last executing test programs: 19.373226575s ago: executing program 2 (id=239): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x100) r6 = socket$inet(0x2, 0x3, 0x5) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) socket$inet(0xa, 0x1, 0x0) write$binfmt_elf64(r6, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x60, 0x0, 0xffffffffffffff00, 0x3, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x0, 0x0, 0x38, 0x2}, [{0x4, 0xda, 0xff, 0x3, 0x17, 0x0, 0x2, 0x2}, {0x4, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0xc8d6, 0x200, 0x8000}]}, 0xb0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) 15.427849004s ago: executing program 2 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3d2d2bc538cccf9, 0x110, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)}, &(0x7f0000000180)=0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0000001cfffffffffff5aaaaaaaaaaaa88a8320081003c00085c"], 0x3a) getsockopt$bt_hci(r3, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)='Pe', 0x2}], 0x1) r7 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1}}], 0x1, 0x10002, 0x0) 14.61832158s ago: executing program 0 (id=250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000140)={0x1c, 0x4, 0x1f, 0x14, 0x1, 0x2, 0x0, 0xf, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x294e) syz_open_dev$video(0x0, 0xa7, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff", 0x2b}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4040000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x6, 0xc1}], 0xee00}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3", 0xa0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x81, &(0x7f0000000040), &(0x7f0000048000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 13.425674996s ago: executing program 1 (id=252): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001840)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000300)={0x2, 0x109dc7, 0x0, 0x0, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200005e0a1e9f850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r5, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x2c, r7, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000d80)="b9ff03fe6044238cb89e14f080350de0ffff00184000632f77fbac14140ee000010062079f4b4d0f87e5feca6aab845013f2325f1a393ac78acd4bff227e25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x73, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e38062b311453dcbb62932a03105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090e586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fedf65e45110b81f6b4da06db5e1aad1f627acb", 0x1, 0x3}, 0x2c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x33, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0x11, 0x13, {0x13, 0x30, "2f1c861a384888e005e611effc7d8cf465"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.91632508s ago: executing program 0 (id=255): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="9800000010000100000020000300000000000000", @ANYRES32=0x0, @ANYBLOB="eb91817dbcb5f31a64001280110001006272696467655f736c617665000000004c0005800800030004000000080003000000000005000c000000000005000c0000000000050021000000000005001e0000000000050009000100000006001f000600000005001e0000000000140003006272696467655f736c6176655f30"], 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 11.691501594s ago: executing program 3 (id=256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x12, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0081fc00000009040f0001e711e100090583010003"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) unshare(0x26020480) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000001040)="e728f444", 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000700)=[@increfs_done], 0x0, 0x0, 0x0}) mount(&(0x7f0000000340)=@nullb, &(0x7f0000000380)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 11.515899578s ago: executing program 1 (id=258): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) inotify_init1(0x0) timer_delete(r0) 11.263304864s ago: executing program 1 (id=259): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40804) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001a00010028bd70000000800002201000000000070010000008000300", @ANYRES32, @ANYBLOB="08000100e0"], 0x34}}, 0xea5bc50b619dd77e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) 10.711679655s ago: executing program 1 (id=261): sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104b35716e67da422221d32860d4b13014bf9cabfec7430777c646ebc9300e0590be6a84abaccb05e82ee330d123771e0cc0c9368b55648d963864232b7bdd621975af674b10d42de3941d75591da43b6ff6424dc7fc1865667d662ea9dbcb8523cc733be2ecdc8094f", 0x6b, 0x20000814, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000802}, 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180002008000000000000000000100009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f0000000280)=""/14, 0xe}], 0x3, &(0x7f0000000400)=""/38, 0x26}, 0x2022) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x11) read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020}, 0xfdef) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b3"], 0x0}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061a000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) 8.411966662s ago: executing program 0 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newaddr={0x34, 0x14, 0x20, 0x70bd2a, 0xc0, {0x2, 0x1, 0x40, 0xc8, r3}, [@IFA_LABEL={0x14, 0x3, 'pimreg\x00'}, @IFA_BROADCAST={0x8, 0x4, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x7fff, 0x27, 0x4}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x28}}}}}, 0x36) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) set_mempolicy(0x0, &(0x7f0000000080)=0x924, 0x2) semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xfd8f, 0x800}, {0x2, 0xc4a8, 0x1000}, {0x3, 0xf, 0x1800}, {0x3, 0xb, 0x800}, {0x7db5d9112f1f1e05, 0x5}], 0x5) accept4$alg(r1, 0x0, 0x0, 0x0) 8.00586496s ago: executing program 2 (id=266): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_io_uring_setup(0x1118, &(0x7f0000001080)={0x0, 0x0, 0x7ffe, 0x0, 0x37e}, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000, 0x40000, 0x0, 0x0, 0x0, 0xc5c7}, 0x0, 0x0) 7.307727981s ago: executing program 2 (id=268): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x107400, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000080)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x7fff, 0x11300a1d, 0x6, 0x40, 0x1, 0x0, [{0x1, 0x9, 0x7, '\x00', 0x4283}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x2, 0x81, 0x0, 'queue0\x00', 0x6}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000300)=[{{}, 0x5, 0x6, 0x80000001}, {{}, 0x3, 0x42c1, 0x305d}, {{}, 0x16, 0x6, 0xe}, {{r4, r5/1000+60000}, 0x1, 0x1, 0x93}, {{r6, r7/1000+10000}, 0x12, 0xf8, 0xe14e}, {{}, 0x0, 0x0, 0x10001}], 0x90) r8 = syz_clone3(&(0x7f0000000780)={0x60000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x36}, &(0x7f00000005c0)=""/87, 0x57, &(0x7f0000000640)=""/216, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) r9 = syz_clone(0x0, &(0x7f0000000800)="ab26dc7d6dd15fff42750dd2e491d270716541b071500a472e695a19c5a51292bf5cc18f6630d14905094cb0b6440222278f9159118a26db3ec8ffcba055f995d4529ed7ec44162d54808861dd8a6e463f213d2c3938af3f5f2d61181fbf", 0x5e, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="6f358f494852549b20ee273cf3200a619c10c0435219ec593d6e7af8d9236828fb4d57e0b692a24ccc3c7639a170c30bf09c5cbcd59900ebc0ff2c2b23ed3f8d3373a18f5e6f60a431cd05efdcd66cb54cf0d4c97e56f7595ede79a889f35cc854f5b1c0f4bdc23bbd4c37591a226a0b43545e3c013eff2d6e5b4ef1672b84c5622b7d14f76aa8e2337c3f10fb8d") r10 = getpgid(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000a00)={0x9, 0x5, {0x0}, {0xffffffffffffffff}, 0x4, 0x9}) syz_clone3(&(0x7f0000000a80)={0x4000000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0x3a}, &(0x7f0000000480)=""/3, 0x3, &(0x7f00000004c0)=""/64, &(0x7f0000000a40)=[r8, r9, r10, r11, r12], 0x5, {r0}}, 0x58) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x4400, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000c80)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/40, 0x28, 0x0, &(0x7f0000000b80)=""/250, 0xfa}, &(0x7f0000000cc0)=0x40) clock_gettime(0x0, &(0x7f0000000d00)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d80)={r0, r0, 0x15, 0x0, @val=@iter={&(0x7f0000000d40)=@cgroup={0x4, r3, 0x80000001}, 0x10}}, 0x20) close_range(r13, r2, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000dc0)={0x1, 0x6, 0x7fffffff, 0xfffff0b2, 0xed}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000e40)=@req={0x28, &(0x7f0000000e00)={'veth1_to_team\x00', @ifru_names='veth1\x00'}}) ioctl$TIOCGRS485(r13, 0x542e, &(0x7f0000000e80)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0xda4d8000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000f40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000f00)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000f80)={0x10, 0x30, 0xfa00, {&(0x7f0000000ec0), 0x1, {0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}, r14}}, 0x38) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r15, 0x29, 0x17, &(0x7f0000000fc0)=0x4, 0x4) 7.250312017s ago: executing program 3 (id=269): r0 = userfaultfd(0x80801) fsetxattr$smack_xattr_label(r0, &(0x7f0000000300)='security.SMACK64EXEC\x00', &(0x7f0000000440)=ANY=[], 0xc, 0x1) 6.883653892s ago: executing program 3 (id=270): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x34, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0xd, 0x1, {0x1, 0x0, 0x1, 0x1c, 0x4, 0x4, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x271, 0xa5a00000, 0x1, 0x12, 0x1a, 0xf1, 0x1}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000500)={0x3, 0x0, [{0x80000001, 0x3, 0x0, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x2, 0x7f, 0xd11, 0xffffffff, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}]}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000009110"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)}) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507"], 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f00000002c0)) 6.424670401s ago: executing program 2 (id=272): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='$ 00000000000000000242 00000000000000000002 02000000000000000040 00000000000000000'], 0x57) 6.327410451s ago: executing program 1 (id=273): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x1, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xa, 0xa}, {0x5, 0x1d}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x14, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_MAX_P={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800757dc26e1fff752b05680008f000faff8141", @ANYRESHEX=r0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002840)="aa5cd3484f5a8b50", 0x8}, {0x0}], 0x2, &(0x7f0000000540)=ANY=[], 0x208}}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e25, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010200000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a800000600010003000000080005006ba3097d7f00542f4fa8889a3425f49fe3dde7d2a6895c22e24c66d3101cd414290e80b3fbf56bd0efbbff071f2912324ea430a8cb2bc20d116018615170af83eaf766f850a3", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) 6.118874281s ago: executing program 2 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.804002174s ago: executing program 0 (id=275): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8000, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x498, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0xffffffff, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x37], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x20000000, 0x3, 0xfffffffc, 0x4, 0x200800, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 4) 4.472601528s ago: executing program 0 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3d2d2bc538cccf9, 0x110, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)}, &(0x7f0000000180)=0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0000001cfffffffffff5aaaaaaaaaaaa88a8320081003c00085c"], 0x3a) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)='Pe', 0x2}], 0x1) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1}}], 0x1, 0x10002, 0x0) 4.471698491s ago: executing program 4 (id=277): r0 = socket(0x1d, 0x2, 0x6) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) (fail_nth: 2) 3.780249134s ago: executing program 3 (id=278): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x56, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000000000000000e926ba2800", 0x3234564e}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0xfffffffd, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x3, r3, 0x8}, 0xc) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f01ebbeec, 0x2010, r4, 0x80400000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r9 = epoll_create1(0x80000) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x3000001c}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}], 0x1c) sendmmsg$inet6(r8, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="070001008a"], 0x1f) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000300)="8907040400", 0x5) 3.776645085s ago: executing program 1 (id=279): syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x21}}}], 0x18}, 0xc4) r2 = fsmount(0xffffffffffffffff, 0x0, 0x9) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) listen(r3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000580)=0x1, &(0x7f00000005c0)=0x4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc040ff0b, &(0x7f0000000180)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r0, 0xc5a92000) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x40, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x28, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x109}]}, @typed={0x8, 0x26, 0x0, 0x0, @uid=r7}, @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x40}}, 0x2004c000) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x1, 0x0, @c}, 0x29, r8) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='P', 0x1, r8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x1a, 0x2}, 0x20) keyctl$read(0xb, r8, &(0x7f0000002e40)=""/72, 0x4) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, r7, &(0x7f0000000000)={0x3f2, 0x9, 0x1, 0x4}) 3.692528952s ago: executing program 4 (id=280): r0 = userfaultfd(0x80801) fsetxattr$smack_xattr_label(r0, &(0x7f0000000300)='security.SMACK64EXEC\x00', &(0x7f0000000440)=ANY=[], 0xc, 0x1) 3.393795374s ago: executing program 4 (id=281): r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x800, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = syz_io_uring_setup(0xbc0, &(0x7f0000001480)={0x0, 0xe84c, 0x200, 0x8000001, 0x7e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0xd, 0x1, {0x2}}) lsetxattr$security_capability(&(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x2000000, [{0xfffffffd, 0x2b6c}, {0x1, 0x526}]}, 0x14, 0x1) write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x1e, 0x37, 0x2, {0x1, 0x2, 0x7fffffff, r0}}, 0x1e) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0xd8, 0x4, 0x0, 0x1, r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) sendmmsg$alg(r7, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c", 0x1}], 0x1, 0x0, 0x0, 0x8010}], 0x1, 0x4) readlinkat(r1, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), 0x0) 3.252335759s ago: executing program 4 (id=282): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x20008000) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 3.159122869s ago: executing program 0 (id=283): sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104b35716e67da422221d32860d4b13014bf9cabfec7430777c646ebc9300e0590be6a84abaccb05e82ee330d123771e0cc0c9368b55648d963864232b7bdd621975af674b10d42de3941d75591da43b6ff6424dc7fc1865667d662ea9dbcb8523cc733be2ecdc8094f", 0x6b, 0x20000814, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000802}, 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180002008000000000000000000100009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f0000000280)=""/14, 0xe}], 0x3, &(0x7f0000000400)=""/38, 0x26}, 0x2022) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x11) read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020}, 0xfdef) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b3"], 0x0}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061a000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.553435592s ago: executing program 3 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x24000040) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioprio_get$pid(0x3, r4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x95340580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/243, 