last executing test programs: 18m55.913667999s ago: executing program 0 (id=1): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a80102110040000800", 0x82, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c00060002000000", 0xa6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18m54.180157099s ago: executing program 0 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18m52.911222948s ago: executing program 0 (id=7): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 18m52.72970177s ago: executing program 3 (id=4): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0x2, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 18m49.782389093s ago: executing program 3 (id=9): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x122c022, &(0x7f00000001c0)=ANY=[]) 18m47.609947182s ago: executing program 0 (id=11): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r4, 0x534, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500dfd74d0589230000"], 0x104}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 18m47.588788063s ago: executing program 3 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) sendmsg$alg(r2, 0x0, 0x24044010) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) bind$inet(r3, 0x0, 0x0) listen(r3, 0xa) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10009010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) 18m32.086663367s ago: executing program 32 (id=11): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r4, 0x534, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500dfd74d0589230000"], 0x104}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 18m31.896206889s ago: executing program 33 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) sendmsg$alg(r2, 0x0, 0x24044010) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) bind$inet(r3, 0x0, 0x0) listen(r3, 0xa) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10009010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) 11m25.943257326s ago: executing program 2 (id=421): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r2, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) setsockopt(r2, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 11m20.474965069s ago: executing program 2 (id=424): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000880)=ANY=[], 0x5a8}, 0x1, 0x0, 0x0, 0x880}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000"], 0x48) r4 = getpgrp(0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x24c, 0x3, 0x7, 0x500, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x6}, [@nested={0xfe, 0x27, 0x0, 0x1, [@typed={0xa, 0x9e, 0x0, 0x0, @str='^!+{#\x00'}, @generic="5c56e77e18b816791d172adff2c16117d668e353303f7bb3d336ddd4c15b29c713fa9f7d0df5b975b5b30732eae9becd9904407b89", @generic="11f659180d8153295976fd7a0542ea8abcb4b48872a00df7baa7242aa30ccc2b0f66e65c951699ba9075a2c1e1d0563fb764850810d157d95d18347970e893f6ded14937fd4ebe0d6522589a4e8d2e90fe4722397d7d37803eb0580cec817bd715a3b7d2b3e149bde5e80ccb10496c3cb2a309e8504fa6f87455504e50a692810932a376ac01ac728028f22e84afb941c1ce8b2d9c19559a40313dd67e56e4f5e6c6a1ff27711d3a1c5915cb2c", @typed={0x8, 0x1d, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x9c}]}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x2}, @typed={0x5, 0xf6, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x51, 0x0, 0x0, @u32=0xff}, @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @typed={0x9, 0xfa, 0x0, 0x0, @str='&+/&\x00'}, @generic="0ffe3c7a", @generic="104d9d342d6a351318c6ba8f6f298cf5499bb94a08431413f1b9fb71f72f61c4a60cdc9ce482b676bb8952259c0ebe8dcac30a20f860b2a88fa244d0798e3163af3b4d49414f4c1060ccef48d0ed49aa6c6a538fcd9ccf0d04c9b2e4dc3659497ae30693ecc137d00326eb6793e42412621682236e3e24eb4cf96a1186acab0b0531137ab8cd8b84a7e8b0ee40faa20030d3ba1cac8a2674bf3f164ebfec8c4293e83cce19cacfb825b326d686f84d5ee248481f06f85361420e42dbabe0cd2deecd5a80a457976ce14e34e4e9275cfc6a9c0c3f765ea8df1c5af3c61fe73ab4673047ce23533b62405e41c0dfa531ec38d500773914"]}, 0x24c}, 0x1, 0x0, 0x0, 0x41}, 0x8900) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendfile(r3, r3, 0x0, 0x200000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0xfffffffe, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) 11m17.996852854s ago: executing program 2 (id=427): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) 11m12.313213981s ago: executing program 2 (id=432): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r2, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) setsockopt(r2, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 11m8.965636603s ago: executing program 2 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x8, 0x2, &(0x7f00000006c0)={0x77359400}, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000041000f01fefeffff0000", @ANYRES16=r1, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private1}, &(0x7f0000000540)=0x14) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r5, 0x402, 0xfb0fca2daa2f4273) getdents(r5, &(0x7f00000005c0)=""/180, 0xb4) 11m6.965010387s ago: executing program 2 (id=434): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="240000003f0005000a000000000000000202", 0x12, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c00060002000000", 