last executing test programs: 5m37.802714468s ago: executing program 2 (id=2427): getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) setrlimit(0x0, &(0x7f0000000180)={0x6, 0x7f}) 5m37.626891008s ago: executing program 2 (id=2429): close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) mkdir(0x0, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x2, 0x80805, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r2, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r3, 0x32dc, 0x0, 0xe, 0x0, 0x0) 5m34.060485188s ago: executing program 2 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd700020dc9f251600000018000180140002006e657464657673696d30000000000000050002000000000005000480"], 0x3c}, 0x1, 0x0, 0x0, 0x20008850}, 0x20000000) 5m33.793019535s ago: executing program 2 (id=2439): socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000000)='\x02\x00\x00\x00\x96\x0e\x00\x00\x00\x00\x13p', 0x3) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x3c8}}, 0x14b6deac033214c2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x75c9e2b34e0016bc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m33.042097755s ago: executing program 2 (id=2441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 5m31.326395538s ago: executing program 2 (id=2445): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x23, 0x0, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) 5m16.20360055s ago: executing program 32 (id=2445): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x23, 0x0, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) 30.621001055s ago: executing program 0 (id=3477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 30.227242522s ago: executing program 0 (id=3479): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x6, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef7, 0x0, 0x18, 0x3}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3}, 0x4048000) 29.008743869s ago: executing program 0 (id=3483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 28.633231402s ago: executing program 0 (id=3487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 28.22432438s ago: executing program 0 (id=3488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xa, 0xb}, {0x9, 0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x10000, 0x1, 0x4, 0xcc01}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 23.963654011s ago: executing program 0 (id=3496): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0xaeb, 0xe57, 0x1, 0x7, "3ce6920887000000000000000d00", 0x4, 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) 8.235904388s ago: executing program 5 (id=3584): syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 8.154660802s ago: executing program 5 (id=3586): sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x4002000) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, 0x0}, 0x8000}], 0x1, 0x40, &(0x7f00000025c0)={r0, r1+60000000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003d40)={@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, 0x7fffffff, 0x401, 0x2, 0x0, 0x8, 0x280000a}) pselect6(0x40, &(0x7f0000003dc0)={0x81, 0x6, 0x1, 0x0, 0x5, 0x8, 0x9, 0x5}, &(0x7f0000003e00)={0x3f8, 0x4, 0xa, 0x39, 0x9, 0x8, 0xffffffffffffff3f, 0x32d}, &(0x7f0000003e40)={0x8001, 0x189, 0xfffffffffffffffe, 0x2, 0x6, 0x2, 0x80, 0x1d42}, &(0x7f0000003e80), 0x0) syz_emit_ethernet(0xe11, &(0x7f0000003f40)={@random="1bf8f263d4e6", @broadcast, @void, {@x25={0x805, {0x1, 0xb, 0x9, "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"}}}}, &(0x7f0000004f80)={0x0, 0x4, [0x4ea, 0x64d, 0x446, 0x87e]}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) ppoll(&(0x7f0000005000)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x5000}, {0xffffffffffffffff, 0x44a}, {0xffffffffffffffff, 0x2c6}, {}], 0x5, &(0x7f0000005040), &(0x7f0000005080)={[0x8]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006800)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x20048800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f00000068c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x40) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000006ac0)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a00)={0x50, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) 7.987411563s ago: executing program 5 (id=3589): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x20, 0x20, 0x4, 0x2, {{0x2d, 0x4, 0x0, 0x3b, 0xb4, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x24, 0xde, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x7}, {@local, 0xb}, {@remote, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xd}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}]}, @noop, @cipso={0x86, 0x49, 0x3, [{0x1, 0xa, "b752fa019b180db3"}, {0x2, 0xd, "32b95ae498821bdba8ccc2"}, {0x2, 0x10, "e40c048bcadf1bed4d1419c7437b"}, {0x7, 0x11, "9cc082adab420a38b71166bca437b8"}, {0x6, 0x4, "0eb4"}, {0x2, 0x7, "6df038e16a"}]}, @cipso={0x86, 0x1d, 0x3, [{0x6, 0x9, "0a0d321dad8d4a"}, {0x2, 0xa, "dbdc1e7299dd81cf"}, {0x2, 0x4, "7495"}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000000000014006f166a07010033d43afffe0b27bbaf02633bba00000000000010ff020000000000000000000000000001"], 0x340a) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8d2206001100ff002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000645}, 0x0) 6.885821837s ago: executing program 5 (id=3607): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$inet(0x2, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140), 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) 2.649236609s ago: executing program 1 (id=3631): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 2.562003213s ago: executing program 5 (id=3633): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000001000)={0x18, 0x0, 0x800, 0x80000000}) 2.45698869s ago: executing program 3 (id=3634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000020000fb010000000800010000eb15fa"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.30191626s ago: executing program 1 (id=3635): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x2, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4040894}, 0x44000) 2.293199005s ago: executing program 3 (id=3636): unshare(0x22020400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, &(0x7f0000000200), 0x4) 2.267865963s ago: executing program 5 (id=3637): getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x109801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28060000000000000004"], 0x128}, 0x24000844) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x18}, 0x0) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x20) unshare(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) recvmmsg(r6, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 2.253343692s ago: executing program 4 (id=3638): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_ipv6host(r0, 0x0, 0x0) 2.108200007s ago: executing program 3 (id=3639): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r5, 0x25, 0x0, @void}, 0x10) 2.067710443s ago: executing program 4 (id=3640): unshare(0x22020600) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000300)=0xfffffe42) 2.061280274s ago: executing program 1 (id=3641): r0 = socket$kcm(0x2, 0x922000000001, 0x106) unshare(0x400) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 1.739555266s ago: executing program 4 (id=3642): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20002, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)={r4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.678514297s ago: executing program 1 (id=3643): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 903.053094ms ago: executing program 4 (id=3644): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x40004, &(0x7f0000000740)=@framed={{}, [@tail_call]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 820.239569ms ago: executing program 1 (id=3645): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 594.738993ms ago: executing program 3 (id=3646): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000001000)={0x18, 0x0, 0x800, 0x80000000}) 475.661863ms ago: executing program 3 (id=3647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe9, 0xff, 0x7ff, 0x7, 0x1, 0x52b9e9d2, 0x6}}, {0x4}}]}]}, 0x48}}, 0x0) 362.496744ms ago: executing program 1 (id=3648): bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) 229.881474ms ago: executing program 4 (id=3649): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x5, 0x65, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 82.076592ms ago: executing program 3 (id=3650): accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=3651): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="0100"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010000104000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884) kernel console output (not intermixed with test programs): bhb_loop+0x60/0xb0 [ 995.334353][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.334375][T15918] RIP: 0033:0x7f1c2168f749 [ 995.334396][T15918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.334416][T15918] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 995.334442][T15918] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 995.334458][T15918] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 995.334474][T15918] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 995.334488][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.334501][T15918] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 995.334536][T15918] [ 995.428790][ T9378] steelseries 0003:1038:12B6.0010: item fetching failed at offset 6/7 [ 995.430268][ T9378] steelseries 0003:1038:12B6.0010: probe with driver steelseries failed with error -22 [ 995.664194][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 995.664225][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 995.685517][T15905] vhci_hcd vhci_hcd.0: Device attached [ 995.725402][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 995.725433][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 995.725507][T15905] vhci_hcd vhci_hcd.0: Device attached [ 995.744014][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 995.744044][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 995.748455][T15905] vhci_hcd vhci_hcd.0: Device attached [ 995.774611][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 995.774644][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 995.774772][T15905] vhci_hcd vhci_hcd.0: Device attached [ 995.827254][T15934] vhci_hcd: connection closed [ 995.827492][T15931] vhci_hcd: connection closed [ 995.834951][T15929] vhci_hcd: connection closed [ 995.849816][ T5892] usb 4-1: USB disconnect, device number 49 [ 995.950522][ T3514] vhci_hcd vhci_hcd.3: stop threads [ 995.950557][ T3514] vhci_hcd vhci_hcd.3: release socket [ 995.950605][ T3514] vhci_hcd vhci_hcd.3: disconnect device [ 996.018828][ T3514] vhci_hcd vhci_hcd.3: stop threads [ 996.018857][ T3514] vhci_hcd vhci_hcd.3: release socket [ 996.018895][ T3514] vhci_hcd vhci_hcd.3: disconnect device [ 996.019292][ T3514] vhci_hcd vhci_hcd.3: stop threads [ 996.019306][ T3514] vhci_hcd vhci_hcd.3: release socket [ 996.019338][ T3514] vhci_hcd vhci_hcd.3: disconnect device [ 996.040438][T15924] vhci_hcd: connection closed [ 996.040832][ T43] vhci_hcd vhci_hcd.3: stop threads [ 996.040854][ T43] vhci_hcd vhci_hcd.3: release socket [ 996.040929][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 996.104918][ T9378] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 996.311847][T15819] chnl_net:caif_netlink_parms(): no params data found [ 996.454079][T15948] FAULT_INJECTION: forcing a failure. [ 996.454079][T15948] name failslab, interval 1, probability 0, space 0, times 0 [ 996.454121][T15948] CPU: 1 UID: 0 PID: 15948 Comm: syz.0.3213 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 996.454153][T15948] Tainted: [L]=SOFTLOCKUP [ 996.454162][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 996.454176][T15948] Call Trace: [ 996.454187][T15948] [ 996.454197][T15948] dump_stack_lvl+0x189/0x250 [ 996.454242][T15948] ? __pfx____ratelimit+0x10/0x10 [ 996.454279][T15948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.454309][T15948] ? __pfx__printk+0x10/0x10 [ 996.454340][T15948] ? __pfx___might_resched+0x10/0x10 [ 996.454369][T15948] should_fail_ex+0x46c/0x600 [ 996.454406][T15948] should_failslab+0xa8/0x100 [ 996.454431][T15948] __kmalloc_noprof+0xe0/0x7e0 [ 996.454463][T15948] ? kfree+0x4d/0x900 [ 996.454488][T15948] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 996.454520][T15948] tomoyo_realpath_from_path+0xe3/0x5d0 [ 996.454546][T15948] ? tomoyo_domain+0xd9/0x130 [ 996.454575][T15948] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 996.454608][T15948] tomoyo_path_number_perm+0x1e8/0x5a0 [ 996.454643][T15948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 996.454680][T15948] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 996.454704][T15948] ? lockdep_hardirqs_on+0x98/0x140 [ 996.454762][T15948] ? __fget_files+0x2a/0x420 [ 996.454792][T15948] ? __fget_files+0x3a6/0x420 [ 996.454815][T15948] ? __fget_files+0x2a/0x420 [ 996.454844][T15948] security_file_ioctl+0xcb/0x2d0 [ 996.454878][T15948] __se_sys_ioctl+0x47/0x170 [ 996.454913][T15948] do_syscall_64+0xfa/0xf80 [ 996.454937][T15948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.454959][T15948] ? clear_bhb_loop+0x60/0xb0 [ 996.454985][T15948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.455006][T15948] RIP: 0033:0x7fa57a05f749 [ 996.455027][T15948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.455046][T15948] RSP: 002b:00007fa5782be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.455070][T15948] RAX: ffffffffffffffda RBX: 00007fa57a2b5fa0 RCX: 00007fa57a05f749 [ 996.455087][T15948] RDX: 0000200000000340 RSI: 00000000c01864b1 RDI: 0000000000000003 [ 996.455101][T15948] RBP: 00007fa5782be090 R08: 0000000000000000 R09: 0000000000000000 [ 996.455115][T15948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.455127][T15948] R13: 00007fa57a2b6038 R14: 00007fa57a2b5fa0 R15: 00007fff64d9ecf8 [ 996.455162][T15948] [ 996.455171][T15948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 996.606961][ T5816] Bluetooth: hci0: command tx timeout [ 996.767656][T15955] openvswitch: netlink: Actions may not be safe on all matching packets [ 997.635612][T15971] IPVS: length: 149 != 8 [ 998.606833][ T5851] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 998.780731][ T5851] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 998.780766][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.780791][ T5851] usb 2-1: Product: syz [ 998.780807][ T5851] usb 2-1: Manufacturer: syz [ 998.780821][ T5851] usb 2-1: SerialNumber: syz [ 998.813597][ T5851] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 998.852669][ T5892] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 998.895531][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 998.924373][T15819] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.925488][T15819] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.925743][T15819] bridge_slave_0: entered allmulticast mode [ 998.952725][T15819] bridge_slave_0: entered promiscuous mode [ 998.989293][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 998.998650][T15819] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.998789][T15819] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.999018][T15819] bridge_slave_1: entered allmulticast mode [ 999.008071][T15819] bridge_slave_1: entered promiscuous mode [ 999.014969][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 999.018800][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 28 [ 999.018916][ T5892] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.018945][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 999.018980][ T5892] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 999.019057][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.044650][ T5892] usb 1-1: config 0 descriptor?? [ 999.092694][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.092724][ T9] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 999.092739][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.143306][ T9] usb 4-1: config 0 descriptor?? [ 999.220829][ T6252] usb 2-1: USB disconnect, device number 74 [ 