0xf3}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000040)}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000700)=""/145, 0x91}], 0x8, 0x0, 0x0, 0x20000000}, 0x20040011) 1.412388219s ago: executing program 4 (id=285): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') (fail_nth: 4) 1.411836855s ago: executing program 3 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x8000000, 0x51, &(0x7f0000000140)=""/81}]}) r4 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) 0s ago: executing program 4 (id=287): ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): romiscuous mode [ 85.015985][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.016204][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.016325][ T5795] bridge_slave_1: entered allmulticast mode [ 85.017976][ T5795] bridge_slave_1: entered promiscuous mode [ 85.061125][ T5802] Bluetooth: hci4: command tx timeout [ 85.061318][ T5808] Bluetooth: hci3: command tx timeout [ 85.522948][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.523086][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.523284][ T5801] bridge_slave_0: entered allmulticast mode [ 85.525982][ T5801] bridge_slave_0: entered promiscuous mode [ 85.750693][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.750832][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.751000][ T5796] bridge_slave_0: entered allmulticast mode [ 85.752731][ T5796] bridge_slave_0: entered promiscuous mode [ 85.754288][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.754416][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.754885][ T5801] bridge_slave_1: entered allmulticast mode [ 85.756455][ T5801] bridge_slave_1: entered promiscuous mode [ 85.757535][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.757638][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.757739][ T5798] bridge_slave_0: entered allmulticast mode [ 85.759163][ T5798] bridge_slave_0: entered promiscuous mode [ 85.767289][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.772120][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.772917][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.773035][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.773518][ T5796] bridge_slave_1: entered allmulticast mode [ 85.781089][ T5796] bridge_slave_1: entered promiscuous mode [ 85.912001][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.912116][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.912310][ T5798] bridge_slave_1: entered allmulticast mode [ 85.914917][ T5798] bridge_slave_1: entered promiscuous mode [ 85.919072][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.956856][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.543679][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.724140][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.726562][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.729385][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.733233][ T5797] team0: Port device team_slave_0 added [ 86.736945][ T5795] team0: Port device team_slave_0 added [ 86.741769][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.832933][ T5797] team0: Port device team_slave_1 added [ 86.834668][ T5795] team0: Port device team_slave_1 added [ 86.903187][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.059967][ T5808] Bluetooth: hci2: command tx timeout [ 87.060003][ T5808] Bluetooth: hci0: command tx timeout [ 87.060071][ T5802] Bluetooth: hci1: command tx timeout [ 87.140106][ T5808] Bluetooth: hci4: command tx timeout [ 87.140176][ T5802] Bluetooth: hci3: command tx timeout [ 87.242524][ T5801] team0: Port device team_slave_0 added [ 87.362534][ T5796] team0: Port device team_slave_0 added [ 87.434189][ T5801] team0: Port device team_slave_1 added [ 87.693153][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.693165][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.693179][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.695458][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.695473][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.695495][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.697716][ T5796] team0: Port device team_slave_1 added [ 87.699405][ T5798] team0: Port device team_slave_0 added [ 87.871392][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.871409][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.871430][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.872418][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.872428][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.872441][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.012436][ T5798] team0: Port device team_slave_1 added [ 88.231340][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.231354][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.231367][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.236069][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.236080][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.236093][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.363464][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.363476][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.363489][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.365069][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.365079][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.365093][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.365912][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.365921][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.365933][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.647218][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.647231][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.647245][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.845634][ T5797] hsr_slave_0: entered promiscuous mode [ 88.846750][ T5797] hsr_slave_1: entered promiscuous mode [ 88.858576][ T5795] hsr_slave_0: entered promiscuous mode [ 88.860443][ T5795] hsr_slave_1: entered promiscuous mode [ 88.861922][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 88.862048][ T5795] Cannot create hsr debugfs directory [ 89.139914][ T5802] Bluetooth: hci0: command tx timeout [ 89.139949][ T5802] Bluetooth: hci2: command tx timeout [ 89.140084][ T5808] Bluetooth: hci1: command tx timeout [ 89.219924][ T5114] Bluetooth: hci4: command tx timeout [ 89.220013][ T5808] Bluetooth: hci3: command tx timeout [ 89.313227][ T5801] hsr_slave_0: entered promiscuous mode [ 89.314066][ T5801] hsr_slave_1: entered promiscuous mode [ 89.314597][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 89.314617][ T5801] Cannot create hsr debugfs directory [ 89.387429][ T5796] hsr_slave_0: entered promiscuous mode [ 89.389211][ T5796] hsr_slave_1: entered promiscuous mode [ 89.392762][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 89.392788][ T5796] Cannot create hsr debugfs directory [ 89.483282][ T5798] hsr_slave_0: entered promiscuous mode [ 89.484064][ T5798] hsr_slave_1: entered promiscuous mode [ 89.484770][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 89.484788][ T5798] Cannot create hsr debugfs directory [ 90.983142][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.018139][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.034532][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.087166][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.200355][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.219944][ T5802] Bluetooth: hci0: command tx timeout [ 91.219996][ T5114] Bluetooth: hci2: command tx timeout [ 91.220027][ T5808] Bluetooth: hci1: command tx timeout [ 91.242680][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.274904][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.300044][ T5114] Bluetooth: hci4: command tx timeout [ 91.300088][ T5808] Bluetooth: hci3: command tx timeout [ 91.310755][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.457132][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.496647][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.552823][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.602099][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.733910][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.777992][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.797483][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.856421][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.958615][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.001398][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.048381][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.093904][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.128796][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.191988][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.236862][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.237776][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.277041][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.294770][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.294933][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.377157][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.422586][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.422743][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.427526][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.473032][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.473160][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.541757][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.587590][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.587795][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.608512][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.638642][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.638850][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.735779][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.764832][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.823307][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.823491][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.886418][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.887269][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.893518][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.945687][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.951187][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.007333][ T737] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.007479][ T737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.088933][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.272094][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.381187][ T5797] veth0_vlan: entered promiscuous mode [ 93.428244][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.442740][ T5797] veth1_vlan: entered promiscuous mode [ 93.637015][ T5795] veth0_vlan: entered promiscuous mode [ 93.667131][ T5797] veth0_macvtap: entered promiscuous mode [ 93.709097][ T5795] veth1_vlan: entered promiscuous mode [ 93.725041][ T5797] veth1_macvtap: entered promiscuous mode [ 93.775849][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.792988][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.818319][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.842311][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.912147][ T737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.931182][ T737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.934770][ T737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.967525][ T737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.968122][ T5795] veth0_macvtap: entered promiscuous mode [ 94.043057][ T5795] veth1_macvtap: entered promiscuous mode [ 94.226992][ T5796] veth0_vlan: entered promiscuous mode [ 94.239412][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.259321][ T5798] veth0_vlan: entered promiscuous mode [ 94.304426][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.324182][ T5796] veth1_vlan: entered promiscuous mode [ 94.327585][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.327609][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.362509][ T5798] veth1_vlan: entered promiscuous mode [ 94.368735][ T4551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.386221][ T4551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.392210][ T5801] veth0_vlan: entered promiscuous mode [ 94.404349][ T4551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.436997][ T4551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.519052][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.519072][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.537312][ T5801] veth1_vlan: entered promiscuous mode [ 94.755912][ T5796] veth0_macvtap: entered promiscuous mode [ 94.779110][ T5798] veth0_macvtap: entered promiscuous mode [ 94.801549][ T5796] veth1_macvtap: entered promiscuous mode [ 94.814744][ T737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.814763][ T737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.818965][ T5798] veth1_macvtap: entered promiscuous mode [ 94.909765][ T5801] veth0_macvtap: entered promiscuous mode [ 94.912812][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.917702][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.917722][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.957771][ T5801] veth1_macvtap: entered promiscuous mode [ 94.961724][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.965741][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.055177][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.085326][ T1012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.099523][ T1012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.149869][ T1012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.231231][ T1012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.235962][ T1012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.239345][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.266913][ T1012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.346996][ T1012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.385019][ T1012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727314][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.098662][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.111596][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.121707][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.143505][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.191291][ T5926] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.344539][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.523540][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.215406][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.397248][ T5883] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.397293][ T5883] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 98.397314][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.414559][ T5883] usb 4-1: config 0 descriptor?? [ 98.502201][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.502222][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.616270][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.616290][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.729780][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.729800][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.795695][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.845418][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.845438][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.005662][ T3284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.005685][ T3284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.251503][ T5884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.323589][ T5883] usb 4-1: USB disconnect, device number 2 [ 100.410511][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 100.414664][ T5884] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.414689][ T5884] usb 1-1: config 0 has no interface number 0 [ 100.414768][ T5884] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.414791][ T5884] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.414826][ T5884] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 100.414845][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.494397][ T5884] usb 1-1: config 0 descriptor?? [ 101.557034][ T5960] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 101.557179][ T5960] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10'. [ 103.807177][ T5972] binder: BINDER_SET_CONTEXT_MGR already set [ 103.807193][ T5972] binder: 5955:5972 ioctl 4018620d 200000000040 returned -16 [ 104.329421][ T5979] tmpfs: Unknown parameter 'usrquota_inode_har|liVm' [ 104.862310][ T5884] usbhid 1-1:0.1: can't add hid device: -71 [ 104.862433][ T5884] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 104.913183][ T5884] usb 1-1: USB disconnect, device number 2 [ 106.700469][ T6004] FAULT_INJECTION: forcing a failure. [ 106.700469][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.700560][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.4.