last executing test programs: 22.753045326s ago: executing program 1 (id=97): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) unshare(0x22020600) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(0x0, 0x0, 0x8000007) 21.134352212s ago: executing program 1 (id=100): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x250}}, 0xc000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x51, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x9, 0x24, 0x6, 0x0, 0x0, "43fa9260"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9c33, 0xc708, 0x9, 0x17}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf7, 0xed, 0xff}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x82, 0x1, 0x0, 0x10, 0xa}, 0x30, &(0x7f00000004c0)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "04c110eb2e227bfda9d67d5d02c86dba"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "005ccae597252047c6299af57e532cbb"}, @ptm_cap={0x3}]}, 0x4, [{0x5c, &(0x7f0000000780)=@string={0x5c, 0x3, "876bdd07306711d6a9a9f9eab0a4cd46579a8d09a4c9bb82173d27dc7f2fa4a551fc2ebe4eb57c9c2dce6a51cb88aebb687ae0e8e5d0c2e4f3c8910c59dd5c03db0417a4c4011bedf5fcf42f6fed3a9ab636dd56e16a7add8eca"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3009}}, {0x81, &(0x7f0000000940)=@string={0x81, 0x3, "b6ccc0a91a5a75eac4fa21cdfe3e5c31169ccd9a4c0d317a203348ec4af8d1d571a60025e28d582451117b3a83d9d200ff2772b0bc33ed5cc62b493a33ff3cd7e0d9e1dc90411eaeac4fd5d785c535494148f848450ab351f45b6738b201d75825af95730c162be633e5d0cd93f23ddcbcb54eeecd27df3ba8a04cdd712e71"}}, {0x5c, &(0x7f0000000880)=@string={0x5c, 0x3, "777339904e9cd5ae14d4d34bfd9a99b82afec85623a39356e14c56cdf45efaeaea067c51d2bbc93b1936043af5c91b3910ab02112f9bde9294b9da3a301b55109b3ad990940e4d7121aee2e433b27112017bcf158e9df4b451fd"}}]}) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x80000000, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x9, 0x0, 0x183, 0x5, 0x6402, 0x1, 0x11, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x3, 0x12) 18.818297754s ago: executing program 3 (id=104): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40895) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000cc2886ff2cbfe02700"/36], 0x50) 17.581858653s ago: executing program 1 (id=105): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x2000003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) getdents(r1, &(0x7f00000002c0)=""/52, 0x34) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000002780)='./cgroup\x00', 0x8f) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000602, 0x0, &(0x7f0000000380)={0x579147f3, 0xf597, 0x1, 0x7}) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) unshare(0x22020600) read$char_usb(r0, &(0x7f00000027c0)=""/4096, 0x1000) setns(r7, 0x24020000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x80000000000a90, 0x5, 0xa, 0x36, 0x3, 0x0, 0x7fffffffffffffff, 0x7, 0x5}) pipe2$watch_queue(&(0x7f0000000040), 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x48000}, 0x40094) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f00000000c0)={0x10000, 0x6b83, 0x10, 0xd3, 0x18, 0x4}) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r5, 0x80184153, &(0x7f0000000180)={0x0, &(0x7f0000000480)=[&(0x7f0000000540)="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", &(0x7f00000002c0)="c997944c4a4fc015fd532a662c297486ba0059a50eea4426dd9027bea79bb41b28fcf725b37a9ee4a77b5cdaf1ae9d8f7c3256995d7ff879ed1207536c032f74774e21fddbc4ebef61d1a575016c0051f86b91d4575335265831ebc648db6425678c71bc6e5b9e0a7a49cfab082e07755e89e0abf111129f1c45c2bb7f9fb33663f20bab686bade0506476d0ec22e155b951a34aab68a22b58317a7e16b99ae6cc6935669b14cb9543d74287b170922cca4b1d242c70bf44371a25", &(0x7f0000000380)="7289cd9410a1638f24bb270fac3ffca9a2fec5ad9456082274b8071915b6118afdee05a491357899aa26d2d97c43fa9e50c8e08be9ce5c6382241f73efe9f7c2d19c9e295261f3ce861b4c4d6599a6811172ddbe9a8a6d0e672560263a118e924b6f", &(0x7f0000000400)="621257bf6fc1e2c132f6720bd08277172166abab3a45acdc294d54dd8fb8e38d928816843036e2b236f75e9784634a9c579e9d913524b20aae14fb9b4566356b71abd98cfe22218907077a9807325ee6cef49ee4b1e64051638949ab6264803353ebc67bd54277a63fdc453a60d647fa08f9d6ffb008dedb", &(0x7f0000001540)="960fd21b7076d26683b245dd8671a5644a6778bd0357409bc0052b711f23cea9301d6dcabd486e37eb4fd00c1cf0c06a88124856789aaa84edc653e878033f680a36d52bd18e42813067d630dfd9d69572d42d2d882eb346c53b23c4bfcaed11da41f078c306c589a3dcb3d0c9229503a1da19c1fa7f7ce7deca4c090c7ed13d0bbd04d2b7ebd316489c", &(0x7f0000001600)="b1eefdcbdb3365eb2d5c0e4ae89d717bc758fb8303fb3c0f5438c12b466d9225e5f2672800a7205e6e25638fb44e450931f3671a601cf896e6a65fb38f894e1936d888815645bfdb7a5cef006a8f49e030a3bb96c0042a83994893838b2c421a421226d82895ba1a90d2e44069e849cb12420bbab2aff845d6cde4c66081ad53dcec45db8e7a63ef", &(0x7f0000000100)="8ddce331a3cf4d", &(0x7f00000016c0)="f3ea7972b2dea53a4ffb1c2851d61f8fa64d75af5980d6089492c89c9073a1ec055401e10658643e2bcab8642521bdc38779767df6e4ad899951aff693707b3f3e629423427fdb0813664c703b7f3ea48c0d9cf07684cedaf6d9fdd984088c6f6e2a635d0fa0a205daf8490927743bd06a9829c00d47cf4fb6901c9a3cecebd07fc59a63c606351cc21ab47566a8c3648fe50b6bb8bbe64aba5d7b1da7c303c62afa81513dac7fdb01b3dfb0b305daf81f", &(0x7f0000001780)="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"]}) 15.823684935s ago: executing program 3 (id=106): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0xa, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000940)=0x46) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xdc, 0x82) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000003d00), 0x2, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000003d40)={0x0, 0x34325241, 0x1, @stepwise={0x4, 0x4, 0x4, 0xcac, 0x4, 0x4}}) 15.304723274s ago: executing program 2 (id=107): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x44954) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x2) ftruncate(r0, 0x8008976) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000000000000cc000000000000cd27"]) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0xe}}, 0x40) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, &(0x7f0000000140)) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/158, 0x9e}], 0x1}, 0x5}], 0x1, 0x40000022, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000002939ffffffffffff00001000010000000000200004000000000041ee521872c65352802624260b27064019629c1feea1b498417bf6934f870172290138982d3df9cdf689ba5806c543e625beba544566b1711d57aa7e2bc4ed762f718f"], 0x24, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000"], 0x50) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000001980)=0x1) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4089, 0xff9}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x3, &(0x7f0000003700)={0x77359400}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$phonet_pipe(0x23, 0x5, 0x2) 13.422552606s ago: executing program 3 (id=111): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x7f, 0x8, 0x6, 0x9, 0x4, 0x6}) bpf$PROG_LOAD(0x25, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x4, 0x1c}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x3ffdcf, 0x7ff, 0xc4, 0x1}, 0x50) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f"], 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x769f, 0x1fffffc, 0x0, 0x0, 0x0) 13.13454882s ago: executing program 3 (id=112): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x2, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0x7}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x120a, 0x800000000000000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) unlink(&(0x7f0000000040)='./file0\x00') r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000005c0)="e5a5cc75004ba5ab52e0c97bd12ecfc28eaf8ea9cf0f57f7f3fd2b45283b073fd94b00af4595db5816a22f24a32e5b8f9d9210a9384b09489a92fe50d52d7dbb13faf880c4916d955b1ed15b3209cdf2"}) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="00fcff03000000"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000003c0)={'veth1_vlan\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x16, "b0ed17937f7ea0b08b4710215d760ef63a292fd0b310d60c118f721f7d933ef7", "ef6008f58b69e292b721fde616e617cf36a55893ff27793443a76ed69f9e345e", "c7398e301d05fd8278cfbb377dfb664b5b98f783a7f65dd64b31189efb97c4df", "77ea92792b302c0933ad227470f1851060b4d7e1319514249ba10b153f2125b1", "898603b9917c2ddca1884dd74cfe994462de37594ff62a5c5dcc8ae34441cf9a", "332a1f335f8613b29ab8cf61", 0x2, 0x3, 0x80000001, 0x9, 0x3000000}}) syz_usb_disconnect(r2) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 13.092577214s ago: executing program 2 (id=113): socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x80000) syz_open_dev$evdev(&(0x7f0000001240), 0x1, 0x40) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) (fail_nth: 1) 12.378506486s ago: executing program 2 (id=116): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffdfc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000940)="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", 0x6cb}], 