last executing test programs: 1m7.322262136s ago: executing program 3 (id=440): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m6.29343727s ago: executing program 3 (id=441): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000002c0)={0x0, 0x10, 0x0, 0x7, "0f9d0000001d00100000a821008000000c00"}) 1m6.166495202s ago: executing program 3 (id=442): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) 1m4.614333139s ago: executing program 3 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0x80000000000003) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1) 1m2.002443212s ago: executing program 1 (id=450): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m1.999463182s ago: executing program 3 (id=451): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002940)=0x6) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1m1.015353161s ago: executing program 1 (id=452): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) 59.666383707s ago: executing program 1 (id=453): socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000019840), 0x4) sendmsg$key(r4, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 57.402195395s ago: executing program 3 (id=456): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f00000004c0), 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000500)={0x3, 0x1, 0x0}) r0 = syz_clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x2}, 0xa0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40400d0}, 0x200400d0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000780)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) nanosleep(&(0x7f00000009c0)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000a00)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "40c000180000000000000000010000010000000000000000"}}}, 0x0) 54.417737375s ago: executing program 32 (id=456): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f00000004c0), 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000500)={0x3, 0x1, 0x0}) r0 = syz_clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x2}, 0xa0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40400d0}, 0x200400d0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000780)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) nanosleep(&(0x7f00000009c0)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000a00)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "40c000180000000000000000010000010000000000000000"}}}, 0x0) 54.404895566s ago: executing program 1 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0x80000000000003) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1) 50.362400393s ago: executing program 2 (id=466): syz_usb_connect(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0023000069"], 0x0) 49.865342713s ago: executing program 1 (id=467): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_012={0x1, 0x2, 0x3, "8e"}, @local=@item_012={0x1, 0x2, 0x3, '|'}]}}, 0x0}, 0x0) 46.790400033s ago: executing program 1 (id=470): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20842, 0x63) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000540)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000580)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 46.726324589s ago: executing program 2 (id=471): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x40, 0x80000) 46.077852854s ago: executing program 33 (id=470): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20842, 0x63) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000540)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000580)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 44.575690455s ago: executing program 2 (id=473): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x2180, 0x0) setuid(0xee01) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 44.459964697s ago: executing program 2 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0x80000000000003) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1) 43.484242015s ago: executing program 2 (id=475): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002940)=0x6) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 40.798337226s ago: executing program 2 (id=478): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000005c0)) 40.384054088s ago: executing program 34 (id=478): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000005c0)) 23.619383972s ago: executing program 6 (id=479): prlimit64(0x0, 0xe, &(0x7f0000002040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000020c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d18000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000002140), 0x0, 0x0) read$msr(r2, &(0x7f0000002180)=""/102392, 0x18ff8) getpgid(r0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="02f8", 0x2}, {&(0x7f0000000180)="0300", 0x2}], 0x2) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 21.536328442s ago: executing program 6 (id=488): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000400)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000019400)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f000001b440)='./mnt/fillfile\x00', 0x42, 0x9f) write(r3, &(0x7f000001b480)="000102", 0x3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ptrace$pokeuser(0x6, r5, 0x388, 0x7fffffff) ptrace$pokeuser(0x6, r5, 0x358, 0x4000000000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x28981ff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 19.660643692s ago: executing program 6 (id=490): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000003cc0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000004240)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000004380)=""/72, 0x48, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r0, &(0x7f0000004400)=[{&(0x7f0000004440)="0e000000", 0x4}, {&(0x7f0000004480), 0x1000000}], 0x2) 18.888927261s ago: executing program 5 (id=492): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000240), 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000b4f000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x8015) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.565735854s ago: executing program 5 (id=493): ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f0000001580)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)={0x24, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000017c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001800)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001840)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001880)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000018c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001900)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f000001a900)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f000001a940)={&(0x7f000001a980)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f000001aa00)={0x0, 0x0, &(0x7f000001aa40)={&(0x7f000001aa80)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4008090) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 15.758363797s ago: executing program 0 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r2, &(0x7f0000000780)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)) 13.246296611s ago: executing program 0 (id=498): r0 = syz_open_dev$evdev(&(0x7f0000000640), 0x1, 0x80400) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000740)=""/218) 11.622431185s ago: executing program 0 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019480)=0x80000000000003) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1) 11.411679576s ago: executing program 5 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000009bc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000022bc0)=0x7) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000800)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000880)='8', 0x1) unshare(0x2e000480) 9.99187618s ago: executing program 0 (id=501): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.70150586s ago: executing program 6 (id=503): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000c40)={0x2001, 0x200, 0x7ffffffe, 0x4, 0xfffffffb, 0x2}) 8.270285884s ago: executing program 35 (id=503): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000c40)={0x2001, 0x200, 0x7ffffffe, 0x4, 0xfffffffb, 0x2}) 8.250136976s ago: executing program 4 (id=504): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x70, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000500)={0xfff, 0x8}) 8.00631484s ago: executing program 4 (id=505): socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019340)=0x80000000000003) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000019840), 0x4) sendmsg$key(r3, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 7.037125319s ago: executing program 4 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000000780)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)) 4.599586555s ago: executing program 5 (id=507): socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket(0x15, 0x5, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f00000001c0)=""/1, &(0x7f0000000200)=0xf002) 2.929157844s ago: executing program 4 (id=508): landlock_create_ruleset(&(0x7f0000000380)={0x2001, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x30, 0x0) 1.666107191s ago: executing program 4 (id=509): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019480)=0x80000000000003) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/225, 0xe1}], 0x1) 279.927951ms ago: executing program 0 (id=510): syz_open_dev$char_usb(0xc, 0xb4, 0x0) 274.154492ms ago: executing program 4 (id=512): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 166.397683ms ago: executing program 5 (id=513): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004540)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000004c00)='dctcp', 0x5) connect$inet(r1, &(0x7f0000004c40)={0x2, 0x4e21, @local}, 0x10) 132.632606ms ago: executing program 0 (id=514): socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019340)=0x80000000000003) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000019840), 0x4) sendmsg$key(r3, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 0s ago: executing program 5 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000009bc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000022bc0)=0x7) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000800)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000880)='8', 0x1) unshare(0x2e000480) kernel console output (not intermixed with test programs): rog (id 4) dev syz_tun, expect packet loss! [ 109.008950][ T6127] Option '.nserror' to dns_resolver key: bad/missing value [ 109.184774][ T5842] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 109.543024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 110.006322][ T6139] FAULT_INJECTION: forcing a failure. [ 110.006322][ T6139] name failslab, interval 1, probability 0, space 0, times 1 [ 110.019388][ T6139] CPU: 0 PID: 6139 Comm: syz.2.76 Not tainted syzkaller #0 [ 110.026617][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 110.036709][ T6139] Call Trace: [ 110.040003][ T6139] [ 110.042950][ T6139] dump_stack_lvl+0x18c/0x250 [ 110.047675][ T6139] ? asm_sysvec_call_function_single+0x1a/0x20 [ 110.053863][ T6139] ? show_regs_print_info+0x20/0x20 [ 110.059089][ T6139] ? asm_sysvec_call_function_single+0x1a/0x20 [ 110.065288][ T6139] should_fail_ex+0x394/0x4c0 [ 110.069994][ T6139] should_failslab+0x9/0x20 [ 110.074511][ T6139] slab_pre_alloc_hook+0x59/0x300 [ 110.079556][ T6139] kmem_cache_alloc+0x5a/0x2d0 [ 110.084333][ T6139] ? copy_utsname+0x11b/0x430 [ 110.089035][ T6139] copy_utsname+0x11b/0x430 [ 110.093562][ T6139] create_new_namespaces+0x17b/0x700 [ 110.098866][ T6139] ? bpf_lsm_capable+0x9/0x10 [ 110.103563][ T6139] unshare_nsproxy_namespaces+0x11a/0x160 [ 110.109305][ T6139] ksys_unshare+0x4fa/0x8f0 [ 110.113838][ T6139] ? sighand_ctor+0x50/0x50 [ 110.118364][ T6139] ? lock_chain_count+0x20/0x20 [ 110.123228][ T6139] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 110.129229][ T6139] ? syscall_enter_from_user_mode+0x25/0x80 [ 110.135242][ T6139] __x64_sys_unshare+0x38/0x40 [ 110.140036][ T6139] do_syscall_64+0x55/0xb0 [ 110.144469][ T6139] ? clear_bhb_loop+0x40/0x90 [ 110.149165][ T6139] ? clear_bhb_loop+0x40/0x90 [ 110.153951][ T6139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.159875][ T6139] RIP: 0033:0x7f5470d9fb19 [ 110.164313][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.183936][ T6139] RSP: 002b:00007f5471c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 110.192367][ T6139] RAX: ffffffffffffffda RBX: 00007f5471026090 RCX: 00007f5470d9fb19 [ 110.200353][ T6139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 110.208338][ T6139] RBP: 00007f5470e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 110.216318][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.224297][ T6139] R13: 00007f5471026128 R14: 00007f5471026090 R15: 00007ffedab40218 [ 110.232298][ T6139] [ 110.743452][ T5842] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 110.752892][ T6120] ceph: No mds server is up or the cluster is laggy [ 111.002994][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.202987][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 111.236713][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 111.290983][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 111.361134][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.459189][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 111.546315][ T8] usb 2-1: config 1 has no interface number 0 [ 111.604354][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 111.642824][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.670231][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 111.883269][ T8] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 111.920772][ T8] snd_usb_pod 2-1:1.1: invalid control EP [ 111.948872][ T8] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 111.965750][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 112.355013][ T8] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 114.124405][ T8] usb 2-1: USB disconnect, device number 3 [ 114.266083][ T5791] Bluetooth: unknown link type 210 [ 114.271378][ T5791] Bluetooth: hci0: connection err: -111 [ 114.273852][ T6165] loop2: detected capacity change from 0 to 7 [ 114.355416][ T6165] Dev loop2: unable to read RDB block 7 [ 114.361108][ T6165] loop2: unable to read partition table [ 114.382795][ T6165] loop2: partition table beyond EOD, truncated [ 114.392340][ T6165] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 114.425943][ T6168] block device autoloading is deprecated and will be removed. [ 114.501575][ T6168] md: md3 stopped. [ 114.957206][ T6175] warning: `syz.2.