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.700585][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.700603][ T6004] Call Trace: [ 106.700611][ T6004] [ 106.700619][ T6004] dump_stack_lvl+0x189/0x250 [ 106.700644][ T6004] ? rcu_is_watching+0x15/0xb0 [ 106.700665][ T6004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.700702][ T6004] should_fail_ex+0x46c/0x600 [ 106.700732][ T6004] _copy_from_user+0x2d/0xb0 [ 106.700752][ T6004] memdup_user+0x5e/0xd0 [ 106.700772][ T6004] strndup_user+0x68/0xd0 [ 106.700790][ T6004] __se_sys_mount+0xdf/0x410 [ 106.700814][ T6004] ? __pfx___se_sys_mount+0x10/0x10 [ 106.700835][ T6004] ? __x64_sys_mount+0x20/0xc0 [ 106.700854][ T6004] do_syscall_64+0xfa/0xf80 [ 106.700875][ T6004] ? rcu_is_watching+0x15/0xb0 [ 106.700890][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.700907][ T6004] ? clear_bhb_loop+0x60/0xb0 [ 106.700928][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.700944][ T6004] RIP: 0033:0x7f901aeaf749 [ 106.700964][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.700979][ T6004] RSP: 002b:00007f90190d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.700999][ T6004] RAX: ffffffffffffffda RBX: 00007f901b106180 RCX: 00007f901aeaf749 [ 106.701012][ T6004] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 00002000000001c0 [ 106.701024][ T6004] RBP: 00007f90190d4090 R08: 0000000000000000 R09: 0000000000000000 [ 106.701035][ T6004] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 106.701046][ T6004] R13: 00007f901b106218 R14: 00007f901b106180 R15: 00007ffced7c87d8 [ 106.701075][ T6004] [ 107.659881][ T5800] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.799829][ T5800] usb 3-1: device descriptor read/64, error -71 [ 108.059900][ T5800] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.145729][ T5800] usb 3-1: device descriptor read/64, error -71 [ 109.276162][ T5800] usb usb3-port1: attempt power cycle [ 110.540731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.644241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.997235][ T6045] FAULT_INJECTION: forcing a failure. [ 110.997235][ T6045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.997268][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 110.997288][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.997299][ T6045] Call Trace: [ 110.997306][ T6045] [ 110.997313][ T6045] dump_stack_lvl+0x189/0x250 [ 110.997339][ T6045] ? __pfx____ratelimit+0x10/0x10 [ 110.997359][ T6045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.997379][ T6045] ? __pfx__printk+0x10/0x10 [ 110.997409][ T6045] should_fail_ex+0x46c/0x600 [ 110.997438][ T6045] _copy_to_user+0x31/0xb0 [ 110.997459][ T6045] simple_read_from_buffer+0xe1/0x170 [ 110.997488][ T6045] proc_fail_nth_read+0x1b6/0x220 [ 110.997513][ T6045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.997537][ T6045] ? rw_verify_area+0x2ac/0x4e0 [ 110.997558][ T6045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.997580][ T6045] vfs_read+0x206/0xa30 [ 110.997607][ T6045] ? __pfx_vfs_read+0x10/0x10 [ 110.997624][ T6045] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 110.997664][ T6045] ? mutex_lock_nested+0x154/0x1d0 [ 110.997677][ T6045] ? fdget_pos+0x253/0x320 [ 110.997702][ T6045] ksys_read+0x14b/0x260 [ 110.997722][ T6045] ? __pfx_ksys_read+0x10/0x10 [ 110.997745][ T6045] ? do_syscall_64+0xbe/0xf80 [ 110.997768][ T6045] do_syscall_64+0xfa/0xf80 [ 110.997786][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.997801][ T6045] ? clear_bhb_loop+0x60/0xb0 [ 110.997821][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.997837][ T6045] RIP: 0033:0x7f20e344e15c [ 110.997853][ T6045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.997866][ T6045] RSP: 002b:00007f20e168d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.997885][ T6045] RAX: ffffffffffffffda RBX: 00007f20e36a6090 RCX: 00007f20e344e15c [ 110.997897][ T6045] RDX: 000000000000000f RSI: 00007f20e168d0a0 RDI: 0000000000000007 [ 110.997907][ T6045] RBP: 00007f20e168d090 R08: 0000000000000000 R09: 0000000000000000 [ 110.997917][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.997927][ T6045] R13: 00007f20e36a6128 R14: 00007f20e36a6090 R15: 00007fff9f4b2ef8 [ 110.997956][ T6045] [ 112.726372][ T6074] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20002 [ 113.008055][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.224169][ T6096] FAULT_INJECTION: forcing a failure. [ 113.224169][ T6096] name failslab, interval 1, probability 0, space 0, times 1 [ 113.224202][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.224223][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.224233][ T6096] Call Trace: [ 113.224240][ T6096] [ 113.224248][ T6096] dump_stack_lvl+0x189/0x250 [ 113.224274][ T6096] ? __pfx____ratelimit+0x10/0x10 [ 113.224295][ T6096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.224311][ T6096] ? __pfx__printk+0x10/0x10 [ 113.224327][ T6096] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 113.224342][ T6096] ? lockdep_hardirqs_on+0x98/0x140 [ 113.224361][ T6096] should_fail_ex+0x46c/0x600 [ 113.224383][ T6096] ? __alloc_skb+0x255/0x430 [ 113.224401][ T6096] should_failslab+0xa8/0x100 [ 113.224421][ T6096] ? __alloc_skb+0x255/0x430 [ 113.224445][ T6096] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 113.224468][ T6096] __alloc_skb+0x255/0x430 [ 113.224487][ T6096] ? __pfx___alloc_skb+0x10/0x10 [ 113.224502][ T6096] ? do_raw_spin_lock+0x121/0x290 [ 113.224525][ T6096] __pskb_copy_fclone+0xa8/0xfb0 [ 113.224544][ T6096] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 113.224564][ T6096] tipc_msg_reassemble+0x10b/0x3b0 [ 113.224586][ T6096] tipc_mcast_xmit+0x22c/0x18c0 [ 113.224610][ T6096] ? kasan_save_track+0x3e/0x80 [ 113.224625][ T6096] ? __kasan_slab_alloc+0x6c/0x80 [ 113.224642][ T6096] ? kmem_cache_alloc_node_noprof+0x23c/0x6f0 [ 113.224660][ T6096] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 113.224676][ T6096] ? __lock_acquire+0x6b6/0x2cf0 [ 113.224714][ T6096] ? __might_fault+0xb0/0x130 [ 113.224741][ T6096] ? __might_fault+0xb0/0x130 [ 113.224760][ T6096] ? _copy_from_iter+0x2d3/0x1630 [ 113.224776][ T6096] ? __build_skb_around+0x22d/0x3c0 [ 113.224811][ T6096] ? tipc_msg_build+0x474/0xcf0 [ 113.224836][ T6096] ? net_generic+0x1e/0x240 [ 113.224847][ T6096] ? net_generic+0x1e/0x240 [ 113.224860][ T6096] ? tipc_group_bc_cong+0x16c/0x220 [ 113.224878][ T6096] tipc_send_group_bcast+0x7a6/0xa80 [ 113.224906][ T6096] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 113.224930][ T6096] ? do_raw_spin_lock+0x121/0x290 [ 113.224948][ T6096] ? __pfx_woken_wake_function+0x10/0x10 [ 113.224966][ T6096] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 113.224981][ T6096] ? lockdep_hardirqs_on+0x98/0x140 [ 113.225001][ T6096] __tipc_sendmsg+0x2f7/0x2970 [ 113.225024][ T6096] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 113.225042][ T6096] ? __pfx___tipc_sendmsg+0x10/0x10 [ 113.225059][ T6096] ? __lock_acquire+0x6b6/0x2cf0 [ 113.225081][ T6096] ? rtlock_slowlock_locked+0xd8/0x4010 [ 113.225094][ T6096] ? __lock_acquire+0x6b6/0x2cf0 [ 113.225114][ T6096] ? __lock_acquire+0x6b6/0x2cf0 [ 113.225133][ T6096] ? do_raw_spin_lock+0x121/0x290 [ 113.225153][ T6096] ? __local_bh_enable+0x27b/0x410 [ 113.225170][ T6096] ? __local_bh_enable+0x28c/0x410 [ 113.225183][ T6096] ? reacquire_held_locks+0x121/0x1c0 [ 113.225203][ T6096] ? __pfx___local_bh_enable+0x10/0x10 [ 113.225229][ T6096] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 113.225242][ T6096] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 113.225255][ T6096] ? rt_spin_unlock+0x150/0x200 [ 113.225275][ T6096] ? lock_sock_nested+0xdd/0x130 [ 113.225292][ T6096] tipc_sendmsg+0x55/0x70 [ 113.225305][ T6096] ? __pfx_tipc_sendmsg+0x10/0x10 [ 113.225319][ T6096] __sock_sendmsg+0x21c/0x270 [ 113.225337][ T6096] ____sys_sendmsg+0x534/0x810 [ 113.225354][ T6096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.225373][ T6096] ? import_iovec+0x74/0xa0 [ 113.225390][ T6096] ___sys_sendmsg+0x21f/0x2a0 [ 113.225404][ T6096] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.225447][ T6096] ? __fget_files+0x2a/0x420 [ 113.225461][ T6096] ? __fget_files+0x3a6/0x420 [ 113.225481][ T6096] __sys_sendmmsg+0x22d/0x430 [ 113.225497][ T6096] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.225517][ T6096] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 113.225542][ T6096] ? ksys_write+0x230/0x260 [ 113.225560][ T6096] ? __pfx_ksys_write+0x10/0x10 [ 113.225580][ T6096] __x64_sys_sendmmsg+0xa0/0xc0 [ 113.225595][ T6096] do_syscall_64+0xfa/0xf80 [ 113.225611][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.225624][ T6096] ? clear_bhb_loop+0x60/0xb0 [ 113.225639][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.225652][ T6096] RIP: 0033:0x7f8644c7f749 [ 113.225664][ T6096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.225675][ T6096] RSP: 002b:00007f8642ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.225690][ T6096] RAX: ffffffffffffffda RBX: 00007f8644ed6090 RCX: 00007f8644c7f749 [ 113.225700][ T6096] RDX: 04000000000000e4 RSI: 0000200000003240 RDI: 0000000000000003 [ 113.225708][ T6096] RBP: 00007f8642ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.225716][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.225724][ T6096] R13: 00007f8644ed6128 R14: 00007f8644ed6090 R15: 00007ffdccf0ab28 [ 113.225746][ T6096] [ 113.377385][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.138923][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 114.138969][ T5863] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 114.138989][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.174570][ T5863] usb 5-1: config 0 descriptor?? [ 114.793830][ T5863] smsusb:smsusb_probe: board id=8, interface number 0 [ 114.805083][ T5863] smsusb:smsusb_probe: Device initialized with return code -19 [ 115.130171][ T5863] usb 5-1: USB disconnect, device number 2 [ 116.101569][ T6120] netlink: 96 bytes leftover after parsing attributes in process `syz.0.53'. [ 116.155929][ T6120] fuse: Bad value for 'fd' [ 117.245051][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.604789][ T5863] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.604818][ T5863] usb 3-1: config 0 has no interface number 0 [ 117.604858][ T5863] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.604880][ T5863] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.604916][ T5863] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 117.604938][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.643770][ T5863] usb 3-1: config 0 descriptor?? [ 117.914868][ T6123] Zero length message leads to an empty skb [ 118.268195][ T5863] usbhid 3-1:0.1: can't add hid device: -71 [ 118.268318][ T5863] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 118.356441][ T5863] usb 3-1: USB disconnect, device number 5 [ 120.039717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.144724][ T37] audit: type=1326 audit(1765082062.471:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.145802][ T37] audit: type=1326 audit(1765082062.471:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.145847][ T37] audit: type=1326 audit(1765082062.471:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.145885][ T37] audit: type=1326 audit(1765082062.471:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.145922][ T37] audit: type=1326 audit(1765082062.471:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.149390][ T37] audit: type=1326 audit(1765082062.471:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.189226][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 120.203149][ T37] audit: type=1326 audit(1765082062.471:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.203196][ T37] audit: type=1326 audit(1765082062.481:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.203232][ T37] audit: type=1326 audit(1765082062.481:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.203268][ T37] audit: type=1326 audit(1765082062.481:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6180 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8644c7f749 code=0x7ffc0000 [ 120.741109][ T6189] QAT: failed to copy from user. [ 121.794592][ T6201] process 'syz.3.70' launched './file2' with NULL argv: empty string added [ 121.913333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.718970][ T6216] FAULT_INJECTION: forcing a failure. [ 122.718970][ T6216] name failslab, interval 1, probability 0, space 0, times 0 [ 122.718993][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: syz.1.75 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.719008][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.719015][ T6216] Call Trace: [ 122.719019][ T6216] [ 122.719024][ T6216] dump_stack_lvl+0x189/0x250 [ 122.719043][ T6216] ? __pfx____ratelimit+0x10/0x10 [ 122.719056][ T6216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.719068][ T6216] ? __pfx__printk+0x10/0x10 [ 122.719081][ T6216] ? __pfx___might_resched+0x10/0x10 [ 122.719094][ T6216] should_fail_ex+0x46c/0x600 [ 122.719112][ T6216] should_failslab+0xa8/0x100 [ 122.719128][ T6216] __kmalloc_noprof+0xe0/0x7e0 [ 122.719141][ T6216] ? kernel_fpu_end+0xdf/0x130 [ 122.719155][ T6216] ? skcipher_next_slow+0xee/0x230 [ 122.719170][ T6216] ? skcipher_walk_next+0x7b3/0xbe0 [ 122.719184][ T6216] skcipher_next_slow+0xee/0x230 [ 122.719200][ T6216] gcm_decrypt_aesni_avx+0x5ab/0x5f0 [ 122.719218][ T6216] ? __pfx_gcm_decrypt_aesni_avx+0x10/0x10 [ 122.719237][ T6216] ? get_page+0xee/0x240 [ 122.719255][ T6216] ? crypto_aead_decrypt+0xda/0x190 [ 122.719267][ T6216] aead_recvmsg+0xe81/0x13b0 [ 122.719292][ T6216] ? __pfx_aead_recvmsg+0x10/0x10 [ 122.719311][ T6216] ? __lock_acquire+0x6b6/0x2cf0 [ 122.719327][ T6216] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 122.719348][ T6216] ? security_socket_recvmsg+0x7e/0x2e0 [ 122.719369][ T6216] ? __pfx_aead_recvmsg+0x10/0x10 [ 122.719389][ T6216] sock_recvmsg+0x22c/0x270 [ 122.719412][ T6216] ____sys_recvmsg+0x1ce/0x470 [ 122.719436][ T6216] ? __pfx_____sys_recvmsg+0x10/0x10 [ 122.719464][ T6216] ? import_iovec+0x74/0xa0 [ 122.719484][ T6216] ___sys_recvmsg+0x1b5/0x510 [ 122.719504][ T6216] ? __pfx____sys_recvmsg+0x10/0x10 [ 122.719542][ T6216] ? __fget_files+0x3a6/0x420 [ 122.719561][ T6216] do_recvmmsg+0x30d/0x770 [ 122.719576][ T6216] ? __pfx_do_recvmmsg+0x10/0x10 [ 122.719585][ T6216] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 122.719598][ T6216] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 122.719616][ T6216] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 122.719636][ T6216] __x64_sys_recvmmsg+0x190/0x240 [ 122.719655][ T6216] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 122.719674][ T6216] ? do_syscall_64+0xbe/0xf80 [ 122.719697][ T6216] do_syscall_64+0xfa/0xf80 [ 122.719715][ T6216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.719731][ T6216] ? clear_bhb_loop+0x60/0xb0 [ 122.719749][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.719765][ T6216] RIP: 0033:0x7f8644c7f749 [ 122.719780][ T6216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.719794][ T6216] RSP: 002b:00007f8642ee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 122.719813][ T6216] RAX: ffffffffffffffda RBX: 00007f8644ed5fa0 RCX: 00007f8644c7f749 [ 122.719823][ T6216] RDX: 0000000000000001 RSI: 0000200000001c40 RDI: 0000000000000004 [ 122.719829][ T6216] RBP: 00007f8642ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.719835][ T6216] R10: 0000000040002100 R11: 0000000000000246 R12: 0000000000000001 [ 122.719840][ T6216] R13: 00007f8644ed6038 R14: 00007f8644ed5fa0 R15: 00007ffdccf0ab28 [ 122.719857][ T6216] [ 122.730067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.730146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.730469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.730508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.730684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.731598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.349869][ T5944] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.420108][ T5885] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.511693][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 126.526183][ T5944] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.526207][ T5944] usb 3-1: config 0 has no interface number 0 [ 126.526249][ T5944] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.526272][ T5944] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.526309][ T5944] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 126.526330][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.569861][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 126.573171][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.573200][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.573234][ T5885] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 126.573254][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.597521][ T5885] usb 1-1: config 0 descriptor?? [ 126.700639][ T5944] usb 3-1: config 0 descriptor?? [ 126.785265][ T6248] FAULT_INJECTION: forcing a failure. [ 126.785265][ T6248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.785643][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.4.86 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.785657][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.785664][ T6248] Call Trace: [ 126.785670][ T6248] [ 126.785678][ T6248] dump_stack_lvl+0x189/0x250 [ 126.785705][ T6248] ? __pfx____ratelimit+0x10/0x10 [ 126.785726][ T6248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.785750][ T6248] ? __pfx__printk+0x10/0x10 [ 126.785768][ T6248] ? __might_fault+0xb0/0x130 [ 126.785792][ T6248] should_fail_ex+0x46c/0x600 [ 126.785810][ T6248] _copy_from_iter+0x1cd/0x1630 [ 126.785822][ T6248] ? __build_skb_around+0x22d/0x3c0 [ 126.785846][ T6248] ? __pfx__copy_from_iter+0x10/0x10 [ 126.785868][ T6248] ? __alloc_skb+0x2f1/0x430 [ 126.785892][ T6248] ? __pfx___alloc_skb+0x10/0x10 [ 126.785915][ T6248] ? netlink_sendmsg+0x642/0xb30 [ 126.785932][ T6248] ? skb_put+0x11b/0x210 [ 126.785953][ T6248] netlink_sendmsg+0x6b2/0xb30 [ 126.785968][ T6248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.785982][ T6248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.785997][ T6248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.786015][ T6248] __sock_sendmsg+0x21c/0x270 [ 126.786039][ T6248] ____sys_sendmsg+0x508/0x810 [ 126.786062][ T6248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.786088][ T6248] ? import_iovec+0x74/0xa0 [ 126.786109][ T6248] ___sys_sendmsg+0x21f/0x2a0 [ 126.786122][ T6248] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.786149][ T6248] ? __fget_files+0x2a/0x420 [ 126.786160][ T6248] ? __fget_files+0x3a6/0x420 [ 126.786186][ T6248] __x64_sys_sendmsg+0x1a1/0x260 [ 126.786205][ T6248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.786232][ T6248] ? __pfx_ksys_write+0x10/0x10 [ 126.786257][ T6248] ? do_syscall_64+0xbe/0xf80 [ 126.786277][ T6248] do_syscall_64+0xfa/0xf80 [ 126.786290][ T6248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.786299][ T6248] ? clear_bhb_loop+0x60/0xb0 [ 126.786311][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.786320][ T6248] RIP: 0033:0x7f901aeaf749 [ 126.786335][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.786349][ T6248] RSP: 002b:00007f9019116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.786368][ T6248] RAX: ffffffffffffffda RBX: 00007f901b105fa0 RCX: 00007f901aeaf749 [ 126.786381][ T6248] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 126.786391][ T6248] RBP: 00007f9019116090 R08: 0000000000000000 R09: 0000000000000000 [ 126.786402][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.786411][ T6248] R13: 00007f901b106038 R14: 00007f901b105fa0 R15: 00007ffced7c87d8 [ 126.786440][ T6248] [ 127.213515][ T5885] apple 0003:05AC:0274.0001: unknown main item tag 0x0 [ 127.213556][ T5885] apple 0003:05AC:0274.0001: unknown main item tag 0x0 [ 127.213584][ T5885] apple 0003:05AC:0274.0001: unknown main item tag 0x0 [ 127.213609][ T5885] apple 0003:05AC:0274.0001: unknown main item tag 0x0 [ 127.213634][ T5885] apple 0003:05AC:0274.0001: unknown main item tag 0x0 [ 127.307661][ T5885] apple 0003:05AC:0274.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0274] on usb-dummy_hcd.0-1/input0 [ 129.086136][ T5977] usb 1-1: USB disconnect, device number 3 [ 129.191778][ T6260] fido_id[6260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 129.285390][ T5944] uclogic 0003:28BD:0071.0002: failed retrieving string descriptor #100: -71 [ 129.285449][ T5944] uclogic 0003:28BD:0071.0002: failed retrieving pen parameters: -71 [ 129.285464][ T5944] uclogic 0003:28BD:0071.0002: pen probing failed: -71 [ 129.285491][ T5944] uclogic 0003:28BD:0071.0002: failed probing parameters: -71 [ 129.287493][ T5944] uclogic 0003:28BD:0071.0002: probe with driver uclogic failed with error -71 [ 129.339299][ T5944] usb 3-1: USB disconnect, device number 6 [ 129.505855][ T6268] FAULT_INJECTION: forcing a failure. [ 129.505855][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.505878][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.3.93 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.505890][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.505896][ T6268] Call Trace: [ 129.505901][ T6268] [ 129.505906][ T6268] dump_stack_lvl+0x189/0x250 [ 129.505923][ T6268] ? __pfx____ratelimit+0x10/0x10 [ 129.505936][ T6268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.505949][ T6268] ? __pfx__printk+0x10/0x10 [ 129.505959][ T6268] ? __might_fault+0xb0/0x130 [ 129.505978][ T6268] should_fail_ex+0x46c/0x600 [ 129.505996][ T6268] _copy_from_iter+0x1cd/0x1630 [ 129.506009][ T6268] ? __build_skb_around+0x22d/0x3c0 [ 129.506026][ T6268] ? __pfx__copy_from_iter+0x10/0x10 [ 129.506033][ T6268] ? __alloc_skb+0x2f1/0x430 [ 129.506048][ T6268] ? __pfx___alloc_skb+0x10/0x10 [ 129.506063][ T6268] ? netlink_sendmsg+0x642/0xb30 [ 129.506072][ T6268] ? skb_put+0x11b/0x210 [ 129.506088][ T6268] netlink_sendmsg+0x6b2/0xb30 [ 129.506102][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.506116][ T6268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.506129][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.506140][ T6268] __sock_sendmsg+0x21c/0x270 [ 129.506154][ T6268] ____sys_sendmsg+0x508/0x810 [ 129.506166][ T6268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.506180][ T6268] ? import_iovec+0x74/0xa0 [ 129.506193][ T6268] ___sys_sendmsg+0x21f/0x2a0 [ 129.506203][ T6268] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.506230][ T6268] ? __fget_files+0x2a/0x420 [ 129.506244][ T6268] ? __fget_files+0x3a6/0x420 [ 129.506258][ T6268] __x64_sys_sendmsg+0x1a1/0x260 [ 129.506270][ T6268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.506284][ T6268] ? __pfx_ksys_write+0x10/0x10 [ 129.506300][ T6268] ? do_syscall_64+0xbe/0xf80 [ 129.506315][ T6268] do_syscall_64+0xfa/0xf80 [ 129.506327][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.506337][ T6268] ? clear_bhb_loop+0x60/0xb0 [ 129.506349][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.506358][ T6268] RIP: 0033:0x7fdc8234f749 [ 129.506368][ T6268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.506376][ T6268] RSP: 002b:00007fdc805b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.506387][ T6268] RAX: ffffffffffffffda RBX: 00007fdc825a5fa0 RCX: 00007fdc8234f749 [ 129.506394][ T6268] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 129.506400][ T6268] RBP: 00007fdc805b6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.506406][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.506411][ T6268] R13: 00007fdc825a6038 R14: 00007fdc825a5fa0 R15: 00007ffd6f710978 [ 129.506427][ T6268] [ 129.923151][ T6274] ptrace attach of "./syz-executor exec"[5796] was attempted by "\x09     \x0a       \x0a \x0b  [ 130.136195][ T6269] netlink: 64 bytes leftover after parsing attributes in process `syz.4.88'. [ 130.816773][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.860331][ T5944] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.972042][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 130.995644][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.995669][ T5885] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.009943][ T5885] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.009974][ T5885] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.009991][ T5885] usb 3-1: Manufacturer: syz [ 131.031959][ T5885] usb 3-1: config 0 descriptor?? [ 131.053673][ T5944] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 131.053703][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.062766][ T5944] usb 1-1: config 0 descriptor?? [ 131.305312][ T6271] FAULT_INJECTION: forcing a failure. [ 131.305312][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 131.305343][ T6271] CPU: 0 UID: 0 PID: 6271 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.305373][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.305383][ T6271] Call Trace: [ 131.305390][ T6271] [ 131.305398][ T6271] dump_stack_lvl+0x189/0x250 [ 131.305424][ T6271] ? __pfx____ratelimit+0x10/0x10 [ 131.305445][ T6271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.305463][ T6271] ? __pfx__printk+0x10/0x10 [ 131.305485][ T6271] ? __pfx___might_resched+0x10/0x10 [ 131.305506][ T6271] should_fail_ex+0x46c/0x600 [ 131.305533][ T6271] ? __alloc_skb+0x255/0x430 [ 131.305553][ T6271] should_failslab+0xa8/0x100 [ 131.305577][ T6271] ? __alloc_skb+0x255/0x430 [ 131.305596][ T6271] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 131.305623][ T6271] __alloc_skb+0x255/0x430 [ 131.305647][ T6271] ? __pfx___alloc_skb+0x10/0x10 [ 131.305670][ T6271] ? netlink_autobind+0xdb/0x300 [ 131.305687][ T6271] ? netlink_autobind+0x2c2/0x300 [ 131.305706][ T6271] netlink_sendmsg+0x5c6/0xb30 [ 131.305732][ T6271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.305757][ T6271] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.305778][ T6271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.305795][ T6271] __sock_sendmsg+0x21c/0x270 [ 131.305818][ T6271] ____sys_sendmsg+0x508/0x810 [ 131.305838][ T6271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.305860][ T6271] ? import_iovec+0x74/0xa0 [ 131.305882][ T6271] ___sys_sendmsg+0x21f/0x2a0 [ 131.305901][ T6271] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.305949][ T6271] ? __fget_files+0x2a/0x420 [ 131.305966][ T6271] ? __fget_files+0x3a6/0x420 [ 131.305992][ T6271] __x64_sys_sendmsg+0x1a1/0x260 [ 131.306011][ T6271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.306036][ T6271] ? __pfx_ksys_write+0x10/0x10 [ 131.306061][ T6271] ? do_syscall_64+0xbe/0xf80 [ 131.306084][ T6271] do_syscall_64+0xfa/0xf80 [ 131.306104][ T6271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.306121][ T6271] ? clear_bhb_loop+0x60/0xb0 [ 131.306140][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.306156][ T6271] RIP: 0033:0x7fdc8234f749 [ 131.306171][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.306185][ T6271] RSP: 002b:00007fdc805b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.306204][ T6271] RAX: ffffffffffffffda RBX: 00007fdc825a5fa0 RCX: 00007fdc8234f749 [ 131.306216][ T6271] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 131.306227][ T6271] RBP: 00007fdc805b6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.306237][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.306247][ T6271] R13: 00007fdc825a6038 R14: 00007fdc825a5fa0 R15: 00007ffd6f710978 [ 131.306275][ T6271] [ 132.227962][ T5944] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 132.271562][ T5944] usb 1-1: USB disconnect, device number 4 [ 132.460092][ T6295] Non-string source [ 133.385516][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.580959][ T6071] usb 3-1: USB disconnect, device number 7 [ 133.709758][ T5800] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.855738][ T5800] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.855767][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.855784][ T5800] usb 1-1: Product: syz [ 135.855797][ T5800] usb 1-1: Manufacturer: syz [ 135.855809][ T5800] usb 1-1: SerialNumber: syz [ 136.229781][ T5944] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.350292][ T5800] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 136.350351][ T5800] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 136.350369][ T5800] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 136.387758][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 136.393917][ T5944] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.393942][ T5944] usb 5-1: config 0 has no interface number 0 [ 136.393984][ T5944] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.394007][ T5944] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.394041][ T5944] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 136.394060][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.401708][ T5944] usb 5-1: config 0 descriptor?? [ 136.439134][ T5800] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 136.464406][ T6327] netlink: 180 bytes leftover after parsing attributes in process `syz.1.110'. [ 136.498991][ T5800] usb 1-1: USB disconnect, device number 5 [ 136.804789][ T5944] usbhid 5-1:0.1: can't add hid device: -71 [ 136.804906][ T5944] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 136.812540][ T5944] usb 5-1: USB disconnect, device number 3 [ 136.850882][ T5933] udevd[5933]: setting mode of /dev/bus/usb/005/003 to 020664 failed: No such file or directory [ 136.851057][ T5933] udevd[5933]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 136.894932][ T5912] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.905270][ T6071] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.980090][ T5800] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.050104][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 137.060565][ T5912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.060589][ T5912] usb 4-1: config 0 has no interface number 0 [ 137.060634][ T5912] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.060656][ T5912] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.060690][ T5912] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 137.060709][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.076259][ T6071] usb 3-1: Using ep0 maxpacket: 16 [ 137.078613][ T6071] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.078637][ T6071] usb 3-1: config 0 has no interface number 0 [ 137.078681][ T6071] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.078703][ T6071] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.078736][ T6071] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 137.078755][ T6071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.080834][ T5912] usb 4-1: config 0 descriptor?? [ 137.189837][ T5800] usb 1-1: Using ep0 maxpacket: 16 [ 137.203209][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.203266][ T5800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.203284][ T5800] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.210930][ T5800] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.210955][ T5800] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.210972][ T5800] usb 1-1: Manufacturer: syz [ 137.282743][ T6071] usb 3-1: config 0 descriptor?? [ 137.287078][ T5800] usb 1-1: config 0 descriptor?? [ 138.175962][ T6339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.316565][ T5912] uclogic 0003:28BD:0071.0003: failed retrieving string descriptor #100: -71 [ 138.316627][ T5912] uclogic 0003:28BD:0071.0003: failed retrieving pen parameters: -71 [ 138.316643][ T5912] uclogic 0003:28BD:0071.0003: pen probing failed: -71 [ 138.316658][ T5912] uclogic 0003:28BD:0071.0003: failed probing parameters: -71 [ 138.316752][ T5912] uclogic 0003:28BD:0071.0003: probe with driver uclogic failed with error -71 [ 138.386893][ T5912] usb 4-1: USB disconnect, device number 3 [ 138.767598][ T6071] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 138.767635][ T6071] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 138.767644][ T6071] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 138.767653][ T6071] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 138.767719][ T6071] uclogic 0003:28BD:0071.0004: probe with driver uclogic failed with error -71 [ 138.834035][ T6071] usb 3-1: USB disconnect, device number 8 [ 139.503940][ T6355] ntfs3(nullb0): Primary boot signature is not NTFS. [ 139.505119][ T6355] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 140.116386][ T5863] usb 1-1: USB disconnect, device number 6 [ 140.463742][ T6368] FAULT_INJECTION: forcing a failure. [ 140.463742][ T6368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.463773][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.463793][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.463803][ T6368] Call Trace: [ 140.463810][ T6368] [ 