0xa6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 10m50.25679723s ago: executing program 34 (id=434): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="240000003f0005000a000000000000000202", 0x12, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c00060002000000", 0xa6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.644672303s ago: executing program 4 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xae4d2f8ed3bfc611) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) shmdt(0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a8184f6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) 4.244790457s ago: executing program 4 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034400040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000002"], 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) 3.858649673s ago: executing program 4 (id=1056): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x800) sendmsg$sock(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)='1UB', 0x5dc}], 0x1}, 0x1) 2.929812927s ago: executing program 4 (id=1058): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x12) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)=0x4000) 2.703355269s ago: executing program 4 (id=1059): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b80)={0x84, &(0x7f00000016c0)={0x20, 0xb, 0x6, "71360c3bb31c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.449310325s ago: executing program 1 (id=1060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x9, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xfd, 0x0, '\x00', 0x0, 0x40000000003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x2fa4, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0x5, 0x81, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6, '\x00', 0xf9}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0x4, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xbc, 0x4, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xc, '\x00', 0x3}, {0x19, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0xf, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0x41}, {0xa, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x11, 0x2, 0x83, '\x00', 0x10}, {0x9, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x2, 0x4}]}}) 1.75368466s ago: executing program 1 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x0, 0x0) pread64$ublk_bdev(r0, 0x0, 0x0, 0x0) 1.654971849s ago: executing program 1 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/74, 0x4a) 1.387012203s ago: executing program 1 (id=1063): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0xc0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 805.692277ms ago: executing program 4 (id=1064): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x3, {"e249a38e7b0252a0eea064156561fd0a", "ea6f962fefc5a5a1d5cc0a6a16debd47", "47375848a00f6e08b5c9c718f83a0311"}, 0xfffffff9, 0x5}) 530.167262ms ago: executing program 1 (id=1065): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) 0s ago: executing program 1 (id=1066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xffffff7ffffffffb, 0xffffffffffffffff}, {0x6, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): SerialNumber=3 [ 1046.750950][ T5860] usb 2-1: Product: syz [ 1046.750965][ T5860] usb 2-1: Manufacturer: syz [ 1046.750982][ T5860] usb 2-1: SerialNumber: syz [ 1046.866806][ T5860] usb 2-1: config 0 descriptor?? [ 1046.893968][T10760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1046.940094][ T5860] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1046.998398][ T5860] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1047.048944][ T5860] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1047.174481][T10760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.179880][T10760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.554762][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.554803][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.554833][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.863562][ T5860] usb 2-1: USB disconnect, device number 19 [ 1048.095479][T10524] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1048.249180][ T5860] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1048.268438][ T5860] cyberjack 2-1:0.69: device disconnected [ 1048.401690][T10524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1048.435578][T10524] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1048.669527][T10524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.711550][T10629] hsr_slave_0: entered promiscuous mode [ 1048.713116][T10629] hsr_slave_1: entered promiscuous mode [ 1048.714024][T10629] debugfs: 'hsr0' already exists in 'hsr' [ 1048.714048][T10629] Cannot create hsr debugfs directory [ 1048.749650][T10524] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1048.822499][ T5694] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1048.822592][ T5694] usb 5-1: MIDIStreaming interface descriptor not found [ 1048.895666][T10524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1048.951726][ T5694] usb 5-1: USB disconnect, device number 14 [ 1049.517634][T10787] netlink: 'syz.4.796': attribute type 1 has an invalid length. [ 