last executing test programs: 1m42.006963384s ago: executing program 0 (id=1694): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="dfc98e16a6009e62476f00000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x38) 1m41.134147428s ago: executing program 0 (id=1696): socket$kcm(0x23, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYRES16=r1], 0x78) 1m39.578746215s ago: executing program 0 (id=1711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001a0001"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m38.512380866s ago: executing program 0 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1m38.129814748s ago: executing program 0 (id=1714): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) 1m37.883558884s ago: executing program 0 (id=1718): mkdirat(0xffffffffffffff9c, 0x0, 0x9f) socket(0x10, 0x3, 0xfffffffd) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1m22.522921642s ago: executing program 32 (id=1718): mkdirat(0xffffffffffffff9c, 0x0, 0x9f) socket(0x10, 0x3, 0xfffffffd) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 34.104401654s ago: executing program 1 (id=1906): io_setup(0x8, &(0x7f0000000080)) 31.590957931s ago: executing program 1 (id=1910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) 28.020375398s ago: executing program 2 (id=1914): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)}, {&(0x7f0000001cc0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b8e153ccdf10b894d755e849d01bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9697697b53fee3e5f94497031ff2e460d2c011d0db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce00000000000000", 0xc9}, {0x0}, {0x0}, {&(0x7f0000001e80)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4ca37c99ce544b8e0bf72cdb3d8abf22bd0c21120b9be60f59ae0d111d56b9a65fda31ba8bde49d572efc8e4f901700f13d785dc4b873195a9b873846067134950acc84d608c7aa118778e0c37159045350895d99088504fc46d32ede3d82f1d0683f0fb51af28a3d0066869dd853fe91bbe45da1c4a", 0xd2}], 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) 26.799616236s ago: executing program 3 (id=1915): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, &(0x7f0000000140)) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write(r1, &(0x7f0000000380)='zstd', 0x4) 26.458229169s ago: executing program 3 (id=1916): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)}, {0x0}, {0x0}, {&(0x7f0000001e80)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4ca37c99ce544b8e0bf72cdb3d8abf22bd0c21120b9be60f59ae0d111d56b9a65fda31ba8bde49d572efc8e4f901700f13d785dc4b873195a9b873846067134950acc84d608c7aa118778e0c37159045350895d99088504fc46d32ede3d82f1d0683f0fb51af28a3d0066869dd853fe91bbe45da1c4a", 0xd2}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 25.842721759s ago: executing program 4 (id=1917): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a"], 0x24}}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xe, 0x5}, {0x2, 0x0, 0xe}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0) 25.516571254s ago: executing program 2 (id=1918): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x13bf, 0x1, 0x0, 0x1d9}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x800, 0xfffffffe, 0x3ae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x0, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 25.400755283s ago: executing program 4 (id=1919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e80300"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 25.381333242s ago: executing program 1 (id=1920): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) 25.190813897s ago: executing program 1 (id=1921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 24.348629209s ago: executing program 3 (id=1922): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000340)='ro\x00H\x96\xf7\v\xcd \xd5\x19\x8ct\x14|\xa9\xd4\xc2\xf0\xf0\xab\xdf\x8f \x00\xc5\xb3\x99\xbf\xed\xa0\xe0\xa9\xc6\xab\xab\x95\xa8\x04O\b\xcc\x9b\x11\xa2`\xce\xffM]\xa1iB,\xae\x16\xf6|\xf5\'W\xd8~\xb7\xf80w+\xb7=f\xb7\xf2+\xe9zG\x9b\xadL\xfa\xbeb\xb1\xe6m\xab$\xd3\x97\xd6~ \xb8y\x13\xaf{\xc9\xa0\x941>\xa4Fgh\xb9r\x9b\xa4\xc1\x90\xf2\x85/A\xb3\x8e\x04~E\x7f\x14W\xcb?k\xa7ZB1\xe0n\x17\xc7U\xf6f\xd5\xdd\'\x05\x90\x10\xa2~\xf3\xe07`\x96\x85r', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 24.206254232s ago: executing program 2 (id=1923): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d08000340000001310c00098008000140fffffffd140000001119"], 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 24.190481134s ago: executing program 4 (id=1924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) 23.889838812s ago: executing program 5 (id=1776): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="00054000000100000000", 0xa}, {&(0x7f0000000240)="7da501456d854f164d43254bbe6e5a", 0xf}, {&(0x7f0000000280)="dbe55d33edfa7b43de93a03f0f11b63e2c41a494be1e6edb89f997a31bd5c54cf1f83bd7383641069ee90aaf", 0x2c}], 0x3}, 0x24000008) 23.064404944s ago: executing program 2 (id=1925): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, &(0x7f0000000140)) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write(r1, &(0x7f0000000380)='zstd', 0x4) 22.952633877s ago: executing program 2 (id=1926): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x2, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) 21.924590244s ago: executing program 3 (id=1927): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)}, {&(0x7f0000001cc0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b8e153ccdf10b894d755e849d01bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9697697b53fee3e5f94497031ff2e460d2c011d0db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce00000000000000", 0xc9}, {0x0}, {0x0}, {&(0x7f0000001e80)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4ca37c99ce544b8e0bf72cdb3d8abf22bd0c21120b9be60f59ae0d111d56b9a65fda31ba8bde49d572efc8e4f901700f13d785dc4b873195a9b873846067134950acc84d608c7aa118778e0c37159045350895d99088504fc46d32ede3d82f1d0683f0fb51af28a3d0066869dd853fe91bbe45da1c4a", 0xd2}], 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) 21.765068762s ago: executing program 5 (id=1928): r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800c00018008000300e8030000", 0x54}], 0x1}, 0x0) 21.634198685s ago: executing program 3 (id=1929): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 19.849241843s ago: executing program 4 (id=1930): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) 18.808736072s ago: executing program 1 (id=1931): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)}, {0x0}, {0x0}, {&(0x7f0000001e80)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4ca37c99ce544b8e0bf72cdb3d8abf22bd0c21120b9be60f59ae0d111d56b9a65fda31ba8bde49d572efc8e4f901700f13d785dc4b873195a9b873846067134950acc84d608c7aa118778e0c37159045350895d99088504fc46d32ede3d82f1d0683f0fb51af28a3d0066869dd853fe91bbe45da1c4a", 0xd2}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 17.83872096s ago: executing program 2 (id=1932): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x2000) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x4a8800, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10004, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) 17.810576521s ago: executing program 3 (id=1933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x13bf, 0x1, 0x0, 0x1d9}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x800, 0xfffffffe, 0x3ae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x0, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 17.807026994s ago: executing program 5 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e80300"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 17.552645302s ago: executing program 5 (id=1935): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d08000340000001310c00098008000140fffffffd140000001119"], 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 16.804765805s ago: executing program 4 (id=1936): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, &(0x7f0000000140)) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write(r1, &(0x7f0000000380)='zstd', 0x4) 16.709380687s ago: executing program 4 (id=1937): socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 16.705123693s ago: executing program 1 (id=1938): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="00054000000100000000", 0xa}, {&(0x7f0000000240)="7da501456d854f164d43254bbe6e5a7e3f68", 0x12}, {&(0x7f0000000280)="dbe55d33edfa7b43de93a03f0f11b63e2c41a494be1e6edb89f997a31bd5c54cf1f83bd7383641069ee90aaf", 0x2c}], 0x3}, 0x24000008) 653.321512ms ago: executing program 33 (id=1935): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d08000340000001310c00098008000140fffffffd140000001119"], 0x78}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 572.530573ms ago: executing program 34 (id=1938): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="00054000000100000000", 0xa}, {&(0x7f0000000240)="7da501456d854f164d43254bbe6e5a7e3f68", 0x12}, {&(0x7f0000000280)="dbe55d33edfa7b43de93a03f0f11b63e2c41a494be1e6edb89f997a31bd5c54cf1f83bd7383641069ee90aaf", 0x2c}], 0x3}, 0x24000008) 455.058132ms ago: executing program 35 (id=1932): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x2000) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x4a8800, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10004, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) 304.586866ms ago: executing program 36 (id=1933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x13bf, 0x1, 0x0, 0x1d9}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x800, 0xfffffffe, 0x3ae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x0, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 0s ago: executing program 37 (id=1937): socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kernel console output (not intermixed with test programs): 0000000000000000 [ 383.282479][ T9018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.282491][ T9018] R13: 00007fe0525d6038 R14: 00007fe0525d5fa0 R15: 00007ffe6e5d1b78 [ 383.282521][ T9018] [ 383.296850][ T5597] usb 2-1: device descriptor read/8, error -71 [ 383.536230][ T5597] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 383.556906][ T5597] usb 2-1: device descriptor read/8, error -71 [ 383.667318][ T5597] usb usb2-port1: unable to enumerate USB device [ 384.654165][ T5700] net_ratelimit: 10 callbacks suppressed [ 384.654261][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.668780][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.915863][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.471159][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.707886][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.752457][ T9041] FAULT_INJECTION: forcing a failure. [ 386.752457][ T9041] name failslab, interval 1, probability 0, space 0, times 0 [ 386.765975][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.4.1087 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 386.766008][ T9041] Tainted: [L]=SOFTLOCKUP [ 386.766014][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.766026][ T9041] Call Trace: [ 386.766034][ T9041] [ 386.766042][ T9041] dump_stack_lvl+0xe8/0x150 [ 386.766081][ T9041] should_fail_ex+0x46b/0x600 [ 386.766107][ T9041] should_failslab+0xa8/0x100 [ 386.766136][ T9041] __kmalloc_cache_noprof+0xa1/0x680 [ 386.766159][ T9041] ? ceph_create_client+0x6f/0x310 [ 386.766177][ T9041] ? ceph_create_client+0x6f/0x310 [ 386.766202][ T9041] ceph_create_client+0x6f/0x310 [ 386.766232][ T9041] ceph_get_tree+0x1ca/0x1a40 [ 386.766252][ T9041] ? cap_capable+0x123/0x460 [ 386.766272][ T9041] ? safesetid_security_capable+0xa9/0x1a0 [ 386.766300][ T9041] vfs_get_tree+0x92/0x2a0 [ 386.766326][ T9041] vfs_cmd_create+0xa2/0x200 [ 386.766353][ T9041] __se_sys_fsconfig+0x6bf/0x810 [ 386.766381][ T9041] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 386.766408][ T9041] ? rcu_is_watching+0x16/0xb0 [ 386.766437][ T9041] ? __x64_sys_fsconfig+0x20/0xc0 [ 386.766463][ T9041] do_syscall_64+0x166/0x520 [ 386.766483][ T9041] ? trace_irq_disable+0x3b/0x140 [ 386.766505][ T9041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.766524][ T9041] ? clear_bhb_loop+0x70/0xc0 [ 386.766546][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.766564][ T9041] RIP: 0033:0x7fe05234e159 [ 386.766582][ T9041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.766598][ T9041] RSP: 002b:00007fe0505a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 386.766620][ T9041] RAX: ffffffffffffffda RBX: 00007fe0525d5fa0 RCX: 00007fe05234e159 [ 386.766634][ T9041] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 386.766645][ T9041] RBP: 00007fe0523e5024 R08: 0000000000000000 R09: 0000000000000000 [ 386.766657][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.766669][ T9041] R13: 00007fe0525d6038 R14: 00007fe0525d5fa0 R15: 00007ffe6e5d1b78 [ 386.766702][ T9041] [ 386.846467][ T9045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.112051][ T9052] FAULT_INJECTION: forcing a failure. [ 387.112051][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 387.127911][ T9053] FAULT_INJECTION: forcing a failure. [ 387.127911][ T9053] name failslab, interval 1, probability 0, space 0, times 0 [ 387.127954][ T9053] CPU: 0 UID: 0 PID: 9053 Comm: syz.3.1092 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.127980][ T9053] Tainted: [L]=SOFTLOCKUP [ 387.128001][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.128012][ T9053] Call Trace: [ 387.128019][ T9053] [ 387.128027][ T9053] dump_stack_lvl+0xe8/0x150 [ 387.128060][ T9053] should_fail_ex+0x46b/0x600 [ 387.128085][ T9053] should_failslab+0xa8/0x100 [ 387.128112][ T9053] ? do_getname+0x2e/0x250 [ 387.128137][ T9053] kmem_cache_alloc_noprof+0x9e/0x690 [ 387.128159][ T9053] ? do_getname+0x2e/0x250 [ 387.128187][ T9053] do_getname+0x2e/0x250 [ 387.128209][ T9053] ? getname_flags+0x11/0x20 [ 387.128234][ T9053] do_sys_openat2+0xcc/0x200 [ 387.128259][ T9053] ? __se_sys_futex+0x3a8/0x450 [ 387.128286][ T9053] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.128315][ T9053] ? rcu_is_watching+0x16/0xb0 [ 387.128343][ T9053] __x64_sys_openat+0x138/0x170 [ 387.128373][ T9053] do_syscall_64+0x166/0x520 [ 387.128393][ T9053] ? trace_irq_disable+0x3b/0x140 [ 387.128414][ T9053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.128433][ T9053] ? clear_bhb_loop+0x70/0xc0 [ 387.128455][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.128473][ T9053] RIP: 0033:0x7f147f13e159 [ 387.128491][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.128506][ T9053] RSP: 002b:00007f147d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.128526][ T9053] RAX: ffffffffffffffda RBX: 00007f147f3c5fa0 RCX: 00007f147f13e159 [ 387.128538][ T9053] RDX: 0000000000040e41 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 387.128552][ T9053] RBP: 00007f147f1d5024 R08: 0000000000000000 R09: 0000000000000000 [ 387.128564][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.128575][ T9053] R13: 00007f147f3c6038 R14: 00007f147f3c5fa0 R15: 00007ffe60b7ee98 [ 387.128606][ T9053] [ 387.130326][ T9052] CPU: 0 UID: 0 PID: 9052 Comm: syz.1.1091 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.130357][ T9052] Tainted: [L]=SOFTLOCKUP [ 387.130365][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.130376][ T9052] Call Trace: [ 387.130384][ T9052] [ 387.130392][ T9052] dump_stack_lvl+0xe8/0x150 [ 387.130423][ T9052] should_fail_ex+0x46b/0x600 [ 387.130445][ T9052] ? sock_alloc_inode+0x2c/0x1a0 [ 387.130466][ T9052] should_failslab+0xa8/0x100 [ 387.130494][ T9052] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 387.130520][ T9052] ? sock_alloc_inode+0x2c/0x1a0 [ 387.130543][ T9052] ? __pfx_sock_alloc_inode+0x10/0x10 [ 387.130560][ T9052] sock_alloc_inode+0x2c/0x1a0 [ 387.130579][ T9052] ? __pfx_sock_alloc_inode+0x10/0x10 [ 387.130595][ T9052] alloc_inode+0x6a/0x1b0 [ 387.130622][ T9052] __sock_create+0x12d/0x9d0 [ 387.130658][ T9052] __sys_socket+0xd6/0x1b0 [ 387.130681][ T9052] __x64_sys_socket+0x7a/0x90 [ 387.130703][ T9052] do_syscall_64+0x166/0x520 [ 387.130722][ T9052] ? trace_irq_disable+0x3b/0x140 [ 387.130743][ T9052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.130764][ T9052] ? clear_bhb_loop+0x70/0xc0 [ 387.130786][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.130804][ T9052] RIP: 0033:0x7f7ad27ee159 [ 387.130821][ T9052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.130836][ T9052] RSP: 002b:00007f7ad0a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 387.130856][ T9052] RAX: ffffffffffffffda RBX: 00007f7ad2a75fa0 RCX: 00007f7ad27ee159 [ 387.130869][ T9052] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 387.130879][ T9052] RBP: 00007f7ad2885024 R08: 0000000000000000 R09: 0000000000000000 [ 387.130891][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.130902][ T9052] R13: 00007f7ad2a76038 R14: 00007f7ad2a75fa0 R15: 00007ffeaa1785d8 [ 387.130932][ T9052] [ 387.130954][ T9052] socket: no more sockets [ 387.547727][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 387.577667][ T9061] netlink: zone id is out of range [ 387.676240][ T10] usb 3-1: device descriptor read/64, error -71 [ 387.746553][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.953911][ T9076] FAULT_INJECTION: forcing a failure. [ 387.953911][ T9076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.956484][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 387.961947][ T9078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.984964][ T9076] CPU: 1 UID: 0 PID: 9076 Comm: syz.4.1107 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.984998][ T9076] Tainted: [L]=SOFTLOCKUP [ 387.985005][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.985016][ T9076] Call Trace: [ 387.985024][ T9076] [ 387.985034][ T9076] dump_stack_lvl+0xe8/0x150 [ 387.985068][ T9076] should_fail_ex+0x46b/0x600 [ 387.985095][ T9076] strncpy_from_user+0x36/0x2c0 [ 387.985121][ T9076] do_getname+0x77/0x250 [ 387.985151][ T9076] do_sys_openat2+0xcc/0x200 [ 387.985178][ T9076] ? __se_sys_futex+0x3a8/0x450 [ 387.985207][ T9076] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.985237][ T9076] ? rcu_is_watching+0x16/0xb0 [ 387.985267][ T9076] __x64_sys_openat+0x138/0x170 [ 387.985298][ T9076] do_syscall_64+0x166/0x520 [ 387.985318][ T9076] ? trace_irq_disable+0x3b/0x140 [ 387.985340][ T9076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.985388][ T9076] ? clear_bhb_loop+0x70/0xc0 [ 387.985412][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.985432][ T9076] RIP: 0033:0x7fe05234e159 [ 387.985450][ T9076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.985466][ T9076] RSP: 002b:00007fe0505a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.985487][ T9076] RAX: ffffffffffffffda RBX: 00007fe0525d5fa0 RCX: 00007fe05234e159 [ 387.985547][ T9076] RDX: 0000000000040e41 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 387.985561][ T9076] RBP: 00007fe0523e5024 R08: 0000000000000000 R09: 0000000000000000 [ 387.985573][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.985585][ T9076] R13: 00007fe0525d6038 R14: 00007fe0525d5fa0 R15: 00007ffe6e5d1b78 [ 387.985617][ T9076] [ 388.096219][ T10] usb 3-1: device descriptor read/64, error -71 [ 388.206622][ T10] usb usb3-port1: attempt power cycle [ 388.576214][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 388.597315][ T10] usb 3-1: device descriptor read/8, error -71 [ 388.836243][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 388.857258][ T10] usb 3-1: device descriptor read/8, error -71 [ 388.946743][ T9116] FAULT_INJECTION: forcing a failure. [ 388.946743][ T9116] name failslab, interval 1, probability 0, space 0, times 0 [ 388.946843][ T9116] CPU: 0 UID: 0 PID: 9116 Comm: syz.0.1123 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.946869][ T9116] Tainted: [L]=SOFTLOCKUP [ 388.946874][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.946884][ T9116] Call Trace: [ 388.946900][ T9116] [ 388.946907][ T9116] dump_stack_lvl+0xe8/0x150 [ 388.946943][ T9116] should_fail_ex+0x46b/0x600 [ 388.946970][ T9116] should_failslab+0xa8/0x100 [ 388.946998][ T9116] ? do_getname+0x2e/0x250 [ 388.947020][ T9116] kmem_cache_alloc_noprof+0x9e/0x690 [ 388.947040][ T9116] ? do_getname+0x2e/0x250 [ 388.947066][ T9116] do_getname+0x2e/0x250 [ 388.947085][ T9116] ? getname_flags+0x11/0x20 [ 388.947107][ T9116] do_sys_openat2+0xcc/0x200 [ 388.947132][ T9116] ? __se_sys_futex+0x3a8/0x450 [ 388.947158][ T9116] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.947187][ T9116] ? rcu_is_watching+0x16/0xb0 [ 388.947215][ T9116] __x64_sys_openat+0x138/0x170 [ 388.947245][ T9116] do_syscall_64+0x166/0x520 [ 388.947265][ T9116] ? trace_irq_disable+0x3b/0x140 [ 388.947285][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.947303][ T9116] ? clear_bhb_loop+0x70/0xc0 [ 388.947325][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.947343][ T9116] RIP: 0033:0x7fd4cf44e159 [ 388.947360][ T9116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.947375][ T9116] RSP: 002b:00007fd4cd6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.947394][ T9116] RAX: ffffffffffffffda RBX: 00007fd4cf6d5fa0 RCX: 00007fd4cf44e159 [ 388.947408][ T9116] RDX: 0000000000040e41 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 388.947421][ T9116] RBP: 00007fd4cf4e5024 R08: 0000000000000000 R09: 0000000000000000 [ 388.947432][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.947444][ T9116] R13: 00007fd4cf6d6038 R14: 00007fd4cf6d5fa0 R15: 00007ffebc6627a8 [ 388.947474][ T9116] [ 388.976642][ T10] usb usb3-port1: unable to enumerate USB device [ 389.630750][ T9136] tipc: Enabled bearer , priority 10 [ 389.782058][ T9140] net_ratelimit: 9 callbacks suppressed [ 389.782158][ T9140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.801390][ T9143] FAULT_INJECTION: forcing a failure. [ 389.801390][ T9143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.817650][ T9143] CPU: 1 UID: 0 PID: 9143 Comm: syz.3.1137 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.817682][ T9143] Tainted: [L]=SOFTLOCKUP [ 389.817689][ T9143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.817700][ T9143] Call Trace: [ 389.817707][ T9143] [ 389.817714][ T9143] dump_stack_lvl+0xe8/0x150 [ 389.817746][ T9143] should_fail_ex+0x46b/0x600 [ 389.817771][ T9143] strncpy_from_user+0x36/0x2c0 [ 389.817800][ T9143] do_getname+0x77/0x250 [ 389.817829][ T9143] do_sys_openat2+0xcc/0x200 [ 389.817854][ T9143] ? __se_sys_futex+0x3a8/0x450 [ 389.817880][ T9143] ? __pfx_do_sys_openat2+0x10/0x10 [ 389.817910][ T9143] ? rcu_is_watching+0x16/0xb0 [ 389.817939][ T9143] __x64_sys_openat+0x138/0x170 [ 389.817966][ T9143] do_syscall_64+0x166/0x520 [ 389.817985][ T9143] ? trace_irq_disable+0x3b/0x140 [ 389.818007][ T9143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.818026][ T9143] ? clear_bhb_loop+0x70/0xc0 [ 389.818047][ T9143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.818065][ T9143] RIP: 0033:0x7f147f13e159 [ 389.818082][ T9143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.818097][ T9143] RSP: 002b:00007f147d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 389.818122][ T9143] RAX: ffffffffffffffda RBX: 00007f147f3c5fa0 RCX: 00007f147f13e159 [ 389.818136][ T9143] RDX: 0000000000040e41 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 389.818150][ T9143] RBP: 00007f147f1d5024 R08: 0000000000000000 R09: 0000000000000000 [ 389.818162][ T9143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.818174][ T9143] R13: 00007f147f3c6038 R14: 00007f147f3c5fa0 R15: 00007ffe60b7ee98 [ 389.818205][ T9143] [ 389.826982][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.412543][ T9168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.681870][ T9182] FAULT_INJECTION: forcing a failure. [ 390.681870][ T9182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.703952][ T9182] CPU: 1 UID: 0 PID: 9182 Comm: syz.0.1151 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 390.703989][ T9182] Tainted: [L]=SOFTLOCKUP [ 390.703997][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.704008][ T9182] Call Trace: [ 390.704016][ T9182] [ 390.704024][ T9182] dump_stack_lvl+0xe8/0x150 [ 390.704060][ T9182] should_fail_ex+0x46b/0x600 [ 390.704098][ T9182] strncpy_from_user+0x36/0x2c0 [ 390.704130][ T9182] do_getname+0x77/0x250 [ 390.704159][ T9182] do_sys_openat2+0xcc/0x200 [ 390.704186][ T9182] ? __se_sys_futex+0x3a8/0x450 [ 390.704219][ T9182] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.704251][ T9182] ? rcu_is_watching+0x16/0xb0 [ 390.704280][ T9182] __x64_sys_openat+0x138/0x170 [ 390.704310][ T9182] do_syscall_64+0x166/0x520 [ 390.704332][ T9182] ? trace_irq_disable+0x3b/0x140 [ 390.704356][ T9182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.704377][ T9182] ? clear_bhb_loop+0x70/0xc0 [ 390.704399][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.704417][ T9182] RIP: 0033:0x7fd4cf44e159 [ 390.704435][ T9182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.704466][ T9182] RSP: 002b:00007fd4cd6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 390.704497][ T9182] RAX: ffffffffffffffda RBX: 00007fd4cf6d5fa0 RCX: 00007fd4cf44e159 [ 390.704518][ T9182] RDX: 0000000000040e41 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 390.704533][ T9182] RBP: 00007fd4cf4e5024 R08: 0000000000000000 R09: 0000000000000000 [ 390.704545][ T9182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.704557][ T9182] R13: 00007fd4cf6d6038 R14: 00007fd4cf6d5fa0 R15: 00007ffebc6627a8 [ 390.704590][ T9182] [ 390.866668][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.996266][ T5730] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 391.180162][ T9197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.189492][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 391.195864][ T5730] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 391.206766][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.206839][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.206887][ T5730] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 391.206927][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.264759][ T5730] usb 5-1: config 0 descriptor?? [ 391.336253][ T5723] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 391.346287][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 391.476257][ T10] usb 3-1: device descriptor read/64, error -71 [ 391.562292][ T5723] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 391.562850][ T9215] FAULT_INJECTION: forcing a failure. [ 391.562850][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 391.562882][ T9215] CPU: 0 UID: 0 PID: 9215 Comm: syz.3.1168 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.562907][ T9215] Tainted: [L]=SOFTLOCKUP [ 391.562914][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.562925][ T9215] Call Trace: [ 391.562933][ T9215] [ 391.562941][ T9215] dump_stack_lvl+0xe8/0x150 [ 391.562975][ T9215] should_fail_ex+0x46b/0x600 [ 391.563002][ T9215] should_failslab+0xa8/0x100 [ 391.563028][ T9215] ? do_getname+0x2e/0x250 [ 391.563051][ T9215] kmem_cache_alloc_noprof+0x9e/0x690 [ 391.563076][ T9215] ? do_getname+0x2e/0x250 [ 391.563105][ T9215] do_getname+0x2e/0x250 [ 391.563125][ T9215] ? getname_flags+0x11/0x20 [ 391.563150][ T9215] do_sys_openat2+0xcc/0x200 [ 391.563175][ T9215] ? __se_sys_futex+0x3a8/0x450 [ 391.563202][ T9215] ? __pfx_do_sys_openat2+0x10/0x10 [ 391.563236][ T9215] ? rcu_is_watching+0x16/0xb0 [ 391.563266][ T9215] __x64_sys_openat+0x138/0x170 [ 391.563296][ T9215] do_syscall_64+0x166/0x520 [ 391.563317][ T9215] ? trace_irq_disable+0x3b/0x140 [ 391.563340][ T9215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.563359][ T9215] ? clear_bhb_loop+0x70/0xc0 [ 391.563382][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.563413][ T9215] RIP: 0033:0x7f147f13e159 [ 391.563428][ T9215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.563444][ T9215] RSP: 002b:00007f147d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.563464][ T9215] RAX: ffffffffffffffda RBX: 00007f147f3c5fa0 RCX: 00007f147f13e159 [ 391.563478][ T9215] RDX: 0000000000040e41 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 391.563491][ T9215] RBP: 00007f147f1d5024 R08: 0000000000000000 R09: 0000000000000000 [ 391.563503][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.563515][ T9215] R13: 00007f147f3c6038 R14: 00007f147f3c5fa0 R15: 00007ffe60b7ee98 [ 391.563545][ T9215] [ 391.564187][ T5723] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.564213][ T5723] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.564307][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.611314][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.736251][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 391.907538][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.911571][ T10] usb 3-1: device descriptor read/64, error -71 [ 392.033268][ T10] usb usb3-port1: attempt power cycle [ 392.188630][ T5723] usb 1-1: usb_control_msg returned -32 [ 392.195458][ T5723] usbtmc 1-1:16.0: can't read capabilities [ 392.227370][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.325847][ T5730] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input8 [ 392.476234][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 392.507121][ T10] usb 3-1: device descriptor read/8, error -71 [ 392.766236][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 392.787236][ T10] usb 3-1: device descriptor read/8, error -71 [ 392.803928][ T9231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.898339][ T10] usb usb3-port1: unable to enumerate USB device [ 392.947942][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.960466][ T5730] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input9 [ 393.525695][ T9241] FAULT_INJECTION: forcing a failure. [ 393.525695][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 393.525781][ T9241] CPU: 1 UID: 0 PID: 9241 Comm: syz.4.1179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.525815][ T9241] Tainted: [L]=SOFTLOCKUP [ 393.525822][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.525834][ T9241] Call Trace: [ 393.525842][ T9241] [ 393.525851][ T9241] dump_stack_lvl+0xe8/0x150 [ 393.525889][ T9241] should_fail_ex+0x46b/0x600 [ 393.525916][ T9241] should_failslab+0xa8/0x100 [ 393.525946][ T9241] ? do_getname+0x2e/0x250 [ 393.525975][ T9241] kmem_cache_alloc_noprof+0x9e/0x690 [ 393.526000][ T9241] ? do_getname+0x2e/0x250 [ 393.526030][ T9241] do_getname+0x2e/0x250 [ 393.526053][ T9241] ? getname_flags+0x11/0x20 [ 393.526084][ T9241] do_sys_openat2+0xcc/0x200 [ 393.526115][ T9241] ? __se_sys_futex+0x3a8/0x450 [ 393.526149][ T9241] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.526181][ T9241] ? rcu_is_watching+0x16/0xb0 [ 393.526216][ T9241] __x64_sys_openat+0x138/0x170 [ 393.526250][ T9241] do_syscall_64+0x166/0x520 [ 393.526287][ T9241] ? trace_irq_disable+0x3b/0x140 [ 393.526315][ T9241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.526333][ T9241] ? clear_bhb_loop+0x70/0xc0 [ 393.526358][ T9241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.526379][ T9241] RIP: 0033:0x7fe05234e159 [ 393.526398][ T9241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.526417][ T9241] RSP: 002b:00007fe0505a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.526439][ T9241] RAX: ffffffffffffffda RBX: 00007fe0525d5fa0 RCX: 00007fe05234e159 [ 393.526455][ T9241] RDX: 0000000000040e41 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 393.526471][ T9241] RBP: 00007fe0523e5024 R08: 0000000000000000 R09: 0000000000000000 [ 393.526485][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.526498][ T9241] R13: 00007fe0525d6038 R14: 00007fe0525d5fa0 R15: 00007ffe6e5d1b78 [ 393.526529][ T9241] [ 393.593671][ T5730] kye 0003:0458:5011.0003: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 393.820634][ T5730] usb 5-1: USB disconnect, device number 11 [ 394.026303][ T9242] fido_id[9242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 394.074094][ T10] usb 1-1: USB disconnect, device number 14 [ 394.378923][ T5723] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 394.540879][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 394.553614][ T5723] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 394.553662][ T5723] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 394.553687][ T5723] usb 4-1: