last executing test programs: 9.796273002s ago: executing program 0 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a8000010"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 9.574178485s ago: executing program 0 (id=1073): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept(r4, 0x0, 0x0) 8.480293357s ago: executing program 4 (id=1075): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000440)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000480)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 8.480096577s ago: executing program 0 (id=1076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./debug/kvm\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000600), 0x1000) r2 = openat(r1, &(0x7f0000000643), 0x0, 0x0) openat(r2, &(0x7f0000000700)='mmu_shadow_zapped\x00', 0x6040, 0x0) 6.977326352s ago: executing program 4 (id=1078): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='attr/current\x00') capset(&(0x7f0000004ec0)={0x20071026}, &(0x7f0000004f80)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) writev(r0, &(0x7f0000005e00)=[{&(0x7f0000005e40)='w', 0x1}], 0x1) 6.832196087s ago: executing program 0 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000040000901feffffff00000000017c0000040042800c00018006002000"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6.793106871s ago: executing program 4 (id=1080): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000880)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000940)=""/102392, 0x18ff8) accept4$alg(r0, 0x0, 0x0, 0x80000) openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0), 0x1c3902, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{}, {0xfd, 0xc9}}}, 0x9) 6.492351212s ago: executing program 0 (id=1081): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x75, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x3f, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf51, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0x81, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357"}}}}}}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x20000) 5.720452001s ago: executing program 1 (id=1082): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socket$kcm(0x10, 0x2, 0x10) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0xfe33) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x1, @remote}, 0x10, 0x0}}], 0x1, 0x2400c042) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe2e, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x132}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ba0, 0x20000, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7301, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8, 0x2, 0x250, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r6, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5.011386665s ago: executing program 3 (id=1084): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) 4.775087389s ago: executing program 4 (id=1085): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 4.259553912s ago: executing program 3 (id=1087): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000000)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000019240), 0x0) syz_emit_vhci(0x0, 0x0) nanosleep(0x0, 0x0) setns(0xc9, 0x0) r6 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r6, 0x1, 0x15, 0x0, 0x0) bind(r6, &(0x7f0000019340)=@generic={0x1f, "aaaaaaaaaa000100"}, 0x80) connect(r6, &(0x7f00000193c0)=@generic={0x1f, "0102030405060100"}, 0x80) close_range(r3, 0xffffffffffffffff, 0x0) 4.253028413s ago: executing program 2 (id=1088): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x53}}, 0x10, 0x0}, 0x300068c1) sendmsg$sock(r0, 0x0, 0x41) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1}, 0x21) 3.865498552s ago: executing program 1 (id=1089): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c"], &(0x7f0000000380)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000500), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000780)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 3.092164442s ago: executing program 2 (id=1090): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0xc2a02) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f00000003c0)=""/4078) 2.978390324s ago: executing program 2 (id=1091): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000180)=0x4) 2.962446036s ago: executing program 1 (id=1092): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002540), 0x4000000004002, 0x0) dup(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x15, 0x400, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2f, 0x0, 0x0, @u32}]}, 0x1c}}, 0x10) bind$rds(r4, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, 0x0, 0x0, 0x8000, 0x6, 0x84e, 0x2f5, 0x10, 0x10000000000712}}], 0x58}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 2.62827951s ago: executing program 2 (id=1093): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) 2.6279862s ago: executing program 3 (id=1094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0xb) 2.62782848s ago: executing program 4 (id=1095): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000880)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000940)=""/102392, 0x18ff8) accept4$alg(r0, 0x0, 0x0, 0x80000) openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0), 0x1c3902, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{}, {0xfd, 0xc9}}}, 0x9) 1.671227878s ago: executing program 1 (id=1096): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x1000, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000880), 0x492492492492627, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)="9a6313ce4b8a066991a0ec5612e1109b7a591d3886bc7b5a0406f084a82da5752ef125be2a068c1e0cdb8f017f5b6000b1a6c99a1175a3", 0x37) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xa, 0x5, 0x2, 0x9, 0x0, 0x1, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x3d) pipe2$watch_queue(&(0x7f0000000740), 0x80) close_range(r2, 0xffffffffffffffff, 0x0) 1.566523909s ago: executing program 3 (id=1097): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) 1.542383272s ago: executing program 1 (id=1098): r0 = memfd_create(&(0x7f0000000480)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3', 0x6) fallocate(r0, 0x3, 0x700, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x6, 0x1, 0x4a26, 0x953, 0x15, "7e97d8e5159f4e25"}) dup3(0xffffffffffffffff, r1, 0x0) rename(0x0, 0x0) 1.009461106s ago: executing program 4 (id=1099): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socket$kcm(0x10, 0x2, 0x10) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0xfe33) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x1, @remote}, 0x10, 0x0}}], 0x1, 0x2400c042) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe2e, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x132}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ba0, 0x20000, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7301, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8, 0x2, 0x250, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r6, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.003796477s ago: executing program 0 (id=1109): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000880)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) accept4$alg(r0, 0x0, 0x0, 0x80000) openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0), 0x1c3902, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{}, {0xfd, 0xc9}}}, 0x9) 896.251538ms ago: executing program 3 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000045c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6261746164760014000380100003800c00018008afc4"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) 802.850078ms ago: executing program 2 (id=1101): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 64.540384ms ago: executing program 1 (id=1102): syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) r6 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r4, 0x0, r6, 0x0, 0x2, 0x5) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffe3e) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x4a0000, 0x0) pipe2(&(0x7f0000000040), 0x0) r7 = socket(0x2, 0x3, 0xff) close_range(r7, 0xffffffffffffffff, 0x2) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) 201.77µs ago: executing program 3 (id=1103): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x3}) fsopen(&(0x7f00000002c0)='9p\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x2, 0x2, {0xa, 0x4e21, 0xfffff874, @loopback, 0x1}}}, 0x3a) sendmsg$key(r0, &(0x7f0000000380)={0x500, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) 0s ago: executing program 2 (id=1104): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000740)={r1}, &(0x7f0000000780)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000800)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000840)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa08, &(0x7f0000000880)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000008c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): tack_lvl+0x188/0x24e [ 154.532135][ T5070] ? show_regs_print_info+0x12/0x12 [ 154.537372][ T5070] ? load_image+0x410/0x410 [ 154.541927][ T5070] ? __might_sleep+0xd0/0xd0 [ 154.546563][ T5070] ? __lock_acquire+0x7ea0/0x7ea0 [ 154.551617][ T5070] should_fail_ex+0x390/0x4c0 [ 154.556336][ T5070] should_failslab+0x5/0x20 [ 154.560847][ T5070] slab_pre_alloc_hook+0x59/0x300 [ 154.565883][ T5070] kmem_cache_alloc+0x56/0x2f0 [ 154.570675][ T5070] ? security_file_alloc+0x30/0x110 [ 154.575991][ T5070] security_file_alloc+0x30/0x110 [ 154.581043][ T5070] __alloc_file+0xc2/0x230 [ 154.585536][ T5070] alloc_empty_file+0x90/0x180 [ 154.590332][ T5070] alloc_file+0x5b/0x5f0 [ 154.594600][ T5070] alloc_file_pseudo+0x180/0x200 [ 154.599569][ T5070] ? alloc_empty_file_noaccount+0x80/0x80 [ 154.605370][ T5070] ? alloc_fd+0x590/0x640 [ 154.609726][ T5070] sock_alloc_file+0xb3/0x240 [ 154.614412][ T5070] __sys_socket+0x12d/0x190 [ 154.618920][ T5070] __x64_sys_socket+0x76/0x80 [ 154.623601][ T5070] do_syscall_64+0x4c/0xa0 [ 154.628021][ T5070] ? clear_bhb_loop+0x60/0xb0 [ 154.632698][ T5070] ? clear_bhb_loop+0x60/0xb0 [ 154.637380][ T5070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.643298][ T5070] RIP: 0033:0x7faf5d39f559 [ 154.647710][ T5070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.667511][ T5070] RSP: 002b:00007faf5e1ddfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 154.675971][ T5070] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007faf5d39f559 [ 154.684061][ T5070] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 154.692057][ T5070] RBP: 00007faf5d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 154.700075][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.708062][ T5070] R13: 00007faf5d626218 R14: 00007faf5d626180 R15: 00007fff8434eb98 [ 154.716153][ T5070] [ 155.400052][ T5080] 9pnet_fd: Insufficient options for proto=fd [ 155.593286][ T3656] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.860085][ T3656] usb 2-1: Using ep0 maxpacket: 8 [ 156.055904][ T3656] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 156.165849][ T3656] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 156.360066][ T5094] ubi: mtd0 is already attached to ubi0 [ 156.928528][ T3656] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 156.936804][ T3656] usb 2-1: Product: syz [ 156.941028][ T3656] usb 2-1: Manufacturer: syz [ 156.945806][ T3656] usb 2-1: SerialNumber: syz [ 157.169594][ T3656] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 157.192069][ T3656] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 157.207647][ T3656] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 157.223213][ T3656] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 157.308501][ T5108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 157.383616][ T3656] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 157.391996][ T3656] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 158.757089][ T3656] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 158.775871][ T3656] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 158.800620][ T3656] usb 2-1: USB disconnect, device number 3 [ 158.828237][ T3656] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 158.858269][ T3656] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 158.887417][ T3656] visor 2-1:1.0: device disconnected [ 158.938399][ T5125] 9pnet_fd: Insufficient options for proto=fd [ 159.361754][ T5134] FAULT_INJECTION: forcing a failure. [ 159.361754][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 159.374575][ T5134] CPU: 1 PID: 5134 Comm: syz.2.193 Not tainted syzkaller #0 [ 159.381908][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.392004][ T5134] Call Trace: [ 159.395521][ T5134] [ 159.398497][ T5134] dump_stack_lvl+0x188/0x24e [ 159.403341][ T5134] ? show_regs_print_info+0x12/0x12 [ 159.408584][ T5134] ? load_image+0x410/0x410 [ 159.413150][ T5134] should_fail_ex+0x390/0x4c0 [ 159.417866][ T5134] should_failslab+0x5/0x20 [ 159.422498][ T5134] slab_pre_alloc_hook+0x59/0x300 [ 159.427672][ T5134] ? rfcomm_dlc_alloc+0x72/0x400 [ 159.432637][ T5134] __kmem_cache_alloc_node+0x4f/0x270 [ 159.438228][ T5134] ? rfcomm_dlc_alloc+0x72/0x400 [ 159.443199][ T5134] kmalloc_trace+0x26/0xe0 [ 159.447643][ T5134] rfcomm_dlc_alloc+0x72/0x400 [ 159.452422][ T5134] rfcomm_sock_alloc+0x23/0x200 [ 159.457285][ T5134] rfcomm_sock_create+0xbe/0x2c0 [ 159.462235][ T5134] bt_sock_create+0x155/0x220 [ 159.466923][ T5134] __sock_create+0x49a/0x940 [ 159.471532][ T5134] __sys_socket+0xc4/0x190 [ 159.475987][ T5134] __x64_sys_socket+0x76/0x80 [ 159.480681][ T5134] do_syscall_64+0x4c/0xa0 [ 159.485144][ T5134] ? clear_bhb_loop+0x60/0xb0 [ 159.489837][ T5134] ? clear_bhb_loop+0x60/0xb0 [ 159.494614][ T5134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.500542][ T5134] RIP: 0033:0x7f22c0f9f559 [ 159.504968][ T5134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.524607][ T5134] RSP: 002b:00007f22c1e9dfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 159.533053][ T5134] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f22c0f9f559 [ 159.541046][ T5134] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 159.549037][ T5134] RBP: 00007f22c1036b20 R08: 0000000000000000 R09: 0000200000000480 [ 159.557019][ T5134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.565000][ T5134] R13: 00007f22c1226038 R14: 00007f22c1225fa0 R15: 00007ffd76681568 [ 159.572998][ T5134] [ 160.499055][ T5144] ubi: mtd0 is already attached to ubi0 [ 162.589196][ T4387] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.364573][ T4387] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.393746][ T4387] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.423298][ T4387] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.443305][ T4387] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 163.483968][ T4387] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 163.521713][ T4387] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 163.603474][ T4387] usb 2-1: config 1 interface 1 has no altsetting 0 [ 163.641502][ T4387] usb 2-1: string descriptor 0 read error: -22 [ 163.658232][ T4387] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 163.698059][ T4387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.562351][ T5175] 9pnet_fd: Insufficient options for proto=fd [ 164.709554][ T4387] usb 2-1: USB disconnect, device number 4 [ 166.751088][ T5188] FAULT_INJECTION: forcing a failure. [ 166.751088][ T5188] name failslab, interval 1, probability 0, space 0, times 0 [ 166.764058][ T5188] CPU: 0 PID: 5188 Comm: syz.0.206 Not tainted syzkaller #0 [ 166.771642][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 166.781728][ T5188] Call Trace: [ 166.785212][ T5188] [ 166.788171][ T5188] dump_stack_lvl+0x188/0x24e [ 166.792890][ T5188] ? show_regs_print_info+0x12/0x12 [ 166.798240][ T5188] ? load_image+0x410/0x410 [ 166.802786][ T5188] ? __might_sleep+0xd0/0xd0 [ 166.807442][ T5188] ? __lock_acquire+0x7ea0/0x7ea0 [ 166.812520][ T5188] should_fail_ex+0x390/0x4c0 [ 166.817245][ T5188] should_failslab+0x5/0x20 [ 166.821861][ T5188] slab_pre_alloc_hook+0x59/0x300 [ 166.826910][ T5188] kmem_cache_alloc_lru+0x49/0x2e0 [ 166.832046][ T5188] ? __d_alloc+0x2e/0x6e0 [ 166.836380][ T5188] __d_alloc+0x2e/0x6e0 [ 166.840635][ T5188] ? d_alloc_pseudo+0xe/0x70 [ 166.845497][ T5188] d_alloc_pseudo+0x19/0x70 [ 166.850052][ T5188] alloc_file_pseudo+0xe0/0x200 [ 166.854924][ T5188] ? alloc_empty_file_noaccount+0x80/0x80 [ 166.860697][ T5188] ? alloc_fd+0x590/0x640 [ 166.865134][ T5188] sock_alloc_file+0xb3/0x240 [ 166.869935][ T5188] __sys_socket+0x12d/0x190 [ 166.874454][ T5188] __x64_sys_socket+0x76/0x80 [ 166.879137][ T5188] do_syscall_64+0x4c/0xa0 [ 166.883570][ T5188] ? clear_bhb_loop+0x60/0xb0 [ 166.888429][ T5188] ? clear_bhb_loop+0x60/0xb0 [ 166.893114][ T5188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.899061][ T5188] RIP: 0033:0x7faf5d39f559 [ 166.903566][ T5188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.923262][ T5188] RSP: 002b:00007faf5e221fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 166.931765][ T5188] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007faf5d39f559 [ 166.939844][ T5188] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 166.947812][ T5188] RBP: 00007faf5d436b20 R08: 0000000000000000 R09: 0000200000000480 [ 166.956133][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.964375][ T5188] R13: 00007faf5d626038 R14: 00007faf5d625fa0 R15: 00007fff8434eb98 [ 166.972373][ T5188] [ 168.378676][ T5198] ubi: mtd0 is already attached to ubi0 [ 169.443210][ T4348] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 170.383266][ T4348] usb 5-1: Using ep0 maxpacket: 8 [ 170.390575][ T4348] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 170.410890][ T4348] usb 5-1: config 0 has no interface number 0 [ 170.431204][ T4348] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 170.462521][ T4348] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 170.483568][ T4348] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 170.515545][ T4348] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.552061][ T4348] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 170.580582][ T4348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.599237][ T4348] usb 5-1: Product: syz [ 170.626073][ T4348] usb 5-1: Manufacturer: syz [ 170.640978][ T4348] usb 5-1: SerialNumber: syz [ 170.664496][ T4348] usb 5-1: config 0 descriptor?? [ 170.686346][ T4348] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 170.850156][ T5237] FAULT_INJECTION: forcing a failure. [ 170.850156][ T5237] name failslab, interval 1, probability 0, space 0, times 0 [ 170.897710][ T4348] usb 5-1: USB disconnect, device number 2 [ 170.904384][ T5237] CPU: 0 PID: 5237 Comm: syz.1.220 Not tainted syzkaller #0 [ 170.911722][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 170.921909][ T5237] Call Trace: [ 170.925217][ T5237] [ 170.928177][ T5237] dump_stack_lvl+0x188/0x24e [ 170.932894][ T5237] ? show_regs_print_info+0x12/0x12 [ 170.938122][ T5237] ? load_image+0x410/0x410 [ 170.942669][ T5237] ? __might_sleep+0xd0/0xd0 [ 170.947290][ T5237] ? __lock_acquire+0x7ea0/0x7ea0 [ 170.952362][ T5237] should_fail_ex+0x390/0x4c0 [ 170.957110][ T5237] should_failslab+0x5/0x20 [ 170.961647][ T5237] slab_pre_alloc_hook+0x59/0x300 [ 170.966704][ T5237] kmem_cache_alloc+0x56/0x2f0 [ 170.971478][ T5237] ? __alloc_file+0x25/0x230 [ 170.976077][ T5237] __alloc_file+0x25/0x230 [ 170.980504][ T5237] alloc_empty_file+0x90/0x180 [ 170.985281][ T5237] alloc_file+0x5b/0x5f0 [ 170.989544][ T5237] alloc_file_pseudo+0x180/0x200 [ 170.994492][ T5237] ? alloc_empty_file_noaccount+0x80/0x80 [ 171.000223][ T5237] ? alloc_fd+0x590/0x640 [ 171.004574][ T5237] sock_alloc_file+0xb3/0x240 [ 171.009273][ T5237] __sys_socket+0x12d/0x190 [ 171.013795][ T5237] __x64_sys_socket+0x76/0x80 [ 171.018490][ T5237] do_syscall_64+0x4c/0xa0 [ 171.022915][ T5237] ? clear_bhb_loop+0x60/0xb0 [ 171.027610][ T5237] ? clear_bhb_loop+0x60/0xb0 [ 171.032339][ T5237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.038255][ T5237] RIP: 0033:0x7eff34f9f559 [ 171.042771][ T5237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.062477][ T5237] RSP: 002b:00007eff35eddfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 171.070995][ T5237] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007eff34f9f559 [ 171.078977][ T5237] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 171.086956][ T5237] RBP: 00007eff35036b20 R08: 0000000000000000 R09: 0000200000000480 [ 171.094935][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.102912][ T5237] R13: 00007eff35226038 R14: 00007eff35225fa0 R15: 00007fff83b6d118 [ 171.110924][ T5237] [ 171.925565][ T5250] 9pnet_fd: Insufficient options for proto=fd [ 176.544160][ T5289] FAULT_INJECTION: forcing a failure. [ 176.544160][ T5289] name failslab, interval 1, probability 0, space 0, times 0 [ 176.577347][ T5289] CPU: 1 PID: 5289 Comm: syz.1.234 Not tainted syzkaller #0 [ 176.584696][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.594872][ T5289] Call Trace: [ 176.598182][ T5289] [ 176.601144][ T5289] dump_stack_lvl+0x188/0x24e [ 176.605867][ T5289] ? show_regs_print_info+0x12/0x12 [ 176.611098][ T5289] ? load_image+0x410/0x410 [ 176.615636][ T5289] ? __might_sleep+0xd0/0xd0 [ 176.620519][ T5289] ? __lock_acquire+0x7ea0/0x7ea0 [ 176.625677][ T5289] should_fail_ex+0x390/0x4c0 [ 176.630397][ T5289] should_failslab+0x5/0x20 [ 176.634922][ T5289] slab_pre_alloc_hook+0x59/0x300 [ 176.639966][ T5289] kmem_cache_alloc+0x56/0x2f0 [ 176.644757][ T5289] ? __alloc_file+0x25/0x230 [ 176.649359][ T5289] __alloc_file+0x25/0x230 [ 176.653884][ T5289] alloc_empty_file+0x90/0x180 [ 176.658659][ T5289] alloc_file+0x5b/0x5f0 [ 176.662918][ T5289] alloc_file_pseudo+0x180/0x200 [ 176.667873][ T5289] ? alloc_empty_file_noaccount+0x80/0x80 [ 176.673611][ T5289] ? alloc_fd+0x590/0x640 [ 176.677956][ T5289] sock_alloc_file+0xb3/0x240 [ 176.682657][ T5289] __sys_socket+0x12d/0x190 [ 176.687220][ T5289] __x64_sys_socket+0x76/0x80 [ 176.691911][ T5289] do_syscall_64+0x4c/0xa0 [ 176.696338][ T5289] ? clear_bhb_loop+0x60/0xb0 [ 176.701023][ T5289] ? clear_bhb_loop+0x60/0xb0 [ 176.705915][ T5289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.711833][ T5289] RIP: 0033:0x7eff34f9f559 [ 176.716259][ T5289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.735963][ T5289] RSP: 002b:00007eff35eddfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 176.744394][ T5289] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007eff34f9f559 [ 176.752389][ T5289] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 176.760378][ T5289] RBP: 00007eff35036b20 R08: 0000000000000000 R09: 0000200000000280 [ 176.768378][ T5289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.776452][ T5289] R13: 00007eff35226038 R14: 00007eff35225fa0 R15: 00007fff83b6d118 [ 176.784496][ T5289] [ 180.955076][ T5346] FAULT_INJECTION: forcing a failure. [ 180.955076][ T5346] name failslab, interval 1, probability 0, space 0, times 0 [ 181.053555][ T5346] CPU: 1 PID: 5346 Comm: syz.1.248 Not tainted syzkaller #0 [ 181.060929][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 181.071028][ T5346] Call Trace: [ 181.074339][ T5346] [ 181.077301][ T5346] dump_stack_lvl+0x188/0x24e [ 181.082020][ T5346] ? show_regs_print_info+0x12/0x12 [ 181.087374][ T5346] ? load_image+0x410/0x410 [ 181.091932][ T5346] ? __might_sleep+0xd0/0xd0 [ 181.096557][ T5346] ? __lock_acquire+0x7ea0/0x7ea0 [ 181.101635][ T5346] should_fail_ex+0x390/0x4c0 [ 181.106363][ T5346] should_failslab+0x5/0x20 [ 181.110899][ T5346] slab_pre_alloc_hook+0x59/0x300 [ 181.115971][ T5346] kmem_cache_alloc+0x56/0x2f0 [ 181.120780][ T5346] ? __alloc_file+0x25/0x230 [ 181.125421][ T5346] __alloc_file+0x25/0x230 [ 181.129916][ T5346] alloc_empty_file+0x90/0x180 [ 181.134718][ T5346] alloc_file+0x5b/0x5f0 [ 181.139011][ T5346] alloc_file_pseudo+0x180/0x200 [ 181.143986][ T5346] ? alloc_empty_file_noaccount+0x80/0x80 [ 181.149749][ T5346] ? alloc_fd+0x590/0x640 [ 181.154133][ T5346] sock_alloc_file+0xb3/0x240 [ 181.158854][ T5346] __sys_socket+0x12d/0x190 [ 181.163409][ T5346] __x64_sys_socket+0x76/0x80 [ 181.168144][ T5346] do_syscall_64+0x4c/0xa0 [ 181.172611][ T5346] ? clear_bhb_loop+0x60/0xb0 [ 181.177331][ T5346] ? clear_bhb_loop+0x60/0xb0 [ 181.182059][ T5346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.188001][ T5346] RIP: 0033:0x7eff34f9f559 [ 181.192449][ T5346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.212276][ T5346] RSP: 002b:00007eff35eddfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 181.220828][ T5346] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007eff34f9f559 [ 181.228852][ T5346] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 181.236857][ T5346] RBP: 00007eff35036b20 R08: 0000000000000000 R09: 0000000000000000 [ 181.245029][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.253017][ T5346] R13: 00007eff35226038 R14: 00007eff35225fa0 R15: 00007fff83b6d118 [ 181.261042][ T5346] [ 181.324421][ T5343] 9pnet_fd: Insufficient options for proto=fd [ 186.549267][ T4388] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.555580][ T5403] FAULT_INJECTION: forcing a failure. [ 186.555580][ T5403] name failslab, interval 1, probability 0, space 0, times 0 [ 186.593236][ T5403] CPU: 1 PID: 5403 Comm: syz.3.264 Not tainted syzkaller #0 [ 186.600685][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.610781][ T5403] Call Trace: [ 186.614101][ T5403] [ 186.617067][ T5403] dump_stack_lvl+0x188/0x24e [ 186.621785][ T5403] ? show_regs_print_info+0x12/0x12 [ 186.627034][ T5403] ? load_image+0x410/0x410 [ 186.631582][ T5403] ? __might_sleep+0xd0/0xd0 [ 186.636220][ T5403] ? __lock_acquire+0x7ea0/0x7ea0 [ 186.641302][ T5403] should_fail_ex+0x390/0x4c0 [ 186.646064][ T5403] should_failslab+0x5/0x20 [ 186.650605][ T5403] slab_pre_alloc_hook+0x59/0x300 [ 186.655670][ T5403] kmem_cache_alloc+0x56/0x2f0 [ 186.660475][ T5403] ? __alloc_file+0x25/0x230 [ 186.665536][ T5403] __alloc_file+0x25/0x230 [ 186.669986][ T5403] alloc_empty_file+0x90/0x180 [ 186.674794][ T5403] alloc_file+0x5b/0x5f0 [ 186.679248][ T5403] alloc_file_pseudo+0x180/0x200 [ 186.684221][ T5403] ? alloc_empty_file_noaccount+0x80/0x80 [ 186.689978][ T5403] ? alloc_fd+0x590/0x640 [ 186.694351][ T5403] sock_alloc_file+0xb3/0x240 [ 186.699083][ T5403] __sys_socket+0x12d/0x190 [ 186.703612][ T5403] __x64_sys_socket+0x76/0x80 [ 186.708305][ T5403] do_syscall_64+0x4c/0xa0 [ 186.712734][ T5403] ? clear_bhb_loop+0x60/0xb0 [ 186.717424][ T5403] ? clear_bhb_loop+0x60/0xb0 [ 186.722109][ T5403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.728018][ T5403] RIP: 0033:0x7f2ef139f559 [ 186.732442][ T5403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.752057][ T5403] RSP: 002b:00007f2ef21bffc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 186.760484][ T5403] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f2ef139f559 [ 186.768465][ T5403] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 186.776736][ T5403] RBP: 00007f2ef1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.784717][ T5403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.792723][ T5403] R13: 00007f2ef1626038 R14: 00007f2ef1625fa0 R15: 00007ffd67f2dcf8 [ 186.800722][ T5403] [ 186.835074][ T4388] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.853183][ T4388] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.870655][ T4388] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.891557][ T4388] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.915826][ T4388] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.934724][ T4388] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.952426][ T4388] usb 1-1: Product: syz [ 186.961014][ T4388] usb 1-1: Manufacturer: syz [ 186.975093][ T4388] cdc_wdm 1-1:1.0: skipping garbage [ 186.989715][ T4388] cdc_wdm 1-1:1.0: skipping garbage [ 187.000772][ T4388] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 187.181531][ T5395] Zero length message leads to an empty skb [ 189.729588][ T5417] 9pnet_fd: Insufficient options for proto=fd [ 189.888657][ T14] usb 1-1: USB disconnect, device number 3 [ 189.996726][ T5424] ubi: mtd0 is already attached to ubi0 [ 191.187971][ T5429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.225501][ T5429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 191.273901][ T5429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 191.335199][ T5429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.341225][ T5429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.398142][ T5429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.438357][ T5429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.479402][ T5429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 191.501411][ T5429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 191.544403][ T5429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.550447][ T5429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.563056][ T5429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.584598][ T5429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.603479][ T5429] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.611224][ T5429] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.643392][ T4291] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.715305][ T5454] FAULT_INJECTION: forcing a failure. [ 192.715305][ T5454] name failslab, interval 1, probability 0, space 0, times 0 [ 192.728846][ T5454] CPU: 0 PID: 5454 Comm: syz.0.278 Not tainted syzkaller #0 [ 192.736193][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.746297][ T5454] Call Trace: [ 192.749606][ T5454] [ 192.752570][ T5454] dump_stack_lvl+0x188/0x24e [ 192.757290][ T5454] ? show_regs_print_info+0x12/0x12 [ 192.762524][ T5454] ? load_image+0x410/0x410 [ 192.767074][ T5454] ? __might_sleep+0xd0/0xd0 [ 192.771703][ T5454] ? __lock_acquire+0x7ea0/0x7ea0 [ 192.776788][ T5454] should_fail_ex+0x390/0x4c0 [ 192.781515][ T5454] should_failslab+0x5/0x20 [ 192.786056][ T5454] slab_pre_alloc_hook+0x59/0x300 [ 192.791124][ T5454] kmem_cache_alloc+0x56/0x2f0 [ 192.795913][ T5454] ? __alloc_file+0x25/0x230 [ 192.800520][ T5454] __alloc_file+0x25/0x230 [ 192.804952][ T5454] alloc_empty_file+0x90/0x180 [ 192.809904][ T5454] alloc_file+0x5b/0x5f0 [ 192.814162][ T5454] alloc_file_pseudo+0x180/0x200 [ 192.819116][ T5454] ? alloc_empty_file_noaccount+0x80/0x80 [ 192.824851][ T5454] ? alloc_fd+0x590/0x640 [ 192.829202][ T5454] sock_alloc_file+0xb3/0x240 [ 192.833894][ T5454] __sys_socket+0x12d/0x190 [ 192.838414][ T5454] __x64_sys_socket+0x76/0x80 [ 192.843109][ T5454] do_syscall_64+0x4c/0xa0 [ 192.847535][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 192.852218][ T5454] ? clear_bhb_loop+0x60/0xb0 [ 192.856921][ T5454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.862920][ T5454] RIP: 0033:0x7faf5d39f559 [ 192.867346][ T5454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.886984][ T5454] RSP: 002b:00007faf5e221fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 192.895508][ T5454] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007faf5d39f559 [ 192.903490][ T5454] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 192.911472][ T5454] RBP: 00007faf5d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 192.919453][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.927435][ T5454] R13: 00007faf5d626038 R14: 00007faf5d625fa0 R15: 00007fff8434eb98 [ 192.935450][ T5454] [ 193.353352][ T4291] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.513174][ T4291] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.593556][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.599787][ T4291] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.419017][ T5468] ubi: mtd0 is already attached to ubi0 [ 194.427190][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444012][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.954564][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 195.433162][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 195.613218][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 195.674302][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 195.681069][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 196.339652][ T5485] 9pnet_fd: Insufficient options for proto=fd [ 197.033239][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 197.188996][ T5497] FAULT_INJECTION: forcing a failure. [ 197.188996][ T5497] name failslab, interval 1, probability 0, space 0, times 0 [ 197.273576][ T5497] CPU: 1 PID: 5497 Comm: syz.3.289 Not tainted syzkaller #0 [ 197.280947][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.291039][ T5497] Call Trace: [ 197.294352][ T5497] [ 197.297313][ T5497] dump_stack_lvl+0x188/0x24e [ 197.302030][ T5497] ? show_regs_print_info+0x12/0x12 [ 197.307270][ T5497] ? load_image+0x410/0x410 [ 197.311812][ T5497] ? __might_sleep+0xd0/0xd0 [ 197.316431][ T5497] ? __lock_acquire+0x7ea0/0x7ea0 [ 197.321503][ T5497] should_fail_ex+0x390/0x4c0 [ 197.326313][ T5497] should_failslab+0x5/0x20 [ 197.330853][ T5497] slab_pre_alloc_hook+0x59/0x300 [ 197.335943][ T5497] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 197.341609][ T5497] __kmem_cache_alloc_node+0x4f/0x270 [ 197.347158][ T5497] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 197.352818][ T5497] __kmalloc_node+0xa2/0x240 [ 197.357547][ T5497] memcg_alloc_slab_cgroups+0x81/0x120 [ 197.363233][ T5497] slab_post_alloc_hook+0xba/0x490 [ 197.368364][ T5497] kmem_cache_alloc+0x18b/0x2f0 [ 197.373328][ T5497] ? copy_net_ns+0x13c/0x5b0 [ 197.377926][ T5497] copy_net_ns+0x13c/0x5b0 [ 197.382346][ T5497] create_new_namespaces+0x3ce/0x700 [ 197.387675][ T5497] unshare_nsproxy_namespaces+0x116/0x160 [ 197.393425][ T5497] ksys_unshare+0x4f6/0x8e0 [ 197.397943][ T5497] ? sighand_ctor+0x40/0x40 [ 197.402447][ T5497] ? lock_chain_count+0x20/0x20 [ 197.407303][ T5497] ? syscall_enter_from_user_mode+0x21/0x80 [ 197.413201][ T5497] __x64_sys_unshare+0x34/0x40 [ 197.417963][ T5497] do_syscall_64+0x4c/0xa0 [ 197.422377][ T5497] ? clear_bhb_loop+0x60/0xb0 [ 197.427069][ T5497] ? clear_bhb_loop+0x60/0xb0 [ 197.431762][ T5497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.437677][ T5497] RIP: 0033:0x7f2ef139f559 [ 197.442098][ T5497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.461806][ T5497] RSP: 002b:00007f2ef21c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 197.470317][ T5497] RAX: ffffffffffffffda RBX: 00007f2ef1625fa0 RCX: 00007f2ef139f559 [ 197.478308][ T5497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 197.486284][ T5497] RBP: 00007f2ef1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 197.494259][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.502229][ T5497] R13: 00007f2ef1626038 R14: 00007f2ef1625fa0 R15: 00007ffd67f2dcf8 [ 197.510228][ T5497] [ 197.523236][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 197.626175][ T5497] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.673181][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 197.753199][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 197.759280][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 198.480744][ T5508] FAULT_INJECTION: forcing a failure. [ 198.480744][ T5508] name failslab, interval 1, probability 0, space 0, times 0 [ 198.509280][ T5508] CPU: 0 PID: 5508 Comm: syz.3.293 Not tainted syzkaller #0 [ 198.516644][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 198.526748][ T5508] Call Trace: [ 198.530062][ T5508] [ 198.533051][ T5508] dump_stack_lvl+0x188/0x24e [ 198.537781][ T5508] ? show_regs_print_info+0x12/0x12 [ 198.543015][ T5508] ? load_image+0x410/0x410 [ 198.547641][ T5508] ? __might_sleep+0xd0/0xd0 [ 198.552272][ T5508] ? __lock_acquire+0x7ea0/0x7ea0 [ 198.557326][ T5508] should_fail_ex+0x390/0x4c0 [ 198.562044][ T5508] should_failslab+0x5/0x20 [ 198.566645][ T5508] slab_pre_alloc_hook+0x59/0x300 [ 198.571693][ T5508] kmem_cache_alloc+0x56/0x2f0 [ 198.576476][ T5508] ? __alloc_file+0x25/0x230 [ 198.581074][ T5508] __alloc_file+0x25/0x230 [ 198.585579][ T5508] alloc_empty_file+0x90/0x180 [ 198.590342][ T5508] alloc_file+0x5b/0x5f0 [ 198.594598][ T5508] alloc_file_pseudo+0x180/0x200 [ 198.599534][ T5508] ? alloc_empty_file_noaccount+0x80/0x80 [ 198.605304][ T5508] ? alloc_fd+0x590/0x640 [ 198.609664][ T5508] sock_alloc_file+0xb3/0x240 [ 198.614381][ T5508] __sys_socket+0x12d/0x190 [ 198.618905][ T5508] __x64_sys_socket+0x76/0x80 [ 198.623589][ T5508] do_syscall_64+0x4c/0xa0 [ 198.628025][ T5508] ? clear_bhb_loop+0x60/0xb0 [ 198.632699][ T5508] ? clear_bhb_loop+0x60/0xb0 [ 198.637379][ T5508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.643541][ T5508] RIP: 0033:0x7f2ef139f559 [ 198.647983][ T5508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.668379][ T5508] RSP: 002b:00007f2ef21bffc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 198.676815][ T5508] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f2ef139f559 [ 198.685071][ T5508] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 198.693133][ T5508] RBP: 00007f2ef1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 198.701149][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.709150][ T5508] R13: 00007f2ef1626038 R14: 00007f2ef1625fa0 R15: 00007ffd67f2dcf8 [ 198.717166][ T5508] [ 199.498744][ T5522] ubi: mtd0 is already attached to ubi0 [ 203.106794][ T5555] 9pnet_fd: Insufficient options for proto=fd [ 203.877834][ T5562] ubi: mtd0 is already attached to ubi0 [ 204.609697][ T5569] FAULT_INJECTION: forcing a failure. [ 204.609697][ T5569] name failslab, interval 1, probability 0, space 0, times 0 [ 205.553467][ T5569] CPU: 0 PID: 5569 Comm: syz.0.310 Not tainted syzkaller #0 [ 205.560940][ T5569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.571022][ T5569] Call Trace: [ 205.574325][ T5569] [ 205.577283][ T5569] dump_stack_lvl+0x188/0x24e [ 205.581998][ T5569] ? show_regs_print_info+0x12/0x12 [ 205.587229][ T5569] ? load_image+0x410/0x410 [ 205.591856][ T5569] ? __might_sleep+0xd0/0xd0 [ 205.596474][ T5569] ? __lock_acquire+0x7ea0/0x7ea0 [ 205.601537][ T5569] should_fail_ex+0x390/0x4c0 [ 205.606263][ T5569] should_failslab+0x5/0x20 [ 205.610973][ T5569] slab_pre_alloc_hook+0x59/0x300 [ 205.616125][ T5569] kmem_cache_alloc_lru+0x49/0x2e0 [ 205.621277][ T5569] ? __d_alloc+0x2e/0x6e0 [ 205.625641][ T5569] __d_alloc+0x2e/0x6e0 [ 205.629914][ T5569] ? d_alloc_pseudo+0xe/0x70 [ 205.634539][ T5569] d_alloc_pseudo+0x19/0x70 [ 205.639079][ T5569] alloc_file_pseudo+0xe0/0x200 [ 205.644060][ T5569] ? alloc_empty_file_noaccount+0x80/0x80 [ 205.649816][ T5569] ? alloc_fd+0x590/0x640 [ 205.654186][ T5569] sock_alloc_file+0xb3/0x240 [ 205.658904][ T5569] __sys_socket+0x12d/0x190 [ 205.663571][ T5569] __x64_sys_socket+0x76/0x80 [ 205.668316][ T5569] do_syscall_64+0x4c/0xa0 [ 205.672895][ T5569] ? clear_bhb_loop+0x60/0xb0 [ 205.677600][ T5569] ? clear_bhb_loop+0x60/0xb0 [ 205.682491][ T5569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.688430][ T5569] RIP: 0033:0x7faf5d39f559 [ 205.692912][ T5569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.712548][ T5569] RSP: 002b:00007faf5e221fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 205.720996][ T5569] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007faf5d39f559 [ 205.728999][ T5569] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 205.737008][ T5569] RBP: 00007faf5d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 205.745006][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.753011][ T5569] R13: 00007faf5d626038 R14: 00007faf5d625fa0 R15: 00007fff8434eb98 [ 205.761118][ T5569] [ 208.740020][ T5612] ubi: mtd0 is already attached to ubi0 [ 213.162824][ T5635] FAULT_INJECTION: forcing a failure. [ 213.162824][ T5635] name failslab, interval 1, probability 0, space 0, times 0 [ 213.333247][ T5635] CPU: 0 PID: 5635 Comm: syz.3.329 Not tainted syzkaller #0 [ 213.341065][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.351162][ T5635] Call Trace: [ 213.354498][ T5635] [ 213.357455][ T5635] dump_stack_lvl+0x188/0x24e [ 213.362190][ T5635] ? show_regs_print_info+0x12/0x12 [ 213.367442][ T5635] ? load_image+0x410/0x410 [ 213.371999][ T5635] ? __might_sleep+0xd0/0xd0 [ 213.376639][ T5635] ? __lock_acquire+0x7ea0/0x7ea0 [ 213.381713][ T5635] should_fail_ex+0x390/0x4c0 [ 213.386441][ T5635] should_failslab+0x5/0x20 [ 213.391016][ T5635] slab_pre_alloc_hook+0x59/0x300 [ 213.396099][ T5635] kmem_cache_alloc+0x56/0x2f0 [ 213.400992][ T5635] ? __alloc_file+0x25/0x230 [ 213.405638][ T5635] __alloc_file+0x25/0x230 [ 213.410098][ T5635] alloc_empty_file+0x90/0x180 [ 213.414986][ T5635] alloc_file+0x5b/0x5f0 [ 213.419364][ T5635] alloc_file_pseudo+0x180/0x200 [ 213.424436][ T5635] ? alloc_empty_file_noaccount+0x80/0x80 [ 213.430197][ T5635] ? alloc_fd+0x590/0x640 [ 213.434577][ T5635] sock_alloc_file+0xb3/0x240 [ 213.439310][ T5635] __sys_socket+0x12d/0x190 [ 213.443903][ T5635] __x64_sys_socket+0x76/0x80 [ 213.448625][ T5635] do_syscall_64+0x4c/0xa0 [ 213.453073][ T5635] ? clear_bhb_loop+0x60/0xb0 [ 213.457808][ T5635] ? clear_bhb_loop+0x60/0xb0 [ 213.462528][ T5635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.468468][ T5635] RIP: 0033:0x7f2ef139f559 [ 213.472923][ T5635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.492665][ T5635] RSP: 002b:00007f2ef21bffc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 213.501286][ T5635] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2ef139f559 [ 213.509286][ T5635] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 213.517289][ T5635] RBP: 00007f2ef1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 213.525470][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.533646][ T5635] R13: 00007f2ef1626038 R14: 00007f2ef1625fa0 R15: 00007ffd67f2dcf8 [ 213.541677][ T5635] [ 213.927992][ T5648] 9pnet_fd: Insufficient options for proto=fd [ 214.230683][ T5651] ubi: mtd0 is already attached to ubi0 [ 215.055019][ T5656] tmpfs: Unknown parameter '0x0000000000000003' [ 218.432448][ T5690] ubi: mtd0 is already attached to ubi0 [ 219.230931][ T5702] 9pnet_fd: Insufficient options for proto=fd [ 219.966625][ T5698] FAULT_INJECTION: forcing a failure. [ 219.966625][ T5698] name failslab, interval 1, probability 0, space 0, times 0 [ 220.070867][ T5698] CPU: 1 PID: 5698 Comm: syz.1.346 Not tainted syzkaller #0 [ 220.078244][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.088346][ T5698] Call Trace: [ 220.091663][ T5698] [ 220.094630][ T5698] dump_stack_lvl+0x188/0x24e [ 220.099349][ T5698] ? show_regs_print_info+0x12/0x12 [ 220.104606][ T5698] ? load_image+0x410/0x410 [ 220.109169][ T5698] ? __might_sleep+0xd0/0xd0 [ 220.113886][ T5698] ? __lock_acquire+0x7ea0/0x7ea0 [ 220.118955][ T5698] should_fail_ex+0x390/0x4c0 [ 220.123682][ T5698] should_failslab+0x5/0x20 [ 220.128219][ T5698] slab_pre_alloc_hook+0x59/0x300 [ 220.133285][ T5698] kmem_cache_alloc_lru+0x49/0x2e0 [ 220.138435][ T5698] ? __d_alloc+0x2e/0x6e0 [ 220.142806][ T5698] __d_alloc+0x2e/0x6e0 [ 220.147000][ T5698] ? d_alloc_pseudo+0xe/0x70 [ 220.151714][ T5698] d_alloc_pseudo+0x19/0x70 [ 220.156258][ T5698] alloc_file_pseudo+0xe0/0x200 [ 220.161153][ T5698] ? alloc_empty_file_noaccount+0x80/0x80 [ 220.166925][ T5698] ? alloc_fd+0x590/0x640 [ 220.171306][ T5698] sock_alloc_file+0xb3/0x240 [ 220.176019][ T5698] __sys_socket+0x12d/0x190 [ 220.180631][ T5698] __x64_sys_socket+0x76/0x80 [ 220.185320][ T5698] do_syscall_64+0x4c/0xa0 [ 220.189743][ T5698] ? clear_bhb_loop+0x60/0xb0 [ 220.194429][ T5698] ? clear_bhb_loop+0x60/0xb0 [ 220.199116][ T5698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.205111][ T5698] RIP: 0033:0x7eff34f9f559 [ 220.209559][ T5698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.229288][ T5698] RSP: 002b:00007eff35eddfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 220.237729][ T5698] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007eff34f9f559 [ 220.245723][ T5698] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 220.253733][ T5698] RBP: 00007eff35036b20 R08: 0000000000000000 R09: 0000000000000000 [ 220.261720][ T5698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.269708][ T5698] R13: 00007eff35226038 R14: 00007eff35225fa0 R15: 00007fff83b6d118 [ 220.277709][ T5698] [ 221.242009][ T5708] v: renamed from veth0_vlan [ 221.479270][ T5725] syz.0.355 uses obsolete (PF_INET,SOCK_PACKET) [ 222.614954][ T5744] 9pnet_fd: Insufficient options for proto=fd [ 223.307483][ T5750] FAULT_INJECTION: forcing a failure. [ 223.307483][ T5750] name failslab, interval 1, probability 0, space 0, times 0 [ 223.388321][ T5750] CPU: 1 PID: 5750 Comm: syz.1.364 Not tainted syzkaller #0 [ 223.395695][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 223.405956][ T5750] Call Trace: [ 223.409279][ T5750] [ 223.412233][ T5750] dump_stack_lvl+0x188/0x24e [ 223.416953][ T5750] ? show_regs_print_info+0x12/0x12 [ 223.422190][ T5750] ? load_image+0x410/0x410 [ 223.426734][ T5750] ? __might_sleep+0xd0/0xd0 [ 223.431364][ T5750] ? __lock_acquire+0x7ea0/0x7ea0 [ 223.436470][ T5750] should_fail_ex+0x390/0x4c0 [ 223.441192][ T5750] should_failslab+0x5/0x20 [ 223.445903][ T5750] slab_pre_alloc_hook+0x59/0x300 [ 223.450968][ T5750] kmem_cache_alloc+0x56/0x2f0 [ 223.455772][ T5750] ? __alloc_file+0x25/0x230 [ 223.460395][ T5750] __alloc_file+0x25/0x230 [ 223.464872][ T5750] alloc_empty_file+0x90/0x180 [ 223.469696][ T5750] alloc_file+0x5b/0x5f0 [ 223.473986][ T5750] alloc_file_pseudo+0x180/0x200 [ 223.478960][ T5750] ? alloc_empty_file_noaccount+0x80/0x80 [ 223.484717][ T5750] ? alloc_fd+0x590/0x640 [ 223.489094][ T5750] sock_alloc_file+0xb3/0x240 [ 223.493810][ T5750] __sys_socket+0x12d/0x190 [ 223.498356][ T5750] __x64_sys_socket+0x76/0x80 [ 223.503061][ T5750] do_syscall_64+0x4c/0xa0 [ 223.507505][ T5750] ? clear_bhb_loop+0x60/0xb0 [ 223.512208][ T5750] ? clear_bhb_loop+0x60/0xb0 [ 223.516910][ T5750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.522848][ T5750] RIP: 0033:0x7eff34f9f559 [ 223.527379][ T5750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.547281][ T5750] RSP: 002b:00007eff35eddfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 223.555737][ T5750] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007eff34f9f559 [ 223.563743][ T5750] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 223.571742][ T5750] RBP: 00007eff35036b20 R08: 0000000000000000 R09: 0000000000000000 [ 223.579837][ T5750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.587845][ T5750] R13: 00007eff35226038 R14: 00007eff35225fa0 R15: 00007fff83b6d118 [ 223.595873][ T5750] [ 223.880423][ T5751] ubi: mtd0 is already attached to ubi0 [ 227.895854][ T5799] 9pnet_fd: Insufficient options for proto=fd [ 230.728002][ T5817] FAULT_INJECTION: forcing a failure. [ 230.728002][ T5817] name failslab, interval 1, probability 0, space 0, times 0 [ 231.101298][ T5817] CPU: 1 PID: 5817 Comm: syz.2.377 Not tainted syzkaller #0 [ 231.108658][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 231.118762][ T5817] Call Trace: [ 231.122081][ T5817] [ 231.125042][ T5817] dump_stack_lvl+0x188/0x24e [ 231.129852][ T5817] ? show_regs_print_info+0x12/0x12 [ 231.135086][ T5817] ? load_image+0x410/0x410 [ 231.139634][ T5817] ? __might_sleep+0xd0/0xd0 [ 231.144261][ T5817] ? __lock_acquire+0x7ea0/0x7ea0 [ 231.149420][ T5817] should_fail_ex+0x390/0x4c0 [ 231.154160][ T5817] should_failslab+0x5/0x20 [ 231.158732][ T5817] slab_pre_alloc_hook+0x59/0x300 [ 231.163813][ T5817] kmem_cache_alloc_lru+0x49/0x2e0 [ 231.168968][ T5817] ? __d_alloc+0x2e/0x6e0 [ 231.173338][ T5817] __d_alloc+0x2e/0x6e0 [ 231.177524][ T5817] ? d_alloc_pseudo+0xe/0x70 [ 231.182145][ T5817] d_alloc_pseudo+0x19/0x70 [ 231.186682][ T5817] alloc_file_pseudo+0xe0/0x200 [ 231.191567][ T5817] ? alloc_empty_file_noaccount+0x80/0x80 [ 231.197332][ T5817] ? alloc_fd+0x590/0x640 [ 231.201705][ T5817] sock_alloc_file+0xb3/0x240 [ 231.206425][ T5817] __sys_socket+0x12d/0x190 [ 231.211059][ T5817] __x64_sys_socket+0x76/0x80 [ 231.215815][ T5817] do_syscall_64+0x4c/0xa0 [ 231.220276][ T5817] ? clear_bhb_loop+0x60/0xb0 [ 231.224987][ T5817] ? clear_bhb_loop+0x60/0xb0 [ 231.229793][ T5817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.235734][ T5817] RIP: 0033:0x7f22c0f9f559 [ 231.240185][ T5817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.259922][ T5817] RSP: 002b:00007f22c1e9dfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 231.268546][ T5817] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f22c0f9f559 [ 231.276557][ T5817] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 231.284826][ T5817] RBP: 00007f22c1036b20 R08: 0000000000000000 R09: 0000000000000000 [ 231.292829][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.300831][ T5817] R13: 00007f22c1226038 R14: 00007f22c1225fa0 R15: 00007ffd76681568 [ 231.308855][ T5817] [ 231.778557][ T5823] ubi: mtd0 is already attached to ubi0 [ 233.870978][ T5850] Invalid option length (1048488) for dns_resolver key [ 233.974760][ T5852] 9pnet_fd: Insufficient options for proto=fd [ 234.870014][ T5860] ubi: mtd0 is already attached to ubi0 [ 238.819901][ T5884] FAULT_INJECTION: forcing a failure. [ 238.819901][ T5884] name failslab, interval 1, probability 0, space 0, times 0 [ 238.893414][ T5884] CPU: 1 PID: 5884 Comm: syz.0.396 Not tainted syzkaller #0 [ 238.900781][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.910898][ T5884] Call Trace: [ 238.914193][ T5884] [ 238.917149][ T5884] dump_stack_lvl+0x188/0x24e [ 238.921855][ T5884] ? show_regs_print_info+0x12/0x12 [ 238.927071][ T5884] ? load_image+0x410/0x410 [ 238.931589][ T5884] ? __might_sleep+0xd0/0xd0 [ 238.936185][ T5884] ? __lock_acquire+0x7ea0/0x7ea0 [ 238.941315][ T5884] should_fail_ex+0x390/0x4c0 [ 238.946011][ T5884] should_failslab+0x5/0x20 [ 238.950521][ T5884] slab_pre_alloc_hook+0x59/0x300 [ 238.955561][ T5884] kmem_cache_alloc+0x56/0x2f0 [ 238.960335][ T5884] ? __alloc_file+0x25/0x230 [ 238.964936][ T5884] __alloc_file+0x25/0x230 [ 238.969548][ T5884] alloc_empty_file+0x90/0x180 [ 238.974322][ T5884] alloc_file+0x5b/0x5f0 [ 238.978574][ T5884] alloc_file_pseudo+0x180/0x200 [ 238.983524][ T5884] ? alloc_empty_file_noaccount+0x80/0x80 [ 238.989259][ T5884] ? alloc_fd+0x590/0x640 [ 238.993603][ T5884] sock_alloc_file+0xb3/0x240 [ 238.998293][ T5884] __sys_socket+0x12d/0x190 [ 239.002807][ T5884] __x64_sys_socket+0x76/0x80 [ 239.007500][ T5884] do_syscall_64+0x4c/0xa0 [ 239.011929][ T5884] ? clear_bhb_loop+0x60/0xb0 [ 239.016616][ T5884] ? clear_bhb_loop+0x60/0xb0 [ 239.021333][ T5884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.027240][ T5884] RIP: 0033:0x7faf5d39f559 [ 239.031684][ T5884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.051389][ T5884] RSP: 002b:00007faf5e221fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 239.059817][ T5884] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007faf5d39f559 [ 239.067799][ T5884] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 239.075801][ T5884] RBP: 00007faf5d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 239.083782][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.091760][ T5884] R13: 00007faf5d626038 R14: 00007faf5d625fa0 R15: 00007fff8434eb98 [ 239.099762][ T5884] [ 241.828078][ T5905] 9pnet_fd: Insufficient options for proto=fd [ 243.577171][ T5925] ubi: mtd0 is already attached to ubi0 [ 245.533859][ T5944] FAULT_INJECTION: forcing a failure. [ 245.533859][ T5944] name failslab, interval 1, probability 0, space 0, times 0 [ 245.546712][ T5944] CPU: 1 PID: 5944 Comm: syz.3.409 Not tainted syzkaller #0 [ 245.554069][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 245.564162][ T5944] Call Trace: [ 245.567471][ T5944] [ 245.570437][ T5944] dump_stack_lvl+0x188/0x24e [ 245.575152][ T5944] ? __stack_depot_save+0x35/0x480 [ 245.580308][ T5944] ? show_regs_print_info+0x12/0x12 [ 245.585553][ T5944] ? load_image+0x410/0x410 [ 245.590099][ T5944] ? __kasan_kmalloc+0x8e/0xa0 [ 245.594910][ T5944] ? security_sk_alloc+0x47/0x130 [ 245.599989][ T5944] ? sk_prot_alloc+0x101/0x210 [ 245.604802][ T5944] ? sk_alloc+0x36/0x330 [ 245.609123][ T5944] ? rfcomm_sock_alloc+0x4c/0x200 [ 245.614197][ T5944] ? rfcomm_sock_create+0xbe/0x2c0 [ 245.619505][ T5944] ? bt_sock_create+0x155/0x220 [ 245.624483][ T5944] ? __sock_create+0x49a/0x940 [ 245.629297][ T5944] ? __sys_socket+0xc4/0x190 [ 245.634013][ T5944] ? __x64_sys_socket+0x76/0x80 [ 245.638948][ T5944] should_fail_ex+0x390/0x4c0 [ 245.643674][ T5944] should_failslab+0x5/0x20 [ 245.648226][ T5944] slab_pre_alloc_hook+0x59/0x300 [ 245.653314][ T5944] ? ref_tracker_alloc+0x14f/0x490 [ 245.658482][ T5944] __kmem_cache_alloc_node+0x4f/0x270 [ 245.663904][ T5944] ? ref_tracker_alloc+0x14f/0x490 [ 245.669061][ T5944] kmalloc_trace+0x26/0xe0 [ 245.673523][ T5944] ref_tracker_alloc+0x14f/0x490 [ 245.678507][ T5944] ? ref_tracker_dir_print+0x150/0x150 [ 245.684012][ T5944] ? lockdep_softirqs_off+0x430/0x430 [ 245.689523][ T5944] ? sock_lock_init+0x414/0x860 [ 245.694406][ T5944] ? sk_prot_alloc+0x161/0x210 [ 245.699204][ T5944] ? sk_alloc+0x20/0x330 [ 245.703501][ T5944] sk_alloc+0x19c/0x330 [ 245.707696][ T5944] bt_sock_alloc+0x37/0x350 [ 245.712236][ T5944] rfcomm_sock_alloc+0x4c/0x200 [ 245.717124][ T5944] rfcomm_sock_create+0xbe/0x2c0 [ 245.722095][ T5944] bt_sock_create+0x155/0x220 [ 245.726807][ T5944] __sock_create+0x49a/0x940 [ 245.731446][ T5944] __sys_socket+0xc4/0x190 [ 245.735911][ T5944] __x64_sys_socket+0x76/0x80 [ 245.740631][ T5944] do_syscall_64+0x4c/0xa0 [ 245.745091][ T5944] ? clear_bhb_loop+0x60/0xb0 [ 245.749802][ T5944] ? clear_bhb_loop+0x60/0xb0 [ 245.754512][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.760453][ T5944] RIP: 0033:0x7f2ef139f559 [ 245.764908][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.784566][ T5944] RSP: 002b:00007f2ef21bffc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 245.793125][ T5944] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2ef139f559 [ 245.801139][ T5944] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 245.809146][ T5944] RBP: 00007f2ef1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 245.817173][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.825201][ T5944] R13: 00007f2ef1626038 R14: 00007f2ef1625fa0 R15: 00007ffd67f2dcf8 [ 245.833340][ T5944] [ 245.837348][ T5944] memory allocation failure, unreliable refcount tracker. [ 247.609849][ T4388] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 248.531250][ T4388] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.554152][ T4388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.584990][ T4388] usb 2-1: config 0 descriptor?? [ 248.593569][ T4388] cp210x 2-1:0.0: cp210x converter detected [ 249.311295][ T4388] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 249.344695][ T4388] usb 2-1: cp210x converter now attached to ttyUSB0 [ 249.449975][ T5982] ubi: mtd0 is already attached to ubi0 [ 249.620749][ T4388] usb 2-1: USB disconnect, device number 5 [ 249.633172][ T4388] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.656769][ T4388] cp210x 2-1:0.0: device disconnected [ 249.898660][ T5973] 9pnet_fd: Insufficient options for proto=fd [ 251.197572][ T5999] input: syz0 as /devices/virtual/input/input24 [ 251.809526][ T6011] FAULT_INJECTION: forcing a failure. [ 251.809526][ T6011] name failslab, interval 1, probability 0, space 0, times 0 [ 251.875093][ T6011] CPU: 1 PID: 6011 Comm: syz.4.428 Not tainted syzkaller #0 [ 251.882490][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 251.892611][ T6011] Call Trace: [ 251.895922][ T6011] [ 251.898881][ T6011] dump_stack_lvl+0x188/0x24e [ 251.903608][ T6011] ? show_regs_print_info+0x12/0x12 [ 251.908850][ T6011] ? load_image+0x410/0x410 [ 251.913402][ T6011] ? __might_sleep+0xd0/0xd0 [ 251.918025][ T6011] ? __lock_acquire+0x7ea0/0x7ea0 [ 251.923131][ T6011] should_fail_ex+0x390/0x4c0 [ 251.927854][ T6011] should_failslab+0x5/0x20 [ 251.932386][ T6011] slab_pre_alloc_hook+0x59/0x300 [ 251.937451][ T6011] kmem_cache_alloc+0x56/0x2f0 [ 251.942248][ T6011] ? __alloc_file+0x25/0x230 [ 251.946969][ T6011] __alloc_file+0x25/0x230 [ 251.951426][ T6011] alloc_empty_file+0x90/0x180 [ 251.956229][ T6011] alloc_file+0x5b/0x5f0 [ 251.960522][ T6011] alloc_file_pseudo+0x180/0x200 [ 251.965503][ T6011] ? alloc_empty_file_noaccount+0x80/0x80 [ 251.971273][ T6011] ? alloc_fd+0x590/0x640 [ 251.975647][ T6011] sock_alloc_file+0xb3/0x240 [ 251.980373][ T6011] __sys_socket+0x12d/0x190 [ 251.985027][ T6011] __x64_sys_socket+0x76/0x80 [ 251.989743][ T6011] do_syscall_64+0x4c/0xa0 [ 251.994246][ T6011] ? clear_bhb_loop+0x60/0xb0 [ 251.999056][ T6011] ? clear_bhb_loop+0x60/0xb0 [ 252.003768][ T6011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.009725][ T6011] RIP: 0033:0x7f2f04b9f559 [ 252.014177][ T6011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.034020][ T6011] RSP: 002b:00007f2f059b5fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 252.042476][ T6011] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2f04b9f559 [ 252.050489][ T6011] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 252.058502][ T6011] RBP: 00007f2f04c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 252.066510][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.074520][ T6011] R13: 00007f2f04e26038 R14: 00007f2f04e25fa0 R15: 00007fff1d017ae8 [ 252.082599][ T6011] [ 252.679649][ T6023] FAULT_INJECTION: forcing a failure. [ 252.679649][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 252.713295][ T6023] CPU: 1 PID: 6023 Comm: syz.2.429 Not tainted syzkaller #0 [ 252.720669][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 252.730855][ T6023] Call Trace: [ 252.734257][ T6023] [ 252.737220][ T6023] dump_stack_lvl+0x188/0x24e [ 252.741941][ T6023] ? show_regs_print_info+0x12/0x12 [ 252.747177][ T6023] ? load_image+0x410/0x410 [ 252.751746][ T6023] ? __might_sleep+0xd0/0xd0 [ 252.756370][ T6023] ? __lock_acquire+0x7ea0/0x7ea0 [ 252.761438][ T6023] should_fail_ex+0x390/0x4c0 [ 252.766163][ T6023] should_failslab+0x5/0x20 [ 252.770695][ T6023] slab_pre_alloc_hook+0x59/0x300 [ 252.775768][ T6023] ? misc_open+0x55/0x390 [ 252.780134][ T6023] ? dm_open+0x6d/0x130 [ 252.784332][ T6023] __kmem_cache_alloc_node+0x4f/0x270 [ 252.789746][ T6023] ? dm_open+0x6d/0x130 [ 252.793963][ T6023] kmalloc_trace+0x26/0xe0 [ 252.798413][ T6023] dm_open+0x6d/0x130 [ 252.802429][ T6023] ? dm_compat_ctl_ioctl+0x30/0x30 [ 252.807583][ T6023] misc_open+0x31f/0x390 [ 252.811965][ T6023] chrdev_open+0x585/0x5f0 [ 252.816512][ T6023] ? cd_forget+0x160/0x160 [ 252.821397][ T6023] ? fsnotify_perm+0x39b/0x550 [ 252.826195][ T6023] ? cd_forget+0x160/0x160 [ 252.830649][ T6023] do_dentry_open+0x7dd/0x10b0 [ 252.835461][ T6023] path_openat+0x2674/0x2f10 [ 252.840113][ T6023] ? kasan_set_track+0x60/0x70 [ 252.844917][ T6023] ? verify_lock_unused+0x140/0x140 [ 252.850154][ T6023] ? do_sys_openat2+0xdd/0x4f0 [ 252.854965][ T6023] ? do_filp_open+0x420/0x420 [ 252.859704][ T6023] do_filp_open+0x1ee/0x420 [ 252.864249][ T6023] ? vfs_tmpfile+0x470/0x470 [ 252.868906][ T6023] ? _raw_spin_unlock+0x24/0x40 [ 252.873796][ T6023] ? alloc_fd+0x590/0x640 [ 252.878174][ T6023] do_sys_openat2+0x14b/0x4f0 [ 252.882897][ T6023] ? do_sys_open+0xe0/0xe0 [ 252.887347][ T6023] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.893375][ T6023] ? lock_chain_count+0x20/0x20 [ 252.898275][ T6023] __x64_sys_openat+0x135/0x160 [ 252.903180][ T6023] do_syscall_64+0x4c/0xa0 [ 252.907626][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 252.912332][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 252.917049][ T6023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.922988][ T6023] RIP: 0033:0x7f22c0f9f559 [ 252.927442][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.947181][ T6023] RSP: 002b:00007f22c1e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.955635][ T6023] RAX: ffffffffffffffda RBX: 00007f22c1225fa0 RCX: 00007f22c0f9f559 [ 252.963642][ T6023] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 252.971652][ T6023] RBP: 00007f22c1036b20 R08: 0000000000000000 R09: 0000000000000000 [ 252.979838][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.988008][ T6023] R13: 00007f22c1226038 R14: 00007f22c1225fa0 R15: 00007ffd76681568 [ 252.996031][ T6023] [ 254.398647][ T6033] ubi: mtd0 is already attached to ubi0 [ 255.396762][ T6045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.846108][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852547][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.830431][ T6058] 9pnet_fd: Insufficient options for proto=fd [ 258.755783][ T6080] ubi: mtd0 is already attached to ubi0 [ 264.258451][ T6125] ubi: mtd0 is already attached to ubi0 [ 264.404569][ T128] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 264.599619][ T128] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 264.622126][ T128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.651378][ T128] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 264.673231][ T128] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 264.681464][ T128] usb 5-1: Product: syz [ 264.691612][ T128] usb 5-1: Manufacturer: syz [ 264.702905][ T128] usb 5-1: SerialNumber: syz [ 264.744444][ T6153] 9pnet_fd: Insufficient options for proto=fd [ 264.780251][ T128] usb 5-1: config 0 descriptor?? [ 264.797218][ T128] usb 5-1: selecting invalid altsetting 0 [ 266.000165][ T14] usb 5-1: USB disconnect, device number 3 [ 269.459966][ T6204] ubi: mtd0 is already attached to ubi0 [ 272.855447][ T6238] ubi: mtd0 is already attached to ubi0 [ 276.035230][ T6242] Set syz1 is full, maxelem 6117 reached [ 276.150999][ T6272] 9pnet_fd: Insufficient options for proto=fd [ 276.987024][ T6279] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x42 [ 281.851902][ T6322] 9pnet_fd: Insufficient options for proto=fd [ 282.855827][ T6332] Bluetooth: MGMT ver 1.22 [ 284.006398][ T6343] device syzkaller0 entered promiscuous mode [ 285.335044][ T6363] random: crng reseeded on system resumption [ 286.669187][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 287.269203][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 287.297574][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.725257][ T14] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 288.115673][ T14] usb 2-1: USB disconnect, device number 6 [ 289.720452][ T6414] ubi: mtd0 is already attached to ubi0 [ 291.344934][ T6425] FAULT_INJECTION: forcing a failure. [ 291.344934][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 291.378395][ T6425] CPU: 0 PID: 6425 Comm: syz.0.547 Not tainted syzkaller #0 [ 291.385847][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 291.395947][ T6425] Call Trace: [ 291.399430][ T6425] [ 291.402391][ T6425] dump_stack_lvl+0x188/0x24e [ 291.407114][ T6425] ? show_regs_print_info+0x12/0x12 [ 291.412348][ T6425] ? load_image+0x410/0x410 [ 291.416901][ T6425] ? __might_sleep+0xd0/0xd0 [ 291.421532][ T6425] ? __lock_acquire+0x7ea0/0x7ea0 [ 291.426614][ T6425] should_fail_ex+0x390/0x4c0 [ 291.431436][ T6425] should_failslab+0x5/0x20 [ 291.435973][ T6425] slab_pre_alloc_hook+0x59/0x300 [ 291.441035][ T6425] ? misc_open+0x55/0x390 [ 291.445412][ T6425] ? dm_open+0x6d/0x130 [ 291.449630][ T6425] __kmem_cache_alloc_node+0x4f/0x270 [ 291.455117][ T6425] ? dm_open+0x6d/0x130 [ 291.459296][ T6425] kmalloc_trace+0x26/0xe0 [ 291.463721][ T6425] dm_open+0x6d/0x130 [ 291.467805][ T6425] ? dm_compat_ctl_ioctl+0x30/0x30 [ 291.472933][ T6425] misc_open+0x31f/0x390 [ 291.477200][ T6425] chrdev_open+0x585/0x5f0 [ 291.481633][ T6425] ? cd_forget+0x160/0x160 [ 291.486073][ T6425] ? fsnotify_perm+0x39b/0x550 [ 291.490853][ T6425] ? cd_forget+0x160/0x160 [ 291.495282][ T6425] do_dentry_open+0x7dd/0x10b0 [ 291.500071][ T6425] path_openat+0x2674/0x2f10 [ 291.504690][ T6425] ? kasan_set_track+0x60/0x70 [ 291.509468][ T6425] ? verify_lock_unused+0x140/0x140 [ 291.514690][ T6425] ? do_sys_openat2+0xdd/0x4f0 [ 291.519478][ T6425] ? do_filp_open+0x420/0x420 [ 291.524201][ T6425] do_filp_open+0x1ee/0x420 [ 291.528982][ T6425] ? vfs_tmpfile+0x470/0x470 [ 291.533691][ T6425] ? _raw_spin_unlock+0x24/0x40 [ 291.538575][ T6425] ? alloc_fd+0x590/0x640 [ 291.542938][ T6425] do_sys_openat2+0x14b/0x4f0 [ 291.547980][ T6425] ? do_sys_open+0xe0/0xe0 [ 291.552416][ T6425] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 291.558414][ T6425] ? lock_chain_count+0x20/0x20 [ 291.563350][ T6425] __x64_sys_openat+0x135/0x160 [ 291.568225][ T6425] do_syscall_64+0x4c/0xa0 [ 291.572659][ T6425] ? clear_bhb_loop+0x60/0xb0 [ 291.577434][ T6425] ? clear_bhb_loop+0x60/0xb0 [ 291.582122][ T6425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.588033][ T6425] RIP: 0033:0x7faf5d39f559 [ 291.592457][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.612246][ T6425] RSP: 002b:00007faf5e222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.620761][ T6425] RAX: ffffffffffffffda RBX: 00007faf5d625fa0 RCX: 00007faf5d39f559 [ 291.628746][ T6425] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 291.636730][ T6425] RBP: 00007faf5d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 291.644806][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.652788][ T6425] R13: 00007faf5d626038 R14: 00007faf5d625fa0 R15: 00007fff8434eb98 [ 291.660872][ T6425] [ 308.813453][ T6585] orangefs_mount: mount request failed with -4 [ 312.165862][ T6613] nvme_fcloop: unknown parameter or missing value 'ww' [ 315.150163][ T6635] qnx4: no qnx4 filesystem (no root dir). [ 315.234741][ T6629] ubi: mtd0 is already attached to ubi0 [ 317.278390][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.284939][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.742453][ T4291] Bluetooth: hci2: unexpected event 0x30 length: 6 > 3 [ 318.767183][ T6680] ubi: mtd0 is already attached to ubi0 [ 319.172208][ T6687] tmpfs: Unknown parameter 'quota' [ 321.845611][ T6724] ubi: mtd0 is already attached to ubi0 [ 327.140737][ T6775] ubi: mtd0 is already attached to ubi0 [ 327.414301][ T4297] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 327.431153][ T6785] tmpfs: Unknown parameter 'quota' [ 327.719548][ T4297] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 327.747372][ T4297] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.925948][ T4297] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.952510][ T4297] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 327.986587][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.101532][ T4297] usb 3-1: config 0 descriptor?? [ 329.130738][ T4297] zydacron 0003:13EC:0006.0002: ignoring exceeding usage max [ 329.164524][ T4297] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 329.193184][ T4297] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 329.251771][ T4297] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 329.286309][ T4297] zydacron 0003:13EC:0006.0002: unbalanced collection at end of report description [ 329.359736][ T4297] zydacron 0003:13EC:0006.0002: parse failed [ 329.387242][ T4297] zydacron: probe of 0003:13EC:0006.0002 failed with error -22 [ 329.454692][ T4297] usb 3-1: USB disconnect, device number 2 [ 332.682819][ T6821] program syz.4.659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.550743][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 333.915730][ T6827] FAULT_INJECTION: forcing a failure. [ 333.915730][ T6827] name failslab, interval 1, probability 0, space 0, times 0 [ 333.963468][ T6827] CPU: 0 PID: 6827 Comm: syz.2.662 Not tainted syzkaller #0 [ 333.970839][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 333.980935][ T6827] Call Trace: [ 333.984253][ T6827] [ 333.987212][ T6827] dump_stack_lvl+0x188/0x24e [ 333.991935][ T6827] ? show_regs_print_info+0x12/0x12 [ 333.997263][ T6827] ? load_image+0x410/0x410 [ 334.001814][ T6827] ? __might_sleep+0xd0/0xd0 [ 334.006440][ T6827] ? __lock_acquire+0x7ea0/0x7ea0 [ 334.011510][ T6827] should_fail_ex+0x390/0x4c0 [ 334.016239][ T6827] should_failslab+0x5/0x20 [ 334.020776][ T6827] slab_pre_alloc_hook+0x59/0x300 [ 334.025839][ T6827] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 334.031781][ T6827] ? n_hdlc_alloc_buf+0x83/0x210 [ 334.036766][ T6827] __kmem_cache_alloc_node+0x4f/0x270 [ 334.042188][ T6827] ? n_hdlc_alloc_buf+0x83/0x210 [ 334.047173][ T6827] __kmalloc+0xa3/0x240 [ 334.051424][ T6827] n_hdlc_alloc_buf+0x83/0x210 [ 334.056412][ T6827] n_hdlc_tty_open+0x256/0x450 [ 334.061222][ T6827] tty_ldisc_open+0x9d/0x100 [ 334.065947][ T6827] tty_set_ldisc+0x361/0x540 [ 334.070597][ T6827] tty_ioctl+0xa20/0xba0 [ 334.074945][ T6827] ? tty_get_icount+0xa0/0xa0 [ 334.079657][ T6827] __se_sys_ioctl+0xfa/0x170 [ 334.084467][ T6827] do_syscall_64+0x4c/0xa0 [ 334.088915][ T6827] ? clear_bhb_loop+0x60/0xb0 [ 334.093637][ T6827] ? clear_bhb_loop+0x60/0xb0 [ 334.098348][ T6827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.104307][ T6827] RIP: 0033:0x7f22c0f9f559 [ 334.108756][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.128402][ T6827] RSP: 002b:00007f22c1e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.137037][ T6827] RAX: ffffffffffffffda RBX: 00007f22c1225fa0 RCX: 00007f22c0f9f559 [ 334.145220][ T6827] RDX: 0000200000000700 RSI: 0000000000005423 RDI: 0000000000000004 [ 334.153315][ T6827] RBP: 00007f22c1036b20 R08: 0000000000000000 R09: 0000000000000000 [ 334.161324][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.169344][ T6827] R13: 00007f22c1226038 R14: 00007f22c1225fa0 R15: 00007ffd76681568 [ 334.177384][ T6827] [ 337.953871][ T6846] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.861549][ T6893] input: syz0 as /devices/virtual/input/input31 [ 352.072196][ T6930] 8021q: VLANs not supported on wg0 [ 352.290619][ T26] audit: type=1326 audit(1792973575.049:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 352.389186][ T26] audit: type=1326 audit(1792973575.089:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 353.805838][ T6944] 9pnet_fd: Insufficient options for proto=fd [ 354.024949][ T26] audit: type=1326 audit(1792973575.099:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 354.113097][ T26] audit: type=1326 audit(1792973575.099:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 354.248987][ T26] audit: type=1326 audit(1792973575.099:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 354.609061][ T26] audit: type=1326 audit(1792973575.099:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 354.634838][ T26] audit: type=1326 audit(1792973575.099:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 354.659233][ T26] audit: type=1326 audit(1792973575.099:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 354.709548][ T26] audit: type=1326 audit(1792973575.099:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 354.742625][ T6953] fuse: Bad value for 'fd' [ 354.777973][ T26] audit: type=1326 audit(1792973575.099:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.3.694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef139f559 code=0x7ffc0000 [ 354.810207][ T6947] ubi: mtd0 is already attached to ubi0 [ 357.848461][ T6993] 9pnet_fd: Insufficient options for proto=fd [ 359.009373][ T6995] ubi: mtd0 is already attached to ubi0 [ 359.183236][ T4388] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 359.601561][ T4388] usb 1-1: Using ep0 maxpacket: 16 [ 360.192795][ T4388] usb 1-1: unable to get BOS descriptor or descriptor too short [ 360.218549][ T4388] usb 1-1: config 2 has an invalid interface number: 217 but max is 0 [ 360.243146][ T4388] usb 1-1: config 2 has no interface number 0 [ 360.255401][ T4388] usb 1-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=88.5f [ 360.273935][ T4388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.282082][ T4388] usb 1-1: Product: syz [ 360.286763][ T4388] usb 1-1: Manufacturer: syz [ 360.291391][ T4388] usb 1-1: SerialNumber: syz [ 360.333155][ T5020] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 360.531367][ T4388] upd78f0730 1-1:2.217: upd78f0730 converter detected [ 361.379315][ T5020] usb 3-1: device descriptor read/64, error -71 [ 361.395275][ T4388] usb 1-1: upd78f0730 converter now attached to ttyUSB0 [ 361.405687][ T4388] usb 1-1: USB disconnect, device number 4 [ 361.431449][ T4388] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 361.442602][ T4388] upd78f0730 1-1:2.217: device disconnected [ 361.589462][ T7034] md: personality for level is not loaded! [ 361.589670][ T7026] md/raid1:md4: active with 1 out of 1 mirrors [ 361.610255][ T7034] md: md3 stopped. [ 361.628233][ T7039] batman_adv: batadv0: Adding interface: macvtap1 [ 361.652959][ T7026] md4: detected capacity change from 0 to 4096 [ 361.655484][ T5020] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 361.665351][ T7039] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.742181][ T7039] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 361.795884][ T7027] md4: detected capacity change from 4096 to 0 [ 361.830665][ T7027] md: md4 stopped. [ 361.834860][ T5020] usb 3-1: device descriptor read/64, error -71 [ 361.953296][ T5020] usb usb3-port1: attempt power cycle [ 361.997818][ T7044] 9pnet_fd: Insufficient options for proto=fd [ 362.586688][ T7047] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 366.053143][ T4375] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 366.245212][ T4375] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 366.273073][ T4375] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 366.305589][ T4375] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 366.333212][ T4375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.341285][ T4375] usb 5-1: Product: syz [ 366.363099][ T4375] usb 5-1: Manufacturer: syz [ 366.367806][ T4375] usb 5-1: SerialNumber: syz [ 366.493333][ T956] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 366.776632][ T4375] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 367.066415][ C1] usblp0: nonzero read bulk status received: -71 [ 367.083705][ T4351] usb 5-1: USB disconnect, device number 4 [ 367.215782][ T956] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.243405][ T956] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 367.281593][ T956] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 367.283959][ T7061] usblp0: removed [ 367.303775][ T956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.323649][ T956] usb 1-1: Product: syz [ 367.327879][ T956] usb 1-1: Manufacturer: syz [ 367.332502][ T956] usb 1-1: SerialNumber: syz [ 367.578141][ T956] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 367.593419][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 367.790873][ T4297] usb 1-1: USB disconnect, device number 5 [ 367.809606][ T4297] usblp0: removed [ 368.103423][ T7092] 9pnet_fd: Insufficient options for proto=fd [ 369.562995][ T7108] ubi: mtd0 is already attached to ubi0 [ 372.655545][ T7140] FAULT_INJECTION: forcing a failure. [ 372.655545][ T7140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.655608][ T7140] CPU: 0 PID: 7140 Comm: syz.0.749 Not tainted syzkaller #0 [ 372.655631][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.655644][ T7140] Call Trace: [ 372.655678][ T7140] [ 372.655734][ T7140] dump_stack_lvl+0x188/0x24e [ 372.655863][ T7140] ? show_regs_print_info+0x12/0x12 [ 372.655909][ T7140] ? load_image+0x410/0x410 [ 372.655949][ T7140] ? __lock_acquire+0x7ea0/0x7ea0 [ 372.655994][ T7140] ? debug_objects_fill_pool+0x87/0x780 [ 372.656053][ T7140] should_fail_ex+0x390/0x4c0 [ 372.656128][ T7140] prepare_alloc_pages+0x1e1/0x5b0 [ 372.656198][ T7140] __alloc_pages+0x130/0x4f0 [ 372.656235][ T7140] ? zone_statistics+0x170/0x170 [ 372.656268][ T7140] ? is_console_locked+0x5/0x10 [ 372.656304][ T7140] ? con_is_visible+0x74/0x140 [ 372.656339][ T7140] ? fbcon_init+0x15bf/0x2460 [ 372.656391][ T7140] __kmalloc_large_node+0x8c/0x1f0 [ 372.656436][ T7140] ? vc_allocate+0x436/0x700 [ 372.656458][ T7140] __kmalloc+0x113/0x240 [ 372.656481][ T7140] vc_allocate+0x436/0x700 [ 372.656512][ T7140] ? vc_cons_allocated+0x70/0x70 [ 372.656549][ T7140] con_install+0x9c/0x720 [ 372.656598][ T7140] ? mutex_lock_nested+0x10/0x10 [ 372.656651][ T7140] ? show_tty_active+0x30/0x30 [ 372.656691][ T7140] tty_init_dev+0xcf/0x4c0 [ 372.656742][ T7140] tty_open+0x7d3/0xcb0 [ 372.656786][ T7140] ? __lock_acquire+0x7ea0/0x7ea0 [ 372.656818][ T7140] ? tty_compat_ioctl+0x5a0/0x5a0 [ 372.656850][ T7140] ? do_raw_spin_unlock+0x11d/0x230 [ 372.656877][ T7140] chrdev_open+0x585/0x5f0 [ 372.656948][ T7140] ? cd_forget+0x160/0x160 [ 372.656979][ T7140] ? fsnotify_perm+0x39b/0x550 [ 372.657047][ T7140] ? cd_forget+0x160/0x160 [ 372.657071][ T7140] do_dentry_open+0x7dd/0x10b0 [ 372.657136][ T7140] path_openat+0x2674/0x2f10 [ 372.657182][ T7140] ? kasan_set_track+0x60/0x70 [ 372.657221][ T7140] ? verify_lock_unused+0x140/0x140 [ 372.657248][ T7140] ? do_sys_openat2+0xdd/0x4f0 [ 372.657284][ T7140] ? do_filp_open+0x420/0x420 [ 372.657330][ T7140] do_filp_open+0x1ee/0x420 [ 372.657359][ T7140] ? vfs_tmpfile+0x470/0x470 [ 372.657411][ T7140] ? _raw_spin_unlock+0x24/0x40 [ 372.657460][ T7140] ? alloc_fd+0x590/0x640 [ 372.657508][ T7140] do_sys_openat2+0x14b/0x4f0 [ 372.657541][ T7140] ? do_sys_open+0xe0/0xe0 [ 372.657570][ T7140] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 372.657602][ T7140] ? lock_chain_count+0x20/0x20 [ 372.657636][ T7140] __x64_sys_openat+0x135/0x160 [ 372.657670][ T7140] do_syscall_64+0x4c/0xa0 [ 372.657689][ T7140] ? clear_bhb_loop+0x60/0xb0 [ 372.657708][ T7140] ? clear_bhb_loop+0x60/0xb0 [ 372.657731][ T7140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.657772][ T7140] RIP: 0033:0x7faf5d35fd8e [ 372.657822][ T7140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.657862][ T7140] RSP: 002b:00007faf5e221b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.657912][ T7140] RAX: ffffffffffffffda RBX: 00007faf5e2226c0 RCX: 00007faf5d35fd8e [ 372.657929][ T7140] RDX: 0000000000000002 RSI: 00007faf5e221c00 RDI: ffffffffffffff9c [ 372.657945][ T7140] RBP: 00007faf5d436b20 R08: 0000000000000000 R09: 0000000000000000 [ 372.657959][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.657973][ T7140] R13: 00007faf5d626038 R14: 00007faf5d625fa0 R15: 00007fff8434eb98 [ 372.658008][ T7140] [ 376.611367][ T7161] ubi: mtd0 is already attached to ubi0 [ 378.747305][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.753738][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.713105][ T7208] 9pnet_fd: Insufficient options for proto=fd [ 383.528507][ T7224] ubi: mtd0 is already attached to ubi0 [ 387.252627][ T7251] FAULT_INJECTION: forcing a failure. [ 387.252627][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 387.302591][ T7251] CPU: 0 PID: 7251 Comm: syz.1.782 Not tainted syzkaller #0 [ 387.309984][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 387.320165][ T7251] Call Trace: [ 387.323470][ T7251] [ 387.326433][ T7251] dump_stack_lvl+0x188/0x24e [ 387.331158][ T7251] ? show_regs_print_info+0x12/0x12 [ 387.336387][ T7251] ? load_image+0x410/0x410 [ 387.340933][ T7251] ? __lock_acquire+0x7ea0/0x7ea0 [ 387.346009][ T7251] should_fail_ex+0x390/0x4c0 [ 387.350730][ T7251] _copy_to_user+0x2c/0x130 [ 387.355306][ T7251] vmci_host_unlocked_ioctl+0x1edc/0x2710 [ 387.361123][ T7251] ? vmci_host_poll+0x1f0/0x1f0 [ 387.365986][ T7251] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 387.371981][ T7251] ? do_vfs_ioctl+0x1be3/0x1d40 [ 387.376880][ T7251] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 387.382564][ T7251] ? tomoyo_path_number_perm+0x205/0x650 [ 387.388285][ T7251] ? __lock_acquire+0x7ea0/0x7ea0 [ 387.393344][ T7251] ? slab_free_freelist_hook+0x133/0x1b0 [ 387.398993][ T7251] ? tomoyo_path_number_perm+0x4fb/0x650 [ 387.404834][ T7251] ? __kmem_cache_free+0xb6/0x200 [ 387.409901][ T7251] ? tomoyo_path_number_perm+0x205/0x650 [ 387.415650][ T7251] ? tomoyo_path_number_perm+0x5a4/0x650 [ 387.421395][ T7251] ? tomoyo_path_number_perm+0x205/0x650 [ 387.427130][ T7251] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 387.432634][ T7251] ? __fget_files+0x28/0x460 [ 387.437254][ T7251] ? bpf_lsm_file_ioctl+0x5/0x10 [ 387.442297][ T7251] ? security_file_ioctl+0x7c/0xa0 [ 387.447451][ T7251] ? vmci_host_poll+0x1f0/0x1f0 [ 387.452340][ T7251] __se_sys_ioctl+0xfa/0x170 [ 387.456971][ T7251] do_syscall_64+0x4c/0xa0 [ 387.461405][ T7251] ? clear_bhb_loop+0x60/0xb0 [ 387.466094][ T7251] ? clear_bhb_loop+0x60/0xb0 [ 387.470868][ T7251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.476980][ T7251] RIP: 0033:0x7eff34f9f559 [ 387.481407][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.501021][ T7251] RSP: 002b:00007eff35ede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.509541][ T7251] RAX: ffffffffffffffda RBX: 00007eff35225fa0 RCX: 00007eff34f9f559 [ 387.517521][ T7251] RDX: 0000200000002640 RSI: 00000000000007a0 RDI: 0000000000000004 [ 387.525503][ T7251] RBP: 00007eff35036b20 R08: 0000000000000000 R09: 0000000000000000 [ 387.533482][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.541461][ T7251] R13: 00007eff35226038 R14: 00007eff35225fa0 R15: 00007fff83b6d118 [ 387.549467][ T7251] [ 389.486617][ T7263] gadgetfs: bound to dummy_udc driver [ 392.976662][ T7279] 9pnet_fd: Insufficient options for proto=fd [ 396.968525][ T7294] FAULT_INJECTION: forcing a failure. [ 396.968525][ T7294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.023296][ T7294] CPU: 1 PID: 7294 Comm: syz.3.794 Not tainted syzkaller #0 [ 397.030647][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 397.040833][ T7294] Call Trace: [ 397.044144][ T7294] [ 397.047102][ T7294] dump_stack_lvl+0x188/0x24e [ 397.051820][ T7294] ? show_regs_print_info+0x12/0x12 [ 397.057066][ T7294] ? load_image+0x410/0x410 [ 397.061613][ T7294] ? __lock_acquire+0x7ea0/0x7ea0 [ 397.066985][ T7294] should_fail_ex+0x390/0x4c0 [ 397.071728][ T7294] _copy_to_user+0x2c/0x130 [ 397.076316][ T7294] vmci_host_unlocked_ioctl+0x1edc/0x2710 [ 397.082058][ T7294] ? vmci_host_poll+0x1f0/0x1f0 [ 397.086924][ T7294] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 397.092932][ T7294] ? do_vfs_ioctl+0x1be3/0x1d40 [ 397.098015][ T7294] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 397.103667][ T7294] ? tomoyo_path_number_perm+0x205/0x650 [ 397.109498][ T7294] ? __lock_acquire+0x7ea0/0x7ea0 [ 397.114546][ T7294] ? slab_free_freelist_hook+0x133/0x1b0 [ 397.120224][ T7294] ? tomoyo_path_number_perm+0x4fb/0x650 [ 397.125872][ T7294] ? __kmem_cache_free+0xb6/0x200 [ 397.130932][ T7294] ? tomoyo_path_number_perm+0x205/0x650 [ 397.136635][ T7294] ? tomoyo_path_number_perm+0x5a4/0x650 [ 397.142302][ T7294] ? tomoyo_path_number_perm+0x205/0x650 [ 397.148051][ T7294] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 397.153555][ T7294] ? __fget_files+0x28/0x460 [ 397.158172][ T7294] ? bpf_lsm_file_ioctl+0x5/0x10 [ 397.163214][ T7294] ? security_file_ioctl+0x7c/0xa0 [ 397.168421][ T7294] ? vmci_host_poll+0x1f0/0x1f0 [ 397.173283][ T7294] __se_sys_ioctl+0xfa/0x170 [ 397.178065][ T7294] do_syscall_64+0x4c/0xa0 [ 397.182579][ T7294] ? clear_bhb_loop+0x60/0xb0 [ 397.187264][ T7294] ? clear_bhb_loop+0x60/0xb0 [ 397.191958][ T7294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.197881][ T7294] RIP: 0033:0x7f2ef139f559 [ 397.202313][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.221932][ T7294] RSP: 002b:00007f2ef21c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.230371][ T7294] RAX: ffffffffffffffda RBX: 00007f2ef1625fa0 RCX: 00007f2ef139f559 [ 397.238354][ T7294] RDX: 0000200000002640 RSI: 00000000000007a0 RDI: 0000000000000004 [ 397.246419][ T7294] RBP: 00007f2ef1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 397.254484][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.262463][ T7294] R13: 00007f2ef1626038 R14: 00007f2ef1625fa0 R15: 00007ffd67f2dcf8 [ 397.270482][ T7294] [ 398.660862][ T7307] input: syz1 as /devices/virtual/input/input35 [ 403.398866][ T4291] Bluetooth: hci4: command 0x0405 tx timeout [ 405.209373][ T7351] 9pnet_fd: Insufficient options for proto=fd [ 406.504956][ T7366] 9pnet_fd: Insufficient options for proto=fd [ 407.387794][ T7369] FAULT_INJECTION: forcing a failure. [ 407.387794][ T7369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 407.387830][ T7369] CPU: 1 PID: 7369 Comm: syz.1.809 Not tainted syzkaller #0 [ 407.387853][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 407.387865][ T7369] Call Trace: [ 407.387874][ T7369] [ 407.387883][ T7369] dump_stack_lvl+0x188/0x24e [ 407.387914][ T7369] ? show_regs_print_info+0x12/0x12 [ 407.387936][ T7369] ? load_image+0x410/0x410 [ 407.387965][ T7369] ? __lock_acquire+0x7ea0/0x7ea0 [ 407.387995][ T7369] ? debug_objects_fill_pool+0x87/0x780 [ 407.388024][ T7369] should_fail_ex+0x390/0x4c0 [ 407.388059][ T7369] prepare_alloc_pages+0x1e1/0x5b0 [ 407.388100][ T7369] __alloc_pages+0x130/0x4f0 [ 407.388133][ T7369] ? zone_statistics+0x170/0x170 [ 407.388165][ T7369] ? is_console_locked+0x5/0x10 [ 407.388191][ T7369] ? con_is_visible+0x74/0x140 [ 407.388216][ T7369] ? fbcon_init+0x15bf/0x2460 [ 407.388246][ T7369] __kmalloc_large_node+0x8c/0x1f0 [ 407.388270][ T7369] ? vc_allocate+0x436/0x700 [ 407.388289][ T7369] __kmalloc+0x113/0x240 [ 407.388311][ T7369] vc_allocate+0x436/0x700 [ 407.388340][ T7369] ? vc_cons_allocated+0x70/0x70 [ 407.388373][ T7369] con_install+0x9c/0x720 [ 407.388397][ T7369] ? mutex_lock_nested+0x10/0x10 [ 407.388424][ T7369] ? show_tty_active+0x30/0x30 [ 407.388459][ T7369] tty_init_dev+0xcf/0x4c0 [ 407.388486][ T7369] tty_open+0x7d3/0xcb0 [ 407.388516][ T7369] ? __lock_acquire+0x7ea0/0x7ea0 [ 407.388546][ T7369] ? tty_compat_ioctl+0x5a0/0x5a0 [ 407.388575][ T7369] ? do_raw_spin_unlock+0x11d/0x230 [ 407.388602][ T7369] chrdev_open+0x585/0x5f0 [ 407.388630][ T7369] ? cd_forget+0x160/0x160 [ 407.388659][ T7369] ? fsnotify_perm+0x39b/0x550 [ 407.388685][ T7369] ? cd_forget+0x160/0x160 [ 407.388719][ T7369] do_dentry_open+0x7dd/0x10b0 [ 407.388760][ T7369] path_openat+0x2674/0x2f10 [ 407.388802][ T7369] ? kasan_set_track+0x60/0x70 [ 407.388831][ T7369] ? verify_lock_unused+0x140/0x140 [ 407.388857][ T7369] ? do_sys_openat2+0xdd/0x4f0 [ 407.388889][ T7369] ? do_filp_open+0x420/0x420 [ 407.388936][ T7369] do_filp_open+0x1ee/0x420 [ 407.388965][ T7369] ? vfs_tmpfile+0x470/0x470 [ 407.389015][ T7369] ? _raw_spin_unlock+0x24/0x40 [ 407.389041][ T7369] ? alloc_fd+0x590/0x640 [ 407.389079][ T7369] do_sys_openat2+0x14b/0x4f0 [ 407.389109][ T7369] ? do_sys_open+0xe0/0xe0 [ 407.389137][ T7369] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 407.389169][ T7369] ? lock_chain_count+0x20/0x20 [ 407.389204][ T7369] __x64_sys_openat+0x135/0x160 [ 407.389237][ T7369] do_syscall_64+0x4c/0xa0 [ 407.389255][ T7369] ? clear_bhb_loop+0x60/0xb0 [ 407.389275][ T7369] ? clear_bhb_loop+0x60/0xb0 [ 407.389298][ T7369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.389327][ T7369] RIP: 0033:0x7eff34f5fd8e [ 407.389347][ T7369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.389366][ T7369] RSP: 002b:00007eff35eddb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.389393][ T7369] RAX: ffffffffffffffda RBX: 00007eff35ede6c0 RCX: 00007eff34f5fd8e [ 407.389409][ T7369] RDX: 0000000000000002 RSI: 00007eff35eddc00 RDI: ffffffffffffff9c [ 407.389425][ T7369] RBP: 00007eff35036b20 R08: 0000000000000000 R09: 0000000000000000 [ 407.389439][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.389453][ T7369] R13: 00007eff35226038 R14: 00007eff35225fa0 R15: 00007fff83b6d118 [ 407.389488][ T7369] [ 407.472436][ T7367] ======================================================= [ 407.472436][ T7367] WARNING: The mand mount option has been deprecated and [ 407.472436][ T7367] and is ignored by this kernel. Remove the mand [ 407.472436][ T7367] option from the mount to silence this warning. [ 407.472436][ T7367] ======================================================= [ 407.507896][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 407.508053][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 407.508079][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x394c instead [ 407.508101][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xf660 instead [ 407.508120][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 407.508138][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 407.508156][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 407.508179][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 407.508215][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 407.508251][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 407.508290][ T7367] jffs2: Further such events for this erase block will not be printed [ 407.508745][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 407.508766][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 407.508786][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x394c instead [ 407.508807][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xf660 instead [ 407.508826][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 407.508844][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 407.508863][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 407.508885][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 407.508919][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 407.508956][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 407.508974][ T7367] jffs2: Further such events for this erase block will not be printed [ 407.509356][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 407.509375][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 407.509403][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x394c instead [ 407.509424][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x3d5f instead [ 407.509467][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 407.509485][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 407.509504][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x394c instead [ 407.509525][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x3d5f instead [ 407.509568][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 407.509587][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 407.509607][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x394c instead [ 407.509628][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x3d5f instead [ 407.509670][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 407.509689][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 407.509708][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x394c instead [ 407.509729][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x3d5f instead [ 407.509772][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 407.509791][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 407.509810][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x394c instead [ 407.509831][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x3d5f instead [ 407.509874][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 407.509892][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 407.509910][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x394c instead [ 407.509931][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x3d5f instead [ 407.509974][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 407.509992][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 407.510011][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x394c instead [ 407.510032][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x3d5f instead [ 407.510075][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 407.510094][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 407.510113][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x394c instead [ 407.510134][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x3d5f instead [ 407.510176][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 407.510194][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 407.510214][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x394c instead [ 407.510235][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x3d5f instead [ 407.510277][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 407.510296][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 407.510315][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x394c instead [ 407.510337][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x3d5f instead [ 407.510379][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 407.510405][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 407.510425][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x394c instead [ 407.510446][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x3d5f instead [ 407.510542][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 407.510561][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 407.510581][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x394c instead [ 407.510603][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x3d5f instead [ 407.510646][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 407.510665][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 407.510684][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x394c instead [ 407.510706][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x3d5f instead [ 407.510748][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 407.510767][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 407.510787][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x394c instead [ 407.510808][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x3d5f instead [ 407.510852][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 407.510870][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 407.510890][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x394c instead [ 407.510910][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x3d5f instead [ 407.510952][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 407.510971][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 407.510990][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x394c instead [ 407.511012][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x3d5f instead [ 407.511054][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 407.511073][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 407.511093][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x394c instead [ 407.511114][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x3d5f instead [ 407.511157][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 407.511176][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 407.511196][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x394c instead [ 407.511217][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x3d5f instead [ 407.511259][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 407.511278][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 407.511297][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x394c instead [ 407.511318][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x3d5f instead [ 407.511360][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 407.511379][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 407.511470][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x394c instead [ 407.511493][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x3d5f instead [ 407.511536][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 407.511555][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 407.511574][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x394c instead [ 407.511596][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x3d5f instead [ 407.511639][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 407.511658][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 407.511678][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x394c instead [ 407.511699][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x3d5f instead [ 407.511742][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 407.511761][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 407.511781][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x394c instead [ 407.511802][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x3d5f instead [ 407.511846][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 407.511865][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 407.586445][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x394c instead [ 407.586478][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x3d5f instead [ 407.586557][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 407.586575][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 407.586594][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x394c instead [ 407.586615][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x3d5f instead [ 407.586656][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 407.586673][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 407.586692][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x394c instead [ 407.586713][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x3d5f instead [ 407.586753][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 407.586770][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 407.586789][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x394c instead [ 407.586809][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x3d5f instead [ 407.586848][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 407.586865][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 407.586884][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x394c instead [ 407.586914][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x3d5f instead [ 407.586954][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 407.586971][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 407.586989][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x394c instead [ 407.587009][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x3d5f instead [ 407.587051][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 407.587068][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 407.587086][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x394c instead [ 407.587107][ T7367] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x3d5f instead [ 407.587140][ T7367] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 407.587150][ T7367] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 411.610732][ T7393] ubi: mtd0 is already attached to ubi0 [ 412.343859][ T7404] 9pnet_fd: Insufficient options for proto=fd [ 414.081648][ T7418] input: syz0 as /devices/virtual/input/input36 [ 416.360807][ T5020] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 417.221545][ T7445] 9pnet_fd: Insufficient options for proto=fd [ 418.911315][ T7458] input: syz0 as /devices/virtual/input/input37 [ 420.671660][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.845'. [ 421.836984][ T7483] ERROR: device name not specified. [ 424.706855][ T7496] input: syz0 as /devices/virtual/input/input38 [ 425.904712][ T7506] 9pnet_fd: Insufficient options for proto=fd [ 429.857368][ T7528] ubi: mtd0 is already attached to ubi0 [ 430.463693][ T7532] tmpfs: Unknown parameter 'quota' [ 431.188773][ T7539] netlink: 220 bytes leftover after parsing attributes in process `syz.3.861'. [ 434.253315][ T4388] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 434.479913][ T4388] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 434.507491][ T4388] usb 5-1: config 0 has no interface number 0 [ 434.536607][ T4388] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 434.594725][ T4388] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 434.612241][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 434.633181][ T4388] usb 5-1: Product: syz [ 434.640802][ T4388] usb 5-1: SerialNumber: syz [ 434.674776][ T4388] usb 5-1: config 0 descriptor?? [ 434.719025][ T4388] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 436.190564][ T7571] 9pnet_fd: Insufficient options for proto=fd [ 438.060079][ T4297] usb 5-1: USB disconnect, device number 5 [ 441.263466][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.269877][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.553892][ T7630] input: syz0 as /devices/virtual/input/input39 [ 449.620087][ T7658] program syz.4.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.488081][ T7652] 9pnet_fd: Insufficient options for proto=fd [ 451.706213][ T7672] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 452.415766][ T7682] input: syz0 as /devices/virtual/input/input40 [ 453.353101][ T5020] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 454.855817][ T5020] usb 4-1: unable to get BOS descriptor or descriptor too short [ 454.934118][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 454.969156][ T5020] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 454.977607][ T5020] usb 4-1: can't read configurations, error -71 [ 454.993948][ T7694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.258820][ T7705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.910'. [ 456.553532][ T4348] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 456.743114][ T4348] usb 3-1: Using ep0 maxpacket: 8 [ 456.752348][ T4348] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 456.833897][ T4348] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.853106][ T4348] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.873440][ T4348] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.891495][ T4348] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.904956][ T4348] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.915105][ T4348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.858144][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 459.305209][ T4348] usb 3-1: can't set config #16, error -71 [ 459.333354][ T4348] usb 3-1: USB disconnect, device number 6 [ 460.539371][ T7738] 9pnet_fd: Insufficient options for proto=fd [ 465.434671][ T7764] program syz.2.928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.160897][ T7793] overlayfs: overlapping lowerdir path [ 471.918249][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 472.205112][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.221625][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 472.259148][ T22] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 472.283102][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.326696][ T22] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 472.418111][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.785846][ T22] usb 3-1: USB disconnect, device number 7 [ 474.687785][ T7831] 9pnet_fd: Insufficient options for proto=fd [ 477.628061][ T7850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.229846][ T7861] FAULT_INJECTION: forcing a failure. [ 478.229846][ T7861] name failslab, interval 1, probability 0, space 0, times 0 [ 478.243010][ T7861] CPU: 1 PID: 7861 Comm: syz.3.957 Not tainted syzkaller #0 [ 478.250394][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 478.260670][ T7861] Call Trace: [ 478.264011][ T7861] [ 478.266976][ T7861] dump_stack_lvl+0x188/0x24e [ 478.271710][ T7861] ? do_syscall_64+0x4c/0xa0 [ 478.276343][ T7861] ? show_regs_print_info+0x12/0x12 [ 478.281565][ T7861] ? load_image+0x410/0x410 [ 478.286096][ T7861] should_fail_ex+0x390/0x4c0 [ 478.290820][ T7861] should_failslab+0x5/0x20 [ 478.295336][ T7861] slab_pre_alloc_hook+0x59/0x300 [ 478.300605][ T7861] ? __lock_acquire+0x7ea0/0x7ea0 [ 478.305684][ T7861] ? tipc_nametbl_insert_publ+0x437/0x1380 [ 478.311585][ T7861] __kmem_cache_alloc_node+0x4f/0x270 [ 478.316976][ T7861] ? tipc_nametbl_insert_publ+0x437/0x1380 [ 478.322797][ T7861] kmalloc_trace+0x26/0xe0 [ 478.327248][ T7861] tipc_nametbl_insert_publ+0x437/0x1380 [ 478.332902][ T7861] ? lockdep_hardirqs_on+0x94/0x140 [ 478.338128][ T7861] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 478.344390][ T7861] tipc_nametbl_publish+0x11d/0x270 [ 478.349696][ T7861] tipc_sk_publish+0x1c8/0x420 [ 478.354527][ T7861] ? tipc_sk_withdraw+0x640/0x640 [ 478.359575][ T7861] ? do_raw_spin_unlock+0x11d/0x230 [ 478.364791][ T7861] tipc_sk_bind+0x1ea/0x2f0 [ 478.369397][ T7861] __sys_bind+0x2e9/0x3e0 [ 478.373810][ T7861] ? __ia32_sys_socketpair+0xb0/0xb0 [ 478.379124][ T7861] __x64_sys_bind+0x76/0x80 [ 478.383662][ T7861] do_syscall_64+0x4c/0xa0 [ 478.388122][ T7861] ? clear_bhb_loop+0x60/0xb0 [ 478.392828][ T7861] ? clear_bhb_loop+0x60/0xb0 [ 478.397634][ T7861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.403661][ T7861] RIP: 0033:0x7f2ef139f559 [ 478.408102][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.427747][ T7861] RSP: 002b:00007f2ef21c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 478.436181][ T7861] RAX: ffffffffffffffda RBX: 00007f2ef1625fa0 RCX: 00007f2ef139f559 [ 478.444182][ T7861] RDX: 0000000000000010 RSI: 0000200000001d80 RDI: 0000000000000004 [ 478.452359][ T7861] RBP: 00007f2ef1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 478.460354][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.468342][ T7861] R13: 00007f2ef1626038 R14: 00007f2ef1625fa0 R15: 00007ffd67f2dcf8 [ 478.476340][ T7861] [ 478.479498][ T7861] tipc: Service creation failed, no memory [ 479.053294][ T4387] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 481.233143][ T4387] usb 4-1: Using ep0 maxpacket: 16 [ 481.240186][ T4387] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 481.273584][ T4387] usb 4-1: config 0 has no interface number 0 [ 481.499557][ T4387] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.512045][ T4387] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 481.527229][ T4387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.461915][ T4387] usb 4-1: config 0 descriptor?? [ 483.467502][ T4387] usb 4-1: can't set config #0, error -71 [ 483.475500][ T4387] usb 4-1: USB disconnect, device number 7 [ 483.963275][ T7913] 9pnet_fd: Insufficient options for proto=fd [ 488.667935][ T7943] syz.1.980 (7943): drop_caches: 2 [ 488.773198][ T4387] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 488.963466][ T4387] usb 4-1: Using ep0 maxpacket: 32 [ 489.830135][ T7955] xt_hashlimit: max too large, truncated to 1048576 [ 489.844621][ T4387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.856289][ T4387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.866550][ T4387] usb 4-1: New USB device found, idVendor=0457, idProduct=c31c, bcdDevice= 0.40 [ 489.876246][ T4387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.998397][ T4387] usb 4-1: config 0 descriptor?? [ 490.035592][ T4387] hub 4-1:0.0: USB hub found [ 490.853308][ T4387] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 491.103536][ T7966] input: syz1 as /devices/virtual/input/input45 [ 491.134338][ T4387] hid-generic 0003:0457:C31C.0003: unknown main item tag 0x0 [ 491.283553][ T4387] hid-generic 0003:0457:C31C.0003: hidraw0: USB HID v8.00 Device [HID 0457:c31c] on usb-dummy_hcd.3-1/input0 [ 491.487665][ T4291] Bluetooth: hci3: unexpected event 0x30 length: 6 > 3 [ 491.607375][ T4387] usb 4-1: USB disconnect, device number 8 [ 492.183867][ T7983] 9pnet_fd: Insufficient options for proto=fd [ 492.498698][ T7977] fido_id[7977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 492.929635][ T7986] ubi: mtd0 is already attached to ubi0 [ 493.373068][ T4387] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 493.566808][ T4387] usb 2-1: Using ep0 maxpacket: 8 [ 493.577815][ T4387] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 493.605448][ T4387] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.636992][ T4387] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 493.698103][ T4387] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 493.743115][ T4387] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.808552][ T4387] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 493.856106][ T4387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.915862][ T4387] usb 2-1: usb_control_msg returned -32 [ 494.934022][ T4387] usbtmc 2-1:16.0: can't