1051.188090][T10524] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1051.315275][T10791] udevd[10791]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.362717][T10524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1051.386837][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1051.506660][T10790] FAULT_INJECTION: forcing a failure. [ 1051.506660][T10790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.506703][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.4.797 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1051.506747][T10790] Tainted: [L]=SOFTLOCKUP [ 1051.506755][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1051.506768][T10790] Call Trace: [ 1051.506777][T10790] [ 1051.506787][T10790] dump_stack_lvl+0xe8/0x150 [ 1051.506827][T10790] should_fail_ex+0x46b/0x600 [ 1051.506863][T10790] _copy_to_user+0x31/0xb0 [ 1051.506898][T10790] simple_read_from_buffer+0xe1/0x170 [ 1051.506956][T10790] proc_fail_nth_read+0x1be/0x230 [ 1051.506986][T10790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1051.507017][T10790] ? rw_verify_area+0x250/0x4d0 [ 1051.507041][T10790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1051.507062][T10790] vfs_read+0x219/0xa90 [ 1051.507090][T10790] ? __pfx_vfs_read+0x10/0x10 [ 1051.507112][T10790] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1051.507137][T10790] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1051.507160][T10790] ? mutex_lock_nested+0x152/0x1d0 [ 1051.507189][T10790] ? fdget_pos+0x252/0x320 [ 1051.507223][T10790] ksys_read+0x156/0x270 [ 1051.507253][T10790] ? __pfx_ksys_read+0x10/0x10 [ 1051.507292][T10790] do_syscall_64+0x166/0x520 [ 1051.507313][T10790] ? trace_irq_disable+0x3b/0x140 [ 1051.507340][T10790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.507361][T10790] ? clear_bhb_loop+0x70/0xc0 [ 1051.507387][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.507408][T10790] RIP: 0033:0x7fab6b21e98e [ 1051.507429][T10790] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1051.507446][T10790] RSP: 002b:00007fab694b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1051.507472][T10790] RAX: ffffffffffffffda RBX: 00007fab694b66c0 RCX: 00007fab6b21e98e [ 1051.507488][T10790] RDX: 000000000000000f RSI: 00007fab694b60a0 RDI: 0000000000000004 [ 1051.507502][T10790] RBP: 00007fab694b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.507516][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.507538][T10790] R13: 00007fab6b4e6038 R14: 00007fab6b4e5fa0 R15: 00007fffc2014308 [ 1051.507574][T10790] [ 1053.964002][T10816] FAULT_INJECTION: forcing a failure. [ 1053.964002][T10816] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.964079][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.4.800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1053.964111][T10816] Tainted: [L]=SOFTLOCKUP [ 1053.964119][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1053.964132][T10816] Call Trace: [ 1053.964141][T10816] [ 1053.964152][T10816] dump_stack_lvl+0xe8/0x150 [ 1053.964191][T10816] should_fail_ex+0x46b/0x600 [ 1053.964226][T10816] should_failslab+0xa8/0x100 [ 1053.964248][T10816] ? alloc_empty_file+0x5b/0x1d0 [ 1053.964270][T10816] kmem_cache_alloc_noprof+0x9e/0x690 [ 1053.964300][T10816] ? alloc_empty_file+0x5b/0x1d0 [ 1053.964329][T10816] alloc_empty_file+0x5b/0x1d0 [ 1053.964352][T10816] path_openat+0xa2/0x1d60 [ 1053.964402][T10816] do_file_open+0x23e/0x4a0 [ 1053.964436][T10816] ? __pfx_do_file_open+0x10/0x10 [ 1053.964490][T10816] ? alloc_fd+0x654/0x6d0 [ 1053.964525][T10816] do_sys_openat2+0x115/0x200 [ 1053.964546][T10816] ? lockdep_hardirqs_on+0x7b/0x110 [ 1053.964570][T10816] ? __pfx_do_sys_openat2+0x10/0x10 [ 1053.964606][T10816] __x64_sys_openat+0x138/0x170 [ 1053.964634][T10816] do_syscall_64+0x166/0x520 [ 1053.964656][T10816] ? trace_irq_disable+0x3b/0x140 [ 1053.964685][T10816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.964707][T10816] ? clear_bhb_loop+0x70/0xc0 [ 1053.964734][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.964755][T10816] RIP: 0033:0x7fab6b21e98e [ 1053.964776][T10816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1053.964795][T10816] RSP: 002b:00007fab69473b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1053.964821][T10816] RAX: ffffffffffffffda RBX: 00007fab694746c0 RCX: 00007fab6b21e98e [ 1053.964838][T10816] RDX: 0000000000000000 RSI: 00007fab69473c00 RDI: ffffffffffffff9c [ 1053.964853][T10816] RBP: 00007fab69473c00 R08: 0000000000000000 R09: 0000000000000000 [ 1053.964867][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1053.964882][T10816] R13: 00007fab6b4e6218 R14: 00007fab6b4e6180 R15: 00007fffc2014308 [ 1053.964917][T10816] [ 1055.040722][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.040795][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.701415][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1055.831673][ T31] usb 5-1: device descriptor read/64, error -71 [ 1056.131289][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1056.292334][ T31] usb 5-1: device descriptor read/64, error -71 [ 1056.430798][ T31] usb usb5-port1: attempt power cycle [ 1056.452681][T10524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.567912][T10524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.643270][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.643357][ T9272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.685414][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.685651][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.832706][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1056.862294][ T31] usb 5-1: device descriptor read/8, error -71 [ 1057.204731][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1057.241134][ T31] usb 5-1: device descriptor read/8, error -71 [ 1057.351596][ T31] usb usb5-port1: unable to enumerate USB device [ 1059.540699][T10567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1059.663607][T10542] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1059.688468][T10567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1059.705320][T10567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1059.720288][T10567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.726130][T10567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.209780][T10542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1060.432434][T10542] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1060.726422][T10888] Bluetooth: MGMT ver 1.23 [ 1060.779749][T10542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1061.922904][ T5600] Bluetooth: hci0: command tx timeout [ 1062.361195][T10910] input: syz0 as /devices/virtual/input/input57 [ 1063.455659][T10567] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1064.002114][T10567] Bluetooth: hci0: command 0x041b tx timeout [ 1064.208690][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1064.986743][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1064.993127][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1064.995360][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1064.996353][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1066.356567][T10567] Bluetooth: hci0: command 0x041b tx timeout [ 1066.586633][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 1067.122059][T10567] Bluetooth: hci1: command tx timeout [ 1068.402601][T10567] Bluetooth: hci0: command 0x041b tx timeout [ 1069.201202][T10567] Bluetooth: hci1: command tx timeout [ 1070.504021][T10567] Bluetooth: hci0: command 0x041b tx timeout [ 1071.399882][T10567] Bluetooth: hci1: command tx timeout [ 1071.611647][ T198] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1071.899914][ T198] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1073.441556][T10567] Bluetooth: hci1: command tx timeout [ 1073.842597][ T198] usb 2-1: string descriptor 0 read error: -71 [ 1073.842767][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.846918][ T198] usb 2-1: can't set config #1, error -71 [ 1073.913560][ T198] usb 2-1: USB disconnect, device number 20 [ 1076.831471][ T198] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1076.982171][ T198] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1076.983264][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.036438][ T198] usb 5-1: config 0 descriptor?? [ 1077.312427][ T198] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1077.822496][ T198] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1077.822518][ T198] [drm] Initialized udl on minor 1 [ 1077.972527][ T198] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1078.022528][ T198] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1078.196821][T10629] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1078.290048][ T6198] usb 5-1: USB disconnect, device number 19 [ 1078.392168][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1078.426654][T10629] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1078.578934][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.639258][T10629] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1078.850771][T10996] FAULT_INJECTION: forcing a failure. [ 1078.850771][T10996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.850813][T10996] CPU: 0 UID: 0 PID: 10996 Comm: syz.1.826 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1078.850844][T10996] Tainted: [L]=SOFTLOCKUP [ 1078.850853][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1078.850866][T10996] Call Trace: [ 1078.850875][T10996] [ 1078.850885][T10996] dump_stack_lvl+0xe8/0x150 [ 1078.850924][T10996] should_fail_ex+0x46b/0x600 [ 1078.850960][T10996] _copy_to_user+0x31/0xb0 [ 1078.850994][T10996] binder_ioctl_write_read+0x978d/0xa5d0 [ 1078.851147][T10996] ? is_bpf_text_address+0x26/0x2b0 [ 1078.851211][T10996] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1078.851249][T10996] ? __lock_acquire+0x747/0x2de0 [ 1078.851284][T10996] ? do_raw_spin_lock+0x12b/0x2f0 [ 1078.851323][T10996] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.851349][T10996] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1078.851372][T10996] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1078.851405][T10996] ? reacquire_held_locks+0x117/0x1a0 [ 1078.851434][T10996] ? rt_spin_lock+0x1e2/0x400 [ 1078.851468][T10996] ? rt_spin_unlock+0x159/0x200 [ 1078.851505][T10996] ? binder_get_thread+0x176/0x6d0 [ 1078.851535][T10996] ? binder_ioctl+0x189/0x1b10 [ 1078.851600][T10996] binder_ioctl+0x420/0x1b10 [ 