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.673414][ T6178] Cannot find add_set index 2 as target [ 116.312863][ T6160] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.319252][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.171939][ T6160] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.182698][ T6160] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.190822][ T6160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.197387][ T6160] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.206652][ T6160] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.213579][ T6160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.219539][ T6160] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.231643][ T6160] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.240015][ T6160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.246394][ T6160] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.255733][ T6160] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.305386][ T5152] Dev loop2: unable to read RDB block 7 [ 117.311114][ T5152] loop2: unable to read partition table [ 117.317108][ T5152] loop2: partition table beyond EOD, truncated [ 118.627413][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.708007][ T5167] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.372785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.983095][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.989553][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.990297][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.174703][ T6195] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.722845][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.503285][ T6200] Cannot find add_set index 2 as target [ 121.932779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.072803][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.078844][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.082765][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.492776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.712961][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.713395][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.719000][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.532904][ T6038] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 125.771286][ T6038] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.920933][ T6038] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.082159][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.090668][ T6038] usb 3-1: Product: syz [ 126.095154][ T6038] usb 3-1: Manufacturer: syz [ 126.099763][ T6038] usb 3-1: SerialNumber: syz [ 126.107844][ T6038] usb 3-1: config 0 descriptor?? [ 126.387260][ T6234] Cannot find add_set index 2 as target [ 127.462915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 127.872864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.817102][ T28] usb 3-1: USB disconnect, device number 3 [ 128.992825][ T6038] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.487134][ T6038] usb 4-1: Using ep0 maxpacket: 16 [ 130.510277][ T6038] usb 4-1: device descriptor read/all, error -71 [ 130.563371][ T6255] FAULT_INJECTION: forcing a failure. [ 130.563371][ T6255] name failslab, interval 1, probability 0, space 0, times 0 [ 130.592806][ T6255] CPU: 1 PID: 6255 Comm: syz.1.112 Not tainted syzkaller #0 [ 130.600136][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 130.610205][ T6255] Call Trace: [ 130.613518][ T6255] [ 130.616475][ T6255] dump_stack_lvl+0x18c/0x250 [ 130.621205][ T6255] ? show_regs_print_info+0x20/0x20 [ 130.626424][ T6255] ? load_image+0x420/0x420 [ 130.630944][ T6255] ? __might_sleep+0xe0/0xe0 [ 130.635550][ T6255] ? __lock_acquire+0x7eb0/0x7eb0 [ 130.640601][ T6255] should_fail_ex+0x394/0x4c0 [ 130.645304][ T6255] should_failslab+0x9/0x20 [ 130.649907][ T6255] slab_pre_alloc_hook+0x59/0x300 [ 130.654950][ T6255] ? __nla_validate+0x50/0x50 [ 130.659649][ T6255] ? nf_tables_newtable+0x43f/0x17e0 [ 130.664960][ T6255] __kmem_cache_alloc_node+0x53/0x260 [ 130.670350][ T6255] ? nf_tables_newtable+0x43f/0x17e0 [ 130.675658][ T6255] kmalloc_trace+0x2a/0xe0 [ 130.680103][ T6255] nf_tables_newtable+0x43f/0x17e0 [ 130.685237][ T6255] ? mutex_unlock+0x10/0x10 [ 130.689767][ T6255] nfnetlink_rcv+0x1133/0x2490 [ 130.694585][ T6255] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 130.700214][ T6255] ? __lock_acquire+0x7eb0/0x7eb0 [ 130.705264][ T6255] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.710480][ T6255] netlink_unicast+0x856/0x9e0 [ 130.715284][ T6255] netlink_sendmsg+0x8d0/0xbf0 [ 130.720078][ T6255] ? netlink_getsockopt+0x590/0x590 [ 130.725296][ T6255] ? apparmor_socket_sendmsg+0x8e/0x330 [ 130.730865][ T6255] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 130.736169][ T6255] ? security_socket_sendmsg+0x80/0xa0 [ 130.741657][ T6255] ? netlink_getsockopt+0x590/0x590 [ 130.746876][ T6255] ____sys_sendmsg+0x61b/0x980 [ 130.751660][ T6255] ? __asan_memset+0x22/0x40 [ 130.756285][ T6255] ? __sys_sendmsg_sock+0x30/0x30 [ 130.761330][ T6255] ? __import_iovec+0x5f2/0x850 [ 130.766200][ T6255] ? import_iovec+0x73/0xa0 [ 130.770701][ T6255] ___sys_sendmsg+0x2a6/0x360 [ 130.775380][ T6255] ? __sys_sendmsg+0x2b0/0x2b0 [ 130.780173][ T6255] __se_sys_sendmsg+0x1d0/0x2c0 [ 130.785019][ T6255] ? __x64_sys_sendmsg+0x80/0x80 [ 130.789963][ T6255] ? lockdep_hardirqs_on+0x98/0x150 [ 130.795155][ T6255] do_syscall_64+0x55/0xb0 [ 130.799571][ T6255] ? clear_bhb_loop+0x40/0x90 [ 130.804242][ T6255] ? clear_bhb_loop+0x40/0x90 [ 130.808917][ T6255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.814803][ T6255] RIP: 0033:0x7f93a2b9fb19 [ 130.819232][ T6255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.838835][ T6255] RSP: 002b:00007f93a0df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.847246][ T6255] RAX: ffffffffffffffda RBX: 00007f93a2e25fa0 RCX: 00007f93a2b9fb19 [ 130.855217][ T6255] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 130.863180][ T6255] RBP: 00007f93a2c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 130.871141][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.879104][ T6255] R13: 00007f93a2e26038 R14: 00007f93a2e25fa0 R15: 00007ffcf3e4b878 [ 130.887084][ T6255] [ 131.762303][ T6266] Cannot find add_set index 2 as target [ 132.846600][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 132.886878][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894185][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.184578][ T6038] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.382358][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.392269][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.404878][ T6038] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.414357][ T6038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.424771][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.432363][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.450559][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.459755][ T6038] usb 4-1: config 0 descriptor?? [ 133.465831][ T8] usb 3-1: Product: syz [ 133.474574][ T8] usb 3-1: Manufacturer: syz [ 133.479468][ T8] usb 3-1: SerialNumber: syz [ 133.486716][ T8] usb 3-1: config 0 descriptor?? [ 133.835881][ T6038] usbhid 4-1:0.0: can't add hid device: -71 [ 133.950116][ T6038] usbhid: probe of 4-1:0.0 failed with error -71 [ 134.084445][ T6038] usb 4-1: USB disconnect, device number 5 [ 134.132934][ T28] usb 1-1: device descriptor read/64, error -71 [ 134.406132][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.495271][ T6038] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.522872][ T5848] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.562863][ T28] usb 1-1: device descriptor read/64, error -71 [ 134.682923][ T28] usb usb1-port1: attempt power cycle [ 134.697001][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.702938][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 134.707930][ T6038] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 134.715337][ T5848] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 134.722157][ T6038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.730698][ T5848] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 134.730720][ T5848] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 134.730738][ T5848] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 134.730757][ T5848] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 134.730777][ T5848] usb 2-1: config 0 has no interface number 0 [ 134.730814][ T5848] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 134.730839][ T5848] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 134.730859][ T5848] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.730887][ T5848] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.730913][ T5848] usb 2-1: config 0 interface 125 has no altsetting 0 [ 134.730931][ T5848] usb 2-1: config 0 interface 125 has no altsetting 2 [ 134.735025][ T5848] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 134.764718][ T6038] usb 4-1: config 0 descriptor?? [ 134.772781][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.772803][ T5848] usb 2-1: Product: syz [ 134.772818][ T5848] usb 2-1: Manufacturer: syz [ 134.772831][ T5848] usb 2-1: SerialNumber: syz [ 134.797123][ T5848] usb 2-1: config 0 descriptor?? [ 134.881532][ T5848] usb 2-1: selecting invalid altsetting 2 [ 135.089239][ C1] usb 2-1: async_complete: urb error -71 [ 135.095082][ C1] usb 2-1: async_complete: urb error -71 [ 135.100785][ C1] usb 2-1: async_complete: urb error -71 [ 135.106508][ C1] usb 2-1: async_complete: urb error -71 [ 135.122243][ T5848] get_1284_register: usb error -71 [ 135.136843][ T5848] usb 2-1: USB disconnect, device number 5 [ 135.184665][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.215715][ T28] usb 1-1: device descriptor read/8, error -71 [ 135.287566][ T788] usb 3-1: USB disconnect, device number 4 [ 136.627778][ T6038] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 136.654730][ T6038] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 136.802757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.862771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 136.932325][ T6299] Cannot find add_set index 2 as target [ 137.583669][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 137.591813][ T6038] usb 4-1: USB disconnect, device number 6 [ 137.856352][ T6307] tipc: Started in network mode [ 137.861303][ T6307] tipc: Node identity 4, cluster identity 4711 [ 137.867932][ T6307] tipc: Node number set to 4 [ 140.723051][ T6321] misc userio: No port type given on /dev/userio [ 140.731571][ T6321] misc userio: The device must be registered before sending interrupts [ 141.840143][ T52] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 141.847976][ T52] Bluetooth: hci2: unexpected event for opcode 0x204b [ 141.913015][ T28] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.092921][ T28] usb 1-1: device descriptor read/64, error -71 [ 142.412784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 142.829468][ T6332] Cannot find add_set index 2 as target [ 142.843049][ T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.932938][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.042993][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 143.080302][ T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.092573][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.145591][ T788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.181196][ T28] usb 1-1: device descriptor read/64, error -71 [ 143.187942][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.215438][ T788] usb 3-1: Product: syz [ 143.219855][ T788] usb 3-1: Manufacturer: syz [ 143.239578][ T788] usb 3-1: SerialNumber: syz [ 143.314070][ T28] usb usb1-port1: attempt power cycle [ 145.914237][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 145.922875][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 145.930717][ T52] Bluetooth: hci2: hardware error 0x00 [ 146.530018][ T6339] tipc: Started in network mode [ 146.536124][ T6339] tipc: Node identity 4, cluster identity 4711 [ 146.542293][ T6339] tipc: Node number set to 4 [ 146.797794][ T788] usb 3-1: 0:2 : does not exist [ 146.834762][ T788] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 146.933150][ T788] usb 3-1: USB disconnect, device number 5 [ 147.060097][ T6335] udevd[6335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.778017][ T6355] misc userio: No port type given on /dev/userio [ 148.784728][ T6355] misc userio: The device must be registered before sending interrupts [ 148.873329][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 150.570945][ T6371] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.152'. [ 150.598302][ T6368] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.152'. [ 153.203741][ T6391] Cannot find add_set index 2 as target [ 153.723777][ T6393] FAULT_INJECTION: forcing a failure. [ 153.723777][ T6393] name failslab, interval 1, probability 0, space 0, times 0 [ 153.757494][ T6393] CPU: 0 PID: 6393 Comm: syz.3.159 Not tainted syzkaller #0 [ 153.764852][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 153.774926][ T6393] Call Trace: [ 153.778217][ T6393] [ 153.781162][ T6393] dump_stack_lvl+0x18c/0x250 [ 153.785870][ T6393] ? show_regs_print_info+0x20/0x20 [ 153.791091][ T6393] ? load_image+0x420/0x420 [ 153.795620][ T6393] ? __might_sleep+0xe0/0xe0 [ 153.800231][ T6393] ? __lock_acquire+0x7eb0/0x7eb0 [ 153.805284][ T6393] should_fail_ex+0x394/0x4c0 [ 153.809991][ T6393] should_failslab+0x9/0x20 [ 153.814518][ T6393] slab_pre_alloc_hook+0x59/0x300 [ 153.819564][ T6393] ? __nla_validate+0x50/0x50 [ 153.824277][ T6393] ? nf_tables_newtable+0x43f/0x17e0 [ 153.829602][ T6393] __kmem_cache_alloc_node+0x53/0x260 [ 153.835001][ T6393] ? nf_tables_newtable+0x43f/0x17e0 [ 153.840314][ T6393] kmalloc_trace+0x2a/0xe0 [ 153.844770][ T6393] nf_tables_newtable+0x43f/0x17e0 [ 153.849911][ T6393] ? mutex_unlock+0x10/0x10 [ 153.854449][ T6393] nfnetlink_rcv+0x1133/0x2490 [ 153.859271][ T6393] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 153.864907][ T6393] ? __lock_acquire+0x7eb0/0x7eb0 [ 153.869970][ T6393] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.875197][ T6393] netlink_unicast+0x856/0x9e0 [ 153.880011][ T6393] netlink_sendmsg+0x8d0/0xbf0 [ 153.884806][ T6393] ? netlink_getsockopt+0x590/0x590 [ 153.890024][ T6393] ? apparmor_socket_sendmsg+0x8e/0x330 [ 153.895602][ T6393] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 153.900909][ T6393] ? security_socket_sendmsg+0x80/0xa0 [ 153.906394][ T6393] ? netlink_getsockopt+0x590/0x590 [ 153.911616][ T6393] ____sys_sendmsg+0x61b/0x980 [ 153.916411][ T6393] ? __asan_memset+0x22/0x40 [ 153.921031][ T6393] ? __sys_sendmsg_sock+0x30/0x30 [ 153.926077][ T6393] ? __import_iovec+0x5f2/0x850 [ 153.930964][ T6393] ? import_iovec+0x73/0xa0 [ 153.935493][ T6393] ___sys_sendmsg+0x2a6/0x360 [ 153.940198][ T6393] ? __sys_sendmsg+0x2b0/0x2b0 [ 153.945032][ T6393] __se_sys_sendmsg+0x1d0/0x2c0 [ 153.949910][ T6393] ? __x64_sys_sendmsg+0x80/0x80 [ 153.954884][ T6393] ? lockdep_hardirqs_on+0x98/0x150 [ 153.960105][ T6393] do_syscall_64+0x55/0xb0 [ 153.964541][ T6393] ? clear_bhb_loop+0x40/0x90 [ 153.969248][ T6393] ? clear_bhb_loop+0x40/0x90 [ 153.973950][ T6393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.979865][ T6393] RIP: 0033:0x7f796199fb19 [ 153.984297][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.003921][ T6393] RSP: 002b:00007f796279c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.012358][ T6393] RAX: ffffffffffffffda RBX: 00007f7961c25fa0 RCX: 00007f796199fb19 [ 154.020352][ T6393] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 154.028341][ T6393] RBP: 00007f7961a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 154.036329][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.044314][ T6393] R13: 00007f7961c26038 R14: 00007f7961c25fa0 R15: 00007fff25745b08 [ 154.052322][ T6393] [ 155.025906][ T6038] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.104805][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 155.189444][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.162'. [ 155.198764][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 155.208214][ T6407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.162'. [ 155.273048][ T6038] usb 1-1: Using ep0 maxpacket: 16 [ 155.284894][ T6038] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.296523][ T6038] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.316487][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.323166][ T6038] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 155.332229][ T6038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.347643][ T6038] usb 1-1: config 0 descriptor?? [ 157.408777][ T6038] usbhid 1-1:0.0: can't add hid device: -71 [ 157.425103][ T6038] usbhid: probe of 1-1:0.0 failed with error -71 [ 157.445129][ T6038] usb 1-1: USB disconnect, device number 11 [ 158.850925][ T6425] Cannot find add_set index 2 as target [ 160.582851][ T6442] FAULT_INJECTION: forcing a failure. [ 160.582851][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 160.599752][ T6442] CPU: 0 PID: 6442 Comm: syz.0.174 Not tainted syzkaller #0 [ 160.603636][ T6441] FAULT_INJECTION: forcing a failure. [ 160.603636][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 160.607059][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 160.607109][ T6442] Call Trace: [ 160.607118][ T6442] [ 160.607125][ T6442] dump_stack_lvl+0x18c/0x250 [ 160.640873][ T6442] ? show_regs_print_info+0x20/0x20 [ 160.646112][ T6442] ? load_image+0x420/0x420 [ 160.650641][ T6442] ? __might_sleep+0xe0/0xe0 [ 160.655254][ T6442] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.660301][ T6442] should_fail_ex+0x394/0x4c0 [ 160.665017][ T6442] should_failslab+0x9/0x20 [ 160.669538][ T6442] slab_pre_alloc_hook+0x59/0x300 [ 160.674582][ T6442] ? nf_tables_newtable+0x43f/0x17e0 [ 160.679889][ T6442] __kmem_cache_alloc_node+0x53/0x260 [ 160.685277][ T6442] ? nf_tables_newtable+0x43f/0x17e0 [ 160.690582][ T6442] kmalloc_trace+0x2a/0xe0 [ 160.695014][ T6442] nf_tables_newtable+0x43f/0x17e0 [ 160.700146][ T6442] ? mutex_unlock+0x10/0x10 [ 160.704678][ T6442] nfnetlink_rcv+0x1133/0x2490 [ 160.709487][ T6442] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 160.715113][ T6442] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.720173][ T6442] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.725392][ T6442] netlink_unicast+0x856/0x9e0 [ 160.730197][ T6442] netlink_sendmsg+0x8d0/0xbf0 [ 160.734980][ T6442] ? netlink_getsockopt+0x590/0x590 [ 160.740184][ T6442] ? apparmor_socket_sendmsg+0x8e/0x330 [ 160.745749][ T6442] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 160.751055][ T6442] ? security_socket_sendmsg+0x80/0xa0 [ 160.756527][ T6442] ? netlink_getsockopt+0x590/0x590 [ 160.761735][ T6442] ____sys_sendmsg+0x61b/0x980 [ 160.766509][ T6442] ? __asan_memset+0x22/0x40 [ 160.771107][ T6442] ? __sys_sendmsg_sock+0x30/0x30 [ 160.776134][ T6442] ? __import_iovec+0x5f2/0x850 [ 160.780995][ T6442] ? import_iovec+0x73/0xa0 [ 160.785505][ T6442] ___sys_sendmsg+0x2a6/0x360 [ 160.790190][ T6442] ? __sys_sendmsg+0x2b0/0x2b0 [ 160.794995][ T6442] __se_sys_sendmsg+0x1d0/0x2c0 [ 160.799858][ T6442] ? __x64_sys_sendmsg+0x80/0x80 [ 160.804818][ T6442] ? lockdep_hardirqs_on+0x98/0x150 [ 160.810026][ T6442] do_syscall_64+0x55/0xb0 [ 160.814458][ T6442] ? clear_bhb_loop+0x40/0x90 [ 160.819150][ T6442] ? clear_bhb_loop+0x40/0x90 [ 160.823831][ T6442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.829732][ T6442] RIP: 0033:0x7fcec439fb19 [ 160.834153][ T6442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.853767][ T6442] RSP: 002b:00007fcec524c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.862194][ T6442] RAX: ffffffffffffffda RBX: 00007fcec4625fa0 RCX: 00007fcec439fb19 [ 160.870169][ T6442] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 160.878146][ T6442] RBP: 00007fcec4437b70 R08: 0000000000000000 R09: 0000000000000000 [ 160.886116][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.894096][ T6442] R13: 00007fcec4626038 R14: 00007fcec4625fa0 R15: 00007ffff2ec22c8 [ 160.902083][ T6442] [ 160.905105][ T6441] CPU: 1 PID: 6441 Comm: syz.3.176 Not tainted syzkaller #0 [ 160.912411][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 160.922460][ T6441] Call Trace: [ 160.925735][ T6441] [ 160.928662][ T6441] dump_stack_lvl+0x18c/0x250 [ 160.933344][ T6441] ? show_regs_print_info+0x20/0x20 [ 160.938539][ T6441] ? load_image+0x420/0x420 [ 160.943041][ T6441] ? __might_sleep+0xe0/0xe0 [ 160.947633][ T6441] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.952655][ T6441] ? node_tag_clear+0x1ec/0x310 [ 160.957510][ T6441] should_fail_ex+0x394/0x4c0 [ 160.962193][ T6441] should_failslab+0x9/0x20 [ 160.966688][ T6441] slab_pre_alloc_hook+0x59/0x300 [ 160.971708][ T6441] ? __kernfs_new_node+0xaa/0x7f0 [ 160.976730][ T6441] ? __kernfs_new_node+0xaa/0x7f0 [ 160.981749][ T6441] __kmem_cache_alloc_node+0x53/0x260 [ 160.987119][ T6441] ? __kernfs_new_node+0xaa/0x7f0 [ 160.992140][ T6441] __kmalloc_node_track_caller+0xa4/0x230 [ 160.997865][ T6441] ? format_decode+0x9b6/0x1400 [ 161.002717][ T6441] kstrdup+0x3b/0x80 [ 161.006612][ T6441] __kernfs_new_node+0xaa/0x7f0 [ 161.011464][ T6441] ? kernfs_new_node+0x260/0x260 [ 161.016403][ T6441] ? snprintf+0xe9/0x140 [ 161.020643][ T6441] ? vscnprintf+0x80/0x80 [ 161.024968][ T6441] kernfs_new_node+0x14c/0x260 [ 161.029736][ T6441] __kernfs_create_file+0x4b/0x2e0 [ 161.034845][ T6441] cgroup_addrm_files+0x810/0xd60 [ 161.039874][ T6441] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 161.046033][ T6441] ? mark_lock+0x94/0x320 [ 161.050367][ T6441] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 161.056350][ T6441] ? __local_bh_enable_ip+0x13a/0x1c0 [ 161.061717][ T6441] ? lockdep_hardirqs_on+0x98/0x150 [ 161.066913][ T6441] css_populate_dir+0x121/0x380 [ 161.071773][ T6441] cgroup_apply_control_enable+0x641/0xb00 [ 161.077589][ T6441] cgroup_mkdir+0xc83/0xe70 [ 161.082093][ T6441] ? css_task_iter_end+0x2c0/0x2c0 [ 161.087209][ T6441] ? kernfs_iop_permission+0x2c4/0x3b0 [ 161.092664][ T6441] ? css_task_iter_end+0x2c0/0x2c0 [ 161.097774][ T6441] kernfs_iop_mkdir+0x241/0x3e0 [ 161.102624][ T6441] vfs_mkdir+0x2a5/0x470 [ 161.106864][ T6441] do_mkdirat+0x1dc/0x450 [ 161.111188][ T6441] ? vfs_mkdir+0x470/0x470 [ 161.115606][ T6441] __x64_sys_mkdirat+0x89/0xa0 [ 161.120365][ T6441] do_syscall_64+0x55/0xb0 [ 161.124776][ T6441] ? clear_bhb_loop+0x40/0x90 [ 161.129455][ T6441] ? clear_bhb_loop+0x40/0x90 [ 161.134133][ T6441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.140021][ T6441] RIP: 0033:0x7f796199fb19 [ 161.144434][ T6441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.164034][ T6441] RSP: 002b:00007f796279c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 161.172445][ T6441] RAX: ffffffffffffffda RBX: 00007f7961c25fa0 RCX: 00007f796199fb19 [ 161.180409][ T6441] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 161.188374][ T6441] RBP: 00007f7961a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 161.196339][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.204305][ T6441] R13: 00007f7961c26038 R14: 00007f7961c25fa0 R15: 00007fff25745b08 [ 161.212281][ T6441] [ 161.234048][ T6441] cgroup: cgroup_addrm_files: failed to add usage_percpu, err=-12 [ 164.419127][ T6459] Cannot find add_set index 2 as target [ 169.282847][ T6038] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.518875][ T6038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.518923][ T6038] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.518946][ T6038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.580470][ T6038] usb 3-1: config 0 descriptor?? [ 169.977849][ T6038] usbhid 3-1:0.0: can't add hid device: -71 [ 169.977946][ T6038] usbhid: probe of 3-1:0.0 failed with error -71 [ 169.981280][ T6038] usb 3-1: USB disconnect, device number 6 [ 170.245327][ T6504] misc userio: No port type given on /dev/userio [ 170.245594][ T6504] misc userio: The device must be registered before sending interrupts [ 171.853000][ T6507] Cannot find add_set index 2 as target [ 171.986112][ T6038] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.237025][ T6521] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 176.975648][ T6545] Cannot find add_set index 2 as target [ 177.799849][ T6543] syz.3.207 (6543) used greatest stack depth: 20040 bytes left [ 179.674619][ T6561] FAULT_INJECTION: forcing a failure. [ 179.674619][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 179.732921][ T6561] CPU: 0 PID: 6561 Comm: syz.0.214 Not tainted syzkaller #0 [ 179.740256][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 179.750345][ T6561] Call Trace: [ 179.753640][ T6561] [ 179.756582][ T6561] dump_stack_lvl+0x18c/0x250 [ 179.761294][ T6561] ? show_regs_print_info+0x20/0x20 [ 179.766517][ T6561] ? load_image+0x420/0x420 [ 179.771043][ T6561] ? __might_sleep+0xe0/0xe0 [ 179.775656][ T6561] ? __lock_acquire+0x7eb0/0x7eb0 [ 179.780697][ T6561] ? node_tag_clear+0x1ec/0x310 [ 179.785573][ T6561] should_fail_ex+0x394/0x4c0 [ 179.790281][ T6561] should_failslab+0x9/0x20 [ 179.794809][ T6561] slab_pre_alloc_hook+0x59/0x300 [ 179.799859][ T6561] ? __kernfs_new_node+0xaa/0x7f0 [ 179.804911][ T6561] ? __kernfs_new_node+0xaa/0x7f0 [ 179.809960][ T6561] __kmem_cache_alloc_node+0x53/0x260 [ 179.815357][ T6561] ? __kernfs_new_node+0xaa/0x7f0 [ 179.820404][ T6561] __kmalloc_node_track_caller+0xa4/0x230 [ 179.826143][ T6561] ? format_decode+0x9b6/0x1400 [ 179.831015][ T6561] kstrdup+0x3b/0x80 [ 179.834932][ T6561] __kernfs_new_node+0xaa/0x7f0 [ 179.839815][ T6561] ? kernfs_new_node+0x260/0x260 [ 179.844783][ T6561] ? snprintf+0xe9/0x140 [ 179.849048][ T6561] ? vscnprintf+0x80/0x80 [ 179.853397][ T6561] kernfs_new_node+0x14c/0x260 [ 179.858193][ T6561] __kernfs_create_file+0x4b/0x2e0 [ 179.863331][ T6561] cgroup_addrm_files+0x810/0xd60 [ 179.868390][ T6561] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 179.874580][ T6561] ? mark_lock+0x94/0x320 [ 179.878935][ T6561] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 179.884944][ T6561] ? __local_bh_enable_ip+0x13a/0x1c0 [ 179.890340][ T6561] ? lockdep_hardirqs_on+0x98/0x150 [ 179.895567][ T6561] css_populate_dir+0x121/0x380 [ 179.900448][ T6561] cgroup_apply_control_enable+0x641/0xb00 [ 179.906293][ T6561] cgroup_mkdir+0xc83/0xe70 [ 179.910831][ T6561] ? css_task_iter_end+0x2c0/0x2c0 [ 179.915973][ T6561] ? kernfs_iop_permission+0x2c4/0x3b0 [ 179.921458][ T6561] ? css_task_iter_end+0x2c0/0x2c0 [ 179.926590][ T6561] kernfs_iop_mkdir+0x241/0x3e0 [ 179.931460][ T6561] vfs_mkdir+0x2a5/0x470 [ 179.935726][ T6561] do_mkdirat+0x1dc/0x450 [ 179.940081][ T6561] ? vfs_mkdir+0x470/0x470 [ 179.944527][ T6561] __x64_sys_mkdirat+0x89/0xa0 [ 179.949326][ T6561] do_syscall_64+0x55/0xb0 [ 179.953765][ T6561] ? clear_bhb_loop+0x40/0x90 [ 179.958462][ T6561] ? clear_bhb_loop+0x40/0x90 [ 179.963161][ T6561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.969072][ T6561] RIP: 0033:0x7fcec439fb19 [ 179.973502][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.993126][ T6561] RSP: 002b:00007fcec524c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 180.001559][ T6561] RAX: ffffffffffffffda RBX: 00007fcec4625fa0 RCX: 00007fcec439fb19 [ 180.009545][ T6561] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 180.017531][ T6561] RBP: 00007fcec4437b70 R08: 0000000000000000 R09: 0000000000000000 [ 180.025515][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.033495][ T6561] R13: 00007fcec4626038 R14: 00007fcec4625fa0 R15: 00007ffff2ec22c8 [ 180.041497][ T6561] [ 180.061119][ T6561] cgroup: cgroup_addrm_files: failed to add usage_percpu_user, err=-12 [ 182.245338][ T6579] Cannot find add_set index 2 as target [ 184.097494][ T52] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 184.103816][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.398826][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.218'. [ 184.408895][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 184.419798][ T6588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.218'. [ 184.682863][ T6583] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 189.542792][ T788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.582775][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.762842][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 189.774635][ T8] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 189.792858][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 189.812898][ T8] usb 3-1: config 0 has no interface number 0 [ 189.825160][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.828411][ T8] usb 3-1: config 0 interface 184 has no altsetting 0 [ 189.847245][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.849348][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 189.875576][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.894769][ T8] usb 3-1: Product: syz [ 189.907196][ T8] usb 3-1: Manufacturer: syz [ 189.913338][ T8] usb 3-1: SerialNumber: syz [ 189.920808][ T788] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.932166][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.952445][ T788] usb 4-1: Product: syz [ 189.972416][ T8] usb 3-1: config 0 descriptor?? [ 189.982564][ T788] usb 4-1: Manufacturer: syz [ 189.984758][ T8] smsc75xx v1.0.0 [ 189.987636][ T788] usb 4-1: SerialNumber: syz [ 193.733028][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 193.743897][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 193.755617][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 193.776424][ T8] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 193.821438][ T8] usb 3-1: USB disconnect, device number 8 [ 195.507406][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.522763][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.567840][ T788] usb 4-1: 0:2 : does not exist [ 195.604852][ T788] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 195.655791][ T788] usb 4-1: USB disconnect, device number 7 [ 195.708139][ T6614] udevd[6614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.244267][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 202.008491][ T6656] netlink: 'syz.0.237': attribute type 3 has an invalid length. [ 202.019261][ T6656] netlink: 3 bytes leftover after parsing attributes in process `syz.0.237'. [ 203.122917][ T6652] Cannot find add_set index 2 as target [ 207.392978][ T5867] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.596904][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 207.604257][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.632977][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.655456][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.665065][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.692853][ T5867] usb 2-1: Product: syz [ 207.697066][ T5867] usb 2-1: Manufacturer: syz [ 209.559497][ T5867] usb 2-1: SerialNumber: syz [ 209.946904][ T6685] Invalid ELF header magic: != ELF [ 212.704089][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 214.284697][ T5867] usb 2-1: 0:2 : does not exist [ 214.350825][ T5867] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 214.414904][ T5867] usb 2-1: USB disconnect, device number 6 [ 216.584126][ T6700] udevd[6700]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.144562][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.254'. [ 218.166116][ T6720] syzkaller0: entered promiscuous mode [ 218.171732][ T6720] syzkaller0: entered allmulticast mode [ 218.378706][ T6724] FAULT_INJECTION: forcing a failure. [ 218.378706][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 218.396805][ T6724] CPU: 0 PID: 6724 Comm: syz.3.257 Not tainted syzkaller #0 [ 218.404130][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 218.414209][ T6724] Call Trace: [ 218.417502][ T6724] [ 218.420448][ T6724] dump_stack_lvl+0x18c/0x250 [ 218.425161][ T6724] ? show_regs_print_info+0x20/0x20 [ 218.430403][ T6724] ? load_image+0x420/0x420 [ 218.434931][ T6724] ? __might_sleep+0xe0/0xe0 [ 218.439545][ T6724] ? __lock_acquire+0x7eb0/0x7eb0 [ 218.444587][ T6724] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 218.450413][ T6724] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 218.457116][ T6724] should_fail_ex+0x394/0x4c0 [ 218.461825][ T6724] should_failslab+0x9/0x20 [ 218.466347][ T6724] slab_pre_alloc_hook+0x59/0x300 [ 218.471391][ T6724] ? pcpu_alloc+0x11e7/0x1880 [ 218.476089][ T6724] ? mem_cgroup_css_alloc+0x561/0x15d0 [ 218.481570][ T6724] __kmem_cache_alloc_node+0x53/0x260 [ 218.486961][ T6724] ? mem_cgroup_css_alloc+0x561/0x15d0 [ 218.492441][ T6724] kmalloc_node_trace+0x26/0xe0 [ 218.497322][ T6724] mem_cgroup_css_alloc+0x561/0x15d0 [ 218.502646][ T6724] cgroup_apply_control_enable+0x3cc/0xb00 [ 218.508490][ T6724] cgroup_mkdir+0xc83/0xe70 [ 218.513023][ T6724] ? css_task_iter_end+0x2c0/0x2c0 [ 218.518170][ T6724] ? kernfs_iop_permission+0x2c4/0x3b0 [ 218.523672][ T6724] ? css_task_iter_end+0x2c0/0x2c0 [ 218.528807][ T6724] kernfs_iop_mkdir+0x241/0x3e0 [ 218.533681][ T6724] vfs_mkdir+0x2a5/0x470 [ 218.537949][ T6724] do_mkdirat+0x1dc/0x450 [ 218.542296][ T6724] ? vfs_mkdir+0x470/0x470 [ 218.546740][ T6724] __x64_sys_mkdirat+0x89/0xa0 [ 218.551528][ T6724] do_syscall_64+0x55/0xb0 [ 218.555964][ T6724] ? clear_bhb_loop+0x40/0x90 [ 218.560661][ T6724] ? clear_bhb_loop+0x40/0x90 [ 218.565359][ T6724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.571277][ T6724] RIP: 0033:0x7f796199fb19 [ 218.575715][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.595346][ T6724] RSP: 002b:00007f796279c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 218.603786][ T6724] RAX: ffffffffffffffda RBX: 00007f7961c25fa0 RCX: 00007f796199fb19 [ 218.611779][ T6724] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 218.619774][ T6724] RBP: 00007f7961a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 218.627767][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.635758][ T6724] R13: 00007f7961c26038 R14: 00007f7961c25fa0 R15: 00007fff25745b08 [ 218.643771][ T6724] [ 219.130259][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 223.693804][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 225.195170][ T5787] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 225.299448][ T6795] tipc: Started in network mode [ 225.304746][ T6795] tipc: Node identity 4, cluster identity 4711 [ 225.311040][ T6795] tipc: Node number set to 4 [ 226.772917][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 227.717780][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 228.770340][ T6821] netlink: 'syz.1.287': attribute type 3 has an invalid length. [ 228.779216][ T6821] netlink: 3 bytes leftover after parsing attributes in process `syz.1.287'. [ 228.988677][ T6828] fuse: Bad value for 'fd' [ 229.605998][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 233.897256][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 235.835961][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 237.252788][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 237.264796][ T8] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 237.292763][ T8] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 237.300959][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.355262][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 237.382948][ T8] usb 1-1: config 0 has no interface number 0 [ 237.403245][ T8] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 237.421316][ T8] usb 1-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 237.439324][ T8] usb 1-1: config 0 interface 125 has no altsetting 0 [ 237.449040][ T8] usb 1-1: string descriptor 0 read error: -71 [ 237.472896][ T8] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 237.481962][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.531071][ T8] usb 1-1: config 0 descriptor?? [ 237.569757][ T8] usb 1-1: can't set config #0, error -71 [ 237.612914][ T8] usb 1-1: USB disconnect, device number 12 [ 237.852831][ T6886] misc userio: No port type given on /dev/userio [ 237.869693][ T6886] misc userio: The device must be registered before sending interrupts [ 240.176543][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 240.860540][ T6897] FAULT_INJECTION: forcing a failure. [ 240.860540][ T6897] name failslab, interval 1, probability 0, space 0, times 0 [ 240.875050][ T6897] CPU: 1 PID: 6897 Comm: syz.2.302 Not tainted syzkaller #0 [ 240.882370][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 240.892445][ T6897] Call Trace: [ 240.895736][ T6897] [ 240.898678][ T6897] dump_stack_lvl+0x18c/0x250 [ 240.903386][ T6897] ? show_regs_print_info+0x20/0x20 [ 240.908612][ T6897] ? load_image+0x420/0x420 [ 240.913140][ T6897] ? __might_sleep+0xe0/0xe0 [ 240.917752][ T6897] ? __lock_acquire+0x7eb0/0x7eb0 [ 240.922797][ T6897] ? node_tag_clear+0x1ec/0x310 [ 240.927682][ T6897] should_fail_ex+0x394/0x4c0 [ 240.932393][ T6897] should_failslab+0x9/0x20 [ 240.936915][ T6897] slab_pre_alloc_hook+0x59/0x300 [ 240.941992][ T6897] ? __kernfs_new_node+0xaa/0x7f0 [ 240.947012][ T6897] ? __kernfs_new_node+0xaa/0x7f0 [ 240.952025][ T6897] __kmem_cache_alloc_node+0x53/0x260 [ 240.957383][ T6897] ? __kernfs_new_node+0xaa/0x7f0 [ 240.962400][ T6897] __kmalloc_node_track_caller+0xa4/0x230 [ 240.968117][ T6897] ? format_decode+0x9b6/0x1400 [ 240.972959][ T6897] kstrdup+0x3b/0x80 [ 240.976848][ T6897] __kernfs_new_node+0xaa/0x7f0 [ 240.981691][ T6897] ? kernfs_new_node+0x260/0x260 [ 240.986622][ T6897] ? snprintf+0xe9/0x140 [ 240.990884][ T6897] ? vscnprintf+0x80/0x80 [ 240.995240][ T6897] kernfs_new_node+0x14c/0x260 [ 241.000040][ T6897] __kernfs_create_file+0x4b/0x2e0 [ 241.005175][ T6897] cgroup_addrm_files+0x810/0xd60 [ 241.010242][ T6897] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 241.016433][ T6897] ? mark_lock+0x94/0x320 [ 241.020818][ T6897] ? do_raw_spin_unlock+0x121/0x230 [ 241.026049][ T6897] css_populate_dir+0x121/0x380 [ 241.030927][ T6897] cgroup_apply_control_enable+0x641/0xb00 [ 241.036774][ T6897] cgroup_mkdir+0xc83/0xe70 [ 241.041313][ T6897] ? css_task_iter_end+0x2c0/0x2c0 [ 241.046462][ T6897] ? kernfs_iop_permission+0x2c4/0x3b0 [ 241.051948][ T6897] ? css_task_iter_end+0x2c0/0x2c0 [ 241.057078][ T6897] kernfs_iop_mkdir+0x241/0x3e0 [ 241.061952][ T6897] vfs_mkdir+0x2a5/0x470 [ 241.066220][ T6897] do_mkdirat+0x1dc/0x450 [ 241.070571][ T6897] ? vfs_mkdir+0x470/0x470 [ 241.075025][ T6897] __x64_sys_mkdirat+0x89/0xa0 [ 241.079812][ T6897] do_syscall_64+0x55/0xb0 [ 241.084250][ T6897] ? clear_bhb_loop+0x40/0x90 [ 241.088955][ T6897] ? clear_bhb_loop+0x40/0x90 [ 241.093654][ T6897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.099567][ T6897] RIP: 0033:0x7f5470d9fb19 [ 241.103998][ T6897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.123620][ T6897] RSP: 002b:00007f5471cb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 241.132053][ T6897] RAX: ffffffffffffffda RBX: 00007f5471025fa0 RCX: 00007f5470d9fb19 [ 241.140043][ T6897] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 241.148028][ T6897] RBP: 00007f5470e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 241.156015][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.164001][ T6897] R13: 00007f5471026038 R14: 00007f5471025fa0 R15: 00007ffedab40218 [ 241.172009][ T6897] [ 241.861956][ T6897] cgroup: cgroup_addrm_files: failed to add failcnt, err=-12 [ 241.988328][ T6906] input: syz0 as /devices/virtual/input/input10 [ 243.552788][ T6038] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 243.753031][ T6038] usb 1-1: Using ep0 maxpacket: 16 [ 243.778382][ T6038] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 243.797170][ T6038] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 243.822918][ T6038] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.852739][ T6038] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 243.877728][ T6038] usb 1-1: config 0 has no interface number 0 [ 243.892525][ T6038] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 243.926592][ T6038] usb 1-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 243.960220][ T6038] usb 1-1: config 0 interface 125 has no altsetting 0 [ 244.590025][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 245.243782][ T6918] pty pty22: ldisc open failed (-12), clearing slot 22 [ 245.252769][ T6038] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 245.261848][ T6038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.314001][ T6038] usb 1-1: Product: syz [ 245.318675][ T6038] usb 1-1: Manufacturer: syz [ 245.343129][ T6038] usb 1-1: SerialNumber: syz [ 245.364905][ T6038] usb 1-1: config 0 descriptor?? [ 245.403094][ T6038] usb 1-1: can't set config #0, error -71 [ 245.429219][ T6038] usb 1-1: USB disconnect, device number 13 [ 249.203672][ T6944] FAULT_INJECTION: forcing a failure. [ 249.203672][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 249.242777][ T6944] CPU: 0 PID: 6944 Comm: syz.3.322 Not tainted syzkaller #0 [ 249.250105][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 249.260174][ T6944] Call Trace: [ 249.263468][ T6944] [ 249.266419][ T6944] dump_stack_lvl+0x18c/0x250 [ 249.271127][ T6944] ? show_regs_print_info+0x20/0x20 [ 249.276355][ T6944] ? load_image+0x420/0x420 [ 249.280887][ T6944] ? __might_sleep+0xe0/0xe0 [ 249.285506][ T6944] ? __lock_acquire+0x7eb0/0x7eb0 [ 249.290555][ T6944] ? node_tag_clear+0x1ec/0x310 [ 249.295431][ T6944] should_fail_ex+0x394/0x4c0 [ 249.300114][ T6944] should_failslab+0x9/0x20 [ 249.304654][ T6944] slab_pre_alloc_hook+0x59/0x300 [ 249.309681][ T6944] ? __kernfs_new_node+0xaa/0x7f0 [ 249.314704][ T6944] ? __kernfs_new_node+0xaa/0x7f0 [ 249.319730][ T6944] __kmem_cache_alloc_node+0x53/0x260 [ 249.325103][ T6944] ? __kernfs_new_node+0xaa/0x7f0 [ 249.330128][ T6944] __kmalloc_node_track_caller+0xa4/0x230 [ 249.335849][ T6944] ? format_decode+0x9b6/0x1400 [ 249.340697][ T6944] kstrdup+0x3b/0x80 [ 249.344593][ T6944] __kernfs_new_node+0xaa/0x7f0 [ 249.349459][ T6944] ? kernfs_new_node+0x260/0x260 [ 249.354403][ T6944] ? snprintf+0xe9/0x140 [ 249.358648][ T6944] ? vscnprintf+0x80/0x80 [ 249.362974][ T6944] kernfs_new_node+0x14c/0x260 [ 249.367741][ T6944] __kernfs_create_file+0x4b/0x2e0 [ 249.372850][ T6944] cgroup_addrm_files+0x810/0xd60 [ 249.377878][ T6944] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 249.384031][ T6944] ? mark_lock+0x94/0x320 [ 249.388380][ T6944] ? do_raw_spin_unlock+0x121/0x230 [ 249.393589][ T6944] css_populate_dir+0x121/0x380 [ 249.398437][ T6944] cgroup_apply_control_enable+0x641/0xb00 [ 249.404251][ T6944] cgroup_mkdir+0xc83/0xe70 [ 249.408759][ T6944] ? css_task_iter_end+0x2c0/0x2c0 [ 249.413887][ T6944] ? kernfs_iop_permission+0x2c4/0x3b0 [ 249.419345][ T6944] ? css_task_iter_end+0x2c0/0x2c0 [ 249.424454][ T6944] kernfs_iop_mkdir+0x241/0x3e0 [ 249.429308][ T6944] vfs_mkdir+0x2a5/0x470 [ 249.433552][ T6944] do_mkdirat+0x1dc/0x450 [ 249.437880][ T6944] ? vfs_mkdir+0x470/0x470 [ 249.442299][ T6944] __x64_sys_mkdirat+0x89/0xa0 [ 249.447060][ T6944] do_syscall_64+0x55/0xb0 [ 249.451474][ T6944] ? clear_bhb_loop+0x40/0x90 [ 249.456148][ T6944] ? clear_bhb_loop+0x40/0x90 [ 249.460831][ T6944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.466721][ T6944] RIP: 0033:0x7f796199fb19 [ 249.471132][ T6944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.490735][ T6944] RSP: 002b:00007f796279c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 249.499149][ T6944] RAX: ffffffffffffffda RBX: 00007f7961c25fa0 RCX: 00007f796199fb19 [ 249.507111][ T6944] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 249.515076][ T6944] RBP: 00007f7961a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 249.523042][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.531008][ T6944] R13: 00007f7961c26038 R14: 00007f7961c25fa0 R15: 00007fff25745b08 [ 249.538986][ T6944] [ 249.568564][ T6944] cgroup: cgroup_addrm_files: failed to add stat, err=-12 [ 251.794347][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 256.259736][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.266181][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.278485][ T6976] FAULT_INJECTION: forcing a failure. [ 257.278485][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 257.296070][ T6976] CPU: 0 PID: 6976 Comm: syz.0.331 Not tainted syzkaller #0 [ 257.303388][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 257.313457][ T6976] Call Trace: [ 257.316747][ T6976] [ 257.319688][ T6976] dump_stack_lvl+0x18c/0x250 [ 257.324396][ T6976] ? show_regs_print_info+0x20/0x20 [ 257.329621][ T6976] ? load_image+0x420/0x420 [ 257.334145][ T6976] ? __might_sleep+0xe0/0xe0 [ 257.338759][ T6976] ? __lock_acquire+0x7eb0/0x7eb0 [ 257.343817][ T6976] should_fail_ex+0x394/0x4c0 [ 257.348520][ T6976] should_failslab+0x9/0x20 [ 257.353044][ T6976] slab_pre_alloc_hook+0x59/0x300 [ 257.358085][ T6976] ? __kernfs_new_node+0xaa/0x7f0 [ 257.363139][ T6976] ? rcu_is_watching+0x15/0xb0 [ 257.367931][ T6976] kmem_cache_alloc+0x5a/0x2d0 [ 257.372712][ T6976] ? __kernfs_new_node+0xe5/0x7f0 [ 257.377768][ T6976] __kernfs_new_node+0xe5/0x7f0 [ 257.382653][ T6976] ? kernfs_new_node+0x260/0x260 [ 257.387617][ T6976] ? snprintf+0xe9/0x140 [ 257.391888][ T6976] ? vscnprintf+0x80/0x80 [ 257.396237][ T6976] kernfs_new_node+0x14c/0x260 [ 257.401047][ T6976] __kernfs_create_file+0x4b/0x2e0 [ 257.406181][ T6976] cgroup_addrm_files+0x810/0xd60 [ 257.411242][ T6976] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 257.417427][ T6976] ? mark_lock+0x94/0x320 [ 257.421816][ T6976] ? do_raw_spin_unlock+0x121/0x230 [ 257.427063][ T6976] css_populate_dir+0x121/0x380 [ 257.431940][ T6976] cgroup_apply_control_enable+0x641/0xb00 [ 257.437784][ T6976] cgroup_mkdir+0xc83/0xe70 [ 257.442324][ T6976] ? css_task_iter_end+0x2c0/0x2c0 [ 257.447483][ T6976] ? kernfs_iop_permission+0x2c4/0x3b0 [ 257.452969][ T6976] ? css_task_iter_end+0x2c0/0x2c0 [ 257.458109][ T6976] kernfs_iop_mkdir+0x241/0x3e0 [ 257.462988][ T6976] vfs_mkdir+0x2a5/0x470 [ 257.467271][ T6976] do_mkdirat+0x1dc/0x450 [ 257.471632][ T6976] ? vfs_mkdir+0x470/0x470 [ 257.476086][ T6976] __x64_sys_mkdirat+0x89/0xa0 [ 257.480880][ T6976] do_syscall_64+0x55/0xb0 [ 257.485320][ T6976] ? clear_bhb_loop+0x40/0x90 [ 257.490017][ T6976] ? clear_bhb_loop+0x40/0x90 [ 257.494729][ T6976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.500637][ T6976] RIP: 0033:0x7fcec439fb19 [ 257.505049][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.524646][ T6976] RSP: 002b:00007fcec524c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 257.533047][ T6976] RAX: ffffffffffffffda RBX: 00007fcec4625fa0 RCX: 00007fcec439fb19 [ 257.541005][ T6976] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 257.548984][ T6976] RBP: 00007fcec4437b70 R08: 0000000000000000 R09: 0000000000000000 [ 257.556976][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.564968][ T6976] R13: 00007fcec4626038 R14: 00007fcec4625fa0 R15: 00007ffff2ec22c8 [ 257.572962][ T6976] [ 257.579304][ T6976] cgroup: cgroup_addrm_files: failed to add failcnt, err=-12 [ 258.288537][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 259.862933][ T6996] netlink: 'syz.0.337': attribute type 3 has an invalid length. [ 259.870731][ T6996] netlink: 3 bytes leftover after parsing attributes in process `syz.0.337'. [ 265.859197][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'. [ 269.112919][ T7032] netlink: 'syz.3.346': attribute type 3 has an invalid length. [ 269.120609][ T7032] netlink: 3 bytes leftover after parsing attributes in process `syz.3.346'. [ 270.643226][ T28] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 271.899896][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.921115][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.951640][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.965190][ T28] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.974665][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.985482][ T28] usb 1-1: config 0 descriptor?? [ 273.931451][ T28] usbhid 1-1:0.0: can't add hid device: -71 [ 273.942789][ T28] usbhid: probe of 1-1:0.0 failed with error -71 [ 273.979952][ T28] usb 1-1: USB disconnect, device number 14 [ 274.102920][ T5790] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 274.332948][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 274.363933][ T5790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.377836][ T5790] usb 4-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.410217][ T5790] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.427626][ T5790] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 274.437236][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.449171][ T5790] usb 4-1: config 0 descriptor?? [ 274.460874][ T5790] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 274.823976][ T7063] FAULT_INJECTION: forcing a failure. [ 274.823976][ T7063] name fail_futex, interval 1, probability 0, space 0, times 1 [ 274.842441][ T7063] CPU: 0 PID: 7063 Comm: syz.2.352 Not tainted syzkaller #0 [ 274.849753][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 274.859908][ T7063] Call Trace: [ 274.863210][ T7063] [ 274.866153][ T7063] dump_stack_lvl+0x18c/0x250 [ 274.870864][ T7063] ? show_regs_print_info+0x20/0x20 [ 274.876085][ T7063] ? load_image+0x420/0x420 [ 274.880610][ T7063] ? get_user_pages_fast_only+0xa0/0xa0 [ 274.886195][ T7063] should_fail_ex+0x394/0x4c0 [ 274.890897][ T7063] get_futex_key+0x858/0xf40 [ 274.895509][ T7063] ? futex_setup_timer+0xc0/0xc0 [ 274.900479][ T7063] futex_wake+0x127/0x4f0 [ 274.904842][ T7063] ? futex_wake_mark+0x150/0x150 [ 274.909820][ T7063] do_futex+0x35d/0x3e0 [ 274.913998][ T7063] ? __might_fault+0xaa/0x120 [ 274.918705][ T7063] ? __ia32_sys_get_robust_list+0x110/0x110 [ 274.924631][ T7063] ? __might_fault+0xc6/0x120 [ 274.929343][ T7063] mm_release+0x184/0x3a0 [ 274.933697][ T7063] ? exit_mm_release+0x30/0x30 [ 274.938483][ T7063] ? lockdep_hardirqs_on+0x98/0x150 [ 274.943715][ T7063] exit_mm+0xa4/0x340 [ 274.947722][ T7063] ? sysctl_delayacct+0x220/0x220 [ 274.952764][ T7063] ? do_exit+0x2530/0x2530 [ 274.957201][ T7063] do_exit+0x909/0x2530 [ 274.961365][ T7063] ? put_task_struct+0xc0/0xc0 [ 274.966132][ T7063] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 274.972106][ T7063] ? get_signal+0x100e/0x1390 [ 274.976776][ T7063] ? lock_chain_count+0x20/0x20 [ 274.981625][ T7063] ? _raw_spin_lock_irq+0xbb/0xf0 [ 274.986645][ T7063] do_group_exit+0x22d/0x2f0 [ 274.991230][ T7063] ? lockdep_hardirqs_on+0x98/0x150 [ 274.996425][ T7063] get_signal+0x12a6/0x1390 [ 275.000936][ T7063] arch_do_signal_or_restart+0xc2/0x7b0 [ 275.006484][ T7063] ? __ia32_sys_get_robust_list+0x110/0x110 [ 275.012369][ T7063] ? get_sigframe_size+0x20/0x20 [ 275.017304][ T7063] ? __sys_connect+0x27f/0x470 [ 275.022072][ T7063] ? exit_to_user_mode_loop+0x3b/0x110 [ 275.027531][ T7063] exit_to_user_mode_loop+0x70/0x110 [ 275.032816][ T7063] exit_to_user_mode_prepare+0xee/0x180 [ 275.038369][ T7063] syscall_exit_to_user_mode+0x1a/0x50 [ 275.043825][ T7063] do_syscall_64+0x61/0xb0 [ 275.048242][ T7063] ? clear_bhb_loop+0x40/0x90 [ 275.052940][ T7063] ? clear_bhb_loop+0x40/0x90 [ 275.057613][ T7063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.063504][ T7063] RIP: 0033:0x7f5470d9fb19 [ 275.067912][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.087508][ T7063] RSP: 002b:00007f5471cb60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 275.095916][ T7063] RAX: fffffffffffffe00 RBX: 00007f5471025fa8 RCX: 00007f5470d9fb19 [ 275.103879][ T7063] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5471025fa8 [ 275.111848][ T7063] RBP: 00007f5471025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 275.119812][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.127782][ T7063] R13: 00007f5471026038 R14: 00007ffedab40130 R15: 00007ffedab40218 [ 275.135762][ T7063] [ 276.894411][ T5867] usb 4-1: USB disconnect, device number 8 [ 277.699811][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 278.435454][ T7077] jffs2: notice: (7077) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 278.557826][ T7072] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 280.972925][ T7081] netlink: 'syz.2.357': attribute type 3 has an invalid length. [ 280.980608][ T7081] netlink: 3 bytes leftover after parsing attributes in process `syz.2.357'. [ 285.032904][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 285.239478][ T8] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 285.353779][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.539358][ T8] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 285.659590][ T8] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 285.789871][ T8] usb 2-1: Manufacturer: syz [ 285.897412][ T8] usb 2-1: config 0 descriptor?? [ 286.456053][ T7108] FAULT_INJECTION: forcing a failure. [ 286.456053][ T7108] name failslab, interval 1, probability 0, space 0, times 0 [ 286.581954][ T7108] CPU: 0 PID: 7108 Comm: syz.3.362 Not tainted syzkaller #0 [ 286.589285][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 286.599354][ T7108] Call Trace: [ 286.602647][ T7108] [ 286.605588][ T7108] dump_stack_lvl+0x18c/0x250 [ 286.610296][ T7108] ? show_regs_print_info+0x20/0x20 [ 286.615516][ T7108] ? load_image+0x420/0x420 [ 286.620036][ T7108] ? __might_sleep+0xe0/0xe0 [ 286.624650][ T7108] ? __lock_acquire+0x7eb0/0x7eb0 [ 286.629690][ T7108] ? lockdep_hardirqs_on+0x98/0x150 [ 286.634908][ T7108] should_fail_ex+0x394/0x4c0 [ 286.639606][ T7108] should_failslab+0x9/0x20 [ 286.644133][ T7108] slab_pre_alloc_hook+0x59/0x300 [ 286.649179][ T7108] ? bpf_prog_calc_tag+0x5b6/0x6b0 [ 286.654308][ T7108] ? kvmalloc_node+0x70/0x180 [ 286.659006][ T7108] ? kvmalloc_node+0x70/0x180 [ 286.663702][ T7108] __kmem_cache_alloc_node+0x53/0x260 [ 286.669090][ T7108] ? kvmalloc_node+0x70/0x180 [ 286.673787][ T7108] __kmalloc_node+0xa6/0x240 [ 286.678404][ T7108] kvmalloc_node+0x70/0x180 [ 286.682930][ T7108] check_cfg+0x11f/0x15a0 [ 286.687293][ T7108] ? resolve_pseudo_ldimm64+0x1100/0x1100 [ 286.693030][ T7108] ? resolve_pseudo_ldimm64+0xe04/0x1100 [ 286.698685][ T7108] ? verbose+0x11e/0x1a0 [ 286.703298][ T7108] ? check_btf_info+0x2920/0x2920 [ 286.708427][ T7108] ? kvmalloc_node+0x70/0x180 [ 286.713124][ T7108] ? add_subprog+0x2c0/0x3d0 [ 286.717739][ T7108] bpf_check+0x3fbb/0xfe50 [ 286.722208][ T7108] ? verify_lock_unused+0x140/0x140 [ 286.727426][ T7108] ? bpf_get_btf_vmlinux+0x70/0x70 [ 286.732568][ T7108] ? rcu_is_watching+0x15/0xb0 [ 286.737387][ T7108] ? mark_lock+0x94/0x320 [ 286.741738][ T7108] ? __lock_acquire+0x1431/0x7eb0 [ 286.746801][ T7108] ? verify_lock_unused+0x140/0x140 [ 286.752021][ T7108] ? __lock_acquire+0x1/0x7eb0 [ 286.756809][ T7108] ? asan.module_dtor+0x20/0x20 [ 286.761680][ T7108] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 286.767523][ T7108] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 286.773517][ T7108] ? __lock_acquire+0x7eb0/0x7eb0 [ 286.778559][ T7108] ? lock_chain_count+0x20/0x20 [ 286.783443][ T7108] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 286.789702][ T7108] ? lockdep_hardirqs_on+0x98/0x150 [ 286.794914][ T7108] ? ktime_get_with_offset+0x103/0x330 [ 286.800391][ T7108] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 286.806648][ T7108] ? ktime_get_real_ts64+0x440/0x440 [ 286.811961][ T7108] ? __asan_memset+0x22/0x40 [ 286.816570][ T7108] ? bpf_obj_name_cpy+0x194/0x1e0 [ 286.821626][ T7108] bpf_prog_load+0x10fa/0x1610 [ 286.826417][ T7108] ? map_freeze+0x420/0x420 [ 286.830950][ T7108] ? __might_fault+0xaa/0x120 [ 286.835646][ T7108] ? __might_fault+0xc6/0x120 [ 286.840334][ T7108] ? __might_fault+0xaa/0x120 [ 286.845027][ T7108] ? bpf_lsm_bpf+0x9/0x10 [ 286.849376][ T7108] ? security_bpf+0x7e/0xa0 [ 286.853891][ T7108] __sys_bpf+0x5ba/0x890 [ 286.858153][ T7108] ? bpf_link_show_fdinfo+0x560/0x560 [ 286.863557][ T7108] ? lock_chain_count+0x20/0x20 [ 286.868434][ T7108] __x64_sys_bpf+0x7c/0x90 [ 286.872867][ T7108] do_syscall_64+0x55/0xb0 [ 286.877301][ T7108] ? clear_bhb_loop+0x40/0x90 [ 286.881994][ T7108] ? clear_bhb_loop+0x40/0x90 [ 286.886698][ T7108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.892618][ T7108] RIP: 0033:0x7f796199fb19 [ 286.897049][ T7108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.916671][ T7108] RSP: 002b:00007f796279c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.925105][ T7108] RAX: ffffffffffffffda RBX: 00007f7961c25fa0 RCX: 00007f796199fb19 [ 286.933087][ T7108] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 286.941071][ T7108] RBP: 00007f7961a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 286.949049][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.957114][ T7108] R13: 00007f7961c26038 R14: 00007f7961c25fa0 R15: 00007fff25745b08 [ 286.965111][ T7108] [ 287.005845][ T7110] ip_tables: iptables: counters copy to user failed while replacing table [ 287.705842][ T8] rc_core: IR keymap rc-hauppauge not found [ 287.751277][ T8] Registered IR keymap rc-empty [ 287.835905][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 287.933309][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 290.801867][ T28] usb 2-1: USB disconnect, device number 7 [ 296.522088][ T7160] 9pnet: p9_errstr2errno: server reported unknown error [ 300.172893][ T5167] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 300.462923][ T5167] usb 3-1: Using ep0 maxpacket: 16 [ 300.560643][ T5167] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 300.601831][ T5167] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 300.634872][ T5167] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 300.666921][ T5167] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.708174][ T5167] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 300.741389][ T5167] usb 3-1: config 0 has no interface number 0 [ 300.756910][ T5167] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 301.060287][ T5167] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 301.363344][ T5167] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 301.379644][ T5167] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.397551][ T5167] usb 3-1: config 0 interface 125 has no altsetting 0 [ 301.407922][ T5167] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 301.431937][ T5167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.454621][ T5167] usb 3-1: Product: syz [ 301.458885][ T5167] usb 3-1: Manufacturer: syz [ 301.468990][ T5167] usb 3-1: SerialNumber: syz [ 301.481912][ T5167] usb 3-1: config 0 descriptor?? [ 301.716551][ T5867] usb 3-1: USB disconnect, device number 9 [ 304.663798][ T7221] jffs2: notice: (7221) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 305.546414][ T5167] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 305.573967][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 306.274040][ T5167] usb 2-1: device descriptor read/64, error -32 [ 306.752799][ T5167] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 307.232824][ T5167] usb 2-1: device descriptor read/64, error -71 [ 307.340486][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 307.353440][ T5167] usb usb2-port1: attempt power cycle [ 308.432784][ T5167] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 308.433014][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.407'. [ 308.477583][ T5167] usb 2-1: Using ep0 maxpacket: 16 [ 308.494642][ T5167] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 308.514672][ T5167] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 308.517439][ T7251] jffs2: notice: (7251) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 308.536451][ T5167] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 308.562943][ T5167] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.573884][ T5167] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 308.587226][ T5167] usb 2-1: config 0 has no interface number 0 [ 308.594702][ T5167] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 308.609458][ T5167] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 308.624663][ T5167] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 308.633030][ T7251] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 308.637906][ T5167] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.662492][ T5167] usb 2-1: config 0 interface 125 has no altsetting 0 [ 308.681349][ T5167] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 308.701353][ T5167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.735558][ T5167] usb 2-1: Product: syz [ 308.739752][ T5167] usb 2-1: Manufacturer: syz [ 309.483713][ T5167] usb 2-1: SerialNumber: syz [ 309.491987][ T5167] usb 2-1: config 0 descriptor?? [ 309.799807][ T5167] usb 2-1: USB disconnect, device number 10 [ 310.825269][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 310.983255][ T6038] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 311.852763][ T6038] usb 3-1: Using ep0 maxpacket: 8 [ 311.859822][ T6038] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 311.879735][ T6038] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 311.902840][ T6038] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 311.911910][ T6038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.864723][ T6038] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 312.936215][ T6038] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 314.522889][ T6038] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 314.565899][ T5167] usb 3-1: USB disconnect, device number 10 [ 314.585294][ T5167] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 314.613687][ T5167] kobil_sct 3-1:1.0: device disconnected [ 314.626823][ T7290] capability: warning: `syz.1.419' uses deprecated v2 capabilities in a way that may be insecure [ 314.665437][ T7290] FAULT_INJECTION: forcing a failure. [ 314.665437][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 314.683341][ T7290] CPU: 1 PID: 7290 Comm: syz.1.419 Not tainted syzkaller #0 [ 314.690663][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 314.700736][ T7290] Call Trace: [ 314.704008][ T7290] [ 314.706931][ T7290] dump_stack_lvl+0x18c/0x250 [ 314.711602][ T7290] ? show_regs_print_info+0x20/0x20 [ 314.712841][ T6038] usb 1-1: Using ep0 maxpacket: 8 [ 314.716781][ T7290] ? load_image+0x420/0x420 [ 314.716834][ T7290] ? __lock_acquire+0x7eb0/0x7eb0 [ 314.716861][ T7290] should_fail_ex+0x394/0x4c0 [ 314.716885][ T7290] should_failslab+0x9/0x20 [ 314.716901][ T7290] slab_pre_alloc_hook+0x59/0x300 [ 314.716932][ T7290] kmem_cache_alloc+0x5a/0x2d0 [ 314.716949][ T7290] ? security_inode_alloc+0x34/0x110 [ 314.716974][ T7290] security_inode_alloc+0x34/0x110 [ 314.716995][ T7290] inode_init_always+0x914/0xc90 [ 314.717019][ T7290] new_inode_pseudo+0x95/0x1d0 [ 314.717043][ T7290] __ns_get_path+0x249/0x5f0 [ 314.717070][ T7290] ns_get_path+0x54/0x90 [ 314.717093][ T7290] proc_ns_get_link+0x16c/0x2d0 [ 314.717113][ T7290] ? proc_ns_instantiate+0xf0/0xf0 [ 314.789188][ T7290] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 314.794730][ T7290] ? security_inode_follow_link+0xb7/0x100 [ 314.800525][ T7290] ? proc_ns_instantiate+0xf0/0xf0 [ 314.805627][ T7290] pick_link+0x666/0xdd0 [ 314.809866][ T7290] step_into+0xc18/0xee0 [ 314.814104][ T7290] ? __up_read+0x2b8/0x6b0 [ 314.818512][ T7290] ? set_root+0x3a0/0x3a0 [ 314.822830][ T7290] ? d_splice_alias+0x114/0x330 [ 314.827667][ T7290] ? proc_ns_dir_lookup+0x7bb/0x800 [ 314.832858][ T7290] path_openat+0x1656/0x3270 [ 314.837454][ T7290] ? do_filp_open+0x430/0x430 [ 314.842126][ T7290] do_filp_open+0x1f2/0x430 [ 314.846622][ T7290] ? vfs_tmpfile+0x620/0x620 [ 314.851214][ T7290] ? _raw_spin_unlock+0x28/0x40 [ 314.856082][ T7290] ? alloc_fd+0x590/0x640 [ 314.860406][ T7290] do_sys_openat2+0x134/0x1d0 [ 314.865075][ T7290] ? do_sys_open+0xe0/0xe0 [ 314.869483][ T7290] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 314.875453][ T7290] ? lock_chain_count+0x20/0x20 [ 314.880295][ T7290] __x64_sys_openat+0x139/0x160 [ 314.885134][ T7290] do_syscall_64+0x55/0xb0 [ 314.889535][ T7290] ? clear_bhb_loop+0x40/0x90 [ 314.894201][ T7290] ? clear_bhb_loop+0x40/0x90 [ 314.898885][ T7290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.904764][ T7290] RIP: 0033:0x7f93a2b6034e [ 314.909162][ T7290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 314.928753][ T7290] RSP: 002b:00007f93a0df5f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.937153][ T7290] RAX: ffffffffffffffda RBX: 00007f93a0df66c0 RCX: 00007f93a2b6034e [ 314.945109][ T7290] RDX: 0000000000000000 RSI: 00007f93a2c3729e RDI: ffffffffffffff9c [ 314.953071][ T7290] RBP: 00007f93a2c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 314.961047][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.969004][ T7290] R13: 00007f93a2e26038 R14: 00007f93a2e25fa0 R15: 00007ffcf3e4b878 [ 314.976997][ T7290] [ 314.999378][ T6038] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 315.018139][ T6038] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.032337][ T6038] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.052868][ T6038] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.106808][ T6038] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.122322][ T6038] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.153004][ T6038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.237354][ T7295] jffs2: notice: (7295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 315.395027][ T6038] usb 1-1: GET_CAPABILITIES returned 0 [ 317.663044][ T6038] usbtmc 1-1:16.0: can't read capabilities [ 317.666657][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.675340][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.723438][ T6038] usb 1-1: USB disconnect, device number 15 [ 317.732946][ T7299] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 317.974844][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 321.673956][ T7319] lo: entered allmulticast mode [ 321.685445][ T7319] tunl0: entered allmulticast mode [ 321.694162][ T7319] gre0: entered allmulticast mode [ 321.702077][ T7319] gretap0: entered allmulticast mode [ 321.710831][ T7319] erspan0: entered allmulticast mode [ 321.723101][ T7319] ip_vti0: entered allmulticast mode [ 321.731268][ T7319] ip6_vti0: entered allmulticast mode [ 321.739700][ T7319] sit0: entered allmulticast mode [ 321.837115][ T7319] ip6tnl0: entered allmulticast mode [ 321.843381][ T7319] ip6gre0: entered allmulticast mode [ 321.849085][ T7319] syz_tun: entered allmulticast mode [ 321.878324][ T7319] ip6gretap0: entered allmulticast mode [ 321.915475][ T7319] bridge0: entered allmulticast mode [ 321.990453][ T7319] vcan0: entered allmulticast mode [ 322.037455][ T7319] bond0: entered allmulticast mode [ 322.042583][ T7319] bond_slave_0: entered allmulticast mode [ 322.103796][ T7319] bond_slave_1: entered allmulticast mode [ 322.110724][ T7319] team0: entered allmulticast mode [ 322.192880][ T7319] team_slave_0: entered allmulticast mode [ 322.198634][ T7319] team_slave_1: entered allmulticast mode [ 323.113545][ T7319] dummy0: entered allmulticast mode [ 323.121718][ T7319] nlmon0: entered allmulticast mode [ 323.153378][ T7319] caif0: entered allmulticast mode [ 323.158607][ T7319] batadv0: entered allmulticast mode [ 323.222881][ T7319] vxcan0: entered allmulticast mode [ 323.228300][ T7319] vxcan1: entered allmulticast mode [ 323.243271][ T7319] veth0: entered allmulticast mode [ 323.283170][ T7319] veth1: entered allmulticast mode [ 323.288688][ T7319] wg0: entered allmulticast mode [ 323.314344][ T7319] wg1: entered allmulticast mode [ 323.319631][ T7319] wg2: entered allmulticast mode [ 324.978397][ T7319] veth0_to_bridge: entered allmulticast mode [ 325.014516][ T7319] veth1_to_bridge: entered allmulticast mode [ 325.026968][ T7319] veth0_to_bond: entered allmulticast mode [ 325.040270][ T7319] veth1_to_bond: entered allmulticast mode [ 325.426000][ T7319] veth0_to_team: entered allmulticast mode [ 325.442807][ T7319] veth1_to_team: entered allmulticast mode [ 325.458582][ T7319] veth0_to_batadv: entered allmulticast mode [ 325.469720][ T7319] batadv_slave_0: entered allmulticast mode [ 325.479288][ T7319] veth1_to_batadv: entered allmulticast mode [ 325.486503][ T7319] batadv_slave_1: entered allmulticast mode [ 325.495664][ T7319] xfrm0: entered allmulticast mode [ 325.519487][ T7319] veth0_to_hsr: entered allmulticast mode [ 325.540020][ T7319] hsr_slave_0: entered allmulticast mode [ 325.566397][ T7319] veth1_to_hsr: entered allmulticast mode [ 325.592453][ T7319] hsr_slave_1: entered allmulticast mode [ 325.607692][ T7319] hsr0: entered allmulticast mode [ 325.621284][ T7319] veth1_virt_wifi: entered allmulticast mode [ 325.632292][ T7319] veth0_virt_wifi: entered allmulticast mode [ 325.655489][ T7319] virt_wifi0: entered allmulticast mode [ 325.661179][ T7319] veth1_vlan: entered allmulticast mode [ 325.669053][ T7319] veth0_vlan: entered allmulticast mode [ 325.676348][ T7319] vlan0: entered allmulticast mode [ 325.686981][ T7319] vlan1: entered allmulticast mode [ 325.694076][ T7319] macvlan0: entered allmulticast mode [ 325.700894][ T7319] macvlan1: entered allmulticast mode [ 325.716000][ T7319] ipvlan0: entered allmulticast mode [ 325.728290][ T7319] ipvlan1: entered allmulticast mode [ 325.735055][ T7319] veth1_macvtap: entered allmulticast mode [ 325.747599][ T7319] veth0_macvtap: entered allmulticast mode [ 325.755509][ T7319] macvtap0: entered allmulticast mode [ 325.761552][ T7319] macsec0: entered allmulticast mode [ 325.787740][ T7319] geneve0: entered allmulticast mode [ 325.794900][ T7319] geneve1: entered allmulticast mode [ 325.802547][ T7319] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 325.818109][ T7319] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 325.827416][ T7319] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 325.839628][ T7319] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 325.848308][ T7319] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 325.863268][ T7319] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 325.923661][ T7329] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 325.935528][ T7329] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 326.057181][ T5790] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 328.333555][ T5790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.381179][ T5790] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.437160][ T5790] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 328.457655][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.899102][ T5790] rtsx_usb: probe of 4-1:1.0 failed with error -110 [ 330.015728][ T5790] usb 4-1: USB disconnect, device number 9 [ 331.220511][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 331.333806][ T7371] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 337.143066][ T7401] netlink: 'syz.1.452': attribute type 3 has an invalid length. [ 337.150846][ T7401] netlink: 3 bytes leftover after parsing attributes in process `syz.1.452'. [ 341.215093][ T7106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.363095][ T5790] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 341.410509][ T7106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.566547][ T7106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.588992][ T5790] usb 1-1: Using ep0 maxpacket: 16 [ 341.614281][ T5790] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.829721][ T5790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.912272][ T5790] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 342.965176][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.995390][ T7106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.023884][ T5790] usb 1-1: config 0 descriptor?? [ 343.048862][ T5790] usb 1-1: can't set config #0, error -71 [ 343.083603][ T5790] usb 1-1: USB disconnect, device number 16 [ 343.508737][ T7429] netlink: 'syz.0.461': attribute type 3 has an invalid length. [ 343.516565][ T7429] netlink: 3 bytes leftover after parsing attributes in process `syz.0.461'. [ 344.063702][ T7106] tipc: Left network mode [ 346.009681][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.021910][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.032211][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.079453][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.108850][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.119436][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.399811][ T7446] rxe_eth0 speed is unknown, defaulting to 1000 [ 347.743595][ T6038] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 348.003251][ T6038] usb 3-1: Using ep0 maxpacket: 16 [ 348.046389][ T6038] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 348.073101][ T6038] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 348.081307][ T6038] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 348.122576][ T6038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.172717][ T6038] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 348.181623][ T6038] usb 3-1: config 0 has no interface number 0 [ 348.225795][ T6038] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 348.238702][ T52] Bluetooth: hci1: command tx timeout [ 348.247314][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 348.380371][ T6038] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 348.419182][ T6038] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.459139][ T6038] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.492244][ T6038] usb 3-1: config 0 interface 125 has no altsetting 0 [ 348.512112][ T6038] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 348.522407][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.530667][ T6038] usb 3-1: Product: syz [ 348.536043][ T6038] usb 3-1: Manufacturer: syz [ 348.540836][ T6038] usb 3-1: SerialNumber: syz [ 348.555379][ T6038] usb 3-1: config 0 descriptor?? [ 348.778496][ T7446] chnl_net:caif_netlink_parms(): no params data found [ 348.876712][ T5875] usb 3-1: USB disconnect, device number 11 [ 350.396226][ T52] Bluetooth: hci1: command tx timeout [ 350.747399][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.808904][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.893075][ T7446] bridge_slave_0: entered allmulticast mode [ 350.914608][ T7446] bridge_slave_0: entered promiscuous mode [ 350.968386][ T7106] hsr_slave_0: left promiscuous mode [ 350.975450][ T7106] hsr_slave_1: left promiscuous mode [ 350.993706][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.019842][ T6038] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 351.028674][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.068542][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.082741][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.124376][ T7106] bridge_slave_1: left allmulticast mode [ 351.130053][ T7106] bridge_slave_1: left promiscuous mode [ 351.169174][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.232783][ T6038] usb 3-1: Using ep0 maxpacket: 32 [ 351.245721][ T6038] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 351.266472][ T7106] bridge_slave_0: left allmulticast mode [ 351.272137][ T7106] bridge_slave_0: left promiscuous mode [ 351.321779][ T6038] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 351.341160][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.342075][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.362707][ T6038] usb 3-1: Product: syz [ 351.366906][ T6038] usb 3-1: Manufacturer: syz [ 351.371516][ T6038] usb 3-1: SerialNumber: syz [ 351.409823][ T6038] usb 3-1: config 0 descriptor?? [ 351.447726][ T7495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.483100][ T6038] hub 3-1:0.0: bad descriptor, ignoring hub [ 351.489048][ T6038] hub: probe of 3-1:0.0 failed with error -5 [ 351.542779][ T6038] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 351.651576][ T7106] veth1_macvtap: left promiscuous mode [ 351.674835][ T7106] veth0_macvtap: left promiscuous mode [ 351.680603][ T7106] veth1_vlan: left promiscuous mode [ 351.733180][ T7106] veth0_vlan: left promiscuous mode [ 351.837000][ T6038] usb 3-1: USB disconnect, device number 12 [ 351.837065][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 352.473018][ T52] Bluetooth: hci1: command tx timeout [ 352.582897][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.598559][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.608268][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.623595][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.635686][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 352.680292][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.965700][ T7106] team0 (unregistering): Port device team_slave_1 removed [ 354.038701][ T7106] team0 (unregistering): Port device team_slave_0 removed [ 354.101706][ T7106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.205125][ T7106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.477126][ T7106] bond0 (unregistering): Released all slaves [ 354.539159][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.549374][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.563290][ T52] Bluetooth: hci1: command tx timeout [ 354.568908][ T7446] bridge_slave_1: entered allmulticast mode [ 354.578922][ T7446] bridge_slave_1: entered promiscuous mode [ 354.587679][ T7501] netlink: 'syz.0.469': attribute type 3 has an invalid length. [ 354.595613][ T7501] netlink: 3 bytes leftover after parsing attributes in process `syz.0.469'. [ 354.726212][ T7446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.928468][ T52] Bluetooth: hci2: command tx timeout [ 355.936650][ T7446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.070855][ T7499] rxe_eth0 speed is unknown, defaulting to 1000 [ 356.086528][ T7446] team0: Port device team_slave_0 added [ 356.115376][ T7446] team0: Port device team_slave_1 added [ 356.248739][ T7446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.283010][ T7446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.372755][ T7446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.427704][ T7446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.463451][ T7446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.568620][ T7446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.781392][ T7446] hsr_slave_0: entered promiscuous mode [ 356.800074][ T7446] hsr_slave_1: entered promiscuous mode [ 356.828201][ T7446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.857854][ T7446] Cannot create hsr debugfs directory [ 357.451058][ T7106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.486078][ T7499] chnl_net:caif_netlink_parms(): no params data found [ 357.547489][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.558421][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.566588][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.577161][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.591572][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.595886][ T7106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.603057][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.615902][ T6038] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 357.669267][ T7106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.725048][ T7446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.741437][ T7533] rxe_eth0 speed is unknown, defaulting to 1000 [ 357.794917][ T7106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.816230][ T6038] usb 1-1: Using ep0 maxpacket: 16 [ 357.844042][ T6038] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.860477][ T6038] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.877685][ T7446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.892425][ T6038] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 357.906032][ T7446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.929854][ T6038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.941462][ T7446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.950623][ T6038] usb 1-1: config 0 descriptor?? [ 357.961034][ T6038] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 358.003760][ T5787] Bluetooth: hci2: command tx timeout [ 358.098254][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.109805][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.118499][ T7499] bridge_slave_0: entered allmulticast mode [ 358.130197][ T7499] bridge_slave_0: entered promiscuous mode [ 358.174962][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.182114][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.194632][ T7499] bridge_slave_1: entered allmulticast mode [ 358.201843][ T7499] bridge_slave_1: entered promiscuous mode [ 358.321009][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.335396][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.412415][ T7499] team0: Port device team_slave_0 added [ 358.450135][ T7106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.472253][ T7499] team0: Port device team_slave_1 added [ 358.557115][ T7106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.571372][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.579998][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.606241][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.619248][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.626811][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.653305][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.700916][ T7106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.762091][ T7499] hsr_slave_0: entered promiscuous mode [ 358.769432][ T7499] hsr_slave_1: entered promiscuous mode [ 358.776249][ T7499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.786370][ T7499] Cannot create hsr debugfs directory [ 358.822182][ T7106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.853490][ T7533] chnl_net:caif_netlink_parms(): no params data found [ 359.041263][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.050232][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.060390][ T7533] bridge_slave_0: entered allmulticast mode [ 359.067466][ T7533] bridge_slave_0: entered promiscuous mode [ 359.103895][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.111868][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.120074][ T7533] bridge_slave_1: entered allmulticast mode [ 359.127656][ T7533] bridge_slave_1: entered promiscuous mode [ 359.157746][ T7446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.196170][ T7533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.211904][ T7533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.266243][ T7533] team0: Port device team_slave_0 added [ 359.275261][ T7533] team0: Port device team_slave_1 added [ 359.321943][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.329057][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.355670][ T7533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.368807][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.376694][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.406313][ T7533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.436914][ T7106] tipc: Left network mode [ 359.462354][ T7446] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.469588][ T7106] tipc: Left network mode [ 359.506675][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.513855][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.537133][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.544320][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.678309][ T5787] Bluetooth: hci3: command tx timeout [ 359.712974][ T7533] hsr_slave_0: entered promiscuous mode [ 359.726218][ T7533] hsr_slave_1: entered promiscuous mode [ 359.732589][ T7533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.740299][ T7533] Cannot create hsr debugfs directory [ 359.753263][ T7499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.832564][ T7499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.849926][ T7499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 359.904279][ T7499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.073188][ T5787] Bluetooth: hci2: command tx timeout [ 360.206037][ T7446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.421167][ T5875] usb 1-1: USB disconnect, device number 17 [ 361.310272][ T7579] FAULT_INJECTION: forcing a failure. [ 361.310272][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 361.322975][ T7579] CPU: 1 PID: 7579 Comm: syz.0.480 Not tainted syzkaller #0 [ 361.330245][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 361.340288][ T7579] Call Trace: [ 361.343558][ T7579] [ 361.346495][ T7579] dump_stack_lvl+0x18c/0x250 [ 361.351168][ T7579] ? show_regs_print_info+0x20/0x20 [ 361.356355][ T7579] ? load_image+0x420/0x420 [ 361.360851][ T7579] ? __lock_acquire+0x7eb0/0x7eb0 [ 361.365868][ T7579] ? _raw_spin_lock_irq+0xbb/0xf0 [ 361.370882][ T7579] ? _raw_spin_lock_irqsave+0x100/0x100 [ 361.376428][ T7579] should_fail_ex+0x394/0x4c0 [ 361.381110][ T7579] should_failslab+0x9/0x20 [ 361.385603][ T7579] slab_pre_alloc_hook+0x59/0x300 [ 361.390617][ T7579] kmem_cache_alloc+0x5a/0x2d0 [ 361.395368][ T7579] ? copy_utsname+0x11b/0x430 [ 361.400040][ T7579] copy_utsname+0x11b/0x430 [ 361.404535][ T7579] create_new_namespaces+0x17b/0x700 [ 361.409816][ T7579] ? bpf_lsm_capable+0x9/0x10 [ 361.414496][ T7579] unshare_nsproxy_namespaces+0x11a/0x160 [ 361.420230][ T7579] ksys_unshare+0x4fa/0x8f0 [ 361.424729][ T7579] ? sighand_ctor+0x50/0x50 [ 361.429242][ T7579] ? lock_chain_count+0x20/0x20 [ 361.434090][ T7579] ? syscall_enter_from_user_mode+0x25/0x80 [ 361.439973][ T7579] __x64_sys_unshare+0x38/0x40 [ 361.444731][ T7579] do_syscall_64+0x55/0xb0 [ 361.449142][ T7579] ? clear_bhb_loop+0x40/0x90 [ 361.453836][ T7579] ? clear_bhb_loop+0x40/0x90 [ 361.458519][ T7579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.464420][ T7579] RIP: 0033:0x7fcec439fb19 [ 361.468847][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.488466][ T7579] RSP: 002b:00007fcec524c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 361.497212][ T7579] RAX: ffffffffffffffda RBX: 00007fcec4625fa0 RCX: 00007fcec439fb19 [ 361.505189][ T7579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 361.513143][ T7579] RBP: 00007fcec4437b70 R08: 0000000000000000 R09: 0000000000000000 [ 361.521118][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.529074][ T7579] R13: 00007fcec4626038 R14: 00007fcec4625fa0 R15: 00007ffff2ec22c8 [ 361.537039][ T7579] [ 361.649319][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.731940][ T7533] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 361.754342][ T5787] Bluetooth: hci3: command tx timeout [ 361.810230][ T7533] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.839797][ T7533] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 361.871574][ T7533] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.921770][ T7446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.161352][ T7499] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.169426][ T5787] Bluetooth: hci2: command tx timeout [ 362.256197][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.263476][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.380557][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.387802][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.498716][ T7499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.617399][ T7533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.745270][ T7533] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.812230][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.819709][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.839731][ T5787] Bluetooth: hci3: command tx timeout [ 363.904337][ T7446] veth0_vlan: entered promiscuous mode [ 363.925024][ T7446] veth1_vlan: entered promiscuous mode [ 363.980408][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.987592][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.235408][ T7446] veth0_macvtap: entered promiscuous mode [ 364.269139][ T7446] veth1_macvtap: entered promiscuous mode [ 364.340865][ T7106] hsr_slave_0: left promiscuous mode [ 364.403383][ T7106] hsr_slave_1: left promiscuous mode [ 364.413393][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.420889][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.455982][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.470152][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.479562][ T7106] bridge_slave_1: left allmulticast mode [ 364.491272][ T7106] bridge_slave_1: left promiscuous mode [ 364.498588][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.518224][ T7106] bridge_slave_0: left allmulticast mode [ 364.529853][ T7106] bridge_slave_0: left promiscuous mode [ 364.537625][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.560706][ T7106] hsr_slave_0: left promiscuous mode [ 364.590814][ T7106] hsr_slave_1: left promiscuous mode [ 364.597661][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.619539][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.651447][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.669119][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.691720][ T7106] bridge_slave_1: left promiscuous mode [ 364.697920][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.734837][ T7106] bridge_slave_0: left promiscuous mode [ 364.740651][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.843625][ T7106] veth1_macvtap: left promiscuous mode [ 364.849263][ T7106] veth0_macvtap: left promiscuous mode [ 364.863257][ T7106] veth1_vlan: left promiscuous mode [ 364.868650][ T7106] veth0_vlan: left promiscuous mode [ 364.895249][ T7106] veth1_macvtap: left promiscuous mode [ 364.900861][ T7106] veth0_macvtap: left promiscuous mode [ 364.912824][ T7106] veth1_vlan: left promiscuous mode [ 364.919237][ T7106] veth0_vlan: left promiscuous mode [ 365.913137][ T5787] Bluetooth: hci3: command tx timeout [ 366.186280][ T7106] team0 (unregistering): Port device team_slave_1 removed [ 366.228153][ T7106] team0 (unregistering): Port device team_slave_0 removed [ 366.269073][ T7106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.312300][ T7106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.586697][ T7106] bond0 (unregistering): Released all slaves [ 367.029549][ T7106] team0 (unregistering): Port device team_slave_1 removed [ 367.066870][ T7106] team0 (unregistering): Port device team_slave_0 removed [ 367.105654][ T7106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.146334][ T7106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.427083][ T7106] bond0 (unregistering): Released all slaves [ 367.477916][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.490486][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.508234][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.520318][ T7446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.538867][ T7630] netlink: 'syz.0.482': attribute type 3 has an invalid length. [ 367.546567][ T7630] netlink: 3 bytes leftover after parsing attributes in process `syz.0.482'. [ 367.657116][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.702732][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.730079][ T7446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.618926][ T7446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.669498][ T7446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.678677][ T7446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.692882][ T7446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.834664][ T7533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.061868][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.109049][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.142519][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.165016][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.365263][ T7499] veth0_vlan: entered promiscuous mode [ 369.405403][ T7499] veth1_vlan: entered promiscuous mode [ 369.524863][ T7499] veth0_macvtap: entered promiscuous mode [ 369.561026][ T7499] veth1_macvtap: entered promiscuous mode [ 369.642171][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.682547][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.705718][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.721511][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.749542][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.819665][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.843247][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.866206][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.889040][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.907462][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.922227][ T7671] bridge0: port 3(gretap0) entered blocking state [ 369.929010][ T7106] IPVS: stop unused estimator thread 0... [ 369.943230][ T7671] bridge0: port 3(gretap0) entered disabled state [ 369.957161][ T7671] gretap0: entered allmulticast mode [ 369.962573][ T7671] FAULT_INJECTION: forcing a failure. [ 369.962573][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 369.982875][ T7671] CPU: 1 PID: 7671 Comm: syz.0.489 Not tainted syzkaller #0 [ 369.990188][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 370.000269][ T7671] Call Trace: [ 370.003566][ T7671] [ 370.006524][ T7671] dump_stack_lvl+0x18c/0x250 [ 370.011240][ T7671] ? show_regs_print_info+0x20/0x20 [ 370.016479][ T7671] ? load_image+0x420/0x420 [ 370.021009][ T7671] ? __might_sleep+0xe0/0xe0 [ 370.025627][ T7671] ? __lock_acquire+0x7eb0/0x7eb0 [ 370.030679][ T7671] should_fail_ex+0x394/0x4c0 [ 370.035391][ T7671] should_failslab+0x9/0x20 [ 370.039912][ T7671] slab_pre_alloc_hook+0x59/0x300 [ 370.044967][ T7671] kmem_cache_alloc+0x5a/0x2d0 [ 370.049737][ T7671] ? __kernfs_new_node+0xe5/0x7f0 [ 370.054770][ T7671] __kernfs_new_node+0xe5/0x7f0 [ 370.059623][ T7671] ? sysfs_create_dir_ns+0x16b/0x2a0 [ 370.064905][ T7671] ? mark_lock+0x94/0x320 [ 370.069229][ T7671] ? kernfs_new_node+0x260/0x260 [ 370.074174][ T7671] ? sysfs_do_create_link_sd+0x75/0x110 [ 370.079716][ T7671] ? __lock_acquire+0x7eb0/0x7eb0 [ 370.084738][ T7671] kernfs_new_node+0x14c/0x260 [ 370.089509][ T7671] kernfs_create_link+0xa7/0x200 [ 370.094443][ T7671] sysfs_do_create_link_sd+0x83/0x110 [ 370.099811][ T7671] br_sysfs_addif+0x79/0x220 [ 370.104403][ T7671] br_add_if+0x39b/0xee0 [ 370.108638][ T7671] ? bpf_lsm_capable+0x9/0x10 [ 370.113311][ T7671] ? security_capable+0x89/0xb0 [ 370.118164][ T7671] br_dev_siocdevprivate+0xb91/0x15e0 [ 370.123535][ T7671] ? rcu_is_watching+0x15/0xb0 [ 370.128299][ T7671] ? br_handle_local_finish+0x20/0x20 [ 370.133663][ T7671] ? trace_contention_end+0x39/0xe0 [ 370.138857][ T7671] ? __mutex_lock+0x30d/0xce0 [ 370.143532][ T7671] ? dev_load+0x21/0x1f0 [ 370.147801][ T7671] ? dev_ioctl+0x83c/0x1140 [ 370.152307][ T7671] ? __lock_acquire+0x7eb0/0x7eb0 [ 370.157330][ T7671] ? mutex_lock_nested+0x20/0x20 [ 370.162266][ T7671] ? full_name_hash+0x92/0xe0 [ 370.166945][ T7671] ? dev_ifsioc+0x957/0xc40 [ 370.171449][ T7671] dev_ioctl+0x84c/0x1140 [ 370.175777][ T7671] sock_ioctl+0x74c/0x7e0 [ 370.180107][ T7671] ? sock_poll+0x460/0x460 [ 370.184535][ T7671] ? bpf_lsm_file_ioctl+0x9/0x10 [ 370.189470][ T7671] ? security_file_ioctl+0x80/0xa0 [ 370.194583][ T7671] ? sock_poll+0x460/0x460 [ 370.198995][ T7671] __se_sys_ioctl+0xfd/0x170 [ 370.203591][ T7671] do_syscall_64+0x55/0xb0 [ 370.208012][ T7671] ? clear_bhb_loop+0x40/0x90 [ 370.212684][ T7671] ? clear_bhb_loop+0x40/0x90 [ 370.217359][ T7671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.223249][ T7671] RIP: 0033:0x7fcec439fb19 [ 370.227660][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.247268][ T7671] RSP: 002b:00007fcec524c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.255684][ T7671] RAX: ffffffffffffffda RBX: 00007fcec4625fa0 RCX: 00007fcec439fb19 [ 370.263658][ T7671] RDX: 0000200000000880 RSI: 00000000000089f0 RDI: 0000000000000006 [ 370.271625][ T7671] RBP: 00007fcec4437b70 R08: 0000000000000000 R09: 0000000000000000 [ 370.279590][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.287557][ T7671] R13: 00007fcec4626038 R14: 00007fcec4625fa0 R15: 00007ffff2ec22c8 [ 370.295544][ T7671] [ 370.304746][ T7671] gretap0: left allmulticast mode [ 370.323344][ T7499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.332130][ T7499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.343588][ T7499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.352369][ T7499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.456953][ T7533] veth0_vlan: entered promiscuous mode [ 370.505241][ T7533] veth1_vlan: entered promiscuous mode [ 370.542336][ T7106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.567504][ T7106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.575634][ T7533] veth0_macvtap: entered promiscuous mode [ 370.627543][ T7533] veth1_macvtap: entered promiscuous mode [ 370.643859][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.660214][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.687030][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.701902][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.712560][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.731977][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.744639][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.755203][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.770271][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.795382][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.815267][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.825620][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.836156][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.847087][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.857977][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.870701][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.897157][ T7533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.913759][ T7533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.922487][ T7533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.936498][ T7533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.047116][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.080362][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.156679][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.511174][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.173028][ T7711] mmap: syz.6.488 (7711) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 376.264582][ T7714] jffs2: notice: (7714) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 378.176229][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 378.364035][ T5167] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 378.583570][ T5167] usb 1-1: Using ep0 maxpacket: 16 [ 378.613831][ T5167] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 378.639933][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.646368][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.765518][ T5167] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 378.817495][ T5167] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 378.917665][ T5167] usb 1-1: config 0 has no interface number 1 [ 378.924396][ T5167] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 378.942833][ T5167] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 378.989080][ T5167] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.999360][ T5167] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.012678][ T5167] usb 1-1: config 0 interface 125 has no altsetting 0 [ 379.025105][ T5167] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 379.036810][ T5167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.050891][ T5167] usb 1-1: Product: syz [ 379.058334][ T5167] usb 1-1: Manufacturer: syz [ 379.068485][ T5167] usb 1-1: SerialNumber: syz [ 379.085809][ T5167] usb 1-1: config 0 descriptor?? [ 379.346410][ T8] usb 1-1: USB disconnect, device number 18 [ 381.552716][ T5787] Bluetooth: hci3: command tx timeout [ 381.575779][ T7756] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 381.631200][ T7756] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 382.022851][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 382.987525][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 383.064566][ T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 383.072975][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.101477][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.111307][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.126296][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.331080][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 383.440016][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.903908][ T8] usb 6-1: GET_CAPABILITIES returned 0 [ 383.909410][ T8] usbtmc 6-1:16.0: can't read capabilities [ 385.603451][ T6038] usb 6-1: USB disconnect, device number 2 [ 385.746242][ T2923] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.066998][ T2923] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.516783][ T2923] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.805880][ T7802] EXT4-fs warning (device sda1): ext4_resize_fs:2025: can't read last block, resize aborted [ 388.775123][ T2923] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.073677][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.102854][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.123300][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.162843][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.182941][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 391.190326][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.482985][ T7824] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.523191][ T7831] FAULT_INJECTION: forcing a failure. [ 392.523191][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 392.535897][ T7831] CPU: 1 PID: 7831 Comm: syz.5.500 Not tainted syzkaller #0 [ 392.543169][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 392.553208][ T7831] Call Trace: [ 392.556471][ T7831] [ 392.559388][ T7831] dump_stack_lvl+0x18c/0x250 [ 392.564059][ T7831] ? show_regs_print_info+0x20/0x20 [ 392.569245][ T7831] ? load_image+0x420/0x420 [ 392.573748][ T7831] ? __lock_acquire+0x7eb0/0x7eb0 [ 392.578769][ T7831] ? _raw_spin_lock_irq+0xbb/0xf0 [ 392.583793][ T7831] ? _raw_spin_lock_irqsave+0x100/0x100 [ 392.589335][ T7831] should_fail_ex+0x394/0x4c0 [ 392.594018][ T7831] should_failslab+0x9/0x20 [ 392.598510][ T7831] slab_pre_alloc_hook+0x59/0x300 [ 392.603529][ T7831] kmem_cache_alloc+0x5a/0x2d0 [ 392.608279][ T7831] ? copy_utsname+0x11b/0x430 [ 392.612955][ T7831] copy_utsname+0x11b/0x430 [ 392.617450][ T7831] create_new_namespaces+0x17b/0x700 [ 392.622728][ T7831] ? bpf_lsm_capable+0x9/0x10 [ 392.627440][ T7831] unshare_nsproxy_namespaces+0x11a/0x160 [ 392.633153][ T7831] ksys_unshare+0x4fa/0x8f0 [ 392.637659][ T7831] ? sighand_ctor+0x50/0x50 [ 392.642173][ T7831] ? lock_chain_count+0x20/0x20 [ 392.647037][ T7831] ? syscall_enter_from_user_mode+0x25/0x80 [ 392.652923][ T7831] __x64_sys_unshare+0x38/0x40 [ 392.657681][ T7831] do_syscall_64+0x55/0xb0 [ 392.662088][ T7831] ? clear_bhb_loop+0x40/0x90 [ 392.666767][ T7831] ? clear_bhb_loop+0x40/0x90 [ 392.671438][ T7831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.677339][ T7831] RIP: 0033:0x7f632239fb19 [ 392.681769][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.701374][ T7831] RSP: 002b:00007f632335c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 392.709779][ T7831] RAX: ffffffffffffffda RBX: 00007f6322625fa0 RCX: 00007f632239fb19 [ 392.717760][ T7831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 392.725719][ T7831] RBP: 00007f6322437b70 R08: 0000000000000000 R09: 0000000000000000 [ 392.733680][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.741664][ T7831] R13: 00007f6322626038 R14: 00007f6322625fa0 R15: 00007ffed2a68ae8 [ 392.749654][ T7831] [ 393.283619][ T52] Bluetooth: hci3: command tx timeout [ 393.493796][ T5848] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 394.462690][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 394.553313][ T5848] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.564590][ T5848] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.592952][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.632649][ T5848] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 394.677680][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.743783][ T5848] usb 1-1: config 0 descriptor?? [ 395.072901][ T7824] chnl_net:caif_netlink_parms(): no params data found [ 395.247689][ T5848] usbhid 1-1:0.0: can't add hid device: -71 [ 395.282787][ T5848] usbhid: probe of 1-1:0.0 failed with error -71 [ 395.338387][ T5848] usb 1-1: USB disconnect, device number 19 [ 395.363076][ T52] Bluetooth: hci3: command tx timeout [ 397.196935][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.209654][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.227095][ T7824] bridge_slave_0: entered allmulticast mode [ 397.258720][ T7824] bridge_slave_0: entered promiscuous mode [ 397.294010][ T7873] ip_tables: iptables: counters copy to user failed while replacing table [ 397.310833][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.331127][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.357437][ T7824] bridge_slave_1: entered allmulticast mode [ 397.377526][ T7824] bridge_slave_1: entered promiscuous mode [ 397.425305][ T50] ------------[ cut here ]------------ [ 397.431012][ T50] WARNING: CPU: 0 PID: 50 at io_uring/io_uring.c:3292 io_ring_exit_work+0x3c1/0x860 [ 397.440484][ T50] Modules linked in: [ 397.444418][ T50] CPU: 0 PID: 50 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 397.451782][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 397.462196][ T50] Workqueue: iou_exit io_ring_exit_work [ 397.463035][ T52] Bluetooth: hci3: command tx timeout [ 397.468040][ T50] RIP: 0010:io_ring_exit_work+0x3c1/0x860 [ 397.479635][ T50] Code: 89 e5 48 8b 7c 24 28 48 8b 34 24 e8 19 2a 11 00 48 85 c0 41 bc 00 20 00 00 75 1c e8 69 ab f8 f6 e9 b3 fd ff ff e8 5f ab f8 f6 <0f> 0b b8 70 17 00 00 48 89 04 24 eb c3 c7 84 24 90 00 00 00 00 00 [ 397.500085][ T50] RSP: 0018:ffffc90000bafa40 EFLAGS: 00010293 [ 397.506417][ T50] RAX: ffffffff8a8f3341 RBX: ffff88805f39a000 RCX: ffff88801bad1e00 [ 397.514457][ T50] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 397.522447][ T50] RBP: ffffc90000bafbb0 R08: ffffc90000baf9c7 R09: 1ffff92000175f38 [ 397.530709][ T50] R10: dffffc0000000000 R11: fffff52000175f39 R12: ffff88805f39a510 [ 397.539395][ T50] R13: 0000000100002552 R14: 0000000100002557 R15: dffffc0000000000 [ 397.547432][ T50] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 397.556633][ T50] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.565045][ T50] CR2: 00007f61e9e4f7b0 CR3: 0000000031b85000 CR4: 00000000003506f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 397.573106][ T50] Call Trace: [ 397.576403][ T50] [ 397.579363][ T50] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 397.586311][ T50] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.591545][ T50] ? process_scheduled_works+0x975/0x1600 [ 397.598333][ T50] ? process_scheduled_works+0x975/0x1600 [ 397.604266][ T50] process_scheduled_works+0xa60/0x1600 [ 397.609870][ T50] ? worker_attach_to_pool+0x370/0x370 [ 397.615474][ T50] ? assign_work+0x3cc/0x5d0 [ 397.620098][ T50] worker_thread+0xa5e/0xfe0 [ 397.624759][ T50] ? _raw_spin_unlock+0x40/0x40 [ 397.629629][ T50] ? __kthread_parkme+0x71/0x1c0 [ 397.634891][ T50] kthread+0x2fa/0x390 [ 397.638984][ T50] ? pr_cont_work+0x550/0x550 [ 397.643727][ T50] ? kthread_blkcg+0xd0/0xd0 [ 397.648325][ T50] ret_from_fork+0x48/0x80 [ 397.652926][ T50] ? kthread_blkcg+0xd0/0xd0 [ 397.657527][ T50] ret_from_fork_asm+0x11/0x20 [ 397.662289][ T50] [ 397.665341][ T50] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 397.672631][ T50] CPU: 0 PID: 50 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 397.680033][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 397.690102][ T50] Workqueue: iou_exit io_ring_exit_work [ 397.695667][ T50] Call Trace: [ 397.698951][ T50] [ 397.701889][ T50] dump_stack_lvl+0x18c/0x250 [ 397.706579][ T50] ? show_regs_print_info+0x20/0x20 [ 397.711782][ T50] ? load_image+0x420/0x420 [ 397.716300][ T50] panic+0x2ca/0x720 [ 397.720182][ T50] ? bpf_jit_dump+0xd0/0xd0 [ 397.724694][ T50] ? ret_from_fork_asm+0x11/0x20 [ 397.729654][ T50] __warn+0x2e0/0x470 [ 397.733636][ T50] ? io_ring_exit_work+0x3c1/0x860 [ 397.738767][ T50] ? io_ring_exit_work+0x3c1/0x860 [ 397.743877][ T50] report_bug+0x2be/0x4f0 [ 397.748202][ T50] ? io_ring_exit_work+0x3c1/0x860 [ 397.753318][ T50] ? io_ring_exit_work+0x3c1/0x860 [ 397.758411][ T50] ? io_ring_exit_work+0x3c3/0x860 [ 397.763529][ T50] handle_bug+0xcf/0x120 [ 397.767767][ T50] exc_invalid_op+0x1a/0x50 [ 397.772260][ T50] asm_exc_invalid_op+0x1a/0x20 [ 397.777102][ T50] RIP: 0010:io_ring_exit_work+0x3c1/0x860 [ 397.782815][ T50] Code: 89 e5 48 8b 7c 24 28 48 8b 34 24 e8 19 2a 11 00 48 85 c0 41 bc 00 20 00 00 75 1c e8 69 ab f8 f6 e9 b3 fd ff ff e8 5f ab f8 f6 <0f> 0b b8 70 17 00 00 48 89 04 24 eb c3 c7 84 24 90 00 00 00 00 00 [ 397.802410][ T50] RSP: 0018:ffffc90000bafa40 EFLAGS: 00010293 [ 397.808465][ T50] RAX: ffffffff8a8f3341 RBX: ffff88805f39a000 RCX: ffff88801bad1e00 [ 397.816425][ T50] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 397.824385][ T50] RBP: ffffc90000bafbb0 R08: ffffc90000baf9c7 R09: 1ffff92000175f38 [ 397.832346][ T50] R10: dffffc0000000000 R11: fffff52000175f39 R12: ffff88805f39a510 [ 397.840308][ T50] R13: 0000000100002552 R14: 0000000100002557 R15: dffffc0000000000 [ 397.848272][ T50] ? io_ring_exit_work+0x3c1/0x860 [ 397.853388][ T50] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 397.859200][ T50] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.864387][ T50] ? process_scheduled_works+0x975/0x1600 [ 397.870098][ T50] ? process_scheduled_works+0x975/0x1600 [ 397.875816][ T50] process_scheduled_works+0xa60/0x1600 [ 397.881377][ T50] ? worker_attach_to_pool+0x370/0x370 [ 397.886835][ T50] ? assign_work+0x3cc/0x5d0 [ 397.891422][ T50] worker_thread+0xa5e/0xfe0 [ 397.896017][ T50] ? _raw_spin_unlock+0x40/0x40 [ 397.900862][ T50] ? __kthread_parkme+0x71/0x1c0 [ 397.905794][ T50] kthread+0x2fa/0x390 [ 397.909854][ T50] ? pr_cont_work+0x550/0x550 [ 397.914521][ T50] ? kthread_blkcg+0xd0/0xd0 [ 397.919101][ T50] ret_from_fork+0x48/0x80 [ 397.923514][ T50] ? kthread_blkcg+0xd0/0xd0 [ 397.928098][ T50] ret_from_fork_asm+0x11/0x20 [ 397.932870][ T50] [ 397.936126][ T50] Kernel Offset: disabled [ 397.940525][ T50] Rebooting in 86400 seconds..