0x1, 0x0, 0x0, 0x24004801}}], 0x1, 0x20008004) 11.978386911s ago: executing program 4 (id=117): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) unshare(0x22020600) keyctl$invalidate(0x15, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) accept(r7, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f0000001480)="2b010ed9a2708e87ee", 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x1, 0x0, 0x0) 10.256607677s ago: executing program 2 (id=120): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffdfc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000940)="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", 0x6cb}], 0x1, 0x0, 0x0, 0x24004801}}], 0x1, 0x20008004) 10.20921135s ago: executing program 4 (id=121): ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') pwrite64(r0, 0x0, 0x0, 0x9) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x2) name_to_handle_at(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="08000000ad070000e1000000d9000000"], &(0x7f0000000380), 0x1000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000000)={'batadv0\x00', 0x6, 0xffffa377}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'rose0\x00', &(0x7f0000000040)=@ethtool_cmd={0x18, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x87, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000043, [0x2, 0x89ff]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x1a, 0x3, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) 9.958910984s ago: executing program 1 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1) 9.170461285s ago: executing program 3 (id=123): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300080000109021b0001000000010904080001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x11, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) pselect6(0x40, &(0x7f0000000100)={0x7ff, 0xfffffffffffffffc, 0x100005, 0x0, 0x800, 0x0, 0x8000000000000001, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006140)=ANY=[@ANYBLOB="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"], 0x1e34}}, 0x0) 2.992569648s ago: executing program 1 (id=124): r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000003c0)={0xfffffff8, 0x2, 0x88d, 0x40, 0x1ff, 0x7, 0x4}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000003c0)={0xfffffff8, 0x2, 0x88d, 0x40, 0x1ff, 0x7, 0x4}) 2.952343355s ago: executing program 4 (id=125): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4097, 0x1001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000440)={@empty, 0x2b, r4}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 2.708211544s ago: executing program 0 (id=126): r0 = socket(0x400000000010, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000240)="806000800000210ee7decd7a000000008100", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xdb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) 2.656013004s ago: executing program 2 (id=127): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) unshare(0x22020600) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r3, 0x8}], 0x1, 0x8000007) 2.55578807s ago: executing program 1 (id=128): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffffffffffcc5, 0x0}]}) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000300), 0xfffffffffffff85b, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x48, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x1, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x6, 0x4}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x7, 0x6, 0x4, 0xf678bd12373acc8c, 0x9}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x1, [{0x5f, &(0x7f0000000280)=ANY=[@ANYBLOB="5f0392144e9dcd49effe545cc87393434ffcb225309d2787a5ef14e0b55692cbf2510773ed0316a5a00c79be067d98821cc858eaa62ac2dfffbd68ac76a27e305f8d58b57c4122e10b5c4c7554404ebaee31e142222b171ef25ccc6c9365b6"]}]}) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 2.138790299s ago: executing program 0 (id=129): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x40, 0x9, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) 2.120172731s ago: executing program 4 (id=130): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x44, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000002c0)=""/52, 0x34) 510.041073ms ago: executing program 0 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000240)=0xf9c5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b', @ANYRES32=r0], 0x24}}, 0x0) 449.648261ms ago: executing program 4 (id=132): mkdir(&(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x44, &(0x7f0000000140)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xa4f, '\x00', 0x0, r0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0xffffffffffffff7f}}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b) writev(r4, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000240)="1c", 0x1}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x702, 0xe, 0x0, &(0x7f0000000380)="eb00140000000010000000000000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000c40)={0x8000203d}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f00000002c0)=""/52, 0x34) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 366.855465ms ago: executing program 3 (id=133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_open_dev$vcsn(&(0x7f0000000100), 0xff, 0x240500) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @local, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 349.640711ms ago: executing program 2 (id=134): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffdfc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) 274.807799ms ago: executing program 0 (id=135): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="540100001a00330600000000fddbdf25ac141442000000000000000000000000e0000002000000000000004e23800100002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003200000000000000000000000000000000000000230300000000000000000000000000000000000000000000fdffffffffffffff0900000000000000be92000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000300000000000000ff0000000000000009ca000029bd70000235000002000200100000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200002004e2200"/268], 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000300)={0x2, 0x0, {&(0x7f00000002c0)=""/3, 0x3, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000540)=""/234, 0xea, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 0s ago: executing program 0 (id=136): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b80)=ANY=[@ANYBLOB="240000001e008d2a000000000000000008000000", @ANYBLOB="f4"], 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003980), 0x2, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, 0x0) setrlimit(0x1, &(0x7f00000000c0)={0x1}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000000)={0x0, 0x5, 0x1}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r4 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x1000007, 0x428b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) unshare(0x22020600) keyctl$invalidate(0x15, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) accept(r7, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f0000001480)="2b010ed9a2708e87ee", 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 88.349089][ T5783] cgroup: Unknown subsys name 'net' [ 88.590991][ T5783] cgroup: Unknown subsys name 'cpuset' [ 88.646200][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.578067][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.099783][ T807] cfg80211: failed to load regulatory.db [ 93.031292][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.033456][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.034360][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.042335][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.043692][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.069651][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.086603][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.107809][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.129899][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.148833][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.150738][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.165518][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.181163][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.184402][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.188242][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.196131][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.220981][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.222675][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.241549][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.261073][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.262512][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.267463][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.271970][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.296460][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.300797][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.218726][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 