 277.389619][T11380] ? __pfx___mutex_lock+0x10/0x10 [ 277.394684][T11380] ? ns_capable+0x84/0xe0 [ 277.399145][T11380] ? rtnl_nets_add+0x16c/0x300 [ 277.403931][T11380] rtnl_setlink+0x578/0x820 [ 277.408489][T11380] ? netlink_deliver_tap+0x19c/0x1b0 [ 277.413907][T11380] ? netlink_unicast+0x781/0x940 [ 277.418900][T11380] ? netlink_sendmsg+0x7c3/0xae0 [ 277.423864][T11380] ? __pfx_rtnl_setlink+0x10/0x10 [ 277.429024][T11380] ? lockdep_hardirqs_on+0x7b/0x110 [ 277.434417][T11380] ? lock_acquire+0x115/0x350 [ 277.439161][T11380] ? __pfx_rtnl_setlink+0x10/0x10 [ 277.444204][T11380] rtnetlink_rcv_msg+0x802/0xc00 [ 277.449231][T11380] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 277.454367][T11380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.459978][T11380] ? __copy_skb_header+0xa3/0x4a0 [ 277.465162][T11380] ? __asan_memcpy+0x40/0x70 [ 277.469888][T11380] netlink_rcv_skb+0x226/0x4a0 [ 277.474671][T11380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.480187][T11380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.485516][T11380] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.490772][T11380] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.495986][T11380] netlink_unicast+0x7bd/0x940 [ 277.500840][T11380] netlink_sendmsg+0x7c3/0xae0 [ 277.505656][T11380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.511013][T11380] ? apparmor_socket_sendmsg+0x98/0x360 [ 277.516723][T11380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.522107][T11380] sock_sendmsg_nosec+0x14e/0x190 [ 277.527369][T11380] sock_write_iter+0x2de/0x3e0 [ 277.532160][T11380] ? __pfx_sock_write_iter+0x10/0x10 [ 277.537523][T11380] do_iter_readv_writev+0x612/0x8c0 [ 277.542792][T11380] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 277.548571][T11380] ? bpf_lsm_file_permission+0x9/0x20 [ 277.554000][T11380] ? security_file_permission+0x75/0x260 [ 277.559812][T11380] ? rw_verify_area+0x203/0x4c0 [ 277.564690][T11380] vfs_writev+0x343/0x990 [ 277.569104][T11380] ? __pfx_vfs_writev+0x10/0x10 [ 277.573987][T11380] ? __fget_files+0x2a/0x420 [ 277.578740][T11380] ? __fget_files+0x3a2/0x420 [ 277.583457][T11380] ? fdget+0x1ac/0x250 [ 277.587599][T11380] do_writev+0x154/0x2e0 [ 277.591857][T11380] ? __pfx_do_writev+0x10/0x10 [ 277.596670][T11380] do_syscall_64+0x166/0x520 [ 277.601277][T11380] ? trace_irq_disable+0x3b/0x140 [ 277.606317][T11380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.612467][T11380] ? clear_bhb_loop+0x70/0xc0 [ 277.617206][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.623122][T11380] RIP: 0033:0x7f6621f9e199 [ 277.627616][T11380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.647396][T11380] RSP: 002b:00007f6622dd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 277.655811][T11380] RAX: ffffffffffffffda RBX: 00007f6622225fa0 RCX: 00007f6621f9e199 [ 277.663833][T11380] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 277.671856][T11380] RBP: 00007f66220358e0 R08: 0000000000000000 R09: 0000000000000000 [ 277.679897][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.687911][T11380] R13: 00007f6622226038 R14: 00007f6622225fa0 R15: 00007fffb6bdb088 [ 277.695914][T11380] [ 277.698988][T11380] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.706287][T11380] CPU: 0 UID: 0 PID: 11380 Comm: syz.4.2157 Not tainted syzkaller #0 PREEMPT(full) [ 277.715796][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.725859][T11380] Call Trace: [ 277.729168][T11380] [ 277.732108][T11380] vpanic+0x26f/0x710 [ 277.736132][T11380] panic+0xc5/0xd0 [ 277.739859][T11380] ? __pfx_panic+0x10/0x10 [ 277.744301][T11380] __warn+0x315/0x4c0 [ 277.748304][T11380] ? neigh_mark_dead+0x2fb/0x340 [ 277.753302][T11380] ? neigh_mark_dead+0x2fb/0x340 [ 277.758261][T11380] __report_bug+0x276/0x570 [ 277.762897][T11380] ? neigh_mark_dead+0x2fb/0x340 [ 277.767838][T11380] ? __pfx___report_bug+0x10/0x10 [ 277.772877][T11380] ? __lock_acquire+0x747/0x2de0 [ 277.777815][T11380] ? ref_tracker_free+0x518/0x830 [ 277.782915][T11380] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.788736][T11380] ? neigh_mark_dead+0x2fb/0x340 [ 277.793673][T11380] report_bug+0x16b/0x220 [ 277.798000][T11380] ? neigh_mark_dead+0x2fb/0x340 [ 277.802930][T11380] ? neigh_mark_dead+0x2fd/0x340 [ 277.807880][T11380] handle_bug+0x9c/0x200 [ 277.812129][T11380] exc_invalid_op+0x1a/0x50 [ 277.816662][T11380] asm_exc_invalid_op+0x1a/0x20 [ 277.821534][T11380] RIP: 0010:neigh_mark_dead+0x2fb/0x340 [ 277.827084][T11380] Code: e8 03 42 80 3c 28 00 74 08 48 89 df e8 be 3a 6a f8 4c 89 33 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 16 48 f8 f7 90 <0f> 0b 90 e9 8f fd ff ff 48 c7 c1 e0 23 bc 90 80 e1 07 80 c1 03 38 [ 277.846717][T11380] RSP: 0018:ffffc9000e556620 EFLAGS: 00010287 [ 277.852822][T11380] RAX: ffffffff89d07ffa RBX: ffff88801e31c800 RCX: 0000000000080000 [ 277.860824][T11380] RDX: ffffc90019801000 RSI: 00000000000028d3 RDI: 00000000000028d4 [ 277.868799][T11380] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 277.876882][T11380] R10: dffffc0000000000 R11: fffff52001caacbc R12: ffff88801e31c93c [ 277.885031][T11380] R13: dffffc0000000000 R14: ffff88801e31c820 R15: ffff88801e31c800 [ 277.893044][T11380] ? neigh_mark_dead+0x2fa/0x340 [ 277.897999][T11380] neigh_flush_one+0x27c/0x5a0 [ 277.902775][T11380] ? kvfree_call_rcu+0x9c/0x430 [ 277.907641][T11380] __neigh_ifdown+0x1fb/0xc70 [ 277.912356][T11380] ? __fib6_clean_all+0xb8/0x5d0 [ 277.917319][T11380] ? __pfx___neigh_ifdown+0x10/0x10 [ 277.922524][T11380] ? __pfx___fib6_clean_all+0x10/0x10 [ 277.927919][T11380] ? __pfx_fib6_clean_node+0x10/0x10 [ 277.933208][T11380] ? __pfx_fib6_ifdown+0x10/0x10 [ 277.938158][T11380] neigh_ifdown+0x1f/0x30 [ 277.942488][T11380] rt6_disable_ip+0x751/0x7e0 [ 277.947166][T11380] ? trace_contention_end+0x3d/0x140 [ 277.952470][T11380] ? __pfx_rt6_disable_ip+0x10/0x10 [ 277.957672][T11380] addrconf_ifdown+0x155/0x1ad0 [ 277.962524][T11380] ? __mutex_unlock_slowpath+0x731/0x900 [ 277.968157][T11380] ? net_generic+0x1e/0x240 [ 277.972660][T11380] ? __pfx_addrconf_ifdown+0x10/0x10 [ 277.977948][T11380] ? net_generic+0x1e/0x240 [ 277.982456][T11380] addrconf_notify+0x1bc/0x1050 [ 277.987321][T11380] notifier_call_chain+0x1a5/0x3d0 [ 277.992437][T11380] netif_set_mtu_ext+0x5ac/0x830 [ 277.997381][T11380] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 278.002838][T11380] ? __irq_work_queue_local+0x1c0/0x4f0 [ 278.008385][T11380] ? validate_linkmsg+0x809/0xa50 [ 278.013409][T11380] do_setlink+0xa81/0x47a0 [ 278.017830][T11380] ? __pfx_vprintk_emit+0x10/0x10 [ 278.022861][T11380] ? __pfx_do_setlink+0x10/0x10 [ 278.027731][T11380] ? __lock_acquire+0x747/0x2de0 [ 278.032697][T11380] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 278.038499][T11380] ? ___ratelimit+0x584/0x8e0 [ 278.043179][T11380] ? __mutex_trylock_common+0x15f/0x270 [ 278.048724][T11380] ? __pfx___mutex_trylock_common+0x10/0x10 [ 278.054619][T11380] ? rcu_is_watching+0x16/0xb0 [ 278.059417][T11380] ? trace_contention_end+0x3d/0x140 [ 278.064699][T11380] ? __mutex_lock+0x305/0x15a0 [ 278.069478][T11380] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 278.075640][T11380] ? arch_stack_walk+0xfb/0x150 [ 278.080513][T11380] ? rtnl_setlink+0x4b3/0x820 [ 278.085190][T11380] ? __pfx___mutex_lock+0x10/0x10 [ 278.090217][T11380] ? ns_capable+0x84/0xe0 [ 278.094576][T11380] ? rtnl_nets_add+0x16c/0x300 [ 278.099349][T11380] rtnl_setlink+0x578/0x820 [ 278.103895][T11380] ? netlink_deliver_tap+0x19c/0x1b0 [ 278.109191][T11380] ? netlink_unicast+0x781/0x940 [ 278.114125][T11380] ? netlink_sendmsg+0x7c3/0xae0 [ 278.119068][T11380] ? __pfx_rtnl_setlink+0x10/0x10 [ 278.124127][T11380] ? lockdep_hardirqs_on+0x7b/0x110 [ 278.129327][T11380] ? lock_acquire+0x115/0x350 [ 278.134011][T11380] ? __pfx_rtnl_setlink+0x10/0x10 [ 278.139032][T11380] rtnetlink_rcv_msg+0x802/0xc00 [ 278.143997][T11380] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 278.149120][T11380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.154579][T11380] ? __copy_skb_header+0xa3/0x4a0 [ 278.159602][T11380] ? __asan_memcpy+0x40/0x70 [ 278.164314][T11380] netlink_rcv_skb+0x226/0x4a0 [ 278.169178][T11380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.174659][T11380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.179983][T11380] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.185240][T11380] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.190455][T11380] netlink_unicast+0x7bd/0x940 [ 278.195244][T11380] netlink_sendmsg+0x7c3/0xae0 [ 278.200018][T11380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.205310][T11380] ? apparmor_socket_sendmsg+0x98/0x360 [ 278.210875][T11380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.216179][T11380] sock_sendmsg_nosec+0x14e/0x190 [ 278.221213][T11380] sock_write_iter+0x2de/0x3e0 [ 278.225990][T11380] ? __pfx_sock_write_iter+0x10/0x10 [ 278.231303][T11380] do_iter_readv_writev+0x612/0x8c0 [ 278.236531][T11380] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 278.242311][T11380] ? bpf_lsm_file_permission+0x9/0x20 [ 278.247708][T11380] ? security_file_permission+0x75/0x260 [ 278.253367][T11380] ? rw_verify_area+0x203/0x4c0 [ 278.258243][T11380] vfs_writev+0x343/0x990 [ 278.262622][T11380] ? __pfx_vfs_writev+0x10/0x10 [ 278.267515][T11380] ? __fget_files+0x2a/0x420 [ 278.272109][T11380] ? __fget_files+0x3a2/0x420 [ 278.276819][T11380] ? fdget+0x1ac/0x250 [ 278.280888][T11380] do_writev+0x154/0x2e0 [ 278.285133][T11380] ? __pfx_do_writev+0x10/0x10 [ 278.289915][T11380] do_syscall_64+0x166/0x520 [ 278.294516][T11380] ? trace_irq_disable+0x3b/0x140 [ 278.299533][T11380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.305598][T11380] ? clear_bhb_loop+0x70/0xc0 [ 278.310270][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.316160][T11380] RIP: 0033:0x7f6621f9e199 [ 278.320764][T11380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.340364][T11380] RSP: 002b:00007f6622dd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 278.348776][T11380] RAX: ffffffffffffffda RBX: 00007f6622225fa0 RCX: 00007f6621f9e199 [ 278.356769][T11380] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 278.364741][T11380] RBP: 00007f66220358e0 R08: 0000000000000000 R09: 0000000000000000 [ 278.372712][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.381461][T11380] R13: 00007f6622226038 R14: 00007f6622225fa0 R15: 00007fffb6bdb088 [ 278.389442][T11380] [ 278.392814][T11380] Kernel Offset: disabled [ 278.397162][T11380] Rebooting in 86400 seconds..