read capabilities [ 495.040743][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.290208][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.665712][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.737801][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.817038][ T22] usb 2-1: USB disconnect, device number 7 [ 498.043397][ T8023] 9pnet_fd: Insufficient options for proto=fd [ 501.888524][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.962439][ T4291] Bluetooth: hci4: unexpected event 0x30 length: 6 > 3 [ 503.405248][ T8076] 9pnet_fd: Insufficient options for proto=fd [ 504.967775][ T8083] syz.3.1020 (8083): drop_caches: 2 [ 506.765221][ T8111] 9pnet_fd: Insufficient options for proto=fd [ 506.793360][ T128] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 507.086077][ T128] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 507.158733][ T128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 507.260846][ T128] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 507.351096][ T128] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 507.495587][ T128] usb 5-1: Product: syz [ 507.510063][ T128] usb 5-1: Manufacturer: syz [ 507.522214][ T128] usb 5-1: SerialNumber: syz [ 507.571565][ T128] usb 5-1: config 0 descriptor?? [ 507.699888][ T128] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 507.762383][ T8104] udevd[8104]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.837122][ T4291] Bluetooth: hci2: unexpected event 0x30 length: 6 > 3 [ 507.889697][ T128] usb 5-1: USB disconnect, device number 6 [ 509.487443][ T128] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 511.717667][ T128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.753161][ T128] usb 5-1: config 1 interface 1 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 511.808814][ T128] usb 5-1: config 1 interface 1 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.841988][ T128] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 511.861865][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.878188][ T8139] overlayfs: missing 'workdir' [ 511.923067][ T128] usb 5-1: Product: syz [ 511.943149][ T128] usb 5-1: Manufacturer: syz [ 511.947815][ T128] usb 5-1: SerialNumber: syz [ 512.793484][ T128] usb 5-1: USB disconnect, device number 7 [ 513.155259][ T8151] udevd[8151]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.948688][ T8158] 9pnet_fd: Insufficient options for proto=fd [ 515.496564][ T4291] Bluetooth: hci4: unexpected event 0x30 length: 6 > 3 [ 519.612037][ T5020] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 519.925332][ T5020] usb 5-1: unable to get BOS descriptor or descriptor too short [ 519.944339][ T5020] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.003241][ T5020] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 520.032579][ T5020] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.064881][ T5020] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 520.106638][ T5020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 520.151834][ T5020] usb 5-1: Product: syz [ 520.172101][ T5020] usb 5-1: Manufacturer: syz [ 520.425582][ T5020] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 520.432284][ T5020] usb 5-1: No streaming interface found for terminal 2. [ 520.478415][ T5020] usb 5-1: USB disconnect, device number 8 [ 521.798952][ T8209] ubi: mtd0 is already attached to ubi0 [ 522.439207][ T8218] FAULT_INJECTION: forcing a failure. [ 522.439207][ T8218] name failslab, interval 1, probability 0, space 0, times 0 [ 523.193123][ T8218] CPU: 1 PID: 8218 Comm: syz.4.1063 Not tainted syzkaller #0 [ 523.200671][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 523.210857][ T8218] Call Trace: [ 523.214173][ T8218] [ 523.217140][ T8218] dump_stack_lvl+0x188/0x24e [ 523.221861][ T8218] ? show_regs_print_info+0x12/0x12 [ 523.227088][ T8218] ? load_image+0x410/0x410 [ 523.231638][ T8218] ? __might_sleep+0xd0/0xd0 [ 523.236334][ T8218] ? __lock_acquire+0x7ea0/0x7ea0 [ 523.241404][ T8218] should_fail_ex+0x390/0x4c0 [ 523.246245][ T8218] should_failslab+0x5/0x20 [ 523.250821][ T8218] slab_pre_alloc_hook+0x59/0x300 [ 523.255887][ T8218] ? __kernfs_new_node+0xa6/0x7f0 [ 523.261078][ T8218] ? rcu_is_watching+0x11/0xa0 [ 523.265958][ T8218] kmem_cache_alloc+0x56/0x2f0 [ 523.270777][ T8218] ? __kernfs_new_node+0xe1/0x7f0 [ 523.275881][ T8218] __kernfs_new_node+0xe1/0x7f0 [ 523.280793][ T8218] ? kernfs_new_node+0x250/0x250 [ 523.285776][ T8218] ? make_kgid+0x1c4/0x650 [ 523.290311][ T8218] ? from_kuid_munged+0x6e0/0x6e0 [ 523.295401][ T8218] kernfs_new_node+0x148/0x250 [ 523.300209][ T8218] kernfs_create_dir_ns+0x40/0x120 [ 523.305463][ T8218] sysfs_create_dir_ns+0x12c/0x290 [ 523.310701][ T8218] ? __lock_acquire+0x7ea0/0x7ea0 [ 523.315763][ T8218] ? sysfs_warn_dup+0xa0/0xa0 [ 523.320568][ T8218] ? do_raw_spin_unlock+0x11d/0x230 [ 523.325931][ T8218] kobject_add_internal+0x617/0xca0 [ 523.331207][ T8218] kobject_add+0x160/0x230 [ 523.335669][ T8218] ? kobject_init+0x1c0/0x1c0 [ 523.340398][ T8218] ? get_device_parent+0x288/0x3e0 [ 523.345809][ T8218] device_add+0x470/0x1050 [ 523.350281][ T8218] netdev_register_kobject+0x184/0x320 [ 523.355870][ T8218] register_netdevice+0x133a/0x1b80 [ 523.361178][ T8218] ? netif_stacked_transfer_operstate+0x200/0x200 [ 523.367705][ T8218] ? alloc_netdev_mqs+0xb56/0xf10 [ 523.372730][ T8218] ? validate_linkmsg+0x3db/0x4c0 [ 523.377803][ T8218] ? rtnl_create_link+0x905/0xb90 [ 523.382831][ T8218] ? batadv_softif_validate+0x70/0x70 [ 523.388258][ T8218] rtnl_newlink+0x14b3/0x1f90 [ 523.393067][ T8218] ? rtnl_setlink+0x510/0x510 [ 523.397761][ T8218] ? trace_raw_output_contention_end+0xd0/0xd0 [ 523.403951][ T8218] ? rcu_is_watching+0x11/0xa0 [ 523.408764][ T8218] ? trace_contention_end+0x5f/0x170 [ 523.414083][ T8218] ? __mutex_lock+0x1ab/0xae0 [ 523.418815][ T8218] ? rcu_read_unlock+0x8c/0xa0 [ 523.423631][ T8218] ? rtnl_setlink+0x510/0x510 [ 523.428359][ T8218] rtnetlink_rcv_msg+0x863/0xfb0 [ 523.433330][ T8218] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 523.438472][ T8218] ? rtnetlink_bind+0x80/0x80 [ 523.443327][ T8218] ? __local_bh_enable_ip+0x136/0x1c0 [ 523.448851][ T8218] ? lockdep_hardirqs_on+0x94/0x140 [ 523.454092][ T8218] ? __local_bh_enable_ip+0x136/0x1c0 [ 523.459469][ T8218] ? _local_bh_enable+0xa0/0xa0 [ 523.464417][ T8218] ? __dev_queue_xmit+0x281/0x3810 [ 523.469644][ T8218] ? __dev_queue_xmit+0x281/0x3810 [ 523.474775][ T8218] ? __dev_queue_xmit+0x1d84/0x3810 [ 523.479987][ T8218] ? __dev_queue_xmit+0x281/0x3810 [ 523.485104][ T8218] ? ref_tracker_free+0x682/0x830 [ 523.490191][ T8218] ? refcount_inc+0x70/0x70 [ 523.494713][ T8218] ? memcpy+0x3c/0x60 [ 523.498734][ T8218] ? __copy_skb_header+0x3ba/0x4f0 [ 523.503960][ T8218] ? __skb_clone+0x446/0x6c0 [ 523.508571][ T8218] netlink_rcv_skb+0x1ef/0x440 [ 523.513396][ T8218] ? rtnetlink_bind+0x80/0x80 [ 523.518096][ T8218] ? netlink_ack+0x1160/0x1160 [ 523.522889][ T8218] ? netlink_deliver_tap+0x2e/0x1b0 [ 523.528120][ T8218] netlink_unicast+0x7ad/0x920 [ 523.532917][ T8218] netlink_sendmsg+0x8ad/0xbd0 [ 523.537710][ T8218] ? netlink_getsockopt+0x550/0x550 [ 523.542915][ T8218] ? apparmor_socket_sendmsg+0x16c/0x330 [ 523.548739][ T8218] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 523.554039][ T8218] ? security_socket_sendmsg+0x7c/0xa0 [ 523.559503][ T8218] ? netlink_getsockopt+0x550/0x550 [ 523.564736][ T8218] ____sys_sendmsg+0x5ed/0x9a0 [ 523.569560][ T8218] ? __sys_sendmsg_sock+0x30/0x30 [ 523.574657][ T8218] ? __import_iovec+0x306/0x510 [ 523.579566][ T8218] ? import_iovec+0x6f/0xa0 [ 523.584131][ T8218] ___sys_sendmsg+0x2a2/0x360 [ 523.588868][ T8218] ? __sys_sendmsg+0x2a0/0x2a0 [ 523.593771][ T8218] __se_sys_sendmsg+0x1c3/0x2b0 [ 523.598656][ T8218] ? __x64_sys_sendmsg+0x80/0x80 [ 523.603626][ T8218] ? lockdep_hardirqs_on+0x94/0x140 [ 523.608852][ T8218] do_syscall_64+0x4c/0xa0 [ 523.613287][ T8218] ? clear_bhb_loop+0x60/0xb0 [ 523.617965][ T8218] ? clear_bhb_loop+0x60/0xb0 [ 523.622654][ T8218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.628555][ T8218] RIP: 0033:0x7f2f04b9f559 [ 523.633006][ T8218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.652731][ T8218] RSP: 002b:00007f2f059b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.661156][ T8218] RAX: ffffffffffffffda RBX: 00007f2f04e25fa0 RCX: 00007f2f04b9f559 [ 523.669134][ T8218] RDX: 0000000020000840 RSI: 0000200000000480 RDI: 0000000000000005 [ 523.677113][ T8218] RBP: 00007f2f04c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 523.685105][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.693085][ T8218] R13: 00007f2f04e26038 R14: 00007f2f04e25fa0 R15: 00007fff1d017ae8 [ 523.701134][ T8218] [ 524.561848][ T8218] kobject_add_internal failed for batadv1 (error: -12 parent: net) [ 524.618265][ T4291] Bluetooth: hci1: unexpected event 0x30 length: 6 > 3 [ 524.792039][ T128] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 524.879563][ T128] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 524.999256][ T8245] capability: warning: `syz.3.1067' uses deprecated v2 capabilities in a way that may be insecure [ 525.193055][ T128] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 525.414844][ T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.430403][ T128] usb 5-1: config 0 has no interfaces? [ 525.464239][ T128] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 525.483021][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 525.491157][ T128] usb 5-1: Product: syz [ 525.501281][ T128] usb 5-1: Manufacturer: syz [ 525.525639][ T128] usb 5-1: config 0 descriptor?? [ 525.563445][ T8249] 9pnet_fd: Insufficient options for proto=fd [ 525.645381][ T8257] netlink: 'syz.0.1072': attribute type 1 has an invalid length. [ 525.687358][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 525.798902][ T4352] usb 5-1: USB disconnect, device number 9 [ 528.296510][ T8272] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 528.560734][ T8278] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 528.633174][ T8278] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1079'. [ 529.674040][ T4291] Bluetooth: hci3: unexpected event 0x30 length: 6 > 3 [ 530.713611][ T8298] ubi: mtd0 is already attached to ubi0 [ 531.295643][ T8308] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 533.705270][ T4291] Bluetooth: hci3: unexpected event 0x30 length: 6 > 3 [ 533.792191][ T8330] 9pnet_fd: Insufficient options for proto=fd [ 535.561424][ T8355] ------------[ cut here ]------------ [ 535.566995][ T8355] kernel BUG at include/linux/scatterlist.h:163! [ 535.583055][ T8355] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 535.589320][ T8355] CPU: 0 PID: 8355 Comm: syz.2.1104 Not tainted syzkaller #0 [ 535.596738][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 535.606836][ T8355] RIP: 0010:sg_init_one+0x14a/0x160 [ 535.612093][ T8355] Code: 80 c1 03 38 c1 7c cf e8 b4 8d bf fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 9d 8d bf fd eb c8 e8 46 31 6e fd <0f> 0b e8 3f 31 6e fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 535.631738][ T8355] RSP: 0018:ffffc90005647948 EFLAGS: 00010287 [ 535.637847][ T8355] RAX: ffffffff8414153a RBX: dffffc0000000000 RCX: 0000000000080000 [ 535.645872][ T8355] RDX: ffffc90005cf9000 RSI: 00000000000010f2 RDI: 00000000000010f3 [ 535.653880][ T8355] RBP: 0000000000000000 R08: ffffc90005647a9f R09: ffffc90005647a88 [ 535.661892][ T8355] R10: dffffc0000000000 R11: fffff52000ac8f54 R12: 1ffff92000ac8f50 [ 535.669892][ T8355] R13: dffffc0000000000 R14: ffffc90005647a80 R15: 0000000000000010 [ 535.677930][ T8355] FS: 00007f22c1e9e6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 535.686900][ T8355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.693533][ T8355] CR2: 000000110c421396 CR3: 000000005a49b000 CR4: 00000000003506f0 [ 535.701721][ T8355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 535.709725][ T8355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 535.717723][ T8355] Call Trace: [ 535.721022][ T8355] [ 535.723981][ T8355] software_key_eds_op+0x4f7/0xba0 [ 535.729213][ T8355] ? __se_sys_keyctl+0x647/0x870 [ 535.734197][ T8355] ? software_key_query+0x820/0x820 [ 535.739444][ T8355] ? keyctl_pkey_e_d_s+0x1a7/0x300 [ 535.744596][ T8355] ? rcu_is_watching+0x11/0xa0 [ 535.749407][ T8355] ? keyctl_pkey_e_d_s+0x1a7/0x300 [ 535.754567][ T8355] ? __kmalloc+0xe4/0x240 [ 535.758942][ T8355] ? asymmetric_key_eds_op+0xe9/0x130 [ 535.764364][ T8355] keyctl_pkey_e_d_s+0x208/0x300 [ 535.769375][ T8355] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 535.774963][ T8355] __se_sys_keyctl+0x647/0x870 [ 535.779775][ T8355] ? __x64_sys_keyctl+0xc0/0xc0 [ 535.784653][ T8355] ? do_futex+0x310/0x320 [ 535.789094][ T8355] ? __ia32_sys_get_robust_list+0x100/0x100 [ 535.795017][ T8355] ? slab_free_freelist_hook+0x133/0x1b0 [ 535.800668][ T8355] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 535.806659][ T8355] ? lock_chain_count+0x20/0x20 [ 535.811696][ T8355] ? lockdep_hardirqs_on+0x94/0x140 [ 535.816901][ T8355] ? __x64_sys_keyctl+0x1c/0xc0 [ 535.821762][ T8355] do_syscall_64+0x4c/0xa0 [ 535.826186][ T8355] ? clear_bhb_loop+0x60/0xb0 [ 535.830869][ T8355] ? clear_bhb_loop+0x60/0xb0 [ 535.835554][ T8355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.841469][ T8355] RIP: 0033:0x7f22c0f9f559 [ 535.845889][ T8355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.865594][ T8355] RSP: 002b:00007f22c1e9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 535.874030][ T8355] RAX: ffffffffffffffda RBX: 00007f22c1225fa0 RCX: 00007f22c0f9f559 [ 535.882027][ T8355] RDX: 0000200000000780 RSI: 0000200000000740 RDI: 000000000000001a [ 535.890003][ T8355] RBP: 00007f22c1036b20 R08: 0000000000000000 R09: 0000000000000000 [ 535.898176][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.906349][ T8355] R13: 00007f22c1226038 R14: 00007f22c1225fa0 R15: 00007ffd76681568 [ 535.914430][ T8355] [ 535.917456][ T8355] Modules linked in: [ 536.033041][ T8355] ---[ end trace 0000000000000000 ]--- [ 536.111027][ T8355] RIP: 0010:sg_init_one+0x14a/0x160 [ 536.116629][ T8355] Code: 80 c1 03 38 c1 7c cf e8 b4 8d bf fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 9d 8d bf fd eb c8 e8 46 31 6e fd <0f> 0b e8 3f 31 6e fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 536.176803][ T8355] RSP: 0018:ffffc90005647948 EFLAGS: 00010287 [ 536.330340][ T8355] RAX: ffffffff8414153a RBX: dffffc0000000000 RCX: 0000000000080000 [ 536.365811][ T8355] RDX: ffffc90005cf9000 RSI: 00000000000010f2 RDI: 00000000000010f3 [ 536.388226][ T8355] RBP: 0000000000000000 R08: ffffc90005647a9f R09: ffffc90005647a88 [ 536.409978][ T8355] R10: dffffc0000000000 R11: fffff52000ac8f54 R12: 1ffff92000ac8f50 [ 536.428179][ T8355] R13: dffffc0000000000 R14: ffffc90005647a80 R15: 0000000000000010 [ 536.441745][ T8355] FS: 00007f22c1e9e6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 536.451111][ T4291] Bluetooth: hci4: unexpected event 0x30 length: 6 > 3 [ 536.451151][ T8355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.623001][ T8355] CR2: 00007f2ef15f62f8 CR3: 000000005a49b000 CR4: 00000000003506e0 [ 536.645638][ T8355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.668562][ T8355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.704316][ T8355] Kernel panic - not syncing: Fatal exception [ 536.710753][ T8355] Kernel Offset: disabled [ 536.715089][ T8355] Rebooting in 86400 seconds..