config 1 interface 0 has no altsetting 0 [ 394.613590][ T5723] usb 4-1: string descriptor 0 read error: -22 [ 394.613841][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.110303][ T5700] net_ratelimit: 1 callbacks suppressed [ 395.110439][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.146809][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.717141][ T3493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.437601][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.005202][ T164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.467372][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.058963][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 399.230807][ T9] usb 1-1: device descriptor read/64, error -71 [ 399.488759][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 399.509776][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.616273][ T9] usb 1-1: device descriptor read/64, error -71 [ 399.747064][ T9] usb usb1-port1: attempt power cycle [ 400.146300][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 400.167433][ T9] usb 1-1: device descriptor read/8, error -71 [ 400.185934][ T9292] kvm [9291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6716 [ 400.207439][ T9292] kvm [9291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x9cbe [ 400.209492][ T9292] kvm [9291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x90be [ 400.418545][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 400.447231][ T9] usb 1-1: device descriptor read/8, error -71 [ 400.566629][ T9] usb usb1-port1: unable to enumerate USB device [ 400.586601][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.946632][ T5723] usbhid 4-1:1.0: can't add hid device: -110 [ 400.953157][ T5723] usbhid 4-1:1.0: probe with driver usbhid failed with error -110 [ 401.668041][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.827051][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.844906][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.980872][ T9309] netlink: zone id is out of range [ 402.988513][ T9309] netlink: set zone limit has 4 unknown bytes [ 403.106812][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.626933][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 403.766396][ T10] usb 1-1: device descriptor read/64, error -71 [ 403.917443][ T5723] usb 4-1: USB disconnect, device number 13 [ 403.946719][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.066892][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 404.206472][ T10] usb 1-1: device descriptor read/64, error -71 [ 404.324282][ T10] usb usb1-port1: attempt power cycle [ 404.633520][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'. [ 404.676420][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 404.712584][ T10] usb 1-1: device descriptor read/8, error -71 [ 404.996512][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 405.026840][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.055113][ T10] usb 1-1: device descriptor read/8, error -71 [ 405.173911][ T10] usb usb1-port1: unable to enumerate USB device [ 406.066570][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.106436][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.386277][ T164] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.386368][ T164] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.386403][ T164] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.386436][ T164] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.594831][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.736232][ T5707] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 408.011186][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1229'. [ 408.227545][ T5700] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 408.804413][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.848001][ T164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.898051][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 408.901508][ T5707] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 408.905660][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.905720][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.467650][ T5700] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 409.490339][ T5700] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.530197][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 409.539985][ T5700] usb 5-1: Product: syz [ 409.540008][ T5700] usb 5-1: Manufacturer: syz [ 409.540020][ T5700] usb 5-1: SerialNumber: syz [ 409.568675][ T5707] usb 2-1: config 0 descriptor?? [ 409.835912][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.893710][ T5707] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 409.914996][ T5700] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 410.133156][ T5700] usb 2-1: USB disconnect, device number 9 [ 410.200100][ T9360] iowarrior_open - error, can't find device for minor 0 [ 410.364840][ T9352] iowarrior 2-1:0.0: Error -2 while submitting URB [ 410.368129][ T5597] usb 5-1: USB disconnect, device number 12 [ 410.577973][ T5597] usblp1: removed [ 410.866797][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.876224][ T5707] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 411.915907][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.065296][ T5707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 412.065426][ T5707] usb 3-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 412.067178][ T5707] usb 3-1: config 160 has an invalid interface number: 168 but max is 0 [ 412.067203][ T5707] usb 3-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 412.067221][ T5707] usb 3-1: config 160 has no interface number 0 [ 412.067264][ T5707] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 412.067287][ T5707] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 412.067310][ T5707] usb 3-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 412.067335][ T5707] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 412.067358][ T5707] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 412.067381][ T5707] usb 3-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 412.067403][ T5707] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 412.067435][ T5707] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 412.067459][ T5707] usb 3-1: config 160 interface 168 altsetting 8 endpoint 0xC has invalid wMaxPacketSize 0 [ 412.067479][ T5707] usb 3-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 0 [ 412.067500][ T5707] usb 3-1: config 160 interface 168 has no altsetting 0 [ 412.119522][ T5707] usb 3-1: string descriptor 0 read error: -22 [ 412.119673][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.155609][ T9405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 412.156286][ T9405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 412.240268][ T5707] io_edgeport 3-1:160.168: EPiC device converter detected [ 412.242164][ T5707] usb 3-1: detected [ 412.842327][ T5707] usb 3-1: EPiC device converter now attached to ttyUSB0 [ 412.949439][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.256684][ T5707] usb 3-1: USB disconnect, device number 20 [ 413.256801][ C0] usb 3-1: edge_interrupt_callback - Error -19 submitting control urb [ 413.348032][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.420800][ T5707] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 413.601788][ T5707] io_edgeport 3-1:160.168: device disconnected [ 413.989371][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.655082][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.063663][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.092653][ T6937] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 415.246327][ T6937] usb 1-1: device descriptor read/64, error -71 [ 415.392224][ T9448] FAULT_INJECTION: forcing a failure. [ 415.392224][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 415.392315][ T9448] CPU: 0 UID: 0 PID: 9448 Comm: syz.1.1261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 415.392338][ T9448] Tainted: [L]=SOFTLOCKUP [ 415.392344][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.392352][ T9448] Call Trace: [ 415.392359][ T9448] [ 415.392368][ T9448] dump_stack_lvl+0xe8/0x150 [ 415.392401][ T9448] should_fail_ex+0x46b/0x600 [ 415.392427][ T9448] should_failslab+0xa8/0x100 [ 415.392453][ T9448] ? do_getname+0x2e/0x250 [ 415.392478][ T9448] kmem_cache_alloc_noprof+0x9e/0x690 [ 415.392500][ T9448] ? do_getname+0x2e/0x250 [ 415.392530][ T9448] do_getname+0x2e/0x250 [ 415.392551][ T9448] ? getname_flags+0x11/0x20 [ 415.392576][ T9448] __se_sys_chdir+0x8d/0x2a0 [ 415.392599][ T9448] ? __pfx___se_sys_chdir+0x10/0x10 [ 415.392631][ T9448] do_syscall_64+0x166/0x520 [ 415.392650][ T9448] ? trace_irq_disable+0x3b/0x140 [ 415.392671][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.392691][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 415.392712][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.392730][ T9448] RIP: 0033:0x7f7ad27ee159 [ 415.392746][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.392763][ T9448] RSP: 002b:00007f7ad0a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 415.392783][ T9448] RAX: ffffffffffffffda RBX: 00007f7ad2a75fa0 RCX: 00007f7ad27ee159 [ 415.392797][ T9448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.392808][ T9448] RBP: 00007f7ad2885024 R08: 0000000000000000 R09: 0000000000000000 [ 415.392820][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.392830][ T9448] R13: 00007f7ad2a76038 R14: 00007f7ad2a75fa0 R15: 00007ffeaa1785d8 [ 415.392861][ T9448] [ 415.506467][ T6937] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 415.636460][ T6937] usb 1-1: device descriptor read/64, error -71 [ 415.748604][ T6937] usb usb1-port1: attempt power cycle [ 416.070676][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.120617][ T6937] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 416.147946][ T6937] usb 1-1: device descriptor read/8, error -71 [ 416.186309][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 416.951135][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 416.961118][ T31] usb 4-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=28.b5 [ 417.093223][ T31] usb 4-1: config 6 has an invalid interface number: 237 but max is 0 [ 417.101819][ T31] usb 4-1: config 6 has no interface number 0 [ 417.101864][ T31] usb 4-1: config 6 interface 237 has no altsetting 0 [ 417.105861][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.105887][ T31] usb 4-1: Product: syz [ 417.105900][ T31] usb 4-1: Manufacturer: syz [ 417.105914][ T31] usb 4-1: SerialNumber: syz [ 417.167330][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.366226][ T6937] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 417.388897][ T6937] usb 1-1: device descriptor read/8, error -71 [ 417.507855][ T31] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 417.509188][ T6937] usb usb1-port1: unable to enumerate USB device [ 417.528263][ T31] usb 4-1: setting power ON [ 417.528912][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 417.666800][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 417.866624][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.877094][ T31] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH) [ 417.877160][ T31] usb 4-1: media controller created [ 417.924872][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.228254][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.238569][ T31] cxusb: set interface failed [ 418.249064][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 418.249091][ T31] cxusb: clear tuner gpio failed [ 418.249099][ T31] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH' [ 419.336214][ T31] rc_core: IR keymap rc-d680-dmb not found [ 419.342567][ T31] Registered IR keymap rc-empty [ 419.352122][ T31] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 419.375865][ T31] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 419.427886][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.447300][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.516750][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 419.516833][ T31] usb 4-1: setting power OFF [ 419.516853][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 419.516868][ T31] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected. [ 419.549253][ T31] usb 4-1: USB disconnect, device number 14 [ 420.666874][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.685919][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.208521][ T31] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected. [ 422.153366][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.246244][ T5723] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 422.273832][ T9514] FAULT_INJECTION: forcing a failure. [ 422.273832][ T9514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.290846][ T9514] CPU: 0 UID: 0 PID: 9514 Comm: syz.2.1286 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 422.290879][ T9514] Tainted: [L]=SOFTLOCKUP [ 422.290886][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.290897][ T9514] Call Trace: [ 422.290905][ T9514] [ 422.290914][ T9514] dump_stack_lvl+0xe8/0x150 [ 422.290947][ T9514] should_fail_ex+0x46b/0x600 [ 422.290973][ T9514] strncpy_from_user+0x36/0x2c0 [ 422.290996][ T9514] do_getname+0x77/0x250 [ 422.291023][ T9514] __se_sys_chdir+0x8d/0x2a0 [ 422.291042][ T9514] ? __pfx___se_sys_chdir+0x10/0x10 [ 422.291072][ T9514] do_syscall_64+0x166/0x520 [ 422.291093][ T9514] ? trace_irq_disable+0x3b/0x140 [ 422.291128][ T9514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.291147][ T9514] ? clear_bhb_loop+0x70/0xc0 [ 422.291170][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.291188][ T9514] RIP: 0033:0x7f24409ce159 [ 422.291205][ T9514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.291220][ T9514] RSP: 002b:00007f243ec26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 422.291241][ T9514] RAX: ffffffffffffffda RBX: 00007f2440c55fa0 RCX: 00007f24409ce159 [ 422.291253][ T9514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.291261][ T9514] RBP: 00007f2440a65024 R08: 0000000000000000 R09: 0000000000000000 [ 422.291273][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.291283][ T9514] R13: 00007f2440c56038 R14: 00007f2440c55fa0 R15: 00007ffe030908c8 [ 422.291310][ T9514] [ 422.436580][ T5723] usb 1-1: device descriptor read/64, error -71 [ 422.687498][ T5723] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 423.481510][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.536333][ T5723] usb 1-1: device descriptor read/64, error -71 [ 423.646715][ T5723] usb usb1-port1: attempt power cycle [ 424.026220][ T5723] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 424.047096][ T5723] usb 1-1: device descriptor read/8, error -71 [ 424.326248][ T5723] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 424.467054][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.546511][ T5723] usb 1-1: device not accepting address 30, error -71 [ 424.553941][ T5723] usb usb1-port1: unable to enumerate USB device [ 424.581425][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.615283][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.661464][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.692823][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.954494][ T9560] FAULT_INJECTION: forcing a failure. [ 424.954494][ T9560] name failslab, interval 1, probability 0, space 0, times 0 [ 424.981521][ T9560] CPU: 1 UID: 0 PID: 9560 Comm: syz.0.1303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 424.981555][ T9560] Tainted: [L]=SOFTLOCKUP [ 424.981561][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.981571][ T9560] Call Trace: [ 424.981580][ T9560] [ 424.981588][ T9560] dump_stack_lvl+0xe8/0x150 [ 424.981620][ T9560] should_fail_ex+0x46b/0x600 [ 424.981647][ T9560] should_failslab+0xa8/0x100 [ 424.981677][ T9560] __kmalloc_noprof+0xfb/0x790 [ 424.981701][ T9560] ? tomoyo_realpath_from_path+0xef/0x640 [ 424.981722][ T9560] ? tomoyo_realpath_from_path+0xef/0x640 [ 424.981751][ T9560] tomoyo_realpath_from_path+0xef/0x640 [ 424.981783][ T9560] ? tomoyo_path_number_perm+0x219/0x5f0 [ 