140.463817][ T6368] dump_stack_lvl+0x189/0x250 [ 140.463843][ T6368] ? __pfx____ratelimit+0x10/0x10 [ 140.463864][ T6368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.463884][ T6368] ? __pfx__printk+0x10/0x10 [ 140.463906][ T6368] ? __might_fault+0xb0/0x130 [ 140.463938][ T6368] should_fail_ex+0x46c/0x600 [ 140.463967][ T6368] _copy_from_iter+0x1cd/0x1630 [ 140.463989][ T6368] ? __build_skb_around+0x22d/0x3c0 [ 140.464017][ T6368] ? __pfx__copy_from_iter+0x10/0x10 [ 140.464031][ T6368] ? __alloc_skb+0x2f1/0x430 [ 140.464054][ T6368] ? __pfx___alloc_skb+0x10/0x10 [ 140.464076][ T6368] ? smack_socket_getpeersec_dgram+0x266/0x430 [ 140.464095][ T6368] ? netlink_sendmsg+0x642/0xb30 [ 140.464112][ T6368] ? skb_put+0x11b/0x210 [ 140.464138][ T6368] netlink_sendmsg+0x6b2/0xb30 [ 140.464164][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.464189][ T6368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.464210][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.464228][ T6368] __sock_sendmsg+0x21c/0x270 [ 140.464252][ T6368] ____sys_sendmsg+0x508/0x810 [ 140.464274][ T6368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.464300][ T6368] ? import_iovec+0x74/0xa0 [ 140.464321][ T6368] ___sys_sendmsg+0x21f/0x2a0 [ 140.464339][ T6368] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.464384][ T6368] ? __fget_files+0x2a/0x420 [ 140.464400][ T6368] ? __fget_files+0x3a6/0x420 [ 140.464424][ T6368] __x64_sys_sendmsg+0x1a1/0x260 [ 140.464443][ T6368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.464476][ T6368] ? __pfx_ksys_write+0x10/0x10 [ 140.464501][ T6368] ? do_syscall_64+0xbe/0xf80 [ 140.464526][ T6368] do_syscall_64+0xfa/0xf80 [ 140.464545][ T6368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.464562][ T6368] ? clear_bhb_loop+0x60/0xb0 [ 140.464581][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.464596][ T6368] RIP: 0033:0x7fdc8234f749 [ 140.464611][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.464625][ T6368] RSP: 002b:00007fdc80595038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.464643][ T6368] RAX: ffffffffffffffda RBX: 00007fdc825a6090 RCX: 00007fdc8234f749 [ 140.464656][ T6368] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 140.464666][ T6368] RBP: 00007fdc80595090 R08: 0000000000000000 R09: 0000000000000000 [ 140.464677][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.464687][ T6368] R13: 00007fdc825a6128 R14: 00007fdc825a6090 R15: 00007ffd6f710978 [ 140.464716][ T6368] [ 142.281295][ T5863] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.179733][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 143.201712][ T5863] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.201738][ T5863] usb 3-1: config 0 has no interface number 0 [ 143.201784][ T5863] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.201807][ T5863] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.201843][ T5863] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 143.201863][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.228961][ T5863] usb 3-1: config 0 descriptor?? [ 144.689793][ T5863] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71 [ 144.689856][ T5863] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71 [ 144.689871][ T5863] uclogic 0003:28BD:0071.0005: pen probing failed: -71 [ 144.689886][ T5863] uclogic 0003:28BD:0071.0005: failed probing parameters: -71 [ 144.689990][ T5863] uclogic 0003:28BD:0071.0005: probe with driver uclogic failed with error -71 [ 144.729946][ T5863] usb 3-1: USB disconnect, device number 9 [ 145.178875][ T6392] FAULT_INJECTION: forcing a failure. [ 145.178875][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 145.178906][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.4.131 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.178927][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.178937][ T6392] Call Trace: [ 145.178943][ T6392] [ 145.178951][ T6392] dump_stack_lvl+0x189/0x250 [ 145.178977][ T6392] ? __pfx____ratelimit+0x10/0x10 [ 145.179007][ T6392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.179027][ T6392] ? __pfx__printk+0x10/0x10 [ 145.179051][ T6392] ? __pfx___might_resched+0x10/0x10 [ 145.179068][ T6392] ? fs_reclaim_acquire+0x7d/0x100 [ 145.179095][ T6392] should_fail_ex+0x46c/0x600 [ 145.179122][ T6392] ? ep_ptable_queue_proc+0x5c/0x200 [ 145.179141][ T6392] should_failslab+0xa8/0x100 [ 145.179165][ T6392] ? ep_ptable_queue_proc+0x5c/0x200 [ 145.179183][ T6392] kmem_cache_alloc_noprof+0x84/0x6c0 [ 145.179212][ T6392] ep_ptable_queue_proc+0x5c/0x200 [ 145.179229][ T6392] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 145.179247][ T6392] pidfd_poll+0xa4/0x380 [ 145.179262][ T6392] ? __pfx_pidfd_poll+0x10/0x10 [ 145.179275][ T6392] ep_insert+0x1173/0x1750 [ 145.179307][ T6392] ? __pfx_ep_insert+0x10/0x10 [ 145.179325][ T6392] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 145.179343][ T6392] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.179364][ T6392] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 145.179386][ T6392] ? mutex_lock_nested+0x154/0x1d0 [ 145.179400][ T6392] ? do_epoll_ctl+0x3d2/0xe90 [ 145.179417][ T6392] do_epoll_ctl+0x7fd/0xe90 [ 145.179439][ T6392] __x64_sys_epoll_ctl+0x163/0x1a0 [ 145.179459][ T6392] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 145.179480][ T6392] ? do_syscall_64+0xbe/0xf80 [ 145.179502][ T6392] do_syscall_64+0xfa/0xf80 [ 145.179520][ T6392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.179535][ T6392] ? clear_bhb_loop+0x60/0xb0 [ 145.179555][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.179570][ T6392] RIP: 0033:0x7f901aeaf749 [ 145.179586][ T6392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.179599][ T6392] RSP: 002b:00007f9019116038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 145.179617][ T6392] RAX: ffffffffffffffda RBX: 00007f901b105fa0 RCX: 00007f901aeaf749 [ 145.179632][ T6392] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 145.179641][ T6392] RBP: 00007f9019116090 R08: 0000000000000000 R09: 0000000000000000 [ 145.179649][ T6392] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 145.179658][ T6392] R13: 00007f901b106038 R14: 00007f901b105fa0 R15: 00007ffced7c87d8 [ 145.179685][ T6392] [ 145.389971][ T5863] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.446408][ T6401] trusted_key: syz.4.132 sent an empty control message without MSG_MORE. [ 145.545850][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.545905][ T5863] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.545929][ T5863] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.545948][ T5863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.545979][ T5863] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 145.545999][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.574516][ T5863] usb 2-1: config 0 descriptor?? [ 145.669793][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.803075][ T5912] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.838711][ T5883] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.838753][ T5883] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 145.838773][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.876187][ T5883] usb 4-1: config 0 descriptor?? [ 145.981578][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 146.004373][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.004430][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.004504][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 146.004524][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 146.004543][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.011062][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 146.011090][ T5912] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.011108][ T5912] usb 3-1: Manufacturer: syz [ 146.061855][ T5912] usb 3-1: config 0 descriptor?? [ 146.107560][ T5863] kye 0003:0458:5015.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 146.257091][ T5863] kye 0003:0458:5015.0006: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 146.257121][ T5863] kye 0003:0458:5015.0006: tablet-enabling feature report not found [ 146.257819][ T5863] kye 0003:0458:5015.0006: tablet enabling failed [ 146.300523][ T6415] openvswitch: netlink: Message has 8 unknown bytes. [ 146.449792][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.460106][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.524319][ T5945] usb 2-1: USB disconnect, device number 2 [ 146.547381][ T5912] rc_core: IR keymap rc-hauppauge not found [ 146.547400][ T5912] Registered IR keymap rc-empty [ 146.548290][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.559878][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.585918][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 146.593569][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 146.599819][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 146.611843][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.619735][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 146.637652][ T5883] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 146.637682][ T5883] usb 1-1: config 0 has no interface number 0 [ 146.637780][ T5883] usb 1-1: config 0 interface 184 has no altsetting 0 [ 146.643354][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.665360][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.679889][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.711689][ T5883] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 146.711767][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.711785][ T5883] usb 1-1: Product: syz [ 146.711796][ T5883] usb 1-1: Manufacturer: syz [ 146.711807][ T5883] usb 1-1: SerialNumber: syz [ 146.714240][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.714830][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.714851][ T10] usb 5-1: config 0 has no interface number 0 [ 146.714979][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.715002][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.715025][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 146.715036][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.722058][ T10] usb 5-1: config 0 descriptor?? [ 146.739976][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.751456][ T5883] usb 1-1: config 0 descriptor?? [ 146.760493][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.782248][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.800569][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.831961][ T5912] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 146.876071][ T5912] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 146.876094][ T5912] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.909876][ T5883] smsc75xx v1.0.0 [ 146.920759][ T5912] usb 3-1: USB disconnect, device number 10 [ 147.393863][ T5883] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 147.393955][ T5883] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.547037][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.547581][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.576538][ T10] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 147.578969][ T10] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 147.578991][ T10] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 147.579006][ T10] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 147.581261][ T37] kauditd_printk_skb: 48 callbacks suppressed [ 147.581277][ T37] audit: type=1326 audit(1765082089.891:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.582960][ T37] audit: type=1326 audit(1765082089.911:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.583005][ T37] audit: type=1326 audit(1765082089.911:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.583047][ T37] audit: type=1326 audit(1765082089.911:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.583084][ T37] audit: type=1326 audit(1765082089.911:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.583119][ T37] audit: type=1326 audit(1765082089.911:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.583154][ T37] audit: type=1326 audit(1765082089.911:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.583189][ T37] audit: type=1326 audit(1765082089.911:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.584288][ T37] audit: type=1326 audit(1765082089.911:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.585896][ T37] audit: type=1326 audit(1765082089.911:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6397 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8234f749 code=0x7ffc0000 [ 147.612783][ T10] uclogic 0003:28BD:0071.0007: probe with driver uclogic failed with error -71 [ 147.659976][ T5883] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 147.660005][ T5883] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 147.660020][ T5883] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 147.660040][ T5883] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 147.660601][ T5883] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 147.910681][ T5883] usb 1-1: USB disconnect, device number 7 [ 147.916649][ T10] usb 5-1: USB disconnect, device number 4 [ 148.286159][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.143'. [ 148.370454][ T5945] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 148.378608][ T6434] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 148.378608][ T6434] The task syz.1.143 (6434) triggered the difference, watch for misbehavior. [ 148.540343][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 148.823803][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.823820][ T5945] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.825097][ T5945] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 148.825121][ T5945] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.825139][ T5945] usb 3-1: Manufacturer: syz [ 148.836466][ T5945] usb 3-1: config 0 descriptor?? [ 149.026195][ T6444] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 149.026216][ T6444] netlink: 224 bytes leftover after parsing attributes in process `syz.0.144'. [ 149.645730][ T5883] usb 4-1: USB disconnect, device number 4 [ 149.725621][ T6450] FAULT_INJECTION: forcing a failure. [ 149.725621][ T6450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.725663][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.4.146 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.725683][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.725692][ T6450] Call Trace: [ 149.725699][ T6450] [ 149.725707][ T6450] dump_stack_lvl+0x189/0x250 [ 149.725732][ T6450] ? __pfx____ratelimit+0x10/0x10 [ 149.725752][ T6450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.725771][ T6450] ? __pfx__printk+0x10/0x10 [ 149.725788][ T6450] ? __might_fault+0xb0/0x130 [ 149.725820][ T6450] should_fail_ex+0x46c/0x600 [ 149.725849][ T6450] _copy_from_user+0x2d/0xb0 [ 149.725869][ T6450] ___sys_sendmsg+0x158/0x2a0 [ 149.725888][ T6450] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.725939][ T6450] ? __fget_files+0x2a/0x420 [ 149.725954][ T6450] ? __fget_files+0x3a6/0x420 [ 149.725979][ T6450] __sys_sendmmsg+0x22d/0x430 [ 149.726001][ T6450] ? __pfx___sys_sendmmsg+0x10/0x10 [ 149.726029][ T6450] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 149.726059][ T6450] ? ksys_write+0x230/0x260 [ 149.726083][ T6450] ? __pfx_ksys_write+0x10/0x10 [ 149.726108][ T6450] __x64_sys_sendmmsg+0xa0/0xc0 [ 149.726127][ T6450] do_syscall_64+0xfa/0xf80 [ 149.726149][ T6450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.726166][ T6450] ? clear_bhb_loop+0x60/0xb0 [ 149.726187][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.726202][ T6450] RIP: 0033:0x7f901aeaf749 [ 149.726218][ T6450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.726231][ T6450] RSP: 002b:00007f9019116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 149.726250][ T6450] RAX: ffffffffffffffda RBX: 00007f901b105fa0 RCX: 00007f901aeaf749 [ 149.726263][ T6450] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 149.726273][ T6450] RBP: 00007f9019116090 R08: 0000000000000000 R09: 0000000000000000 [ 149.726284][ T6450] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 149.726294][ T6450] R13: 00007f901b106038 R14: 00007f901b105fa0 R15: 00007ffced7c87d8 [ 149.726323][ T6450] [ 150.160998][ T5883] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.319977][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 150.324402][ T5883] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 150.324428][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.324444][ T5883] usb 1-1: config 0 has no interface number 0 [ 150.324486][ T5883] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 