last executing test programs: 17.622317359s ago: executing program 2 (id=2619): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 17.497205912s ago: executing program 2 (id=2621): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 17.318190197s ago: executing program 2 (id=2623): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x5, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000600)={0x1, 0x0, [{0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 16.554398245s ago: executing program 2 (id=2630): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 15.664435557s ago: executing program 2 (id=2632): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x40000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r2}, 0x18) 15.390354083s ago: executing program 2 (id=2634): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x7, 0x4) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) 7.526239846s ago: executing program 3 (id=2664): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x5, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000600)={0x1, 0x0, [{0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.834320683s ago: executing program 3 (id=2668): io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x257}) unshare(0x22020400) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 6.494101911s ago: executing program 3 (id=2671): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.462613836s ago: executing program 3 (id=2675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x5, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000600)={0x1, 0x0, [{0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.332285494s ago: executing program 0 (id=2677): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="f2b196760000000061118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 4.234689376s ago: executing program 3 (id=2678): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x3, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20007f}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r2}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400), 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x400c881}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x3}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0xfe78b36d55c77b99, 0x2100, 0x2d8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4, 0xfffffffc, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x2000, 0x2, 0x367, 0x0, r8}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r12, '\x00', {0x203, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000fffffff3000000b7080000000000001f8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000500)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 4.110330309s ago: executing program 0 (id=2680): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='e:_-group/my', 0xc) socket$netlink(0x10, 0x3, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) 3.103241664s ago: executing program 3 (id=2682): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0xda, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x52, 0x79, 0x34, 0x8, 0x1b80, 0xd3b2, 0xfd73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x1, 0x0, 0x80, 0x10, 0x3, "", [{{0x9, 0x4, 0xec, 0xc, 0x3, 0x6a, 0x11, 0xa7, 0x8, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "95e35526c0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xb0d, 0x3, 0xca}, {0x6, 0x24, 0x1a, 0x8}}], [{{0x9, 0x5, 0x2e60961cf768ca7b, 0x0, 0x30, 0x10, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xf}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7, 0x8, 0x4, [@generic={0x6b, 0x21, "1a6c630823c4ed531a831fef265f9ebbd0e645da7e6d2b478341cbfbdf932b31fefbab35357ee88502e6ddfdff128eb262e2d1a4d0776797bfa39bf5d98bfc371f5cd88c805718ee26df6da2aeed5f781e124a556b1c4ac864e7586b16b6b45ef3c0292a1e41f897f9"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x3, 0xf7, 0xaf}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.002308316s ago: executing program 0 (id=2683): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x28) write(r0, &(0x7f0000000280)='t', 0xfffe) 2.927409418s ago: executing program 0 (id=2685): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x5, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000600)={0x1, 0x0, [{0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.911037433s ago: executing program 1 (id=2686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0), 0x0, 0x0, 0x50, 0x4c841}, 0x24000052) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 1.750257837s ago: executing program 0 (id=2687): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.749106957s ago: executing program 1 (id=2688): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 740.648052ms ago: executing program 0 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x48, r1, 0x1, 0x48000000, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @sp_mp_open={0xf, 0x1, {0x1913, {}, @val={0x72, 0x6}, @void}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x408d4}, 0x0) 740.383032ms ago: executing program 1 (id=2690): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x5, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 101.232817ms ago: executing program 1 (id=2691): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f) write(r0, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223", 0x24) 64.616518ms ago: executing program 1 (id=2692): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x28) write(r0, &(0x7f0000000280)='t', 0xfffe) 0s ago: executing program 1 (id=2693): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r2], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r3 = timerfd_create(0x5, 0x800) timerfd_gettime(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'macvtap0\x00'}}, 0x1e) recvmmsg(r4, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@ethernet={0x0, @remote}, 0x80, 0x0}, 0x9}, {{&(0x7f0000000600)=@nfc, 0x80, 0x0}, 0x9}], 0x2, 0x62, 0x0) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socket$xdp(0x2c, 0x3, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000300)=0x0, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x1000001, 0xfffffffa, 0x4b, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100f0ff00080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) kernel console output (not intermixed with test programs): 4967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 694.130539][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 694.136733][T12746] veth1: entered promiscuous mode [ 694.143999][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.173885][T12746] wg0: entered promiscuous mode [ 694.175209][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.194552][ T5822] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 694.203757][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.213224][T12746] wg1: entered promiscuous mode [ 694.221490][ T5822] usb 2-1: config 0 descriptor?? [ 694.229753][ T27] audit: type=1800 audit(1788671188.499:752): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158984 res=0 errno=0 [ 694.233470][ T5822] hub 2-1:0.0: USB hub found [ 694.270679][ T27] audit: type=1800 audit(1788671188.519:753): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=159024 res=0 errno=0 [ 694.295750][T12746] wg2: entered promiscuous mode [ 694.306128][ T27] audit: type=1800 audit(1788671188.529:754): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=158991 res=0 errno=0 [ 694.328521][ T27] audit: type=1800 audit(1788671188.529:755): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=158992 res=0 errno=0 [ 694.328692][T12746] veth0_to_bridge: entered promiscuous mode [ 694.352449][ T27] audit: type=1800 audit(1788671188.529:756): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=158993 res=0 errno=0 [ 694.375462][ T27] audit: type=1800 audit(1788671188.539:757): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159041 res=0 errno=0 [ 694.414232][T12746] veth1_to_bridge: entered promiscuous mode [ 694.436486][ T5822] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 694.459676][T12746] veth0_to_bond: entered promiscuous mode [ 694.487198][T12746] veth1_to_bond: entered promiscuous mode [ 694.515734][T12746] veth0_to_team: entered promiscuous mode [ 694.548881][T12746] veth1_to_team: entered promiscuous mode [ 694.583090][T12746] veth0_to_batadv: entered promiscuous mode [ 694.596183][T12746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.612981][T12746] batadv_slave_0: entered promiscuous mode [ 694.636190][T12746] veth1_to_batadv: entered promiscuous mode [ 694.645581][T12746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.665932][T12746] batadv_slave_1: entered promiscuous mode [ 694.689329][T12746] xfrm0: entered promiscuous mode [ 694.709787][T12746] veth0_to_hsr: entered promiscuous mode [ 694.739569][T12746] veth1_to_hsr: entered promiscuous mode [ 694.777537][T12746] hsr0: entered promiscuous mode [ 694.799641][T12746] veth1_virt_wifi: entered promiscuous mode [ 694.823960][T12746] veth0_virt_wifi: entered promiscuous mode [ 694.836505][T12746] virt_wifi0: entered promiscuous mode [ 694.843382][ T27] audit: type=1800 audit(1788671189.109:758): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159061 res=0 errno=0 [ 694.864712][ T5822] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0 [ 694.879855][ T5822] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 694.900847][ T27] audit: type=1800 audit(1788671189.149:759): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159076 res=0 errno=0 [ 694.951303][T12746] vlan0: entered promiscuous mode [ 694.971402][ T27] audit: type=1800 audit(1788671189.149:760): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159092 res=0 errno=0 [ 694.993112][T12746] vlan1: entered promiscuous mode [ 695.004848][T12746] macvlan0: entered promiscuous mode [ 695.015704][ T27] audit: type=1800 audit(1788671189.239:761): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=159063 res=0 errno=0 [ 695.051306][T12746] macvlan1: entered promiscuous mode [ 695.065745][T12746] ipvlan0: entered promiscuous mode [ 695.073996][T12746] ipvlan1: entered promiscuous mode [ 695.109390][T12746] macvtap0: entered promiscuous mode [ 695.130183][T12746] macsec0: entered promiscuous mode [ 695.154542][T12746] geneve0: entered promiscuous mode [ 695.173234][T12746] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.182487][T12746] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.191867][T12746] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.200956][T12746] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.209985][T12746] geneve1: entered promiscuous mode [ 695.229393][T12746] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 695.245848][T12746] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 695.263909][T12746] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 695.285422][T12746] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 695.314289][T12746] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 695.347494][T12746] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 695.355563][T12746] syztnl2: entered promiscuous mode [ 695.369728][T12746] ipvlan2: entered promiscuous mode [ 695.425588][T12746] syz.2.2167 (12746) used greatest stack depth: 20296 bytes left [ 695.506739][T12771] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 695.542056][T12784] FAULT_INJECTION: forcing a failure. [ 695.542056][T12784] name failslab, interval 1, probability 0, space 0, times 0 [ 695.629200][T12784] CPU: 1 PID: 12784 Comm: syz.2.2178 Not tainted syzkaller #0 [ 695.636733][T12784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 695.646806][T12784] Call Trace: [ 695.650097][T12784] [ 695.653039][T12784] dump_stack_lvl+0x18c/0x250 [ 695.657755][T12784] ? show_regs_print_info+0x20/0x20 [ 695.662979][T12784] ? load_image+0x420/0x420 [ 695.667514][T12784] ? __might_sleep+0xe0/0xe0 [ 695.672138][T12784] ? __lock_acquire+0x7d80/0x7d80 [ 695.677196][T12784] should_fail_ex+0x394/0x4c0 [ 695.681905][T12784] should_failslab+0x9/0x20 [ 695.686433][T12784] slab_pre_alloc_hook+0x59/0x300 [ 695.691484][T12784] ? __rwlock_init+0x150/0x150 [ 695.696267][T12784] ? key_user_lookup+0x1bc/0x450 [ 695.701234][T12784] kmem_cache_alloc+0x5a/0x2c0 [ 695.706024][T12784] ? key_alloc+0x306/0x1030 [ 695.710558][T12784] key_alloc+0x306/0x1030 [ 695.714937][T12784] __key_create_or_update+0x83a/0xa60 [ 695.720339][T12784] ? key_validate+0xf0/0xf0 [ 695.724875][T12784] ? key_create_or_update+0x60/0x60 [ 695.730092][T12784] ? bpf_lsm_key_permission+0x9/0x10 [ 695.735410][T12784] ? lookup_user_key+0xb66/0x1140 [ 695.740469][T12784] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 695.746500][T12784] key_create_or_update+0x42/0x60 [ 695.751564][T12784] __se_sys_add_key+0x34f/0x410 [ 695.756480][T12784] ? __x64_sys_add_key+0xc0/0xc0 [ 695.761455][T12784] ? lockdep_hardirqs_on+0x98/0x150 [ 695.766849][T12784] ? __x64_sys_add_key+0x20/0xc0 [ 695.771811][T12784] do_syscall_64+0x55/0xb0 [ 695.776247][T12784] ? clear_bhb_loop+0x40/0x90 [ 695.780942][T12784] ? clear_bhb_loop+0x40/0x90 [ 695.785643][T12784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.791557][T12784] RIP: 0033:0x7f2e5df9e159 [ 695.795992][T12784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.815614][T12784] RSP: 002b:00007f2e5ef4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 695.824048][T12784] RAX: ffffffffffffffda RBX: 00007f2e5e225fa0 RCX: 00007f2e5df9e159 [ 695.832034][T12784] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00002000000000c0 [ 695.840020][T12784] RBP: 00007f2e5e035024 R08: fffffffffffffffb R09: 0000000000000000 [ 695.848013][T12784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.856000][T12784] R13: 00007f2e5e226038 R14: 00007f2e5e225fa0 R15: 00007fffc72e3da8 [ 695.864018][T12784] [ 696.093468][T12771] usb 2-1: device descriptor read/64, error -71 [ 696.552626][T12771] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 696.766926][T12771] usb 2-1: device descriptor read/64, error -71 [ 697.063745][T12794] FAULT_INJECTION: forcing a failure. [ 697.063745][T12794] name failslab, interval 1, probability 0, space 0, times 0 [ 697.116215][T12771] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 697.643945][T12794] CPU: 0 PID: 12794 Comm: syz.2.2181 Not tainted syzkaller #0 [ 