last executing test programs: 1m26.223828769s ago: executing program 0 (id=387): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/52, 0x34, 0x10000) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="b45615428c78aaaaaaaaaaaa08004a00003c0000000000069078000000007f000001441477830a01010100000003ac1414bb0000000800004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="79de591249bd8e5c"], 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x50) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) 1m25.794732113s ago: executing program 0 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4044094) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="18100000", @ANYRES16, @ANYBLOB="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"], 0x1018}}, 0x4080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/mcfilter\x00') setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m24.641502551s ago: executing program 0 (id=392): add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000003880)="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"/472, 0x1d8, 0xffffffffffffffff) 1m24.378205868s ago: executing program 0 (id=395): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001a00)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001a40), 0x4) sendmsg$kcm(r2, &(0x7f0000001a80)={&(0x7f0000001ac0)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001b80)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000001c80)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780", 0x8a}, {&(0x7f0000001dc0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000001e80)="6f4720baeb54", 0x6}], 0x4}, 0x0) 1m23.37654756s ago: executing program 0 (id=397): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000180)=""/152) ioctl$PPPIOCSFLAGS1(r1, 0x80047453, 0x0) 1m23.023799936s ago: executing program 0 (id=398): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000, 0x4, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m7.99942964s ago: executing program 32 (id=398): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000, 0x4, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20.47973849s ago: executing program 2 (id=550): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$md_new_array(r1, &(0x7f0000000180)={'md', @num=0x0}, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000003b00)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000003b40)) timer_settime(0x0, 0x0, &(0x7f0000003b80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x1000) syz_open_procfs$namespace(0x0, &(0x7f0000003bc0)='ns/uts\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x2, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x45facfd65bcc5987) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x8, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000003c00)='fd/3\x00') ioctl$VT_RESIZEX(r5, 0x560a, 0x0) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000003c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000440)=@str='raid1', 0x5) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000480)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r7, 0x0, 0x0) r8 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='serialize_policy\x00'}, 0x1, 0x0) write$md_sysfs(r8, &(0x7f0000000580)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r8, &(0x7f00000005c0)=@dev={'1:', 0x1}, 0x16) r9 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000003a00)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r9, &(0x7f0000003a40)=@str='0', 0x1) r10 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'size\x00'}}, 0x1, 0x0) write$md_sysfs(r10, &(0x7f0000003ac0)=@str='active', 0x6) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f00000001c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000080)={0x980900, 0x3, @value=0x2}) 17.956688047s ago: executing program 2 (id=559): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 14.10781275s ago: executing program 2 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0xffff, 0x200000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/33) mount(0x0, &(0x7f0000000380)='./pipe\x00', &(0x7f00000003c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c00058007"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000540)={0x1f00, 0x9, 0x8, {0x1, 0x10}, 0x5, 0x5c6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, 0x0) mount(0x0, &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f00000007c0)='./pipe/nfs/clnt0/gssd\x00', 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000940)="0a000000010001", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.955378838s ago: executing program 2 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fddbdf250500000014000380040004000400050008000200000000000c0001800800", @ANYRES32, @ANYBLOB="7e5806c1179a26ded0ccb73bece4552ac585418461dbc8ad4c070321f3c55344006091fa1723a086ce4074c6afcb907921d92a0f06dd05c29559"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="18100000", @ANYRES16, @ANYBLOB="000426bd7000fbdbdf250a000000041003003bf973702ab2ef6d345f6438d13e6badf67add2dbbef5e19f4c2d5378d485b4af1d2d382c410aae9c14dd680d1d9ba48c9bd82de58440e57a83d131810c7e37968b0b7f8d78293f1a26090cd88ca0c91e8683e4dee3c140c29711aa64e0cf53225b1135585e9fbf71a2455da5847e51d94c6fac16c8029f8c36d4a1e6454523cb93d0846b26491eb43701979b6228b427c3e72f8e695b5acf96519626d34e44a10bc4ce77cca7a93c788faf9866d73fa9b20f491741945d0e44d6c60b58cdc8fca890034d4ca86766f84533cdf84805a2b21938a959b74268df0b411c56a814096dd8fea92703d63b488c5b09b764d55072d8bf707f5bceb44951d74f4e10dd943148628794cfe1095c50d2bd7b3811d4f5ba8bb4d8203b0c4a8d68f12e23fcc2c05910fb37832bc7662af77983c7d8ebfb6d4c6c95a6fd792582efe1c18c6973960b42c574aff99637a5390f845219962bd994ef7daf65e8437caf9cf129802ede2db5a3502e11177d1382afd08a928c19446f2cecfc2c3b2d4f28f051b96d67c4917057a2903635134e6edc73704168ecbb439a843a653a1a7432035f21c63ed433b8aa0bf46a235a55db9099056974c40664584b970d6b054fd2d47460fa99efec85bbd7081e5e38a685394d161ef1515ab787a62de9eb5ca6c9035992faa694ff650038f7f1ef9c1ca7b78b2ae8e10271efeae3a3917bbc5bffb01a0e1202db7c5e1134d3cd076b037ef7220873e9448f53b350990494dca16d2c1e0daecbef74153fc38b1e9c686e34f0cedf1317c6a22a119472c81465ceea59a14d82b90691cf01a2a9ea4fdb1538aae8657f03019b965e049e004106af899ec1d005d93d52ec401e7472bbde86f9b383bbf8f7dcb10964a931bd6d44c08c67358529afb95170a0279b883118855c369bf646093fe27704a8980aca1644df6b4aab16cc746c38cbb3c3449b43174cceb428304cb2c912ac6b5cb70144f4cabc5fec27c486096ec2e80b08afb062f56742c63a37098bf34dbe66844522da8cda8e70d1b2d1e5c5edd0b4d210ece4322b3c1dbabe9dc47dce6b83b7984122337af5dfcbf4a5c0e9bc928cd00a0b5be4668749a7d4021493afb591d201de311ed7b4eaf52c7947dca06bc7f00cea007f657413b050e5182d7ef705f3ed97a97a8ba8e2d880e0c54b41256abe1090c0c8a1ce76adf581c6023e5d716e2391b25486cbc609a04b64133b2df5a76c91e96d04c6e3b50b93b917c4605970cd39478817e7708eb940fdac40f7d50923884c4a103f0e71251d05be06472504bdb3f8771dc30569dc1482b7fba4922e326f4f4463cd643132a6194ba66b29ab9807e2a44de834471e7a787c62ca8c643414c7949b46e2784118e5265bbf144635eed9634710b03e0ed879e3a5ddf49ba79391a7004acfe9ce6e25705a1845fefc852ef7914cf24c9ef2466e79b2d5b711fe1cc2dc705f449ffb1a2935539ff7e559de3068c781e387b097d06aa7c3e00ab8636a5bedc3ec568730df72ce45a35ca3a303c8f86eca55504a286666f8f58ffa3f6105b681c3eaf2d0a03ef4c6e66a6c8070e2bfd0897971efd747121a78d93710a9768f3faf4e3faf2773c4228a741e0f157b1275af948fb8f8db4f7ee5e92b7e3846e70a88455b6b0f30c3cfe97ee27295eb5db1c777b6dc0760b03174efc2fca36f8332087b77bad0bc89a4d324e1e8ee1633d34d7e9582596a1aede57a2ef1a627f9d12c13cf73ed15a477e9b8f4912eda106092219289955de747455ecb3b000f4d56c96df14f7e8c3de8bea1ec72fcf1ab518c6e2a96e1341d6cd13213d1edabb98d3eff5804e2c9c679d6fc06b8d922b89823ca9969ed11305c4fa8484f35833f01c8ed13b3d58ec13c1912d5453de8dccf76be3c4d1eb037a0668030e5ce4fd6b32d5819ce1883fa2e8136b23dba56d5828679abec9d32cbd4d0f1b650e7082c57b48b9e059f9cd8e42c470a45e85e61846c28960c4f933bc43f74848d64899ec2d694bcad27ffd1435c7d9295f9d139cf8b791aa6bc34ab71d07a3fbb245461fba7593db91a64d22e55069217836f258cd253df8ae60ea23111651e4eedb4f9f8eee127ad46b9b39bbb1eb1a7198da8789a7d017bc4d4eabd9b61f54eb16dd88185af37509fec82fbf509574258c304b722ddf0a93b132e5c2b1df130d6ca65dc943277764d5c5dc8f4d924c81fc5e0009bb967d467ad563aadfbc3ab44101520d93cafcfb59c2576922e81ab9656336d0091570769b3836cd3bca48c4588a8c69dd4d3bc9726f6269cebaf38771b3223522fae7847db59a1307f43850a2ab61a127193d521e0d2b3ba2adff6c9be8a0fef75136e604750c8fed4aa74a1d6224deae359658f1dd8ef10e31798566cf8591826eed5138ee8c6c356bcf3abb0630daa8e49cad5a0fb91dc4d0aa09dd434eb75193914f02c8f4af78c174b9e029ed4db01f306feaa213cb52f7423c9f02aa98d6e9a20789628a974d69cf9fdf08820cdf5d810bc8894c42c8de49b2a0f1fa0093c7b4eb1501df7ebb805fab1ec051d229a88c155c4c801810d06df471aadb34b29b4c0e0684a334313dacaf009a71c146b3d54ea1c253ff3a29cf2756470a7527bc6451dacd37ad56d6981aae3ad0cdb01d0d583a7ac321ec02fa18de0ea3524c87bc4e0b493c768a0cd9ce420987112ba2491321e5530ad47282ca7b2c2d9d4abdb70e6524d126c027a057a08b042ed0338f8fd317379dbd419e85d7e95990c27206815c6be3f6f51c8e5d83d1025b121f4f7690dad7a0d8594774a7132e987567ad70d9175cc93929de1a8ba2be977032ed8b1d900ab9201c20f9a0f970afd611e429a3a7e60a139bcd8ad58c3013e4a1bb22059d98527077c96cb27c01399d8ac944567fa754e6c4908ff8c0ac6f946f585a3837e730e8ddf8959d778d76102256ed007f5d976af5bf48431138c9472c70b8a93f3f55204cae4489882418925d6f229c4c9c0a1f8e14e505df6064689cc662190a8d8743cafc254bf9adfdacbab1be8b203c7500ff1067bf3cd7e679c3eb9214e7d88a08d68dd62c421342a8a8e9c4e8859032c60e26c4cbce3ac16846b811d0bd8df40edae006bbd65c0e4440a92ac709e572670606f610645337ddfd3c79f0bfd5b2b1e9a3ff10a5072456faa3cc2c2aedde9510aae91f08b455b1b2b9cc7d0553ff76389679032ca1b6e8a619f1002920f804c7673d5bc4d71ee46d6ad6073199f43b8c2033595b1eb281d2f2f310920acebd3fb18472e256a91e393824540f9d6b2490cd6dd24777fd0325bf5a232de75ff15c97d9bf8bc43e964192418f144ab08eac325f4beeaa0fb2ea34fa1b34d78dbeefeb8e4d0b940476146937ace98f64e86841b4d6ffdff42c1c87db64f9884907a2751be59cccd7a539d00d0b0b384d456ef482119a718982c6d1f117b81b0ac8b5858e709d0459f57df68b863c84ca5b95367d00d643617dcc9893df076be4cba7f58f408ba30c2b5199e3a48b2ad175611fe404b4b69fbe9a4c47c22d355fbe8ab7e60898b732c79f0dc5b27f35c15117db26164da6ff1369c01ef04f2b132617903604085b71e97835ec0838c6dd3aa24c3e27b5549a91ebefc642eb288e11caeaa4055bb731d2d14883cee732e32804b45897a17acc10cca9123bb1d8d69502ab591091dee730f0b0ddeb2de6077c125637d22f3a9b4f7b6a35e8761e5d4c5b3707ec7b028eb16d0c3a98b4864804875b9e0a4e45318e3f59bfb7533d752879f83975826e73638577bf134b297126ff3813937313ddf9fc26d18c69a2a34205b738934a63b8b6f37e7b31570d3b5676fa0e1695b597b765a093d72247a459707a3b5c6c3babfd432fb29d6c8faeaec8cd4189ed8850c7dd102403e1002bd185c9de20dc9b3062aa2c612e9bb83e354c60e3291cdb60dbb063f64a42b2fbd078dba7f4500e0f46cc7a91dc7e433aee071d4b0c61169fb192a2fdf6eeaa2ee340995da37bec3297ce65e085179eda78b4c9fb4a0c800d2b769e74aebbc6c7f4d2eed3614cf72c7ec99827178fb04f0f2b7cae85b147c78e49e1b1060b26eacee350b2fcaa4e1f08ba517267826a5aea6c8e91630a2e8360a3611dcca3824488b60cce8161f7636bc763adcf54bf6106f6e7ca81ed80719923e09aedfaab1bcebed9f89e58b2aa1e8b3eb6e5d719304f756403263d5a16a3ebed9aaf09e4cc2a4205471aaa992bab219c4c7c67872f0c9a25513a3b6067c8851e93ab26b5965124e3b2de55c42e8998ea1b303c2e469ac507da7991661ef6349b441949a580f3bbdbd1802d75d1ddd23bea33cf0c0e9106f5e77d37b28bdcdf5f599847620fe1e4965dd6b06d42f14a76478820c0209002249e12591aabcce415270dba765d652f9bd293013f47ac393b50f4e37d17dfcff80420084c0a953fe8897643a2d6669f6181b6e022313fc435e9eacde9608d1b2278675044e00bf780945d8f107b24d41193ed1a3c0055a9262f05ff87ab483c0fa46ffb2d083015d99f5ea72b5464b24ff75c5fd4b0614a00cbc8d301272d24f5ac27d9f3012589c1262c0434658b877c507f28cb0b84b025864e3552e95486e010955fdc286a04e054a0baddb0a904d49ad4a9afc4ed404532ded597dc9689377626f133bd2baf697784d2df714b52fd9b25dd4a1d1175b0cd9b2785fcf7edcaf16635c42d367e65130d7a73667e0c415154b8e3b0cf0b91fdc628f611d7af251f4b5f01351f016f7a29894c91a559e1457aad897d55f94544c3c5f9aca9c612c4ee6e611bf70f308692a7df4d8fbb77ed552f1893d710d0c508ba7e91de83ea6ee2cd80d4c4e2c12bd894fccda02679c5f35483dcae70d705abfb698930eecf5ba06d286777f31ed4ebcbc77b7d371071f06728acd2c83cf12e0ef63a7fe061d5a9a42663f942fc07d7efbed00b7dd6f15676f8fcbc77fb28a8975f1fd21a18e05aaeac2cafe5cdf229d179da9f605461718dc248efceb2afa8601be3a690cf5587541b48e7cddb322c89f0659b6f82d6ced89b514969664f4e9e032fe6af5624d87ff3ed08ff1060d67ff3af3efc34e49c0061704ed3cbe27a94aa8000a35d7c8cb420ac35ee9f3d237bbe4735ba6103750f8e8acd091d9fb657d0e757ad345ad6e0cb80b2f13d5e8d6846ec68849793f264403fed33fa63559fb5705484a2f42507baf4723669690d6ac9607575e0c11f500f711e3a294a4c98b58ccfc5c58b1f0d004fc1c398e5c02258ceb8ccc0635ce0b4d4a1b24312b868e3a64b763c31793d71beebbb52b334d1e55dd9e16218b6ccd565272f2ce6d4c14f4beb2ef63e429b5604f33c0b59b8b91384f3e3ae06fb97af01d5d614d2f1b07cc217af05c45d9f96f35dc86d1057d3b48095f6882cb55c057d93e899a4062eb11e8a911ca9b0c2dac1db0b90925483048eb66300d54ca48b779e2e865e95286948351f0cca437928cc742f276c9c57455385d43e31263b790dec7b207d13bb5855d16d3188f5a8cdb93a3680a17196c91b3a54495a3721fdddf562bed98512653dd93276fec9b69276bd534707ddc905347c96d6f6ad08b7890004342f91037ba00f9a952b2120852e728eb553d4992a5ae6b10a3f39a98b554906075babbacf0294cb90aed2befbace4d139d6b997b67361c263926091d048cebc805a6eb362c4e0c44f45e536a09a48e95a047bd08ef07265f4e993c5780474cb42b75522434472c33f4e7323ff26f5f3aa009eb92cfafa2820f52b864b68bb9ab99c1f4e0e3361f7cc31d1dbbffebf"], 0x1018}}, 0x4080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/mcfilter\x00') setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.325499358s ago: executing program 1 (id=579): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000240)=""/168, &(0x7f0000000400)=0xa8) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x141441, 0x0) write(r1, &(0x7f0000000200)='atkbd', 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x5, 0x8081, 0xffffffffffffffff, 0x0}]) write(0xffffffffffffffff, &(0x7f0000000100)='slave-24c02 0x1022', 0x12) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000100000007000000646c0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r3], 0x50) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='tcpci 0x2', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4000853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0x0, {0x0, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) r8 = fanotify_init(0x20, 0x0) fanotify_mark(r8, 0x445, 0x1003, r7, 0x0) write$P9_RFSYNC(r7, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000440)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0x40103e05, &(0x7f0000000480)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56"}) 7.905708583s ago: executing program 1 (id=580): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 5.767481821s ago: executing program 3 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000017c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)="1c", 0x1) 5.570173602s ago: executing program 3 (id=585): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0x3) read$FUSE(r0, 0x0, 0x0) 5.312124668s ago: executing program 2 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x2000880}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000340)={0x4, r2, 0x80000}) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000380)=0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1000, 0x4e23, 0xab2, 0xa, 0x0, 0x130, 0x16}, {0xcca, 0x0, 0x0, 0x1, 0x1000000000000, 0x7f, 0x0, 0x100000001}, {0xfffffffffffffffe, 0x1, 0x2000000000000003}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x34fd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2}}, 0xe4) openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r7, 0x81, 0x1, &(0x7f0000000280)='\x00') pread64(r8, &(0x7f0000000780)=""/4096, 0x1000, 0xfffffff7) 4.206620161s ago: executing program 1 (id=588): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000240)=""/168, &(0x7f0000000400)=0xa8) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x141441, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x5, 0x8081, 0xffffffffffffffff, 0x0}]) write(r1, &(0x7f0000000100)='slave-24c02 0x1022', 0x12) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000100000007000000646c0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r3], 0x50) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='tcpci 0x2', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4000853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0x0, {0x0, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) r8 = fanotify_init(0x20, 0x0) fanotify_mark(r8, 0x445, 0x1003, r7, 0x0) write$P9_RFSYNC(r7, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000440)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0x40103e05, &(0x7f0000000480)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56"}) 4.204169101s ago: executing program 4 (id=589): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2c, 0x40, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic=')']}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000500)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r1, &(0x7f0000000540)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r7 = socket(0x40000000015, 0x805, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000580)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000005c0)={r9, r9, 0x7, 0x0, 0x0, 0xe, 0x9c, 0x8, 0x9, 0x3, 0x2, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000680)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt(r7, 0x114, 0x271f, &(0x7f0000000a80)=""/102400, &(0x7f0000019a80)=0x19000) 4.183599263s ago: executing program 3 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x40, 0x48001, 0x1005, 0xc, 0x5, 0x2, 0xfffffdfffffffffa], 0xd000, 0x20301}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x2, 0x0, '\x00', 0xa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.156611118s ago: executing program 4 (id=591): r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000780)=ANY=[@ANYBLOB='trylock '], 0xf) 3.051961079s ago: executing program 4 (id=592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x9e, @loopback, 0x23}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x1000, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000300)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000340)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c45", 0x39, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x22801, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x2, 0x39) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 3.027759241s ago: executing program 3 (id=593): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001a00)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001a40), 0x4) sendmsg$kcm(r2, &(0x7f0000001a80)={&(0x7f0000001ac0)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001c80)="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", 0x114}, {&(0x7f0000001dc0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000001e80)="6f4720baeb54", 0x6}], 0x3}, 0x0) 2.860229238s ago: executing program 4 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0xffff, 0x200000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/33) mount(0x0, &(0x7f0000000380)='./pipe\x00', &(0x7f00000003c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c00058007"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000540)={0x1f00, 0x9, 0x8, {0x1, 0x10}, 0x5, 0x5c6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, 0x0) mount(0x0, &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') write(0xffffffffffffffff, &(0x7f0000000800)='\x00\x00\x00\x00', 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000940)="0a000000010001", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.74373065s ago: executing program 3 (id=595): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) timerfd_create(0x8, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2c, 0x11, 0x2}], 0x10, 0xffffffff}, 0x94) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c) listen(r2, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 2.35353268s ago: executing program 4 (id=596): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2008800, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002340)="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", 0x2000, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004440)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x40042, 0x13) close(r0) openat(0xffffffffffffff9c, &(0x7f0000004500)='./file0\x00', 0x2c45, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) 2.287508347s ago: executing program 1 (id=597): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.526317404s ago: executing program 3 (id=598): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.236640714s ago: executing program 1 (id=599): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x40, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic=')']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000500)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r1, &(0x7f0000000540)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r7 = socket(0x40000000015, 0x805, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000580)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000005c0)={r9, r9, 0x7, 0x0, 0x0, 0xe, 0x9c, 0x8, 0x9, 0x3, 0x2, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000680)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt(r7, 0x114, 0x271f, &(0x7f0000000a80)=""/102400, &(0x7f0000019a80)=0x19000) 108.698139ms ago: executing program 4 (id=600): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000440)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000480)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0) read$dsp(r4, &(0x7f0000000880)=""/4086, 0xff6) 104.277679ms ago: executing program 2 (id=601): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3) r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@rd='rd1/', 'slot\x00'}}, 0x1, 0x0) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f00000003c0)=@str='1', 0x1) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000440)=@str='active', 0x6) openat$md(0xffffffffffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) write$md_sysfs(r6, &(0x7f0000000500)=@str='clear', 0x5) 0s ago: executing program 1 (id=602): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000440)={'bond0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000003280)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003380)={&(0x7f00000033c0)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x43}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 1b/0x980 [ 89.333507][ T5921] ? ___sys_sendmsg+0x2a6/0x360 [ 89.338353][ T5921] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 89.343372][ T5921] ? do_syscall_64+0x55/0xb0 [ 89.347963][ T5921] netlink_rcv_skb+0x235/0x4c0 [ 89.352735][ T5921] ? nfnetlink_unbind+0x160/0x160 [ 89.357778][ T5921] ? netlink_ack+0x1160/0x1160 [ 89.362558][ T5921] ? apparmor_capable+0x137/0x1a0 [ 89.367591][ T5921] ? bpf_lsm_capable+0x9/0x10 [ 89.372264][ T5921] ? security_capable+0x89/0xb0 [ 89.377117][ T5921] nfnetlink_rcv+0x2c9/0x2490 [ 89.381798][ T5921] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 89.387801][ T5921] ? lock_chain_count+0x20/0x20 [ 89.392652][ T5921] ? __local_bh_enable_ip+0x13a/0x1c0 [ 89.398022][ T5921] ? __local_bh_enable_ip+0x13a/0x1c0 [ 89.403390][ T5921] ? _local_bh_enable+0xa0/0xa0 [ 89.408242][ T5921] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 89.413794][ T5921] ? __dev_queue_xmit+0x1481/0x3a30 [ 89.418998][ T5921] ? __dev_queue_xmit+0x6d1/0x3a30 [ 89.424112][ T5921] ? ref_tracker_free+0x686/0x830 [ 89.429138][ T5921] ? refcount_inc+0x70/0x70 [ 89.433639][ T5921] ? netdev_core_pick_tx+0x370/0x370 [ 89.438926][ T5921] ? __skb_clone+0x5c/0x6c0 [ 89.443435][ T5921] ? __skb_clone+0x446/0x6c0 [ 89.448032][ T5921] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.453226][ T5921] ? __lock_acquire+0x7eb0/0x7eb0 [ 89.458255][ T5921] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.463449][ T5921] netlink_unicast+0x856/0x9e0 [ 89.468228][ T5921] netlink_sendmsg+0x8d0/0xbf0 [ 89.472993][ T5921] ? netlink_getsockopt+0x590/0x590 [ 89.478190][ T5921] ? apparmor_socket_sendmsg+0x8e/0x330 [ 89.483736][ T5921] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 89.489021][ T5921] ? security_socket_sendmsg+0x80/0xa0 [ 89.494474][ T5921] ? netlink_getsockopt+0x590/0x590 [ 89.499669][ T5921] ____sys_sendmsg+0x61b/0x980 [ 89.504432][ T5921] ? __asan_memset+0x22/0x40 [ 89.509027][ T5921] ? __sys_sendmsg_sock+0x30/0x30 [ 89.514043][ T5921] ? __import_iovec+0x5f2/0x850 [ 89.518895][ T5921] ? import_iovec+0x73/0xa0 [ 89.523401][ T5921] ___sys_sendmsg+0x2a6/0x360 [ 89.528075][ T5921] ? __sys_sendmsg+0x2b0/0x2b0 [ 89.532869][ T5921] __se_sys_sendmsg+0x1d0/0x2c0 [ 89.537719][ T5921] ? __x64_sys_sendmsg+0x80/0x80 [ 89.542662][ T5921] ? lockdep_hardirqs_on+0x98/0x150 [ 89.547859][ T5921] do_syscall_64+0x55/0xb0 [ 89.552276][ T5921] ? clear_bhb_loop+0x40/0x90 [ 89.556967][ T5921] ? clear_bhb_loop+0x40/0x90 [ 89.561641][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.567534][ T5921] RIP: 0033:0x7faa36d9fb19 [ 89.571949][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.591579][ T5921] RSP: 002b:00007faa37bc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.599997][ T5921] RAX: ffffffffffffffda RBX: 00007faa37025fa0 RCX: 00007faa36d9fb19 [ 89.607986][ T5921] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 89.615965][ T5921] RBP: 00007faa36e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 89.623944][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.631911][ T5921] R13: 00007faa37026038 R14: 00007faa37025fa0 R15: 00007fff1048cbb8 [ 89.639891][ T5921] [ 89.656033][ T5921] Mem-Info: [ 89.659196][ T5921] active_anon:5792 inactive_anon:0 isolated_anon:0 [ 89.659196][ T5921] active_file:10673 inactive_file:39960 isolated_file:0 [ 89.659196][ T5921] unevictable:768 dirty:1783 writeback:0 [ 89.659196][ T5921] slab_reclaimable:10077 slab_unreclaimable:93305 [ 89.659196][ T5921] mapped:24365 shmem:1365 pagetables:609 [ 89.659196][ T5921] sec_pagetables:0 bounce:0 [ 89.659196][ T5921] kernel_misc_reclaimable:0 [ 89.659196][ T5921] free:1345938 free_pcp:13258 free_cma:0 [ 89.712819][ T5921] Node 0 active_anon:23168kB inactive_anon:0kB active_file:42692kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97460kB dirty:7124kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10612kB pagetables:2436kB sec_pagetables:0kB all_unreclaimable? no [ 89.763147][ T5921] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 89.795548][ T5921] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 89.822726][ T5784] Bluetooth: hci0: command tx timeout [ 89.857045][ T5921] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 89.862901][ T5921] Node 0 DMA32 free:1468368kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:23532kB inactive_anon:0kB active_file:42692kB inactive_file:158808kB unevictable:1536kB writepending:7108kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:34780kB local_pcp:16100kB free_cma:0kB [ 89.945236][ T5921] lowmem_reserve[]: 0 0 0 0 0 [ 89.951445][ T5921] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:16kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 89.988665][ T5921] lowmem_reserve[]: 0 0 0 0 0 [ 89.993607][ T5921] Node 1 Normal free:3900020kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18240kB local_pcp:10208kB free_cma:0kB [ 90.065899][ T5921] lowmem_reserve[]: 0 0 0 0 0 [ 90.080896][ T5921] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.102647][ T5921] Node 0 DMA32: 208*4kB (M) 620*8kB (UME) 264*16kB (ME) 254*32kB (UME) 238*64kB (ME) 61*128kB (M) 2*256kB (ME) 4*512kB (UM) 5*1024kB (ME) 1*2048kB (E) 346*4096kB (M) = 1468128kB [ 90.140853][ T5921] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 90.179149][ T5921] Node 1 Normal: 195*4kB (UME) 57*8kB (UME) 46*16kB (UME) 40*32kB (UME) 13*64kB (UME) 9*128kB (UME) 2*256kB (UM) 0*512kB 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3900020kB [ 90.202870][ T5921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.228775][ T5921] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.256228][ T5921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.276507][ T5921] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.297910][ T5921] 51997 total pagecache pages [ 90.302657][ T5921] 0 pages in swap cache [ 90.316011][ T5921] Free swap = 124728kB [ 90.322342][ T5921] Total swap = 124996kB [ 90.331111][ T5921] 2097051 pages RAM [ 90.335240][ T5921] 0 pages HighMem/MovableOnly [ 90.340545][ T5921] 421729 pages reserved [ 90.344897][ T5921] 0 pages cma reserved [ 90.389508][ T57] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.834812][ T5957] md: serialize_policy is only effective for raid1 [ 90.953680][ T5963] md: serialize_policy is only effective for raid1 [ 91.797555][ T5849] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.978051][ T5990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 92.220878][ T5849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.661279][ T5849] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 92.670423][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.694688][ T5997] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.949029][ T5849] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 93.000395][ T5849] wwan wwan0: port wwan0qmi0 attached [ 93.149697][ T5849] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, fe:77:36:15:22:37 [ 93.438005][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.471862][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.639219][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 93.639304][ T5849] usb 1-1: USB disconnect, device number 3 [ 93.646182][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 93.658098][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 93.694039][ T5849] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 94.068481][ T5849] wwan wwan0: port wwan0qmi0 disconnected [ 94.116302][ T6024] Invalid ELF header magic: != ELF [ 97.275440][ T6053] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 99.456458][ T6067] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 99.946103][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.897355][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.936295][ T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 100.945383][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.200783][ T6110] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.250489][ T6107] FAULT_INJECTION: forcing a failure. [ 101.250489][ T6107] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.973483][ T6107] CPU: 1 PID: 6107 Comm: syz.3.54 Not tainted syzkaller #0 [ 101.980753][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.990833][ T6107] Call Trace: [ 101.994126][ T6107] [ 101.997064][ T6107] dump_stack_lvl+0x18c/0x250 [ 102.001766][ T6107] ? show_regs_print_info+0x20/0x20 [ 102.006996][ T6107] ? load_image+0x420/0x420 [ 102.011515][ T6107] ? __might_fault+0xaa/0x120 [ 102.016211][ T6107] ? __lock_acquire+0x7eb0/0x7eb0 [ 102.021269][ T6107] should_fail_ex+0x394/0x4c0 [ 102.025992][ T6107] _copy_to_user+0x2f/0xa0 [ 102.030444][ T6107] do_fb_ioctl+0x69f/0x760 [ 102.034145][ T9] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 102.034875][ T6107] ? fb_release+0x140/0x140 [ 102.043748][ T9] wwan wwan0: port wwan0qmi0 attached [ 102.045351][ T6107] ? __fget_files+0x28/0x460 [ 102.055335][ T6107] ? bpf_lsm_file_ioctl+0x9/0x10 [ 102.060312][ T6107] ? security_file_ioctl+0x80/0xa0 [ 102.065458][ T6107] ? fb_write+0x220/0x220 [ 102.069811][ T6107] __se_sys_ioctl+0xfd/0x170 [ 102.074432][ T6107] do_syscall_64+0x55/0xb0 [ 102.078877][ T6107] ? clear_bhb_loop+0x40/0x90 [ 102.083588][ T6107] ? clear_bhb_loop+0x40/0x90 [ 102.088315][ T6107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.094239][ T6107] RIP: 0033:0x7f658eb9fb19 [ 102.098684][ T6107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.108503][ T9] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 92:bc:8a:3b:b2:b3 [ 102.118292][ T6107] RSP: 002b:00007f658f9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.118318][ T6107] RAX: ffffffffffffffda RBX: 00007f658ee25fa0 RCX: 00007f658eb9fb19 [ 102.118330][ T6107] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000004 [ 102.118341][ T6107] RBP: 00007f658ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 102.161701][ T6107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.169693][ T6107] R13: 00007f658ee26038 R14: 00007f658ee25fa0 R15: 00007ffe034aebe8 [ 102.177702][ T6107] [ 102.327555][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.339716][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.431210][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 102.480120][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 102.492974][ T6118] ceph: No mds server is up or the cluster is laggy [ 103.225108][ T6125] FAULT_INJECTION: forcing a failure. [ 103.225108][ T6125] name failslab, interval 1, probability 0, space 0, times 1 [ 103.275186][ T6125] CPU: 0 PID: 6125 Comm: syz.3.58 Not tainted syzkaller #0 [ 103.282446][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.292520][ T6125] Call Trace: [ 103.295821][ T6125] [ 103.298773][ T6125] dump_stack_lvl+0x18c/0x250 [ 103.303487][ T6125] ? show_regs_print_info+0x20/0x20 [ 103.308714][ T6125] ? load_image+0x420/0x420 [ 103.313245][ T6125] should_fail_ex+0x394/0x4c0 [ 103.317951][ T6125] should_failslab+0x9/0x20 [ 103.322449][ T6125] slab_pre_alloc_hook+0x59/0x300 [ 103.327473][ T6125] ? proc_thread_self_get_link+0xfc/0x190 [ 103.333193][ T6125] __kmem_cache_alloc_node+0x53/0x260 [ 103.338559][ T6125] ? proc_thread_self_get_link+0xfc/0x190 [ 103.344278][ T6125] kmalloc_trace+0x2a/0xe0 [ 103.348698][ T6125] proc_thread_self_get_link+0xfc/0x190 [ 103.354240][ T6125] ? proc_setup_thread_self+0x2c0/0x2c0 [ 103.359783][ T6125] pick_link+0x6a8/0xdd0 [ 103.364026][ T6125] step_into+0xc18/0xee0 [ 103.368274][ T6125] ? set_root+0x3a0/0x3a0 [ 103.372602][ T6125] ? lookup_fast+0x14a/0x4c0 [ 103.377190][ T6125] ? security_inode_permission+0xb0/0xf0 [ 103.382823][ T6125] link_path_walk+0x748/0xe40 [ 103.387510][ T6125] ? handle_lookup_down+0x130/0x130 [ 103.392709][ T6125] path_openat+0x291/0x3270 [ 103.397222][ T6125] ? do_sys_openat2+0xda/0x1d0 [ 103.401987][ T6125] ? __x64_sys_open+0x11f/0x140 [ 103.406843][ T6125] ? verify_lock_unused+0x140/0x140 [ 103.412041][ T6125] ? do_filp_open+0x430/0x430 [ 103.416727][ T6125] do_filp_open+0x1f2/0x430 [ 103.421229][ T6125] ? vfs_tmpfile+0x620/0x620 [ 103.425831][ T6125] ? _raw_spin_unlock+0x28/0x40 [ 103.430684][ T6125] ? alloc_fd+0x590/0x640 [ 103.435018][ T6125] do_sys_openat2+0x134/0x1d0 [ 103.439697][ T6125] ? do_sys_open+0xe0/0xe0 [ 103.444110][ T6125] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 103.450090][ T6125] ? lock_chain_count+0x20/0x20 [ 103.454948][ T6125] __x64_sys_open+0x11f/0x140 [ 103.459629][ T6125] do_syscall_64+0x55/0xb0 [ 103.464042][ T6125] ? clear_bhb_loop+0x40/0x90 [ 103.468719][ T6125] ? clear_bhb_loop+0x40/0x90 [ 103.473398][ T6125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.479290][ T6125] RIP: 0033:0x7f658eb9fb19 [ 103.483707][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.503311][ T6125] RSP: 002b:00007f658f9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 103.511729][ T6125] RAX: ffffffffffffffda RBX: 00007f658ee25fa0 RCX: 00007f658eb9fb19 [ 103.519702][ T6125] RDX: 00000000000003eb RSI: 0000000000000000 RDI: 0000200000000000 [ 103.527673][ T6125] RBP: 00007f658ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 103.535635][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.543595][ T6125] R13: 00007f658ee26038 R14: 00007f658ee25fa0 R15: 00007ffe034aebe8 [ 103.551572][ T6125] [ 103.554764][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.804344][ T57] usb 2-1: USB disconnect, device number 2 [ 103.812141][ T57] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 103.931058][ T57] wwan wwan0: port wwan0qmi0 disconnected [ 104.166818][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.271138][ T6142] FAULT_INJECTION: forcing a failure. [ 104.271138][ T6142] name failslab, interval 1, probability 0, space 0, times 0 [ 104.335922][ T6142] CPU: 1 PID: 6142 Comm: syz.3.63 Not tainted syzkaller #0 [ 104.343184][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.353258][ T6142] Call Trace: [ 104.354955][ T6154] Zero length message leads to an empty skb [ 104.356535][ T6142] [ 104.356570][ T6142] dump_stack_lvl+0x18c/0x250 [ 104.356605][ T6142] ? show_regs_print_info+0x20/0x20 [ 104.356630][ T6142] ? load_image+0x420/0x420 [ 104.356654][ T6142] ? __might_sleep+0xe0/0xe0 [ 104.356679][ T6142] ? __lock_acquire+0x7eb0/0x7eb0 [ 104.356700][ T6142] ? nfc_register_device+0x1b8/0x300 [ 104.356727][ T6142] should_fail_ex+0x394/0x4c0 [ 104.356754][ T6142] should_failslab+0x9/0x20 [ 104.356771][ T6142] slab_pre_alloc_hook+0x59/0x300 [ 104.356795][ T6142] kmem_cache_alloc_node+0x5e/0x320 [ 104.356812][ T6142] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 104.356833][ T6142] ? __alloc_skb+0x103/0x2c0 [ 104.356858][ T6142] __alloc_skb+0x103/0x2c0 [ 104.356881][ T6142] nfc_genl_device_added+0x2c/0x1f0 [ 104.434393][ T6142] nfc_register_device+0x1c0/0x300 [ 104.439541][ T6142] nci_register_device+0x8a3/0xa00 [ 104.444687][ T6142] ? nci_free_device+0x90/0x90 [ 104.449479][ T6142] ? __init_waitqueue_head+0xa8/0x140 [ 104.454875][ T6142] virtual_ncidev_open+0x12c/0x1a0 [ 104.460007][ T6142] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 104.465222][ T6142] misc_open+0x326/0x3a0 [ 104.469503][ T6142] chrdev_open+0x58c/0x600 [ 104.473941][ T6142] ? cd_forget+0x160/0x160 [ 104.478380][ T6142] ? fsnotify_perm+0x3ed/0x5e0 [ 104.483164][ T6142] do_dentry_open+0x880/0x14b0 [ 104.487956][ T6142] ? cd_forget+0x160/0x160 [ 104.492397][ T6142] path_openat+0x284f/0x3270 [ 104.497029][ T6142] ? do_sys_openat2+0xda/0x1d0 [ 104.501811][ T6142] ? __x64_sys_openat+0x139/0x160 [ 104.506857][ T6142] ? verify_lock_unused+0x140/0x140 [ 104.512075][ T6142] ? do_filp_open+0x430/0x430 [ 104.516787][ T6142] do_filp_open+0x1f2/0x430 [ 104.521322][ T6142] ? vfs_tmpfile+0x620/0x620 [ 104.525954][ T6142] ? _raw_spin_unlock+0x28/0x40 [ 104.530821][ T6142] ? alloc_fd+0x590/0x640 [ 104.535257][ T6142] do_sys_openat2+0x134/0x1d0 [ 104.539970][ T6142] ? do_sys_open+0xe0/0xe0 [ 104.544410][ T6142] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.550417][ T6142] ? lock_chain_count+0x20/0x20 [ 104.555298][ T6142] __x64_sys_openat+0x139/0x160 [ 104.560174][ T6142] do_syscall_64+0x55/0xb0 [ 104.564610][ T6142] ? clear_bhb_loop+0x40/0x90 [ 104.569310][ T6142] ? clear_bhb_loop+0x40/0x90 [ 104.574015][ T6142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.579969][ T6142] RIP: 0033:0x7f658eb9fb19 [ 104.584403][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.604030][ T6142] RSP: 002b:00007f658f9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.612476][ T6142] RAX: ffffffffffffffda RBX: 00007f658ee25fa0 RCX: 00007f658eb9fb19 [ 104.620472][ T6142] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 104.628463][ T6142] RBP: 00007f658ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.636450][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.644436][ T6142] R13: 00007f658ee26038 R14: 00007f658ee25fa0 R15: 00007ffe034aebe8 [ 104.652441][ T6142] [ 104.716057][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 104.722991][ T5870] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 104.730626][ T5870] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 104.749130][ T5870] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.776239][ T5870] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 104.800062][ T5870] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 104.846478][ T5870] usb 3-1: config 168 interface 0 has no altsetting 0 [ 104.878012][ T5870] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 104.885474][ T5870] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 104.908305][ T5870] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.935934][ T5870] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 104.955910][ T5870] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 104.987715][ T5870] usb 3-1: config 168 interface 0 has no altsetting 0 [ 105.001451][ T5870] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 105.014612][ T5870] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 105.065330][ T5870] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.106739][ T5870] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 105.135087][ T5870] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 105.170139][ T5870] usb 3-1: config 168 interface 0 has no altsetting 0 [ 105.197971][ T5870] usb 3-1: string descriptor 0 read error: -22 [ 105.204887][ T5870] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.237277][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.401121][ T5870] adutux 3-1:168.0: interrupt endpoints not found [ 105.898342][ T6175] process 'syz.3.68' launched './file2' with NULL argv: empty string added [ 106.355621][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 106.443338][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 106.452310][ T175] usb 3-1: USB disconnect, device number 2 [ 106.567757][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 106.573813][ T6172] ceph: No mds server is up or the cluster is laggy [ 106.613393][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 106.896129][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.998477][ T6192] FAULT_INJECTION: forcing a failure. [ 106.998477][ T6192] name fail_futex, interval 1, probability 0, space 0, times 1 [ 107.014789][ T6192] CPU: 0 PID: 6192 Comm: syz.3.75 Not tainted syzkaller #0 [ 107.022032][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.032109][ T6192] Call Trace: [ 107.035401][ T6192] [ 107.038349][ T6192] dump_stack_lvl+0x18c/0x250 [ 107.043062][ T6192] ? show_regs_print_info+0x20/0x20 [ 107.048293][ T6192] ? load_image+0x420/0x420 [ 107.052827][ T6192] ? kasan_set_track+0x5f/0x70 [ 107.057602][ T6192] ? kasan_set_track+0x4e/0x70 [ 107.062371][ T6192] should_fail_ex+0x394/0x4c0 [ 107.067051][ T6192] get_futex_key+0x134/0xf40 [ 107.071641][ T6192] ? futex_setup_timer+0xc0/0xc0 [ 107.076576][ T6192] futex_wake+0x127/0x4f0 [ 107.080947][ T6192] ? futex_wake_mark+0x150/0x150 [ 107.085881][ T6192] ? kasan_quarantine_put+0xd8/0x220 [ 107.091181][ T6192] do_futex+0x35d/0x3e0 [ 107.095337][ T6192] ? __ia32_sys_get_robust_list+0x110/0x110 [ 107.101230][ T6192] __se_sys_futex+0x3a9/0x440 [ 107.105907][ T6192] ? __x64_sys_futex+0xf0/0xf0 [ 107.110667][ T6192] ? __x64_sys_futex+0x21/0xf0 [ 107.115425][ T6192] do_syscall_64+0x55/0xb0 [ 107.119840][ T6192] ? clear_bhb_loop+0x40/0x90 [ 107.124512][ T6192] ? clear_bhb_loop+0x40/0x90 [ 107.129189][ T6192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.135077][ T6192] RIP: 0033:0x7f658eb9fb19 [ 107.139493][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.159101][ T6192] RSP: 002b:00007f658f9f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.167513][ T6192] RAX: ffffffffffffffda RBX: 00007f658ee25fa8 RCX: 00007f658eb9fb19 [ 107.175480][ T6192] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f658ee25fac [ 107.183444][ T6192] RBP: 00007f658ee25fa0 R08: 0000000000745b08 R09: 0000000000000000 [ 107.191406][ T6192] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 107.199370][ T6192] R13: 00007f658ee26038 R14: 00007ffe034aeb00 R15: 00007ffe034aebe8 [ 107.207349][ T6192] [ 107.210503][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.269999][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.282848][ T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 107.295969][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.520710][ T6199] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.529040][ T9] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 107.550904][ T9] wwan wwan0: port wwan0qmi0 attached [ 107.753085][ T9] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, d6:fb:c1:88:43:8e [ 107.944137][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.974150][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.696319][ T5870] usb 2-1: USB disconnect, device number 3 [ 109.748523][ T5870] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 110.886193][ T6245] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 111.551152][ T5870] wwan wwan0: port wwan0qmi0 disconnected [ 112.268886][ T6277] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.689306][ T6296] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 113.983330][ T6308] FAULT_INJECTION: forcing a failure. [ 113.983330][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 114.021637][ T6308] CPU: 1 PID: 6308 Comm: syz.2.100 Not tainted syzkaller #0 [ 114.028980][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.039045][ T6308] Call Trace: [ 114.042345][ T6308] [ 114.045282][ T6308] dump_stack_lvl+0x18c/0x250 [ 114.049970][ T6308] ? show_regs_print_info+0x20/0x20 [ 114.055173][ T6308] ? load_image+0x420/0x420 [ 114.059678][ T6308] ? __might_sleep+0xe0/0xe0 [ 114.064272][ T6308] ? __lock_acquire+0x7eb0/0x7eb0 [ 114.069305][ T6308] should_fail_ex+0x394/0x4c0 [ 114.073992][ T6308] should_failslab+0x9/0x20 [ 114.078490][ T6308] slab_pre_alloc_hook+0x59/0x300 [ 114.083507][ T6308] ? _raw_read_unlock_irqrestore+0x86/0x120 [ 114.089407][ T6308] kmem_cache_alloc+0x5a/0x2d0 [ 114.094169][ T6308] ? skb_clone+0x1eb/0x370 [ 114.098587][ T6308] skb_clone+0x1eb/0x370 [ 114.102825][ T6308] ? netlink_broadcast_filtered+0x640/0x1200 [ 114.108818][ T6308] netlink_broadcast_filtered+0x64e/0x1200 [ 114.114653][ T6308] netlink_broadcast+0x37/0x50 [ 114.119425][ T6308] kobject_uevent_net_broadcast+0x364/0x530 [ 114.125325][ T6308] kobject_uevent_env+0x559/0x890 [ 114.130351][ T6308] device_add+0x5d5/0xc40 [ 114.134678][ T6308] rfkill_register+0x170/0x9b0 [ 114.139442][ T6308] nfc_register_device+0x13d/0x300 [ 114.144552][ T6308] nci_register_device+0x8a3/0xa00 [ 114.149666][ T6308] ? nci_free_device+0x90/0x90 [ 114.154434][ T6308] ? __init_waitqueue_head+0xa8/0x140 [ 114.159808][ T6308] virtual_ncidev_open+0x12c/0x1a0 [ 114.164911][ T6308] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 114.170111][ T6308] misc_open+0x326/0x3a0 [ 114.174356][ T6308] chrdev_open+0x58c/0x600 [ 114.178772][ T6308] ? cd_forget+0x160/0x160 [ 114.183190][ T6308] ? fsnotify_perm+0x3ed/0x5e0 [ 114.187953][ T6308] do_dentry_open+0x880/0x14b0 [ 114.192717][ T6308] ? cd_forget+0x160/0x160 [ 114.197135][ T6308] path_openat+0x284f/0x3270 [ 114.201738][ T6308] ? do_sys_openat2+0xda/0x1d0 [ 114.206497][ T6308] ? __x64_sys_openat+0x139/0x160 [ 114.211520][ T6308] ? verify_lock_unused+0x140/0x140 [ 114.216716][ T6308] ? do_filp_open+0x430/0x430 [ 114.221402][ T6308] do_filp_open+0x1f2/0x430 [ 114.225906][ T6308] ? vfs_tmpfile+0x620/0x620 [ 114.230521][ T6308] ? _raw_spin_unlock+0x28/0x40 [ 114.235367][ T6308] ? alloc_fd+0x590/0x640 [ 114.239700][ T6308] do_sys_openat2+0x134/0x1d0 [ 114.244379][ T6308] ? do_sys_open+0xe0/0xe0 [ 114.248792][ T6308] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 114.254772][ T6308] ? lock_chain_count+0x20/0x20 [ 114.259624][ T6308] __x64_sys_openat+0x139/0x160 [ 114.264477][ T6308] do_syscall_64+0x55/0xb0 [ 114.268892][ T6308] ? clear_bhb_loop+0x40/0x90 [ 114.273568][ T6308] ? clear_bhb_loop+0x40/0x90 [ 114.278247][ T6308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.284141][ T6308] RIP: 0033:0x7f234af9fb19 [ 114.288551][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.308159][ T6308] RSP: 002b:00007f234be30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.316572][ T6308] RAX: ffffffffffffffda RBX: 00007f234b225fa0 RCX: 00007f234af9fb19 [ 114.324544][ T6308] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 114.332511][ T6308] RBP: 00007f234b037b70 R08: 0000000000000000 R09: 0000000000000000 [ 114.340473][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.348437][ T6308] R13: 00007f234b226038 R14: 00007f234b225fa0 R15: 00007ffe95326fd8 [ 114.356416][ T6308] [ 114.461162][ T6321] fuse: Bad value for 'fd' [ 116.164093][ T6336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 116.976457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 118.286334][ T5870] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.446138][ T5849] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.477861][ T5870] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.495795][ T5870] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 118.530488][ T5870] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 118.548313][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.569073][ T5870] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 118.668924][ T5849] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.680460][ T5849] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 118.714317][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.774016][ T175] usb 2-1: USB disconnect, device number 4 [ 118.814678][ T175] idmouse 2-1:1.0: disconnected [ 119.681784][ T5849] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 119.694827][ T5849] wwan wwan0: port wwan0qmi0 attached [ 119.717731][ T5849] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 5e:9d:57:e3:f3:8f [ 119.850191][ T6381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 119.942731][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.090975][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.548019][ T5870] usb 3-1: USB disconnect, device number 3 [ 120.597610][ T5870] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 120.769679][ T5870] wwan wwan0: port wwan0qmi0 disconnected [ 122.488979][ T6418] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 124.159261][ T6444] FAULT_INJECTION: forcing a failure. [ 124.159261][ T6444] name failslab, interval 1, probability 0, space 0, times 0 [ 124.176470][ T6444] CPU: 1 PID: 6444 Comm: syz.0.140 Not tainted syzkaller #0 [ 124.183795][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.193875][ T6444] Call Trace: [ 124.197170][ T6444] [ 124.200113][ T6444] dump_stack_lvl+0x18c/0x250 [ 124.204838][ T6444] ? show_regs_print_info+0x20/0x20 [ 124.210060][ T6444] ? load_image+0x420/0x420 [ 124.214586][ T6444] ? __might_sleep+0xe0/0xe0 [ 124.219199][ T6444] ? __lock_acquire+0x7eb0/0x7eb0 [ 124.224250][ T6444] should_fail_ex+0x394/0x4c0 [ 124.228960][ T6444] should_failslab+0x9/0x20 [ 124.233475][ T6444] slab_pre_alloc_hook+0x59/0x300 [ 124.238518][ T6444] ? kobject_set_name_vargs+0xca/0x110 [ 124.243993][ T6444] ? kobj_map+0x74/0x580 [ 124.248256][ T6444] ? kobj_map+0x74/0x580 [ 124.252522][ T6444] __kmem_cache_alloc_node+0x53/0x260 [ 124.257915][ T6444] ? kobj_map+0x74/0x580 [ 124.262180][ T6444] __kmalloc+0xa7/0x240 [ 124.266363][ T6444] kobj_map+0x74/0x580 [ 124.270444][ T6444] ? chrdev_open+0x600/0x600 [ 124.275052][ T6444] ? exact_match+0x20/0x20 [ 124.279494][ T6444] cdev_device_add+0x130/0x380 [ 124.284279][ T6444] nvme_init_ctrl+0xa6f/0xd30 [ 124.288986][ T6444] nvme_tcp_create_ctrl+0x771/0xbb0 [ 124.294215][ T6444] nvmf_dev_write+0x2383/0x2b50 [ 124.299080][ T6444] ? asan.module_dtor+0x20/0x20 [ 124.303987][ T6444] ? nvmf_host_put+0x190/0x190 [ 124.308766][ T6444] ? aa_file_perm+0x11b/0xee0 [ 124.313471][ T6444] ? try_to_wake_up+0x6f5/0x10e0 [ 124.318447][ T6444] ? common_file_perm+0x198/0x1f0 [ 124.323492][ T6444] ? fsnotify_perm+0x5d/0x5e0 [ 124.328185][ T6444] ? security_file_permission+0x79/0xa0 [ 124.333754][ T6444] ? nvmf_host_put+0x190/0x190 [ 124.336878][ T175] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.338526][ T6444] vfs_write+0x299/0x9a0 [ 124.350236][ T6444] ? file_end_write+0x250/0x250 [ 124.355095][ T6444] ? __fget_files+0x28/0x460 [ 124.359685][ T6444] ? __fget_files+0x3fc/0x460 [ 124.364371][ T6444] ? __fdget_pos+0x1d8/0x330 [ 124.368960][ T6444] ? ksys_write+0x74/0x260 [ 124.373376][ T6444] ksys_write+0x151/0x260 [ 124.377704][ T6444] ? __ia32_sys_read+0x90/0x90 [ 124.382468][ T6444] ? lockdep_hardirqs_on+0x98/0x150 [ 124.387660][ T6444] do_syscall_64+0x55/0xb0 [ 124.392072][ T6444] ? clear_bhb_loop+0x40/0x90 [ 124.396743][ T6444] ? clear_bhb_loop+0x40/0x90 [ 124.401421][ T6444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.407312][ T6444] RIP: 0033:0x7f41cf59fb19 [ 124.411735][ T6444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.431331][ T6444] RSP: 002b:00007f41d044b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.439739][ T6444] RAX: ffffffffffffffda RBX: 00007f41cf825fa0 RCX: 00007f41cf59fb19 [ 124.447704][ T6444] RDX: 0000000000000031 RSI: 0000200000000180 RDI: 0000000000000004 [ 124.455783][ T6444] RBP: 00007f41cf637b70 R08: 0000000000000000 R09: 0000000000000000 [ 124.463746][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.471711][ T6444] R13: 00007f41cf826038 R14: 00007f41cf825fa0 R15: 00007ffcd19c4108 [ 124.479691][ T6444] [ 125.229029][ T175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.267537][ T175] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 125.315373][ T175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.514964][ T6455] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 125.624756][ T175] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 125.658531][ T175] wwan wwan0: port wwan0qmi0 attached [ 126.041515][ T175] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 5e:5f:59:71:00:c6 [ 126.059129][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.161121][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.346385][ T5849] usb 2-1: USB disconnect, device number 5 [ 126.354246][ T5849] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 126.580339][ T5849] wwan wwan0: port wwan0qmi0 disconnected [ 127.859852][ T6483] warning: `syz.2.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.210832][ T6495] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 128.216087][ T175] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.129000][ T175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.149335][ T175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.178341][ T175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 129.217527][ T175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.273941][ T175] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.308652][ T175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.341283][ T175] usb 4-1: config 0 descriptor?? [ 129.779371][ T6484] pim6reg: entered allmulticast mode [ 129.789382][ T6484] pim6reg: left allmulticast mode [ 130.213932][ T6518] 0x0000000000ec-0x0000000000f2 : "" [ 130.288691][ T6518] ftl_cs: FTL header corrupt! [ 130.408209][ T6523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 130.625854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 131.379864][ T175] usbhid 4-1:0.0: can't add hid device: -71 [ 131.411866][ T175] usbhid: probe of 4-1:0.0 failed with error -71 [ 131.456876][ T175] usb 4-1: USB disconnect, device number 2 [ 131.470476][ T6538] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.084354][ T6544] pim6reg: entered allmulticast mode [ 132.122494][ T6544] pim6reg: left allmulticast mode [ 132.480331][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 133.004546][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032304][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.248465][ T6561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 134.500191][ T6579] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 134.515995][ T57] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.537244][ T6579] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 134.544921][ T6579] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 134.573231][ T6579] tcpci: probe of 0-0002 failed with error -5 [ 134.581937][ T6579] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 134.649975][ T6575] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 134.699777][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.712450][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.723879][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 134.736048][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.746341][ T57] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.755533][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.767843][ T57] usb 4-1: config 0 descriptor?? [ 135.179866][ T6567] pim6reg: entered allmulticast mode [ 135.186969][ T6567] pim6reg: left allmulticast mode [ 135.632605][ T6600] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 135.827634][ T6596] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 137.369242][ T57] usbhid 4-1:0.0: can't add hid device: -71 [ 137.393244][ T57] usbhid: probe of 4-1:0.0 failed with error -71 [ 137.417084][ T57] usb 4-1: USB disconnect, device number 3 [ 138.155275][ T6659] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 138.496021][ T5846] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.490088][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.505169][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.515405][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 139.527710][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.538128][ T5846] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.547852][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.558979][ T5846] usb 1-1: config 0 descriptor?? [ 139.986287][ T6660] pim6reg: entered allmulticast mode [ 139.993934][ T6660] pim6reg: left allmulticast mode [ 140.441165][ T6709] netlink: 68 bytes leftover after parsing attributes in process `syz.2.228'. [ 141.875850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.112711][ T5846] usbhid 1-1:0.0: can't add hid device: -71 [ 142.127706][ T5846] usbhid: probe of 1-1:0.0 failed with error -71 [ 142.158435][ T5846] usb 1-1: USB disconnect, device number 4 [ 142.219094][ T6735] netlink: 68 bytes leftover after parsing attributes in process `syz.2.238'. [ 142.577427][ T6752] FAULT_INJECTION: forcing a failure. [ 142.577427][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 142.593730][ T6752] CPU: 1 PID: 6752 Comm: syz.0.244 Not tainted syzkaller #0 [ 142.601067][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.611145][ T6752] Call Trace: [ 142.614450][ T6752] [ 142.617405][ T6752] dump_stack_lvl+0x18c/0x250 [ 142.622116][ T6752] ? show_regs_print_info+0x20/0x20 [ 142.627332][ T6752] ? load_image+0x420/0x420 [ 142.631847][ T6752] ? __might_sleep+0xe0/0xe0 [ 142.636451][ T6752] ? __lock_acquire+0x7eb0/0x7eb0 [ 142.641479][ T6752] should_fail_ex+0x394/0x4c0 [ 142.646165][ T6752] should_failslab+0x9/0x20 [ 142.650664][ T6752] slab_pre_alloc_hook+0x59/0x300 [ 142.655689][ T6752] kmem_cache_alloc+0x5a/0x2d0 [ 142.660445][ T6752] ? __kernfs_new_node+0xe5/0x7f0 [ 142.665475][ T6752] __kernfs_new_node+0xe5/0x7f0 [ 142.670331][ T6752] ? kernfs_new_node+0x260/0x260 [ 142.675278][ T6752] ? up_write+0x1be/0x410 [ 142.679656][ T6752] kernfs_new_node+0x14c/0x260 [ 142.684428][ T6752] __kernfs_create_file+0x4b/0x2e0 [ 142.689544][ T6752] sysfs_add_file_mode_ns+0x237/0x2f0 [ 142.694949][ T6752] internal_create_group+0x431/0xd10 [ 142.700234][ T6752] ? kernfs_add_one+0x149/0x6b0 [ 142.705091][ T6752] ? down_read_killable+0x340/0x340 [ 142.710290][ T6752] ? sysfs_create_group+0x20/0x20 [ 142.715313][ T6752] ? up_write+0x1be/0x410 [ 142.719654][ T6752] sysfs_create_groups+0x59/0x120 [ 142.724680][ T6752] device_add_attrs+0xdf/0x830 [ 142.729442][ T6752] ? device_add_class_symlinks+0x240/0x240 [ 142.735242][ T6752] ? kobject_put+0x41a/0x450 [ 142.739868][ T6752] ? device_add_class_symlinks+0x21f/0x240 [ 142.745673][ T6752] device_add+0x51a/0xc40 [ 142.750035][ T6752] rfkill_register+0x170/0x9b0 [ 142.754810][ T6752] hci_register_dev+0x412/0x8b0 [ 142.759694][ T6752] hci_uart_tty_ioctl+0x81d/0xa20 [ 142.764722][ T6752] ? hci_uart_tty_write+0x10/0x10 [ 142.769770][ T6752] tty_ioctl+0x9b5/0xdc0 [ 142.774010][ T6752] ? tty_get_icount+0xb0/0xb0 [ 142.778684][ T6752] __se_sys_ioctl+0xfd/0x170 [ 142.783288][ T6752] do_syscall_64+0x55/0xb0 [ 142.787708][ T6752] ? clear_bhb_loop+0x40/0x90 [ 142.792470][ T6752] ? clear_bhb_loop+0x40/0x90 [ 142.797149][ T6752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.803043][ T6752] RIP: 0033:0x7f41cf59fb19 [ 142.807454][ T6752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.827056][ T6752] RSP: 002b:00007f41d044b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.835470][ T6752] RAX: ffffffffffffffda RBX: 00007f41cf825fa0 RCX: 00007f41cf59fb19 [ 142.843441][ T6752] RDX: 0000000400000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 142.851413][ T6752] RBP: 00007f41cf637b70 R08: 0000000000000000 R09: 0000000000000000 [ 142.859424][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.867402][ T6752] R13: 00007f41cf826038 R14: 00007f41cf825fa0 R15: 00007ffcd19c4108 [ 142.875408][ T6752] [ 142.918053][ T1122] Bluetooth: hci4: Frame reassembly failed (-84) [ 143.652903][ T6765] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 143.669555][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.1.250'. [ 143.708094][ T6765] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 143.898696][ T6764] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 144.145969][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.328995][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.381364][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.536415][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 144.674822][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.793356][ T5870] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.917268][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.966217][ T5784] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 144.974070][ T5788] Bluetooth: hci4: command 0xfc11 tx timeout [ 145.122322][ T5870] usb 3-1: config 0 descriptor?? [ 145.544655][ T6789] netlink: 68 bytes leftover after parsing attributes in process `syz.1.260'. [ 145.597630][ T6771] pim6reg: entered allmulticast mode [ 145.613845][ T6771] pim6reg: left allmulticast mode [ 145.843524][ T6792] syzkaller0: entered promiscuous mode [ 145.868900][ T6792] syzkaller0: entered allmulticast mode [ 146.144134][ T6793] 9pnet_virtio: no channels available for device syz [ 146.436206][ T6799] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 146.475364][ T6799] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 146.585944][ T5849] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.618362][ T6798] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 146.872014][ T5849] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.525957][ T5849] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 147.535057][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.698023][ T5870] usbhid 3-1:0.0: can't add hid device: -71 [ 147.704070][ T5870] usbhid: probe of 3-1:0.0 failed with error -71 [ 147.754418][ T5849] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 147.763624][ T5849] wwan wwan0: port wwan0qmi0 attached [ 147.777069][ T5870] usb 3-1: USB disconnect, device number 4 [ 147.864169][ T6811] random: crng reseeded on system resumption [ 147.979122][ T5849] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, f2:5a:5b:64:c9:8a [ 148.191906][ T5849] usb 4-1: USB disconnect, device number 4 [ 148.232280][ T5849] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 148.331602][ T5849] wwan wwan0: port wwan0qmi0 disconnected [ 149.841378][ T6846] ======================================================= [ 149.841378][ T6846] WARNING: The mand mount option has been deprecated and [ 149.841378][ T6846] and is ignored by this kernel. Remove the mand [ 149.841378][ T6846] option from the mount to silence this warning. [ 149.841378][ T6846] ======================================================= [ 150.082058][ T6851] syzkaller0: entered promiscuous mode [ 150.094719][ T6851] syzkaller0: entered allmulticast mode [ 150.502172][ T6862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 151.705939][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.633028][ T6878] FAULT_INJECTION: forcing a failure. [ 152.633028][ T6878] name failslab, interval 1, probability 0, space 0, times 0 [ 152.650662][ T6878] CPU: 1 PID: 6878 Comm: syz.2.288 Not tainted syzkaller #0 [ 152.657996][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.668067][ T6878] Call Trace: [ 152.671365][ T6878] [ 152.674308][ T6878] dump_stack_lvl+0x18c/0x250 [ 152.679016][ T6878] ? show_regs_print_info+0x20/0x20 [ 152.684243][ T6878] ? load_image+0x420/0x420 [ 152.688772][ T6878] ? __might_sleep+0xe0/0xe0 [ 152.693383][ T6878] ? __lock_acquire+0x7eb0/0x7eb0 [ 152.698435][ T6878] should_fail_ex+0x394/0x4c0 [ 152.703143][ T6878] should_failslab+0x9/0x20 [ 152.707668][ T6878] slab_pre_alloc_hook+0x59/0x300 [ 152.712716][ T6878] ? snd_pcm_oss_change_params_locked+0x1ac/0x3be0 [ 152.719246][ T6878] __kmem_cache_alloc_node+0x53/0x260 [ 152.724643][ T6878] ? snd_pcm_oss_change_params_locked+0x1ac/0x3be0 [ 152.731178][ T6878] kmalloc_trace+0x2a/0xe0 [ 152.735625][ T6878] snd_pcm_oss_change_params_locked+0x1ac/0x3be0 [ 152.741988][ T6878] ? __mutex_trylock_common+0x160/0x270 [ 152.747559][ T6878] ? trace_raw_output_contention_end+0xd0/0xd0 [ 152.753731][ T6878] ? locks_remove_file+0x388/0xeb0 [ 152.758881][ T6878] ? rcu_is_watching+0x15/0xb0 [ 152.763498][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.763658][ T6878] ? __mutex_lock+0x30d/0xce0 [ 152.779188][ T6878] ? locks_remove_posix+0x630/0x630 [ 152.784418][ T6878] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 152.784977][ T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 152.789540][ T6878] ? ima_file_free+0x16b/0x4b0 [ 152.789568][ T6878] ? snd_pcm_oss_sync+0x2b5/0xa40 [ 152.789592][ T6878] ? mutex_lock_nested+0x20/0x20 [ 152.813329][ T6878] ? __fsnotify_parent+0x6d8/0x7c0 [ 152.816304][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.818457][ T6878] snd_pcm_oss_sync+0x370/0xa40 [ 152.818494][ T6878] snd_pcm_oss_release+0x102/0x240 [ 152.836432][ T6878] ? snd_pcm_oss_open+0x1c50/0x1c50 [ 152.841662][ T6878] __fput+0x221/0x940 [ 152.845682][ T6878] __se_sys_close+0x15c/0x1e0 [ 152.850392][ T6878] do_syscall_64+0x55/0xb0 [ 152.854834][ T6878] ? clear_bhb_loop+0x40/0x90 [ 152.859547][ T6878] ? clear_bhb_loop+0x40/0x90 [ 152.864253][ T6878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.870172][ T6878] RIP: 0033:0x7f234af9fb19 [ 152.874609][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.894238][ T6878] RSP: 002b:00007f234be30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 152.902680][ T6878] RAX: ffffffffffffffda RBX: 00007f234b225fa0 RCX: 00007f234af9fb19 [ 152.910666][ T6878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 152.918639][ T6878] RBP: 00007f234b037b70 R08: 0000000000000000 R09: 0000000000000000 [ 152.926608][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.934573][ T6878] R13: 00007f234b226038 R14: 00007f234b225fa0 R15: 00007ffe95326fd8 [ 152.942552][ T6878] [ 152.948211][ T5846] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.071926][ T6854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.158383][ T5846] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 153.174611][ T9] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 153.196814][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.209234][ T9] wwan wwan0: port