150.324507][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.334251][ T5883] usb 1-1: config 0 descriptor?? [ 150.346536][ T5883] uvcvideo 1-1:0.64: Found Unit with invalid ID 0 [ 150.346703][ T5883] uvcvideo 1-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 150.346742][ T5883] uvcvideo 1-1:0.64: No valid video chain found. [ 150.468995][ T6467] Bluetooth: MGMT ver 1.23 [ 150.556186][ T5883] usb 1-1: USB disconnect, device number 8 [ 151.087340][ T5977] usb 3-1: USB disconnect, device number 11 [ 152.002432][ T6479] netlink: 8744 bytes leftover after parsing attributes in process `syz.2.157'. [ 152.399198][ T6482] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 152.399220][ T6482] netlink: 224 bytes leftover after parsing attributes in process `syz.0.158'. [ 154.082810][ T5945] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 154.230233][ T5948] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 154.270091][ T5945] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.270135][ T5945] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 154.270155][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.320109][ T5945] usb 3-1: config 0 descriptor?? [ 154.439778][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 154.439812][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 154.439850][ T5948] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 154.439871][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.462450][ T5948] usb 4-1: config 0 descriptor?? [ 154.463596][ T6492] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 154.469846][ T5977] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 154.675782][ T5948] usbhid 4-1:0.0: can't add hid device: -71 [ 154.675896][ T5948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.687974][ T5977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.689171][ T5977] usb 1-1: not running at top speed; connect to a high speed hub [ 154.693600][ T5977] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 154.693630][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 154.693653][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 154.693676][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.693696][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 154.693715][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 113, setting to 64 [ 154.710485][ T5977] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 154.710513][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.710530][ T5977] usb 1-1: Product: 而氺桬䝹岔➵נּ纚祼ᇱᶘᓇ㎱႖Ֆ농糎䈪躶霏ꄁ矺畤퍾꥘씨ಘА䄮卩뒟㤡櫌湝潇醊皤臎䢸萯⑒洌䖕逵鉇끊⩺쮋⩗徭萟긞籤Ა脪鱥౉ﺴ䮝魢蔑냵ꍐⴍ괼偖ആ댅ᵀ靿㞏⚎矜퐪翗般胧噙蚰Ì攧燳ᠠ [ 154.710554][ T5977] usb 1-1: Manufacturer: Б [ 154.719429][ T5948] usb 4-1: USB disconnect, device number 5 [ 154.798045][ T5977] usb 1-1: config 0 descriptor?? [ 154.799095][ T6494] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 154.799496][ T6494] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 154.799945][ T6494] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 154.952977][ T5977] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.195455][ T6499] syz.1.164 (6499) used greatest stack depth: 15864 bytes left [ 156.755801][ T6505] syz.1.164 (6505) used greatest stack depth: 15256 bytes left [ 156.775866][ T49] usb 3-1: USB disconnect, device number 12 [ 156.846067][ T5948] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.069867][ T5977] usb 1-1: USB disconnect, device number 9 [ 157.119800][ T5944] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.236184][ T5948] usb 4-1: device not accepting address 6, error -71 [ 157.450078][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 157.454639][ T5944] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 157.454664][ T5944] usb 5-1: config 0 has no interface number 0 [ 157.454713][ T5944] usb 5-1: config 0 interface 230 has no altsetting 0 [ 157.458617][ T5944] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 157.458643][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.458660][ T5944] usb 5-1: Product: syz [ 157.458672][ T5944] usb 5-1: Manufacturer: syz [ 157.458684][ T5944] usb 5-1: SerialNumber: syz [ 157.528196][ T5944] usb 5-1: config 0 descriptor?? [ 157.962012][ T6527] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 157.962082][ T6527] netlink: 224 bytes leftover after parsing attributes in process `syz.2.171'. [ 158.229493][ T6133] udevd[6133]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.252418][ T5944] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 158.261392][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.261899][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.360909][ T6532] syz.0.172 uses obsolete (PF_INET,SOCK_PACKET) [ 158.830011][ T5944] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 158.867372][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.888303][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.805563][ T5977] usb 5-1: USB disconnect, device number 5 [ 161.092660][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 161.346892][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 161.713218][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 161.741440][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.183359][ T5863] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 162.267006][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 162.282406][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.282543][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.282568][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.282587][ T49] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.282608][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.284065][ T49] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 162.284089][ T49] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.284107][ T49] usb 4-1: Manufacturer: syz [ 162.326180][ T5863] usb 5-1: device descriptor read/64, error -71 [ 162.412508][ T49] usb 4-1: config 0 descriptor?? [ 162.579875][ T5863] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 162.580129][ T6574] netlink: 180 bytes leftover after parsing attributes in process `syz.1.180'. [ 162.712244][ T5863] usb 5-1: device descriptor read/64, error -71 [ 163.503904][ T5863] usb usb5-port1: attempt power cycle [ 163.579714][ T49] rc_core: IR keymap rc-hauppauge not found [ 163.579735][ T49] Registered IR keymap rc-empty [ 163.579897][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.610051][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.653209][ T49] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 163.693241][ T49] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 163.721067][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.747278][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.770010][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.790167][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.823255][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.847971][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.869985][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.909845][ T5863] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 163.923490][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.945494][ T5863] usb 5-1: device descriptor read/8, error -71 [ 163.960197][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.982891][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.006069][ T49] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 164.006093][ T49] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 164.040197][ T49] usb 4-1: USB disconnect, device number 8 [ 164.199763][ T5863] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 164.526021][ T5863] usb 5-1: device descriptor read/8, error -71 [ 164.675931][ T5863] usb usb5-port1: unable to enumerate USB device [ 168.352999][ T6600] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 168.357892][ T6600] batman_adv: batadv0: Adding interface: netdevsim0 [ 168.357909][ T6600] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.357938][ T6600] batman_adv: batadv0: Interface activated: netdevsim0 [ 168.360537][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.187'. [ 168.360568][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.187'. [ 172.718859][ T5863] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.006551][ T6600] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 173.076593][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 173.076624][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 173.220858][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 173.409498][ T6625] netlink: 180 bytes leftover after parsing attributes in process `syz.0.192'. [ 174.830092][ T6642] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 174.830119][ T6642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.900763][ T6642] vhci_hcd vhci_hcd.0: Device attached [ 174.939179][ T6647] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 174.939205][ T6647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.950372][ T6647] vhci_hcd vhci_hcd.0: Device attached [ 174.969916][ T6642] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 174.969961][ T6642] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 174.981385][ T6642] vhci_hcd vhci_hcd.0: Device attached [ 175.020231][ T6642] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 175.020257][ T6642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.033402][ T6642] vhci_hcd vhci_hcd.0: Device attached [ 175.043927][ T6642] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 175.043952][ T6642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.062408][ T6642] vhci_hcd vhci_hcd.0: Device attached [ 175.076537][ T6642] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 175.076563][ T6642] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 175.076652][ T6642] vhci_hcd vhci_hcd.0: Device attached [ 175.078367][ T6642] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.089156][ T6642] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.119759][ T5863] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 175.124665][ T6642] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(26) [ 175.124690][ T6642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.127303][ T6642] vhci_hcd vhci_hcd.0: Device attached [ 175.606941][ T6642] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.984873][ T6647] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(30) [ 175.984900][ T6647] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 175.987868][ T6647] vhci_hcd vhci_hcd.0: Device attached [ 176.100912][ T6664] vhci_hcd: connection closed [ 176.118678][ T6654] vhci_hcd: connection closed [ 176.120377][ T6650] vhci_hcd: connection closed [ 176.120720][ T6648] vhci_hcd: connection closed [ 176.121043][ T6643] vhci_hcd: connection reset by peer [ 176.123214][ T6656] vhci_hcd: connection closed [ 176.123402][ T6660] vhci_hcd: connection closed [ 176.130036][ T6053] vhci_hcd: stop threads [ 176.130816][ T6053] vhci_hcd: release socket [ 176.131174][ T6053] vhci_hcd: disconnect device [ 176.131515][ T6053] vhci_hcd: stop threads [ 176.131523][ T6053] vhci_hcd: release socket [ 176.131551][ T6053] vhci_hcd: disconnect device [ 176.132510][ T6053] vhci_hcd: stop threads [ 176.132518][ T6053] vhci_hcd: release socket [ 176.132546][ T6053] vhci_hcd: disconnect device [ 176.140182][ T6053] vhci_hcd: stop threads [ 176.140195][ T6053] vhci_hcd: release socket [ 176.140250][ T6053] vhci_hcd: disconnect device [ 176.140540][ T6053] vhci_hcd: stop threads [ 176.140547][ T6053] vhci_hcd: release socket [ 176.140574][ T6053] vhci_hcd: disconnect device [ 176.142569][ T6053] vhci_hcd: stop threads [ 176.142581][ T6053] vhci_hcd: release socket [ 176.142610][ T6053] vhci_hcd: disconnect device [ 176.152546][ T6053] vhci_hcd: stop threads [ 176.152559][ T6053] vhci_hcd: release socket [ 176.152621][ T6053] vhci_hcd: disconnect device [ 176.260057][ T6676] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 176.924142][ T6679] FAULT_INJECTION: forcing a failure. [ 176.924142][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 176.924200][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: syz.1.203 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.924222][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.924233][ T6679] Call Trace: [ 176.924241][ T6679] [ 176.924249][ T6679] dump_stack_lvl+0x189/0x250 [ 176.924269][ T6679] ? __pfx____ratelimit+0x10/0x10 [ 176.924283][ T6679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.924295][ T6679] ? __pfx__printk+0x10/0x10 [ 176.924307][ T6679] ? lock_acquire+0x16c/0x340 [ 176.924321][ T6679] ? __pfx___might_resched+0x10/0x10 [ 176.924334][ T6679] should_fail_ex+0x46c/0x600 [ 176.924352][ T6679] ? security_file_alloc+0x34/0x330 [ 176.924367][ T6679] should_failslab+0xa8/0x100 [ 176.924383][ T6679] ? security_file_alloc+0x34/0x330 [ 176.924396][ T6679] kmem_cache_alloc_noprof+0x84/0x6c0 [ 176.924413][ T6679] security_file_alloc+0x34/0x330 [ 176.924428][ T6679] init_file+0x99/0x310 [ 176.924441][ T6679] alloc_empty_file+0x6e/0x1d0 [ 176.924451][ T6679] path_openat+0x10e/0x3df0 [ 176.924469][ T6679] ? __pfx___schedule+0x10/0x10 [ 176.924482][ T6679] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 176.924495][ T6679] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 176.924509][ T6679] ? irqentry_exit+0x5dd/0x660 [ 176.924520][ T6679] ? preempt_schedule+0xae/0xc0 [ 176.924532][ T6679] ? preempt_schedule_common+0x83/0xd0 [ 176.924543][ T6679] ? __pfx_path_openat+0x10/0x10 [ 176.924553][ T6679] ? preempt_schedule+0xae/0xc0 [ 176.924564][ T6679] ? __pfx_preempt_schedule+0x10/0x10 [ 176.924579][ T6679] ? preempt_schedule_thunk+0x16/0x30 [ 176.924592][ T6679] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 176.924607][ T6679] do_filp_open+0x1fa/0x410 [ 176.924620][ T6679] ? __pfx_do_filp_open+0x10/0x10 [ 176.924631][ T6679] ? rt_mutex_slowunlock+0x493/0x8a0 [ 176.924652][ T6679] ? alloc_fd+0x64f/0x6c0 [ 176.924667][ T6679] do_sys_openat2+0x121/0x200 [ 176.924678][ T6679] ? lockdep_hardirqs_on+0x98/0x140 [ 176.924690][ T6679] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.924699][ T6679] ? irqentry_exit+0x5dd/0x660 [ 176.924717][ T6679] __x64_sys_openat+0x138/0x170 [ 176.924730][ T6679] do_syscall_64+0xfa/0xf80 [ 176.924743][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.924753][ T6679] ? clear_bhb_loop+0x60/0xb0 [ 176.924765][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.924774][ T6679] RIP: 0033:0x7f8644c7df90 [ 176.924784][ T6679] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 176.924792][ T6679] RSP: 002b:00007f8642ec4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 176.924803][ T6679] RAX: ffffffffffffffda RBX: 0000000000820b01 RCX: 00007f8644c7df90 [ 176.924810][ T6679] RDX: 0000000000820b01 RSI: 00007f8642ec4c10 RDI: 00000000ffffff9c [ 176.924816][ T6679] RBP: 00007f8642ec4c10 R08: 0000000000000000 R09: 0000000000000000 [ 176.924822][ T6679] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 176.924829][ T6679] R13: 00007f8644ed6128 R14: 00007f8644ed6090 R15: 00007ffdccf0ab28 [ 176.924844][ T6679] [ 178.081744][ T6669] vhci_hcd: connection closed [ 178.101801][ T1109] vhci_hcd: stop threads [ 178.101823][ T1109] vhci_hcd: release socket [ 178.150814][ T1109] vhci_hcd: disconnect device [ 178.238842][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.736914][ T6689] netlink: 260 bytes leftover after parsing attributes in process `syz.0.208'. [ 179.344223][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.526223][ T6696] Can't find ip_set type hash:net,port,~et [ 181.159821][ T5863] vhci_hcd: vhci_device speed not set [ 182.259982][ T6611] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 182.428265][ T6611] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 182.428293][ T6611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.013145][ T6610] usb usb40-port1: attempt power cycle [ 183.226523][ T6611] usb 3-1: config 0 descriptor?? [ 183.234395][ T6611] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 183.589865][ T5912] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 183.610937][ T6610] usb usb40-port1: unable to enumerate USB device [ 183.655078][ T6611] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 183.791539][ T5912] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 183.791567][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 183.795854][ T5912] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 183.795873][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 183.795883][ T5912] usb 1-1: Product: syz [ 183.795890][ T5912] usb 1-1: Manufacturer: syz [ 