697.651548][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.661595][T12794] Call Trace: [ 697.664868][T12794] [ 697.667786][T12794] dump_stack_lvl+0x18c/0x250 [ 697.672459][T12794] ? show_regs_print_info+0x20/0x20 [ 697.677645][T12794] ? load_image+0x420/0x420 [ 697.682147][T12794] ? __lock_acquire+0x7d80/0x7d80 [ 697.687172][T12794] should_fail_ex+0x394/0x4c0 [ 697.691847][T12794] should_failslab+0x9/0x20 [ 697.696360][T12794] slab_pre_alloc_hook+0x59/0x300 [ 697.701428][T12794] ? x509_fabricate_name+0x62e/0xa80 [ 697.706776][T12794] ? x509_fabricate_name+0x62e/0xa80 [ 697.712083][T12794] __kmem_cache_alloc_node+0x53/0x250 [ 697.717459][T12794] ? x509_fabricate_name+0x62e/0xa80 [ 697.722738][T12794] __kmalloc+0xa7/0x240 [ 697.726887][T12794] x509_fabricate_name+0x62e/0xa80 [ 697.731999][T12794] asn1_ber_decoder+0x19e7/0x2390 [ 697.737011][T12794] ? asymmetric_key_preparse+0xa9/0x140 [ 697.742648][T12794] ? ref_tracker_free+0x830/0x830 [ 697.747703][T12794] x509_cert_parse+0x1b2/0x7b0 [ 697.752488][T12794] x509_key_preparse+0x64/0x6c0 [ 697.757344][T12794] ? down_read+0x1ac/0x2e0 [ 697.761767][T12794] asymmetric_key_preparse+0xa9/0x140 [ 697.767145][T12794] __key_create_or_update+0x3a6/0xa60 [ 697.772559][T12794] ? key_create_or_update+0x60/0x60 [ 697.777753][T12794] ? bpf_lsm_key_permission+0x9/0x10 [ 697.783045][T12794] ? lookup_user_key+0xb66/0x1140 [ 697.788081][T12794] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 697.794074][T12794] key_create_or_update+0x42/0x60 [ 697.799108][T12794] __se_sys_add_key+0x34f/0x410 [ 697.803966][T12794] ? __x64_sys_add_key+0xc0/0xc0 [ 697.808910][T12794] ? lockdep_hardirqs_on+0x98/0x150 [ 697.814110][T12794] ? __x64_sys_add_key+0x20/0xc0 [ 697.819054][T12794] do_syscall_64+0x55/0xb0 [ 697.823470][T12794] ? clear_bhb_loop+0x40/0x90 [ 697.828146][T12794] ? clear_bhb_loop+0x40/0x90 [ 697.832822][T12794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.838713][T12794] RIP: 0033:0x7f2e5df9e159 [ 697.843165][T12794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.862778][T12794] RSP: 002b:00007f2e5ef4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 697.871219][T12794] RAX: ffffffffffffffda RBX: 00007f2e5e225fa0 RCX: 00007f2e5df9e159 [ 697.879186][T12794] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 697.887172][T12794] RBP: 00007f2e5e035024 R08: ffffffffffffffff R09: 0000000000000000 [ 697.895139][T12794] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 697.903109][T12794] R13: 00007f2e5e226038 R14: 00007f2e5e225fa0 R15: 00007fffc72e3da8 [ 697.911092][T12794] [ 698.263490][T12800] FAULT_INJECTION: forcing a failure. [ 698.263490][T12800] name failslab, interval 1, probability 0, space 0, times 0 [ 698.370878][T12800] CPU: 1 PID: 12800 Comm: syz.3.2183 Not tainted syzkaller #0 [ 698.378410][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.388481][T12800] Call Trace: [ 698.391775][T12800] [ 698.394720][T12800] dump_stack_lvl+0x18c/0x250 [ 698.399428][T12800] ? show_regs_print_info+0x20/0x20 [ 698.404648][T12800] ? load_image+0x420/0x420 [ 698.409174][T12800] ? lockdep_hardirqs_on+0x98/0x150 [ 698.414412][T12800] should_fail_ex+0x394/0x4c0 [ 698.419116][T12800] should_failslab+0x9/0x20 [ 698.423651][T12800] slab_pre_alloc_hook+0x59/0x300 [ 698.428708][T12800] kmem_cache_alloc+0x5a/0x2c0 [ 698.433495][T12800] ? copy_fs_struct+0x4f/0x270 [ 698.438285][T12800] copy_fs_struct+0x4f/0x270 [ 698.442900][T12800] ksys_unshare+0x39b/0x8f0 [ 698.447433][T12800] ? sighand_ctor+0x50/0x50 [ 698.451957][T12800] ? lock_chain_count+0x20/0x20 [ 698.456835][T12800] ? syscall_enter_from_user_mode+0x25/0x80 [ 698.462760][T12800] __x64_sys_unshare+0x38/0x40 [ 698.467554][T12800] do_syscall_64+0x55/0xb0 [ 698.471987][T12800] ? clear_bhb_loop+0x40/0x90 [ 698.476768][T12800] ? clear_bhb_loop+0x40/0x90 [ 698.481469][T12800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.487387][T12800] RIP: 0033:0x7f90d299e159 [ 698.491819][T12800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.511443][T12800] RSP: 002b:00007f90d393e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 698.519884][T12800] RAX: ffffffffffffffda RBX: 00007f90d2c25fa0 RCX: 00007f90d299e159 [ 698.527873][T12800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 698.535858][T12800] RBP: 00007f90d2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 698.543846][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.551830][T12800] R13: 00007f90d2c26038 R14: 00007f90d2c25fa0 R15: 00007fffd7dd9d28 [ 698.559844][T12800] [ 698.991781][T12806] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2185'. [ 699.762678][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 699.762693][ T27] audit: type=1800 audit(1788671194.029:766): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 699.905227][T12817] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 701.442614][ T27] audit: type=1800 audit(1788671195.709:767): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 701.496792][T12836] FAULT_INJECTION: forcing a failure. [ 701.496792][T12836] name failslab, interval 1, probability 0, space 0, times 0 [ 701.525767][T12836] CPU: 1 PID: 12836 Comm: syz.0.2193 Not tainted syzkaller #0 [ 701.533279][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.543354][T12836] Call Trace: [ 701.546662][T12836] [ 701.549613][T12836] dump_stack_lvl+0x18c/0x250 [ 701.554329][T12836] ? show_regs_print_info+0x20/0x20 [ 701.559563][T12836] ? load_image+0x420/0x420 [ 701.564094][T12836] ? __might_sleep+0xe0/0xe0 [ 701.568697][T12836] ? __lock_acquire+0x7d80/0x7d80 [ 701.573807][T12836] should_fail_ex+0x394/0x4c0 [ 701.578526][T12836] should_failslab+0x9/0x20 [ 701.583058][T12836] slab_pre_alloc_hook+0x59/0x300 [ 701.588119][T12836] ? x509_cert_parse+0x2d5/0x7b0 [ 701.593085][T12836] ? x509_cert_parse+0x2d5/0x7b0 [ 701.598048][T12836] __kmem_cache_alloc_node+0x53/0x250 [ 701.603456][T12836] ? x509_cert_parse+0x2d5/0x7b0 [ 701.608422][T12836] __kmalloc_node_track_caller+0xa4/0x230 [ 701.614177][T12836] kmemdup+0x2b/0x70 [ 701.618115][T12836] x509_cert_parse+0x2d5/0x7b0 [ 701.622913][T12836] x509_key_preparse+0x64/0x6c0 [ 701.627800][T12836] ? down_read+0x1ac/0x2e0 [ 701.632232][T12836] asymmetric_key_preparse+0xa9/0x140 [ 701.637614][T12836] __key_create_or_update+0x3a6/0xa60 [ 701.642996][T12836] ? key_create_or_update+0x60/0x60 [ 701.648222][T12836] ? bpf_lsm_key_permission+0x9/0x10 [ 701.653513][T12836] ? lookup_user_key+0xb66/0x1140 [ 701.658550][T12836] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 701.664543][T12836] key_create_or_update+0x42/0x60 [ 701.669573][T12836] __se_sys_add_key+0x34f/0x410 [ 701.674427][T12836] ? __x64_sys_add_key+0xc0/0xc0 [ 701.679373][T12836] ? lockdep_hardirqs_on+0x98/0x150 [ 701.684602][T12836] ? __x64_sys_add_key+0x20/0xc0 [ 701.689558][T12836] do_syscall_64+0x55/0xb0 [ 701.693977][T12836] ? clear_bhb_loop+0x40/0x90 [ 701.698653][T12836] ? clear_bhb_loop+0x40/0x90 [ 701.703340][T12836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.709234][T12836] RIP: 0033:0x7f8043b9e159 [ 701.713650][T12836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.733254][T12836] RSP: 002b:00007f80449e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 701.741673][T12836] RAX: ffffffffffffffda RBX: 00007f8043e25fa0 RCX: 00007f8043b9e159 [ 701.749649][T12836] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 701.757616][T12836] RBP: 00007f8043c35024 R08: ffffffffffffffff R09: 0000000000000000 [ 701.765581][T12836] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 701.773580][T12836] R13: 00007f8043e26038 R14: 00007f8043e25fa0 R15: 00007ffec229caf8 [ 701.781560][T12836] [ 701.955349][ T27] audit: type=1800 audit(1788671196.219:768): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 702.809098][ T27] audit: type=1800 audit(1788671197.069:769): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 703.038721][T12771] usb 2-1: device descriptor read/8, error -110 [ 703.108233][ T27] audit: type=1800 audit(1788671197.379:770): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 703.346197][T12771] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 703.446811][T12771] usb 2-1: device descriptor read/8, error -32 [ 703.616820][ T5822] usb 2-1: USB disconnect, device number 56 [ 706.539098][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 706.637512][ T27] audit: type=1326 audit(1788671200.899:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f3f9e159 code=0x7ffc0000 [ 706.670081][ T27] audit: type=1326 audit(1788671200.899:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f3f9e159 code=0x7ffc0000 [ 706.844977][ T27] audit: type=1326 audit(1788671200.899:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f72f3f9e159 code=0x7ffc0000 [ 706.869637][ T27] audit: type=1326 audit(1788671200.899:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f3f9e159 code=0x7ffc0000 [ 707.581138][ T27] audit: type=1326 audit(1788671200.899:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72f3f5e98e code=0x7ffc0000 [ 707.642641][ T5822] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 707.684529][ T27] audit: type=1326 audit(1788671200.899:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72f3f9ddeb code=0x7ffc0000 [ 707.721270][ T27] audit: type=1326 audit(1788671200.899:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72f3f9ddeb code=0x7ffc0000 [ 707.786712][ T27] audit: type=1326 audit(1788671200.909:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72f3f9ddeb code=0x7ffc0000 [ 707.879516][ T27] audit: type=1326 audit(1788671200.909:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.2206" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72f3f9ddeb code=0x7ffc0000 [ 707.890243][ T5822] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 707.966155][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.973081][ T27] audit: type=1800 audit(1788671201.899:780): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 707.979603][ T5822] usb 2-1: Product: syz [ 707.997465][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.000019][ T5822] usb 2-1: Manufacturer: syz [ 708.011513][ T5822] usb 2-1: SerialNumber: syz [ 708.095319][ T5822] usb 2-1: USB2VGA dongle found at address 57 [ 708.112096][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.113792][ T5822] usb 2-1: Allocated 8 output buffers [ 708.302106][T12876] netlink: 'syz.1.2206': attribute type 30 has an invalid length. [ 708.369957][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.381291][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.436148][ T5822] usb 2-1: Failed to early initialize device [ 708.486941][ T5822] usb 2-1: USB disconnect, device number 57 [ 711.156128][ T5819] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 711.385548][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 711.392842][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.436076][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.445868][ T5819] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 711.491390][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.543394][ T5819] usb 4-1: config 0 descriptor?? [ 711.590286][ T5819] hub 4-1:0.0: USB hub found [ 711.897758][T12941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 712.623818][ T5819] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 712.726491][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 712.726503][ T27] audit: type=1800 audit(1788671206.999:855): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159910 res=0 errno=0 [ 712.776248][ T27] audit: type=1800 audit(1788671207.019:856): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159928 res=0 errno=0 [ 712.811241][ T27] audit: type=1800 audit(1788671207.029:857): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159877 res=0 errno=0 [ 712.892493][ T27] audit: type=1800 audit(1788671207.139:858): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 713.003681][ T27] audit: type=1800 audit(1788671207.269:859): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 713.035767][ T5819] hid-generic 0003:046D:C31C.000C: unknown main item tag 0x0 [ 713.059656][ T27] audit: type=1800 audit(1788671207.309:860): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160106 res=0 errno=0 [ 713.092729][ T5819] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 713.101459][ T27] audit: type=1800 audit(1788671207.359:861): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160121 res=0 errno=0 [ 713.166229][ T27] audit: type=1800 audit(1788671207.359:862): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160137 res=0 errno=0 [ 713.226559][ T27] audit: type=1800 audit(1788671207.499:863): pid=12947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=160108 res=0 errno=0 [ 713.574731][ T27] audit: type=1800 audit(1788671207.839:864): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 713.685811][T12954] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2232'. [ 713.696967][T12921] usb 4-1: reset high-speed USB device number 74 using dummy_hcd [ 713.886414][T12921] usb 4-1: device descriptor read/64, error -71 [ 715.016178][T12921] usb 4-1: reset high-speed USB device number 74 using dummy_hcd [ 715.445723][T12977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input22 [ 716.863263][T12991] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 719.393337][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 719.393353][ T27] audit: type=1800 audit(1788671213.659:882): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 719.532758][ T27] audit: type=1800 audit(1788671213.799:883): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 720.286280][T12921] usb 4-1: device descriptor read/64, error -110 [ 720.576154][T12921] usb 4-1: reset high-speed USB device number 74 using dummy_hcd [ 720.584171][ T27] audit: type=1800 audit(1788671214.849:884): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 720.651430][T12921] usb 4-1: device descriptor read/8, error -32 [ 720.800747][ T27] audit: type=1800 audit(1788671215.049:885): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 720.926152][T12921] usb 4-1: reset high-speed USB device number 74 using dummy_hcd [ 720.976372][T12921] usb 4-1: device descriptor read/8, error -32 [ 721.106627][ T6358] usb 4-1: USB disconnect, device number 74 [ 723.246735][ T27] audit: type=1800 