424.981801][ T9560] tomoyo_path_number_perm+0x246/0x5f0 [ 424.981821][ T9560] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.981838][ T9560] ? __lock_acquire+0x6df/0x2e40 [ 424.981876][ T9560] ? hook_file_ioctl+0x1f5/0x610 [ 424.981917][ T9560] ? __fget_files+0x2a/0x420 [ 424.981937][ T9560] ? __fget_files+0x2a/0x420 [ 424.981951][ T9560] ? __fget_files+0x3a8/0x420 [ 424.981965][ T9560] ? __fget_files+0x2a/0x420 [ 424.981985][ T9560] security_file_ioctl+0xc3/0x2a0 [ 424.982006][ T9560] __se_sys_ioctl+0x47/0x170 [ 424.982030][ T9560] do_syscall_64+0x166/0x520 [ 424.982051][ T9560] ? trace_irq_disable+0x3b/0x140 [ 424.982072][ T9560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.982090][ T9560] ? clear_bhb_loop+0x70/0xc0 [ 424.982111][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.982128][ T9560] RIP: 0033:0x7fd4cf44e159 [ 424.982146][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.982160][ T9560] RSP: 002b:00007fd4cd6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.982179][ T9560] RAX: ffffffffffffffda RBX: 00007fd4cf6d5fa0 RCX: 00007fd4cf44e159 [ 424.982191][ T9560] RDX: 0000000000000000 RSI: 00000000c020660b RDI: 0000000000000003 [ 424.982203][ T9560] RBP: 00007fd4cf4e5024 R08: 0000000000000000 R09: 0000000000000000 [ 424.982215][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.982226][ T9560] R13: 00007fd4cf6d6038 R14: 00007fd4cf6d5fa0 R15: 00007ffebc6627a8 [ 424.982255][ T9560] [ 424.982263][ T9560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.046366][ T5597] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 425.265153][ T5597] usb 4-1: Using ep0 maxpacket: 8 [ 425.280180][ T5597] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.281894][ T5597] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 425.281950][ T5597] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.281971][ T5597] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.281993][ T5597] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.282015][ T5597] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.282053][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.476317][ T5730] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 425.626241][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 425.671448][ T5730] usb 3-1: unable to get BOS descriptor or descriptor too short [ 425.671548][ T5730] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 425.673077][ T5730] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 425.673102][ T5730] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 425.673121][ T5730] usb 3-1: config 14 has no interface number 0 [ 425.673136][ T5730] usb 3-1: config 14 has no interface number 1 [ 425.673205][ T5730] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 425.673227][ T5730] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 425.673249][ T5730] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 425.673270][ T5730] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 425.673293][ T5730] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 425.673316][ T5730] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.673340][ T5730] usb 3-1: config 14 interface 57 has no altsetting 0 [ 425.673356][ T5730] usb 3-1: config 14 interface 228 has no altsetting 0 [ 425.679049][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.679078][ T5730] usb 3-1: Product: syz [ 425.679096][ T5730] usb 3-1: Manufacturer: syz [ 425.679109][ T5730] usb 3-1: SerialNumber: syz [ 425.726842][ T5597] usb 4-1: GET_CAPABILITIES returned 0 [ 425.726890][ T5597] usbtmc 4-1:16.0: can't read capabilities [ 425.786238][ T5723] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 425.858888][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.921675][ T5723] usb 5-1: device descriptor read/64, error -71 [ 426.050277][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.052136][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.057936][ T9554] tipc: Failed to obtain node identity [ 426.057970][ T9554] tipc: Enabling of bearer rejected, failed to enable media [ 426.117731][ T10] usb 4-1: USB disconnect, device number 15 [ 426.146714][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.166319][ T5723] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 426.293941][ T5730] legousbtower 3-1:14.57: interrupt endpoints not found [ 426.296866][ T5723] usb 5-1: device descriptor read/64, error -71 [ 426.408783][ T5723] usb usb5-port1: attempt power cycle [ 426.695061][ T5730] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 426.713341][ T5730] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 426.808602][ T5723] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 426.826921][ T5723] usb 5-1: device descriptor read/8, error -71 [ 426.868319][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.978826][ T9602] FAULT_INJECTION: forcing a failure. [ 426.978826][ T9602] name failslab, interval 1, probability 0, space 0, times 0 [ 426.978905][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.0.1320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.978930][ T9602] Tainted: [L]=SOFTLOCKUP [ 426.978934][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.978942][ T9602] Call Trace: [ 426.978949][ T9602] [ 426.978956][ T9602] dump_stack_lvl+0xe8/0x150 [ 426.978994][ T9602] should_fail_ex+0x46b/0x600 [ 426.979023][ T9602] should_failslab+0xa8/0x100 [ 426.979054][ T9602] __kmalloc_noprof+0xfb/0x790 [ 426.979079][ T9602] ? tomoyo_realpath_from_path+0xef/0x640 [ 426.979102][ T9602] ? tomoyo_realpath_from_path+0xef/0x640 [ 426.979132][ T9602] tomoyo_realpath_from_path+0xef/0x640 [ 426.979167][ T9602] ? tomoyo_path_number_perm+0x219/0x5f0 [ 426.979186][ T9602] tomoyo_path_number_perm+0x246/0x5f0 [ 426.979208][ T9602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 426.979225][ T9602] ? __lock_acquire+0x6df/0x2e40 [ 426.979264][ T9602] ? hook_file_ioctl+0x1f5/0x610 [ 426.979307][ T9602] ? __fget_files+0x2a/0x420 [ 426.979328][ T9602] ? __fget_files+0x2a/0x420 [ 426.979345][ T9602] ? __fget_files+0x3a8/0x420 [ 426.979361][ T9602] ? __fget_files+0x2a/0x420 [ 426.979383][ T9602] security_file_ioctl+0xc3/0x2a0 [ 426.979406][ T9602] __se_sys_ioctl+0x47/0x170 [ 426.979430][ T9602] do_syscall_64+0x166/0x520 [ 426.979451][ T9602] ? trace_irq_disable+0x3b/0x140 [ 426.979472][ T9602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.979491][ T9602] ? clear_bhb_loop+0x70/0xc0 [ 426.979513][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.979531][ T9602] RIP: 0033:0x7fd4cf44e159 [ 426.979549][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.979564][ T9602] RSP: 002b:00007fd4cd6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.979585][ T9602] RAX: ffffffffffffffda RBX: 00007fd4cf6d5fa0 RCX: 00007fd4cf44e159 [ 426.979598][ T9602] RDX: 0000000000000000 RSI: 00000000c020660b RDI: 0000000000000003 [ 426.979610][ T9602] RBP: 00007fd4cf4e5024 R08: 0000000000000000 R09: 0000000000000000 [ 426.979622][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.979633][ T9602] R13: 00007fd4cf6d6038 R14: 00007fd4cf6d5fa0 R15: 00007ffebc6627a8 [ 426.979665][ T9602] [ 426.979746][ T9602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.086272][ T5723] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 427.107017][ T5723] usb 5-1: device descriptor read/8, error -71 [ 427.216552][ T5723] usb usb5-port1: unable to enumerate USB device [ 427.371717][ T9606] usb 3-1: LEGO USB Tower reset control request failed [ 427.578162][ T5723] usb 3-1: USB disconnect, device number 21 [ 427.620216][ T5723] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 427.910031][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.421563][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.986644][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.657344][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.755033][ T9646] FAULT_INJECTION: forcing a failure. [ 430.755033][ T9646] name fail_futex, interval 1, probability 0, space 0, times 0 [ 430.755072][ T9646] CPU: 1 UID: 0 PID: 9646 Comm: syz.3.1331 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.755096][ T9646] Tainted: [L]=SOFTLOCKUP [ 430.755103][ T9646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.755113][ T9646] Call Trace: [ 430.755120][ T9646] [ 430.755129][ T9646] dump_stack_lvl+0xe8/0x150 [ 430.755211][ T9646] should_fail_ex+0x46b/0x600 [ 430.755237][ T9646] get_futex_key+0xf12/0x1580 [ 430.755275][ T9646] ? __pfx_get_futex_key+0x10/0x10 [ 430.755310][ T9646] futex_wake+0x119/0x600 [ 430.755336][ T9646] ? __pfx_futex_wake+0x10/0x10 [ 430.755353][ T9646] ? do_raw_spin_lock+0x12b/0x2f0 [ 430.755389][ T9646] do_futex+0x458/0x4e0 [ 430.755420][ T9646] ? __pfx_do_futex+0x10/0x10 [ 430.755450][ T9646] ? __might_fault+0xaf/0x130 [ 430.755475][ T9646] mm_exit_exec_release+0x10d/0x290 [ 430.755501][ T9646] exit_mm+0x50/0x240 [ 430.755523][ T9646] do_exit+0x6cd/0x2360 [ 430.755541][ T9646] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.755568][ T9646] ? __pfx_do_exit+0x10/0x10 [ 430.755586][ T9646] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 430.755619][ T9646] ? rt_spin_unlock+0x159/0x200 [ 430.755645][ T9646] do_group_exit+0x22d/0x2f0 [ 430.755660][ T9646] ? rt_spin_unlock+0x165/0x200 [ 430.755686][ T9646] get_signal+0x121b/0x12c0 [ 430.755732][ T9646] arch_do_signal_or_restart+0xbb/0x860 [ 430.755761][ T9646] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 430.755804][ T9646] exit_to_user_mode_loop+0x10e/0x770 [ 430.755827][ T9646] ? rcu_is_watching+0x16/0xb0 [ 430.755856][ T9646] do_syscall_64+0x328/0x520 [ 430.755875][ T9646] ? trace_irq_disable+0x3b/0x140 [ 430.755895][ T9646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.755918][ T9646] ? clear_bhb_loop+0x70/0xc0 [ 430.755940][ T9646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.755962][ T9646] RIP: 0033:0x7f147f13e159 [ 430.755979][ T9646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.755994][ T9646] RSP: 002b:00007f147d3750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 430.756014][ T9646] RAX: fffffffffffffe00 RBX: 00007f147f3c6098 RCX: 00007f147f13e159 [ 430.756027][ T9646] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f147f3c6098 [ 430.756039][ T9646] RBP: 00007f147f3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.756050][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.756062][ T9646] R13: 00007f147f3c6128 R14: 00007ffe60b7edb0 R15: 00007ffe60b7ee98 [ 430.756090][ T9646] [ 430.786722][ T9640] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 431.276710][ T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.666749][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.786288][ T5793] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 431.932477][ T5793] usb 3-1: device descriptor read/64, error -71 [ 432.079971][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 432.186654][ T5793] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 432.333162][ T5793] usb 3-1: device descriptor read/64, error -71 [ 432.338491][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 432.341251][ T10] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 432.349659][ T10] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 432.349687][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.360016][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.360042][ T10] usb 1-1: Product: syz [ 432.360054][ T10] usb 1-1: Manufacturer: syz [ 432.360067][ T10] usb 1-1: SerialNumber: syz [ 432.370650][ T10] usb 1-1: config 0 descriptor?? [ 432.410899][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 432.460147][ T5793] usb usb3-port1: attempt power cycle [ 432.716934][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.835818][ T5793] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 432.857052][ T5793] usb 3-1: device descriptor read/8, error -71 [ 433.071042][ T9685] FAULT_INJECTION: forcing a failure. [ 433.071042][ T9685] name fail_futex, interval 1, probability 0, space 0, times 0 [ 433.084681][ T9685] CPU: 1 UID: 0 PID: 9685 Comm: syz.1.1348 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 433.084711][ T9685] Tainted: [L]=SOFTLOCKUP [ 433.084718][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.084726][ T9685] Call Trace: [ 433.084734][ T9685] [ 433.084749][ T9685] dump_stack_lvl+0xe8/0x150 [ 433.084800][ T9685] should_fail_ex+0x46b/0x600 [ 433.084828][ T9685] get_futex_key+0xf12/0x1580 [ 433.084870][ T9685] ? __pfx_get_futex_key+0x10/0x10 [ 433.084924][ T9685] futex_wake+0x119/0x600 [ 433.084957][ T9685] ? __pfx_futex_wake+0x10/0x10 [ 433.084975][ T9685] ? do_raw_spin_lock+0x12b/0x2f0 [ 433.085008][ T9685] do_futex+0x458/0x4e0 [ 433.085038][ T9685] ? __pfx_do_futex+0x10/0x10 [ 433.085065][ T9685] ? __might_fault+0xaf/0x130 [ 433.085085][ T9685] mm_exit_exec_release+0x10d/0x290 [ 433.085106][ T9685] exit_mm+0x50/0x240 [ 433.085126][ T9685] do_exit+0x6cd/0x2360 [ 433.085143][ T9685] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 433.085169][ T9685] ? __pfx_do_exit+0x10/0x10 [ 433.085187][ T9685] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 433.085219][ T9685] ? rt_spin_unlock+0x159/0x200 [ 433.085245][ T9685] do_group_exit+0x22d/0x2f0 [ 433.085263][ T9685] ? rt_spin_unlock+0x165/0x200 [ 433.085288][ T9685] get_signal+0x121b/0x12c0 [ 433.085332][ T9685] arch_do_signal_or_restart+0xbb/0x860 [ 433.085361][ T9685] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 433.085405][ T9685] exit_to_user_mode_loop+0x10e/0x770 [ 433.085427][ T9685] ? rcu_is_watching+0x16/0xb0 [ 433.085455][ T9685] do_syscall_64+0x328/0x520 [ 433.085477][ T9685] ? trace_irq_disable+0x3b/0x140 [ 433.085498][ T9685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.085517][ T9685] ? clear_bhb_loop+0x70/0xc0 [ 433.085538][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.085566][ T9685] RIP: 0033:0x7f7ad27ee159 [ 433.085586][ T9685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.085602][ T9685] RSP: 002b:00007f7ad0a250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 433.085622][ T9685] RAX: fffffffffffffe00 RBX: 00007f7ad2a76098 RCX: 00007f7ad27ee159 [ 433.085635][ T9685] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ad2a76098 [ 433.085646][ T9685] RBP: 00007f7ad2a76090 R08: 0000000000000000 R09: 0000000000000000 [ 433.085658][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.085668][ T9685] R13: 00007f7ad2a76128 R14: 00007ffeaa1784f0 R15: 00007ffeaa1785d8 [ 433.085699][ T9685] [ 433.428056][ T5793] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 433.458177][ T5793] usb 3-1: device descriptor read/8, error -71 [ 433.566685][ T5793] usb usb3-port1: unable to enumerate USB device [ 433.916911][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.028798][ T9696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1350'. [ 434.785855][ T10] gspca_sunplus: reg_r err -71 [ 434.786003][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 434.804584][ T10] usb 1-1: USB disconnect, device number 31 [ 434.947148][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.148954][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.153971][ T9716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.154134][ T9716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.547285][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.026788][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.267990][ T163] IPVS: starting estimator thread 0... [ 437.286369][ T9741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.356264][ T9742] IPVS: using max 9 ests per chain, 21600 per kthread [ 437.586365][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.226438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.230515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.626762][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.236818][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.236955][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.274689][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.153415][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.162997][ T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.265339][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.981043][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1388'. [ 443.267066][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.522209][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.896269][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 445.055850][ T31] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 445.056271][ T6937] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 445.061602][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.061629][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 445.064533][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.064558][ T31] usb 1-1: Product: syz [ 445.064571][ T31] usb 1-1: Manufacturer: syz [ 445.064583][ T31] usb 1-1: SerialNumber: syz [ 445.099424][ T9833] tipc: Enabled bearer , priority 0 [ 445.160082][ T9833] tipc: Resetting bearer [ 445.207052][ T6937] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 445.219497][ T6937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.226155][ T6937] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 445.241276][ T6937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.244388][ T6937] usb 5-1: Product: syz [ 445.244408][ T6937] usb 5-1: Manufacturer: syz [ 445.244422][ T6937] usb 5-1: SerialNumber: syz [ 445.338967][ T31] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 445.352813][ T9832] tipc: Disabling bearer [ 445.436323][ T5723] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 445.555478][ T31] usb 5-1: USB disconnect, device number 17 [ 445.588665][ T5723] usb 3-1: Using ep0 maxpacket: 32 [ 445.591459][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.603109][ T5723] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 445.607560][ T5723] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 445.607585][ T5723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.649308][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.649376][ T5723] usb 3-1: Product: syz [ 445.649391][ T5723] usb 3-1: Manufacturer: syz [ 445.649404][ T5723] usb 3-1: SerialNumber: syz [ 445.665373][ T5723] usb 3-1: config 0 descriptor?? [ 445.696726][ T5723] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 445.854042][ T31] usb 1-1: USB disconnect, device number 32 [ 445.878149][ T31] usblp0: removed [ 447.144003][ T5723] gspca_sunplus: reg_r err -110 [ 447.318920][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.906581][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.928283][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.176567][ T5723] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 448.387160][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.632306][ T31] usb 3-1: USB disconnect, device number 26 [ 448.912309][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.920935][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.921169][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.939323][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.947898][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.004594][ T9883] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 449.036538][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 449.204090][ T31] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 449.206043][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.206067][ T31] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 449.210621][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.210646][ T31] usb 3-1: Product: syz [ 449.210659][ T31] usb 3-1: Manufacturer: syz [ 449.210672][ T31] usb 3-1: SerialNumber: syz [ 449.479215][ T5723] usb 3-1: USB disconnect, device number 27 [ 452.786301][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 453.437771][ T31] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 453.502822][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.519388][ T31] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 453.615102][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.618622][ T31] usb 5-1: Product: syz [ 453.618642][ T31] usb 5-1: Manufacturer: syz [ 453.618670][ T31] usb 5-1: SerialNumber: syz [ 454.356311][ T9936] mmap: syz.3.1443 (9936) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 455.084685][ T9978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.738005][ T9938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.812937][ T5730] usb 5-1: USB disconnect, device number 18 [ 456.472317][T10015] FAULT_INJECTION: forcing a failure. [ 456.472317][T10015] name failslab, interval 1, probability 0, space 0, times 0 [ 456.486357][T10015] CPU: 1 UID: 0 PID: 10015 Comm: syz.2.1472 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.486389][T10015] Tainted: [L]=SOFTLOCKUP [ 456.486396][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.486413][T10015] Call Trace: [ 456.486422][T10015] [ 456.486430][T10015] dump_stack_lvl+0xe8/0x150 [ 456.486464][T10015] should_fail_ex+0x46b/0x600 [ 456.486497][T10015] should_failslab+0xa8/0x100 [ 456.486537][T10015] __kmalloc_noprof+0xfb/0x790 [ 456.486569][T10015] ? tomoyo_realpath_from_path+0xef/0x640 [ 456.486593][T10015] ? tomoyo_realpath_from_path+0xef/0x640 [ 456.486639][T10015] tomoyo_realpath_from_path+0xef/0x640 [ 456.486681][T10015] ? tomoyo_path_number_perm+0x219/0x5f0 [ 456.486710][T10015] tomoyo_path_number_perm+0x246/0x5f0 [ 456.486739][T10015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 456.486759][T10015] ? __lock_acquire+0x6df/0x2e40 [ 456.486806][T10015] ? hook_file_ioctl+0x1f5/0x610 [ 456.486858][T10015] ? __fget_files+0x2a/0x420 [ 456.486887][T10015] ? __fget_files+0x2a/0x420 [ 456.486905][T10015] ? __fget_files+0x3a8/0x420 [ 456.486928][T10015] ? __fget_files+0x2a/0x420 [ 456.486952][T10015] security_file_ioctl+0xc3/0x2a0 [ 456.486981][T10015] __se_sys_ioctl+0x47/0x170 [ 456.487167][T10015] do_syscall_64+0x166/0x520 [ 456.487190][T10015] ? trace_irq_disable+0x3b/0x140 [ 456.487271][T10015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.487292][T10015] ? clear_bhb_loop+0x70/0xc0 [ 456.487313][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.487332][T10015] RIP: 0033:0x7f24409ce159 [ 456.487365][T10015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.487383][T10015] RSP: 002b:00007f243ec26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.487404][T10015] RAX: ffffffffffffffda RBX: 00007f2440c55fa0 RCX: 00007f24409ce159 [ 456.487419][T10015] RDX: 0000000000000000 RSI: 00000000c020660b RDI: 0000000000000003 [ 456.487435][T10015] RBP: 00007f2440a65024 R08: 0000000000000000 R09: 0000000000000000 [ 456.487448][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.487460][T10015] R13: 00007f2440c56038 R14: 00007f2440c55fa0 R15: 00007ffe030908c8 [ 456.487488][T10015] [ 456.487511][T10015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 457.056243][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 457.138978][T10035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.207049][ T31] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 457.217968][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.218016][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.220435][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.220467][ T31] usb 2-1: Product: syz [ 457.220480][ T31] usb 2-1: Manufacturer: syz [ 457.220492][ T31] usb 2-1: SerialNumber: syz [ 457.294532][ T31] usb 2-1: NFC: intf ffff888061004000 id ffffffff8ebd1ae0 [ 457.581274][ T201] usb 2-1: USB disconnect, device number 10 [ 459.546001][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 460.066681][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 460.399770][ T31] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 460.411278][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.411365][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.444965][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.446665][ T31] usb 5-1: Product: syz [ 460.446681][ T31] usb 5-1: Manufacturer: syz [ 460.446695][ T31] usb 5-1: SerialNumber: syz [ 460.491727][ T31] usb 5-1: NFC: intf ffff888036366000 id ffffffff8ebd1ae0 [ 460.704308][ T31] usb 5-1: USB disconnect, device number 19 [ 461.337902][T10120] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1512'. [ 462.429748][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'. [ 464.293187][ T5730] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 464.471561][ T5730] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 464.484606][ T5730] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.484702][ T5730] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 464.487291][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.487315][ T5730] usb 1-1: Product: syz [ 464.487329][ T5730] usb 1-1: Manufacturer: syz [ 464.487350][ T5730] usb 1-1: SerialNumber: syz [ 464.603587][ T5730] usb 1-1: NFC: intf ffff888061e84000 id ffffffff8ebd1ae0 [ 464.811967][ T5730] usb 1-1: USB disconnect, device number 33 [ 465.605275][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 465.840796][T10199] jffs2: notice: (10199) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 467.037241][ T5707] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 467.100375][ T5602] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 467.198362][ T5707] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 467.201237][ T5707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.201301][ T5707] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.211559][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.211622][ T5707] usb 4-1: Product: syz [ 467.211636][ T5707] usb 4-1: Manufacturer: syz [ 467.211650][ T5707] usb 4-1: SerialNumber: syz [ 467.239605][ T5707] usb 4-1: NFC: intf ffff888030154000 id ffffffff8ebd1ae0 [ 467.324425][ T6937] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 467.629727][ T6937] usb 3-1: Using ep0 maxpacket: 32 [ 467.639427][ T6937] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 467.652872][ T6937] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 467.656196][ T6937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.681786][ T6937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.683479][ T6937] usb 3-1: Product: syz [ 467.683497][ T6937] usb 3-1: Manufacturer: syz [ 467.683511][ T6937] usb 3-1: SerialNumber: syz [ 467.747354][ T6937] usb 3-1: config 0 descriptor?? [ 467.770258][ T6937] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 467.999094][ T201] usb 4-1: USB disconnect, device number 16 [ 469.665839][ T6937] gspca_sunplus: reg_r err -71 [ 469.669941][ T6937] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 469.692943][ T6937] usb 3-1: USB disconnect, device number 28 [ 470.416287][ T6937] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 471.237051][ T6937] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 471.238446][ T6937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.238549][ T6937] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.240968][ T6937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.240991][ T6937] usb 2-1: Product: syz [ 471.241003][ T6937] usb 2-1: Manufacturer: syz [ 471.241024][ T6937] usb 2-1: SerialNumber: syz [ 471.304278][ T6937] usb 2-1: NFC: intf ffff888030141000 id ffffffff8ebd1ae0 [ 471.574062][ T5730] usb 2-1: USB disconnect, device number 11 [ 473.348112][T10320] IPv6: NLM_F_CREATE should be specified when creating new route [ 474.877089][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 475.037652][ T10] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 475.040303][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.040358][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.271124][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.279225][ T10] usb 2-1: Product: syz [ 475.279244][ T10] usb 2-1: Manufacturer: syz [ 475.279258][ T10] usb 2-1: SerialNumber: syz [ 475.335923][ T10] usb 2-1: NFC: intf ffff888062576000 id ffffffff8ebd1ae0 [ 475.921097][ T6937] usb 2-1: USB disconnect, device number 12 [ 480.180286][ T6937] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 480.377341][ T6937] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 480.389029][ T6937] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 480.392228][ T6937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.392252][ T6937] usb 4-1: Product: syz [ 480.392266][ T6937] usb 4-1: Manufacturer: syz [ 480.392280][ T6937] usb 4-1: SerialNumber: syz [ 480.444187][ T6937] usb 4-1: NFC: intf ffff8880398bb000 id ffffffff8ebd1ae0 [ 481.055560][ T201] usb 4-1: USB disconnect, device number 17 [ 481.304091][ T5723] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 481.459773][ T5723] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 481.461645][ T5723] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 481.461670][ T5723] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 481.461705][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.521528][ T5723] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 481.742872][ T5723] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 482.169838][ T6937] usb 1-1: USB disconnect, device number 34 [ 482.240938][ T6937] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 482.260777][ T6937] spcp8x5 1-1:1.0: device disconnected [ 482.996324][ T201] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 483.157115][ T201] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 483.168851][ T201] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 483.175177][ T201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.175205][ T201] usb 3-1: Product: syz [ 483.175219][ T201] usb 3-1: Manufacturer: syz [ 483.175233][ T201] usb 3-1: SerialNumber: syz [ 483.180601][T10440] sch_tbf: burst 1521 is lower than device lo mtu (65550) ! [ 483.231471][ T201] usb 3-1: NFC: intf ffff888026cd7000 id ffffffff8ebd1ae0 [ 483.462934][ T5723] usb 3-1: USB disconnect, device number 29 [ 487.046208][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 487.227095][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.237938][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.249174][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.259057][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.259255][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.345657][ T10] usb 3-1: config 0 descriptor?? [ 487.983418][ T6937] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 488.146411][ T6937] usb 4-1: Using ep0 maxpacket: 32 [ 488.153088][ T6937] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 488.155169][ T6937] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 488.155195][ T6937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.203862][ T6937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.213345][ T6937] usb 4-1: Product: syz [ 488.213377][ T6937] usb 4-1: Manufacturer: syz [ 488.213392][ T6937] usb 4-1: SerialNumber: syz [ 488.256733][ T6937] usb 4-1: config 0 descriptor?? [ 488.275040][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282779][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282815][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282842][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282867][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282891][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282916][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282940][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282964][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.282988][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 488.343245][ T6937] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 488.531830][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 488.566608][ T10] usb 3-1: USB disconnect, device number 30 [ 488.666278][ T5730] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 488.771425][T10502] fido_id[10502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 488.824004][ T5730] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 488.825603][ T5730] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.834805][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.834832][ T5730] usb 1-1: Product: syz [ 488.834845][ T5730] usb 1-1: Manufacturer: syz [ 488.834858][ T5730] usb 1-1: SerialNumber: syz [ 488.888935][ T5730] usb 1-1: NFC: intf ffff888020ef5000 id ffffffff8ebd1ae0 [ 489.185174][ T5730] usb 1-1: USB disconnect, device number 35 [ 490.355312][ T201] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 490.355569][ T6937] gspca_sunplus: reg_r err -71 [ 490.355641][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 490.356027][ T6937] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 490.408433][ T6937] usb 4-1: USB disconnect, device number 18 [ 490.607991][ T201] usb 3-1: device descriptor read/64, error -32 [ 491.986521][ T201] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 492.206814][ T201] usb 3-1: Using ep0 maxpacket: 8 [ 492.212943][ T201] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.214276][ T201] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 492.214338][ T201] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.214359][ T201] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.214382][ T201] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.214405][ T201] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.214444][ T201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.169754][ T201] usb 3-1: usb_control_msg returned -71 [ 493.171998][ T201] usbtmc 3-1:16.0: can't read capabilities [ 493.220955][ T201] usb 3-1: USB disconnect, device number 32 [ 493.786643][ T201] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 493.939649][ T201] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 493.951300][ T201] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 493.954038][ T201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.954065][ T201] usb 3-1: Product: syz [ 493.954078][ T201] usb 3-1: Manufacturer: syz [ 493.954090][ T201] usb 3-1: SerialNumber: syz [ 494.022610][ T201] usb 3-1: NFC: intf ffff888068682000 id ffffffff8ebd1ae0 [ 495.002586][ T5730] usb 3-1: USB disconnect, device number 33 [ 495.104164][T10578] ceph: No mds server is up or the cluster is laggy [ 495.257045][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1693'. [ 496.696258][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 496.871584][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 496.872931][ T31] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 496.872986][ T31] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 496.873011][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 496.876303][ T31] usb 4-1: string descriptor 0 read error: -22 [ 496.876427][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.066441][ T201] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 497.928501][ T201] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 497.943603][ T201] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 498.090031][ T201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.098178][ T201] usb 5-1: Product: syz [ 498.098200][ T201] usb 5-1: Manufacturer: syz [ 498.098214][ T201] usb 5-1: SerialNumber: syz [ 498.141272][ T201] usb 5-1: NFC: intf ffff88802ff2e000 id ffffffff8ebd1ae0 [ 498.247083][T10642] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.375295][ T5794] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 498.454765][ T201] usb 5-1: USB disconnect, device number 20 [ 498.470554][T10633] ceph: No mds server is up or the cluster is laggy [ 498.523578][ T5794] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 498.562329][ T31] hid_parser_main: 5 callbacks suppressed [ 498.562667][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562706][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562730][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562754][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562778][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562802][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562825][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562849][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562873][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.562898][ T31] logitech 0003:046D:C626.0005: unknown main item tag 0x0 [ 498.702213][ T31] logitech 0003:046D:C626.0005: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 498.783852][ T5794] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 498.784904][ T31] usb 4-1: USB disconnect, device number 19 [ 498.915052][T10655] fido_id[10655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 501.035424][T10673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.689451][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.689623][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.743236][ T201] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 501.896242][ T6937] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 502.000340][ T201] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 502.046937][ T6937] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 502.065750][ T6937] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 502.079773][ T6937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.088398][ T6937] usb 3-1: Product: syz [ 502.088423][ T6937] usb 3-1: Manufacturer: syz [ 502.088437][ T6937] usb 3-1: SerialNumber: syz [ 502.095160][ T6937] usb 3-1: NFC: intf ffff888029f4e000 id ffffffff8ebd1ae0 [ 502.229507][T10695] ceph: No mds server is up or the cluster is laggy [ 502.573760][ T6937] usb 3-1: USB disconnect, device number 34 [ 504.474159][T10742] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.287629][T10754] ceph: No mds server is up or the cluster is laggy [ 506.957632][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 507.117001][ T10] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 507.118368][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 507.118392][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 507.120990][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.121014][ T10] usb 3-1: Product: syz [ 507.121027][ T10] usb 3-1: Manufacturer: syz [ 507.121039][ T10] usb 3-1: SerialNumber: syz [ 507.220229][ T10] usb 3-1: NFC: intf ffff888026972000 id ffffffff8ebd1ae0 [ 508.485809][ T10] nfcmrvl 3-1:1.0: NFC: registered with nci successfully [ 508.582081][ T10] usb 3-1: USB disconnect, device number 35 [ 508.607302][ T10] usb 3-1: NFC: intf ffff888026972000 [ 514.406265][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 514.430728][T10838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1780'. [ 514.568157][ T10] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 514.581376][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.581406][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 514.584833][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.584857][ T10] usb 2-1: Product: syz [ 514.584870][ T10] usb 2-1: Manufacturer: syz [ 514.584882][ T10] usb 2-1: SerialNumber: syz [ 514.655968][ T10] usb 2-1: NFC: intf ffff8880611f2000 id ffffffff8ebd1ae0 [ 514.710084][ T10] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 514.889516][ T5707] usb 2-1: USB disconnect, device number 13 [ 514.892227][ T5707] usb 2-1: NFC: intf ffff8880611f2000 [ 515.581257][T10855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 515.632083][T10855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 515.691497][T10855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 515.701402][T10855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 515.702108][T10855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 518.107789][T10855] Bluetooth: hci5: command tx timeout [ 518.404712][T10885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1790'. [ 519.057118][ T5730] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 519.211940][ T5730] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 519.214177][ T5730] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 519.214204][ T5730] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 519.218259][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.218283][ T5730] usb 4-1: Product: syz [ 519.218296][ T5730] usb 4-1: Manufacturer: syz [ 519.218309][ T5730] usb 4-1: SerialNumber: syz [ 519.257486][ T5730] usb 4-1: NFC: intf ffff888060938000 id ffffffff8ebd1ae0 [ 519.461637][ T5730] nfcmrvl 4-1:1.0: NFC: registered with nci successfully [ 519.466274][ T5700] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 519.569642][ T5730] usb 4-1: USB disconnect, device number 20 [ 519.587506][ T5730] usb 4-1: NFC: intf ffff888060938000 [ 519.620986][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 519.621857][ T5700] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 519.625671][ T5700] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 519.625702][ T5700] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.625725][ T5700] usb 5-1: config 0 interface 0 has no altsetting 0 [ 519.625756][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.635898][ T5700] usb 5-1: config 0 descriptor?? [ 520.081765][T10904] ceph: No mds server is up or the cluster is laggy [ 520.126573][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.127404][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.147386][T10855] Bluetooth: hci5: command tx timeout [ 521.314600][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.328711][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.328934][T10852] bridge_slave_0: entered allmulticast mode [ 522.226361][T10855] Bluetooth: hci5: command tx timeout [ 522.466074][ T5700] usbhid 5-1:0.0: can't add hid device: -71 [ 522.466373][ T5700] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 522.482465][T10852] bridge_slave_0: entered promiscuous mode [ 522.591760][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.598776][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.599009][T10852] bridge_slave_1: entered allmulticast mode [ 522.614283][T10852] bridge_slave_1: entered promiscuous mode [ 522.639779][ T5700] usb 5-1: USB disconnect, device number 21 [ 523.141416][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1808'. [ 523.156448][ T5723] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 524.214456][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.273785][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 524.280018][ T5723] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 524.280073][ T5723] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 524.280112][ T5723] usb 4-1: config 1 interface 0 has no altsetting 0 [ 524.303043][ T5723] usb 4-1: string descriptor 0 read error: -22 [ 524.303208][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.306317][T10855] Bluetooth: hci5: command tx timeout [ 524.427931][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.838202][ T5723] hid_parser_main: 4005 callbacks suppressed [ 524.838291][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838352][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838403][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838468][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838598][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838650][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838718][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838768][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838816][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.838866][ T5723] logitech 0003:046D:C626.0006: unknown main item tag 0x0 [ 524.956815][T10852] team0: Port device team_slave_0 added [ 524.967935][T10852] team0: Port device team_slave_1 added [ 525.016389][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.023473][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.023493][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.068422][T10852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.076791][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.076823][T10852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.893027][ T5723] logitech 0003:046D:C626.0006: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 525.898061][ T5723] usb 4-1: USB disconnect, device number 21 [ 526.046265][ T201] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 526.958773][ T201] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 526.978668][ T201] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 526.980677][ T201] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 527.013505][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.021886][ T201] usb 2-1: Product: syz [ 527.024975][ T201] usb 2-1: Manufacturer: syz [ 527.024995][ T201] usb 2-1: SerialNumber: syz [ 527.716330][T10957] fido_id[10957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 527.805783][ T201] usb 2-1: NFC: intf ffff88801afe4000 id ffffffff8ebd1ae0 [ 527.888840][ T201] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 528.047927][T10852] hsr_slave_0: entered promiscuous mode [ 528.138844][T10852] hsr_slave_1: entered promiscuous mode [ 528.155443][T10852] debugfs: 'hsr0' already exists in 'hsr' [ 528.164404][ T201] usb 2-1: USB disconnect, device number 14 [ 528.169751][T10852] Cannot create hsr debugfs directory [ 528.178591][T10973] syzkaller0: entered promiscuous mode [ 528.178649][T10973] syzkaller0: entered allmulticast mode [ 528.224932][ T201] usb 2-1: NFC: intf ffff88801afe4000 [ 528.383996][ T5723] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 528.432720][ T5723] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 528.763123][ T5723] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 528.764097][T10970] ceph: No mds server is up or the cluster is laggy [ 531.216557][ T5793] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 531.277642][ T5723] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 531.343524][T10852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.368554][ T5793] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 531.370014][ T5793] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 531.370039][ T5793] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 531.372501][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.372523][ T5793] usb 2-1: Product: syz [ 531.372536][ T5793] usb 2-1: Manufacturer: syz [ 531.372549][ T5793] usb 2-1: SerialNumber: syz [ 531.411364][ T5730] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 531.441875][ T5730] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 531.443384][ T5793] usb 2-1: NFC: intf ffff88802a988000 id ffffffff8ebd1ae0 [ 531.446970][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 531.451252][ T5723] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 531.451296][ T5723] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 531.451334][ T5723] usb 4-1: config 1 interface 0 has no altsetting 0 [ 531.454951][ T5723] usb 4-1: string descriptor 0 read error: -22 [ 531.455104][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.513302][T10852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.514795][T10852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.733642][ T5793] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 531.757154][T10852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.792302][ T5793] usb 2-1: USB disconnect, device number 15 [ 531.804062][ T5793] usb 2-1: NFC: intf ffff88802a988000 [ 531.824749][T10852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.827536][ T5730] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 532.045302][ T5723] hid_parser_main: 4005 callbacks suppressed [ 532.045393][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045460][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045512][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045580][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045631][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045682][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045733][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045791][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045842][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.045891][ T5723] logitech 0003:046D:C626.0007: unknown main item tag 0x0 [ 532.157836][T11015] ceph: No mds server is up or the cluster is laggy [ 