999.319932][T15995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.322812][T15995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.379377][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 999.379485][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 999.382249][ T5892] usb 1-1: USB disconnect, device number 81 [ 999.446622][T15819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.489797][T15819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.582765][ T9] steelseries 0003:1038:12B6.0011: item fetching failed at offset 6/7 [ 999.583238][ T9] steelseries 0003:1038:12B6.0011: probe with driver steelseries failed with error -22 [ 999.619611][ T6028] bridge_slave_1: left allmulticast mode [ 999.619636][ T6028] bridge_slave_1: left promiscuous mode [ 999.619800][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.676828][ T6028] bridge_slave_0: left allmulticast mode [ 999.676848][ T6028] bridge_slave_0: left promiscuous mode [ 999.676995][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.798863][T15997] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 999.798897][T15997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 999.799224][T15997] vhci_hcd vhci_hcd.0: Device attached [ 999.805031][T15997] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 999.805059][T15997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 999.805247][T15997] vhci_hcd vhci_hcd.0: Device attached [ 999.807589][T15997] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 999.807614][T15997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 999.807707][T15997] vhci_hcd vhci_hcd.0: Device attached [ 999.809999][T15997] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 999.810022][T15997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 999.810148][T15997] vhci_hcd vhci_hcd.0: Device attached [ 999.903122][T16007] vhci_hcd: connection closed [ 999.904221][T16005] vhci_hcd: connection closed [ 999.907413][ T43] vhci_hcd vhci_hcd.3: stop threads [ 999.907440][ T43] vhci_hcd vhci_hcd.3: release socket [ 999.907475][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 999.907770][ T43] vhci_hcd vhci_hcd.3: stop threads [ 999.907782][ T43] vhci_hcd vhci_hcd.3: release socket [ 999.907812][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 999.908056][T16003] vhci_hcd: connection closed [ 999.910411][ T43] vhci_hcd vhci_hcd.3: stop threads [ 999.910433][ T43] vhci_hcd vhci_hcd.3: release socket [ 999.910477][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 999.910908][T16001] vhci_hcd: connection closed [ 999.917408][ T43] vhci_hcd vhci_hcd.3: stop threads [ 999.917431][ T43] vhci_hcd vhci_hcd.3: release socket [ 999.919077][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 999.919662][ T6011] usb 4-1: USB disconnect, device number 50 [ 1000.070794][T16012] can: request_module (can-proto-0) failed. [ 1000.207213][T16018] IPVS: length: 149 != 8 [ 1000.299448][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1000.300269][ T10] ath9k_htc: Failed to initialize the device [ 1000.317745][ T6252] usb 2-1: ath9k_htc: USB layer deinitialized [ 1000.456756][ T5816] Bluetooth: hci0: command tx timeout [ 1000.799000][ T6252] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1000.821691][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3230'. [ 1000.834280][T16028] netlink: 'syz.3.3231': attribute type 27 has an invalid length. [ 1001.087643][ T6252] usb 2-1: Using ep0 maxpacket: 32 [ 1001.150214][ T6252] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1001.150242][ T6252] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1001.150260][ T6252] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1001.150320][ T6252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1001.150340][ T6252] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1001.150361][ T6252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1001.150380][ T6252] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1001.150399][ T6252] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1001.150446][ T6252] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1001.150472][ T6252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.155466][ T6252] usb 2-1: config 0 descriptor?? [ 1001.233027][T16033] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3232'. [ 1002.200023][ T6252] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1002.555600][ T6252] usb 2-1: USB disconnect, device number 75 [ 1002.559767][ T6252] usblp0: removed [ 1003.302673][T16046] IPVS: length: 149 != 8 [ 1003.644045][ T6028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.729758][ T6028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.754027][ T6028] bond0 (unregistering): Released all slaves [ 1004.132097][T15819] team0: Port device team_slave_0 added [ 1004.140303][T15293] veth0_vlan: entered promiscuous mode [ 1004.143938][T15819] team0: Port device team_slave_1 added [ 1004.235945][T16053] FAULT_INJECTION: forcing a failure. [ 1004.235945][T16053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.235999][T16053] CPU: 0 UID: 0 PID: 16053 Comm: syz.1.3239 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1004.236032][T16053] Tainted: [L]=SOFTLOCKUP [ 1004.236041][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1004.236055][T16053] Call Trace: [ 1004.236064][T16053] [ 1004.236075][T16053] dump_stack_lvl+0x189/0x250 [ 1004.236111][T16053] ? __pfx____ratelimit+0x10/0x10 [ 1004.236147][T16053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.236177][T16053] ? __pfx__printk+0x10/0x10 [ 1004.236201][T16053] ? __might_fault+0xb0/0x130 [ 1004.236248][T16053] should_fail_ex+0x46c/0x600 [ 1004.236283][T16053] _copy_from_user+0x2d/0xb0 [ 1004.236307][T16053] ___sys_sendmsg+0x158/0x2a0 [ 1004.236340][T16053] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.236411][T16053] ? __fget_files+0x2a/0x420 [ 1004.236435][T16053] ? __fget_files+0x3a6/0x420 [ 1004.236473][T16053] __x64_sys_sendmsg+0x1a1/0x260 [ 1004.236505][T16053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1004.236545][T16053] ? __pfx_ksys_write+0x10/0x10 [ 1004.236582][T16053] ? do_syscall_64+0xbe/0xf80 [ 1004.236609][T16053] do_syscall_64+0xfa/0xf80 [ 1004.236633][T16053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.236657][T16053] ? clear_bhb_loop+0x60/0xb0 [ 1004.236685][T16053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.236707][T16053] RIP: 0033:0x7f1c2168f749 [ 1004.236728][T16053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.236748][T16053] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.236774][T16053] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 1004.236792][T16053] RDX: 0000000040000050 RSI: 0000200000000200 RDI: 0000000000000004 [ 1004.236807][T16053] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.236822][T16053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.236837][T16053] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1004.236874][T16053] [ 1004.595522][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3238'. [ 1005.256109][T16060] FAULT_INJECTION: forcing a failure. [ 1005.256109][T16060] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.256152][T16060] CPU: 0 UID: 0 PID: 16060 Comm: syz.0.3241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1005.256184][T16060] Tainted: [L]=SOFTLOCKUP [ 1005.256193][T16060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.256206][T16060] Call Trace: [ 1005.256216][T16060] [ 1005.256226][T16060] dump_stack_lvl+0x189/0x250 [ 1005.256261][T16060] ? __pfx____ratelimit+0x10/0x10 [ 1005.256296][T16060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.256326][T16060] ? __pfx__printk+0x10/0x10 [ 1005.256356][T16060] ? __pfx___might_resched+0x10/0x10 [ 1005.256387][T16060] should_fail_ex+0x46c/0x600 [ 1005.256424][T16060] should_failslab+0xa8/0x100 [ 1005.256450][T16060] __kmalloc_noprof+0xe0/0x7e0 [ 1005.256482][T16060] ? kfree+0x4d/0x900 [ 1005.256507][T16060] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1005.256539][T16060] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1005.256564][T16060] ? tomoyo_domain+0xd9/0x130 [ 1005.256596][T16060] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1005.256634][T16060] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1005.256669][T16060] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1005.256706][T16060] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1005.256730][T16060] ? lockdep_hardirqs_on+0x98/0x140 [ 1005.256790][T16060] ? __fget_files+0x2a/0x420 [ 1005.256820][T16060] ? __fget_files+0x3a6/0x420 [ 1005.256843][T16060] ? __fget_files+0x2a/0x420 [ 1005.256873][T16060] security_file_ioctl+0xcb/0x2d0 [ 1005.256908][T16060] __se_sys_ioctl+0x47/0x170 [ 1005.256943][T16060] do_syscall_64+0xfa/0xf80 [ 1005.256974][T16060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.256999][T16060] ? clear_bhb_loop+0x60/0xb0 [ 1005.257027][T16060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.257049][T16060] RIP: 0033:0x7fa57a05f749 [ 1005.257070][T16060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.257090][T16060] RSP: 002b:00007fa5782be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.257116][T16060] RAX: ffffffffffffffda RBX: 00007fa57a2b5fa0 RCX: 00007fa57a05f749 [ 1005.257132][T16060] RDX: 0000200000000080 RSI: 00000000c02c564a RDI: 0000000000000003 [ 1005.257148][T16060] RBP: 00007fa5782be090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.257163][T16060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.257177][T16060] R13: 00007fa57a2b6038 R14: 00007fa57a2b5fa0 R15: 00007fff64d9ecf8 [ 1005.257216][T16060] [ 1005.257242][T16060] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1005.537712][ T6028] hsr_slave_0: left promiscuous mode [ 1005.696796][ T6028] hsr_slave_1: left promiscuous mode [ 1005.698021][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.730496][ T5892] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1005.743097][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.897788][T16068] FAULT_INJECTION: forcing a failure. [ 1005.897788][T16068] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.897811][T16068] CPU: 0 UID: 0 PID: 16068 Comm: syz.0.3244 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1005.897826][T16068] Tainted: [L]=SOFTLOCKUP [ 1005.897830][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.897836][T16068] Call Trace: [ 1005.897841][T16068] [ 1005.897846][T16068] dump_stack_lvl+0x189/0x250 [ 1005.897864][T16068] ? __pfx____ratelimit+0x10/0x10 [ 1005.897880][T16068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.897894][T16068] ? __pfx__printk+0x10/0x10 [ 1005.897907][T16068] ? __pfx___might_resched+0x10/0x10 [ 1005.897920][T16068] should_fail_ex+0x46c/0x600 [ 1005.897937][T16068] should_failslab+0xa8/0x100 [ 1005.897957][T16068] __kmalloc_noprof+0xe0/0x7e0 [ 1005.897972][T16068] ? kfree+0x4d/0x900 [ 1005.897983][T16068] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1005.897996][T16068] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1005.898007][T16068] ? tomoyo_domain+0xd9/0x130 [ 1005.898020][T16068] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1005.898034][T16068] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1005.898049][T16068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1005.898065][T16068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1005.898076][T16068] ? lockdep_hardirqs_on+0x98/0x140 [ 1005.898099][T16068] ? __fget_files+0x2a/0x420 [ 1005.898113][T16068] ? __fget_files+0x3a6/0x420 [ 1005.898122][T16068] ? __fget_files+0x2a/0x420 [ 1005.898135][T16068] security_file_ioctl+0xcb/0x2d0 [ 1005.898150][T16068] __se_sys_ioctl+0x47/0x170 [ 1005.898165][T16068] do_syscall_64+0xfa/0xf80 [ 1005.898176][T16068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.898186][T16068] ? clear_bhb_loop+0x60/0xb0 [ 1005.898198][T16068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.898210][T16068] RIP: 0033:0x7fa57a05f749 [ 1005.898220][T16068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.898229][T16068] RSP: 002b:00007fa57829d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.898241][T16068] RAX: ffffffffffffffda RBX: 00007fa57a2b6090 RCX: 00007fa57a05f749 [ 1005.898248][T16068] RDX: 0000000000000000 RSI: 000000004040942c RDI: 0000000000000003 [ 1005.898255][T16068] RBP: 00007fa57829d090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.898261][T16068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.898267][T16068] R13: 00007fa57a2b6128 R14: 00007fa57a2b6090 R15: 00007fff64d9ecf8 [ 1005.898283][T16068] [ 1005.898287][T16068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1005.933674][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.933727][ T5892] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1005.933751][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.939376][ T5892] usb 2-1: config 0 descriptor?? [ 1006.411044][ T5892] steelseries 0003:1038:12B6.0012: item fetching failed at offset 6/7 [ 1006.411540][ T5892] steelseries 0003:1038:12B6.0012: probe with driver steelseries failed with error -22 [ 1006.630855][T16058] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1006.630887][T16058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.631044][T16058] vhci_hcd vhci_hcd.0: Device attached [ 1006.636559][T16058] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 1006.636589][T16058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.636794][T16058] vhci_hcd vhci_hcd.0: Device attached [ 1006.639501][T16058] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 1006.639528][T16058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.639627][T16058] vhci_hcd vhci_hcd.0: Device attached [ 1006.642149][T16058] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 1006.642174][T16058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.642283][T16058] vhci_hcd vhci_hcd.0: Device attached [ 1006.756494][T16075] vhci_hcd: connection closed [ 1006.757042][ T159] vhci_hcd vhci_hcd.1: stop threads [ 1006.757071][ T159] vhci_hcd vhci_hcd.1: release socket [ 1006.757266][ T159] vhci_hcd vhci_hcd.1: disconnect device [ 1006.761004][T16073] vhci_hcd: connection closed [ 1006.761822][ T159] vhci_hcd vhci_hcd.1: stop threads [ 1006.761843][ T159] vhci_hcd vhci_hcd.1: release socket [ 1006.762093][ T159] vhci_hcd vhci_hcd.1: disconnect device [ 1006.762646][T16071] vhci_hcd: connection closed [ 1006.763119][ T159] vhci_hcd vhci_hcd.1: stop threads [ 1006.763137][ T159] vhci_hcd vhci_hcd.1: release socket [ 1006.763357][ T159] vhci_hcd vhci_hcd.1: disconnect device [ 1006.763709][T16069] vhci_hcd: connection closed [ 1006.764622][ T159] vhci_hcd vhci_hcd.1: stop threads [ 1006.764642][ T159] vhci_hcd vhci_hcd.1: release socket [ 1006.765278][ T159] vhci_hcd vhci_hcd.1: disconnect device [ 1006.766743][ T5892] usb 2-1: USB disconnect, device number 76 [ 1006.819695][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1007.248953][ T6028] team0 (unregistering): Port device team_slave_1 removed [ 1007.504644][T16078] IPVS: length: 149 != 8 [ 1007.530154][ T6028] team0 (unregistering): Port device team_slave_0 removed [ 1008.477260][ T6011] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1008.680432][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 1008.683304][ T6011] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1008.686032][ T6011] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1008.686060][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.686078][ T6011] usb 2-1: Product: syz [ 1008.686091][ T6011] usb 2-1: Manufacturer: syz [ 1008.686103][ T6011] usb 2-1: SerialNumber: syz [ 1008.688923][ T6011] usb 2-1: config 0 descriptor?? [ 1008.692723][ T6011] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1008.692802][ T6011] usb 2-1: setting power ON [ 1008.692823][ T6011] dvb-usb: bulk message failed: -22 (2/0) [ 1008.741747][ T6011] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1008.742890][ T6011] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1008.742947][ T6011] usb 2-1: media controller created [ 1008.763607][ T6011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1008.781421][ T6011] usb 2-1: selecting invalid altsetting 6 [ 1008.781445][ T6011] usb 2-1: digital interface selection failed (-22) [ 1008.781461][ T6011] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1008.782349][ T6011] usb 2-1: setting power OFF [ 1008.782370][ T6011] dvb-usb: bulk message failed: -22 (2/0) [ 1008.782388][ T6011] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1008.782400][ T6011] (NULL device *): no alternate interface [ 1008.859883][ T6011] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1008.927233][T16086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.927462][T16086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.007185][T16086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.007421][T16086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.175156][ T9] usb 2-1: USB disconnect, device number 77 [ 1010.776852][T16098] FAULT_INJECTION: forcing a failure. [ 1010.776852][T16098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.776895][T16098] CPU: 0 UID: 0 PID: 16098 Comm: syz.1.3252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1010.776926][T16098] Tainted: [L]=SOFTLOCKUP [ 1010.776934][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1010.776949][T16098] Call Trace: [ 1010.776958][T16098] [ 1010.776969][T16098] dump_stack_lvl+0x189/0x250 [ 1010.777015][T16098] ? __pfx____ratelimit+0x10/0x10 [ 1010.777051][T16098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1010.777082][T16098] ? __pfx__printk+0x10/0x10 [ 1010.777106][T16098] ? __might_fault+0xb0/0x130 [ 1010.777153][T16098] should_fail_ex+0x46c/0x600 [ 1010.777190][T16098] _copy_from_user+0x2d/0xb0 [ 1010.777214][T16098] ___sys_sendmsg+0x158/0x2a0 [ 1010.777246][T16098] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.777318][T16098] ? __fget_files+0x2a/0x420 [ 1010.777341][T16098] ? __fget_files+0x3a6/0x420 [ 1010.777378][T16098] __x64_sys_sendmsg+0x1a1/0x260 [ 1010.777411][T16098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1010.777451][T16098] ? __pfx_ksys_write+0x10/0x10 [ 1010.777487][T16098] ? do_syscall_64+0xbe/0xf80 [ 1010.777516][T16098] do_syscall_64+0xfa/0xf80 [ 1010.777539][T16098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.777562][T16098] ? clear_bhb_loop+0x60/0xb0 [ 1010.777590][T16098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.777613][T16098] RIP: 0033:0x7f1c2168f749 [ 1010.777635][T16098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.777655][T16098] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.777680][T16098] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 1010.777698][T16098] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000005 [ 1010.777713][T16098] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.777728][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.777743][T16098] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1010.777780][T16098] [ 1011.062141][T16102] IPVS: length: 149 != 8 [ 1011.065169][ T9378] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1011.156662][T16105] FAULT_INJECTION: forcing a failure. [ 1011.156662][T16105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1011.156686][T16105] CPU: 1 UID: 0 PID: 16105 Comm: syz.1.3255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1011.156700][T16105] Tainted: [L]=SOFTLOCKUP [ 1011.156704][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1011.156710][T16105] Call Trace: [ 1011.156715][T16105] [ 1011.156720][T16105] dump_stack_lvl+0x189/0x250 [ 1011.156738][T16105] ? __pfx____ratelimit+0x10/0x10 [ 1011.156754][T16105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.156767][T16105] ? __pfx__printk+0x10/0x10 [ 1011.156778][T16105] ? __might_fault+0xb0/0x130 [ 1011.156797][T16105] should_fail_ex+0x46c/0x600 [ 1011.156813][T16105] _copy_from_user+0x2d/0xb0 [ 1011.156824][T16105] __sys_bpf+0x1e3/0x860 [ 1011.156837][T16105] ? __pfx___sys_bpf+0x10/0x10 [ 1011.156847][T16105] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1011.156868][T16105] ? ksys_write+0x230/0x260 [ 1011.156884][T16105] ? __pfx_ksys_write+0x10/0x10 [ 1011.156900][T16105] __x64_sys_bpf+0x7c/0x90 [ 1011.156911][T16105] do_syscall_64+0xfa/0xf80 [ 1011.156922][T16105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.156932][T16105] ? clear_bhb_loop+0x60/0xb0 [ 1011.156948][T16105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.156957][T16105] RIP: 0033:0x7f1c2168f749 [ 1011.156967][T16105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.156976][T16105] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1011.156989][T16105] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 1011.156997][T16105] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 1011.157003][T16105] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.157010][T16105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.157016][T16105] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1011.157031][T16105] [ 1011.234743][ T9378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.234795][ T9378] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1011.234819][ T9378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.241683][ T9378] usb 4-1: config 0 descriptor?? [ 1011.691789][T15819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.691810][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.691842][T15819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.700972][T15293] veth1_vlan: entered promiscuous mode [ 1011.714195][T15819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.714217][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.714248][T15819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.756018][T16100] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1011.756304][T16100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1011.766367][T16100] vhci_hcd vhci_hcd.0: Device attached [ 1011.779216][T16100] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 1011.779246][T16100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1011.780286][T16100] vhci_hcd vhci_hcd.0: Device attached [ 1011.810001][T16100] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 1011.814013][T16100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1011.814387][T16100] vhci_hcd vhci_hcd.0: Device attached [ 1011.828976][T16100] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 1011.829005][T16100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1011.829133][T16100] vhci_hcd vhci_hcd.0: Device attached [ 1011.904817][T16115] vhci_hcd: connection closed [ 1011.905317][ T988] vhci_hcd vhci_hcd.3: stop threads [ 1011.905347][ T988] vhci_hcd vhci_hcd.3: release socket [ 1011.905393][ T988] vhci_hcd vhci_hcd.3: disconnect device [ 1011.905639][T16113] vhci_hcd: connection closed [ 1011.907939][ T988] vhci_hcd vhci_hcd.3: stop threads [ 1011.907963][ T988] vhci_hcd vhci_hcd.3: release socket [ 1011.908008][ T988] vhci_hcd vhci_hcd.3: disconnect device [ 1011.908268][T16111] vhci_hcd: connection closed [ 1011.911346][T16109] vhci_hcd: connection closed [ 1011.938816][ T48] vhci_hcd vhci_hcd.3: stop threads [ 1011.938844][ T48] vhci_hcd vhci_hcd.3: release socket [ 1011.938885][ T48] vhci_hcd vhci_hcd.3: disconnect device [ 1011.939169][ T48] vhci_hcd vhci_hcd.3: stop threads [ 1011.939183][ T48] vhci_hcd vhci_hcd.3: release socket [ 1011.939218][ T48] vhci_hcd vhci_hcd.3: disconnect device [ 1011.939369][ T9378] usbhid 4-1:0.0: can't add hid device: -71 [ 1011.939493][ T9378] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1012.007575][ T9378] usb 4-1: USB disconnect, device number 51 [ 1012.343549][T15819] hsr_slave_0: entered promiscuous mode [ 1012.345362][T15819] hsr_slave_1: entered promiscuous mode [ 1012.346505][T15819] debugfs: 'hsr0' already exists in 'hsr' [ 1012.346534][T15819] Cannot create hsr debugfs directory [ 1012.709768][T15293] veth0_macvtap: entered promiscuous mode [ 1013.298523][T16149] IPVS: length: 149 != 8 [ 1013.376199][T15293] veth1_macvtap: entered promiscuous mode [ 1013.562267][T16157] overlayfs: failed to resolve './file1': -2 [ 1013.814997][T15293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.934947][T15293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.005854][ T6011] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1014.024296][ T988] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.169803][ T6011] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1014.169840][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.207842][ T6011] usb 4-1: config 0 descriptor?? [ 1014.217505][ T6011] cp210x 4-1:0.0: cp210x converter detected [ 1014.304288][ T988] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.304511][ T988] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.311326][ T988] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.445022][ T6252] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1014.494099][ T6011] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1014.494128][ T6011] cp210x 4-1:0.0: querying part number failed [ 1014.502232][ T6011] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1014.508981][ T6011] usb 4-1: USB disconnect, device number 52 [ 1014.535798][ T6011] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1014.536360][ T6011] cp210x 4-1:0.0: device disconnected [ 1014.692906][ T6252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.692954][ T6252] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1014.692967][ T6252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.696047][ T6252] usb 1-1: config 0 descriptor?? [ 1014.874515][T16186] IPVS: length: 149 != 8 [ 1014.930237][T16175] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1014.930268][T16175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1014.933582][T16175] vhci_hcd vhci_hcd.0: Device attached [ 1014.955225][T16175] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 1014.955338][T16175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1014.955518][T16175] vhci_hcd vhci_hcd.0: Device attached [ 1014.963683][T16175] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 1014.963712][T16175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1014.963894][T16175] vhci_hcd vhci_hcd.0: Device attached [ 1014.992502][T16175] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 1014.992532][T16175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1014.992647][T16175] vhci_hcd vhci_hcd.0: Device attached [ 1015.046090][T16194] vhci_hcd: connection closed [ 1015.046172][T16192] vhci_hcd: connection closed [ 1015.046344][T16190] vhci_hcd: connection closed [ 1015.046578][T16188] vhci_hcd: connection closed [ 1015.077667][ T68] vhci_hcd vhci_hcd.0: stop threads [ 1015.077691][ T68] vhci_hcd vhci_hcd.0: release socket [ 1015.077726][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 1015.077927][ T68] vhci_hcd vhci_hcd.0: stop threads [ 1015.077936][ T68] vhci_hcd vhci_hcd.0: release socket [ 1015.077955][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 1015.078059][ T68] vhci_hcd vhci_hcd.0: stop threads [ 1015.078071][ T68] vhci_hcd vhci_hcd.0: release socket [ 1015.078102][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 1015.078296][ T68] vhci_hcd vhci_hcd.0: stop threads [ 1015.078304][ T68] vhci_hcd vhci_hcd.0: release socket [ 1015.078320][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 1015.086870][ T6252] usbhid 1-1:0.0: can't add hid device: -71 [ 1015.087010][ T6252] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1015.105957][ T6252] usb 1-1: USB disconnect, device number 82 [ 1015.345292][T16200] overlayfs: failed to resolve './file1': -2 [ 1016.807556][ T6011] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1016.980277][ T6011] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1016.980315][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.980338][ T6011] usb 4-1: Product: syz [ 1016.980354][ T6011] usb 4-1: Manufacturer: syz [ 1016.980370][ T6011] usb 4-1: SerialNumber: syz [ 1017.004509][ T6011] usb 4-1: config 0 descriptor?? [ 1017.009722][ T6011] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 053 [ 1017.502819][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1017.562259][ T6011] (null): failure reading functionality [ 1017.569272][ T6011] i2c i2c-2: connected i2c-tiny-usb device [ 1017.606912][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1017.645103][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1017.663706][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1017.665875][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1017.688140][ T3543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.702819][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.879594][T16237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1017.938068][ T10] usb 4-1: USB disconnect, device number 53 [ 1018.037910][T16246] overlayfs: failed to resolve './file1': -2 [ 1018.294639][T16256] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3286'. [ 1018.396663][T16258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1018.396695][T16258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1018.396903][T16258] vhci_hcd vhci_hcd.0: Device attached [ 1018.399376][T16258] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 1018.399397][T16258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1018.399582][T16258] vhci_hcd vhci_hcd.0: Device attached [ 1018.443365][T16258] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 1018.443397][T16258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1018.458398][T16258] vhci_hcd vhci_hcd.0: Device attached [ 1018.499683][ T3543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.537111][T16267] vhci_hcd: connection closed [ 1018.537668][ T7408] vhci_hcd vhci_hcd.1: stop threads [ 1018.537698][ T7408] vhci_hcd vhci_hcd.1: release socket [ 1018.537955][ T7408] vhci_hcd vhci_hcd.1: disconnect device [ 1018.565507][T16261] vhci_hcd: connection closed [ 1018.574580][ T7408] vhci_hcd vhci_hcd.1: stop threads [ 1018.574612][ T7408] vhci_hcd vhci_hcd.1: release socket [ 1018.574779][T16263] vhci_hcd: connection closed [ 1018.574867][ T7408] vhci_hcd vhci_hcd.1: disconnect device [ 1018.575030][ T7408] vhci_hcd vhci_hcd.1: stop threads [ 1018.575046][ T7408] vhci_hcd vhci_hcd.1: release socket [ 1018.575111][ T7408] vhci_hcd vhci_hcd.1: disconnect device [ 1018.582952][ T6011] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1019.266904][T16286] overlayfs: failed to resolve './file0': -2 [ 1019.507379][ T3543] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.596996][T15819] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1019.926122][T15819] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1019.962968][ T5816] Bluetooth: hci1: command tx timeout [ 1019.973006][ T6183] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1019.983741][ T5892] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1020.122739][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1020.179328][ T6183] usb 2-1: config 0 has an invalid interface number: 14 but max is 0 [ 1020.179355][ T6183] usb 2-1: config 0 has no interface number 0 [ 1020.179391][ T6183] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1020.179406][ T6183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.182211][ T6183] usb 2-1: config 0 descriptor?? [ 1020.383496][ T3543] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.391435][ T5892] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1020.424257][ T6183] usb 2-1: string descriptor 0 read error: -71 [ 1020.425462][ T6183] ums-realtek 2-1:0.14: USB Mass Storage device detected [ 1020.520837][T15819] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1020.523363][ T6183] usb 2-1: USB disconnect, device number 78 [ 1020.561820][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1020.637425][T15819] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1020.679214][ T5892] usb usb1-port1: attempt power cycle [ 1021.042397][ T5892] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1021.127012][ T5892] usb 1-1: device descriptor read/8, error -71 [ 1021.235159][T16315] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3297'. [ 1022.090343][ T5892] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1022.113022][ T5892] usb 1-1: device descriptor read/8, error -71 [ 1022.186633][ T5816] Bluetooth: hci1: command tx timeout [ 1022.295987][ T5892] usb usb1-port1: unable to enumerate USB device [ 