audit(1788671217.519:886): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 723.408728][ T27] audit: type=1800 audit(1788671217.679:887): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 724.884490][ T27] audit: type=1800 audit(1788671219.139:888): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 725.095496][ T27] audit: type=1800 audit(1788671219.359:889): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 725.140582][T13055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.153129][T13055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.310186][ T6358] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 725.516490][ T6358] usb 2-1: Using ep0 maxpacket: 32 [ 725.523778][ T6358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.537501][ T6358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.563804][ T6358] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 725.584368][ T6358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.608031][ T6358] usb 2-1: config 0 descriptor?? [ 725.613289][ T27] audit: type=1800 audit(1788671219.879:890): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160252 res=0 errno=0 [ 725.635964][ T6358] hub 2-1:0.0: USB hub found [ 725.677673][ T27] audit: type=1800 audit(1788671219.879:891): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=160292 res=0 errno=0 [ 725.752086][ T27] audit: type=1800 audit(1788671219.879:892): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=160259 res=0 errno=0 [ 725.814023][ T27] audit: type=1800 audit(1788671219.879:893): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=160260 res=0 errno=0 [ 725.862715][ T6358] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 725.870893][ T27] audit: type=1800 audit(1788671219.879:894): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=160261 res=0 errno=0 [ 725.916055][ T27] audit: type=1800 audit(1788671219.969:895): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160309 res=0 errno=0 [ 725.966158][ T27] audit: type=1800 audit(1788671220.059:896): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 726.340269][ T27] audit: type=1800 audit(1788671220.609:897): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160329 res=0 errno=0 [ 726.340565][ T6358] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0 [ 726.465364][ T6358] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 726.639713][ T6358] usb 2-1: USB disconnect, device number 58 [ 726.723612][T13064] fido_id[13064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 727.608926][T13065] ima: policy update completed [ 728.193676][ T6358] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 730.152447][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 730.152461][ T27] audit: type=1800 audit(1788671224.419:903): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 730.325066][ T27] audit: type=1800 audit(1788671224.589:904): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149549 res=0 errno=0 [ 730.383597][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.404797][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.045050][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.061457][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.701932][ T27] audit: type=1800 audit(1788671231.929:905): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2291" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 739.608069][ T28] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 739.796141][ T5763] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 741.532895][ T28] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 741.546114][ T5763] usb 3-1: Using ep0 maxpacket: 32 [ 741.551677][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.562102][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.582126][ T28] usb 2-1: config 0 descriptor?? [ 741.593754][ T27] audit: type=1800 audit(1788671235.849:906): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160616 res=0 errno=0 [ 741.599627][ T28] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 741.622139][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.622190][ T5763] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 741.622215][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.627067][ T5763] usb 3-1: config 0 descriptor?? [ 741.681429][ T27] audit: type=1800 audit(1788671235.849:907): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=160656 res=0 errno=0 [ 741.711433][ T27] audit: type=1800 audit(1788671235.849:908): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=160623 res=0 errno=0 [ 741.735622][ T5763] hub 3-1:0.0: USB hub found [ 741.786327][ T27] audit: type=1800 audit(1788671235.849:909): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=160624 res=0 errno=0 [ 741.853532][ T27] audit: type=1800 audit(1788671235.849:910): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=160625 res=0 errno=0 [ 741.873859][ T27] audit: type=1800 audit(1788671235.929:911): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160665 res=0 errno=0 [ 741.894265][ T27] audit: type=1800 audit(1788671235.939:912): pid=13179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160683 res=0 errno=0 [ 741.914085][ T27] audit: type=1800 audit(1788671235.939:913): pid=13179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=160723 res=0 errno=0 [ 741.951998][ T5763] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 741.984267][ T27] audit: type=1800 audit(1788671235.939:914): pid=13179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=160690 res=0 errno=0 [ 742.074621][ T28] gp8psk: usb in 128 operation failed. [ 742.081107][ T28] gp8psk: usb in 137 operation failed. [ 742.087147][ T28] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 742.106368][ T28] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 742.130918][ T28] usb 2-1: USB disconnect, device number 60 [ 742.372644][ T5763] hid-generic 0003:046D:C31C.000E: unknown main item tag 0x0 [ 742.414752][ T5763] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 742.623767][ T5763] usb 3-1: USB disconnect, device number 44 [ 743.301244][T13199] fido_id[13199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 744.811739][T13214] siw: device registration error -23 [ 745.943942][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 745.943958][ T27] audit: type=1800 audit(1788671240.209:922): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2312" name="attach" dev="sysfs" ino=32077 res=0 errno=0 [ 745.979145][T13217] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 745.985922][T13217] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 745.994267][T13217] vhci_hcd vhci_hcd.0: Device attached [ 746.012695][T13225] vhci_hcd: connection closed [ 746.046374][ T8612] vhci_hcd: stop threads [ 746.347205][ T8612] vhci_hcd: release socket [ 746.368361][ T8612] vhci_hcd: disconnect device [ 746.446302][ T8613] vhci_hcd: vhci_device speed not set [ 747.344246][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.350741][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.666326][ T6358] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 748.202067][ T6358] usb 2-1: Using ep0 maxpacket: 32 [ 749.036529][ T6358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.052977][ T6358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.359890][ T6358] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 749.440402][ T6358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.623885][ T6358] usb 2-1: config 0 descriptor?? [ 749.652837][ T27] audit: type=1800 audit(1788671243.909:923): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160873 res=0 errno=0 [ 749.782163][ T6358] hub 2-1:0.0: USB hub found [ 749.897324][ T27] audit: type=1800 audit(1788671243.989:924): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=160913 res=0 errno=0 [ 749.994271][ T6358] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 750.008086][ T27] audit: type=1800 audit(1788671244.039:925): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=160880 res=0 errno=0 [ 750.076134][ T27] audit: type=1800 audit(1788671244.069:926): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=160881 res=0 errno=0 [ 750.115771][ T27] audit: type=1800 audit(1788671244.109:927): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=160882 res=0 errno=0 [ 750.303866][ T27] audit: type=1800 audit(1788671244.259:928): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160930 res=0 errno=0 [ 750.851429][ T27] audit: type=1800 audit(1788671245.099:929): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160950 res=0 errno=0 [ 751.006725][ T6358] hid-generic 0003:046D:C31C.000F: unknown main item tag 0x0 [ 751.076177][ T27] audit: type=1800 audit(1788671245.339:930): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160965 res=0 errno=0 [ 751.109964][ T6358] hid-generic 0003:046D:C31C.000F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 751.156558][ T27] audit: type=1800 audit(1788671245.389:931): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160981 res=0 errno=0 [ 751.249767][ T27] audit: type=1800 audit(1788671245.519:932): pid=13272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=160952 res=0 errno=0 [ 751.836724][ T6358] usb 2-1: reset high-speed USB device number 61 using dummy_hcd [ 752.057396][ T6358] usb 2-1: device firmware changed [ 752.070507][ T6358] usb 2-1: USB disconnect, device number 61 [ 753.576360][T13309] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2335'. [ 753.846278][ T8613] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 753.915588][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2337'. [ 754.040056][ T8613] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 754.061612][ T8613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3840, setting to 64 [ 754.086146][ T28] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 754.095611][ T8613] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 754.116145][ T8613] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 754.124194][ T8613] usb 4-1: Manufacturer: syz [ 754.147904][ T8613] usb 4-1: config 0 descriptor?? [ 754.153834][ T27] audit: type=1800 audit(1788671248.419:933): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161053 res=0 errno=0 [ 754.194160][ T27] audit: type=1800 audit(1788671248.419:934): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161094 res=0 errno=0 [ 754.276101][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 754.283059][ T27] audit: type=1800 audit(1788671248.429:935): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=161060 res=0 errno=0 [ 754.326457][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 754.382346][ T28] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 754.391122][ T28] usb 2-1: config 9 has no interface number 0 [ 754.394007][ T27] audit: type=1800 audit(1788671248.439:936): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=161061 res=0 errno=0 [ 754.397747][ T28] usb 2-1: config 9 interface 57 has no altsetting 0 [ 754.436372][ T8613] rc_core: IR keymap rc-hauppauge not found [ 754.442454][ T8613] Registered IR keymap rc-empty [ 754.481961][ T8613] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 754.509676][ T28] usb 2-1: string descriptor 0 read error: -22 [ 754.516945][ T28] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 754.535080][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.545033][ T8613] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 754.567157][ T27] audit: type=1800 audit(1788671248.709:937): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2338" name="attach" dev="sysfs" ino=32077 res=0 errno=0 [ 754.587931][ T27] audit: type=1800 audit(1788671248.829:938): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161166 res=0 errno=0 [ 754.688456][T13319] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 754.695008][T13319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 754.704269][T13319] vhci_hcd vhci_hcd.0: Device attached [ 754.741398][ T27] audit: type=1800 audit(1788671248.829:939): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161206 res=0 errno=0 [ 754.761731][ C1] igorplugusb 4-1:0.0: receive overflow, at least 15 lost [ 754.766586][T13323] rc rc0: two consecutive events of type pulse [ 754.917200][ T175] vhci_hcd: vhci_device speed not set [ 755.026873][ T175] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 755.105687][ T5819] usb 4-1: USB disconnect, device number 76 [ 755.224479][T13322] vhci_hcd: connection reset by peer [ 755.254694][ T146] vhci_hcd: stop threads [ 755.272514][ T146] vhci_hcd: release socket [ 755.290497][ T146] vhci_hcd: disconnect device [ 755.385087][ T28] video4linux radio48: keene_cmd_main failed (-71) [ 755.402696][ T28] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 755.419019][ T28] usb 2-1: USB disconnect, device number 62 [ 755.556226][T13337] Bluetooth: MGMT ver 1.22 [ 758.221866][T13353] FAULT_INJECTION: forcing a failure. [ 758.221866][T13353] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 758.268076][T13353] CPU: 0 PID: 13353 Comm: syz.3.2347 Not tainted syzkaller #0 [ 758.275602][T13353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 758.285675][T13353] Call Trace: [ 758.288972][T13353] [ 758.291915][T13353] dump_stack_lvl+0x18c/0x250 [ 758.296623][T13353] ? show_regs_print_info+0x20/0x20 [ 758.301840][T13353] ? load_image+0x420/0x420 [ 758.306361][T13353] ? __might_fault+0xaa/0x120 [ 758.311069][T13353] ? __lock_acquire+0x7d80/0x7d80 [ 758.316112][T13353] ? mark_lock+0x94/0x320 [ 758.320467][T13353] should_fail_ex+0x394/0x4c0 [ 758.325175][T13353] _copy_from_user+0x2f/0xe0 [ 758.329792][T13353] io_msg_copy_hdr+0x4f/0x310 [ 758.334524][T13353] io_recvmsg_copy_hdr+0x1b3/0x620 [ 758.339660][T13353] ? io_recvmsg_prep_async+0x2b0/0x2b0 [ 758.345155][T13353] ? is_bpf_text_address+0x28f/0x2a0 [ 758.350470][T13353] ? is_bpf_text_address+0x26/0x2a0 [ 758.355707][T13353] io_recvmsg+0x1dc/0x2530 [ 758.360158][T13353] ? __lock_acquire+0x1262/0x7d80 [ 758.365233][T13353] ? __lock_acquire+0x1336/0x7d80 [ 758.370295][T13353] ? io_recvmsg_prep+0x630/0x630 [ 758.375317][T13353] ? __fget_files+0x28/0x460 [ 758.379938][T13353] ? __fget_files+0x3fc/0x460 [ 758.384650][T13353] ? io_file_get_normal+0xe0/0x300 [ 758.389801][T13353] io_issue_sqe+0x2c5/0xc60 [ 758.394343][T13353] io_submit_sqes+0xa92/0x1d30 [ 758.399137][T13353] ? __mutex_lock+0x30d/0xc80 [ 758.403928][T13353] __se_sys_io_uring_enter+0x318/0x2510 [ 758.409534][T13353] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 758.415112][T13353] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 758.421213][T13353] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.426452][T13353] ? task_work_run+0x21a/0x260 [ 758.431257][T13353] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 758.437280][T13353] ? lock_chain_count+0x20/0x20 [ 758.442174][T13353] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 758.447757][T13353] do_syscall_64+0x55/0xb0 [ 758.452200][T13353] ? clear_bhb_loop+0x40/0x90 [ 758.456909][T13353] ? clear_bhb_loop+0x40/0x90 [ 758.461614][T13353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.467561][T13353] RIP: 0033:0x7f90d299e159 [ 758.471996][T13353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.491641][T13353] RSP: 002b:00007f90d393df38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 758.500086][T13353] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f90d299e159 [ 758.508091][T13353] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000d [ 758.516077][T13353] RBP: 00000000000000e2 R08: 0000000000000000 R09: 0000000000000008 [ 758.524083][T13353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 758.532069][T13353] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 758.540080][T13353] [ 759.473608][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2348'. [ 759.683433][T13370] netlink: 'syz.3.2352': attribute type 4 has an invalid length. [ 759.850199][T13376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2355'. [ 760.908442][ T175] vhci_hcd: vhci_device speed not set [ 762.186260][T13400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2362'. [ 763.117580][T13408] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2365'. [ 764.711153][T13429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2372'. [ 764.848731][T13437] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2375'. [ 766.520205][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 766.520217][ T27] audit: type=1800 audit(1788671260.789:964): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2383" name="attach" dev="sysfs" ino=32077 res=0 errno=0 [ 766.565609][T13460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 766.572191][T13460] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 766.601037][T13464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'. [ 766.604600][T13460] vhci_hcd vhci_hcd.0: Device attached [ 766.632021][T13461] vhci_hcd: connection closed [ 766.633686][ T60] vhci_hcd: stop threads [ 766.652372][ T60] vhci_hcd: release socket [ 766.657026][ T60] vhci_hcd: disconnect device [ 768.405614][ T27] audit: type=1807 audit(1788671262.599:965): action=measure func=FILE_CHECK res=1 [ 768.486109][T12795] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 768.733324][T13484] ima: policy update completed [ 768.738847][ T27] audit: type=1802 audit(1788671263.009:966): pid=13484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.2390" res=1 errno=0 [ 769.097404][T12795] usb 2-1: Using ep0 maxpacket: 8 [ 769.106862][T12795] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 769.115941][T12795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 769.124263][T12795] usb 2-1: Product: syz [ 769.153668][T12795] usb 2-1: Manufacturer: syz [ 769.166054][T12795] usb 2-1: SerialNumber: syz [ 769.187269][T12795] usb 2-1: config 0 descriptor?? [ 769.192370][ T27] audit: type=1800 audit(1788671263.459:967): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161409 res=0 errno=0 [ 769.221285][ T27] audit: type=1800 audit(1788671263.459:968): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161452 res=0 errno=0 [ 769.222406][T12795] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 769.251968][ T27] audit: type=1800 audit(1788671263.479:969): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=161416 res=0 errno=0 [ 769.272343][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2394'. [ 769.292093][ T27] audit: type=1800 audit(1788671263.479:970): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=161417 res=0 errno=0 [ 769.998322][T12795] gspca_sn9c2028: read1 error -32 [ 770.012478][T12795] gspca_sn9c2028: read1 error -32 [ 770.042459][ T27] audit: type=1800 audit(1788671264.309:971): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=161438 res=0 errno=0 [ 770.224184][ T27] audit: type=1800 audit(1788671264.309:972): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=161439 res=0 errno=0 [ 770.452612][ T28] usb 2-1: USB disconnect, device number 63 [ 770.853872][ T27] audit: type=1800 audit(1788671264.309:973): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=161418 res=0 errno=0 [ 771.247288][T13529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2403'. [ 774.716453][T13565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2415'. [ 775.623294][T13576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2425'. [ 777.747512][T13596] binder: BINDER_SET_CONTEXT_MGR already set [ 777.766075][T13596] binder: 13595:13596 ioctl 4018620d 200000004a80 returned -16 [ 777.899193][T13600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2429'. [ 781.469505][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 781.469518][ T27] audit: type=1800 audit(1788671275.739:993): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161515 res=0 errno=0 [ 781.976226][T12679] Bluetooth: hci1: command tx timeout [ 782.607440][T13643] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2441'. [ 783.349872][ T8613] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 783.896183][ T8613] usb 3-1: Using ep0 maxpacket: 8 [ 784.429532][ T8613] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 784.438929][ T8613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 784.447169][ T8613] usb 3-1: Product: syz [ 784.451424][ T8613] usb 3-1: Manufacturer: syz [ 784.456304][ T8613] usb 3-1: SerialNumber: syz [ 784.709977][ T8613] usb 3-1: config 0 descriptor?? [ 784.735507][ T27] audit: type=1800 audit(1788671278.999:994): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161551 res=0 errno=0 [ 785.060218][ T8613] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 785.204533][ T27] audit: type=1800 audit(1788671279.069:995): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161594 res=0 errno=0 [ 785.286053][ T27] audit: type=1800 audit(1788671279.089:996): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=161558 res=0 errno=0 [ 785.314722][ T27] audit: type=1800 audit(1788671279.339:997): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=161559 res=0 errno=0 [ 785.321724][ T8613] gspca_sn9c2028: read1 error -32 [ 785.340738][ T8613] gspca_sn9c2028: read1 error -32 [ 785.363104][ T27] audit: type=1800 audit(1788671279.619:998): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=161580 res=0 errno=0 [ 785.456026][ T27] audit: type=1800 audit(1788671279.619:999): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=161581 res=0 errno=0 [ 785.480188][ T27] audit: type=1800 audit(1788671279.619:1000): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=161560 res=0 errno=0 [ 785.696099][ T27] audit: type=1800 audit(1788671279.619:1001): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=161582 res=0 errno=0 [ 786.049259][ T27] audit: type=1800 audit(1788671279.629:1002): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161603 res=0 errno=0 [ 786.617966][ T175] usb 3-1: USB disconnect, device number 45 [ 788.411134][ T175] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 788.836614][T12795] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 788.878299][ T175] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 788.969565][ T175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.059515][ T175] usb 4-1: Product: syz [ 789.097162][ T175] usb 4-1: Manufacturer: syz [ 789.250227][T12795] usb 3-1: Using ep0 maxpacket: 16 [ 789.257101][ T175] usb 4-1: SerialNumber: syz [ 789.263105][T12795] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 789.274852][ T175] usb 4-1: config 0 descriptor?? [ 789.283187][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 789.283198][ T27] audit: type=1800 audit(1788671283.549:1008): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161672 res=0 errno=0 [ 789.286057][T12795] usb 3-1: config 0 has no interface number 0 [ 789.308943][ T27] audit: type=1800 audit(1788671283.569:1009): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161715 res=0 errno=0 [ 789.308984][ T27] audit: type=1800 audit(1788671283.569:1010): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=161679 res=0 errno=0 [ 789.309016][ T27] audit: type=1800 audit(1788671283.569:1011): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=161680 res=0 errno=0 [ 789.380641][T12795] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 789.391628][T12795] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 789.407965][T12795] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 789.417389][T12795] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 789.426629][T12795] usb 3-1: Product: syz [ 789.430810][T12795] usb 3-1: SerialNumber: syz [ 789.448350][T12795] usb 3-1: config 0 descriptor?? [ 789.466133][ T27] audit: type=1800 audit(1788671283.709:1012): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161740 res=0 errno=0 [ 789.473182][T12795] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 789.527143][T12795] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input24 [ 789.558191][ T27] audit: type=1800 audit(1788671283.709:1013): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161782 res=0 errno=0 [ 789.614896][ T27] audit: type=1800 audit(1788671283.709:1014): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=161747 res=0 errno=0 [ 789.670144][ T27] audit: type=1800 audit(1788671283.709:1015): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=161748 res=0 errno=0 [ 789.715537][ T27] audit: type=1800 audit(1788671283.709:1016): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=161769 res=0 errno=0 [ 789.796484][ T27] audit: type=1800 audit(1788671283.709:1017): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=161749 res=0 errno=0 [ 789.796702][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 790.778394][T13734] siw: device registration error -23 [ 791.012120][ T175] usb 4-1: Firmware version (0.0) predates our first public release. [ 791.027679][ T175] usb 4-1: Please update to version 0.2 or newer [ 791.119815][ T175] usb 4-1: USB disconnect, device number 77 [ 792.472879][ T5819] usb 3-1: USB disconnect, device number 46 [ 792.485653][ T5819] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 793.935454][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 794.265401][T13777] siw: device registration error -23 [ 795.218972][T13785] FAULT_INJECTION: forcing a failure. [ 795.218972][T13785] name failslab, interval 1, probability 0, space 0, times 0 [ 796.150398][T13785] CPU: 0 PID: 13785 Comm: syz.1.2478 Not tainted syzkaller #0 [ 796.157925][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.168006][T13785] Call Trace: [ 796.171304][T13785] [ 796.174310][T13785] dump_stack_lvl+0x18c/0x250 [ 796.179061][T13785] ? show_regs_print_info+0x20/0x20 [ 796.184288][T13785] ? load_image+0x420/0x420 [ 796.188814][T13785] ? __might_sleep+0xe0/0xe0 [ 796.193434][T13785] ? __lock_acquire+0x7d80/0x7d80 [ 796.198500][T13785] should_fail_ex+0x394/0x4c0 [ 796.203217][T13785] should_failslab+0x9/0x20 [ 796.207757][T13785] slab_pre_alloc_hook+0x59/0x300 [ 796.212819][T13785] ? vb2_vmalloc_alloc+0xb2/0x330 [ 796.217993][T13785] __kmem_cache_alloc_node+0x53/0x250 [ 796.223398][T13785] ? vb2_vmalloc_alloc+0xb2/0x330 [ 796.228445][T13785] kmalloc_trace+0x2a/0xe0 [ 796.232894][T13785] vb2_vmalloc_alloc+0xb2/0x330 [ 796.237772][T13785] ? __copy_timestamp+0x1f0/0x1f0 [ 796.242818][T13785] __vb2_queue_alloc+0x78f/0x1410 [ 796.247983][T13785] vb2_core_reqbufs+0x9e8/0x10d0 [ 796.252947][T13785] ? preempt_schedule_thunk+0x1a/0x30 [ 796.258355][T13785] ? vb2_verify_memory_type+0x570/0x570 [ 796.263906][T13785] ? do_vfs_ioctl+0x156c/0x1cc0 [ 796.268785][T13785] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 796.274283][T13785] __video_do_ioctl+0xa34/0xde0 [ 796.279157][T13785] ? video_ioctl2+0x30/0x30 [ 796.283663][T13785] ? __might_fault+0xc6/0x120 [ 796.288338][T13785] ? __might_fault+0xaa/0x120 [ 796.293017][T13785] video_usercopy+0x889/0x1360 [ 796.297792][T13785] ? video_ioctl2+0x30/0x30 [ 796.302303][T13785] ? v4l_printk_ioctl+0x160/0x160 [ 796.307351][T13785] v4l2_ioctl+0x18a/0x1e0 [ 796.311683][T13785] ? v4l2_poll+0x2b0/0x2b0 [ 796.316100][T13785] __se_sys_ioctl+0xfd/0x170 [ 796.320694][T13785] do_syscall_64+0x55/0xb0 [ 796.325110][T13785] ? clear_bhb_loop+0x40/0x90 [ 796.329785][T13785] ? clear_bhb_loop+0x40/0x90 [ 796.334464][T13785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.340354][T13785] RIP: 0033:0x7f72f3f9e159 [ 796.344766][T13785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.364373][T13785] RSP: 002b:00007f72f21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.372791][T13785] RAX: ffffffffffffffda RBX: 00007f72f4225fa0 RCX: 00007f72f3f9e159 [ 796.380763][T13785] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 796.388730][T13785] RBP: 00007f72f4035024 R08: 0000000000000000 R09: 0000000000000000 [ 796.396695][T13785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.404662][T13785] R13: 00007f72f4226038 R14: 00007f72f4225fa0 R15: 00007ffdf3993988 [ 796.412647][T13785] [ 796.786533][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'. [ 797.908929][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 797.908945][ T27] audit: type=1800 audit(1788671292.179:1037): pid=13808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2485" name="state" dev="sysfs" ino=237 res=0 errno=0 [ 797.979181][T13808] page:ffffea0001300200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c008 [ 798.014472][T13808] head:ffffea0001300200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 798.044791][T13808] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 798.070966][T13808] page_type: 0xffffffff() [ 798.075499][T13808] raw: 00fff00000000840 ffff888017c42140 0000000000000000 dead000000000001 [ 798.091188][T13808] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 