532.185609][T10852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.188682][T10852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.396717][ T5723] logitech 0003:046D:C626.0007: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 532.421575][ T5723] usb 4-1: USB disconnect, device number 22 [ 532.591072][T10852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.907764][T11028] LUN: removable file: (no medium) [ 532.910761][T11028] LUN: removable file: (no medium) [ 534.371708][T10852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.388773][T10852] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.643791][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.659676][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.677486][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.685753][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.864811][ T5793] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 535.482837][ T5793] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 535.514534][ T5793] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 535.514568][ T5793] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 535.538246][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.546352][ T5793] usb 3-1: Product: syz [ 535.546372][ T5793] usb 3-1: Manufacturer: syz [ 535.546390][ T5793] usb 3-1: SerialNumber: syz [ 535.638995][ T5723] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 535.680737][ T5793] usb 3-1: NFC: intf ffff888079dfe000 id ffffffff8ebd1ae0 [ 535.760003][ T31] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 535.778598][T11067] ceph: No mds server is up or the cluster is laggy [ 535.912821][ T5793] nfcmrvl 3-1:1.0: NFC: registered with nci successfully [ 535.995903][ T5793] usb 3-1: USB disconnect, device number 36 [ 535.999975][ T5793] usb 3-1: NFC: intf ffff888079dfe000 [ 538.105891][ T5793] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 538.114591][ T5793] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 538.387365][ T5700] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 538.521876][T11126] IPv6: NLM_F_CREATE should be specified when creating new route [ 539.242511][T11111] ceph: No mds server is up or the cluster is laggy [ 539.250971][ T5723] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 539.656276][ T6937] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 539.898835][ T6937] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 539.902389][ T6937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 539.902416][ T6937] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 539.908014][ T6937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.908039][ T6937] usb 2-1: Product: syz [ 539.908052][ T6937] usb 2-1: Manufacturer: syz [ 539.908064][ T6937] usb 2-1: SerialNumber: syz [ 540.067814][ T6937] usb 2-1: NFC: intf ffff8880344fd000 id ffffffff8ebd1ae0 [ 540.077699][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.699231][ T6937] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 540.794392][ T6937] usb 2-1: USB disconnect, device number 16 [ 541.789616][ T6937] usb 2-1: NFC: intf ffff8880344fd000 [ 546.712405][T10852] veth0_vlan: entered promiscuous mode [ 546.772888][T10852] veth1_vlan: entered promiscuous mode [ 550.570490][T10852] veth0_macvtap: entered promiscuous mode [ 550.762530][T10852] veth1_macvtap: entered promiscuous mode [ 551.108037][T10852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.235582][T10852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.295052][ T171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.423500][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.424240][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.448039][ T1933] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.117047][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.117184][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.121363][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.129342][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.248617][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.256716][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.606787][ T5602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 596.633707][ T5602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 596.640023][ T5602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 596.643234][ T5602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 596.646549][ T5602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 596.833966][T10855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 596.943888][T10855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 596.955545][T10855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 596.958141][T10855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 596.960863][T10855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.331706][T10855] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 597.403334][T10855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 597.405750][T10855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 597.406887][T10855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 597.410327][T10855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 597.767897][T10855] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 597.836536][T10855] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 597.839675][T10855] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 597.844576][T10855] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 597.854647][T10855] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 598.069733][ T5602] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 598.112285][ T5602] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 598.113854][ T5602] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 598.124537][ T5602] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 598.125593][ T5602] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 600.456172][ C0] sched: DL replenish lagged too much [ 602.289945][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.290187][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.290781][T11352] bridge_slave_0: entered allmulticast mode [ 602.293434][T11352] bridge_slave_0: entered promiscuous mode [ 602.368215][T11352] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.368339][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.368914][T11352] bridge_slave_1: entered allmulticast mode [ 602.371779][T11352] bridge_slave_1: entered promiscuous mode [ 602.381300][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.381448][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.381998][T11353] bridge_slave_0: entered allmulticast mode [ 602.384729][T11353] bridge_slave_0: entered promiscuous mode [ 602.458598][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.459042][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.459219][T11353] bridge_slave_1: entered allmulticast mode [ 602.464317][T11353] bridge_slave_1: entered promiscuous mode [ 602.603701][T11352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.691131][T11352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.703696][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.728947][T11359] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.729080][T11359] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.729586][T11359] bridge_slave_0: entered allmulticast mode [ 602.732577][T11359] bridge_slave_0: entered promiscuous mode [ 602.782134][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.802147][T11359] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.803371][T11359] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.803560][T11359] bridge_slave_1: entered allmulticast mode [ 602.806892][T11359] bridge_slave_1: entered promiscuous mode [ 602.871196][T11362] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.871646][T11362] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.871817][T11362] bridge_slave_0: entered allmulticast mode [ 602.875638][T11362] bridge_slave_0: entered promiscuous mode [ 602.908125][T11366] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.908243][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.908404][T11366] bridge_slave_0: entered allmulticast mode [ 602.911341][T11366] bridge_slave_0: entered promiscuous mode [ 602.925342][T11352] team0: Port device team_slave_0 added [ 602.954237][T11362] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.954362][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.954881][T11362] bridge_slave_1: entered allmulticast mode [ 602.957775][T11362] bridge_slave_1: entered promiscuous mode [ 602.990067][T11366] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.990192][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.990705][T11366] bridge_slave_1: entered allmulticast mode [ 602.994626][T11366] bridge_slave_1: entered promiscuous mode [ 603.006048][T11352] team0: Port device team_slave_1 added [ 603.009442][T11353] team0: Port device team_slave_0 added [ 603.043912][T11359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.091918][T11353] team0: Port device team_slave_1 added [ 603.123263][T11359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.199899][T11362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.237325][T11366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.239419][T11352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.239434][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.239458][T11352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.275880][T11362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.302451][T11366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.303614][T11352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.303628][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.303653][T11352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.314281][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.314298][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.314324][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.338572][T11359] team0: Port device team_slave_0 added [ 603.372395][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.372413][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.372439][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.398879][T11359] team0: Port device team_slave_1 added [ 603.444185][T11362] team0: Port device team_slave_0 added [ 603.467965][T11366] team0: Port device team_slave_0 added [ 603.474949][T11362] team0: Port device team_slave_1 added [ 603.532541][T11366] team0: Port device team_slave_1 added [ 603.572936][T11359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.572955][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.572981][T11359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.657244][T11359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.657262][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.657288][T11359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.668677][T11352] hsr_slave_0: entered promiscuous mode [ 603.670080][T11352] hsr_slave_1: entered promiscuous mode [ 603.671013][T11352] debugfs: 'hsr0' already exists in 'hsr' [ 603.671051][T11352] Cannot create hsr debugfs directory [ 603.721764][T11362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.721782][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.721807][T11362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.746927][T11366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.746944][T11366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.746969][T11366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.759287][T11353] hsr_slave_0: entered promiscuous mode [ 603.760763][T11353] hsr_slave_1: entered promiscuous mode [ 603.761698][T11353] debugfs: 'hsr0' already exists in 'hsr' [ 603.761720][T11353] Cannot create hsr debugfs directory [ 603.762780][T11362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.762792][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.762817][T11362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.769618][T11366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.769632][T11366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.769657][T11366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.944952][T11359] hsr_slave_0: entered promiscuous mode [ 603.946403][T11359] hsr_slave_1: entered promiscuous mode [ 603.947942][T11359] debugfs: 'hsr0' already exists in 'hsr' [ 603.947967][T11359] Cannot create hsr debugfs directory [ 604.102566][T11362] hsr_slave_0: entered promiscuous mode [ 604.104070][T11362] hsr_slave_1: entered promiscuous mode [ 604.105204][T11362] debugfs: 'hsr0' already exists in 'hsr' [ 604.105229][T11362] Cannot create hsr debugfs directory [ 604.160600][T11366] hsr_slave_0: entered promiscuous mode [ 604.161994][T11366] hsr_slave_1: entered promiscuous mode [ 604.163012][T11366] debugfs: 'hsr0' already exists in 'hsr' [ 604.163036][T11366] Cannot create hsr debugfs directory [ 605.419889][T11352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 621.316250][T10855] Bluetooth: hci6: command tx timeout [ 621.316948][T10855] Bluetooth: hci7: command tx timeout [ 621.317242][T10855] Bluetooth: hci2: command tx timeout [ 621.317543][T10855] Bluetooth: hci9: command tx timeout [ 621.317851][T10855] Bluetooth: hci8: command tx timeout [ 623.376755][ T5602] Bluetooth: hci8: command tx timeout [ 623.376790][ T5602] Bluetooth: hci9: command tx timeout [ 623.376811][ T5602] Bluetooth: hci2: command tx timeout [ 623.376829][ T5602] Bluetooth: hci7: command tx timeout [ 623.376847][ T5602] Bluetooth: hci6: command tx timeout [ 625.628974][T10855] Bluetooth: hci6: command tx timeout [ 625.629013][T10855] Bluetooth: hci7: command tx timeout [ 625.629036][T10855] Bluetooth: hci2: command tx timeout [ 625.629057][T10855] Bluetooth: hci9: command tx timeout [ 625.629077][T10855] Bluetooth: hci8: command tx timeout [ 625.630269][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.630337][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.376209][ T5602] Bluetooth: hci8: command tx timeout [ 628.376249][ T5602] Bluetooth: hci9: command tx timeout [ 628.376271][ T5602] Bluetooth: hci2: command tx timeout [ 628.376292][ T5602] Bluetooth: hci7: command tx timeout [ 628.376313][ T5602] Bluetooth: hci6: command tx timeout [ 628.380854][T11352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 646.856730][T11356] Bluetooth: hci5: command 0x0406 tx timeout [ 686.761039][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.761141][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.814575][T11356] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 687.929018][T11356] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 687.941765][T11356] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 687.954581][T11356] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 687.964086][T11356] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 688.198637][T11356] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 688.259148][T11356] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 688.272970][T11356] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 688.293628][T11356] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 688.319717][T11356] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 688.502012][T11356] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 688.577511][T11356] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 688.597410][T11356] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 688.609135][T11356] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 688.616859][T11356] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 689.854052][T11356] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 690.056251][T11356] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 690.069241][T11356] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 690.073705][T11356] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 690.074558][T11356] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 690.799297][T11356] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 