94.239883][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 94.346645][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 94.408579][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 94.484129][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 94.693117][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.693219][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.693802][ T5796] bridge_slave_0: entered allmulticast mode [ 94.717250][ T5796] bridge_slave_0: entered promiscuous mode [ 94.722009][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.722136][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.722314][ T5797] bridge_slave_0: entered allmulticast mode [ 94.724481][ T5797] bridge_slave_0: entered promiscuous mode [ 94.791094][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.791224][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.791404][ T5796] bridge_slave_1: entered allmulticast mode [ 94.793227][ T5796] bridge_slave_1: entered promiscuous mode [ 94.804805][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.804903][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.805055][ T5797] bridge_slave_1: entered allmulticast mode [ 94.806848][ T5797] bridge_slave_1: entered promiscuous mode [ 94.927027][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.927188][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.927323][ T5798] bridge_slave_0: entered allmulticast mode [ 94.929136][ T5798] bridge_slave_0: entered promiscuous mode [ 95.014470][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.016273][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.017615][ T5798] bridge_slave_1: entered allmulticast mode [ 95.024397][ T5798] bridge_slave_1: entered promiscuous mode [ 95.031638][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.031975][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.033270][ T5802] bridge_slave_0: entered allmulticast mode [ 95.041847][ T5802] bridge_slave_0: entered promiscuous mode [ 95.071868][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.086998][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.175949][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.176038][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.176197][ T5802] bridge_slave_1: entered allmulticast mode [ 95.178056][ T5802] bridge_slave_1: entered promiscuous mode [ 95.182978][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.197350][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.197677][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.198019][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.198513][ T5800] bridge_slave_0: entered allmulticast mode [ 95.205904][ T5800] bridge_slave_0: entered promiscuous mode [ 95.208433][ T61] Bluetooth: hci0: command tx timeout [ 95.209028][ T5115] Bluetooth: hci1: command tx timeout [ 95.288527][ T5115] Bluetooth: hci4: command tx timeout [ 95.288551][ T61] Bluetooth: hci2: command tx timeout [ 95.329972][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.330237][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.330427][ T5800] bridge_slave_1: entered allmulticast mode [ 95.332438][ T5800] bridge_slave_1: entered promiscuous mode [ 95.365144][ T61] Bluetooth: hci3: command tx timeout [ 95.367278][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.438832][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.448111][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.476645][ T5796] team0: Port device team_slave_0 added [ 95.479616][ T5797] team0: Port device team_slave_0 added [ 95.524190][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.532025][ T5796] team0: Port device team_slave_1 added [ 95.541166][ T5797] team0: Port device team_slave_1 added [ 95.551588][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.616406][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.618446][ T5798] team0: Port device team_slave_0 added [ 95.689888][ T5798] team0: Port device team_slave_1 added [ 95.692019][ T5802] team0: Port device team_slave_0 added [ 95.693253][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.693265][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.693284][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.706098][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.706116][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.706167][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.807433][ T5802] team0: Port device team_slave_1 added [ 95.808231][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.808242][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.808262][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.809345][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.809355][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.809375][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.812651][ T5800] team0: Port device team_slave_0 added [ 95.940784][ T5800] team0: Port device team_slave_1 added [ 95.941613][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.941625][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.941644][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.012247][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.012262][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.012282][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.013332][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.013343][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.013362][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.109217][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.109231][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.109251][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.177134][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.177149][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.177169][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.675748][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.675766][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.675793][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.698441][ T5796] hsr_slave_0: entered promiscuous mode [ 96.703048][ T5796] hsr_slave_1: entered promiscuous mode [ 96.735487][ T5797] hsr_slave_0: entered promiscuous mode [ 96.739498][ T5797] hsr_slave_1: entered promiscuous mode [ 96.742820][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 96.743182][ T5797] Cannot create hsr debugfs directory [ 96.829481][ T5798] hsr_slave_0: entered promiscuous mode [ 96.831529][ T5798] hsr_slave_1: entered promiscuous mode [ 96.832257][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 96.832274][ T5798] Cannot create hsr debugfs directory [ 96.918527][ T5802] hsr_slave_0: entered promiscuous mode [ 96.919594][ T5802] hsr_slave_1: entered promiscuous mode [ 96.920328][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 96.920346][ T5802] Cannot create hsr debugfs directory [ 97.014324][ T5800] hsr_slave_0: entered promiscuous mode [ 97.021459][ T5800] hsr_slave_1: entered promiscuous mode [ 97.022155][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 97.022173][ T5800] Cannot create hsr debugfs directory [ 97.284822][ T61] Bluetooth: hci1: command tx timeout [ 97.284831][ T5115] Bluetooth: hci0: command tx timeout [ 97.364816][ T5115] Bluetooth: hci4: command tx timeout [ 97.364858][ T5115] Bluetooth: hci2: command tx timeout [ 97.454746][ T5115] Bluetooth: hci3: command tx timeout [ 97.984479][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.023565][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.061875][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.114720][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.219682][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.263031][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.281198][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.340261][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.473806][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.513284][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.557147][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.611433][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.773454][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.815149][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.859143][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.917516][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.073828][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.116788][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.117092][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.170762][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.207372][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.329484][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.351835][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.365763][ T5115] Bluetooth: hci0: command tx timeout [ 99.366783][ T5115] Bluetooth: hci1: command tx timeout [ 99.393577][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.396386][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.444705][ T61] Bluetooth: hci4: command tx timeout [ 99.444798][ T5115] Bluetooth: hci2: command tx timeout [ 99.460488][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.460853][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.523108][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.525470][ T5115] Bluetooth: hci3: command tx timeout [ 99.578848][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.578993][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.617317][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.637278][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.637395][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.726324][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.753068][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.782926][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.783073][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.853040][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.854787][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.934256][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.951763][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.008730][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.008898][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.064180][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.067954][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.119704][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.170395][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.172578][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.229364][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.229499][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.357388][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.627043][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.727731][ T5796] veth0_vlan: entered promiscuous mode [ 100.801077][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.829318][ T5796] veth1_vlan: entered promiscuous mode [ 101.001022][ T5796] veth0_macvtap: entered promiscuous mode [ 101.070707][ T5796] veth1_macvtap: entered promiscuous mode [ 101.072967][ T5798] veth0_vlan: entered promiscuous mode [ 101.147226][ T5798] veth1_vlan: entered promiscuous mode [ 101.150790][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.189322][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.239166][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.282018][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.289250][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.306087][ T3551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.310246][ T3551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.349761][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.445582][ T61] Bluetooth: hci0: command tx timeout [ 101.445632][ T5115] Bluetooth: hci1: command tx timeout [ 101.524877][ T61] Bluetooth: hci4: command tx timeout [ 101.524924][ T5115] Bluetooth: hci2: command tx timeout [ 101.528190][ T5798] veth0_macvtap: entered promiscuous mode [ 101.614980][ T5115] Bluetooth: hci3: command tx timeout [ 101.652603][ T5798] veth1_macvtap: entered promiscuous mode [ 101.670360][ T5802] veth0_vlan: entered promiscuous mode [ 101.731740][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.731763][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.779518][ T5802] veth1_vlan: entered promiscuous mode [ 101.809002][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.868172][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.868613][ T5800] veth0_vlan: entered promiscuous mode [ 101.870734][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.870750][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.906070][ T5797] veth0_vlan: entered promiscuous mode [ 101.954186][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.967258][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.985726][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.986418][ T5797] veth1_vlan: entered promiscuous mode [ 101.992165][ T5800] veth1_vlan: entered promiscuous mode [ 102.023216][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.153071][ T5802] veth0_macvtap: entered promiscuous mode [ 102.241617][ T5802] veth1_macvtap: entered promiscuous mode [ 102.401433][ T5800] veth0_macvtap: entered promiscuous mode [ 102.403382][ T5797] veth0_macvtap: entered promiscuous mode [ 102.415960][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.415984][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.438187][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.337830][ T5800] veth1_macvtap: entered promiscuous mode [ 103.340985][ T5797] veth1_macvtap: entered promiscuous mode [ 103.432751][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.553138][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.561017][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.563967][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.570645][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.596898][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.596921][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.603190][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.612249][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.837568][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.845181][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.713100][ T3551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.927298][ T3551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.057657][ T5923] FAULT_INJECTION: forcing a failure. [ 105.057657][ T5923] name failslab, interval 1, probability 0, space 0, times 1 [ 105.057765][ T5923] CPU: 1 UID: 0 PID: 5923 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.057798][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.057821][ T5923] Call Trace: [ 105.057831][ T5923] [ 105.057845][ T5923] dump_stack_lvl+0xe8/0x150 [ 105.057889][ T5923] should_fail_ex+0x46b/0x600 [ 105.057920][ T5923] should_failslab+0xa8/0x100 [ 105.057954][ T5923] __kmalloc_noprof+0xdf/0x7c0 [ 105.057985][ T5923] ? kfree+0x4d/0x8f0 [ 105.058010][ T5923] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 105.058040][ T5923] tomoyo_realpath_from_path+0xe3/0x5d0 [ 105.058075][ T5923] ? tomoyo_path_number_perm+0x219/0x630 [ 105.058106][ T5923] tomoyo_path_number_perm+0x246/0x630 [ 105.058143][ T5923] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 105.058178][ T5923] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.058225][ T5923] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.058281][ T5923] ? __rcu_read_unlock+0x83/0xe0 [ 105.058304][ T5923] ? __fget_files+0x2a/0x420 [ 105.058324][ T5923] ? __fget_files+0x3a6/0x420 [ 105.058344][ T5923] ? __fget_files+0x2a/0x420 [ 105.058369][ T5923] security_file_ioctl+0xc3/0x2a0 [ 105.058403][ T5923] __se_sys_ioctl+0x47/0x170 [ 105.058433][ T5923] do_syscall_64+0xe2/0xf80 [ 105.058463][ T5923] ? rcu_is_watching+0x15/0xb0 [ 105.058490][ T5923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.058512][ T5923] ? clear_bhb_loop+0x60/0xb0 [ 105.058539][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.058562][ T5923] RIP: 0033:0x7f1719f3af79 [ 105.058586][ T5923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.058605][ T5923] RSP: 002b:00007f1718154028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.058629][ T5923] RAX: ffffffffffffffda RBX: 00007f171a1b6180 RCX: 00007f1719f3af79 [ 105.058645][ T5923] RDX: 0000000000000000 RSI: 00000000c0c89425 RDI: 0000000000000005 [ 105.058658][ T5923] RBP: 00007f1718154090 R08: 0000000000000000 R09: 0000000000000000 [ 105.058672][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.058684][ T5923] R13: 00007f171a1b6218 R14: 00007f171a1b6180 R15: 00007fff247a3fa8 [ 105.058720][ T5923] [ 105.058755][ T5923] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.779922][ T3551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.821770][ T3551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.863672][ T3551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.897703][ T3551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.931278][ T3551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.998898][ T3551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.240368][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.240392][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.165975][ T984] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.235092][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.345571][ T984] usb 3-1: Using ep0 maxpacket: 8 [ 107.383277][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.383299][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.383822][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.383853][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.383896][ T984] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 107.383920][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.483603][ T984] usb 3-1: config 0 descriptor?? [ 107.713416][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.713441][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.099799][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.099820][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.340450][ T984] usbhid 3-1:0.0: can't add hid device: -71 [ 108.340574][ T984] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 108.394736][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.424400][ T984] usb 3-1: USB disconnect, device number 2 [ 108.446882][ T5940] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 108.723439][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 108.746140][ T9] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 108.746178][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.746198][ T9] usb 1-1: Product: ᚌﺻ扜㮨ꂾ䇒꨺弣鿔䷁緖腣鯀耔䛗藔䠪뻗ϯ蠽 [ 108.746216][ T9] usb 1-1: Manufacturer: 嶁쮰鍦路ᖔ陘尸ࣺ䊛姉꽤鉯쬴ನྣᲇ闇躌쳮靤뒠Ⴇ죣诮筃쁨訌緻ꒇ頤૕鼭諏栲蚬䑑ꖥ䬿☍훂煑ᣵʆ봕Ⳏ晷ɾ놃휁辋Ḳ矇אָ︆瘲쒸̪턷䫽Ç蝬萊 [ 108.746242][ T9] usb 1-1: SerialNumber: ࠬ [ 108.753060][ T3081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.753081][ T3081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.695724][ T5941] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 109.907179][ T5951] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 109.936439][ T5949] Zero length message leads to an empty skb [ 110.150947][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.179624][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.194961][ T5941] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 110.295721][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.295742][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.426164][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x04B8 pid 0x0202 [ 111.517107][ T9] usb 1-1: USB disconnect, device number 2 [ 111.548606][ T9] usblp0: removed [ 111.596305][ T37] audit: type=1326 audit(1770674734.007:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5967 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e59feaf79 code=0x7ffc0000 [ 111.596363][ T37] audit: type=1326 audit(1770674734.007:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5967 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e59feaf79 code=0x7ffc0000 [ 111.760338][ T5972] netlink: 'syz.4.5': attribute type 9 has an invalid length. [ 112.077605][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 113.448963][ T5984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.594814][ T5937] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 113.781197][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.781891][ T5937] usb 3-1: not running at top speed; connect to a high speed hub [ 113.789362][ T5937] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 113.875022][ T6006] openvswitch: netlink: IP tunnel TTL not specified. [ 114.579006][ T5937] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.579040][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.579062][ T5937] usb 3-1: Product: syz [ 114.579077][ T5937] usb 3-1: Manufacturer: syz [ 114.579092][ T5937] usb 3-1: SerialNumber: syz [ 115.010253][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.014164][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.042719][ T5984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.172493][ T5937] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 115.182769][ T5937] usb 3-1: unit 51 not found! [ 115.239813][ T5937] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 115.244715][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.333056][ T5937] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.397046][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 115.397085][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 115.397115][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.403399][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.403430][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.403450][ T9] usb 2-1: Product: syz [ 115.403465][ T9] usb 2-1: Manufacturer: syz [ 115.403480][ T9] usb 2-1: SerialNumber: syz [ 115.517040][ T9] usb 2-1: config 0 descriptor?? [ 115.615875][ T5937] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.620152][ T9] usb 2-1: selecting invalid altsetting 0 [ 115.755646][ T5984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.763165][ T5937] usb 3-1: USB disconnect, device number 3 [ 115.763468][ T807] kernel read not supported for file /11/net/anycast6 (pid: 807 comm: kworker/1:2) [ 116.814478][ T9] usb 2-1: USB disconnect, device number 2 [ 116.833641][ T6036] FAULT_INJECTION: forcing a failure. [ 116.833641][ T6036] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.833681][ T6036] CPU: 1 UID: 0 PID: 6036 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.833706][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 116.833719][ T6036] Call Trace: [ 116.833727][ T6036] [ 116.833736][ T6036] dump_stack_lvl+0xe8/0x150 [ 116.833774][ T6036] should_fail_ex+0x46b/0x600 [ 116.833802][ T6036] _copy_from_iter+0x1d3/0x1670 [ 116.833830][ T6036] ? kmalloc_reserve+0xbd/0x290 [ 116.833849][ T6036] ? rcu_is_watching+0x15/0xb0 [ 116.833878][ T6036] ? kmalloc_reserve+0xbd/0x290 [ 116.833901][ T6036] ? __pfx__copy_from_iter+0x10/0x10 [ 116.833928][ T6036] ? __build_skb_around+0x22d/0x3c0 [ 116.833962][ T6036] ? __alloc_skb+0x193/0x390 [ 116.833995][ T6036] ? netlink_sendmsg+0x650/0xb40 [ 116.834024][ T6036] ? skb_put+0x11b/0x210 [ 116.834047][ T6036] netlink_sendmsg+0x6c0/0xb40 [ 116.834089][ T6036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.834128][ T6036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.834164][ T6036] ____sys_sendmsg+0xa4e/0xac0 [ 116.834187][ T6036] ? __might_fault+0xaf/0x130 [ 116.834242][ T6036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.834275][ T6036] ? import_iovec+0x73/0xa0 [ 116.834307][ T6036] ___sys_sendmsg+0x2a5/0x360 [ 116.834329][ T6036] ? __lock_acquire+0x6b5/0x2cf0 [ 116.834357][ T6036] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.834417][ T6036] ? __fget_files+0x2a/0x420 [ 116.834436][ T6036] ? __fget_files+0x3a6/0x420 [ 116.834465][ T6036] __x64_sys_sendmsg+0x1c3/0x2a0 [ 116.834494][ T6036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.834527][ T6036] ? __pfx_ksys_write+0x10/0x10 [ 116.834567][ T6036] do_syscall_64+0xe2/0xf80 [ 116.834596][ T6036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.834625][ T6036] ? trace_irq_disable+0x37/0x100 [ 116.834654][ T6036] ? clear_bhb_loop+0x60/0xb0 [ 116.834681][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.834702][ T6036] RIP: 0033:0x7f1719f3af79 [ 116.834723][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.834742][ T6036] RSP: 002b:00007f1718196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.834765][ T6036] RAX: ffffffffffffffda RBX: 00007f171a1b5fa0 RCX: 00007f1719f3af79 [ 116.834781][ T6036] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000009 [ 116.834795][ T6036] RBP: 00007f1718196090 R08: 0000000000000000 R09: 0000000000000000 [ 116.834808][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.834821][ T6036] R13: 00007f171a1b6038 R14: 00007f171a1b5fa0 R15: 00007fff247a3fa8 [ 116.834855][ T6036] [ 117.157230][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.194652][ T807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.194931][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 117.364798][ T807] usb 5-1: device descriptor read/64, error -32 [ 117.404470][ T5984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.620050][ T6047] FAULT_INJECTION: forcing a failure. [ 117.620050][ T6047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.620088][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.620113][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 117.620126][ T6047] Call Trace: [ 117.620135][ T6047] [ 117.620144][ T6047] dump_stack_lvl+0xe8/0x150 [ 117.620181][ T6047] should_fail_ex+0x46b/0x600 [ 117.620211][ T6047] _copy_to_user+0x31/0xb0 [ 117.620244][ T6047] simple_read_from_buffer+0xe1/0x170 [ 117.620282][ T6047] proc_fail_nth_read+0x1be/0x230 [ 117.620314][ T6047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.620355][ T6047] ? rw_verify_area+0x2ac/0x4e0 [ 117.620382][ T6047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.620412][ T6047] vfs_read+0x212/0xa70 [ 117.620449][ T6047] ? __pfx_vfs_read+0x10/0x10 [ 117.620479][ T6047] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.620510][ T6047] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.620540][ T6047] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 117.620571][ T6047] ? mutex_lock_nested+0x152/0x1d0 [ 117.620593][ T6047] ? fdget_pos+0x252/0x320 [ 117.620624][ T6047] ksys_read+0x156/0x270 [ 117.620654][ T6047] ? __pfx_ksys_read+0x10/0x10 [ 117.620680][ T6047] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 117.620724][ T6047] do_syscall_64+0xe2/0xf80 [ 117.620753][ T6047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.620775][ T6047] ? trace_irq_disable+0x37/0x100 [ 117.620805][ T6047] ? clear_bhb_loop+0x60/0xb0 [ 117.620832][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.620855][ T6047] RIP: 0033:0x7f1719efb84e [ 117.620875][ T6047] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.620894][ T6047] RSP: 002b:00007f1718195fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.620916][ T6047] RAX: ffffffffffffffda RBX: 00007f17181966c0 RCX: 00007f1719efb84e [ 117.620933][ T6047] RDX: 000000000000000f RSI: 00007f17181960a0 RDI: 0000000000000006 [ 117.620946][ T6047] RBP: 00007f1718196090 R08: 0000000000000000 R09: 0000000000000000 [ 117.620960][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.620973][ T6047] R13: 00007f171a1b6038 R14: 00007f171a1b5fa0 R15: 00007fff247a3fa8 [ 117.621008][ T6047] [ 117.999434][ T807] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.038403][ T6051] openvswitch: netlink: IP tunnel TTL not specified. [ 118.825586][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 118.832175][ T807] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 118.832206][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.879850][ T807] usb 5-1: config 0 descriptor?? [ 119.375758][ T807] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 119.457243][ T807] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 119.457266][ T807] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 119.614589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.615559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.624588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.634577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.644582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.654566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.664570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.674573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.923561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.923630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.949043][ T6071] ======================================================= [ 121.949043][ T6071] WARNING: The mand mount option has been deprecated and [ 121.949043][ T6071] and is ignored by this kernel. Remove the mand [ 121.949043][ T6071] option from the mount to silence this warning. [ 121.949043][ T6071] ======================================================= [ 121.952420][ T6071] overlayfs: failed to resolve 'w5T)`)YFnA@T<3ڂ$rcnHwC" -8/': -2 [ 122.708875][ T6081] FAULT_INJECTION: forcing a failure. [ 122.708875][ T6081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.708925][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.1.51 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 122.708956][ T6081] Tainted: [L]=SOFTLOCKUP [ 122.708963][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 122.708980][ T6081] Call Trace: [ 122.708988][ T6081] [ 122.708997][ T6081] dump_stack_lvl+0xe8/0x150 [ 122.709047][ T6081] should_fail_ex+0x46b/0x600 [ 122.709078][ T6081] _copy_from_iter+0x1d3/0x1670 [ 122.709107][ T6081] ? kmalloc_reserve+0xbd/0x290 [ 122.709127][ T6081] ? rcu_is_watching+0x15/0xb0 [ 122.709157][ T6081] ? kmalloc_reserve+0xbd/0x290 [ 122.709180][ T6081] ? __pfx__copy_from_iter+0x10/0x10 [ 122.709206][ T6081] ? __build_skb_around+0x22d/0x3c0 [ 122.709241][ T6081] ? __alloc_skb+0x193/0x390 [ 122.709273][ T6081] ? netlink_sendmsg+0x650/0xb40 [ 122.709303][ T6081] ? skb_put+0x11b/0x210 [ 122.709325][ T6081] netlink_sendmsg+0x6c0/0xb40 [ 122.709370][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.709408][ T6081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.709444][ T6081] ____sys_sendmsg+0xa4e/0xac0 [ 122.709468][ T6081] ? __might_fault+0xaf/0x130 [ 122.709509][ T6081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.709542][ T6081] ? import_iovec+0x73/0xa0 [ 122.709575][ T6081] ___sys_sendmsg+0x2a5/0x360 [ 122.709597][ T6081] ? __lock_acquire+0x6b5/0x2cf0 [ 122.709626][ T6081] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.709687][ T6081] ? __fget_files+0x2a/0x420 [ 122.709706][ T6081] ? __fget_files+0x3a6/0x420 [ 122.709736][ T6081] __x64_sys_sendmsg+0x1c3/0x2a0 [ 122.709763][ T6081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.709797][ T6081] ? __pfx_ksys_write+0x10/0x10 [ 122.709846][ T6081] do_syscall_64+0xe2/0xf80 [ 122.709876][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.709898][ T6081] ? clear_bhb_loop+0x60/0xb0 [ 122.709926][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.709947][ T6081] RIP: 0033:0x7f1e59feaf79 [ 122.709973][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.709992][ T6081] RSP: 002b:00007f1e58246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.710021][ T6081] RAX: ffffffffffffffda RBX: 00007f1e5a265fa0 RCX: 00007f1e59feaf79 [ 122.710036][ T6081] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 122.710050][ T6081] RBP: 00007f1e58246090 R08: 0000000000000000 R09: 0000000000000000 [ 122.710062][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.710074][ T6081] R13: 00007f1e5a266038 R14: 00007f1e5a265fa0 R15: 00007fff2c12d8b8 [ 122.710108][ T6081] [ 123.606123][ T6087] openvswitch: netlink: IP tunnel TTL not specified. [ 124.611743][ T6092] pim6reg: entered allmulticast mode [ 124.631073][ T6092] team0: entered allmulticast mode [ 124.631098][ T6092] team_slave_0: entered allmulticast mode [ 124.631119][ T6092] team_slave_1: entered allmulticast mode [ 124.707029][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 124.707143][ T6093] netlink: 7 bytes leftover after parsing attributes in process `syz.1.54'. [ 124.947435][ T5961] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.032487][ T42] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.147180][ T42] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.200631][ T42] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.304853][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.431581][ T6108] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.474695][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 125.493695][ T10] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 125.493726][ T10] usb 2-1: config 0 has no interface number 0 [ 125.494141][ T10] usb 2-1: config 0 interface 27 has no altsetting 0 [ 125.526307][ T10] usb 2-1: New USB device found, idVendor=049f, idProduct=505a, bcdDevice=fd.f9 [ 125.526342][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.526363][ T10] usb 2-1: Product: syz [ 125.526377][ T10] usb 2-1: Manufacturer: syz [ 125.526392][ T10] usb 2-1: SerialNumber: syz [ 125.569234][ T10] usb 2-1: config 0 descriptor?? [ 125.587894][ T10] cdc_subset 2-1:0.27: probe with driver cdc_subset failed with error -22 [ 125.747362][ T6110] warning: `syz.3.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.781128][ T5883] usb 2-1: USB disconnect, device number 3 [ 128.256048][ T6118] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 128.508205][ T6123] openvswitch: netlink: IP tunnel TTL not specified. [ 129.094843][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.260756][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 129.304636][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.304673][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.304716][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.304741][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.366714][ T10] usb 4-1: config 0 descriptor?? [ 129.388534][ T10] hub 4-1:0.0: USB hub found [ 129.534728][ T6128] netlink: 'syz.0.65': attribute type 13 has an invalid length. [ 129.534751][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 129.551719][ T6128] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 129.613258][ T10] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 130.094913][ T10] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 130.496635][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.625571][ T10] usb 3-1: device descriptor read/64, error -71 [ 130.864889][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.009622][ T10] usb 3-1: device descriptor read/64, error -71 [ 131.333904][ T10] usb usb3-port1: attempt power cycle [ 132.057600][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.075996][ T10] usb 3-1: device descriptor read/8, error -71 [ 132.330126][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.348511][ T10] usb 3-1: device descriptor read/8, error -71 [ 132.362240][ T6164] process 'syz.0.77' launched '/dev/fd/7/./file0' with NULL argv: empty string added [ 132.461155][ T6171] random: crng reseeded on system resumption [ 133.192281][ T10] usb usb3-port1: unable to enumerate USB device [ 134.804770][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.956500][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 134.977457][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.977488][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.007352][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.007386][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.007409][ T10] usb 1-1: Product: syz [ 135.007425][ T10] usb 1-1: Manufacturer: syz [ 135.007440][ T10] usb 1-1: SerialNumber: syz [ 136.124954][ T10] usb 1-1: 0:2 : does not exist [ 136.678713][ T6202] random: crng reseeded on system resumption [ 137.861108][ T5845] usb 4-1: USB disconnect, device number 2 [ 138.030559][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 138.159810][ T6207] nbd: socks must be embedded in a SOCK_ITEM attr [ 138.189050][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.189117][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.223530][ T10] usb 1-1: USB disconnect, device number 3 [ 138.514730][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.627947][ T5845] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.740860][ T6214] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.742035][ T6214] netlink: 68 bytes leftover after parsing attributes in process `syz.0.92'. [ 138.844757][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 138.846901][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.846925][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.846952][ T5845] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 138.846969][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.878658][ T5845] usb 4-1: config 0 descriptor?? [ 138.948014][ T6218] FAULT_INJECTION: forcing a failure. [ 138.948014][ T6218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.948043][ T6218] CPU: 1 UID: 0 PID: 6218 Comm: syz.4.93 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 138.948065][ T6218] Tainted: [L]=SOFTLOCKUP [ 138.948071][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.948080][ T6218] Call Trace: [ 138.948085][ T6218] [ 138.948092][ T6218] dump_stack_lvl+0xe8/0x150 [ 138.948119][ T6218] should_fail_ex+0x46b/0x600 [ 138.948142][ T6218] _copy_from_user+0x2d/0xb0 [ 138.948165][ T6218] con_set_cmap+0xb9/0x790 [ 138.948189][ T6218] ? tomoyo_path_number_perm+0x219/0x630 [ 138.948214][ T6218] ? __pfx_con_set_cmap+0x10/0x10 [ 138.948242][ T6218] ? bpf_lsm_capable+0x9/0x20 [ 138.948259][ T6218] ? security_capable+0x7e/0x2c0 [ 138.948279][ T6218] vt_ioctl+0x1169/0x20c0 [ 138.948304][ T6218] ? __pfx_vt_ioctl+0x10/0x10 [ 138.948323][ T6218] ? __asan_memset+0x22/0x50 [ 138.948342][ T6218] ? smack_file_ioctl+0x263/0x360 [ 138.948365][ T6218] ? __pfx_smack_file_ioctl+0x10/0x10 [ 138.948399][ T6218] ? __fget_files+0x3a6/0x420 [ 138.948413][ T6218] ? __fget_files+0x2a/0x420 [ 138.948429][ T6218] tty_ioctl+0x92e/0xde0 [ 138.948445][ T6218] ? __pfx_tty_ioctl+0x10/0x10 [ 138.948459][ T6218] __se_sys_ioctl+0xff/0x170 [ 138.948480][ T6218] do_syscall_64+0xe2/0xf80 [ 138.948502][ T6218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.948517][ T6218] ? trace_irq_disable+0x37/0x100 [ 138.948538][ T6218] ? clear_bhb_loop+0x60/0xb0 [ 138.948557][ T6218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.948573][ T6218] RIP: 0033:0x7f7f923caf79 [ 138.948586][ T6218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.948604][ T6218] RSP: 002b:00007f7f90626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.948620][ T6218] RAX: ffffffffffffffda RBX: 00007f7f92645fa0 RCX: 00007f7f923caf79 [ 138.948631][ T6218] RDX: 0000200000000080 RSI: 0000000000004b71 RDI: 0000000000000003 [ 138.948641][ T6218] RBP: 00007f7f90626090 R08: 0000000000000000 R09: 0000000000000000 [ 138.948651][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.948660][ T6218] R13: 00007f7f92646038 R14: 00007f7f92645fa0 R15: 00007ffd705868f8 [ 138.948689][ T6218] [ 139.532876][ T5845] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 139.532917][ T5845] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 139.730216][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 139.797114][ T6226] vlan2: entered promiscuous mode [ 139.797141][ T6226] ip6gretap0: entered promiscuous mode [ 139.826799][ T6226] bridge0: port 3(vlan2) entered blocking state [ 139.827128][ T6226] bridge0: port 3(vlan2) entered disabled state [ 139.827654][ T6226] vlan2: entered allmulticast mode [ 139.827673][ T6226] ip6gretap0: entered allmulticast mode [ 139.884791][ T6226] bridge0: port 3(vlan2) entered blocking state [ 139.886090][ T6226] bridge0: port 3(vlan2) entered forwarding state [ 139.947494][ T984] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.963228][ T5845] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 140.554659][ T984] usb 3-1: device descriptor read/64, error -71 [ 140.794660][ T984] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.824843][ T5845] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 140.934746][ T984] usb 3-1: device descriptor read/64, error -71 [ 141.008024][ T5845] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 141.045638][ T984] usb usb3-port1: attempt power cycle [ 141.148595][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 141.237752][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.238309][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.394705][ T984] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.418291][ T984] usb 3-1: device descriptor read/8, error -71 [ 141.467183][ T6241] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 141.467866][ T6241] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 141.725243][ T6251] netlink: zone id is out of range [ 141.725285][ T6251] netlink: zone id is out of range [ 141.725320][ T6251] netlink: zone id is out of range [ 141.725352][ T6251] netlink: zone id is out of range [ 141.725384][ T6251] netlink: zone id is out of range [ 141.725456][ T6251] netlink: zone id is out of range [ 141.725490][ T6251] netlink: zone id is out of range [ 141.725523][ T6251] netlink: zone id is out of range [ 141.725555][ T6251] netlink: zone id is out of range [ 141.725588][ T6251] netlink: zone id is out of range [ 142.623651][ T984] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 143.432489][ T984] usb 3-1: device descriptor read/8, error -71 [ 143.534951][ T984] usb usb3-port1: unable to enumerate USB device [ 143.656568][ T6263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.102'. [ 143.656611][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.102'. [ 147.075606][ T10] usb 4-1: USB disconnect, device number 3 [ 149.610877][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.114'. [ 149.629299][ T6304] FAULT_INJECTION: forcing a failure. [ 149.629299][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.629331][ T6304] CPU: 0 UID: 0 PID: 6304 Comm: syz.2.113 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 149.629353][ T6304] Tainted: [L]=SOFTLOCKUP [ 149.629358][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 149.629368][ T6304] Call Trace: [ 149.629373][ T6304] [ 149.629400][ T6304] dump_stack_lvl+0xe8/0x150 [ 149.629437][ T6304] should_fail_ex+0x46b/0x600 [ 149.629468][ T6304] _copy_from_user+0x2d/0xb0 [ 149.629499][ T6304] ucma_write+0x166/0x2f0 [ 149.629534][ T6304] ? __pfx_ucma_write+0x10/0x10 [ 149.629560][ T6304] ? rw_verify_area+0x25b/0x4e0 [ 149.629583][ T6304] vfs_writev+0x4c6/0x9a0 [ 149.629598][ T6304] ? __pfx_ucma_write+0x10/0x10 [ 149.629625][ T6304] ? __pfx_vfs_writev+0x10/0x10 [ 149.629650][ T6304] ? __fget_files+0x2a/0x420 [ 149.629667][ T6304] ? __fget_files+0x3a6/0x420 [ 149.629681][ T6304] ? __fget_files+0x2a/0x420 [ 149.629701][ T6304] do_writev+0x15a/0x2e0 [ 149.629717][ T6304] ? __pfx_do_writev+0x10/0x10 [ 149.629740][ T6304] do_syscall_64+0xe2/0xf80 [ 149.629762][ T6304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.629777][ T6304] ? trace_irq_disable+0x37/0x100 [ 149.629798][ T6304] ? clear_bhb_loop+0x60/0xb0 [ 149.629818][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.629833][ T6304] RIP: 0033:0x7fec34edaf79 [ 149.629847][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.629860][ T6304] RSP: 002b:00007fec33136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 149.629876][ T6304] RAX: ffffffffffffffda RBX: 00007fec35155fa0 RCX: 00007fec34edaf79 [ 149.629888][ T6304] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 149.629897][ T6304] RBP: 00007fec33136090 R08: 0000000000000000 R09: 0000000000000000 [ 149.629907][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.629916][ T6304] R13: 00007fec35156038 R14: 00007fec35155fa0 R15: 00007ffd780c7a68 [ 149.629941][ T6304] [ 149.725133][ T5845] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.974657][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 149.977114][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.977149][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.977191][ T5845] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.977216][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.111036][ T5845] usb 4-1: config 0 descriptor?? [ 150.148125][ T5845] hub 4-1:0.0: USB hub found [ 150.370400][ T5845] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 151.872308][ T5845] usbhid 4-1:0.0: can't add hid device: -71 [ 151.873889][ T5845] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 151.975646][ T5845] usb 4-1: USB disconnect, device number 4 [ 153.166936][ T5115] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 154.088370][ T5115] Bluetooth: hci3: Injecting HCI hardware error event [ 154.090605][ T5115] Bluetooth: hci3: hardware error 0x00 [ 159.804662][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.974597][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 159.977427][ T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 159.977456][ T10] usb 4-1: config 0 has no interface number 0 [ 159.977606][ T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.979098][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.979127][ T10] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 159.979149][ T10] usb 4-1: Product: syz [ 160.046848][ T10] usb 4-1: config 0 descriptor?? [ 160.074309][ T10] iowarrior 4-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 160.284702][ T5845] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 160.561036][ T5845] usb 2-1: device descriptor read/64, error -71 [ 160.947050][ T6355] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.123'. [ 160.974565][ T6355] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.123'. [ 161.114665][ T5845] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 161.454809][ T5845] usb 2-1: device descriptor read/64, error -71 [ 161.577177][ T5845] usb usb2-port1: attempt power cycle [ 161.865615][ T10] usb 4-1: USB disconnect, device number 5 [ 161.929691][ T5115] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 161.941135][ T5845] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 161.955498][ T5845] usb 2-1: device descriptor read/8, error -71 [ 162.002148][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 162.175849][ T6364] overlayfs: missing 'workdir' [ 162.182983][ T6365] netlink: 'syz.0.135': attribute type 32 has an invalid length. [ 162.204700][ T5845] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 162.225385][ T5845] usb 2-1: device descriptor read/8, error -71 [ 162.336822][ T5845] usb usb2-port1: unable to enumerate USB device [ 162.397263][ T6359] [ 162.397276][ T6359] ====================================================== [ 162.397285][ T6359] WARNING: possible circular locking dependency detected [ 162.397305][ T6359] syzkaller #0 Tainted: G L [ 162.397318][ T6359] ------------------------------------------------------ [ 162.397326][ T6359] syz.3.133/6359 is trying to acquire lock: [ 162.397340][ T6359] ffff88802ada2b60 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x104/0xda0 [ 162.397404][ T6359] [ 162.397404][ T6359] but task is already holding lock: [ 162.397412][ T6359] ffff88802ada1298 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 162.397469][ T6359] [ 162.397469][ T6359] which lock already depends on the new lock. [ 162.397469][ T6359] [ 162.397478][ T6359] [ 162.397478][ T6359] the existing dependency chain (in reverse order) is: [ 162.397486][ T6359] [ 162.397486][ T6359] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 162.397522][ T6359] lock_sock_nested+0x3e/0x130 [ 162.397551][ T6359] smc_listen_out+0x109/0x3e0 [ 162.397579][ T6359] smc_listen_work+0x813/0x13f0 [ 162.397607][ T6359] process_scheduled_works+0xaec/0x17a0 [ 162.397626][ T6359] worker_thread+0xda6/0x1360 [ 162.397645][ T6359] kthread+0x726/0x8b0 [ 162.397669][ T6359] ret_from_fork+0x51b/0xa40 [ 162.397688][ T6359] ret_from_fork_asm+0x1a/0x30 [ 162.397718][ T6359] [ 162.397718][ T6359] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 162.397749][ T6359] __lock_acquire+0x15a5/0x2cf0 [ 162.397771][ T6359] lock_acquire+0x106/0x330 [ 162.397804][ T6359] __flush_work+0x6df/0xda0 [ 162.397826][ T6359] __cancel_work_sync+0xbe/0x110 [ 162.397850][ T6359] smc_clcsock_release+0x60/0xf0 [ 162.397881][ T6359] __smc_release+0x6a0/0x810 [ 162.397903][ T6359] smc_close_non_accepted+0xd5/0x1f0 [ 162.397927][ T6359] smc_close_active+0xb9b/0xf40 [ 162.397956][ T6359] __smc_release+0xa0/0x810 [ 162.397977][ T6359] smc_release+0x2eb/0x5a0 [ 162.397999][ T6359] sock_close+0xc3/0x240 [ 162.398027][ T6359] __fput+0x45e/0xa80 [ 162.398047][ T6359] task_work_run+0x1d9/0x270 [ 162.398073][ T6359] exit_to_user_mode_loop+0xed/0x480 [ 162.398095][ T6359] do_syscall_64+0x2b7/0xf80 [ 162.398121][ T6359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.398139][ T6359] [ 162.398139][ T6359] other info that might help us debug this: [ 162.398139][ T6359] [ 162.398145][ T6359] Possible unsafe locking scenario: [ 162.398145][ T6359] [ 162.398151][ T6359] CPU0 CPU1 [ 162.398158][ T6359] ---- ---- [ 162.398164][ T6359] lock(sk_lock-AF_SMC/1); [ 162.398184][ T6359] lock((work_completion)(&new_smc->smc_listen_work)); [ 162.398201][ T6359] lock(sk_lock-AF_SMC/1); [ 162.398222][ T6359] lock((work_completion)(&new_smc->smc_listen_work)); [ 162.398237][ T6359] [ 162.398237][ T6359] *** DEADLOCK *** [ 162.398237][ T6359] [ 162.398243][ T6359] 3 locks held by syz.3.133/6359: [ 162.398255][ T6359] #0: ffff88803e81b678 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 162.398314][ T6359] #1: ffff88802ada1298 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 162.398367][ T6359] #2: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x104/0xda0 [ 162.398418][ T6359] [ 162.398418][ T6359] stack backtrace: [ 162.398434][ T6359] CPU: 1 UID: 0 PID: 6359 Comm: syz.3.133 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 162.398464][ T6359] Tainted: [L]=SOFTLOCKUP [ 162.398471][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 162.398485][ T6359] Call Trace: [ 162.398493][ T6359] [ 162.398503][ T6359] dump_stack_lvl+0xe8/0x150 [ 162.398533][ T6359] print_circular_bug+0x2e1/0x300 [ 162.398565][ T6359] check_noncircular+0x12e/0x150 [ 162.398597][ T6359] __lock_acquire+0x15a5/0x2cf0 [ 162.398624][ T6359] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.398664][ T6359] ? __flush_work+0x104/0xda0 [ 162.398688][ T6359] lock_acquire+0x106/0x330 [ 162.398711][ T6359] ? __flush_work+0x104/0xda0 [ 162.398740][ T6359] ? __flush_work+0x104/0xda0 [ 162.398765][ T6359] __flush_work+0x6df/0xda0 [ 162.398825][ T6359] ? __flush_work+0x104/0xda0 [ 162.398848][ T6359] ? __flush_work+0x104/0xda0 [ 162.398875][ T6359] ? __pfx___flush_work+0x10/0x10 [ 162.398901][ T6359] ? __pfx_wq_barrier_func+0x10/0x10 [ 162.398935][ T6359] ? __cancel_work_sync+0x5c/0x110 [ 162.398961][ T6359] __cancel_work_sync+0xbe/0x110 [ 162.398987][ T6359] smc_clcsock_release+0x60/0xf0 [ 162.399020][ T6359] __smc_release+0x6a0/0x810 [ 162.399044][ T6359] ? lockdep_hardirqs_on+0x7a/0x110 [ 162.399075][ T6359] smc_close_non_accepted+0xd5/0x1f0 [ 162.399103][ T6359] smc_close_active+0xb9b/0xf40 [ 162.399135][ T6359] ? smc_close_active+0x420/0xf40 [ 162.399167][ T6359] ? __pfx_sock_def_readable+0x10/0x10 [ 162.399197][ T6359] __smc_release+0xa0/0x810 [ 162.399221][ T6359] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 162.399247][ T6359] smc_release+0x2eb/0x5a0 [ 162.399274][ T6359] sock_close+0xc3/0x240 [ 162.399300][ T6359] ? __pfx_sock_close+0x10/0x10 [ 162.399326][ T6359] __fput+0x45e/0xa80 [ 162.399353][ T6359] task_work_run+0x1d9/0x270 [ 162.399381][ T6359] ? __pfx_task_work_run+0x10/0x10 [ 162.399415][ T6359] exit_to_user_mode_loop+0xed/0x480 [ 162.399440][ T6359] ? rcu_is_watching+0x15/0xb0 [ 162.399470][ T6359] do_syscall_64+0x2b7/0xf80 [ 162.399499][ T6359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.399520][ T6359] ? trace_irq_disable+0x37/0x100 [ 162.399548][ T6359] ? clear_bhb_loop+0x60/0xb0 [ 162.399573][ T6359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.399593][ T6359] RIP: 0033:0x7f9f873faf79 [ 162.399610][ T6359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.399629][ T6359] RSP: 002b:00007ffd43a53608 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 162.399650][ T6359] RAX: 0000000000000000 RBX: 00007f9f87677da0 RCX: 00007f9f873faf79 [ 162.399665][ T6359] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 162.399678][ T6359] RBP: 00007f9f87677da0 R08: 00007f9f87676038 R09: 0000000000000000 [ 162.399693][ T6359] R10: 00000000003ffcd4 R11: 0000000000000246 R12: 0000000000027ad5 [ 162.399706][ T6359] R13: 00007f9f8767618c R14: 0000000000027885 R15: 00007f9f87676180 [ 162.399731][ T6359] [ 162.498641][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.