wwan0qmi0 attached [ 153.220605][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.253022][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.278673][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.297866][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.325869][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.344974][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.364250][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.398949][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.407323][ T6885] syzkaller0: entered promiscuous mode [ 153.412816][ T6885] syzkaller0: entered allmulticast mode [ 153.417706][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.435943][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.464711][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.473703][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.491872][ T9] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 3a:a6:51:31:ed:8b [ 153.503953][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.522933][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.531349][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.551395][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.575291][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.592702][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.615408][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.636361][ T9] usb 2-1: USB disconnect, device number 6 [ 153.653669][ T9] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 153.677696][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.741518][ T6890] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 153.761684][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.882108][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.029133][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.088014][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 154.127333][ T5846] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 154.229165][ T5846] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 154.360333][ T5846] usb 4-1: Product: syz [ 154.403786][ T5846] usb 4-1: Manufacturer: syz [ 154.449024][ T5846] usb 4-1: SerialNumber: syz [ 154.478044][ T5846] usb 4-1: config 0 descriptor?? [ 154.532387][ T5846] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 156.141875][ T175] usb 4-1: USB disconnect, device number 5 [ 156.161474][ T175] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 156.187724][ T5851] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.315031][ T6921] md: invalid raid superblock magic on ram4 [ 156.325242][ T6921] md: ram4 does not have a valid v0.0 superblock, not importing! [ 156.335617][ T6921] md: md_import_device returned -22 [ 156.388165][ T5851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.410476][ T6924] md: invalid raid superblock magic on ram5 [ 156.418911][ T5851] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.428156][ T5851] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 156.437405][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.449094][ T6924] md: ram5 does not have a valid v0.0 superblock, not importing! [ 156.458401][ T6924] md: md_import_device returned -22 [ 156.464861][ T6924] md: md2 stopped. [ 156.499545][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.010129][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.081986][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.551604][ T6876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.567465][ T6876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.579629][ T6876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.592380][ T6876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.775603][ T6876] syz.3.289 (6876) used greatest stack depth: 20840 bytes left [ 157.850613][ T6927] syzkaller0: entered promiscuous mode [ 157.857603][ T6927] syzkaller0: entered allmulticast mode [ 158.065047][ T6933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 159.030703][ T6942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 159.165432][ T23] usb 2-1: USB disconnect, device number 7 [ 159.225982][ T5849] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.197806][ T5849] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.215905][ T5849] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 160.235600][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.395013][ T6964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 160.816720][ T6963] FAULT_INJECTION: forcing a failure. [ 160.816720][ T6963] name fail_futex, interval 1, probability 0, space 0, times 0 [ 161.156359][ T5849] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 161.156900][ T6963] CPU: 1 PID: 6963 Comm: syz.1.312 Not tainted syzkaller #0 [ 161.169709][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 161.179780][ T6963] Call Trace: [ 161.183070][ T6963] [ 161.186014][ T6963] dump_stack_lvl+0x18c/0x250 [ 161.190718][ T6963] ? show_regs_print_info+0x20/0x20 [ 161.195935][ T6963] ? load_image+0x420/0x420 [ 161.200466][ T6963] should_fail_ex+0x394/0x4c0 [ 161.205167][ T6963] get_futex_key+0x134/0xf40 [ 161.209781][ T6963] ? futex_setup_timer+0xc0/0xc0 [ 161.214749][ T6963] futex_wait_setup+0xbc/0x270 [ 161.219536][ T6963] ? futex_wait_multiple+0x970/0x970 [ 161.224853][ T6963] futex_wait+0x1cf/0x640 [ 161.229212][ T6963] ? futex_wait_setup+0x270/0x270 [ 161.234261][ T6963] ? task_mm_cid_work+0x31d/0x770 [ 161.239328][ T6963] do_futex+0x2ff/0x3e0 [ 161.243502][ T6963] ? __ia32_sys_get_robust_list+0x110/0x110 [ 161.249409][ T6963] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 161.255494][ T6963] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.260718][ T6963] __se_sys_futex+0x3a9/0x440 [ 161.265423][ T6963] ? __x64_sys_futex+0xf0/0xf0 [ 161.270208][ T6963] ? __x64_sys_futex+0x21/0xf0 [ 161.274989][ T6963] do_syscall_64+0x55/0xb0 [ 161.279428][ T6963] ? clear_bhb_loop+0x40/0x90 [ 161.284125][ T6963] ? clear_bhb_loop+0x40/0x90 [ 161.288824][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.294739][ T6963] RIP: 0033:0x7faa36d9fb19 [ 161.299172][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.318801][ T6963] RSP: 002b:00007faa37bc30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 161.327242][ T6963] RAX: ffffffffffffffda RBX: 00007faa37025fa8 RCX: 00007faa36d9fb19 [ 161.331323][ T5849] wwan wwan0: port wwan0qmi0 attached [ 161.335211][ T6963] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa37025fa8 [ 161.348566][ T6963] RBP: 00007faa37025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 161.356551][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.364537][ T6963] R13: 00007faa37026038 R14: 00007fff1048cad0 R15: 00007fff1048cbb8 [ 161.372537][ T6963] [ 161.448929][ T5849] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 4e:be:b2:4d:77:89 [ 161.580947][ T6978] syzkaller0: entered promiscuous mode [ 161.593994][ T6978] syzkaller0: entered allmulticast mode [ 161.716959][ T5849] usb 3-1: USB disconnect, device number 5 [ 161.745108][ T5849] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 162.931304][ T5849] wwan wwan0: port wwan0qmi0 disconnected [ 163.011854][ T6993] netlink: 'syz.2.321': attribute type 12 has an invalid length. [ 163.295062][ T7000] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 164.054405][ T7006] FAULT_INJECTION: forcing a failure. [ 164.054405][ T7006] name failslab, interval 1, probability 0, space 0, times 0 [ 164.101345][ T7006] CPU: 0 PID: 7006 Comm: syz.1.324 Not tainted syzkaller #0 [ 164.108682][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 164.118758][ T7006] Call Trace: [ 164.122051][ T7006] [ 164.124992][ T7006] dump_stack_lvl+0x18c/0x250 [ 164.129696][ T7006] ? show_regs_print_info+0x20/0x20 [ 164.134920][ T7006] ? load_image+0x420/0x420 [ 164.139451][ T7006] ? __might_sleep+0xe0/0xe0 [ 164.144068][ T7006] ? __lock_acquire+0x7eb0/0x7eb0 [ 164.149112][ T7006] ? nfc_register_device+0x1b8/0x300 [ 164.154423][ T7006] should_fail_ex+0x394/0x4c0 [ 164.159127][ T7006] should_failslab+0x9/0x20 [ 164.163658][ T7006] slab_pre_alloc_hook+0x59/0x300 [ 164.168709][ T7006] kmem_cache_alloc_node+0x5e/0x320 [ 164.173928][ T7006] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 164.179841][ T7006] ? __alloc_skb+0x103/0x2c0 [ 164.184459][ T7006] __alloc_skb+0x103/0x2c0 [ 164.188897][ T7006] nfc_genl_device_added+0x2c/0x1f0 [ 164.194120][ T7006] nfc_register_device+0x1c0/0x300 [ 164.199259][ T7006] nci_register_device+0x8a3/0xa00 [ 164.204398][ T7006] ? nci_free_device+0x90/0x90 [ 164.209202][ T7006] ? __init_waitqueue_head+0xa8/0x140 [ 164.214599][ T7006] virtual_ncidev_open+0x12c/0x1a0 [ 164.219733][ T7006] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 164.224950][ T7006] misc_open+0x326/0x3a0 [ 164.229219][ T7006] chrdev_open+0x58c/0x600 [ 164.233659][ T7006] ? cd_forget+0x160/0x160 [ 164.238103][ T7006] ? fsnotify_perm+0x3ed/0x5e0 [ 164.242888][ T7006] do_dentry_open+0x880/0x14b0 [ 164.247676][ T7006] ? cd_forget+0x160/0x160 [ 164.252115][ T7006] path_openat+0x284f/0x3270 [ 164.256750][ T7006] ? verify_lock_unused+0x140/0x140 [ 164.261967][ T7006] ? do_filp_open+0x430/0x430 [ 164.266681][ T7006] do_filp_open+0x1f2/0x430 [ 164.271218][ T7006] ? vfs_tmpfile+0x620/0x620 [ 164.275852][ T7006] ? _raw_spin_unlock+0x28/0x40 [ 164.280728][ T7006] ? alloc_fd+0x590/0x640 [ 164.285087][ T7006] do_sys_openat2+0x134/0x1d0 [ 164.289792][ T7006] ? do_sys_open+0xe0/0xe0 [ 164.294231][ T7006] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 164.300224][ T7006] ? lock_chain_count+0x20/0x20 [ 164.305068][ T7006] __x64_sys_openat+0x139/0x160 [ 164.310004][ T7006] do_syscall_64+0x55/0xb0 [ 164.314433][ T7006] ? clear_bhb_loop+0x40/0x90 [ 164.319100][ T7006] ? clear_bhb_loop+0x40/0x90 [ 164.323763][ T7006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.329642][ T7006] RIP: 0033:0x7faa36d9fb19 [ 164.334064][ T7006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.353662][ T7006] RSP: 002b:00007faa37bc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.362067][ T7006] RAX: ffffffffffffffda RBX: 00007faa37025fa0 RCX: 00007faa36d9fb19 [ 164.370047][ T7006] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 164.378008][ T7006] RBP: 00007faa36e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 164.385964][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.393921][ T7006] R13: 00007faa37026038 R14: 00007faa37025fa0 R15: 00007fff1048cbb8 [ 164.401889][ T7006] [ 164.546493][ T9] libceph: connect (1)[c::]:6789 error -101 [ 164.552698][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 164.869302][ T7016] ceph: No mds server is up or the cluster is laggy [ 164.886380][ T9] libceph: connect (1)[c::]:6789 error -101 [ 165.114079][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 165.907956][ T7040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input25 [ 166.075928][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.711056][ T7046] FAULT_INJECTION: forcing a failure. [ 166.711056][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 166.739536][ T7046] CPU: 1 PID: 7046 Comm: syz.1.336 Not tainted syzkaller #0 [ 166.746882][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 166.756958][ T7046] Call Trace: [ 166.760257][ T7046] [ 166.763201][ T7046] dump_stack_lvl+0x18c/0x250 [ 166.767909][ T7046] ? show_regs_print_info+0x20/0x20 [ 166.773129][ T7046] ? load_image+0x420/0x420 [ 166.777658][ T7046] ? __might_sleep+0xe0/0xe0 [ 166.782269][ T7046] ? __lock_acquire+0x7eb0/0x7eb0 [ 166.787316][ T7046] ? nfc_register_device+0x1b8/0x300 [ 166.792632][ T7046] should_fail_ex+0x394/0x4c0 [ 166.797342][ T7046] should_failslab+0x9/0x20 [ 166.801856][ T7046] slab_pre_alloc_hook+0x59/0x300 [ 166.806876][ T7046] kmem_cache_alloc_node+0x5e/0x320 [ 166.812062][ T7046] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 166.817949][ T7046] ? __alloc_skb+0x103/0x2c0 [ 166.822529][ T7046] __alloc_skb+0x103/0x2c0 [ 166.826935][ T7046] nfc_genl_device_added+0x2c/0x1f0 [ 166.832128][ T7046] nfc_register_device+0x1c0/0x300 [ 166.837239][ T7046] nci_register_device+0x8a3/0xa00 [ 166.842347][ T7046] ? nci_free_device+0x90/0x90 [ 166.847106][ T7046] ? __init_waitqueue_head+0xa8/0x140 [ 166.852487][ T7046] virtual_ncidev_open+0x12c/0x1a0 [ 166.857614][ T7046] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 166.862813][ T7046] misc_open+0x326/0x3a0 [ 166.867056][ T7046] chrdev_open+0x58c/0x600 [ 166.871466][ T7046] ? cd_forget+0x160/0x160 [ 166.875884][ T7046] ? fsnotify_perm+0x3ed/0x5e0 [ 166.880666][ T7046] do_dentry_open+0x880/0x14b0 [ 166.885433][ T7046] ? cd_forget+0x160/0x160 [ 166.889849][ T7046] path_openat+0x284f/0x3270 [ 166.894443][ T7046] ? do_sys_openat2+0xda/0x1d0 [ 166.899207][ T7046] ? do_filp_open+0x430/0x430 [ 166.903895][ T7046] ? asan.module_dtor+0x20/0x20 [ 166.908745][ T7046] do_filp_open+0x1f2/0x430 [ 166.913241][ T7046] ? vfs_tmpfile+0x620/0x620 [ 166.917881][ T7046] ? _raw_spin_unlock+0x3a/0x40 [ 166.922736][ T7046] ? alloc_fd+0x590/0x640 [ 166.927060][ T7046] do_sys_openat2+0x134/0x1d0 [ 166.931731][ T7046] ? do_sys_open+0xe0/0xe0 [ 166.936139][ T7046] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 166.942119][ T7046] ? lock_chain_count+0x20/0x20 [ 166.946994][ T7046] __x64_sys_openat+0x139/0x160 [ 166.951871][ T7046] do_syscall_64+0x55/0xb0 [ 166.956281][ T7046] ? clear_bhb_loop+0x40/0x90 [ 166.960979][ T7046] ? clear_bhb_loop+0x40/0x90 [ 166.965659][ T7046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.971545][ T7046] RIP: 0033:0x7faa36d9fb19 [ 166.975948][ T7046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.995544][ T7046] RSP: 002b:00007faa37bc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.003948][ T7046] RAX: ffffffffffffffda RBX: 00007faa37025fa0 RCX: 00007faa36d9fb19 [ 167.011917][ T7046] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 167.019974][ T7046] RBP: 00007faa36e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 167.027951][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.035915][ T7046] R13: 00007faa37026038 R14: 00007faa37025fa0 R15: 00007fff1048cbb8 [ 167.043889][ T7046] [ 167.127498][ T7052] bond0: entered promiscuous mode [ 167.132620][ T7052] bond_slave_0: entered promiscuous mode [ 167.168275][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.179799][ T7052] bond_slave_1: entered promiscuous mode [ 167.207924][ T23] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 167.223147][ T7052] batadv0: entered promiscuous mode [ 167.238260][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.246501][ T7052] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 167.274917][ T7052] bond0: left promiscuous mode [ 167.280077][ T7052] bond_slave_0: left promiscuous mode [ 167.289237][ T7052] bond_slave_1: left promiscuous mode [ 167.296495][ T7052] batadv0: left promiscuous mode [ 167.505162][ T23] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 167.642686][ T23] wwan wwan0: port wwan0qmi0 attached [ 167.740357][ T7036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.847232][ T7036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.297389][ T23] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 9e:1b:2f:f3:67:73 [ 168.469181][ T7066] syzkaller0: entered promiscuous mode [ 168.495172][ T7066] syzkaller0: entered allmulticast mode [ 168.550824][ T23] usb 1-1: USB disconnect, device number 5 [ 168.558820][ T23] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 168.844445][ T23] wwan wwan0: port wwan0qmi0 disconnected [ 169.342074][ T7082] pim6reg: entered allmulticast mode [ 169.373448][ T7082] pim6reg: left allmulticast mode [ 170.242802][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 170.343949][ T7092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input26 [ 171.285976][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.467931][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.490643][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.514145][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 171.540240][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 171.550488][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.562714][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.581496][ T9] usb 4-1: config 0 descriptor?? [ 172.003347][ T7103] pim6reg: entered allmulticast mode [ 172.010568][ T7103] pim6reg: left allmulticast mode [ 172.175953][ T5849] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.197667][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 172.203703][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 172.217089][ T9] usb 4-1: USB disconnect, device number 6 [ 172.378575][ T7119] UDC core: g1: couldn't find an available UDC or it's busy [ 172.400129][ T5849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.441821][ T5849] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 172.467164][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.616065][ T7123] FAULT_INJECTION: forcing a failure. [ 172.616065][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 172.642306][ T7123] CPU: 0 PID: 7123 Comm: syz.2.358 Not tainted syzkaller #0 [ 172.649666][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.659745][ T7123] Call Trace: [ 172.663048][ T7123] [ 172.665992][ T7123] dump_stack_lvl+0x18c/0x250 [ 172.670704][ T7123] ? show_regs_print_info+0x20/0x20 [ 172.675935][ T7123] ? load_image+0x420/0x420 [ 172.680467][ T7123] ? __might_sleep+0xe0/0xe0 [ 172.685085][ T7123] ? __lock_acquire+0x7eb0/0x7eb0 [ 172.690139][ T7123] should_fail_ex+0x394/0x4c0 [ 172.694842][ T7123] should_failslab+0x9/0x20 [ 172.699364][ T7123] slab_pre_alloc_hook+0x59/0x300 [ 172.704418][ T7123] kmem_cache_alloc+0x5a/0x2d0 [ 172.709210][ T7123] ? security_inode_alloc+0x34/0x110 [ 172.714527][ T7123] security_inode_alloc+0x34/0x110 [ 172.719669][ T7123] inode_init_always+0x914/0xc90 [ 172.724637][ T7123] new_inode_pseudo+0x95/0x1d0 [ 172.729426][ T7123] __sock_create+0x12d/0x940 [ 172.734048][ T7123] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 172.740056][ T7123] __sys_socket+0xd7/0x1b0 [ 172.744553][ T7123] __x64_sys_socket+0x7a/0x90 [ 172.749292][ T7123] do_syscall_64+0x55/0xb0 [ 172.753740][ T7123] ? clear_bhb_loop+0x40/0x90 [ 172.758448][ T7123] ? clear_bhb_loop+0x40/0x90 [ 172.763147][ T7123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.769067][ T7123] RIP: 0033:0x7f234af9fb19 [ 172.773502][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.793134][ T7123] RSP: 002b:00007f234be30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 172.801580][ T7123] RAX: ffffffffffffffda RBX: 00007f234b225fa0 RCX: 00007f234af9fb19 [ 172.809569][ T7123] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 172.817560][ T7123] RBP: 00007f234b037b70 R08: 0000000000000000 R09: 0000000000000000 [ 172.825550][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.833535][ T7123] R13: 00007f234b226038 R14: 00007f234b225fa0 R15: 00007ffe95326fd8 [ 172.841547][ T7123] [ 172.923806][ T7128] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 173.213747][ T7116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.279922][ T5849] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 173.344515][ T7116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.441561][ T5849] wwan wwan0: port wwan0qmi0 attached [ 173.525071][ T7123] socket: no more sockets [ 173.568946][ T5849] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 46:e2:55:ed:b9:10 [ 173.648282][ T5849] usb 1-1: USB disconnect, device number 6 [ 173.674819][ T5849] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 173.748390][ T5849] wwan wwan0: port wwan0qmi0 disconnected [ 175.358766][ T7168] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 175.439060][ T7164] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 175.786031][ T5846] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.218158][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.243547][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.271869][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 176.291166][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.301135][ T5846] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.315155][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.325767][ T5846] usb 2-1: config 0 descriptor?? [ 176.795377][ T7166] pim6reg: entered allmulticast mode [ 176.802888][ T7166] pim6reg: left allmulticast mode [ 176.939242][ T5846] usbhid 2-1:0.0: can't add hid device: -71 [ 176.951535][ T5846] usbhid: probe of 2-1:0.0 failed with error -71 [ 176.963939][ T5846] usb 2-1: USB disconnect, device number 8 [ 178.320809][ T7212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input29 [ 179.709577][ T5849] libceph: connect (1)[c::]:6789 error -22 [ 179.724046][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 179.735926][ T7230] ceph: No mds server is up or the cluster is laggy [ 181.439106][ T7253] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 181.616155][ T5851] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 181.889351][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.020359][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.144891][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 182.215018][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.284701][ T5851] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.315885][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.438121][ T5851] usb 3-1: config 0 descriptor?? [ 182.849162][ T7250] pim6reg: entered allmulticast mode [ 182.856538][ T7250] pim6reg: left allmulticast mode [ 183.107099][ T5851] usbhid 3-1:0.0: can't add hid device: -71 [ 183.113148][ T5851] usbhid: probe of 3-1:0.0 failed with error -71 [ 183.142121][ T5851] usb 3-1: USB disconnect, device number 6 [ 184.436133][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'. [ 184.571735][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.486244][ T7295] rxe_eth0 speed is unknown, defaulting to 1000 [ 187.108558][ T7305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 187.890930][ T7300] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 188.476274][ T5849] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 188.689495][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.741677][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.780939][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 188.812571][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.856589][ T5849] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.874033][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.917967][ T5849] usb 2-1: config 0 descriptor?? [ 189.009302][ T7320] md: serialize_policy is only effective for raid1 [ 189.017357][ T7320] md: serialize_policy is only effective for raid1 [ 189.285838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 189.339276][ T7313] pim6reg: entered allmulticast mode [ 189.346497][ T7313] pim6reg: left allmulticast mode [ 190.026086][ T7335] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 190.221055][ T7334] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 190.414152][ T7341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input33 [ 190.735832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 190.765831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 191.354304][ T5849] usbhid 2-1:0.0: can't add hid device: -71 [ 191.379459][ T5849] usbhid: probe of 2-1:0.0 failed with error -71 [ 191.448946][ T5849] usb 2-1: USB disconnect, device number 9 [ 191.826134][ T5849] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.038100][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.074593][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.112762][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 192.164796][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.329522][ T7349] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 192.348688][ T5849] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.358254][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.076495][ T5849] usb 2-1: config 0 descriptor?? [ 194.249403][ T7347] pim6reg: entered allmulticast mode [ 194.273575][ T7347] pim6reg: left allmulticast mode [ 194.315593][ T8] libceph: connect (1)[c::]:6789 error -101 [ 194.411246][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.417637][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.444438][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 194.587714][ T7365] ceph: No mds server is up or the cluster is laggy [ 194.846211][ T8] libceph: connect (1)[c::]:6789 error -101 [ 194.912889][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 195.451061][ T7381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input34 [ 195.695819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 196.065828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 196.436916][ T7390] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 196.492664][ T7389] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.636054][ T5849] usbhid 2-1:0.0: can't add hid device: -71 [ 196.642087][ T5849] usbhid: probe of 2-1:0.0 failed with error -71 [ 196.654751][ T5849] usb 2-1: USB disconnect, device number 10 [ 196.676814][ T7387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 197.240526][ T7396] md: serialize_policy is only effective for raid1 [ 197.807221][ T7404] md: serialize_policy is only effective for raid1 [ 197.856440][ T7404] md: serialize_policy is only effective for raid1 [ 199.184503][ T5771] libceph: connect (1)[c::]:6789 error -22 [ 199.206480][ T7410] ceph: No mds server is up or the cluster is laggy [ 199.241551][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 200.117440][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.127468][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.150821][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.159165][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.176552][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 200.183960][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.426749][ T7415] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.699794][ T7424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input36 [ 201.627452][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 201.627491][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 201.946175][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 202.158347][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.223252][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.254916][ T5099] Bluetooth: hci4: command tx timeout [ 202.275309][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 202.295874][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.305578][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.309768][ T7433] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 202.328517][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.342662][ T8] usb 3-1: config 0 descriptor?? [ 202.374315][ T7434] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 202.633790][ T7415] chnl_net:caif_netlink_parms(): no params data found [ 202.662552][ T7432] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 202.815012][ T7415] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.822387][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.829823][ T7415] bridge_slave_0: entered allmulticast mode [ 202.837458][ T7415] bridge_slave_0: entered promiscuous mode [ 202.849983][ T7423] pim6reg: entered allmulticast mode [ 202.856260][ T7415] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.863582][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.870979][ T7415] bridge_slave_1: entered allmulticast mode [ 202.878480][ T7415] bridge_slave_1: entered promiscuous mode [ 202.923464][ T7415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.956140][ T7423] pim6reg: left allmulticast mode [ 203.152719][ T7415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.265692][ T7415] team0: Port device team_slave_0 added [ 203.276058][ T7415] team0: Port device team_slave_1 added [ 203.408785][ T7415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.415766][ T7415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.634470][ T7415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.742189][ T7415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.788258][ T7415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.907484][ T7415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.015845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 204.325947][ T5099] Bluetooth: hci4: command tx timeout [ 204.845820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 205.182509][ T7415] hsr_slave_0: entered promiscuous mode [ 205.396658][ T7415] hsr_slave_1: entered promiscuous mode [ 205.438776][ T7452] ceph: No mds server is up or the cluster is laggy [ 205.466080][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 205.466238][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 205.537681][ T7451] FAULT_INJECTION: forcing a failure. [ 205.537681][ T7451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.551022][ T7451] CPU: 0 PID: 7451 Comm: syz.1.446 Not tainted syzkaller #0 [ 205.558320][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.568373][ T7451] Call Trace: [ 205.571638][ T7451] [ 205.574555][ T7451] dump_stack_lvl+0x18c/0x250 [ 205.579232][ T7451] ? show_regs_print_info+0x20/0x20 [ 205.584415][ T7451] ? load_image+0x420/0x420 [ 205.588901][ T7451] ? __might_fault+0xaa/0x120 [ 205.593563][ T7451] ? __lock_acquire+0x7eb0/0x7eb0 [ 205.598603][ T7451] should_fail_ex+0x394/0x4c0 [ 205.603303][ T7451] _copy_to_user+0x2f/0xa0 [ 205.607732][ T7451] do_fb_ioctl+0x69f/0x760 [ 205.612176][ T7451] ? fb_release+0x140/0x140 [ 205.616729][ T7451] ? __fget_files+0x28/0x460 [ 205.621353][ T7451] ? bpf_lsm_file_ioctl+0x9/0x10 [ 205.626310][ T7451] ? security_file_ioctl+0x80/0xa0 [ 205.631437][ T7451] ? fb_write+0x220/0x220 [ 205.635780][ T7451] __se_sys_ioctl+0xfd/0x170 [ 205.640397][ T7451] do_syscall_64+0x55/0xb0 [ 205.644836][ T7451] ? clear_bhb_loop+0x40/0x90 [ 205.649536][ T7451] ? clear_bhb_loop+0x40/0x90 [ 205.654248][ T7451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.660166][ T7451] RIP: 0033:0x7faa36d9fb19 [ 205.664592][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.684206][ T7451] RSP: 002b:00007faa37bc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.692611][ T7451] RAX: ffffffffffffffda RBX: 00007faa37025fa0 RCX: 00007faa36d9fb19 [ 205.700591][ T7451] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000004 [ 205.708581][ T7451] RBP: 00007faa36e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 205.716557][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.724520][ T7451] R13: 00007faa37026038 R14: 00007faa37025fa0 R15: 00007fff1048cbb8 [ 205.732502][ T7451] [ 205.862011][ T7415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.881455][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 205.913094][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 205.922873][ T7415] Cannot create hsr debugfs directory [ 206.086637][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 206.126369][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 206.156363][ T8] usb 3-1: USB disconnect, device number 7 [ 206.407131][ T5099] Bluetooth: hci4: command tx timeout [ 206.503782][ T7461] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input38 [ 207.111606][ T7467] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 207.268487][ T7465] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 207.358799][ T7415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.464359][ T7415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.493088][ T7415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.570365][ T7415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.624845][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.844383][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.900592][ T8] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 207.928113][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.980143][ T7415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.100077][ T7415] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.239623][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.246853][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.395200][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.402399][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.419659][ T8] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 208.452320][ T8] wwan wwan0: port wwan0qmi0 attached [ 208.489621][ T5099] Bluetooth: hci4: command tx timeout [ 208.942160][ T7469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.052276][ T8] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, d2:c6:14:a7:c1:85 [ 209.310957][ T7469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.390973][ T7415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.448408][ T8] usb 2-1: USB disconnect, device number 11 [ 209.468485][ T8] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 209.739972][ T8] wwan wwan0: port wwan0qmi0 disconnected [ 210.089871][ T7415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.116948][ T5849] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 211.158018][ T7415] veth0_vlan: entered promiscuous mode [ 211.247807][ T7504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input39 [ 211.372387][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.394229][ T7415] veth1_vlan: entered promiscuous mode [ 211.461415][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.525612][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 