1022.512107][T16320] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1022.512134][T16320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.532956][T16320] vhci_hcd vhci_hcd.0: Device attached [ 1022.667241][T16325] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 1022.667275][T16325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.667833][T16325] vhci_hcd vhci_hcd.0: Device attached [ 1022.724681][T16320] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 1022.724714][T16320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.725014][T16320] vhci_hcd vhci_hcd.0: Device attached [ 1022.726162][T16325] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 1022.726210][T16325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.726993][T16325] vhci_hcd vhci_hcd.0: Device attached [ 1022.860359][ T5892] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1022.873131][T16331] vhci_hcd: connection closed [ 1022.873980][T16327] vhci_hcd: connection closed [ 1022.883093][ T3514] vhci_hcd vhci_hcd.3: stop threads [ 1022.883123][ T3514] vhci_hcd vhci_hcd.3: release socket [ 1022.883199][ T3514] vhci_hcd vhci_hcd.3: disconnect device [ 1022.883481][ T3514] vhci_hcd vhci_hcd.3: stop threads [ 1022.883495][ T3514] vhci_hcd vhci_hcd.3: release socket [ 1022.883530][ T3514] vhci_hcd vhci_hcd.3: disconnect device [ 1022.884055][T16330] vhci_hcd: connection closed [ 1022.884960][T16324] vhci_hcd: connection reset by peer [ 1022.892764][ T3514] vhci_hcd vhci_hcd.3: stop threads [ 1022.892788][ T3514] vhci_hcd vhci_hcd.3: release socket [ 1022.892856][ T3514] vhci_hcd vhci_hcd.3: disconnect device [ 1022.893215][ T3514] vhci_hcd vhci_hcd.3: stop threads [ 1022.893230][ T3514] vhci_hcd vhci_hcd.3: release socket [ 1022.893265][ T3514] vhci_hcd vhci_hcd.3: disconnect device [ 1022.916569][T16240] chnl_net:caif_netlink_parms(): no params data found [ 1022.990180][T16337] FAULT_INJECTION: forcing a failure. [ 1022.990180][T16337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.990204][T16337] CPU: 1 UID: 0 PID: 16337 Comm: syz.1.3301 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1022.990219][T16337] Tainted: [L]=SOFTLOCKUP [ 1022.990223][T16337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1022.990229][T16337] Call Trace: [ 1022.990234][T16337] [ 1022.990239][T16337] dump_stack_lvl+0x189/0x250 [ 1022.990256][T16337] ? __pfx____ratelimit+0x10/0x10 [ 1022.990272][T16337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1022.990285][T16337] ? __pfx__printk+0x10/0x10 [ 1022.990295][T16337] ? __might_fault+0xb0/0x130 [ 1022.990315][T16337] should_fail_ex+0x46c/0x600 [ 1022.990331][T16337] _copy_from_user+0x2d/0xb0 [ 1022.990343][T16337] __sys_bpf+0x1e3/0x860 [ 1022.990356][T16337] ? __pfx___sys_bpf+0x10/0x10 [ 1022.990366][T16337] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1022.990387][T16337] ? ksys_write+0x230/0x260 [ 1022.990402][T16337] ? __pfx_ksys_write+0x10/0x10 [ 1022.990419][T16337] __x64_sys_bpf+0x7c/0x90 [ 1022.990430][T16337] do_syscall_64+0xfa/0xf80 [ 1022.990440][T16337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.990451][T16337] ? clear_bhb_loop+0x60/0xb0 [ 1022.990463][T16337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.990472][T16337] RIP: 0033:0x7f1c2168f749 [ 1022.990482][T16337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.990492][T16337] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1022.990504][T16337] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 1022.990511][T16337] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1022.990518][T16337] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.990525][T16337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.990531][T16337] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1022.990546][T16337] [ 1023.131407][ T3543] bridge_slave_1: left allmulticast mode [ 1023.131440][ T3543] bridge_slave_1: left promiscuous mode [ 1023.131721][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.262778][ T3543] bridge_slave_0: left allmulticast mode [ 1023.262799][ T3543] bridge_slave_0: left promiscuous mode [ 1023.262960][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.504036][T16343] overlayfs: failed to resolve './file0': -2 [ 1023.685570][T16345] FAULT_INJECTION: forcing a failure. [ 1023.685570][T16345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.685612][T16345] CPU: 1 UID: 0 PID: 16345 Comm: syz.1.3305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1023.685644][T16345] Tainted: [L]=SOFTLOCKUP [ 1023.685652][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.685667][T16345] Call Trace: [ 1023.685677][T16345] [ 1023.685687][T16345] dump_stack_lvl+0x189/0x250 [ 1023.685723][T16345] ? __pfx____ratelimit+0x10/0x10 [ 1023.685759][T16345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1023.685790][T16345] ? __pfx__printk+0x10/0x10 [ 1023.685831][T16345] should_fail_ex+0x46c/0x600 [ 1023.685869][T16345] _copy_to_user+0x31/0xb0 [ 1023.685905][T16345] simple_read_from_buffer+0xe1/0x170 [ 1023.685935][T16345] proc_fail_nth_read+0x1b6/0x220 [ 1023.685973][T16345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.686011][T16345] ? rw_verify_area+0x2ac/0x4e0 [ 1023.686041][T16345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.686076][T16345] vfs_read+0x206/0xa30 [ 1023.686118][T16345] ? __pfx_vfs_read+0x10/0x10 [ 1023.686145][T16345] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1023.686186][T16345] ? mutex_lock_nested+0x154/0x1d0 [ 1023.686214][T16345] ? fdget_pos+0x253/0x320 [ 1023.686250][T16345] ksys_read+0x14b/0x260 [ 1023.686284][T16345] ? __pfx_ksys_read+0x10/0x10 [ 1023.686320][T16345] ? do_syscall_64+0xbe/0xf80 [ 1023.686348][T16345] do_syscall_64+0xfa/0xf80 [ 1023.686372][T16345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.686395][T16345] ? clear_bhb_loop+0x60/0xb0 [ 1023.686424][T16345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.686447][T16345] RIP: 0033:0x7f1c2168e15c [ 1023.686467][T16345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1023.686487][T16345] RSP: 002b:00007f1c1f8f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1023.686512][T16345] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168e15c [ 1023.686529][T16345] RDX: 000000000000000f RSI: 00007f1c1f8f60a0 RDI: 0000000000000003 [ 1023.686543][T16345] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.686558][T16345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.686571][T16345] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1023.686611][T16345] [ 1023.737627][T16347] FAULT_INJECTION: forcing a failure. [ 1023.737627][T16347] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.737666][T16347] CPU: 1 UID: 0 PID: 16347 Comm: syz.1.3306 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1023.737695][T16347] Tainted: [L]=SOFTLOCKUP [ 1023.737702][T16347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.737715][T16347] Call Trace: [ 1023.737724][T16347] [ 1023.737732][T16347] dump_stack_lvl+0x189/0x250 [ 1023.737763][T16347] ? __pfx____ratelimit+0x10/0x10 [ 1023.737794][T16347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1023.737831][T16347] ? __pfx__printk+0x10/0x10 [ 1023.737859][T16347] ? __pfx___might_resched+0x10/0x10 [ 1023.737885][T16347] should_fail_ex+0x46c/0x600 [ 1023.737926][T16347] should_failslab+0xa8/0x100 [ 1023.737949][T16347] __kmalloc_noprof+0xe0/0x7e0 [ 1023.737976][T16347] ? kfree+0x4d/0x900 [ 1023.737997][T16347] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1023.738025][T16347] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1023.738047][T16347] ? tomoyo_domain+0xd9/0x130 [ 1023.738075][T16347] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1023.738103][T16347] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1023.738133][T16347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1023.738173][T16347] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1023.738194][T16347] ? lockdep_hardirqs_on+0x98/0x140 [ 1023.738247][T16347] ? __fget_files+0x2a/0x420 [ 1023.738273][T16347] ? __fget_files+0x3a6/0x420 [ 1023.738293][T16347] ? __fget_files+0x2a/0x420 [ 1023.738326][T16347] security_file_ioctl+0xcb/0x2d0 [ 1023.738356][T16347] __se_sys_ioctl+0x47/0x170 [ 1023.738394][T16347] do_syscall_64+0xfa/0xf80 [ 1023.738415][T16347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.738435][T16347] ? clear_bhb_loop+0x60/0xb0 [ 1023.738467][T16347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.738486][T16347] RIP: 0033:0x7f1c2168f749 [ 1023.738513][T16347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.738530][T16347] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.738560][T16347] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 1023.738575][T16347] RDX: 0000200000000280 RSI: 00000000c10c5541 RDI: 0000000000000003 [ 1023.738589][T16347] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.738603][T16347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.738615][T16347] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1023.738656][T16347] [ 1023.738665][T16347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1024.421562][ T5816] Bluetooth: hci1: command tx timeout [ 1026.635292][ T5816] Bluetooth: hci1: command tx timeout [ 1027.159759][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.224433][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.268633][ T3543] bond0 (unregistering): Released all slaves [ 1027.394621][T16356] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 1027.567038][T16361] FAULT_INJECTION: forcing a failure. [ 1027.567038][T16361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.567062][T16361] CPU: 1 UID: 0 PID: 16361 Comm: syz.3.3309 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1027.567078][T16361] Tainted: [L]=SOFTLOCKUP [ 1027.567082][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1027.567089][T16361] Call Trace: [ 1027.567093][T16361] [ 1027.567099][T16361] dump_stack_lvl+0x189/0x250 [ 1027.567116][T16361] ? __pfx____ratelimit+0x10/0x10 [ 1027.567132][T16361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1027.567145][T16361] ? __pfx__printk+0x10/0x10 [ 1027.567155][T16361] ? __might_fault+0xb0/0x130 [ 1027.567175][T16361] should_fail_ex+0x46c/0x600 [ 1027.567191][T16361] _copy_to_iter+0x1de/0x1790 [ 1027.567205][T16361] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1027.567223][T16361] ? rt_spin_lock+0x1c1/0x3e0 [ 1027.567237][T16361] ? do_raw_spin_lock+0x121/0x290 [ 1027.567251][T16361] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1027.567264][T16361] ? __pfx__copy_to_iter+0x10/0x10 [ 1027.567279][T16361] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1027.567297][T16361] __skb_datagram_iter+0xf8/0x990 [ 1027.567312][T16361] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1027.567330][T16361] skb_copy_datagram_iter+0xb5/0x210 [ 1027.567345][T16361] raw_recvmsg+0x1da/0x760 [ 1027.567359][T16361] ? __pfx_raw_recvmsg+0x10/0x10 [ 1027.567371][T16361] ? sock_rps_record_flow+0x19/0x410 [ 1027.567385][T16361] ? __pfx_raw_recvmsg+0x10/0x10 [ 1027.567394][T16361] inet_recvmsg+0x24a/0x250 [ 1027.567407][T16361] ? __pfx_inet_recvmsg+0x10/0x10 [ 1027.567421][T16361] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1027.567434][T16361] ? security_socket_recvmsg+0x7e/0x2e0 [ 1027.567449][T16361] sock_recvmsg+0x1a8/0x270 [ 1027.567467][T16361] sock_read_iter+0x23a/0x2f0 [ 1027.567483][T16361] ? __pfx_sock_read_iter+0x10/0x10 [ 1027.567507][T16361] do_iter_readv_writev+0x635/0x8d0 [ 1027.567526][T16361] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1027.567544][T16361] ? rw_verify_area+0x2ac/0x4e0 [ 1027.567559][T16361] vfs_readv+0x259/0x850 [ 1027.567573][T16361] ? __pfx_vfs_readv+0x10/0x10 [ 1027.567589][T16361] ? __fget_files+0x2a/0x420 [ 1027.567603][T16361] ? __fget_files+0x3a6/0x420 [ 1027.567612][T16361] ? __fget_files+0x2a/0x420 [ 1027.567627][T16361] do_readv+0x153/0x2d0 [ 1027.567638][T16361] ? __pfx_do_readv+0x10/0x10 [ 1027.567650][T16361] ? do_syscall_64+0xbe/0xf80 [ 1027.567662][T16361] do_syscall_64+0xfa/0xf80 [ 1027.567672][T16361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.567682][T16361] ? clear_bhb_loop+0x60/0xb0 [ 1027.567694][T16361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.567703][T16361] RIP: 0033:0x7f282f80f749 [ 1027.567713][T16361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.567722][T16361] RSP: 002b:00007f282da6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1027.567735][T16361] RAX: ffffffffffffffda RBX: 00007f282fa65fa0 RCX: 00007f282f80f749 [ 1027.567742][T16361] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1027.567748][T16361] RBP: 00007f282da6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.567755][T16361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.567761][T16361] R13: 00007f282fa66038 R14: 00007f282fa65fa0 R15: 00007fffe22dff48 [ 1027.567776][T16361] [ 1027.945873][ T6252] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1028.057239][T16370] FAULT_INJECTION: forcing a failure. [ 1028.057239][T16370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.057270][T16370] CPU: 1 UID: 0 PID: 16370 Comm: syz.0.3312 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1028.057285][T16370] Tainted: [L]=SOFTLOCKUP [ 1028.057289][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1028.057296][T16370] Call Trace: [ 1028.057301][T16370] [ 1028.057306][T16370] dump_stack_lvl+0x189/0x250 [ 1028.057330][T16370] ? __pfx____ratelimit+0x10/0x10 [ 1028.057356][T16370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1028.057377][T16370] ? __pfx__printk+0x10/0x10 [ 1028.057394][T16370] ? __might_fault+0xb0/0x130 [ 1028.057425][T16370] should_fail_ex+0x46c/0x600 [ 1028.057452][T16370] _copy_from_user+0x2d/0xb0 [ 1028.057469][T16370] ___sys_sendmsg+0x158/0x2a0 [ 1028.057483][T16370] ? __pfx____sys_sendmsg+0x10/0x10 [ 1028.057512][T16370] ? __fget_files+0x2a/0x420 [ 1028.057523][T16370] ? __fget_files+0x3a6/0x420 [ 1028.057538][T16370] __x64_sys_sendmsg+0x1a1/0x260 [ 1028.057552][T16370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1028.057568][T16370] ? __pfx_ksys_write+0x10/0x10 [ 1028.057585][T16370] ? do_syscall_64+0xbe/0xf80 [ 1028.057597][T16370] do_syscall_64+0xfa/0xf80 [ 1028.057607][T16370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.057617][T16370] ? clear_bhb_loop+0x60/0xb0 [ 1028.057629][T16370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.057638][T16370] RIP: 0033:0x7fa57a05f749 [ 1028.057649][T16370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.057658][T16370] RSP: 002b:00007fa5782be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1028.057670][T16370] RAX: ffffffffffffffda RBX: 00007fa57a2b5fa0 RCX: 00007fa57a05f749 [ 1028.057678][T16370] RDX: 0000000004000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1028.057686][T16370] RBP: 00007fa5782be090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.057692][T16370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.057698][T16370] R13: 00007fa57a2b6038 R14: 00007fa57a2b5fa0 R15: 00007fff64d9ecf8 [ 1028.057714][T16370] [ 1028.134245][T16372] overlayfs: failed to resolve './file0': -2 [ 1028.176689][ T6252] usb 4-1: Using ep0 maxpacket: 8 [ 1028.179500][ T6252] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1028.183133][ T6252] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1028.183161][ T6252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.183181][ T6252] usb 4-1: Product: syz [ 1028.183195][ T6252] usb 4-1: Manufacturer: syz [ 1028.183260][ T6252] usb 4-1: SerialNumber: syz [ 1028.190390][ T6252] usb 4-1: config 0 descriptor?? [ 1028.198430][ T6252] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1028.198574][ T6252] usb 4-1: setting power ON [ 1028.198596][ T6252] dvb-usb: bulk message failed: -22 (2/0) [ 1028.202961][ T6252] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1028.203775][ T6252] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1028.203835][ T6252] usb 4-1: media controller created [ 1028.221832][ T6252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1028.249262][ T6252] usb 4-1: selecting invalid altsetting 6 [ 1028.249286][ T6252] usb 4-1: digital interface selection failed (-22) [ 1028.249301][ T6252] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1028.250363][ T6252] usb 4-1: setting power OFF [ 1028.250385][ T6252] dvb-usb: bulk message failed: -22 (2/0) [ 1028.250402][ T6252] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1028.250415][ T6252] (NULL device *): no alternate interface [ 1028.294567][ T6252] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1028.346377][ T5892] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1028.420817][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.421416][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.462643][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.463170][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.464963][T16363] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1028.469015][T16363] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1028.918350][ T6252] usb 4-1: USB disconnect, device number 54 [ 1029.041341][T16381] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1029.041368][T16381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1029.042623][T16381] vhci_hcd vhci_hcd.0: Device attached [ 1029.062853][T16381] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1029.062883][T16381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1029.062945][T16381] vhci_hcd vhci_hcd.0: Device attached [ 1029.071695][T16381] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 1029.071722][T16381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1029.071864][T16381] vhci_hcd vhci_hcd.0: Device attached [ 1029.078612][T16381] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 1029.078641][T16381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1029.078743][T16381] vhci_hcd vhci_hcd.0: Device attached [ 1029.136638][ T3543] hsr_slave_0: left promiscuous mode [ 1029.148732][T16388] vhci_hcd: connection closed [ 1029.149488][ T88] vhci_hcd vhci_hcd.1: stop threads [ 1029.149518][ T88] vhci_hcd vhci_hcd.1: release socket [ 1029.149566][ T88] vhci_hcd vhci_hcd.1: disconnect device [ 1029.149926][T16386] vhci_hcd: connection closed [ 1029.150601][ T88] vhci_hcd vhci_hcd.1: stop threads [ 1029.150619][ T88] vhci_hcd vhci_hcd.1: release socket [ 1029.150661][ T88] vhci_hcd vhci_hcd.1: disconnect device [ 1029.150984][T16384] vhci_hcd: connection closed [ 1029.151649][ T88] vhci_hcd vhci_hcd.1: stop threads [ 1029.151667][ T88] vhci_hcd vhci_hcd.1: release socket [ 1029.151708][ T88] vhci_hcd vhci_hcd.1: disconnect device [ 1029.152030][T16382] vhci_hcd: connection closed [ 1029.152480][ T88] vhci_hcd vhci_hcd.1: stop threads [ 1029.152498][ T88] vhci_hcd vhci_hcd.1: release socket [ 1029.152539][ T88] vhci_hcd vhci_hcd.1: disconnect device [ 1029.182668][T16378] FAULT_INJECTION: forcing a failure. [ 1029.182668][T16378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.182706][T16378] CPU: 0 UID: 0 PID: 16378 Comm: syz.0.3315 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1029.182734][T16378] Tainted: [L]=SOFTLOCKUP [ 1029.182742][T16378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1029.182753][T16378] Call Trace: [ 1029.182762][T16378] [ 1029.182770][T16378] dump_stack_lvl+0x189/0x250 [ 1029.182801][T16378] ? __pfx____ratelimit+0x10/0x10 [ 1029.182832][T16378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.182858][T16378] ? __pfx__printk+0x10/0x10 [ 1029.182894][T16378] should_fail_ex+0x46c/0x600 [ 1029.182925][T16378] _copy_to_user+0x31/0xb0 [ 1029.182948][T16378] simple_read_from_buffer+0xe1/0x170 [ 1029.182974][T16378] proc_fail_nth_read+0x1b6/0x220 [ 1029.183007][T16378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1029.183039][T16378] ? rw_verify_area+0x2ac/0x4e0 [ 1029.183065][T16378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1029.183095][T16378] vfs_read+0x206/0xa30 [ 1029.183131][T16378] ? __pfx_vfs_read+0x10/0x10 [ 1029.183154][T16378] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1029.183197][T16378] ? mutex_lock_nested+0x154/0x1d0 [ 1029.183221][T16378] ? fdget_pos+0x253/0x320 [ 1029.183251][T16378] ksys_read+0x14b/0x260 [ 1029.183281][T16378] ? __pfx_ksys_read+0x10/0x10 [ 1029.183305][T16378] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 1029.183329][T16378] ? syscall_user_dispatch+0x4f/0x90 [ 1029.183364][T16378] do_syscall_64+0xfa/0xf80 [ 1029.183386][T16378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.183406][T16378] ? clear_bhb_loop+0x60/0xb0 [ 1029.183430][T16378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.183449][T16378] RIP: 0033:0x7fa57a05e15c [ 1029.183467][T16378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1029.183485][T16378] RSP: 002b:00007fa5782be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1029.183508][T16378] RAX: ffffffffffffffda RBX: 00007fa57a2b5fa0 RCX: 00007fa57a05e15c [ 1029.183524][T16378] RDX: 000000000000000f RSI: 00007fa5782be0a0 RDI: 0000000000000003 [ 1029.183537][T16378] RBP: 00007fa5782be090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.183551][T16378] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 1029.183563][T16378] R13: 00007fa57a2b6038 R14: 00007fa57a2b5fa0 R15: 00007fff64d9ecf8 [ 1029.183597][T16378] [ 1029.284286][ T3543] hsr_slave_1: left promiscuous mode [ 1029.285393][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.285419][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.523925][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.523957][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.580475][T16397] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1029.625355][ T3543] veth1_macvtap: left promiscuous mode [ 1029.625418][ T3543] veth0_macvtap: left promiscuous mode [ 1029.625543][ T3543] veth1_vlan: left promiscuous mode [ 1029.625650][ T3543] veth0_vlan: left promiscuous mode [ 1029.650879][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1029.843352][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1029.846064][ T10] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1029.846097][ T10] usb 1-1: config 0 has no interface number 0 [ 1029.846150][ T10] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1029.846179][ T10] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1029.846214][ T10] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1029.849583][ T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1029.849614][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.849637][ T10] usb 1-1: Product: syz [ 1029.849653][ T10] usb 1-1: Manufacturer: syz [ 1029.849670][ T10] usb 1-1: SerialNumber: syz [ 1029.867691][ T10] usb 1-1: config 0 descriptor?? [ 1029.870569][T16394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1029.870889][T16394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1029.886291][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1030.173851][T16394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1030.174064][T16394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1030.255881][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1030.255913][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.255930][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1030.256052][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.256083][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.260250][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1030.319031][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1030.319059][ T9] usb 4-1: Product: syz [ 1030.319078][ T9] usb 4-1: Manufacturer: syz [ 1030.354547][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 1030.354633][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 1030.413921][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1030.413946][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 1030.600180][T16410] overlayfs: failed to resolve './file0': -2 [ 1030.727164][T16396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.727642][T16396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.046698][ T9] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1032.275003][ T9] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 1032.275276][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.275297][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.275311][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1032.275334][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1032.275350][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.279054][ T9] usb 2-1: config 0 descriptor?? [ 1032.814855][ T9] logitech 0003:046D:C24F.0013: unbalanced collection at end of report description [ 1032.815519][ T9] logitech 0003:046D:C24F.0013: parse failed [ 1032.815608][ T9] logitech 0003:046D:C24F.0013: probe with driver logitech failed with error -22 [ 1033.033592][ T6183] usb 2-1: USB disconnect, device number 79 [ 1034.284145][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 1034.571092][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 1035.620327][ T10] Error reading MAC address [ 1035.623327][ T10] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1037.885730][ T9] usb 4-1: USB disconnect, device number 55 [ 1037.906855][ T6183] usb 1-1: USB disconnect, device number 87 [ 1037.955433][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.955713][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.955969][T16240] bridge_slave_0: entered allmulticast mode [ 1037.968345][T16240] bridge_slave_0: entered promiscuous mode [ 1037.976943][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.977103][T16240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.977332][T16240] bridge_slave_1: entered allmulticast mode [ 1037.993556][T16240] bridge_slave_1: entered promiscuous mode [ 1038.281549][T16426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1038.281585][T16426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1038.281866][T16426] vhci_hcd vhci_hcd.0: Device attached [ 1038.284788][T16426] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 1038.284819][T16426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1038.284919][T16426] vhci_hcd vhci_hcd.0: Device attached [ 1038.303631][T16426] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 1038.303661][T16426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1038.311547][T16426] vhci_hcd vhci_hcd.0: Device attached [ 1038.360890][T16426] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 1038.360919][T16426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1038.361033][T16426] vhci_hcd vhci_hcd.0: Device attached [ 1038.413290][T16436] vhci_hcd: connection closed [ 1038.413663][T16432] vhci_hcd: connection closed [ 1038.414757][T16430] vhci_hcd: connection closed [ 1038.415246][T16427] vhci_hcd: connection closed [ 1038.416644][ T7408] vhci_hcd vhci_hcd.3: stop threads [ 1038.416670][ T7408] vhci_hcd vhci_hcd.3: release socket [ 1038.416709][ T7408] vhci_hcd vhci_hcd.3: disconnect device [ 1038.416983][ T7408] vhci_hcd vhci_hcd.3: stop threads [ 1038.416997][ T7408] vhci_hcd vhci_hcd.3: release socket [ 1038.417030][ T7408] vhci_hcd vhci_hcd.3: disconnect device [ 1038.417302][ T7408] vhci_hcd vhci_hcd.3: stop threads [ 1038.417315][ T7408] vhci_hcd vhci_hcd.3: release socket [ 1038.417348][ T7408] vhci_hcd vhci_hcd.3: disconnect device [ 1038.427180][ T7408] vhci_hcd vhci_hcd.3: stop threads [ 1038.427204][ T7408] vhci_hcd vhci_hcd.3: release socket [ 1038.427244][ T7408] vhci_hcd vhci_hcd.3: disconnect device [ 1038.516821][T16442] overlayfs: failed to resolve './file0': -2 [ 1038.928066][T16240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.165045][T16240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.378222][T16456] FAULT_INJECTION: forcing a failure. [ 1039.378222][T16456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.378267][T16456] CPU: 1 UID: 0 PID: 16456 Comm: syz.3.3337 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1039.378299][T16456] Tainted: [L]=SOFTLOCKUP [ 1039.378308][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1039.378322][T16456] Call Trace: [ 1039.378332][T16456] [ 1039.378342][T16456] dump_stack_lvl+0x189/0x250 [ 1039.378377][T16456] ? __pfx____ratelimit+0x10/0x10 [ 1039.378414][T16456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1039.378444][T16456] ? __pfx__printk+0x10/0x10 [ 1039.378467][T16456] ? __might_fault+0xb0/0x130 [ 1039.378514][T16456] should_fail_ex+0x46c/0x600 [ 1039.378549][T16456] _copy_from_user+0x2d/0xb0 [ 1039.378572][T16456] __sys_bpf+0x1e3/0x860 [ 1039.378601][T16456] ? __pfx___sys_bpf+0x10/0x10 [ 1039.378623][T16456] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1039.378671][T16456] ? ksys_write+0x230/0x260 [ 1039.378704][T16456] ? __pfx_ksys_write+0x10/0x10 [ 1039.378741][T16456] __x64_sys_bpf+0x7c/0x90 [ 1039.378765][T16456] do_syscall_64+0xfa/0xf80 [ 1039.378789][T16456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.378812][T16456] ? clear_bhb_loop+0x60/0xb0 [ 1039.378839][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.378861][T16456] RIP: 0033:0x7f282f80f749 [ 1039.378881][T16456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.378910][T16456] RSP: 002b:00007f282da6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1039.378935][T16456] RAX: ffffffffffffffda RBX: 00007f282fa65fa0 RCX: 00007f282f80f749 [ 1039.378951][T16456] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1039.378966][T16456] RBP: 00007f282da6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.378980][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.378994][T16456] R13: 00007f282fa66038 R14: 00007f282fa65fa0 R15: 00007fffe22dff48 [ 1039.379031][T16456] [ 1039.658840][ T5892] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1039.691259][T16240] team0: Port device team_slave_0 added [ 1039.715987][T16240] team0: Port device team_slave_1 added [ 1039.810045][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1040.067001][ T5892] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1040.216952][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1040.345493][ T5892] usb usb1-port1: attempt power cycle [ 1040.375400][T16240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.375415][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.375432][T16240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.429188][T16240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.429210][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.429241][T16240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.564669][T15819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.712258][ T5892] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1040.730906][ T5892] usb 1-1: device descriptor read/8, error -71 [ 1040.803625][T16240] hsr_slave_0: entered promiscuous mode [ 1040.806811][T16240] hsr_slave_1: entered promiscuous mode [ 1040.807761][T16240] debugfs: 'hsr0' already exists in 'hsr' [ 1040.807788][T16240] Cannot create hsr debugfs directory [ 1040.833616][T16475] FAULT_INJECTION: forcing a failure. [ 1040.833616][T16475] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.833658][T16475] CPU: 0 UID: 0 PID: 16475 Comm: syz.1.3341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.833689][T16475] Tainted: [L]=SOFTLOCKUP [ 1040.833697][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1040.833710][T16475] Call Trace: [ 1040.833720][T16475] [ 1040.833729][T16475] dump_stack_lvl+0x189/0x250 [ 1040.833764][T16475] ? __pfx____ratelimit+0x10/0x10 [ 1040.833798][T16475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1040.833829][T16475] ? __pfx__printk+0x10/0x10 [ 1040.833859][T16475] ? __pfx___might_resched+0x10/0x10 [ 1040.833948][T16475] should_fail_ex+0x46c/0x600 [ 1040.833985][T16475] should_failslab+0xa8/0x100 [ 1040.834010][T16475] __kmalloc_noprof+0xe0/0x7e0 [ 1040.834041][T16475] ? copy_splice_read+0x143/0xa60 [ 1040.834072][T16475] copy_splice_read+0x143/0xa60 [ 1040.834105][T16475] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1040.834128][T16475] ? lockdep_hardirqs_on+0x98/0x140 [ 1040.834152][T16475] ? __pfx_copy_splice_read+0x10/0x10 [ 1040.834173][T16475] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1040.834195][T16475] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1040.834228][T16475] ? wait_for_space+0x248/0x2d0 [ 1040.834260][T16475] ? __pfx_sock_splice_read+0x10/0x10 [ 1040.834293][T16475] splice_file_to_pipe+0x27f/0x450 [ 1040.834324][T16475] do_sendfile+0x487/0x7f0 [ 1040.834348][T16475] ? __pfx_vfs_write+0x10/0x10 [ 1040.834388][T16475] ? __pfx_do_sendfile+0x10/0x10 [ 