798.102400][T13808] page dumped because: unmovable page [ 798.125113][T13808] page_owner tracks the page as allocated [ 798.142632][T13808] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 60, tgid 60 (kworker/u4:4), ts 752777563652, free_ts 752555749297 [ 798.186095][T13808] post_alloc_hook+0x1c1/0x200 [ 798.201980][T13808] get_page_from_freelist+0x2181/0x22a0 [ 798.226038][T13808] __alloc_pages+0x1f0/0x460 [ 798.230818][T13808] alloc_slab_page+0x5d/0x180 [ 798.235560][T13808] new_slab+0x87/0x2d0 [ 798.240431][T13808] ___slab_alloc+0xc5c/0x12f0 [ 798.256128][T13808] __kmem_cache_alloc_node+0x11f/0x250 [ 798.261729][T13808] __kmalloc_node_track_caller+0xa4/0x230 [ 798.276218][T13808] kmalloc_reserve+0x116/0x240 [ 798.282241][T13808] __alloc_skb+0x138/0x2c0 [ 798.296278][T13808] nsim_dev_trap_report_work+0x253/0xa90 [ 798.306176][T13808] process_scheduled_works+0xa60/0x1600 [ 798.318001][T13808] worker_thread+0xa5e/0xfe0 [ 798.328186][T13808] kthread+0x2fa/0x390 [ 798.342233][T13808] ret_from_fork+0x48/0x80 [ 798.360358][T13808] ret_from_fork_asm+0x11/0x20 [ 798.375380][T13808] page last free stack trace: [ 798.395628][T13808] free_unref_page_prepare+0x7d7/0x8f0 [ 798.407979][T13808] free_unref_page+0x32/0x2e0 [ 798.412726][T13808] __unfreeze_partials+0x1cf/0x210 [ 798.436031][T13808] put_cpu_partial+0x17c/0x250 [ 798.440874][T13808] __slab_free+0x319/0x400 [ 798.466306][T13808] qlist_free_all+0x75/0xd0 [ 798.474076][T13808] kasan_quarantine_reduce+0x143/0x160 [ 798.489939][T13808] __kasan_slab_alloc+0x22/0x80 [ 798.494848][T13808] slab_post_alloc_hook+0x6a/0x4d0 [ 798.516055][T13808] kmem_cache_alloc+0x17e/0x2c0 [ 798.546051][T13808] ptlock_alloc+0x20/0x70 [ 798.554313][T13808] pte_alloc_one+0xcc/0x540 [ 798.566045][T13808] handle_mm_fault+0x2f72/0x4a50 [ 798.585403][T13808] do_user_addr_fault+0xad2/0x12d0 [ 798.754047][T13808] exc_page_fault+0x64/0x100 [ 798.776931][T13808] asm_exc_page_fault+0x26/0x30 [ 799.209983][T12669] infiniband s`z1: ib_query_port failed (-19) [ 800.183200][T13827] overlayfs: missing 'lowerdir' [ 800.415823][ T27] audit: type=1800 audit(1788671294.679:1038): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162006 res=0 errno=0 [ 800.492307][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 800.531170][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 800.539202][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 800.549590][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 800.559231][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 800.567525][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 801.443314][ T27] audit: type=1800 audit(1788671294.709:1039): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162016 res=0 errno=0 [ 801.566482][ T27] audit: type=1800 audit(1788671294.859:1040): pid=13799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162046 res=0 errno=0 [ 801.586983][ T27] audit: type=1800 audit(1788671294.859:1041): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162035 res=0 errno=0 [ 801.667836][ T9087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.758204][T13842] siw: device registration error -23 [ 802.449530][ T9087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.575029][ T9087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.617730][ T5785] Bluetooth: hci0: command tx timeout [ 802.668275][ T9087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.986403][ T27] audit: type=1800 audit(1788671297.239:1042): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163719 res=0 errno=0 [ 803.044109][T13828] chnl_net:caif_netlink_parms(): no params data found [ 803.053963][ T27] audit: type=1800 audit(1788671297.249:1043): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=163724 res=0 errno=0 [ 803.157279][ T27] audit: type=1800 audit(1788671297.249:1044): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=163728 res=0 errno=0 [ 803.208246][ T27] audit: type=1800 audit(1788671297.259:1045): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=163727 res=0 errno=0 [ 803.316479][ T27] audit: type=1800 audit(1788671297.259:1046): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=163730 res=0 errno=0 [ 803.398557][ T27] audit: type=1800 audit(1788671297.299:1047): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163803 res=0 errno=0 [ 803.419501][ T27] audit: type=1800 audit(1788671297.309:1048): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=163808 res=0 errno=0 [ 803.442086][ T27] audit: type=1800 audit(1788671297.309:1049): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=163812 res=0 errno=0 [ 803.470921][ T27] audit: type=1800 audit(1788671297.309:1050): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=163811 res=0 errno=0 [ 803.505133][ T27] audit: type=1800 audit(1788671297.319:1051): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=163814 res=0 errno=0 [ 803.649406][T13828] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.686153][T13828] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.693632][T13828] bridge_slave_0: entered allmulticast mode [ 803.709702][T13828] bridge_slave_0: entered promiscuous mode [ 803.734129][T13828] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.766644][T13828] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.774644][T13828] bridge_slave_1: entered allmulticast mode [ 803.797327][T13865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2498'. [ 803.807914][T13828] bridge_slave_1: entered promiscuous mode [ 803.840243][T13867] nvmet: Invalid value 't' for trtype [ 804.066881][T13828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.093869][T13828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.942380][ T5785] Bluetooth: hci0: command tx timeout [ 805.214106][T13884] siw: device registration error -23 [ 805.872101][T13887] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 805.875714][T13828] team0: Port device team_slave_0 added [ 806.061407][T13828] team0: Port device team_slave_1 added [ 806.241519][T13897] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2507'. [ 806.287630][T13828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.294614][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.359100][T13828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.418524][T13828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.440912][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.498439][T13828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.796240][T13905] page:ffffea0001300200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c008 [ 806.832378][T13905] head:ffffea0001300200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 806.865897][T13905] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 806.916593][T13905] page_type: 0xffffffff() [ 806.920994][T13905] raw: 00fff00000000840 ffff888017c42140 0000000000000000 dead000000000001 [ 806.936816][T13905] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 806.954998][T13828] hsr_slave_0: entered promiscuous mode [ 806.977377][T13828] hsr_slave_1: entered promiscuous mode [ 806.983648][T13905] page dumped because: unmovable page [ 807.006025][T13905] page_owner tracks the page as allocated [ 807.011959][T13828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.019993][ T5785] Bluetooth: hci0: command tx timeout [ 807.025873][T13905] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 60, tgid 60 (kworker/u4:4), ts 752777563652, free_ts 752555749297 [ 807.045022][T13828] Cannot create hsr debugfs directory [ 807.086852][T13905] post_alloc_hook+0x1c1/0x200 [ 807.091702][T13905] get_page_from_freelist+0x2181/0x22a0 [ 807.097839][T13905] __alloc_pages+0x1f0/0x460 [ 807.102511][T13905] alloc_slab_page+0x5d/0x180 [ 807.108943][T13905] new_slab+0x87/0x2d0 [ 807.113147][T13905] ___slab_alloc+0xc5c/0x12f0 [ 807.118311][T13905] __kmem_cache_alloc_node+0x11f/0x250 [ 807.123931][T13905] __kmalloc_node_track_caller+0xa4/0x230 [ 807.130235][T13905] kmalloc_reserve+0x116/0x240 [ 807.136301][T13905] __alloc_skb+0x138/0x2c0 [ 807.144665][T13905] nsim_dev_trap_report_work+0x253/0xa90 [ 807.154523][T13905] process_scheduled_works+0xa60/0x1600 [ 807.162971][T13905] worker_thread+0xa5e/0xfe0 [ 807.176052][T13905] kthread+0x2fa/0x390 [ 807.180373][T13905] ret_from_fork+0x48/0x80 [ 807.213288][T13905] ret_from_fork_asm+0x11/0x20 [ 807.228663][T13905] page last free stack trace: [ 807.233388][T13905] free_unref_page_prepare+0x7d7/0x8f0 [ 807.259448][T13905] free_unref_page+0x32/0x2e0 [ 807.264271][T13905] __unfreeze_partials+0x1cf/0x210 [ 807.279878][T13905] put_cpu_partial+0x17c/0x250 [ 807.296059][T13905] __slab_free+0x319/0x400 [ 807.310837][T13905] qlist_free_all+0x75/0xd0 [ 807.315401][T13905] kasan_quarantine_reduce+0x143/0x160 [ 807.346019][T13905] __kasan_slab_alloc+0x22/0x80 [ 807.350940][T13905] slab_post_alloc_hook+0x6a/0x4d0 [ 807.375990][T13905] kmem_cache_alloc+0x17e/0x2c0 [ 807.393841][T13905] ptlock_alloc+0x20/0x70 [ 807.406057][T13905] pte_alloc_one+0xcc/0x540 [ 807.410620][T13905] handle_mm_fault+0x2f72/0x4a50 [ 807.415591][T13905] do_user_addr_fault+0xad2/0x12d0 [ 807.436002][T13905] exc_page_fault+0x64/0x100 [ 807.440647][T13905] asm_exc_page_fault+0x26/0x30 [ 809.098566][T12679] Bluetooth: hci0: command tx timeout [ 809.101543][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.117395][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.261541][ T9087] hsr_slave_0: left promiscuous mode [ 809.300516][ T9087] hsr_slave_1: left promiscuous mode [ 809.333184][T13934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2515'. [ 809.359570][ T9087] veth1_macvtap: left promiscuous mode [ 809.372605][ T9087] veth0_macvtap: left promiscuous mode [ 809.380106][ T9087] veth1_vlan: left promiscuous mode [ 809.388008][ T9087] veth0_vlan: left promiscuous mode [ 809.416274][T12679] Bluetooth: hci2: command 0x0406 tx timeout [ 810.419563][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 810.419573][ T27] audit: type=1800 audit(1788671304.689:1071): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2521" name="state" dev="sysfs" ino=237 res=0 errno=0 [ 811.496136][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 811.522586][T13971] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2524'. [ 811.849155][T13976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.862350][T13976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.928074][ T9087] .` (unregistering): Released all slaves [ 814.366202][ T27] audit: type=1800 audit(1788671308.619:1072): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168796 res=0 errno=0 [ 814.541595][ T27] audit: type=1800 audit(1788671308.629:1073): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=168800 res=0 errno=0 [ 814.706424][ T27] audit: type=1800 audit(1788671308.779:1074): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168879 res=0 errno=0 [ 814.856053][ T27] audit: type=1800 audit(1788671308.779:1075): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=168883 res=0 errno=0 [ 814.992088][ T27] audit: type=1800 audit(1788671309.019:1076): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=23941 res=0 errno=0 [ 817.233151][T14017] syz.0.2540 (14017): attempted to duplicate a private mapping with mremap. This is not supported. [ 817.247800][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.256690][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.451439][T14021] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2534'. [ 819.637150][ T27] audit: type=1800 audit(1788671313.909:1077): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=23940 res=0 errno=0 [ 819.689608][ T27] audit: type=1800 audit(1788671313.929:1078): pid=13998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169379 res=0 errno=0 [ 819.840800][T13828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 819.902034][T13828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 819.929580][T13828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 819.964791][T13828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 820.249661][T13828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.348417][T13828] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.518420][T14057] Illegal XDP return value 4294967199 on prog (id 99) dev N/A, expect packet loss! [ 820.964975][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.972191][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.077847][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.085033][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.345078][T14073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2550'. [ 822.589538][T13828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.724250][T13828] veth0_vlan: entered promiscuous mode [ 822.803869][T13828] veth1_vlan: entered promiscuous mode [ 823.488590][T13828] veth0_macvtap: entered promiscuous mode [ 823.560441][T13828] veth1_macvtap: entered promiscuous mode [ 823.605076][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.622038][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.631954][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.642928][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.654438][T13828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.678946][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.704082][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.714025][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.730343][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.772468][T13828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.989954][T13828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.016460][T13828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.025222][T13828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.035711][T13828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.101473][ T175] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 825.186217][ T27] audit: type=1800 audit(1788671319.449:1079): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169739 res=0 errno=0 [ 825.225190][ T7590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.243936][ T7590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.267411][ T27] audit: type=1800 audit(1788671319.499:1080): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169874 res=0 errno=0 [ 825.295482][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.354941][ T175] usb 2-1: Using ep0 maxpacket: 16 [ 825.361353][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.412318][ T175] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 825.425721][ T175] usb 2-1: config 0 has no interface number 0 [ 825.435448][ T175] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 825.456716][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.464746][ T175] usb 2-1: Product: syz [ 825.529237][ T175] usb 2-1: Manufacturer: syz [ 825.538447][ T175] usb 2-1: SerialNumber: syz [ 825.547305][ T175] usb 2-1: config 0 descriptor?? [ 825.552487][ T27] audit: type=1800 audit(1788671319.819:1081): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170009 res=0 errno=0 [ 825.559312][ T175] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 825.616589][ T27] audit: type=1800 audit(1788671319.819:1082): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=170052 res=0 errno=0 [ 825.666741][ T27] audit: type=1800 audit(1788671319.819:1083): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=170016 res=0 errno=0 [ 825.701091][T14119] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2559'. [ 825.726667][ T27] audit: type=1800 audit(1788671319.819:1084): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=170017 res=0 errno=0 [ 827.526149][ T6358] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 828.114461][ T175] gspca_spca1528: reg_w err -71 [ 828.172379][ T175] spca1528: probe of 2-1:0.1 failed with error -71 [ 828.212456][ T175] usb 2-1: USB disconnect, device number 64 [ 828.234861][ T27] audit: type=1800 audit(1788671322.499:1085): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=170038 res=0 errno=0 [ 828.363380][ T27] audit: type=1800 audit(1788671322.499:1086): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=170039 res=0 errno=0 [ 829.698300][ T27] audit: type=1800 audit(1788671322.499:1087): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=170018 res=0 errno=0 [ 829.730028][ T27] audit: type=1800 audit(1788671322.499:1088): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=170040 res=0 errno=0 [ 829.917393][ T6358] usb 4-1: device descriptor read/all, error -71 [ 830.349145][ T27] audit: type=1800 audit(1788671324.619:1089): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170105 res=0 errno=0 [ 830.391231][T12679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.411524][T12679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.420965][T12679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.429394][T12679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.438200][T12679] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 830.445678][T12679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 830.481050][ T27] audit: type=1800 audit(1788671324.639:1090): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170185 res=0 errno=0 [ 830.501935][ T27] audit: type=1800 audit(1788671324.749:1091): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170220 res=0 errno=0 [ 830.538819][ T27] audit: type=1800 audit(1788671324.789:1092): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170231 res=0 errno=0 [ 830.829921][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.075045][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.172556][T14180] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2569'. [ 831.288643][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.488453][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.875051][ T27] audit: type=1800 audit(1788671326.139:1093): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171904 res=0 errno=0 [ 831.911425][ T27] audit: type=1800 audit(1788671326.149:1094): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=171909 res=0 errno=0 [ 831.976010][ T27] audit: type=1800 audit(1788671326.149:1095): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=171913 res=0 errno=0 [ 832.046096][ T27] audit: type=1800 audit(1788671326.149:1096): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=171912 res=0 errno=0 [ 832.082827][T14159] chnl_net:caif_netlink_parms(): no params data found [ 832.113087][ T27] audit: type=1800 audit(1788671326.149:1097): pid=14099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=171915 res=0 errno=0 [ 833.359285][T12679] Bluetooth: hci3: command tx timeout [ 833.366062][ T27] audit: type=1800 audit(1788671326.199:1098): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171988 res=0 errno=0 [ 835.023777][T14159] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.075841][T14228] FAULT_INJECTION: forcing a failure. [ 835.075841][T14228] name failslab, interval 1, probability 0, space 0, times 0 [ 835.086274][T14159] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.089247][T14228] CPU: 0 PID: 14228 Comm: syz.2.2576 Not tainted syzkaller #0 [ 835.102976][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 835.103471][T14159] bridge_slave_0: entered allmulticast mode [ 835.113028][T14228] Call Trace: [ 835.113039][T14228] [ 835.113047][T14228] dump_stack_lvl+0x18c/0x250 [ 835.113084][T14228] ? show_regs_print_info+0x20/0x20 [ 835.113107][T14228] ? load_image+0x420/0x420 [ 835.113130][T14228] ? __lock_acquire+0x7d80/0x7d80 [ 835.113161][T14228] should_fail_ex+0x394/0x4c0 [ 835.113193][T14228] should_failslab+0x9/0x20 [ 835.113229][T14228] slab_pre_alloc_hook+0x59/0x300 [ 835.113256][T14228] ? __vb2_queue_alloc+0x78f/0x1410 [ 835.113282][T14228] ? vb2_core_reqbufs+0x9e8/0x10d0 [ 835.113305][T14228] ? v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 835.113336][T14228] kmem_cache_alloc_node+0x5e/0x310 [ 835.113364][T14228] ? alloc_vmap_area+0x1b4/0x1e50 [ 835.113395][T14228] alloc_vmap_area+0x1b4/0x1e50 [ 835.113443][T14228] ? vm_map_ram+0xcf0/0xcf0 [ 835.113472][T14228] ? rcu_is_watching+0x15/0xb0 [ 835.113501][T14228] __get_vm_area_node+0x162/0x370 [ 835.113531][T14228] ? __vb2_queue_alloc+0x78f/0x1410 [ 835.113559][T14228] __vmalloc_node_range+0x36f/0x1320 [ 835.113586][T14228] ? vb2_vmalloc_alloc+0xef/0x330 [ 835.113636][T14228] ? free_vm_area+0x50/0x50 [ 835.113671][T14228] vmalloc_user+0x74/0x80 [ 835.167457][T14159] bridge_slave_0: entered promiscuous mode [ 835.169745][T14228] ? vb2_vmalloc_alloc+0xef/0x330 [ 835.201379][T14159] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.204586][T14228] vb2_vmalloc_alloc+0xef/0x330 [ 835.241691][T14159] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.246735][T14228] ? __copy_timestamp+0x1f0/0x1f0 [ 835.246764][T14228] __vb2_queue_alloc+0x78f/0x1410 [ 835.246812][T14228] vb2_core_reqbufs+0x9e8/0x10d0 [ 835.246853][T14228] ? vb2_verify_memory_type+0x570/0x570 [ 835.246877][T14228] ? do_vfs_ioctl+0x156c/0x1cc0 [ 835.246921][T14228] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 835.246954][T14228] __video_do_ioctl+0xa34/0xde0 [ 835.246990][T14228] ? video_ioctl2+0x30/0x30 [ 835.247015][T14228] ? __might_fault+0xc6/0x120 [ 835.247034][T14228] ? __might_fault+0xaa/0x120 [ 835.247059][T14228] video_usercopy+0x889/0x1360 [ 835.267576][T14159] bridge_slave_1: entered allmulticast mode [ 835.268954][T14228] ? video_ioctl2+0x30/0x30 [ 835.275103][T14159] bridge_slave_1: entered promiscuous mode [ 835.279392][T14228] ? v4l_printk_ioctl+0x160/0x160 [ 835.279440][T14228] v4l2_ioctl+0x18a/0x1e0 [ 835.279462][T14228] ? v4l2_poll+0x2b0/0x2b0 [ 835.279481][T14228] __se_sys_ioctl+0xfd/0x170 [ 835.347731][T14228] do_syscall_64+0x55/0xb0 [ 835.352173][T14228] ? clear_bhb_loop+0x40/0x90 [ 835.356877][T14228] ? clear_bhb_loop+0x40/0x90 [ 835.361588][T14228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.367512][T14228] RIP: 0033:0x7f2e5df9e159 [ 835.371952][T14228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.391587][T14228] RSP: 002b:00007f2e5ef4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.400027][T14228] RAX: ffffffffffffffda RBX: 00007f2e5e225fa0 RCX: 00007f2e5df9e159 [ 835.408021][T14228] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 835.416013][T14228] RBP: 00007f2e5e035024 R08: 0000000000000000 R09: 0000000000000000 [ 835.424037][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.432028][T14228] R13: 00007f2e5e226038 R14: 00007f2e5e225fa0 R15: 00007fffc72e3da8 [ 835.440041][T14228] [ 835.446044][ T5785] Bluetooth: hci3: command tx timeout [ 835.471679][T14228] syz.2.2576: vmalloc error: size 614400, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 835.498177][T14228] CPU: 0 PID: 14228 Comm: syz.2.2576 Not tainted syzkaller #0 [ 835.505681][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 835.515757][T14228] Call Trace: [ 835.519057][T14228] [ 835.522000][T14228] dump_stack_lvl+0x18c/0x250 [ 835.526705][T14228] ? show_regs_print_info+0x20/0x20 [ 835.531928][T14228] ? load_image+0x420/0x420 [ 835.536455][T14228] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 835.542904][T14228] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 835.549440][T14228] warn_alloc+0x246/0x340 [ 835.553798][T14228] ? slab_free_freelist_hook+0x130/0x1a0 [ 835.559464][T14228] ? zone_watermark_ok_safe+0x230/0x230 [ 835.565036][T14228] ? __get_vm_area_node+0x17b/0x370 [ 835.570275][T14228] ? __get_vm_area_node+0x17b/0x370 [ 835.575507][T14228] ? __vb2_queue_alloc+0x78f/0x1410 [ 835.580750][T14228] __vmalloc_node_range+0x394/0x1320 [ 835.586107][T14228] ? free_vm_area+0x50/0x50 [ 835.590675][T14228] vmalloc_user+0x74/0x80 [ 835.595030][T14228] ? vb2_vmalloc_alloc+0xef/0x330 [ 835.600064][T14228] vb2_vmalloc_alloc+0xef/0x330 [ 835.604921][T14228] ? __copy_timestamp+0x1f0/0x1f0 [ 835.609948][T14228] __vb2_queue_alloc+0x78f/0x1410 [ 835.614991][T14228] vb2_core_reqbufs+0x9e8/0x10d0 [ 835.619954][T14228] ? vb2_verify_memory_type+0x570/0x570 [ 835.625543][T14228] ? do_vfs_ioctl+0x156c/0x1cc0 [ 835.630413][T14228] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 835.635796][T14228] __video_do_ioctl+0xa34/0xde0 [ 835.640663][T14228] ? video_ioctl2+0x30/0x30 [ 835.645196][T14228] ? __might_fault+0xc6/0x120 [ 835.649872][T14228] ? __might_fault+0xaa/0x120 [ 835.654550][T14228] video_usercopy+0x889/0x1360 [ 835.659317][T14228] ? video_ioctl2+0x30/0x30 [ 835.663821][T14228] ? v4l_printk_ioctl+0x160/0x160 [ 835.668861][T14228] v4l2_ioctl+0x18a/0x1e0 [ 835.673189][T14228] ? v4l2_poll+0x2b0/0x2b0 [ 835.677601][T14228] __se_sys_ioctl+0xfd/0x170 [ 835.682193][T14228] do_syscall_64+0x55/0xb0 [ 835.686610][T14228] ? clear_bhb_loop+0x40/0x90 [ 835.691284][T14228] ? clear_bhb_loop+0x40/0x90 [ 835.695963][T14228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.701861][T14228] RIP: 0033:0x7f2e5df9e159 [ 835.706274][T14228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.725914][T14228] RSP: 002b:00007f2e5ef4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.734335][T14228] RAX: ffffffffffffffda RBX: 00007f2e5e225fa0 RCX: 00007f2e5df9e159 [ 835.742305][T14228] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 835.750275][T14228] RBP: 00007f2e5e035024 R08: 0000000000000000 R09: 0000000000000000 [ 835.758244][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.766210][T14228] R13: 00007f2e5e226038 R14: 00007f2e5e225fa0 R15: 00007fffc72e3da8 [ 835.774192][T14228] [ 835.848018][T14228] Mem-Info: [ 835.851194][T14228] active_anon:30818 inactive_anon:0 isolated_anon:0 [ 835.851194][T14228] active_file:18500 inactive_file:48480 isolated_file:0 [ 835.851194][T14228] unevictable:768 dirty:46 writeback:0 [ 835.851194][T14228] slab_reclaimable:6589 slab_unreclaimable:96414 [ 835.851194][T14228] mapped:25341 shmem:26055 pagetables:787 [ 835.851194][T14228] sec_pagetables:0 bounce:0 [ 835.851194][T14228] kernel_misc_reclaimable:0 [ 835.851194][T14228] free:1310557 free_pcp:10982 free_cma:0 [ 835.897079][T14228] Node 0 active_anon:121072kB inactive_anon:0kB active_file:73964kB inactive_file:193720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101328kB dirty:184kB writeback:0kB shmem:100484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10972kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no [ 835.930707][T14228] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 835.957857][T14159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.989322][T14228] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 836.016746][T14228] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 836.022549][T14228] Node 0 DMA32 free:1350968kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:109296kB inactive_anon:0kB active_file:73964kB inactive_file:192892kB unevictable:1536kB writepending:192kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:21804kB local_pcp:956kB free_cma:0kB [ 836.054135][T14228] lowmem_reserve[]: 0 0 0 0 0 [ 836.059261][T14228] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 836.079074][T14159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.086254][T14228] lowmem_reserve[]: 0 0 0 0 0 [ 836.148563][T14228] Node 1 Normal free:3900776kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11232kB local_pcp:10496kB free_cma:0kB [ 836.178714][T14228] lowmem_reserve[]: 0 0 0 0 0 [ 836.183481][T14228] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 836.237161][T14228] Node 0 DMA32: 1492*4kB (UME) 1271*8kB (UME) 1126*16kB (UME) 834*32kB (UME) 283*64kB (UME) 223*128kB (UME) 28*256kB (UME) 20*512kB (UME) 23*1024kB (UME) 17*2048kB (UME) 288*4096kB (UM) = 1362920kB [ 836.257811][T14159] team0: Port device team_slave_0 added [ 836.292917][T14228] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 836.314225][T14159] team0: Port device team_slave_1 added [ 836.333124][T14228] Node 1 Normal: 258*4kB (UME) 54*8kB (UME) 41*16kB (UE) 227*32kB (UME) 77*64kB (UME) 21*128kB (UME) 3*256kB (UME) 0*512kB 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3900776kB [ 836.364776][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.383938][T14159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.392268][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.406056][T14159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.406138][T14228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 836.476289][T14159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.478198][T14228] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 836.526434][T14159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.530245][T14228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 