211.672765][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 211.874904][ T5849] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.903115][ T7415] veth0_macvtap: entered promiscuous mode [ 211.993158][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.019661][ T7415] veth1_macvtap: entered promiscuous mode [ 212.053918][ T5849] usb 2-1: config 0 descriptor?? [ 212.065539][ T7511] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 212.122029][ T7511] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 212.164734][ T7415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.234883][ T7415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.266054][ T7415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.287633][ T7509] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 212.296044][ T7415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.323153][ T7415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.354288][ T7415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.417008][ T7415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.516721][ T7415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.550735][ T7415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.571260][ T7415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.596182][ T7415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.619920][ T7415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.645971][ T7415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.688943][ T7415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.725059][ T7415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.776603][ T7415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.785343][ T7415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.916407][ T7415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.412607][ T7495] pim6reg: entered allmulticast mode [ 213.672526][ T7515] pim6reg: left allmulticast mode [ 214.103129][ T5033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.121557][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.134587][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.147178][ T5033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.156442][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.366690][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.396774][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 214.441345][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.713565][ T9] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 214.748217][ T9] wwan wwan0: port wwan0qmi0 attached [ 214.930981][ T9] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, d2:3e:a6:af:ac:6d [ 215.093320][ T7533] FAULT_INJECTION: forcing a failure. [ 215.093320][ T7533] name failslab, interval 1, probability 0, space 0, times 0 [ 215.247138][ T7533] CPU: 1 PID: 7533 Comm: syz.4.435 Not tainted syzkaller #0 [ 215.254489][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 215.264565][ T7533] Call Trace: [ 215.267862][ T7533] [ 215.270811][ T7533] dump_stack_lvl+0x18c/0x250 [ 215.275520][ T7533] ? show_regs_print_info+0x20/0x20 [ 215.280746][ T7533] ? load_image+0x420/0x420 [ 215.285274][ T7533] ? __lock_acquire+0x7eb0/0x7eb0 [ 215.290337][ T7533] should_fail_ex+0x394/0x4c0 [ 215.295046][ T7533] should_failslab+0x9/0x20 [ 215.299570][ T7533] slab_pre_alloc_hook+0x59/0x300 [ 215.304628][ T7533] ? apply_wqattrs_prepare+0x127/0xd00 [ 215.310118][ T7533] __kmem_cache_alloc_node+0x53/0x260 [ 215.315515][ T7533] ? apply_wqattrs_prepare+0x127/0xd00 [ 215.321011][ T7533] kmalloc_trace+0x2a/0xe0 [ 215.325459][ T7533] apply_wqattrs_prepare+0x127/0xd00 [ 215.330775][ T7533] ? apply_workqueue_attrs+0x36/0x180 [ 215.336204][ T7533] apply_workqueue_attrs+0xdb/0x180 [ 215.341429][ T7533] alloc_workqueue+0xc9a/0x1380 [ 215.346301][ T7533] ? __asan_memcpy+0x40/0x70 [ 215.350936][ T7533] ? snprintf+0xe9/0x140 [ 215.355202][ T7533] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 215.361126][ T7533] ? apply_workqueue_attrs+0x180/0x180 [ 215.366610][ T7533] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 215.372545][ T7533] nci_register_device+0x400/0xa00 [ 215.377690][ T7533] ? nci_free_device+0x90/0x90 [ 215.382481][ T7533] ? __init_waitqueue_head+0xa8/0x140 [ 215.387891][ T7533] virtual_ncidev_open+0x12c/0x1a0 [ 215.393024][ T7533] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 215.398239][ T7533] misc_open+0x326/0x3a0 [ 215.402509][ T7533] chrdev_open+0x58c/0x600 [ 215.406953][ T7533] ? cd_forget+0x160/0x160 [ 215.411397][ T7533] ? fsnotify_perm+0x3ed/0x5e0 [ 215.416185][ T7533] do_dentry_open+0x880/0x14b0 [ 215.420985][ T7533] ? cd_forget+0x160/0x160 [ 215.425433][ T7533] path_openat+0x284f/0x3270 [ 215.430069][ T7533] ? do_sys_openat2+0xda/0x1d0 [ 215.434860][ T7533] ? __x64_sys_openat+0x139/0x160 [ 215.439922][ T7533] ? verify_lock_unused+0x140/0x140 [ 215.445142][ T7533] ? do_filp_open+0x430/0x430 [ 215.449864][ T7533] do_filp_open+0x1f2/0x430 [ 215.454405][ T7533] ? vfs_tmpfile+0x620/0x620 [ 215.459033][ T7533] ? _raw_spin_unlock+0x28/0x40 [ 215.463914][ T7533] ? alloc_fd+0x590/0x640 [ 215.468241][ T7533] do_sys_openat2+0x134/0x1d0 [ 215.472926][ T7533] ? do_sys_open+0xe0/0xe0 [ 215.477346][ T7533] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.483332][ T7533] ? lock_chain_count+0x20/0x20 [ 215.488189][ T7533] __x64_sys_openat+0x139/0x160 [ 215.493046][ T7533] do_syscall_64+0x55/0xb0 [ 215.497472][ T7533] ? clear_bhb_loop+0x40/0x90 [ 215.502156][ T7533] ? clear_bhb_loop+0x40/0x90 [ 215.506858][ T7533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.512777][ T7533] RIP: 0033:0x7fc3cf79fb19 [ 215.517222][ T7533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.536846][ T7533] RSP: 002b:00007fc3d05f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.545295][ T7533] RAX: ffffffffffffffda RBX: 00007fc3cfa26270 RCX: 00007fc3cf79fb19 [ 215.553286][ T7533] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 215.561282][ T7533] RBP: 00007fc3cf837b70 R08: 0000000000000000 R09: 0000000000000000 [ 215.569270][ T7533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.577258][ T7533] R13: 00007fc3cfa26308 R14: 00007fc3cfa26270 R15: 00007ffd737e1b78 [ 215.585271][ T7533] [ 215.731870][ T5849] usbhid 2-1:0.0: can't add hid device: -71 [ 215.752372][ T5849] usbhid: probe of 2-1:0.0 failed with error -71 [ 215.798910][ T5849] usb 2-1: USB disconnect, device number 12 [ 215.835973][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.880911][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.919989][ T9] usb 4-1: USB disconnect, device number 7 [ 215.993957][ T9] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 216.138525][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 216.147063][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 216.185046][ T7537] ceph: No mds server is up or the cluster is laggy [ 216.540824][ T7544] md: serialize_policy is only effective for raid1 [ 216.638676][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 216.935170][ T7554] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 217.024344][ T7550] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 217.915132][ T7561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input42 [ 219.537706][ T7580] FAULT_INJECTION: forcing a failure. [ 219.537706][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 219.636328][ T7580] CPU: 1 PID: 7580 Comm: syz.4.477 Not tainted syzkaller #0 [ 219.643685][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 219.653763][ T7580] Call Trace: [ 219.657061][ T7580] [ 219.660007][ T7580] dump_stack_lvl+0x18c/0x250 [ 219.664713][ T7580] ? show_regs_print_info+0x20/0x20 [ 219.669935][ T7580] ? load_image+0x420/0x420 [ 219.674458][ T7580] ? __lock_acquire+0x7eb0/0x7eb0 [ 219.679503][ T7580] ? kasan_quarantine_put+0xd8/0x220 [ 219.684823][ T7580] should_fail_ex+0x394/0x4c0 [ 219.689526][ T7580] should_failslab+0x9/0x20 [ 219.694044][ T7580] slab_pre_alloc_hook+0x59/0x300 [ 219.699099][ T7580] kmem_cache_alloc_lru+0x4d/0x2c0 [ 219.704230][ T7580] ? sock_alloc_inode+0x28/0xc0 [ 219.709109][ T7580] sock_alloc_inode+0x28/0xc0 [ 219.713806][ T7580] ? sockfs_init_fs_context+0xb0/0xb0 [ 219.719207][ T7580] new_inode_pseudo+0x63/0x1d0 [ 219.724000][ T7580] __sock_create+0x12d/0x940 [ 219.728628][ T7580] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 219.734651][ T7580] __sys_socket+0xd7/0x1b0 [ 219.739095][ T7580] __x64_sys_socket+0x7a/0x90 [ 219.743790][ T7580] do_syscall_64+0x55/0xb0 [ 219.748229][ T7580] ? clear_bhb_loop+0x40/0x90 [ 219.752940][ T7580] ? clear_bhb_loop+0x40/0x90 [ 219.757646][ T7580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.763562][ T7580] RIP: 0033:0x7fc3cf79fb19 [ 219.767996][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.787633][ T7580] RSP: 002b:00007fc3d065a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 219.796075][ T7580] RAX: ffffffffffffffda RBX: 00007fc3cfa25fa0 RCX: 00007fc3cf79fb19 [ 219.804072][ T7580] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 219.812065][ T7580] RBP: 00007fc3cf837b70 R08: 0000000000000000 R09: 0000000000000000 [ 219.820056][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.828048][ T7580] R13: 00007fc3cfa26038 R14: 00007fc3cfa25fa0 R15: 00007ffd737e1b78 [ 219.836057][ T7580] [ 219.886160][ T7580] socket: no more sockets [ 219.939091][ T7588] FAULT_INJECTION: forcing a failure. [ 219.939091][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 220.000888][ T7588] CPU: 1 PID: 7588 Comm: syz.2.475 Not tainted syzkaller #0 [ 220.008241][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.018320][ T7588] Call Trace: [ 220.021623][ T7588] [ 220.024589][ T7588] dump_stack_lvl+0x18c/0x250 [ 220.029301][ T7588] ? show_regs_print_info+0x20/0x20 [ 220.034529][ T7588] ? load_image+0x420/0x420 [ 220.039071][ T7588] should_fail_ex+0x394/0x4c0 [ 220.043776][ T7588] should_failslab+0x9/0x20 [ 220.048297][ T7588] slab_pre_alloc_hook+0x59/0x300 [ 220.053345][ T7588] ? proc_thread_self_get_link+0xfc/0x190 [ 220.059095][ T7588] __kmem_cache_alloc_node+0x53/0x260 [ 220.064491][ T7588] ? proc_thread_self_get_link+0xfc/0x190 [ 220.070234][ T7588] kmalloc_trace+0x2a/0xe0 [ 220.074686][ T7588] proc_thread_self_get_link+0xfc/0x190 [ 220.080263][ T7588] ? proc_setup_thread_self+0x2c0/0x2c0 [ 220.085835][ T7588] pick_link+0x6a8/0xdd0 [ 220.090110][ T7588] step_into+0xc18/0xee0 [ 220.094382][ T7588] ? set_root+0x3a0/0x3a0 [ 220.098736][ T7588] ? lookup_fast+0x14a/0x4c0 [ 220.103346][ T7588] ? security_inode_permission+0xb0/0xf0 [ 220.109003][ T7588] link_path_walk+0x748/0xe40 [ 220.113707][ T7588] ? handle_lookup_down+0x130/0x130 [ 220.118913][ T7588] path_openat+0x291/0x3270 [ 220.123432][ T7588] ? do_sys_openat2+0xda/0x1d0 [ 220.128190][ T7588] ? __x64_sys_open+0x11f/0x140 [ 220.133040][ T7588] ? verify_lock_unused+0x140/0x140 [ 220.138236][ T7588] ? do_filp_open+0x430/0x430 [ 220.142923][ T7588] do_filp_open+0x1f2/0x430 [ 220.147422][ T7588] ? vfs_tmpfile+0x620/0x620 [ 220.152020][ T7588] ? _raw_spin_unlock+0x28/0x40 [ 220.156883][ T7588] ? alloc_fd+0x590/0x640 [ 220.161218][ T7588] do_sys_openat2+0x134/0x1d0 [ 220.165895][ T7588] ? do_sys_open+0xe0/0xe0 [ 220.170304][ T7588] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 220.176282][ T7588] ? lock_chain_count+0x20/0x20 [ 220.181129][ T7588] __x64_sys_open+0x11f/0x140 [ 220.185810][ T7588] do_syscall_64+0x55/0xb0 [ 220.190219][ T7588] ? clear_bhb_loop+0x40/0x90 [ 220.194905][ T7588] ? clear_bhb_loop+0x40/0x90 [ 220.199596][ T7588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.205488][ T7588] RIP: 0033:0x7f234af9fb19 [ 220.209900][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.229501][ T7588] RSP: 002b:00007f234be30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 220.237910][ T7588] RAX: ffffffffffffffda RBX: 00007f234b225fa0 RCX: 00007f234af9fb19 [ 220.245901][ T7588] RDX: 00000000000003eb RSI: 0000000000000000 RDI: 0000200000000000 [ 220.253870][ T7588] RBP: 00007f234b037b70 R08: 0000000000000000 R09: 0000000000000000 [ 220.261862][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.269831][ T7588] R13: 00007f234b226038 R14: 00007f234b225fa0 R15: 00007ffe95326fd8 [ 220.277811][ T7588] [ 220.285899][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 220.517516][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.534176][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 220.595933][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.842692][ T7598] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 220.863971][ T9] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 220.895465][ T9] wwan wwan0: port wwan0qmi0 attached [ 220.908687][ T7598] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 221.073116][ T7602] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input43 [ 221.242457][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.278492][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.906045][ T7595] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 222.716904][ T9] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 66:c4:04:31:7a:1e [ 222.730698][ T9] usb 4-1: USB disconnect, device number 8 [ 222.739259][ T9] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 222.939832][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 224.625991][ T7633] md: serialize_policy is only effective for raid1 [ 224.786248][ T7637] md: serialize_policy is only effective for raid1 [ 224.882171][ T7641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input45 [ 226.097977][ T7650] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 226.261102][ T7650] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 226.275895][ T7648] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 226.343274][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 226.542268][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.575206][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 226.618000][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.674002][ T7658] FAULT_INJECTION: forcing a failure. [ 226.674002][ T7658] name failslab, interval 1, probability 0, space 0, times 0 [ 226.745974][ T7658] CPU: 0 PID: 7658 Comm: syz.4.499 Not tainted syzkaller #0 [ 226.753329][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.763409][ T7658] Call Trace: [ 226.766709][ T7658] [ 226.769654][ T7658] dump_stack_lvl+0x18c/0x250 [ 226.774363][ T7658] ? show_regs_print_info+0x20/0x20 [ 226.779593][ T7658] ? load_image+0x420/0x420 [ 226.784135][ T7658] ? __might_sleep+0xe0/0xe0 [ 226.788752][ T7658] ? __lock_acquire+0x7eb0/0x7eb0 [ 226.793802][ T7658] should_fail_ex+0x394/0x4c0 [ 226.798507][ T7658] should_failslab+0x9/0x20 [ 226.803036][ T7658] slab_pre_alloc_hook+0x59/0x300 [ 226.808083][ T7658] kmem_cache_alloc+0x5a/0x2d0 [ 226.812867][ T7658] ? security_inode_alloc+0x34/0x110 [ 226.818179][ T7658] security_inode_alloc+0x34/0x110 [ 226.823320][ T7658] inode_init_always+0x914/0xc90 [ 226.828291][ T7658] new_inode_pseudo+0x95/0x1d0 [ 226.833081][ T7658] __sock_create+0x12d/0x940 [ 226.837707][ T7658] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 226.843718][ T7658] __sys_socket+0xd7/0x1b0 [ 226.848160][ T7658] __x64_sys_socket+0x7a/0x90 [ 226.852861][ T7658] do_syscall_64+0x55/0xb0 [ 226.857302][ T7658] ? clear_bhb_loop+0x40/0x90 [ 226.862005][ T7658] ? clear_bhb_loop+0x40/0x90 [ 226.866708][ T7658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.872626][ T7658] RIP: 0033:0x7fc3cf79fb19 [ 226.877057][ T7658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.896690][ T7658] RSP: 002b:00007fc3d065a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 226.905128][ T7658] RAX: ffffffffffffffda RBX: 00007fc3cfa25fa0 RCX: 00007fc3cf79fb19 [ 226.913125][ T7658] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 226.921113][ T7658] RBP: 00007fc3cf837b70 R08: 0000000000000000 R09: 0000000000000000 [ 226.929103][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.937089][ T7658] R13: 00007fc3cfa26038 R14: 00007fc3cfa25fa0 R15: 00007ffd737e1b78 [ 226.945095][ T7658] [ 227.076111][ T7658] socket: no more sockets [ 227.087336][ T9] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 227.128336][ T9] wwan wwan0: port wwan0qmi0 attached [ 227.305918][ T9] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, aa:cf:a2:bb:c1:72 [ 227.453349][ T7670] jffs2: notice: (7670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 227.500960][ T7652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.556379][ T7652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.596409][ T7525] usb 4-1: USB disconnect, device number 9 [ 227.604214][ T7525] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 227.743873][ T7674] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input47 [ 228.691108][ T7525] wwan