1040.834428][T16475] __se_sys_sendfile64+0x13e/0x190 [ 1040.834456][T16475] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1040.834484][T16475] ? do_syscall_64+0xbe/0xf80 [ 1040.834512][T16475] do_syscall_64+0xfa/0xf80 [ 1040.834536][T16475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.834558][T16475] ? clear_bhb_loop+0x60/0xb0 [ 1040.834585][T16475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.834606][T16475] RIP: 0033:0x7f1c2168f749 [ 1040.834628][T16475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.834649][T16475] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1040.834674][T16475] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 1040.834690][T16475] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 1040.834704][T16475] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.834717][T16475] R10: 0000000000110003 R11: 0000000000000246 R12: 0000000000000001 [ 1040.834732][T16475] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1040.834769][T16475] [ 1040.997063][ T5892] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1041.020834][ T5892] usb 1-1: device descriptor read/8, error -71 [ 1041.179096][ T5892] usb usb1-port1: unable to enumerate USB device [ 1041.278315][T16480] overlayfs: failed to resolve './file0': -2 [ 1042.442501][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1042.534515][T15819] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.781004][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.781274][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.823870][T16504] FAULT_INJECTION: forcing a failure. [ 1042.823870][T16504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.823922][T16504] CPU: 1 UID: 0 PID: 16504 Comm: syz.3.3347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1042.823952][T16504] Tainted: [L]=SOFTLOCKUP [ 1042.823961][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1042.823974][T16504] Call Trace: [ 1042.823983][T16504] [ 1042.823993][T16504] dump_stack_lvl+0x189/0x250 [ 1042.824028][T16504] ? __pfx____ratelimit+0x10/0x10 [ 1042.824061][T16504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.824090][T16504] ? __pfx__printk+0x10/0x10 [ 1042.824114][T16504] ? __might_fault+0xb0/0x130 [ 1042.824157][T16504] should_fail_ex+0x46c/0x600 [ 1042.824199][T16504] _copy_from_user+0x2d/0xb0 [ 1042.824222][T16504] ___sys_sendmsg+0x158/0x2a0 [ 1042.824254][T16504] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.824324][T16504] ? __fget_files+0x2a/0x420 [ 1042.824347][T16504] ? __fget_files+0x3a6/0x420 [ 1042.824385][T16504] __x64_sys_sendmsg+0x1a1/0x260 [ 1042.824417][T16504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1042.824456][T16504] ? __pfx_ksys_write+0x10/0x10 [ 1042.824494][T16504] ? do_syscall_64+0xbe/0xf80 [ 1042.824521][T16504] do_syscall_64+0xfa/0xf80 [ 1042.824544][T16504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.824567][T16504] ? clear_bhb_loop+0x60/0xb0 [ 1042.824596][T16504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.824617][T16504] RIP: 0033:0x7f282f80f749 [ 1042.824638][T16504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.824659][T16504] RSP: 002b:00007f282da4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.824685][T16504] RAX: ffffffffffffffda RBX: 00007f282fa66090 RCX: 00007f282f80f749 [ 1042.824702][T16504] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000004 [ 1042.824717][T16504] RBP: 00007f282da4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.824740][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.824754][T16504] R13: 00007f282fa66128 R14: 00007f282fa66090 R15: 00007fffe22dff48 [ 1042.824786][T16504] [ 1042.827077][T16498] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1042.828781][T16500] fuse: Bad value for 'fd' [ 1043.146742][ T5816] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1043.147246][ T5816] Bluetooth: hci3: Injecting HCI hardware error event [ 1043.152223][ T5805] Bluetooth: hci3: hardware error 0x00 [ 1043.199615][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.214857][T12975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.316774][T16507] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1044.040532][T16521] FAULT_INJECTION: forcing a failure. [ 1044.040532][T16521] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.040574][T16521] CPU: 1 UID: 0 PID: 16521 Comm: syz.1.3354 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1044.040606][T16521] Tainted: [L]=SOFTLOCKUP [ 1044.040615][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1044.040630][T16521] Call Trace: [ 1044.040640][T16521] [ 1044.040649][T16521] dump_stack_lvl+0x189/0x250 [ 1044.040685][T16521] ? __pfx____ratelimit+0x10/0x10 [ 1044.040722][T16521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.040752][T16521] ? __pfx__printk+0x10/0x10 [ 1044.040784][T16521] ? __pfx___might_resched+0x10/0x10 [ 1044.040814][T16521] should_fail_ex+0x46c/0x600 [ 1044.040852][T16521] should_failslab+0xa8/0x100 [ 1044.040877][T16521] __kmalloc_noprof+0xe0/0x7e0 [ 1044.040907][T16521] ? kfree+0x4d/0x900 [ 1044.040932][T16521] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1044.040964][T16521] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1044.040991][T16521] ? tomoyo_domain+0xd9/0x130 [ 1044.041021][T16521] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1044.041053][T16521] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1044.041090][T16521] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1044.041127][T16521] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1044.041159][T16521] ? lockdep_hardirqs_on+0x98/0x140 [ 1044.041219][T16521] ? __fget_files+0x2a/0x420 [ 1044.041250][T16521] ? __fget_files+0x3a6/0x420 [ 1044.041274][T16521] ? __fget_files+0x2a/0x420 [ 1044.041303][T16521] security_file_ioctl+0xcb/0x2d0 [ 1044.041339][T16521] __se_sys_ioctl+0x47/0x170 [ 1044.041375][T16521] do_syscall_64+0xfa/0xf80 [ 1044.041400][T16521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.041424][T16521] ? clear_bhb_loop+0x60/0xb0 [ 1044.041451][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.041473][T16521] RIP: 0033:0x7f1c2168f749 [ 1044.041494][T16521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.041515][T16521] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.041539][T16521] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 1044.041556][T16521] RDX: 0000200000000800 RSI: 0000000000008933 RDI: 0000000000000005 [ 1044.041572][T16521] RBP: 00007f1c1f8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.041586][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.041600][T16521] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1044.041640][T16521] [ 1044.041650][T16521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1044.871136][T16533] fuse: Bad value for 'fd' [ 1044.915949][T15819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1045.868104][ T5805] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1046.272515][T16557] FAULT_INJECTION: forcing a failure. [ 1046.272515][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.272557][T16557] CPU: 1 UID: 0 PID: 16557 Comm: syz.3.3365 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1046.272582][T16557] Tainted: [L]=SOFTLOCKUP [ 1046.272589][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1046.272600][T16557] Call Trace: [ 1046.272608][T16557] [ 1046.272616][T16557] dump_stack_lvl+0x189/0x250 [ 1046.272644][T16557] ? __pfx____ratelimit+0x10/0x10 [ 1046.272672][T16557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.272694][T16557] ? __pfx__printk+0x10/0x10 [ 1046.272717][T16557] ? __pfx___might_resched+0x10/0x10 [ 1046.272737][T16557] ? fs_reclaim_acquire+0x7d/0x100 [ 1046.272758][T16557] should_fail_ex+0x46c/0x600 [ 1046.272785][T16557] ? getname_flags+0xb8/0x540 [ 1046.272804][T16557] should_failslab+0xa8/0x100 [ 1046.272822][T16557] ? getname_flags+0xb8/0x540 [ 1046.272837][T16557] kmem_cache_alloc_noprof+0x84/0x6c0 [ 1046.272861][T16557] ? ksys_write+0x230/0x260 [ 1046.272890][T16557] getname_flags+0xb8/0x540 [ 1046.272911][T16557] __x64_sys_rename+0x5d/0x90 [ 1046.272929][T16557] do_syscall_64+0xfa/0xf80 [ 1046.272947][T16557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.272965][T16557] ? clear_bhb_loop+0x60/0xb0 [ 1046.272986][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.273003][T16557] RIP: 0033:0x7f282f80f749 [ 1046.273019][T16557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.273037][T16557] RSP: 002b:00007f282da6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1046.273060][T16557] RAX: ffffffffffffffda RBX: 00007f282fa65fa0 RCX: 00007f282f80f749 [ 1046.273073][T16557] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000440 [ 1046.273085][T16557] RBP: 00007f282da6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.273095][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.273114][T16557] R13: 00007f282fa66038 R14: 00007f282fa65fa0 R15: 00007fffe22dff48 [ 1046.273142][T16557] [ 1046.852575][T16577] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1047.892921][T16584] fuse: Bad value for 'fd' [ 1048.004994][T16590] netlink: 'syz.3.3372': attribute type 9 has an invalid length. [ 1048.053269][T15819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.187450][T16606] FAULT_INJECTION: forcing a failure. [ 1049.187450][T16606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.187493][T16606] CPU: 0 UID: 0 PID: 16606 Comm: syz.0.3373 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1049.187525][T16606] Tainted: [L]=SOFTLOCKUP [ 1049.187534][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1049.187548][T16606] Call Trace: [ 1049.187557][T16606] [ 1049.187568][T16606] dump_stack_lvl+0x189/0x250 [ 1049.187604][T16606] ? __pfx____ratelimit+0x10/0x10 [ 1049.187641][T16606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.187681][T16606] ? __pfx__printk+0x10/0x10 [ 1049.187702][T16606] ? __might_fault+0xb0/0x130 [ 1049.187748][T16606] should_fail_ex+0x46c/0x600 [ 1049.187784][T16606] _copy_from_iter+0x1cd/0x1630 [ 1049.187840][T16606] ? __pfx__copy_from_iter+0x10/0x10 [ 1049.187883][T16606] ? page_copy_sane+0x4e/0x280 [ 1049.187917][T16606] copy_page_from_iter+0xdd/0x170 [ 1049.187955][T16606] tun_get_user+0x1d40/0x3de0 [ 1049.187989][T16606] ? tun_get_user+0x6fc/0x3de0 [ 1049.188035][T16606] ? __pfx_tun_get_user+0x10/0x10 [ 1049.188067][T16606] ? __lock_acquire+0x6b6/0x2cf0 [ 1049.188098][T16606] ? kstrtoull+0x12f/0x1d0 [ 1049.188136][T16606] ? ref_tracker_alloc+0x2fe/0x450 [ 1049.188176][T16606] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1049.188214][T16606] ? tun_get+0x1c/0x2f0 [ 1049.188249][T16606] ? tun_get+0x1c/0x2f0 [ 1049.188276][T16606] ? tun_get+0x1c/0x2f0 [ 1049.188318][T16606] tun_chr_write_iter+0x119/0x200 [ 1049.188349][T16606] vfs_write+0x5d5/0xb40 [ 1049.188385][T16606] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1049.188412][T16606] ? __pfx_vfs_write+0x10/0x10 [ 1049.188464][T16606] ? __fget_files+0x2a/0x420 [ 1049.188498][T16606] ksys_write+0x14b/0x260 [ 1049.188535][T16606] ? __pfx_ksys_write+0x10/0x10 [ 1049.188570][T16606] ? do_syscall_64+0xbe/0xf80 [ 1049.188598][T16606] do_syscall_64+0xfa/0xf80 [ 1049.188622][T16606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.188646][T16606] ? clear_bhb_loop+0x60/0xb0 [ 1049.188675][T16606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.188698][T16606] RIP: 0033:0x7fa57a05e1ff [ 1049.188719][T16606] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1049.188740][T16606] RSP: 002b:00007fa57829d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1049.188766][T16606] RAX: ffffffffffffffda RBX: 00007fa57a2b6090 RCX: 00007fa57a05e1ff [ 1049.188783][T16606] RDX: 000000000000004a RSI: 0000200000000480 RDI: 00000000000000c8 [ 1049.188798][T16606] RBP: 00007fa57829d090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.188813][T16606] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 1049.188827][T16606] R13: 00007fa57a2b6128 R14: 00007fa57a2b6090 R15: 00007fff64d9ecf8 [ 1049.188872][T16606] [ 1050.022893][T16625] FAULT_INJECTION: forcing a failure. [ 1050.022893][T16625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.022935][T16625] CPU: 1 UID: 0 PID: 16625 Comm: syz.3.3377 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1050.022967][T16625] Tainted: [L]=SOFTLOCKUP [ 1050.022976][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1050.022989][T16625] Call Trace: [ 1050.022999][T16625] [ 1050.023009][T16625] dump_stack_lvl+0x189/0x250 [ 1050.023043][T16625] ? __pfx____ratelimit+0x10/0x10 [ 1050.023078][T16625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1050.023117][T16625] ? __pfx__printk+0x10/0x10 [ 1050.023141][T16625] ? __might_fault+0xb0/0x130 [ 1050.023186][T16625] should_fail_ex+0x46c/0x600 [ 1050.023222][T16625] _copy_from_user+0x2d/0xb0 [ 1050.023246][T16625] __sys_bpf+0x1e3/0x860 [ 1050.023275][T16625] ? __pfx___sys_bpf+0x10/0x10 [ 1050.023297][T16625] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1050.023346][T16625] ? ksys_write+0x230/0x260 [ 1050.023381][T16625] ? __pfx_ksys_write+0x10/0x10 [ 1050.023419][T16625] __x64_sys_bpf+0x7c/0x90 [ 1050.023444][T16625] do_syscall_64+0xfa/0xf80 [ 1050.023468][T16625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.023491][T16625] ? clear_bhb_loop+0x60/0xb0 [ 1050.023518][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.023540][T16625] RIP: 0033:0x7f282f80f749 [ 1050.023561][T16625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.023581][T16625] RSP: 002b:00007f282da6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1050.023606][T16625] RAX: ffffffffffffffda RBX: 00007f282fa65fa0 RCX: 00007f282f80f749 [ 1050.023623][T16625] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 1050.023638][T16625] RBP: 00007f282da6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.023652][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.023667][T16625] R13: 00007f282fa66038 R14: 00007f282fa65fa0 R15: 00007fffe22dff48 [ 1050.023705][T16625] [ 1050.399629][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1050.429248][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1050.480099][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1050.481505][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1050.482617][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1050.566973][T16240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1050.630193][T16636] fuse: Bad value for 'fd' [ 1050.680850][T16639] FAULT_INJECTION: forcing a failure. [ 1050.680850][T16639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.680873][T16639] CPU: 1 UID: 0 PID: 16639 Comm: syz.0.3381 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1050.680888][T16639] Tainted: [L]=SOFTLOCKUP [ 1050.680892][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1050.680898][T16639] Call Trace: [ 1050.680903][T16639] [ 1050.680907][T16639] dump_stack_lvl+0x189/0x250 [ 1050.680924][T16639] ? __pfx____ratelimit+0x10/0x10 [ 1050.680940][T16639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1050.680953][T16639] ? __pfx__printk+0x10/0x10 [ 1050.680964][T16639] ? __might_fault+0xb0/0x130 [ 1050.680983][T16639] should_fail_ex+0x46c/0x600 [ 1050.680999][T16639] _copy_from_user+0x2d/0xb0 [ 1050.681010][T16639] ___sys_sendmsg+0x158/0x2a0 [ 1050.681024][T16639] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.681052][T16639] ? __fget_files+0x2a/0x420 [ 1050.681063][T16639] ? __fget_files+0x3a6/0x420 [ 1050.681081][T16639] __x64_sys_sendmsg+0x1a1/0x260 [ 1050.681094][T16639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1050.681112][T16639] ? __pfx_ksys_write+0x10/0x10 [ 1050.681128][T16639] ? do_syscall_64+0xbe/0xf80 [ 1050.681140][T16639] do_syscall_64+0xfa/0xf80 [ 1050.681150][T16639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.681166][T16639] ? clear_bhb_loop+0x60/0xb0 [ 1050.681178][T16639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.681187][T16639] RIP: 0033:0x7fa57a05f749 [ 1050.681197][T16639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.681206][T16639] RSP: 002b:00007fa5782be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.681218][T16639] RAX: ffffffffffffffda RBX: 00007fa57a2b5fa0 RCX: 00007fa57a05f749 [ 1050.681226][T16639] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1050.681233][T16639] RBP: 