690.854047][T11356] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 691.394441][T11356] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 691.395589][T11356] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 691.405363][T11356] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 693.786322][T11356] Bluetooth: hci10: command tx timeout [ 693.787085][T11356] Bluetooth: hci11: command tx timeout [ 693.787413][T11356] Bluetooth: hci12: command tx timeout [ 693.787717][T11356] Bluetooth: hci13: command tx timeout [ 693.788004][T11356] Bluetooth: hci14: command tx timeout [ 695.853188][T10855] Bluetooth: hci14: command tx timeout [ 695.853231][T10855] Bluetooth: hci13: command tx timeout [ 695.853256][T10855] Bluetooth: hci12: command tx timeout [ 695.853278][T10855] Bluetooth: hci11: command tx timeout [ 695.853300][T10855] Bluetooth: hci10: command tx timeout [ 723.667788][T10855] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 723.720115][T10855] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 723.728839][T10855] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 723.731550][T10855] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 723.732455][T10855] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 735.170620][T11356] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 735.214524][T11356] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 735.225132][T11356] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 735.247594][T11356] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 735.250219][T11356] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 747.195711][T10855] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 747.237203][T10855] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 747.260019][T10855] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 747.261467][T10855] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 747.262258][T10855] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 747.883205][ T5602] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 747.913972][T11355] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 747.988299][T11355] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 747.996480][T11355] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 747.998041][ T5602] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 748.007039][ T5602] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 748.007737][ T5602] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 748.029622][ T5602] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 748.086947][T11355] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 748.546474][T10855] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 784.859703][T10855] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 784.899555][T10855] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 784.904160][T10855] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 784.912483][T10855] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 784.913499][T10855] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 795.885954][T10855] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 795.937964][T10855] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 795.941572][T10855] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 795.942966][T10855] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 795.943670][T10855] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 801.996148][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 802.302703][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1933/3:b..l P29/3:b..l [ 802.311596][ C1] rcu: (detected by 1, t=10533 jiffies, g=35913, q=4603 ncpus=2) [ 802.319402][ C1] task:ktimers/1 state:D stack:23016 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 802.331406][ C1] Call Trace: [ 802.334689][ C1] [ 802.337625][ C1] __schedule+0x16d9/0x5700 [ 802.342144][ C1] ? __lock_acquire+0x6df/0x2e40 [ 802.347109][ C1] ? __pfx___schedule+0x10/0x10 [ 802.351990][ C1] schedule_rtlock+0x30/0x70 [ 802.356589][ C1] rtlock_slowlock_locked+0x35c9/0x3c20 [ 802.362166][ C1] ? tasklet_action_common+0x31c/0x600 [ 802.367639][ C1] ? rtlock_slowlock_locked+0x2ab/0x3c20 [ 802.373292][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 802.379211][ C1] ? rcu_is_watching+0x16/0xb0 [ 802.383995][ C1] rt_spin_lock+0x165/0x400 [ 802.388516][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 802.393551][ C1] ? __local_bh_disable_ip+0x3d/0x420 [ 802.398933][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 802.405361][ C1] cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 802.411610][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 802.418037][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 802.424736][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 802.430389][ C1] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 802.436214][ C1] cfg80211_inform_bss_data+0x263/0x3cc0 [ 802.441856][ C1] ? ieee80211_rx_handlers+0xc862/0xc8d0 [ 802.447515][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 802.453591][ C1] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 802.459165][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 802.464983][ C1] ? lock_acquire+0x115/0x350 [ 802.469681][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 802.475068][ C1] ? __lock_acquire+0x6df/0x2e40 [ 802.480014][ C1] ? __lock_acquire+0x6df/0x2e40 [ 802.485002][ C1] ? __lock_acquire+0x6df/0x2e40 [ 802.489956][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 802.496038][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 802.501854][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 802.507503][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 802.513677][ C1] ? rt_spin_unlock+0x159/0x200 [ 802.518542][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 802.524357][ C1] ieee80211_scan_rx+0x552/0xa40 [ 802.529309][ C1] ieee80211_rx_list+0x2d23/0x3b40 [ 802.534455][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 802.539925][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 802.545756][ C1] ? lock_acquire+0x115/0x350 [ 802.550447][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 802.556102][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 802.561144][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 802.566091][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 802.571559][ C1] ? skb_dequeue+0x11a/0x150 [ 802.576154][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 802.582156][ C1] tasklet_action_common+0x31c/0x600 [ 802.587458][ C1] handle_softirqs+0x1da/0x6d0 [ 802.592236][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 802.597268][ C1] run_ktimerd+0x6a/0x100 [ 802.601604][ C1] smpboot_thread_fn+0x565/0xa70 [ 802.606550][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 802.611590][ C1] kthread+0x38b/0x470 [ 802.615700][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 802.621166][ C1] ? __pfx_kthread+0x10/0x10 [ 802.625766][ C1] ret_from_fork+0x514/0xb70 [ 802.630363][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 802.635472][ C1] ? __switch_to+0xc89/0x1420 [ 802.640161][ C1] ? __pfx_kthread+0x10/0x10 [ 802.644753][ C1] ret_from_fork_asm+0x1a/0x30 [ 802.649536][ C1] [ 802.652558][ C1] task:kworker/u8:14 state:R running task stack:14592 pid:1933 tgid:1933 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 802.666128][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 802.672388][ C1] Call Trace: [ 802.675661][ C1] [ 802.678596][ C1] __schedule+0x16d9/0x5700 [ 802.683145][ C1] ? __pfx___schedule+0x10/0x10 [ 802.688016][ C1] ? __lock_acquire+0x6df/0x2e40 [ 802.692984][ C1] preempt_schedule_irq+0x4b/0x90 [ 802.698022][ C1] irqentry_exit+0x14f/0x910 [ 802.702614][ C1] ? trace_irq_disable+0x3b/0x140 [ 802.707657][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.713638][ C1] RIP: 0010:deref_stack_reg+0xa/0x220 [ 802.719016][ C1] Code: ba 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 10 48 89 d3 49 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff [ 802.738621][ C1] RSP: 0018:ffffc900070068c8 EFLAGS: 00000283 [ 802.744689][ C1] RAX: fffffffffffffff0 RBX: ffffffff90d99b06 RCX: 0000000000000000 [ 802.752660][ C1] RDX: ffffc900070069e8 RSI: ffffc90007007ad0 RDI: ffffc900070069a8 [ 802.760635][ C1] RBP: 1ffffffff21b3361 R08: ffffc90007007ad0 R09: 0000000000000000 [ 802.768614][ C1] R10: ffffc900070069f8 R11: fffff52000e00d41 R12: dffffc0000000000 [ 802.776587][ C1] R13: ffffffff90d99b07 R14: ffffc900070069a8 R15: ffffc900070069f0 [ 802.784590][ C1] unwind_next_frame+0x19bd/0x2550 [ 802.789721][ C1] ? cfg80211_wiphy_work+0x29e/0x420 [ 802.795019][ C1] ? unwind_next_frame+0x8f/0x2550 [ 802.800157][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 802.806320][ C1] arch_stack_walk+0x11b/0x150 [ 802.811134][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 802.816852][ C1] stack_trace_save+0xa9/0x100 [ 802.821628][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 802.826985][ C1] ? __lock_acquire+0x6df/0x2e40 [ 802.831905][ C1] kasan_save_track+0x3e/0x80 [ 802.836564][ C1] ? kasan_save_track+0x3e/0x80 [ 802.841413][ C1] ? kasan_save_free_info+0x40/0x50 [ 802.846590][ C1] ? __kasan_slab_free+0x5c/0x80 [ 802.851529][ C1] ? kfree+0x1c5/0x6d0 [ 802.855575][ C1] ? ieee80211_inform_bss+0xbda/0x10d0 [ 802.861011][ C1] ? cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 802.867420][ C1] ? cfg80211_inform_bss_data+0x263/0x3cc0 [ 802.873224][ C1] ? cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 802.879445][ C1] ? ieee80211_bss_info_update+0x791/0xa50 [ 802.885229][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 802.891542][ C1] ? ieee80211_iface_work+0x78a/0x1010 [ 802.897000][ C1] ? cfg80211_wiphy_work+0x29e/0x420 [ 802.902297][ C1] kasan_save_free_info+0x40/0x50 [ 802.907316][ C1] __kasan_slab_free+0x5c/0x80 [ 802.912064][ C1] kfree+0x1c5/0x6d0 [ 802.915968][ C1] ? ieee80211_inform_bss+0xbda/0x10d0 [ 802.921437][ C1] ieee80211_inform_bss+0xbda/0x10d0 [ 802.926711][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 802.932494][ C1] ? rt_spin_lock+0x210/0x400 [ 802.937158][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 802.942945][ C1] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 802.949170][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 802.955580][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 802.962249][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x48f0 [ 802.968384][ C1] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 802.974176][ C1] cfg80211_inform_bss_data+0x263/0x3cc0 [ 802.979798][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 802.985875][ C1] ? __lock_acquire+0x6df/0x2e40 [ 802.990804][ C1] ? cfg80211_defragment_element+0x3e/0x360 [ 802.996681][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 803.002731][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 803.008519][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 803.014133][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 803.020265][ C1] ? sta_info_get+0x4f/0x300 [ 803.024839][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 803.031065][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 803.037208][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 803.043426][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 803.049921][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 803.055734][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 803.061536][ C1] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 803.066819][ C1] ? reacquire_held_locks+0x117/0x1a0 [ 803.072185][ C1] ? rt_spin_unlock+0x165/0x200 [ 803.077024][ C1] ieee80211_iface_work+0x78a/0x1010 [ 803.082308][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 803.087422][ C1] ? process_scheduled_works+0x97a/0x1630 [ 803.093126][ C1] process_scheduled_works+0xc3d/0x1630 [ 803.098669][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 803.104630][ C1] ? assign_work+0x3cf/0x5d0 [ 803.109237][ C1] worker_thread+0xa47/0xfb0 [ 803.113835][ C1] ? __kthread_parkme+0x71/0x1f0 [ 803.118813][ C1] kthread+0x38b/0x470 [ 803.122888][ C1] ? __pfx_worker_thread+0x10/0x10 [ 803.128015][ C1] ? __pfx_kthread+0x10/0x10 [ 803.132611][ C1] ret_from_fork+0x514/0xb70 [ 803.137181][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 803.142274][ C1] ? __switch_to+0xc89/0x1420 [ 803.146936][ C1] ? __pfx_kthread+0x10/0x10 [ 803.151507][ C1] ret_from_fork_asm+0x1a/0x30 [ 803.156257][ C1] [ 803.159279][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10577 jiffies! g35913 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 803.171254][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=37928 [ 803.179150][ C1] rcu: rcu_preempt kthread starved for 10618 jiffies! g35913 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1 [ 803.190168][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 803.200136][ C1] rcu: RCU grace-period kthread stack dump: [ 803.206016][ C1] task:rcu_preempt state:I stack:27688 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 803.217939][ C1] Call Trace: [ 803.221219][ C1] [ 803.224155][ C1] __schedule+0x16d9/0x5700 [ 803.228695][ C1] ? __pfx___schedule+0x10/0x10 [ 803.233545][ C1] ? lock_acquire+0x115/0x350 [ 803.238238][ C1] ? schedule+0x90/0x2b0 [ 803.242490][ C1] schedule+0x164/0x2b0 [ 803.246654][ C1] schedule_timeout+0x152/0x2c0 [ 803.251504][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 803.256879][ C1] ? __pfx_process_timeout+0x10/0x10 [ 803.262178][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 803.268081][ C1] ? prepare_to_swait_event+0x322/0x350 [ 803.273654][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 803.278532][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 803.284353][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 803.289654][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 803.295470][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 803.300087][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 803.305311][ C1] ? __kthread_parkme+0x71/0x1f0 [ 803.310274][ C1] ? __kthread_parkme+0x199/0x1f0 [ 803.315313][ C1] kthread+0x38b/0x470 [ 803.319384][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 803.324586][ C1] ? __pfx_kthread+0x10/0x10 [ 803.329181][ C1] ret_from_fork+0x514/0xb70 [ 803.333791][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 803.338906][ C1] ? __switch_to+0xc89/0x1420 [ 803.343603][ C1] ? __pfx_kthread+0x10/0x10 [ 803.348196][ C1] ret_from_fork_asm+0x1a/0x30 [ 803.352976][ C1] [ 803.355993][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 803.362323][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 803.373356][ C1] Tainted: [L]=SOFTLOCKUP [ 803.377684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.387736][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 803.393376][ C1] Code: 8c 62 02 e9 13 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 cb 13 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 803.412984][ C1] RSP: 0018:ffffc900001d7e40 EFLAGS: 00000246 [ 803.419056][ C1] RAX: 0000000000570435 RBX: ffffffff819a6770 RCX: 8000000000000001 [ 803.427030][ C1] RDX: 0000000000000001 RSI: ffffffff8d8c9ed3 RDI: ffffffff8bcc2180 [ 803.435007][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8733e9b R09: 1ffff110170e67d3 [ 803.442976][ C1] R10: dffffc0000000000 R11: ffffed10170e67d4 R12: 0000000000000000 [ 803.450946][ C1] R13: 1ffff110039db000 R14: 1ffff9200003afd0 R15: dffffc0000000000 [ 803.458952][ C1] FS: 0000000000000000(0000) GS:ffff888125cd4000(0000) knlGS:0000000000000000 [ 803.467883][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.474469][ C1] CR2: 00007f54ec70e517 CR3: 000000004296c000 CR4: 00000000003526f0 [ 803.482448][ C1] Call Trace: [ 803.485736][ C1] [ 803.488663][ C1] default_idle+0x9/0x20 [ 803.492920][ C1] default_idle_call+0x72/0xb0 [ 803.497690][ C1] do_idle+0x2e0/0x540 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 803.501779][ C1] ? __pfx_do_idle+0x10/0x10 [ 803.506395][ C1] ? do_idle+0x4d1/0x540 [ 803.510661][ C1] cpu_startup_entry+0x43/0x60 [ 803.515431][ C1] start_secondary+0x101/0x110 [ 803.520206][ C1] common_startup_64+0x13e/0x157 [ 803.525161][ C1]