wwan0: port wwan0qmi0 disconnected [ 228.814117][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.503'. [ 229.285645][ T7690] md: serialize_policy is only effective for raid1 [ 229.391144][ T7696] md: serialize_policy is only effective for raid1 [ 230.859819][ T7711] FAULT_INJECTION: forcing a failure. [ 230.859819][ T7711] name fail_futex, interval 1, probability 0, space 0, times 0 [ 230.877704][ T7711] CPU: 1 PID: 7711 Comm: syz.4.511 Not tainted syzkaller #0 [ 230.885041][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.895123][ T7711] Call Trace: [ 230.898423][ T7711] [ 230.901375][ T7711] dump_stack_lvl+0x18c/0x250 [ 230.906085][ T7711] ? show_regs_print_info+0x20/0x20 [ 230.911314][ T7711] ? load_image+0x420/0x420 [ 230.915846][ T7711] ? kasan_set_track+0x5f/0x70 [ 230.920622][ T7711] ? kasan_set_track+0x4e/0x70 [ 230.925378][ T7711] should_fail_ex+0x394/0x4c0 [ 230.930094][ T7711] get_futex_key+0x134/0xf40 [ 230.934712][ T7711] ? futex_setup_timer+0xc0/0xc0 [ 230.939676][ T7711] futex_wake+0x127/0x4f0 [ 230.944013][ T7711] ? futex_wake_mark+0x150/0x150 [ 230.948947][ T7711] ? kasan_quarantine_put+0xd8/0x220 [ 230.954244][ T7711] do_futex+0x35d/0x3e0 [ 230.958403][ T7711] ? __ia32_sys_get_robust_list+0x110/0x110 [ 230.964335][ T7711] __se_sys_futex+0x3a9/0x440 [ 230.969015][ T7711] ? __x64_sys_futex+0xf0/0xf0 [ 230.973779][ T7711] ? __x64_sys_futex+0x21/0xf0 [ 230.978539][ T7711] do_syscall_64+0x55/0xb0 [ 230.982981][ T7711] ? clear_bhb_loop+0x40/0x90 [ 230.987658][ T7711] ? clear_bhb_loop+0x40/0x90 [ 230.992336][ T7711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.998231][ T7711] RIP: 0033:0x7fc3cf79fb19 [ 231.002641][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.022241][ T7711] RSP: 002b:00007fc3d065a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 231.030651][ T7711] RAX: ffffffffffffffda RBX: 00007fc3cfa25fa8 RCX: 00007fc3cf79fb19 [ 231.038618][ T7711] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc3cfa25fac [ 231.046580][ T7711] RBP: 00007fc3cfa25fa0 R08: 0000000000745b08 R09: 0000000000000000 [ 231.054543][ T7711] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 231.062509][ T7711] R13: 00007fc3cfa26038 R14: 00007ffd737e1a90 R15: 00007ffd737e1b78 [ 231.070487][ T7711] [ 231.073515][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.109254][ T7718] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 231.213680][ T7720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input48 [ 231.372781][ T7722] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 232.476548][ T7710] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 232.635889][ T57] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 232.837487][ T57] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.848752][ T57] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 232.885841][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.125505][ T57] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 233.154686][ T57] wwan wwan0: port wwan0qmi0 attached [ 233.338549][ T57] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 6a:6f:22:35:0c:04 [ 233.532129][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.556219][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.596346][ T9] usb 4-1: USB disconnect, device number 10 [ 233.604990][ T9] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 234.063688][ T5851] libceph: connect (1)[c::]:6789 error -22 [ 234.069814][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 234.105529][ T7747] ceph: No mds server is up or the cluster is laggy [ 234.189615][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 234.327074][ T57] libceph: connect (1)[c::]:6789 error -22 [ 234.333035][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 234.516532][ T7756] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input50 [ 235.937579][ T7774] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 235.974006][ T7774] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 236.547818][ T7770] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 237.425943][ T7525] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 237.756270][ T7525] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.809381][ T7525] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 237.846606][ T7525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.172056][ T7525] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 238.268863][ T7525] wwan wwan0: port wwan0qmi0 attached [ 238.630991][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.718940][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.775623][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.803818][ T7525] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 46:c3:08:30:66:74 [ 238.910014][ T7802] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input52 [ 239.756316][ T5771] usb 3-1: USB disconnect, device number 8 [ 239.764088][ T5771] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 240.301529][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.696458][ T5771] wwan wwan0: port wwan0qmi0 disconnected [ 240.855210][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.091764][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.773450][ T7829] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 241.822832][ T7829] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 241.956254][ T7832] Bluetooth: ISO socket layer initialized [ 242.130528][ T7828] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 242.468080][ T7837] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input54 [ 244.465916][ T57] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 244.667569][ T57] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.685873][ T57] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 244.921114][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.146723][ T57] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 245.166625][ T57] wwan wwan0: port wwan0qmi0 attached [ 245.508371][ T57] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 2a:bb:32:9f:9a:01 [ 245.557348][ T7847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.587955][ T7847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.610125][ T5851] usb 4-1: USB disconnect, device number 11 [ 245.618172][ T5851] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 246.029136][ T5851] wwan wwan0: port wwan0qmi0 disconnected [ 246.126249][ T7868] md: serialize_policy is only effective for raid1 [ 246.326163][ T7874] md: serialize_policy is only effective for raid1 [ 246.861366][ T7886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input55 [ 247.617083][ T7890] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 248.725867][ T5851] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.955962][ T5851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.000377][ T5851] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 249.017421][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.279250][ T1148] hsr_slave_0: left promiscuous mode [ 249.296475][ T1148] hsr_slave_1: left promiscuous mode [ 249.348591][ T5851] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 249.377299][ T5851] wwan wwan0: port wwan0qmi0 attached [ 249.406179][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.413763][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.467852][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.475344][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.566633][ T1148] bridge_slave_1: left allmulticast mode [ 249.572338][ T1148] bridge_slave_1: left promiscuous mode [ 249.597801][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.757216][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.806178][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.017856][ T1148] bridge_slave_0: left allmulticast mode [ 250.023655][ T1148] bridge_slave_0: left promiscuous mode [ 250.029566][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.100983][ T7917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input56 [ 250.410858][ T1148] veth1_macvtap: left promiscuous mode [ 250.433154][ T1148] veth0_macvtap: left promiscuous mode [ 250.464811][ T1148] veth1_vlan: left promiscuous mode [ 250.476445][ T1148] veth0_vlan: left promiscuous mode [ 250.694015][ T7930] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 250.876211][ T7932] md: serialize_policy is only effective for raid1 [ 251.055583][ T7933] md: serialize_policy is only effective for raid1 [ 251.148824][ T7927] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 252.503372][ T7943] md/raid:md3: not clean -- starting background reconstruction [ 252.517303][ T7943] md/raid:md3: device ram7 operational as raid disk 1 [ 252.524119][ T7943] md/raid:md3: device ram6 operational as raid disk 0 [ 252.706028][ T7943] md/raid:md3: raid level 5 active with 2 out of 2 devices, algorithm 0 [ 252.745433][ T7943] md3: detected capacity change from 0 to 3584 [ 252.793315][ T7951] md: resync of RAID array md3 [ 252.837404][ T7951] md: md3: resync interrupted. [ 253.162470][ T7945] md3: detected capacity change from 3584 to 0 [ 253.213201][ T7945] md: md3 stopped. [ 254.330100][ T7323] syz.2.415 (7323) used greatest stack depth: 16936 bytes left [ 254.495928][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 254.768250][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.806262][ T27] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 254.825849][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.076532][ T27] qmi_wwan 2-1:1.0: cdc-wdm1: USB WDM device [ 255.114054][ T27] wwan wwan1: port wwan1qmi0 attached [ 255.529441][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.576313][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.620181][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 255.850582][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.857095][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.938719][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 256.161508][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.452248][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.747464][ T7972] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 257.210500][ T7971] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 258.955413][ T1148] bond0 (unregistering): Released all slaves [ 259.462827][ T5851] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 6e:88:f2:b9:6d:f7 [ 259.540504][ T27] qmi_wwan 2-1:1.0 wwan1: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 5e:83:70:7a:43:2c [ 259.554173][ T5851] usb 4-1: USB disconnect, device number 12 [ 259.568305][ T5851] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 259.600679][ T27] usb 2-1: USB disconnect, device number 13 [ 259.621053][ T27] qmi_wwan 2-1:1.0 wwan1: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 260.146312][ T5851] wwan wwan0: port wwan0qmi0 disconnected [ 260.236824][ T27] wwan wwan1: port wwan1qmi0 disconnected [ 260.741369][ T9] libceph: connect (1)[c::]:6789 error -22 [ 260.782254][ T7989] ceph: No mds server is up or the cluster is laggy [ 260.816464][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 261.756111][ T7998] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input59 [ 261.846142][ T5851] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 261.855296][ T8003] syz.3.590[8003]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 262.269675][ T5851] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 262.519279][ T5851] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 262.528446][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.744561][ T8005] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 262.796219][ T5851] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 262.819300][ T5851] wwan wwan0: port wwan0qmi0 attached [ 262.825035][ T8005] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 263.024360][ T5851] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, d6:89:d3:34:bb:02 [ 263.613499][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.013339][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.116791][ T5851] usb 3-1: USB disconnect, device number 9 [ 264.165369][ T5851] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 264.419907][ T5851] wwan wwan0: port wwan0qmi0 disconnected [ 264.893015][ T8031] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input60 [ 265.933210][ T8039] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 265.945000][ T8039] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 265.953434][ T8039] CPU: 0 PID: 8039 Comm: syz.2.601 Not tainted syzkaller #0 [ 265.960727][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 265.970780][ T8039] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 265.977114][ T8039] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 265.996717][ T8039] RSP: 0018:ffffc900045bf8e0 EFLAGS: 00010002 [ 266.002780][ T8039] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 266.010774][ T8039] RDX: ffffc9000d43b000 RSI: 0000000000001d82 RDI: 0000000000001d83 [ 266.018750][ T8039] RBP: ffffc900045bf9f8 R08: 0000000000000003 R09: 0000000000000004 [ 266.026717][ T8039] R10: dffffc0000000000 R11: fffff520008b7f1c R12: 0000000000000000 [ 266.035151][ T8039] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 266.043131][ T8039] FS: 00007f234be306c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 266.052068][ T8039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.058651][ T8039] CR2: 000000110c2efc61 CR3: 000000002cffd000 CR4: 00000000003506f0 [ 266.066631][ T8039] Call Trace: [ 266.069911][ T8039] [ 266.072846][ T8039] ? percpu_ref_switch_to_atomic+0xa0/0xa0 [ 266.078659][ T8039] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 266.084118][ T8039] ? _raw_spin_lock+0x40/0x40 [ 266.088792][ T8039] percpu_ref_kill_and_confirm+0x9b/0x130 [ 266.094511][ T8039] __mddev_suspend+0x2d1/0x630 [ 266.099272][ T8039] ? rcu_read_unlock+0xa0/0xa0 [ 266.104028][ T8039] ? _parse_integer_limit+0x19c/0x1e0 [ 266.109392][ T8039] ? kstrtoull+0x130/0x1d0 [ 266.113802][ T8039] raid_disks_store+0xb8/0x550 [ 266.118555][ T8039] ? md_attr_store+0x175/0x390 [ 266.123307][ T8039] ? __lock_acquire+0x7eb0/0x7eb0 [ 266.128322][ T8039] ? raid_disks_show+0x140/0x140 [ 266.133248][ T8039] ? do_raw_spin_unlock+0x121/0x230 [ 266.138439][ T8039] md_attr_store+0x19c/0x390 [ 266.143019][ T8039] ? sysfs_kf_read+0x360/0x360 [ 266.147769][ T8039] kernfs_fop_write_iter+0x3a4/0x520 [ 266.153046][ T8039] vfs_write+0x474/0x9a0 [ 266.157289][ T8039] ? file_end_write+0x250/0x250 [ 266.162133][ T8039] ? __fget_files+0x3fc/0x460 [ 266.166805][ T8039] ? __fdget_pos+0x2a3/0x330 [ 266.171386][ T8039] ? ksys_write+0x74/0x260 [ 266.175801][ T8039] ksys_write+0x151/0x260 [ 266.180136][ T8039] ? __ia32_sys_read+0x90/0x90 [ 266.184931][ T8039] ? lockdep_hardirqs_on+0x98/0x150 [ 266.190122][ T8039] do_syscall_64+0x55/0xb0 [ 266.194532][ T8039] ? clear_bhb_loop+0x40/0x90 [ 266.199206][ T8039] ? clear_bhb_loop+0x40/0x90 [ 266.203877][ T8039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.209761][ T8039] RIP: 0033:0x7f234af9fb19 [ 266.214169][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.233770][ T8039] RSP: 002b:00007f234be30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.242176][ T8039] RAX: ffffffffffffffda RBX: 00007f234b225fa0 RCX: 00007f234af9fb19 [ 266.250145][ T8039] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 266.258110][ T8039] RBP: 00007f234b037b70 R08: 0000000000000000 R09: 0000000000000000 [ 266.266070][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.274030][ T8039] R13: 00007f234b226038 R14: 00007f234b225fa0 R15: 00007ffe95326fd8 [ 266.282001][ T8039] [ 266.285025][ T8039] Modules linked in: [ 266.288918][ T8039] ---[ end trace 0000000000000000 ]--- [ 266.294358][ T8039] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 266.300684][ T8039] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 266.320282][ T8039] RSP: 0018:ffffc900045bf8e0 EFLAGS: 00010002 [ 266.326339][ T8039] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 266.334302][ T8039] RDX: ffffc9000d43b000 RSI: 0000000000001d82 RDI: 0000000000001d83 [ 266.342261][ T8039] RBP: ffffc900045bf9f8 R08: 0000000000000003 R09: 0000000000000004 [ 266.350220][ T8039] R10: dffffc0000000000 R11: fffff520008b7f1c R12: 0000000000000000 [ 266.358183][ T8039] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 266.366152][ T8039] FS: 00007f234be306c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 266.375070][ T8039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.381644][ T8039] CR2: 000000110c2efc61 CR3: 000000002cffd000 CR4: 00000000003506f0 [ 266.389611][ T8039] Kernel panic - not syncing: Fatal exception [ 266.395811][ T8039] Kernel Offset: disabled [ 266.400122][ T8039] Rebooting in 86400 seconds..