836.541204][T14159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.557689][T14228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 836.596192][T14228] 79100 total pagecache pages [ 836.600981][T14228] 0 pages in swap cache [ 836.605149][T14228] Free swap = 124704kB [ 836.615315][T14159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.632556][T14228] Total swap = 124996kB [ 836.645267][T14228] 2097051 pages RAM [ 836.649942][T14228] 0 pages HighMem/MovableOnly [ 836.662397][T14228] 416960 pages reserved [ 836.676325][T14228] 0 pages cma reserved [ 836.797404][T14159] hsr_slave_0: entered promiscuous mode [ 836.808413][T14159] hsr_slave_1: entered promiscuous mode [ 836.815388][T14159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.828009][T14159] Cannot create hsr debugfs directory [ 837.401567][ T12] hsr_slave_0: left promiscuous mode [ 837.423571][ T12] hsr_slave_1: left promiscuous mode [ 837.456801][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.459784][T14259] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2577'. [ 837.470815][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.503010][ T5785] Bluetooth: hci3: command tx timeout [ 837.514129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.545507][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.607233][ T12] bridge_slave_1: left allmulticast mode [ 837.642732][ T12] bridge_slave_1: left promiscuous mode [ 837.683208][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.747386][ T12] bridge_slave_0: left allmulticast mode [ 837.753099][ T12] bridge_slave_0: left promiscuous mode [ 837.767619][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.788811][T14262] nvmet: adding nsid 1 to subsystem testsubsys [ 837.804856][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 837.804873][ T27] audit: type=1800 audit(1788671332.069:1113): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2581" name="buffered_io" dev="configfs" ino=47554 res=0 errno=0 [ 837.806680][T14262] nvmet: failed to open block device ./file0: (-2) [ 837.818822][ T27] audit: type=1800 audit(1788671332.069:1114): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2581" name="device_path" dev="configfs" ino=47555 res=0 errno=0 [ 837.878724][ T12] veth1_macvtap: left promiscuous mode [ 837.884326][ T12] veth0_macvtap: left promiscuous mode [ 837.890114][ T12] veth1_vlan: left promiscuous mode [ 837.895468][ T12] veth0_vlan: left promiscuous mode [ 837.901762][ T27] audit: type=1800 audit(1788671332.069:1115): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2581" name="enable" dev="configfs" ino=47556 res=0 errno=0 [ 838.135228][ T12] bond0 (unregistering): Released all slaves [ 838.153364][T14271] Bluetooth: MGMT ver 1.22 [ 838.296134][ T6358] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 838.480904][T14277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2588'. [ 838.482559][ T6358] usb 3-1: Using ep0 maxpacket: 8 [ 838.497908][ T6358] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 838.506551][ T6358] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.521871][ T6358] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 838.534255][ T6358] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 838.570620][ T6358] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.584526][ T6358] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 838.615183][ T6358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.669207][ T27] audit: type=1800 audit(1788671332.939:1116): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176909 res=0 errno=0 [ 840.260125][ T5785] Bluetooth: hci3: command tx timeout [ 840.276163][ T27] audit: type=1800 audit(1788671334.539:1117): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=176949 res=0 errno=0 [ 840.306110][ T27] audit: type=1800 audit(1788671334.539:1118): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=176916 res=0 errno=0 [ 840.326300][ T27] audit: type=1800 audit(1788671334.539:1119): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=176917 res=0 errno=0 [ 840.360581][ T27] audit: type=1800 audit(1788671334.539:1120): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=176918 res=0 errno=0 [ 840.385242][ T6358] usb 3-1: usb_control_msg returned -32 [ 840.418925][ T6358] usbtmc 3-1:16.0: can't read capabilities [ 840.425905][ T27] audit: type=1800 audit(1788671334.559:1121): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176958 res=0 errno=0 [ 840.446284][ T27] audit: type=1800 audit(1788671334.649:1122): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2584" name="disk" dev="sysfs" ino=1370 res=0 errno=0 [ 841.304627][ T12] team0 (unregistering): Port device team_slave_1 removed [ 841.637832][ T12] team0 (unregistering): Port device team_slave_0 removed [ 841.750106][T14110] usb 3-1: USB disconnect, device number 47 [ 841.864108][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.994380][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.006029][ T175] infiniband syz0: ib_query_port failed (-19) [ 842.889384][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 842.889398][ T27] audit: type=1800 audit(1788671337.149:1124): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177042 res=0 errno=0 [ 843.383280][ T12] .` (unregistering): Released all slaves [ 843.481432][ T27] audit: type=1800 audit(1788671337.749:1125): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177062 res=0 errno=0 [ 843.519651][ T27] audit: type=1800 audit(1788671337.769:1126): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177076 res=0 errno=0 [ 843.584494][ T27] audit: type=1800 audit(1788671337.839:1127): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177190 res=0 errno=0 [ 843.610437][T14325] jffs2: notice: (14325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 843.667354][ T27] audit: type=1800 audit(1788671337.849:1128): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=177194 res=0 errno=0 [ 843.724402][ T27] audit: type=1800 audit(1788671337.899:1129): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177273 res=0 errno=0 [ 845.008589][ T27] audit: type=1800 audit(1788671337.899:1130): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=177277 res=0 errno=0 [ 845.116012][ T27] audit: type=1800 audit(1788671337.959:1131): pid=14159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=23941 res=0 errno=0 [ 845.196825][ T27] audit: type=1800 audit(1788671337.969:1132): pid=14311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2598" name="/" dev="fuse" ino=1 res=0 errno=0 [ 846.336240][T14352] input: syz0 as /devices/virtual/input/input25 [ 846.344701][ T27] audit: type=1800 audit(1788671340.609:1133): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177552 res=0 errno=0 [ 847.308628][T14159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 847.339990][T14159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 847.388142][T14159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 847.413932][T14159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 847.633891][T14159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.677561][T14159] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.709324][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.716522][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.726805][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.733939][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.811041][T14159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 848.471359][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 848.471373][ T27] audit: type=1800 audit(1788671342.739:1145): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2626" name="buffered_io" dev="configfs" ino=48371 res=0 errno=0 [ 848.510562][T14159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.513996][T14409] nvmet: failed to open block device ./file0: (-2) [ 848.552218][ T27] audit: type=1800 audit(1788671342.779:1146): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2626" name="device_path" dev="configfs" ino=48374 res=0 errno=0 [ 848.617330][ T27] audit: type=1800 audit(1788671342.779:1147): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2626" name="enable" dev="configfs" ino=48375 res=0 errno=0 [ 848.680394][T14159] veth0_vlan: entered promiscuous mode [ 848.702733][T14159] veth1_vlan: entered promiscuous mode [ 848.783521][T14159] veth0_macvtap: entered promiscuous mode [ 848.802977][T14159] veth1_macvtap: entered promiscuous mode [ 848.832494][T14159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.856712][T14159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.893292][T14159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.945102][T14159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.957286][T14159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.968622][T14159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.979175][T14159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.989123][T14159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.999642][T14159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.010917][T14159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.391744][T14159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.570230][T14159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.644230][T14159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.694298][T14159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.753073][T14428] jffs2: notice: (14428) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 849.853402][ T27] audit: type=1800 audit(1788671344.119:1148): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177948 res=0 errno=0 [ 849.984528][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.002729][ T27] audit: type=1800 audit(1788671344.249:1149): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178083 res=0 errno=0 [ 850.026155][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.042121][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.072824][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.269378][ T27] audit: type=1800 audit(1788671347.529:1150): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178218 res=0 errno=0 [ 853.333692][T12679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 853.348372][T12679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 853.367818][T12679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 853.461151][ T27] audit: type=1800 audit(1788671347.579:1151): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178228 res=0 errno=0 [ 853.500824][T12679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 853.512114][T12679] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 853.519662][T12679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 853.619238][ T27] audit: type=1800 audit(1788671347.829:1152): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178247 res=0 errno=0 [ 853.709312][ T27] audit: type=1800 audit(1788671347.839:1153): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178258 res=0 errno=0 [ 855.297444][T14482] chnl_net:caif_netlink_parms(): no params data found [ 855.518368][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 855.576073][T12679] Bluetooth: hci2: command tx timeout [ 855.777001][T14482] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.815882][T14482] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.849294][T14482] bridge_slave_0: entered allmulticast mode [ 855.886105][T14482] bridge_slave_0: entered promiscuous mode [ 855.901423][T14482] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.910849][T14482] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.918201][T14482] bridge_slave_1: entered allmulticast mode [ 855.925502][T14482] bridge_slave_1: entered promiscuous mode [ 855.953388][ T27] audit: type=1800 audit(1788671350.219:1154): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181344 res=0 errno=0 [ 856.017861][ T27] audit: type=1800 audit(1788671350.219:1155): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=181349 res=0 errno=0 [ 856.137681][ T27] audit: type=1800 audit(1788671350.219:1156): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=181353 res=0 errno=0 [ 856.208124][T14482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.244262][T14482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.244643][ T27] audit: type=1800 audit(1788671350.219:1157): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=181352 res=0 errno=0 [ 856.281673][T14482] team0: Port device team_slave_0 added [ 856.318582][T14482] team0: Port device team_slave_1 added [ 856.344915][ T27] audit: type=1800 audit(1788671350.219:1158): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=181355 res=0 errno=0 [ 856.367407][ T27] audit: type=1800 audit(1788671350.219:1159): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181428 res=0 errno=0 [ 856.389443][ T27] audit: type=1800 audit(1788671350.249:1160): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=181433 res=0 errno=0 [ 856.410174][ T27] audit: type=1800 audit(1788671350.259:1161): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=181437 res=0 errno=0 [ 856.453579][T14482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.660656][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.821313][T14482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.360635][T14482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.367862][T14482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.412170][T14545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2660'. [ 857.413086][T14482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.598328][T14482] hsr_slave_0: entered promiscuous mode [ 857.613070][T14482] hsr_slave_1: entered promiscuous mode [ 857.632575][T14482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 857.657678][T12679] Bluetooth: hci2: command tx timeout [ 857.666005][T14482] Cannot create hsr debugfs directory [ 858.546433][T14580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.587145][T14580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.664399][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 858.695295][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 858.695310][ T27] audit: type=1800 audit(1788671352.959:1177): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185210 res=0 errno=0 [ 858.739150][ T27] audit: type=1800 audit(1788671352.969:1178): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185293 