1078.851630][T10996] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1078.851660][T10996] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1078.851692][T10996] ? do_vfs_ioctl+0x1184/0x1550 [ 1078.851722][T10996] ? __pfx_binder_ioctl+0x10/0x10 [ 1078.851753][T10996] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1078.851783][T10996] ? __pfx_smack_log+0x10/0x10 [ 1078.851819][T10996] ? smk_tskacc+0x2fb/0x370 [ 1078.851847][T10996] ? smack_file_ioctl+0x2c4/0x370 [ 1078.851874][T10996] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1078.851911][T10996] ? __fget_files+0x2a/0x420 [ 1078.851933][T10996] ? __fget_files+0x3a8/0x420 [ 1078.851953][T10996] ? __fget_files+0x2a/0x420 [ 1078.851978][T10996] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1078.852003][T10996] ? __pfx_binder_ioctl+0x10/0x10 [ 1078.852032][T10996] __se_sys_ioctl+0xff/0x170 [ 1078.852065][T10996] do_syscall_64+0x166/0x520 [ 1078.852085][T10996] ? trace_irq_disable+0x3b/0x140 [ 1078.852113][T10996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.852136][T10996] ? clear_bhb_loop+0x70/0xc0 [ 1078.852163][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.852184][T10996] RIP: 0033:0x7f423390e159 [ 1078.852206][T10996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.852224][T10996] RSP: 002b:00007f4231b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1078.852249][T10996] RAX: ffffffffffffffda RBX: 00007f4233b95fa0 RCX: 00007f423390e159 [ 1078.852265][T10996] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1078.852280][T10996] RBP: 00007f4231b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.852294][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.852308][T10996] R13: 00007f4233b96038 R14: 00007f4233b95fa0 R15: 00007ffe484014b8 [ 1078.852343][T10996] [ 1078.854637][T10996] binder: 10995:10996 ioctl c0306201 200000000480 returned -14 [ 1079.178148][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1079.243920][T10629] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1080.154886][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1081.301379][T10629] kthread_run failed with err -4 [ 1082.850347][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1082.876776][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1082.880609][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1082.899664][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1082.908454][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1084.674194][T11042] Invalid source name [ 1084.677227][T11042] Set syz1 is full, maxelem 2 reached [ 1085.161296][T10567] Bluetooth: hci3: command tx timeout [ 1087.209156][T10567] Bluetooth: hci3: command tx timeout [ 1087.482334][T11053] FAULT_INJECTION: forcing a failure. [ 1087.482334][T11053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.482395][T11053] CPU: 1 UID: 0 PID: 11053 Comm: syz.1.838 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1087.482427][T11053] Tainted: [L]=SOFTLOCKUP [ 1087.482435][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1087.482449][T11053] Call Trace: [ 1087.482458][T11053] [ 1087.482468][T11053] dump_stack_lvl+0xe8/0x150 [ 1087.482508][T11053] should_fail_ex+0x46b/0x600 [ 1087.482544][T11053] _copy_from_user+0x2d/0xb0 [ 1087.482575][T11053] do_sock_getsockopt+0x200/0x7e0 [ 1087.482715][T11053] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1087.482758][T11053] ? __fget_files+0x3a8/0x420 [ 1087.482782][T11053] ? __fget_files+0x2a/0x420 [ 1087.482815][T11053] __x64_sys_getsockopt+0x1aa/0x250 [ 1087.482850][T11053] do_syscall_64+0x166/0x520 [ 1087.482874][T11053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.482896][T11053] ? clear_bhb_loop+0x70/0xc0 [ 1087.482924][T11053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.482946][T11053] RIP: 0033:0x7f423390e159 [ 1087.482967][T11053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.482986][T11053] RSP: 002b:00007f4231b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1087.483012][T11053] RAX: ffffffffffffffda RBX: 00007f4233b95fa0 RCX: 00007f423390e159 [ 1087.483028][T11053] RDX: 0000000001000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 1087.483043][T11053] RBP: 00007f4231b66090 R08: 0000200000000040 R09: 0000000000000000 [ 1087.483057][T11053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.483069][T11053] R13: 00007f4233b96038 R14: 00007f4233b95fa0 R15: 00007ffe484014b8 [ 1087.483103][T11053] [ 1087.727135][ T5850] bridge_slave_1: left allmulticast mode [ 1087.727177][ T5850] bridge_slave_1: left promiscuous mode [ 1087.727479][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.281382][T10567] Bluetooth: hci3: command tx timeout [ 1091.536073][T10567] Bluetooth: hci3: command tx timeout [ 1091.607977][ T5850] bridge_slave_0: left allmulticast mode [ 1091.608023][ T5850] bridge_slave_0: left promiscuous mode [ 1091.608330][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.831242][ T5860] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 1092.991405][ T5860] usb 2-1: device descriptor read/64, error -71 [ 1093.231352][ T5860] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 1093.361255][ T5860] usb 2-1: device descriptor read/64, error -71 [ 1093.363427][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.452183][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.471777][ T5860] usb usb2-port1: attempt power cycle [ 1093.474930][ T5850] bond0 (unregistering): Released all slaves [ 1093.886983][ T5860] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 1093.906467][ T5860] usb 2-1: device descriptor read/8, error -71 [ 1094.171253][ T5860] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 1094.204916][ T5860] usb 2-1: device descriptor read/8, error -71 [ 1094.547543][ T5860] usb usb2-port1: unable to enumerate USB device [ 1095.458162][T11105] hugetlbfs: syz.1.847 (11105): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1095.602477][ T5850] hsr_slave_0: left promiscuous mode [ 1095.641517][ T5850] hsr_slave_1: left promiscuous mode [ 1095.642970][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.757527][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.557179][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 1096.643196][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 1097.155626][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1097.157309][T10884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.157501][T10884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.157697][T10884] bridge_slave_0: entered allmulticast mode [ 1097.171773][T10884] bridge_slave_0: entered promiscuous mode [ 1097.269431][T10884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.269606][T10884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.269811][T10884] bridge_slave_1: entered allmulticast mode [ 1097.279636][T10884] bridge_slave_1: entered promiscuous mode [ 1097.412623][T10914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.412928][T10914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.413050][T10914] bridge_slave_0: entered allmulticast mode [ 1097.416188][T10914] bridge_slave_0: entered promiscuous mode [ 1097.482835][T10914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.482977][T10914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.483157][T10914] bridge_slave_1: entered allmulticast mode [ 1097.486357][T10914] bridge_slave_1: entered promiscuous mode [ 1097.526070][T10884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.605429][ T5721] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1097.611780][T11125] kexec: Could not allocate control_code_buffer [ 1097.636738][T10884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.790396][T10914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.791866][ T5721] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1097.795631][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1097.795670][ T5721] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1097.795710][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.906165][T10914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.910476][T10884] team0: Port device team_slave_0 added [ 1098.002862][T10884] team0: Port device team_slave_1 added [ 1098.104840][T10914] team0: Port device team_slave_0 added [ 1098.839355][T10914] team0: Port device team_slave_1 added [ 1098.840396][T10884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.840412][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.840442][T10884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.978964][T10884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.978987][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.979017][T10884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.295490][ T5721] gud 5-1:1.0: Failed to add properties (error=-71) [ 1099.295541][ T5721] gud 5-1:1.0: probe with driver gud failed with error -71 [ 1099.435084][ T5721] usb 5-1: USB disconnect, device number 20 [ 1099.437571][T10914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.437590][T10914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.437620][T10914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.527518][T10914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.527539][T10914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.527570][T10914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.126322][T10884] hsr_slave_0: entered promiscuous mode [ 1100.127846][T10884] hsr_slave_1: entered promiscuous mode [ 1100.128921][T10884] debugfs: 'hsr0' already exists in 'hsr' [ 1100.128949][T10884] Cannot create hsr debugfs directory [ 1100.313540][T10914] hsr_slave_0: entered promiscuous mode [ 1100.328574][T10914] hsr_slave_1: entered promiscuous mode [ 1100.337023][T10914] debugfs: 'hsr0' already exists in 'hsr' [ 1100.337055][T10914] Cannot create hsr debugfs directory [ 1100.461965][T11169] FAULT_INJECTION: forcing a failure. [ 1100.461965][T11169] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.462009][T11169] CPU: 1 UID: 0 PID: 11169 Comm: syz.1.859 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1100.462041][T11169] Tainted: [L]=SOFTLOCKUP [ 1100.462050][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1100.462063][T11169] Call Trace: [ 1100.462072][T11169] [ 1100.462082][T11169] dump_stack_lvl+0xe8/0x150 [ 1100.462123][T11169] should_fail_ex+0x46b/0x600 [ 1100.462159][T11169] should_failslab+0xa8/0x100 [ 1100.462185][T11169] __kmalloc_noprof+0xfb/0x790 [ 1100.462215][T11169] ? tomoyo_encode+0x2ad/0x570 [ 1100.462246][T11169] ? tomoyo_encode+0x2ad/0x570 [ 1100.462285][T11169] tomoyo_encode+0x2ad/0x570 [ 1100.462325][T11169] tomoyo_realpath_from_path+0x5fa/0x640 [ 1100.462369][T11169] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1100.462397][T11169] tomoyo_path_number_perm+0x246/0x5f0 [ 1100.462429][T11169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1100.462456][T11169] ? __lock_acquire+0x747/0x2de0 [ 1100.462502][T11169] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1100.462525][T11169] ? hook_file_ioctl+0x1f5/0x610 [ 1100.462573][T11169] ? __fget_files+0x2a/0x420 [ 1100.462600][T11169] ? __fget_files+0x2a/0x420 [ 1100.462623][T11169] ? __fget_files+0x3a8/0x420 [ 1100.462646][T11169] ? __fget_files+0x2a/0x420 [ 1100.462675][T11169] security_file_ioctl+0xc3/0x2a0 [ 1100.462706][T11169] __se_sys_ioctl+0x47/0x170 [ 1100.462738][T11169] do_syscall_64+0x166/0x520 [ 1100.462761][T11169] ? trace_irq_disable+0x3b/0x140 [ 1100.462790][T11169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.462812][T11169] ? clear_bhb_loop+0x70/0xc0 [ 1100.462840][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.462870][T11169] RIP: 0033:0x7f423390e159 [ 1100.462892][T11169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.462911][T11169] RSP: 002b:00007f4231b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.462936][T11169] RAX: ffffffffffffffda RBX: 00007f4233b96090 RCX: 00007f423390e159 [ 1100.462953][T11169] RDX: 0000200000000240 RSI: 00000000c008561c RDI: 0000000000000003 [ 1100.462969][T11169] RBP: 00007f4231b45090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.462983][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.462997][T11169] R13: 00007f4233b96128 R14: 00007f4233b96090 R15: 00007ffe484014b8 [ 1100.463033][T11169] [ 1100.463055][T11169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1103.928262][T10567] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1103.928297][T10567] CPU: 1 UID: 0 PID: 10567 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1103.928330][T10567] Tainted: [L]=SOFTLOCKUP [ 1103.928339][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1103.928353][T10567] Workqueue: hci2 hci_rx_work [ 1103.928499][T10567] Call Trace: [ 1103.928508][T10567] [ 1103.928518][T10567] dump_stack_lvl+0xe8/0x150 [ 1103.928555][T10567] sysfs_create_dir_ns+0x271/0x2a0 [ 1103.928594][T10567] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1103.928627][T10567] ? rt_spin_unlock+0x165/0x200 [ 1103.928660][T10567] kobject_add_internal+0x62c/0xce0 [ 1103.928696][T10567] kobject_add+0x163/0x240 [ 1103.928719][T10567] ? rt_spin_unlock+0x159/0x200 [ 1103.928754][T10567] ? __pfx_kobject_add+0x10/0x10 [ 1103.928787][T10567] ? get_device_parent+0x370/0x3a0 [ 1103.928912][T10567] device_add+0x3fa/0xb80 [ 1103.928946][T10567] hci_conn_add_sysfs+0xd5/0x210 [ 1103.929002][T10567] le_conn_complete_evt+0xfe3/0x16d0 [ 1103.929082][T10567] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1103.929119][T10567] ? rt_mutex_slowunlock+0x219/0x460 [ 1103.929150][T10567] ? skb_pull_data+0xf0/0x200 [ 1103.929203][T10567] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1103.929236][T10567] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1103.929273][T10567] hci_event_packet+0x67a/0xf10 [ 1103.929299][T10567] ? reacquire_held_locks+0x117/0x1a0 [ 1103.929338][T10567] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1103.929367][T10567] ? __pfx_hci_event_packet+0x10/0x10 [ 1103.929392][T10567] ? rt_spin_unlock+0x159/0x200 [ 1103.929429][T10567] ? hci_send_to_monitor+0xe2/0x590 [ 1103.929453][T10567] hci_rx_work+0x3ee/0x1020 [ 1103.929486][T10567] ? process_scheduled_works+0x97a/0x1630 [ 1103.929514][T10567] process_scheduled_works+0xc3d/0x1630 [ 1103.929567][T10567] ? __pfx_process_scheduled_works+0x10/0x10 [ 1103.929597][T10567] ? assign_work+0x3cf/0x5d0 [ 1103.929628][T10567] worker_thread+0xa47/0xfb0 [ 1103.929672][T10567] ? __kthread_parkme+0x71/0x1f0 [ 1103.929726][T10567] kthread+0x38b/0x470 [ 1103.929748][T10567] ? __pfx_worker_thread+0x10/0x10 [ 1103.929775][T10567] ? __pfx_kthread+0x10/0x10 [ 1103.929798][T10567] ret_from_fork+0x514/0xb70 [ 1103.929823][T10567] ? __pfx_ret_from_fork+0x10/0x10 [ 1103.929853][T10567] ? __switch_to+0xc89/0x1420 [ 1103.929899][T10567] ? __pfx_kthread+0x10/0x10 [ 1103.929922][T10567] ret_from_fork_asm+0x1a/0x30 [ 1103.929960][T10567] [ 1104.143653][T10567] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1104.143733][T10567] Bluetooth: hci2: failed to register connection device [ 1104.986284][T11190] kAFS: No cell specified [ 1105.276274][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1105.276593][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 1105.661285][ T5721] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1105.812084][ T5721] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1105.814130][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1105.816355][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1105.816383][ T5721] usb 5-1: SerialNumber: syz [ 1105.972846][T11026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.972986][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.973172][T11026] bridge_slave_0: entered allmulticast