183.795897][ T5912] usb 1-1: SerialNumber: syz [ 183.895119][ T5912] usb 1-1: config 0 descriptor?? [ 183.954729][ T5912] usb 1-1: selecting invalid altsetting 0 [ 184.066362][ T6611] gspca_cpia1: usb_control_msg 02, error -71 [ 184.066382][ T6611] cpia1 3-1:0.0: only firmware version 1 is supported (got: 34) [ 184.117765][ T6611] usb 3-1: USB disconnect, device number 13 [ 184.213555][ T6724] geneve2: entered promiscuous mode [ 184.213573][ T6724] geneve2: entered allmulticast mode [ 184.585932][ T6751] binder: 6743:6751 ioctl c018620c 0 returned -14 [ 184.647975][ T5912] usb 1-1: USB disconnect, device number 10 [ 186.984623][ T6614] udevd[6614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.436131][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.070636][ T6777] netlink: 'syz.3.225': attribute type 4 has an invalid length. [ 197.051501][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 197.169900][ T5863] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 197.304403][ T6803] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 197.337082][ T5863] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 197.337101][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.374232][ T5863] usb 2-1: config 0 descriptor?? [ 197.397277][ T5863] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 197.577341][ T5863] usb 2-1: USB disconnect, device number 4 [ 197.633846][ T6809] fuse: Unknown parameter 'use00000000000000000000' [ 200.984359][ T6824] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 200.984380][ T6824] netlink: 224 bytes leftover after parsing attributes in process `syz.3.241'. [ 201.387889][ T6815] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 202.482429][ T6833] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 202.482451][ T6833] netlink: 224 bytes leftover after parsing attributes in process `syz.3.244'. [ 202.567840][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 204.067053][ T6858] FAULT_INJECTION: forcing a failure. [ 204.067053][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.067118][ T6858] CPU: 0 UID: 0 PID: 6858 Comm: syz.3.251 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 204.067142][ T6858] Tainted: [L]=SOFTLOCKUP [ 204.067148][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.067159][ T6858] Call Trace: [ 204.067166][ T6858] [ 204.067174][ T6858] dump_stack_lvl+0x189/0x250 [ 204.067200][ T6858] ? __pfx____ratelimit+0x10/0x10 [ 204.067221][ T6858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.067241][ T6858] ? __pfx__printk+0x10/0x10 [ 204.067259][ T6858] ? __might_fault+0xb0/0x130 [ 204.067292][ T6858] should_fail_ex+0x46c/0x600 [ 204.067321][ T6858] _copy_from_user+0x2d/0xb0 [ 204.067342][ T6858] __se_sys_mount+0x18b/0x410 [ 204.067366][ T6858] ? __pfx___se_sys_mount+0x10/0x10 [ 204.067387][ T6858] ? do_syscall_64+0xbe/0xf80 [ 204.067405][ T6858] ? __x64_sys_mount+0x20/0xc0 [ 204.067424][ T6858] do_syscall_64+0xfa/0xf80 [ 204.067443][ T6858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.067460][ T6858] ? clear_bhb_loop+0x60/0xb0 [ 204.067481][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.067497][ T6858] RIP: 0033:0x7fdc8234f749 [ 204.067522][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.067537][ T6858] RSP: 002b:00007fdc805b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.067566][ T6858] RAX: ffffffffffffffda RBX: 00007fdc825a5fa0 RCX: 00007fdc8234f749 [ 204.067579][ T6858] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 204.067590][ T6858] RBP: 00007fdc805b6090 R08: 0000200000000300 R09: 0000000000000000 [ 204.067602][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.067612][ T6858] R13: 00007fdc825a6038 R14: 00007fdc825a5fa0 R15: 00007ffd6f710978 [ 204.067642][ T6858] [ 204.083575][ T6858] 9pnet_fd: Insufficient options for proto=fd [ 205.877536][ T5945] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 206.097040][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.097113][ T5945] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 206.097135][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.143036][ T5945] usb 1-1: config 0 descriptor?? [ 206.156066][ T5945] pwc: Askey VC010 type 2 USB webcam detected. [ 206.189880][ T5912] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 206.340144][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 206.373299][ T5912] usb 4-1: config 252 has too many interfaces: 129, using maximum allowed: 32 [ 206.373333][ T5912] usb 4-1: config 252 has 1 interface, different from the descriptor's value: 129 [ 206.373352][ T5912] usb 4-1: config 252 has no interface number 0 [ 206.373757][ T5912] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.410621][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.420828][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.698419][ T5945] pwc: recv_control_msg error -32 req 02 val 2b00 [ 206.742955][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 206.743112][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 206.759819][ T5977] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 206.790115][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 206.794928][ T5945] pwc: recv_control_msg error -32 req 02 val 2700 [ 206.796043][ T5945] pwc: recv_control_msg error -32 req 02 val 2c00 [ 206.797188][ T5945] pwc: recv_control_msg error -32 req 04 val 1000 [ 206.828836][ T5945] pwc: recv_control_msg error -32 req 04 val 1300 [ 206.841736][ T5912] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 206.841765][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.841836][ T5912] usb 4-1: Product: syz [ 206.841849][ T5912] usb 4-1: Manufacturer: syz [ 206.841862][ T5912] usb 4-1: SerialNumber: syz [ 206.890329][ T5945] pwc: recv_control_msg error -32 req 04 val 1400 [ 206.900954][ T5945] pwc: recv_control_msg error -32 req 02 val 2000 [ 206.904894][ T5945] pwc: recv_control_msg error -32 req 02 val 2100 [ 206.955781][ T5912] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 207.224032][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 207.224083][ T62] Bluetooth: hci4: command 0x0406 tx timeout [ 207.751452][ T5863] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 207.852091][ T5805] Bluetooth: hci4: ISO packet for unknown connection handle 4082 [ 208.001660][ T6875] netlink: 'syz.3.256': attribute type 3 has an invalid length. [ 208.001684][ T6875] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.256'. [ 208.003049][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 208.003129][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 208.003159][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 208.003178][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 208.101226][ T6016] usb 4-1: Failed to submit usb control message: -110 [ 208.101263][ T6016] usb 4-1: unable to send the bmi data to the device: -110 [ 208.101273][ T6016] usb 4-1: unable to get target info from device [ 208.101292][ T6016] usb 4-1: could not get target info (-110) [ 208.101577][ T6016] usb 4-1: could not probe fw (-110) [ 208.176638][ T5863] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 208.176719][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.176738][ T5863] usb 2-1: Product: syz [ 208.176750][ T5863] usb 2-1: Manufacturer: syz [ 208.176763][ T5863] usb 2-1: SerialNumber: syz [ 208.313912][ T5863] usb 2-1: config 0 descriptor?? [ 208.328485][ T6897] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 208.392165][ T5945] pwc: recv_control_msg error -71 req 02 val 2500 [ 208.392660][ T5945] pwc: recv_control_msg error -71 req 02 val 2400 [ 208.393147][ T5945] pwc: recv_control_msg error -71 req 02 val 2600 [ 208.393636][ T5945] pwc: recv_control_msg error -71 req 02 val 2900 [ 208.394099][ T5945] pwc: recv_control_msg error -71 req 02 val 2800 [ 208.398158][ T5945] pwc: recv_control_msg error -71 req 04 val 1100 [ 208.411602][ T5945] pwc: recv_control_msg error -71 req 04 val 1200 [ 208.426395][ T5863] usb 2-1: ucan: probing device on interface #0 [ 208.426422][ T5863] usb 2-1: ucan: invalid in_ep MaxPacketSize [ 208.426434][ T5863] usb 2-1: ucan: probe failed; try to update the device firmware [ 208.453322][ T5945] pwc: Registered as video103. [ 208.487559][ T5945] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 208.532757][ T6902] exFAT-fs (nullb0): invalid boot record signature [ 208.532776][ T6902] exFAT-fs (nullb0): failed to read boot sector [ 208.532794][ T6902] exFAT-fs (nullb0): failed to recognize exfat type [ 208.533663][ T5945] usb 1-1: USB disconnect, device number 11 [ 209.429918][ T5945] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 209.473566][ T6914] FAULT_INJECTION: forcing a failure. [ 209.473566][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.473600][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.4.265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.473625][ T6914] Tainted: [L]=SOFTLOCKUP [ 209.473632][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.473642][ T6914] Call Trace: [ 209.473649][ T6914] [ 209.473656][ T6914] dump_stack_lvl+0x189/0x250 [ 209.473683][ T6914] ? __pfx____ratelimit+0x10/0x10 [ 209.473703][ T6914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.473724][ T6914] ? __pfx__printk+0x10/0x10 [ 209.473742][ T6914] ? __might_fault+0xb0/0x130 [ 209.473783][ T6914] should_fail_ex+0x46c/0x600 [ 209.473812][ T6914] _copy_from_user+0x2d/0xb0 [ 209.473832][ T6914] core_sys_select+0x4be/0xa20 [ 209.473867][ T6914] ? __pfx_core_sys_select+0x10/0x10 [ 209.473912][ T6914] ? __pfx_set_user_sigmask+0x10/0x10 [ 209.473929][ T6914] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 209.473946][ T6914] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 209.473969][ T6914] __se_sys_pselect6+0x27a/0x300 [ 209.473998][ T6914] ? __pfx___se_sys_pselect6+0x10/0x10 [ 209.474021][ T6914] ? __pfx_ksys_write+0x10/0x10 [ 209.474045][ T6914] ? __x64_sys_pselect6+0x21/0xf0 [ 209.474070][ T6914] do_syscall_64+0xfa/0xf80 [ 209.474091][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.474109][ T6914] ? clear_bhb_loop+0x60/0xb0 [ 209.474130][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.474146][ T6914] RIP: 0033:0x7f901aeaf749 [ 209.474162][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.474176][ T6914] RSP: 002b:00007f90190ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 209.474196][ T6914] RAX: ffffffffffffffda RBX: 00007f901b106090 RCX: 00007f901aeaf749 [ 209.474208][ T6914] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 209.474219][ T6914] RBP: 00007f90190ec090 R08: 0000000000000000 R09: 0000000000000000 [ 209.474230][ T6914] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 209.474241][ T6914] R13: 00007f901b106128 R14: 00007f901b106090 R15: 00007ffced7c87d8 [ 209.474271][ T6914] [ 209.569817][ T5945] usb 1-1: device descriptor read/64, error -71 [ 209.839844][ T5945] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 209.918388][ T6919] tmpfs: Bad value for 'mpol' [ 209.920835][ T6919] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.267'. [ 209.973806][ T5945] usb 1-1: device descriptor read/64, error -71 [ 210.033732][ T6919] input: syz0 as /devices/virtual/input/input9 [ 210.087482][ T5945] usb usb1-port1: attempt power cycle [ 210.228980][ T5912] usb 4-1: USB disconnect, device number 9 [ 210.292816][ T5863] usb 2-1: USB disconnect, device number 5 [ 210.465789][ T5945] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 210.492966][ T5945] usb 1-1: device descriptor read/8, error -71 [ 210.749787][ T5945] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 210.772395][ T5945] usb 1-1: device descriptor read/8, error -71 [ 210.888996][ T5945] usb usb1-port1: unable to enumerate USB device [ 211.099845][ T5945] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.249769][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 211.260645][ T5945] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.262836][ T5945] usb 4-1: config 4 interface 0 has no altsetting 0 [ 211.268211][ T5945] usb 4-1: string descriptor 0 read error: -22 [ 211.268370][ T5945] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 211.268390][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.555560][ T5945] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 212.478102][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.478467][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.506526][ T5945] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 212.507246][ T5945] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 212.507331][ T5945] usb 4-1: media controller created [ 212.655330][ T6956] FAULT_INJECTION: forcing a failure. [ 212.655330][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 212.655364][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.0.275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 212.655388][ T6956] Tainted: [L]=SOFTLOCKUP [ 212.655395][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.655405][ T6956] Call Trace: [ 212.655412][ T6956] [ 212.655420][ T6956] dump_stack_lvl+0x189/0x250 [ 212.655445][ T6956] ? __pfx____ratelimit+0x10/0x10 [ 212.655466][ T6956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.655486][ T6956] ? __pfx__printk+0x10/0x10 [ 212.655510][ T6956] ? __pfx___might_resched+0x10/0x10 [ 212.655527][ T6956] ? fs_reclaim_acquire+0x7d/0x100 [ 212.655555][ T6956] should_fail_ex+0x46c/0x600 [ 212.655585][ T6956] should_failslab+0xa8/0x100 [ 212.655610][ T6956] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 212.655634][ T6956] ? __kernfs_new_node+0x9c/0x900 [ 212.655662][ T6956] kstrdup+0x42/0x100 [ 212.655683][ T6956] __kernfs_new_node+0x9c/0x900 [ 212.655713][ T6956] ? __lock_acquire+0x6b6/0x2cf0 [ 212.655741][ T6956] ? __pfx___kernfs_new_node+0x10/0x10 [ 212.655765][ T6956] ? kernfs_root+0x1c/0x230 [ 212.655793][ T6956] ? kernfs_root+0x1c/0x230 [ 212.655817][ T6956] ? kernfs_root+0x1c/0x230 [ 212.655835][ T6956] ? kernfs_root+0x1c/0x230 [ 212.655861][ T6956] kernfs_new_node+0x102/0x210 [ 212.655889][ T6956] kernfs_create_dir_ns+0x44/0x130 [ 212.655908][ T6956] sysfs_create_dir_ns+0x123/0x280 [ 212.655931][ T6956] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 212.655950][ T6956] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 212.655976][ T6956] ? rt_spin_unlock+0x161/0x200 [ 212.655995][ T6956] kobject_add_internal+0x6ae/0xca0 [ 212.656027][ T6956] kobject_add+0x155/0x220 [ 212.656047][ T6956] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 212.656068][ T6956] ? __pfx_kobject_add+0x10/0x10 [ 212.656097][ T6956] ? get_device_parent+0x370/0x3a0 [ 212.656116][ T6956] ? __pfx_klist_children_get+0x10/0x10 [ 212.656141][ T6956] device_add+0x408/0xb50 [ 212.656165][ T6956] input_register_device+0x9d3/0x1140 [ 212.656192][ T6956] ? lockdep_hardirqs_on+0x98/0x140 [ 212.656215][ T6956] uinput_create_device+0x422/0x670 [ 212.656244][ T6956] uinput_ioctl_handler+0x3f3/0x1570 [ 212.656267][ T6956] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 212.656302][ T6956] ? __fget_files+0x2a/0x420 [ 212.656324][ T6956] ? bpf_lsm_file_ioctl+0x9/0x20 [ 212.656347][ T6956] ? __pfx_uinput_ioctl+0x10/0x10 [ 212.656367][ T6956] __se_sys_ioctl+0xff/0x170 [ 212.656391][ T6956] do_syscall_64+0xfa/0xf80 [ 212.656412][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.656429][ T6956] ? clear_bhb_loop+0x60/0xb0 [ 212.656448][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.656464][ T6956] RIP: 0033:0x7f20e344f749 [ 212.656480][ T6956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.656494][ T6956] RSP: 002b:00007f20e16ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.656513][ T6956] RAX: ffffffffffffffda RBX: 00007f20e36a5fa0 RCX: 00007f20e344f749 [ 212.656526][ T6956] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 212.656536][ T6956] RBP: 00007f20e16ae090 R08: 0000000000000000 R09: 0000000000000000 [ 212.656547][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.656557][ T6956] R13: 00007f20e36a6038 R14: 00007f20e36a5fa0 R15: 00007fff9f4b2ef8 [ 212.656588][ T6956] [ 212.657939][ T6956] kobject: kobject_add_internal failed for input10 (error: -12 parent: input) [ 212.667337][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.073047][ T5945] zl10353_read_register: readreg error (reg=127, ret==0) [ 213.539783][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 213.542260][ T6965] FAULT_INJECTION: forcing a failure. [ 213.542260][ T6965] name failslab, interval 1, probability 0, space 0, times 0 [ 213.542291][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.4.277 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 213.542313][ T6965] Tainted: [L]=SOFTLOCKUP [ 213.542319][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.542328][ T6965] Call Trace: [ 213.542334][ T6965] [ 213.542342][ T6965] dump_stack_lvl+0x189/0x250 [ 213.542368][ T6965] ? __pfx____ratelimit+0x10/0x10 [ 213.542387][ T6965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.542408][ T6965] ? __pfx__printk+0x10/0x10 [ 213.542431][ T6965] ? __pfx___might_resched+0x10/0x10 [ 213.542447][ T6965] ? fs_reclaim_acquire+0x7d/0x100 [ 213.542475][ T6965] should_fail_ex+0x46c/0x600 [ 213.542503][ T6965] should_failslab+0xa8/0x100 [ 213.542527][ T6965] __kmalloc_noprof+0xe0/0x7e0 [ 213.542555][ T6965] ? tomoyo_encode+0x28b/0x550 [ 213.542579][ T6965] tomoyo_encode+0x28b/0x550 [ 213.542603][ T6965] tomoyo_realpath_from_path+0x58d/0x5d0 [ 213.542624][ T6965] ? tomoyo_domain+0xd9/0x130 [ 213.542648][ T6965] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 213.542671][ T6965] tomoyo_path_number_perm+0x1e8/0x5a0 [ 213.542697][ T6965] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.542723][ T6965] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 213.542743][ T6965] ? lockdep_hardirqs_on+0x98/0x140 [ 213.542789][ T6965] ? __fget_files+0x2a/0x420 [ 213.542809][ T6965] ? __fget_files+0x3a6/0x420 [ 213.542822][ T6965] ? __fget_files+0x2a/0x420 [ 213.542841][ T6965] security_file_ioctl+0xcb/0x2d0 [ 213.542866][ T6965] __se_sys_ioctl+0x47/0x170 [ 213.542889][ T6965] do_syscall_64+0xfa/0xf80 [ 213.542911][ T6965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.542928][ T6965] ? clear_bhb_loop+0x60/0xb0 [ 213.542948][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.542965][ T6965] RIP: 0033:0x7f901aeaf749 [ 213.542981][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.542995][ T6965] RSP: 002b:00007f9019116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.543014][ T6965] RAX: ffffffffffffffda RBX: 00007f901b105fa0 RCX: 00007f901aeaf749 [ 213.543027][ T6965] RDX: 0000000000000000 RSI: 00000000c0109414 RDI: 0000000000000003 [ 213.543038][ T6965] RBP: 00007f9019116090 R08: 0000000000000000 R09: 0000000000000000 [ 213.543048][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.543058][ T6965] R13: 00007f901b106038 R14: 00007f901b105fa0 R15: 00007ffced7c87d8 [ 213.543088][ T6965] [ 213.543107][ T6965] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.554918][ T49] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 213.554944][ T49] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 213.743761][ T5945] usb 4-1: USB disconnect, device number 10 [ 214.141601][ T6970] netem: change failed [ 214.181917][ T5863] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 214.333730][ T5863] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.333757][ T5863] usb 2-1: config 0 has no interface number 0 [ 214.333789][ T5863] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.333800][ T5863] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 214.333813][ T5863] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 214.333825][ T5863] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 214.333837][ T5863] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 214.333849][ T5863] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.333871][ T5863] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 214.333882][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.622335][ T5863] usb 2-1: config 0 descriptor?? [ 214.625631][ T6972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.625830][ T6972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.721765][ T6984] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 214.721785][ T6984] netlink: 224 bytes leftover after parsing attributes in process `syz.2.274'. [ 214.866538][ T5863] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 215.939836][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 215.987749][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 215.987768][ T49] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 216.049866][ T5863] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 216.095808][ T6972] netlink: zone id is out of range [ 216.241718][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 216.241749][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 216.241770][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 216.241789][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 216.285547][ T5863] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 216.285576][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.285593][ T5863] usb 1-1: Product: syz [ 216.285606][ T5863] usb 1-1: Manufacturer: syz [ 216.285619][ T5863] usb 1-1: SerialNumber: syz [ 216.379689][ T7003] FAULT_INJECTION: forcing a failure. [ 216.379689][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 216.379748][ T7003] CPU: 1 UID: 0 PID: 7003 Comm: syz.4.285 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 216.379773][ T7003] Tainted: [L]=SOFTLOCKUP [ 216.379779][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.379789][ T7003] Call Trace: [ 216.379796][ T7003] [ 216.379804][ T7003] dump_stack_lvl+0x189/0x250 [ 216.379830][ T7003] ? __pfx____ratelimit+0x10/0x10 [ 216.379849][ T7003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.379865][ T7003] ? __pfx__printk+0x10/0x10 [ 216.379883][ T7003] ? __pfx___might_resched+0x10/0x10 [ 216.379896][ T7003] ? fs_reclaim_acquire+0x7d/0x100 [ 216.379918][ T7003] should_fail_ex+0x46c/0x600 [ 216.379941][ T7003] ? alloc_inode+0xb8/0x1b0 [ 216.379958][ T7003] should_failslab+0xa8/0x100 [ 216.379978][ T7003] ? alloc_inode+0xb8/0x1b0 [ 216.379994][ T7003] kmem_cache_alloc_lru_noprof+0x88/0x6c0 [ 216.380018][ T7003] alloc_inode+0xb8/0x1b0 [ 216.380050][ T7003] iget_locked+0x131/0x6a0 [ 216.380070][ T7003] kernfs_get_inode+0x4f/0x780 [ 216.380091][ T7003] kernfs_iop_lookup+0x1f6/0x320 [ 216.380107][ T7003] lookup_one_qstr_excl+0x131/0x360 [ 216.380125][ T7003] do_rmdir+0x1ce/0x4a0 [ 216.380147][ T7003] ? __pfx_do_rmdir+0x10/0x10 [ 216.380164][ T7003] ? strncpy_from_user+0x150/0x2c0 [ 216.380185][ T7003] ? getname_flags+0x1e5/0x540 [ 216.380200][ T7003] __x64_sys_rmdir+0x47/0x50 [ 216.380216][ T7003] do_syscall_64+0xfa/0xf80 [ 216.380233][ T7003] ? rcu_is_watching+0x15/0xb0 [ 216.380245][ T7003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.380258][ T7003] ? clear_bhb_loop+0x60/0xb0 [ 216.380274][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.380287][ T7003] RIP: 0033:0x7f901aeaf749 [ 216.380300][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.380311][ T7003] RSP: 002b:00007f90190d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 216.380326][ T7003] RAX: ffffffffffffffda RBX: 00007f901b106180 RCX: 00007f901aeaf749 [ 216.380336][ T7003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 216.380344][ T7003] RBP: 00007f90190d4090 R08: 0000000000000000 R09: 0000000000000000 [ 216.380353][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.380361][ T7003] R13: 00007f901b106218 R14: 00007f901b106180 R15: 00007ffced7c87d8 [ 216.380384][ T7003] [ 321.259763][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 321.259784][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20/1:b..l [ 321.259815][ C1] rcu: (detected by 1, t=10502 jiffies, g=13777, q=560 ncpus=2) [ 321.259842][ C1] task:rcuc/0 state:R running task stack:20200 pid:20 tgid:20 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 321.259898][ C1] Call Trace: [ 321.259905][ C1] [ 321.259919][ C1] __schedule+0x1480/0x50a0 [ 321.259950][ C1] ? unwind_next_frame+0xa5/0x2390 [ 321.259983][ C1] ? __pfx___schedule+0x10/0x10 [ 321.260009][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 321.260055][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 321.260082][ C1] preempt_schedule_irq+0xb5/0x150 [ 321.260103][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 321.260125][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 321.260155][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 321.260170][ C1] irqentry_exit+0x5d8/0x660 [ 321.260187][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.260204][ C1] RIP: 0010:lock_release+0x2a6/0x3b0 [ 321.260236][ C1] Code: 4d 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 52 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 4a c9 0f 10 <48> 3b 44 24 28 75 75 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 [ 321.260253][ C1] RSP: 0018:ffffc90000197858 EFLAGS: 00000206 [ 321.260270][ C1] RAX: bd0b6b8f68debf00 RBX: 0000000000000287 RCX: bd0b6b8f68debf00 [ 321.260284][ C1] RDX: 000000005f479b93 RSI: ffffffff8cfd3ade RDI: ffffffff8b3ede60 [ 321.260298][ C1] RBP: ffff88801ba8e650 R08: ffffffff81852ff1 R09: ffffffff8d5aecc0 [ 321.260312][ C1] R10: 0000000000000000 R11: fffffbfff1db4c2f R12: 0000000000000001 [ 321.260324][ C1] R13: 0000000000000001 R14: ffffffff8d44e9c0 R15: ffff88801ba8dac0 [ 321.260345][ C1] ? __local_bh_disable_ip+0xa1/0x530 [ 321.260485][ C1] ? __local_bh_enable_ip+0x109/0x2e0 [ 321.260509][ C1] __local_bh_enable_ip+0x115/0x2e0 [ 321.260532][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 321.260562][ C1] ? rcu_cpu_kthread+0x243/0x1c40 [ 321.260588][ C1] ? rcu_cpu_kthread+0x243/0x1c40 [ 321.260613][ C1] rcu_cpu_kthread+0xcdd/0x1c40 [ 321.260636][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 321.260666][ C1] ? rcu_cpu_kthread+0x243/0x1c40 [ 321.260695][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 321.260731][ C1] ? __pfx___schedule+0x10/0x10 [ 321.260806][ C1] ? schedule+0x91/0x360 [ 321.260834][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 321.260857][ C1] smpboot_thread_fn+0x542/0xa60 [ 321.260883][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 321.260902][ C1] kthread+0x711/0x8a0 [ 321.260917][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 321.260939][ C1] ? __pfx_kthread+0x10/0x10 [ 321.260960][ C1] ? rt_spin_unlock+0x150/0x200 [ 321.260984][ C1] ? rt_spin_unlock+0x161/0x200 [ 321.261001][ C1] ? __pfx_kthread+0x10/0x10 [ 321.261026][ C1] ret_from_fork+0x599/0xb30 [ 321.261051][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 321.261082][ C1] ? __switch_to_asm+0x39/0x70 [ 321.261107][ C1] ? __switch_to_asm+0x33/0x70 [ 321.261122][ C1] ? __pfx_kthread+0x10/0x10 [ 321.261135][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.261167][ C1] [ 321.261177][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10310 jiffies! g13777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 321.261200][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=8303 [ 321.261211][ C1] rcu: rcu_preempt kthread starved for 10311 jiffies! g13777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 321.261232][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 321.261242][ C1] rcu: RCU grace-period kthread stack dump: [ 321.261250][ C1] task:rcu_preempt state:I stack:26936 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 321.261306][ C1] Call Trace: [ 321.261313][ C1] [ 321.261325][ C1] __schedule+0x1480/0x50a0 [ 321.261352][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 321.261368][ C1] ? __pfx___schedule+0x10/0x10 [ 321.261400][ C1] ? schedule+0x91/0x360 [ 321.261424][ C1] schedule+0x165/0x360 [ 321.261449][ C1] schedule_timeout+0x12b/0x270 [ 321.261470][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 321.261488][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 321.261512][ C1] ? __pfx_process_timeout+0x10/0x10 [ 321.261541][ C1] ? prepare_to_swait_event+0x341/0x380 [ 321.261562][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 321.261584][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 321.261608][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 321.261639][ C1] ? finish_swait+0xcd/0x1f0 [ 321.261665][ C1] rcu_gp_kthread+0x99/0x390 [ 321.261693][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 321.261719][ C1] ? __kthread_parkme+0x7b/0x200 [ 321.261741][ C1] ? __kthread_parkme+0x1a1/0x200 [ 321.261775][ C1] kthread+0x711/0x8a0 [ 321.261789][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 321.261802][ C1] ? __pfx_kthread+0x10/0x10 [ 321.261821][ C1] ? rt_spin_unlock+0x150/0x200 [ 321.261844][ C1] ? rt_spin_unlock+0x161/0x200 [ 321.261861][ C1] ? __pfx_kthread+0x10/0x10 [ 321.261887][ C1] ret_from_fork+0x599/0xb30 [ 321.261910][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 321.261940][ C1] ? __switch_to_asm+0x39/0x70 [ 321.261964][ C1] ? __switch_to_asm+0x33/0x70 [ 321.261988][ C1] ? __pfx_kthread+0x10/0x10 [ 321.262003][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.262032][ C1] [ 321.262039][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 321.262057][ C1] CPU: 1 UID: 0 PID: 7005 Comm: vhost-7004 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.262083][ C1] Tainted: [L]=SOFTLOCKUP [ 321.262090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.262101][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 321.262125][ C1] Code: 74 05 e8 7b af fd f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 33 48 c6 f6 65 8b 05 fc 85 e2 06 85 c0 74 40 48 c7 04 24 0e 36 [ 321.262141][ C1] RSP: 0018:ffffc90003da7880 EFLAGS: 00000206 [ 321.262158][ C1] RAX: c6c5b85ac0858d00 RBX: 0000000000000a02 RCX: c6c5b85ac0858d00 [ 321.262172][ C1] RDX: 0000000000000006 RSI: ffffffff8cdfcc79 RDI: 0000000000000001 [ 321.262185][ C1] RBP: ffffc90003da7910 R08: ffffffff8eda6177 R09: 1ffffffff1db4c2e [ 321.262199][ C1] R10: dffffc0000000000 R11: fffffbfff1db4c2f R12: dffffc0000000000 [ 321.262212][ C1] R13: 0000000000000a02 R14: ffff888032abd508 R15: 1ffff920007b4f10 [ 321.262220][ C1] FS: 00007fdc805956c0(0000) GS:ffff888126e52000(0000) knlGS:0000000000000000 [ 321.262228][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.262234][ C1] CR2: 0000000000000002 CR3: 0000000063378000 CR4: 00000000003526f0 [ 321.262245][ C1] Call Trace: [ 321.262252][ C1] [ 321.262260][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 321.262293][ C1] rt_spin_lock+0x16d/0x3e0 [ 321.262314][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 321.262338][ C1] eventfd_signal_mask+0x7c/0x1e0 [ 321.262368][ C1] vhost_get_avail_idx+0x213/0x3f0 [ 321.262392][ C1] ? rt_spin_unlock+0x150/0x200 [ 321.262412][ C1] vhost_enable_notify+0x303/0x600 [ 321.262435][ C1] ? vhost_transport_do_send_pkt+0x13d/0x13b0 [ 321.262463][ C1] vhost_transport_do_send_pkt+0xfa5/0x13b0 [ 321.262483][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 321.262495][ C1] ? vhost_transport_do_send_pkt+0x13d/0x13b0 [ 321.262510][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 321.262541][ C1] ? __pfx_vhost_transport_do_send_pkt+0x10/0x10 [ 321.262568][ C1] ? rt_spin_unlock+0x150/0x200 [ 321.262590][ C1] ? rt_spin_unlock+0x161/0x200 [ 321.262606][ C1] ? preempt_count_add+0x91/0x190 [ 321.262626][ C1] ? kcov_remote_start+0x57b/0x6f0 [ 321.262648][ C1] vhost_run_work_list+0x14e/0x1e0 [ 321.262674][ C1] ? __pfx_vhost_run_work_list+0x10/0x10 [ 321.262696][ C1] vhost_task_fn+0x27c/0x430 [ 321.262713][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 321.262728][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 321.262746][ C1] ? rt_spin_unlock+0x150/0x200 [ 321.262776][ C1] ? rt_spin_unlock+0x161/0x200 [ 321.262792][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 321.262817][ C1] ret_from_fork+0x599/0xb30 [ 321.262840][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 321.262869][ C1] ? __switch_to_asm+0x39/0x70 [ 321.262892][ C1] ? __switch_to_asm+0x33/0x70 [ 321.262914][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 321.262929][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.262952][ C1] [ 378.982206][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.168209][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.283997][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.509519][ T5863] usb 1-1: config 0 descriptor?? [ 380.380199][ T7006] usb 2-1: USB disconnect, device number 6 [ 380.406695][ T7006] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 380.573881][ T5863] usb 1-1: can't set config #0, error -71 [ 380.583011][ T5863] usb 1-1: USB disconnect, device number 16 SYZFAIL: failed to send rpc fd=3 want=1128 sent=0 n=-1 (errno 32: Broken pipe) [ 382.580350][ T49] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 382.580377][ T49] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 382.607148][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 384.819877][ T49] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 384.819916][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 384.823051][ T49] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 387.956134][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.180120][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.391861][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.618638][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0