00007fa5782be090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.681239][T16639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.681245][T16639] R13: 00007fa57a2b6038 R14: 00007fa57a2b5fa0 R15: 00007fff64d9ecf8 [ 1050.681261][T16639] [ 1052.218944][T16240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1052.430420][T16240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1052.549315][T16240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1052.608986][T16655] FAULT_INJECTION: forcing a failure. [ 1052.608986][T16655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.609008][T16655] CPU: 1 UID: 0 PID: 16655 Comm: syz.0.3386 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1052.609023][T16655] Tainted: [L]=SOFTLOCKUP [ 1052.609027][T16655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1052.609033][T16655] Call Trace: [ 1052.609038][T16655] [ 1052.609042][T16655] dump_stack_lvl+0x189/0x250 [ 1052.609059][T16655] ? __pfx____ratelimit+0x10/0x10 [ 1052.609082][T16655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1052.609095][T16655] ? __pfx__printk+0x10/0x10 [ 1052.609106][T16655] ? __might_fault+0xb0/0x130 [ 1052.609125][T16655] should_fail_ex+0x46c/0x600 [ 1052.609141][T16655] _copy_from_user+0x2d/0xb0 [ 1052.609152][T16655] do_seccomp+0x1a3/0xce0 [ 1052.609168][T16655] ? __pfx_do_seccomp+0x10/0x10 [ 1052.609181][T16655] ? ksys_write+0x230/0x260 [ 1052.609196][T16655] ? __pfx_ksys_write+0x10/0x10 [ 1052.609211][T16655] ? do_syscall_64+0xbe/0xf80 [ 1052.609223][T16655] do_syscall_64+0xfa/0xf80 [ 1052.609233][T16655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.609243][T16655] ? clear_bhb_loop+0x60/0xb0 [ 1052.609255][T16655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.609264][T16655] RIP: 0033:0x7fa57a05f749 [ 1052.609274][T16655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.609283][T16655] RSP: 002b:00007fa5782be038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1052.609295][T16655] RAX: ffffffffffffffda RBX: 00007fa57a2b5fa0 RCX: 00007fa57a05f749 [ 1052.609302][T16655] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 1052.609309][T16655] RBP: 00007fa5782be090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.609315][T16655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.609321][T16655] R13: 00007fa57a2b6038 R14: 00007fa57a2b5fa0 R15: 00007fff64d9ecf8 [ 1052.609337][T16655] [ 1052.728283][ T5805] Bluetooth: hci5: command tx timeout [ 1052.985229][ T31] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1053.123932][ T31] usb 1-1: device descriptor read/64, error -71 [ 1053.178822][ T9378] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1053.339110][T16674] fuse: Bad value for 'fd' [ 1053.359204][ T9378] usb 2-1: Using ep0 maxpacket: 8 [ 1053.370170][ T9378] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.370254][ T9378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1053.370288][ T9378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1053.370311][ T9378] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1053.370335][ T9378] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.370496][ T9378] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1053.370524][ T9378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.380615][ T31] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1053.386992][ T9378] usb 2-1: config 0 descriptor?? [ 1053.519616][ T31] usb 1-1: device descriptor read/64, error -71 [ 1053.639049][ T31] usb usb1-port1: attempt power cycle [ 1053.730243][T16659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.730464][T16659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.906089][ T5892] usb 2-1: USB disconnect, device number 80 [ 1054.000811][ T31] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1054.022792][ T31] usb 1-1: device descriptor read/8, error -71 [ 1054.238972][T16240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.279203][ T31] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1054.300957][ T31] usb 1-1: device descriptor read/8, error -71 [ 1054.621604][ T31] usb usb1-port1: unable to enumerate USB device [ 1054.737623][T16632] chnl_net:caif_netlink_parms(): no params data found [ 1054.816842][T16240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.953896][ T5805] Bluetooth: hci5: command tx timeout [ 1054.992882][T16696] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1055.231770][T16696] team_slave_0: entered promiscuous mode [ 1055.231825][T16696] team_slave_1: entered promiscuous mode [ 1055.358564][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.358650][T16704] fuse: Bad value for 'fd' [ 1055.361786][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.473642][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.473889][T12975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.221246][T16698] infiniband syz1: set active [ 1056.221269][T16698] infiniband syz1: added veth0_to_team [ 1056.391790][T16698] RDS/IB: syz1: added [ 1056.392795][T16698] smc: adding ib device syz1 with port count 1 [ 1056.393253][T16698] smc: ib device syz1 port 1 has no pnetid [ 1056.430187][T16695] team_slave_0: left promiscuous mode [ 1056.430254][T16695] team_slave_1: left promiscuous mode [ 1056.438777][T16632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.439165][T16632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.439519][T16632] bridge_slave_0: entered allmulticast mode [ 1056.475094][T16632] bridge_slave_0: entered promiscuous mode [ 1056.494287][T16632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.494487][T16632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.494729][T16632] bridge_slave_1: entered allmulticast mode [ 1056.497556][T16632] bridge_slave_1: entered promiscuous mode [ 1057.091072][T16632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.174203][T16632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.187523][ T5805] Bluetooth: hci5: command tx timeout [ 1057.563378][T16632] team0: Port device team_slave_0 added [ 1057.634044][T16632] team0: Port device team_slave_1 added [ 1057.636064][ T159] bridge_slave_1: left allmulticast mode [ 1057.636096][ T159] bridge_slave_1: left promiscuous mode [ 1057.636388][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.679459][ T5892] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1057.735325][ T159] bridge_slave_0: left allmulticast mode [ 1057.735361][ T159] bridge_slave_0: left promiscuous mode [ 1057.735648][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.769000][T16747] FAULT_INJECTION: forcing a failure. [ 1057.769000][T16747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.769043][T16747] CPU: 1 UID: 0 PID: 16747 Comm: syz.0.3416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1057.769074][T16747] Tainted: [L]=SOFTLOCKUP [ 1057.769082][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1057.769128][T16747] Call Trace: [ 1057.769167][T16747] [ 1057.769205][T16747] dump_stack_lvl+0x189/0x250 [ 1057.769284][T16747] ? __pfx____ratelimit+0x10/0x10 [ 1057.769404][T16747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1057.769491][T16747] ? __pfx__printk+0x10/0x10 [ 1057.769618][T16747] should_fail_ex+0x46c/0x600 [ 1057.769735][T16747] _copy_to_user+0x31/0xb0 [ 1057.769810][T16747] simple_read_from_buffer+0xe1/0x170 [ 1057.769912][T16747] proc_fail_nth_read+0x1b6/0x220 [ 1057.770034][T16747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1057.770168][T16747] ? rw_verify_area+0x2ac/0x4e0 [ 1057.770322][T16747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1057.770460][T16747] vfs_read+0x206/0xa30 [ 1057.770531][T16747] ? __pfx_vfs_read+0x10/0x10 [ 1057.770615][T16747] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1057.770849][T16747] ? mutex_lock_nested+0x154/0x1d0 [ 1057.770876][T16747] ? fdget_pos+0x253/0x320 [ 1057.770913][T16747] ksys_read+0x14b/0x260 [ 1057.770947][T16747] ? __pfx_ksys_read+0x10/0x10 [ 1057.770983][T16747] ? do_syscall_64+0xbe/0xf80 [ 1057.771011][T16747] do_syscall_64+0xfa/0xf80 [ 1057.771034][T16747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.771056][T16747] ? clear_bhb_loop+0x60/0xb0 [ 1057.771084][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.771106][T16747] RIP: 0033:0x7fa57a05e15c [ 1057.771128][T16747] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1057.771148][T16747] RSP: 002b:00007fa5782be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1057.771174][T16747] RAX: ffffffffffffffda RBX: 00007fa57a2b5fa0 RCX: 00007fa57a05e15c [ 1057.771191][T16747] RDX: 000000000000000f RSI: 00007fa5782be0a0 RDI: 0000000000000004 [ 1057.771206][T16747] RBP: 00007fa5782be090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.771221][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.771235][T16747] R13: 00007fa57a2b6038 R14: 00007fa57a2b5fa0 R15: 00007fff64d9ecf8 [ 1057.771274][T16747] [ 1057.818637][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1058.085824][ T5892] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1058.292304][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1058.407398][ T5892] usb usb2-port1: attempt power cycle [ 1058.799065][ T5892] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1058.817303][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1059.105233][ T5892] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1059.125342][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1059.274900][ T5892] usb usb2-port1: unable to enumerate USB device [ 1059.404674][ T5805] Bluetooth: hci5: command tx timeout [ 1060.591579][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.664156][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.719807][ T159] bond0 (unregistering): Released all slaves [ 1061.541213][T16632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.541235][T16632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.541267][T16632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.549950][T16632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.549971][T16632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.550003][T16632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.196210][T16632] hsr_slave_0: entered promiscuous mode [ 1062.197796][T16632] hsr_slave_1: entered promiscuous mode [ 1062.198917][T16632] debugfs: 'hsr0' already exists in 'hsr' [ 1062.198944][T16632] Cannot create hsr debugfs directory [ 1062.352810][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1062.491779][ T10] usb 2-1: device descriptor read/64, error -71 [ 1062.770364][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1062.908877][ T10] usb 2-1: device descriptor read/64, error -71 [ 1063.027240][ T10] usb usb2-port1: attempt power cycle [ 1063.199768][T16240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.411553][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1063.433588][ T10] usb 2-1: device descriptor read/8, error -71 [ 1063.700160][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1063.722357][ T10] usb 2-1: device descriptor read/8, error -71 [ 1063.840368][ T10] usb usb2-port1: unable to enumerate USB device [ 1064.382546][T16240] veth0_vlan: entered promiscuous mode [ 1064.409146][T16240] veth1_vlan: entered promiscuous mode [ 1064.550700][T16240] veth0_macvtap: entered promiscuous mode [ 1064.568996][T16240] veth1_macvtap: entered promiscuous mode [ 1064.740887][T16240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.746432][T16839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.746940][T16839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.187975][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1065.221924][T16240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.539095][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1065.539129][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.539152][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1065.539216][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1065.583972][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1065.584005][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1065.584018][ T10] usb 4-1: Product: syz [ 1065.584035][ T10] usb 4-1: Manufacturer: syz [ 1065.589650][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1065.689218][ T159] hsr_slave_0: left promiscuous mode [ 1065.733088][ T159] hsr_slave_1: left promiscuous mode [ 1065.733730][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.775900][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.796329][ T6011] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1065.816861][ T9] usb 4-1: USB disconnect, device number 56 [ 1065.972844][ T6011] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1065.972867][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.972880][ T6011] usb 2-1: Product: syz [ 1065.972889][ T6011] usb 2-1: Manufacturer: syz [ 1065.972900][ T6011] usb 2-1: SerialNumber: syz [ 1065.975779][ T6011] usb 2-1: config 0 descriptor?? [ 1065.980727][ T6011] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 089 [ 1066.705639][ T6011] (null): failure reading functionality [ 1066.708520][ T6011] i2c i2c-2: failure reading functionality [ 1066.711983][ T6011] i2c i2c-2: connected i2c-tiny-usb device [ 1066.715930][ T6011] usb 2-1: USB disconnect, device number 89 [ 1067.633323][T16867] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3444'. [ 1068.384694][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1068.684101][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1071.723372][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.835213][T12975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.837376][T12975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.837433][T12975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.924676][T16632] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1072.266723][T16878] FAULT_INJECTION: forcing a failure. [ 1072.266723][T16878] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.266746][T16878] CPU: 1 UID: 0 PID: 16878 Comm: syz.0.3448 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1072.266761][T16878] Tainted: [L]=SOFTLOCKUP [ 1072.266764][T16878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1072.266771][T16878] Call Trace: [ 1072.266775][T16878] [ 1072.266780][T16878] dump_stack_lvl+0x189/0x250 [ 1072.266797][T16878] ? __pfx____ratelimit+0x10/0x10 [ 1072.266814][T16878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1072.266826][T16878] ? __pfx__printk+0x10/0x10 [ 1072.266839][T16878] ? __pfx___might_resched+0x10/0x10 [ 1072.266852][T16878] should_fail_ex+0x46c/0x600 [ 1072.266868][T16878] should_failslab+0xa8/0x100 [ 1072.266879][T16878] __kmalloc_noprof+0xe0/0x7e0 [ 1072.266893][T16878] ? kfree+0x4d/0x900 [ 1072.266903][T16878] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1072.266917][T16878] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1072.266928][T16878] ? tomoyo_domain+0xd9/0x130 [ 1072.266940][T16878] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1072.266954][T16878] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1072.266969][T16878] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1072.266985][T16878] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1072.266995][T16878] ? lockdep_hardirqs_on+0x98/0x140 [ 1072.267027][T16878] ? __fget_files+0x2a/0x420 [ 1072.267040][T16878] ? __fget_files+0x3a6/0x420 [ 1072.267050][T16878] ? __fget_files+0x2a/0x420 [ 1072.267062][T16878] security_file_ioctl+0xcb/0x2d0 [ 1072.267077][T16878] __se_sys_ioctl+0x47/0x170 [ 1072.267092][T16878] do_syscall_64+0xfa/0xf80 [ 1072.267102][T16878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.267113][T16878] ? clear_bhb_loop+0x60/0xb0 [ 1072.267125][T16878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.267134][T16878] RIP: 0033:0x7fa57a05f749 [ 1072.267144][T16878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.267153][T16878] RSP: 002b:00007fa5782be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1072.267166][T16878] RAX: ffffffffffffffda RBX: 00007fa57a2b5fa0 RCX: 00007fa57a05f749 [ 1072.267174][T16878] RDX: 0000200000000000 RSI: 0000000040045010 RDI: 0000000000000003 [ 1072.267181][T16878] RBP: 00007fa5782be090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.267187][T16878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.267193][T16878] R13: 00007fa57a2b6038 R14: 