res=0 errno=0 [ 858.816435][ T27] audit: type=1800 audit(1788671352.979:1179): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=185297 res=0 errno=0 [ 858.868959][ T27] audit: type=1800 audit(1788671352.989:1180): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=185214 res=0 errno=0 [ 859.754038][T12679] Bluetooth: hci2: command tx timeout [ 859.938698][ T27] audit: type=1800 audit(1788671354.189:1181): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=23940 res=0 errno=0 [ 860.314459][ T27] audit: type=1800 audit(1788671354.209:1182): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185376 res=0 errno=0 [ 860.748455][ T27] audit: type=1800 audit(1788671354.899:1183): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=114627 res=0 errno=0 [ 860.976489][T14482] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 861.052667][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.071609][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.096785][ T12] bridge_slave_1: left allmulticast mode [ 861.102639][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.148114][ T12] bridge_slave_0: left allmulticast mode [ 861.153983][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.493272][T14638] overlayfs: failed to resolve './file0': -2 [ 861.576146][T14641] input: syz1 as /devices/virtual/input/input26 [ 861.704615][ T27] audit: type=1800 audit(1788671355.939:1184): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185728 res=0 errno=0 [ 861.758409][T14643] CacheFiles: Empty directory specified [ 861.841064][T12679] Bluetooth: hci2: command tx timeout [ 861.944467][T14645] CacheFiles: No cache directory specified [ 862.079237][ T27] audit: type=1800 audit(1788671356.009:1185): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=185743 res=0 errno=0 [ 862.115087][ T27] audit: type=1800 audit(1788671356.039:1186): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=185746 res=0 errno=0 [ 862.648330][ T8] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 862.767949][T14654] siw: device registration error -23 [ 862.943072][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.059265][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 863.179184][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.293927][ T8] usb 4-1: config 0 descriptor?? [ 863.530454][T14648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.556656][T14648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.574338][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 863.606895][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 863.625827][ T8] usb 4-1: USB disconnect, device number 80 [ 864.437198][ T8] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 864.507164][ T12] team0 (unregistering): Port device team_slave_1 removed [ 864.558126][ T12] team0 (unregistering): Port device team_slave_0 removed [ 864.641033][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.676969][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.700986][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 864.713453][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.739456][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 864.739471][ T27] audit: type=1800 audit(1788671359.009:1201): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185909 res=0 errno=0 [ 864.766295][ T8] usb 4-1: config 0 descriptor?? [ 864.776538][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.783694][ T27] audit: type=1800 audit(1788671359.029:1202): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=185949 res=0 errno=0 [ 864.820283][ T27] audit: type=1800 audit(1788671359.029:1203): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=185916 res=0 errno=0 [ 864.848223][ T27] audit: type=1800 audit(1788671359.029:1204): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=185917 res=0 errno=0 [ 864.868832][ T27] audit: type=1800 audit(1788671359.029:1205): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=185918 res=0 errno=0 [ 864.889596][ T27] audit: type=1800 audit(1788671359.059:1206): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185958 res=0 errno=0 [ 865.208860][T14678] jffs2: notice: (14678) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 865.379504][ T12] .` (unregistering): Released all slaves [ 865.516437][T14685] siw: device registration error -23 [ 865.607055][ T8] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 866.012062][T14482] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 866.174556][T14482] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 866.212315][ T8] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27 [ 866.231325][ T27] audit: type=1800 audit(1788671360.499:1207): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185977 res=0 errno=0 [ 866.257375][ C0] ================================================================================ [ 866.266742][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 866.266970][T14482] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 866.275360][ C0] index 6691 is out of range for type 'const int[34]' [ 866.275374][ C0] CPU: 0 PID: 14682 Comm: syz.1.2693 Not tainted syzkaller #0 [ 866.275395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.275409][ C0] Call Trace: [ 866.275424][ C0] [ 866.312486][ C0] dump_stack_lvl+0x18c/0x250 [ 866.317181][ C0] ? show_regs_print_info+0x20/0x20 [ 866.322382][ C0] ? load_image+0x420/0x420 [ 866.326893][ C0] ? kcov_remote_start+0x29f/0x810 [ 866.332015][ C0] ubsan_epilogue+0xa/0x30 [ 866.336459][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 866.342224][ C0] aiptek_irq+0x1eb8/0x2920 [ 866.346824][ C0] ? usb_unanchor_urb+0xa5/0xc0 [ 866.351688][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 866.357417][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 866.362794][ C0] dummy_timer+0xa58/0x34e0 [ 866.367362][ C0] ? dummy_free_streams+0x520/0x520 [ 866.372562][ C0] ? dummy_free_streams+0x520/0x520 [ 866.377758][ C0] __hrtimer_run_queues+0x525/0xc10 [ 866.382967][ C0] ? hrtimer_interrupt+0x980/0x980 [ 866.388080][ C0] ? read_tsc+0x9/0x20 [ 866.392158][ C0] hrtimer_run_softirq+0x177/0x290 [ 866.397273][ C0] handle_softirqs+0x27d/0x820 [ 866.402032][ C0] ? read_tsc+0x9/0x20 [ 866.406102][ C0] ? ktime_get+0x24b/0x280 [ 866.410523][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 866.415347][ C0] ? do_softirq+0x1a0/0x1a0 [ 866.419851][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 866.425056][ C0] __irq_exit_rcu+0xd3/0x190 [ 866.429650][ C0] ? irq_exit_rcu+0x20/0x20 [ 866.434162][ C0] irq_exit_rcu+0x9/0x20 [ 866.438409][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 866.444053][ C0] [ 866.446983][ C0] [ 866.449918][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 866.455901][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 866.462767][ C0] Code: 40 31 7c 7e 65 8b 15 41 31 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 24 16 00 00 00 74 4e 8b 91 00 16 00 00 <83> fa 03 75 43 48 8b 91 08 16 00 00 44 8b 89 04 16 00 00 49 c1 e1 [ 866.482376][ C0] RSP: 0018:ffffc900036e76e8 EFLAGS: 00000246 [ 866.488451][ C0] RAX: ffffffff81cb2ca9 RBX: ffffea0001aba500 RCX: ffff888024d2bc00 [ 866.496422][ C0] RDX: 0000000000000000 RSI: 00fff00000000000 RDI: ffffffffffffffff [ 866.504390][ C0] RBP: ffffc900036e78f0 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 866.512365][ C0] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: dffffc0000000000 [ 866.520335][ C0] R13: 1ffffd40003574a1 R14: ffffea0001aba508 R15: 00fff00000000000 [ 866.528310][ C0] ? mm_counter_file+0x89/0x2c0 [ 866.533169][ C0] mm_counter_file+0x89/0x2c0 [ 866.537848][ C0] unmap_page_range+0x1598/0x32f0 [ 866.542904][ C0] ? copy_page_range+0x3700/0x3700 [ 866.548033][ C0] unmap_vmas+0x286/0x3f0 [ 866.552374][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 866.557584][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 866.562624][ C0] exit_mmap+0x238/0xb90 [ 866.566875][ C0] ? vm_brk+0x30/0x30 [ 866.570858][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 866.576521][ C0] ? uprobe_clear_state+0x278/0x290 [ 866.581723][ C0] __mmput+0x118/0x3a0 [ 866.585791][ C0] exit_mm+0x23f/0x340 [ 866.589866][ C0] ? sysctl_delayacct+0x220/0x220 [ 866.594887][ C0] ? do_exit+0x2530/0x2530 [ 866.599325][ C0] do_exit+0x909/0x2530 [ 866.603498][ C0] ? put_task_struct+0xc0/0xc0 [ 866.608265][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 866.614268][ C0] ? do_group_exit+0x21d/0x2f0 [ 866.619042][ C0] ? lock_chain_count+0x20/0x20 [ 866.623898][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 866.629098][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 866.634303][ C0] do_group_exit+0x22d/0x2f0 [ 866.638914][ C0] __x64_sys_exit_group+0x3f/0x40 [ 866.643979][ C0] do_syscall_64+0x55/0xb0 [ 866.648401][ C0] ? clear_bhb_loop+0x40/0x90 [ 866.653083][ C0] ? clear_bhb_loop+0x40/0x90 [ 866.657787][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.663680][ C0] RIP: 0033:0x7f1831d9e159 [ 866.668090][ C0] Code: Unable to access opcode bytes at 0x7f1831d9e12f. [ 866.675178][ C0] RSP: 002b:00007ffcc3f490f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 866.683592][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1831d9e159 [ 866.691560][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 866.699527][ C0] RBP: 00007ffcc3f4915c R08: 0000000000000000 R09: 00000000000927c0 [ 866.707494][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000017 [ 866.715456][ C0] R13: 00000000000927c0 R14: 00000000000d33f9 R15: 00007ffcc3f491b0 [ 866.723434][ C0] [ 866.726448][ C0] ================================================================================ [ 866.735744][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 866.742924][ C0] CPU: 0 PID: 14682 Comm: syz.1.2693 Not tainted syzkaller #0 [ 866.750387][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.760479][ C0] Call Trace: [ 866.763764][ C0] [ 866.766603][ C0] dump_stack_lvl+0x18c/0x250 [ 866.771289][ C0] ? show_regs_print_info+0x20/0x20 [ 866.776485][ C0] ? load_image+0x420/0x420 [ 866.780992][ C0] panic+0x2ca/0x720 [ 866.784922][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 866.789447][ C0] check_panic_on_warn+0x84/0xa0 [ 866.794391][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 866.800118][ C0] aiptek_irq+0x1eb8/0x2920 [ 866.804631][ C0] ? usb_unanchor_urb+0xa5/0xc0 [ 866.809481][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 866.815200][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 866.820573][ C0] dummy_timer+0xa58/0x34e0 [ 866.825119][ C0] ? dummy_free_streams+0x520/0x520 [ 866.830316][ C0] ? dummy_free_streams+0x520/0x520 [ 866.835507][ C0] __hrtimer_run_queues+0x525/0xc10 [ 866.840716][ C0] ? hrtimer_interrupt+0x980/0x980 [ 866.845848][ C0] ? read_tsc+0x9/0x20 [ 866.849959][ C0] hrtimer_run_softirq+0x177/0x290 [ 866.855096][ C0] handle_softirqs+0x27d/0x820 [ 866.859870][ C0] ? read_tsc+0x9/0x20 [ 866.863940][ C0] ? ktime_get+0x24b/0x280 [ 866.868394][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 866.873164][ C0] ? do_softirq+0x1a0/0x1a0 [ 866.877670][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 866.882876][ C0] __irq_exit_rcu+0xd3/0x190 [ 866.887463][ C0] ? irq_exit_rcu+0x20/0x20 [ 866.891971][ C0] irq_exit_rcu+0x9/0x20 [ 866.896209][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 866.901851][ C0] [ 866.904777][ C0] [ 866.907702][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 866.913683][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 866.920536][ C0] Code: 40 31 7c 7e 65 8b 15 41 31 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 24 16 00 00 00 74 4e 8b 91 00 16 00 00 <83> fa 03 75 43 48 8b 91 08 16 00 00 44 8b 89 04 16 00 00 49 c1 e1 [ 866.940144][ C0] RSP: 0018:ffffc900036e76e8 EFLAGS: 00000246 [ 866.946211][ C0] RAX: ffffffff81cb2ca9 RBX: ffffea0001aba500 RCX: ffff888024d2bc00 [ 866.954188][ C0] RDX: 0000000000000000 RSI: 00fff00000000000 RDI: ffffffffffffffff [ 866.962167][ C0] RBP: ffffc900036e78f0 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 866.970135][ C0] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: dffffc0000000000 [ 866.978103][ C0] R13: 1ffffd40003574a1 R14: ffffea0001aba508 R15: 00fff00000000000 [ 866.986076][ C0] ? mm_counter_file+0x89/0x2c0 [ 866.990934][ C0] mm_counter_file+0x89/0x2c0 [ 866.995609][ C0] unmap_page_range+0x1598/0x32f0 [ 867.000653][ C0] ? copy_page_range+0x3700/0x3700 [ 867.005781][ C0] unmap_vmas+0x286/0x3f0 [ 867.010124][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 867.015329][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 867.020364][ C0] exit_mmap+0x238/0xb90 [ 867.024619][ C0] ? vm_brk+0x30/0x30 [ 867.028600][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 867.034252][ C0] ? uprobe_clear_state+0x278/0x290 [ 867.039470][ C0] __mmput+0x118/0x3a0 [ 867.043553][ C0] exit_mm+0x23f/0x340 [ 867.047674][ C0] ? sysctl_delayacct+0x220/0x220 [ 867.052711][ C0] ? do_exit+0x2530/0x2530 [ 867.057185][ C0] do_exit+0x909/0x2530 [ 867.061433][ C0] ? put_task_struct+0xc0/0xc0 [ 867.066244][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 867.072264][ C0] ? do_group_exit+0x21d/0x2f0 [ 867.077076][ C0] ? lock_chain_count+0x20/0x20 [ 867.081972][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 867.087198][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 867.092424][ C0] do_group_exit+0x22d/0x2f0 [ 867.097057][ C0] __x64_sys_exit_group+0x3f/0x40 [ 867.102122][ C0] do_syscall_64+0x55/0xb0 [ 867.106577][ C0] ? clear_bhb_loop+0x40/0x90 [ 867.111293][ C0] ? clear_bhb_loop+0x40/0x90 [ 867.116005][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.121915][ C0] RIP: 0033:0x7f1831d9e159 [ 867.126328][ C0] Code: Unable to access opcode bytes at 0x7f1831d9e12f. [ 867.133377][ C0] RSP: 002b:00007ffcc3f490f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 867.141789][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1831d9e159 [ 867.149757][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 867.157724][ C0] RBP: 00007ffcc3f4915c R08: 0000000000000000 R09: 00000000000927c0 [ 867.165701][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000017 [ 867.173671][ C0] R13: 00000000000927c0 R14: 00000000000d33f9 R15: 00007ffcc3f491b0 [ 867.181710][ C0] [ 867.184974][ C0] Kernel Offset: disabled [ 867.189293][ C0] Rebooting in 86400 seconds..