00007fa57a2b5fa0 R15: 00007fff64d9ecf8 [ 1072.267209][T16878] [ 1072.267213][T16878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1072.692457][T16632] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1072.739852][T16632] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1072.757896][ T9378] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1074.080318][T16632] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1074.158743][ T9378] usb 2-1: Using ep0 maxpacket: 16 [ 1074.160726][ T9378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.160769][ T9378] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1074.160784][ T9378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.165771][ T9378] usb 2-1: config 0 descriptor?? [ 1074.384987][ T6252] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1074.573932][ T6252] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1074.574029][ T6252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.574053][ T6252] usb 1-1: Product: syz [ 1074.574071][ T6252] usb 1-1: Manufacturer: syz [ 1074.574087][ T6252] usb 1-1: SerialNumber: syz [ 1074.593459][ T6252] usb 1-1: config 0 descriptor?? [ 1074.609627][ T6252] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 096 [ 1074.841213][ T9378] usbhid 2-1:0.0: can't add hid device: -71 [ 1074.841429][ T9378] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1074.893070][ T9378] usb 2-1: USB disconnect, device number 90 [ 1075.174770][ T7408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.174796][ T7408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.284353][ T6252] (null): failure reading functionality [ 1075.292436][ T6252] i2c i2c-2: failure reading functionality [ 1075.305499][ T6252] i2c i2c-2: connected i2c-tiny-usb device [ 1075.321521][ T6252] usb 1-1: USB disconnect, device number 96 [ 1075.811402][T16632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.070996][T16632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.493953][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.493978][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.717222][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.717479][ T7408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.766992][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.776734][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.436836][T16632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.711306][T16946] openvswitch: netlink: IP tunnel TTL not specified. [ 1082.447835][T16632] veth0_vlan: entered promiscuous mode [ 1082.459467][T16632] veth1_vlan: entered promiscuous mode [ 1082.512607][T16632] veth0_macvtap: entered promiscuous mode [ 1082.519854][T16632] veth1_macvtap: entered promiscuous mode [ 1082.653869][T16632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.677282][T16632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.706778][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.707297][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.707373][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.707415][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.945145][T16987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1084.621663][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.621680][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.223371][ T5805] block nbd0: Receive control failed (result -32) [ 1086.155069][T17022] openvswitch: netlink: Tunnel attr 89 out of range max 16 [ 1089.207428][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.207453][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.774234][T17044] mkiss: ax0: crc mode is auto. [ 1090.908674][T17056] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1091.394225][T17068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1091.421122][T17068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1091.444404][T17068] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1091.446877][T17068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1091.448029][T17068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1092.208769][T17064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.218023][T17064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.669288][T17088] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1092.835138][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1093.215714][T17064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.247463][T17064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.050531][T17068] Bluetooth: hci0: command tx timeout [ 1096.053550][ T43] wlan1: Trigger new scan to find an IBSS to join [ 1097.956977][T17125] netlink: 'syz.5.3528': attribute type 2 has an invalid length. [ 1098.243673][T17118] Bluetooth: hci0: command tx timeout [ 1099.695773][T17068] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1100.406835][T17117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3522'. [ 1100.406863][T17117] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3522'. [ 1100.407168][T17117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3522'. [ 1100.408146][T17117] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3522'. [ 1100.408162][T17117] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3522'. [ 1100.466567][T17068] Bluetooth: hci0: command tx timeout [ 1100.873658][ T3514] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.878610][ T3514] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.878669][ T3514] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.878709][ T3514] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.111713][T17150] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3539'. [ 1101.113645][T17150] netlink: 'syz.5.3539': attribute type 33 has an invalid length. [ 1101.113669][T17150] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3539'. [ 1101.113776][T17150] `: renamed from team0 (while UP) [ 1101.324021][ T3480] wlan1: Trigger new scan to find an IBSS to join [ 1101.714516][T17166] syzkaller0: entered promiscuous mode [ 1101.714550][T17166] syzkaller0: entered allmulticast mode [ 1101.763250][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'. [ 1102.471611][ T68] wlan1: Creating new IBSS network, BSSID ee:e7:03:33:52:44 [ 1102.692154][T17068] Bluetooth: hci0: command tx timeout [ 1102.952420][T17065] chnl_net:caif_netlink_parms(): no params data found [ 1103.574589][T17065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.574860][T17065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.575141][T17065] bridge_slave_0: entered allmulticast mode [ 1103.584962][T17065] bridge_slave_0: entered promiscuous mode [ 1103.589659][T17065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.589874][T17065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.590079][T17065] bridge_slave_1: entered allmulticast mode [ 1103.596320][T17065] bridge_slave_1: entered promiscuous mode [ 1103.841882][T17065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.853763][T17065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.101993][T17065] team0: Port device team_slave_0 added [ 1104.109613][T17065] team0: Port device team_slave_1 added [ 1104.198386][T17239] mkiss: ax0: crc mode is auto. [ 1104.223825][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 1104.308480][T17065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.308504][T17065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.308536][T17065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.311647][T17065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.311664][T17065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.311695][T17065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.887306][T17065] hsr_slave_0: entered promiscuous mode [ 1104.889383][T17065] hsr_slave_1: entered promiscuous mode [ 1104.890921][T17065] debugfs: 'hsr0' already exists in 'hsr' [ 1104.890947][T17065] Cannot create hsr debugfs directory [ 1105.171729][T17266] team_slave_0: entered promiscuous mode [ 1105.171843][T17266] team_slave_1: entered promiscuous mode [ 1105.175603][T17266] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1105.261744][T17265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.516968][T17265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.511539][T17068] Bluetooth: hci2: connection err: -111 [ 1107.745677][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1108.485598][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3623'. [ 1108.485628][T17354] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1108.485645][T17354] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1111.290058][T17065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1112.293482][T17065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1112.599635][T17065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1112.978792][T17065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1113.299017][T17434] netlink: 'syz.4.3651': attribute type 1 has an invalid length. [ 1113.425564][T17427] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1113.425590][T17427] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17427, name: syz.1.3648 [ 1113.425610][T17427] preempt_count: 2, expected: 0 [ 1113.425622][T17427] RCU nest depth: 1, expected: 1 [ 1113.425635][T17427] 3 locks held by syz.1.3648/17427: [ 1113.425660][T17427] #0: ffff888039670e18 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xd40 [ 1113.425754][T17427] #1: ffffffff8d5ae8c0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 1113.425815][T17427] #2: ffff8880b893fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1400 [ 1113.425881][T17427] Preemption disabled at: [ 1113.425888][T17427] [] __slab_alloc+0xea/0x1f0 [ 1113.425926][T17427] CPU: 1 UID: 0 PID: 17427 Comm: syz.1.3648 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1113.425958][T17427] Tainted: [L]=SOFTLOCKUP [ 1113.425967][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1113.425981][T17427] Call Trace: [ 1113.425991][T17427] [ 1113.426002][T17427] dump_stack_lvl+0x189/0x250 [ 1113.426039][T17427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1113.426071][T17427] ? __pfx__printk+0x10/0x10 [ 1113.426099][T17427] ? print_lock_name+0xde/0x100 [ 1113.426136][T17427] ? __slab_alloc+0xea/0x1f0 [ 1113.426165][T17427] __might_resched+0x44b/0x5d0 [ 1113.426197][T17427] ? __slab_alloc+0xea/0x1f0 [ 1113.426221][T17427] ? __pfx___might_resched+0x10/0x10 [ 1113.426247][T17427] ? ___slab_alloc+0x12f/0x1400 [ 1113.426289][T17427] rt_spin_lock+0xc7/0x3e0 [ 1113.426321][T17427] ? __pfx_rt_spin_lock+0x10/0x10 [ 1113.426350][T17427] ? __lock_acquire+0x6b6/0x2cf0 [ 1113.426391][T17427] ? __lock_acquire+0x6b6/0x2cf0 [ 1113.426432][T17427] ___slab_alloc+0x12f/0x1400 [ 1113.426464][T17427] ? unwind_next_frame+0xa5/0x23d0 [ 1113.426495][T17427] ? __bpf_stream_push_str+0xa8/0x2b0 [ 1113.426526][T17427] __slab_alloc+0xc6/0x1f0 [ 1113.426551][T17427] ? __bpf_stream_push_str+0xa8/0x2b0 [ 1113.426578][T17427] kmalloc_nolock_noprof+0x1be/0x440 [ 1113.426610][T17427] ? __bpf_stream_push_str+0xa8/0x2b0 [ 1113.426636][T17427] __bpf_stream_push_str+0xa8/0x2b0 [ 1113.426664][T17427] ? __asan_memcpy+0x40/0x70 [ 1113.426694][T17427] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 1113.426730][T17427] bpf_stream_stage_printk+0x14e/0x1c0 [ 1113.426750][T17427] ? __pfx_find_from_stack_cb+0x10/0x10 [ 1113.426777][T17427] ? arch_bpf_stack_walk+0x112/0x170 [ 1113.426815][T17427] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 1113.426847][T17427] ? stack_trace_save+0x9c/0xe0 [ 1113.426884][T17427] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 1113.426907][T17427] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 1113.426930][T17427] ? irqentry_exit+0x5dd/0x660 [ 1113.426952][T17427] ? trace_irq_disable+0x37/0x100 [ 1113.426982][T17427] ? read_tsc+0x9/0x20 [ 1113.427008][T17427] bpf_check_timed_may_goto+0xaa/0xb0 [ 1113.427035][T17427] arch_bpf_timed_may_goto+0x21/0x40 [ 1113.427064][T17427] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 1113.427090][T17427] bpf_trace_run9+0x2de/0x510 [ 1113.427119][T17427] ? bpf_trace_run9+0x1ec/0x510 [ 1113.427147][T17427] ? __pfx_bpf_trace_run9+0x10/0x10 [ 1113.427199][T17427] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 1113.427239][T17427] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 1113.427274][T17427] ? __alloc_skb+0x2f1/0x430 [ 1113.427324][T17427] ? __local_bh_enable+0x28c/0x410 [ 1113.427360][T17427] virtio_transport_alloc_skb+0x10af/0x1110 [ 1113.427414][T17427] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 1113.427451][T17427] ? rt_spin_unlock+0x150/0x200 [ 1113.427482][T17427] virtio_transport_send_pkt_info+0x694/0x10b0 [ 1113.427514][T17427] virtio_transport_connect+0xa7/0x100 [ 1113.427531][T17427] ? __pfx_virtio_transport_connect+0x10/0x10 [ 1113.427549][T17427] ? __pfx_vsock_auto_bind+0x10/0x10 [ 1113.427569][T17427] ? vsock_assign_transport+0x672/0x7f0 [ 1113.427589][T17427] vsock_connect+0xaca/0xd40 [ 1113.427614][T17427] ? __might_fault+0xb0/0x130 [ 1113.427629][T17427] ? __pfx_vsock_connect+0x10/0x10 [ 1113.427652][T17427] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1113.427669][T17427] ? bpf_lsm_socket_connect+0x9/0x20 [ 1113.427685][T17427] __sys_connect+0x323/0x450 [ 1113.427698][T17427] ? __pfx___sys_connect+0x10/0x10 [ 1113.427715][T17427] ? rcu_is_watching+0x15/0xb0 [ 1113.427729][T17427] __x64_sys_connect+0x7a/0x90 [ 1113.427741][T17427] do_syscall_64+0xfa/0xf80 [ 1113.427752][T17427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.427763][T17427] ? clear_bhb_loop+0x60/0xb0 [ 1113.427776][T17427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.427787][T17427] RIP: 0033:0x7f1c2168f749 [ 1113.427799][T17427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.427808][T17427] RSP: 002b:00007f1c1f8f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1113.427820][T17427] RAX: ffffffffffffffda RBX: 00007f1c218e5fa0 RCX: 00007f1c2168f749 [ 1113.427828][T17427] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 1113.427834][T17427] RBP: 00007f1c21713f91 R08: 0000000000000000 R09: 0000000000000000 [ 1113.427841][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1113.427848][T17427] R13: 00007f1c218e6038 R14: 00007f1c218e5fa0 R15: 00007ffe20e77ce8 [ 1113.427864][T17427] [ 1113.455444][T17439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1114.174758][T17437] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1114.189909][T17437] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1114.291183][T17439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1114.359518][T17440] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1114.475345][T17434] macvlan2: entered promiscuous mode [ 1114.475376][T17434] macvlan2: entered allmulticast mode [ 1114.476553][T17434] bond1: entered promiscuous mode [ 1114.482412][T17434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1114.579741][T17434] bond1: left promiscuous mode [ 1114.813439][T17065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.892942][T17065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.920892][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.921148][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.967256][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.967487][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.389406][T17065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.508991][T17065] veth0_vlan: entered promiscuous mode [ 1115.530743][T17065] veth1_vlan: entered promiscuous mode [ 1115.589777][T17065] veth0_macvtap: entered promiscuous mode [ 1115.632847][T17065] veth1_macvtap: entered promiscuous mode [ 1115.670203][T17065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.697750][T17065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.721640][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.721697][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.721737][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.721776][ T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.159345][T12975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.159379][T12975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.239585][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.239611][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50