mode [ 1105.975929][T11026] bridge_slave_0: entered promiscuous mode [ 1106.007618][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1106.166391][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1106.186124][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1106.190432][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1106.190700][ T10] usb 2-1: SerialNumber: syz [ 1106.344347][T11026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.344773][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.344976][T11026] bridge_slave_1: entered allmulticast mode [ 1106.347721][T11026] bridge_slave_1: entered promiscuous mode [ 1106.408282][ T5721] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1106.466684][ T5721] usb 5-1: USB disconnect, device number 21 [ 1106.676361][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1106.699854][ T10] usb 2-1: USB disconnect, device number 25 [ 1106.939108][T11026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.988931][T11026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.989469][T11211] FAULT_INJECTION: forcing a failure. [ 1106.989469][T11211] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.989496][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.4.867 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1106.989515][T11211] Tainted: [L]=SOFTLOCKUP [ 1106.989520][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1106.989527][T11211] Call Trace: [ 1106.989533][T11211] [ 1106.989540][T11211] dump_stack_lvl+0xe8/0x150 [ 1106.989564][T11211] should_fail_ex+0x46b/0x600 [ 1106.989584][T11211] should_failslab+0xa8/0x100 [ 1106.989598][T11211] ? radix_tree_node_alloc+0xd0/0x400 [ 1106.989675][T11211] kmem_cache_alloc_noprof+0x9e/0x690 [ 1106.989692][T11211] ? radix_tree_node_alloc+0xd0/0x400 [ 1106.989708][T11211] radix_tree_node_alloc+0xd0/0x400 [ 1106.989723][T11211] idr_get_free+0x295/0xa20 [ 1106.989741][T11211] idr_alloc_u32+0x190/0x340 [ 1106.989758][T11211] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1106.989773][T11211] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1106.989793][T11211] ? mutex_lock_nested+0x152/0x1d0 [ 1106.989818][T11211] ? tcf_idr_check_alloc+0x603/0x7f0 [ 1106.989878][T11211] tcf_idr_check_alloc+0x623/0x7f0 [ 1106.989894][T11211] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 1106.989911][T11211] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1106.989930][T11211] ? __nla_parse+0x40/0x60 [ 1106.989949][T11211] tcf_bpf_init+0x225/0x970 [ 1106.989984][T11211] ? __pfx_tcf_bpf_init+0x10/0x10 [ 1106.990006][T11211] ? nla_memcpy+0x5b/0xc0 [ 1106.990028][T11211] tcf_action_init_1+0x4ba/0x740 [ 1106.990049][T11211] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1106.990067][T11211] ? tc_action_load_ops+0x247/0x540 [ 1106.990096][T11211] ? __nla_parse+0x40/0x60 [ 1106.990115][T11211] tcf_action_init+0x31b/0xa60 [ 1106.990139][T11211] ? __pfx_tcf_action_init+0x10/0x10 [ 1106.990169][T11211] ? __lock_acquire+0x747/0x2de0 [ 1106.990186][T11211] ? __pfx___nla_validate_parse+0x10/0x10 [ 1106.990223][T11211] tc_ctl_action+0x43b/0xc70 [ 1106.990242][T11211] ? __pfx_tc_ctl_action+0x10/0x10 [ 1106.990258][T11211] ? rt_mutex_slowlock+0x424/0x780 [ 1106.990296][T11211] ? __pfx_tc_ctl_action+0x10/0x10 [ 1106.990307][T11211] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1106.990352][T11211] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1106.990364][T11211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.990374][T11211] ? ref_tracker_free+0x668/0x820 [ 1106.990392][T11211] ? __pfx_ref_tracker_free+0x10/0x10 [ 1106.990408][T11211] ? __asan_memcpy+0x40/0x70 [ 1106.990423][T11211] ? __skb_clone+0x5c/0x6c0 [ 1106.990440][T11211] netlink_rcv_skb+0x226/0x4a0 [ 1106.990477][T11211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.990490][T11211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1106.990511][T11211] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.990526][T11211] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.990544][T11211] netlink_unicast+0x7f5/0x990 [ 1106.990564][T11211] netlink_sendmsg+0x813/0xb40 [ 1106.990584][T11211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.990601][T11211] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1106.990621][T11211] ? __kernel_text_address+0xd/0x30 [ 1106.990635][T11211] ? unwind_get_return_address+0x4d/0x90 [ 1106.990651][T11211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.990665][T11211] sock_sendmsg_nosec+0x13a/0x180 [ 1106.990685][T11211] ____sys_sendmsg+0x565/0x870 [ 1106.990704][T11211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.990723][T11211] ? import_iovec+0x73/0xa0 [ 1106.990742][T11211] ___sys_sendmsg+0x2a5/0x360 [ 1106.990755][T11211] ? __lock_acquire+0x747/0x2de0 [ 1106.990772][T11211] ? __pfx____sys_sendmsg+0x10/0x10 [ 1106.990806][T11211] ? __fget_files+0x2a/0x420 [ 1106.990828][T11211] ? __fget_files+0x3a8/0x420 [ 1106.990851][T11211] __x64_sys_sendmsg+0x1b7/0x290 [ 1106.990872][T11211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1106.990897][T11211] do_syscall_64+0x166/0x520 [ 1106.990909][T11211] ? trace_irq_disable+0x3b/0x140 [ 1106.990926][T11211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.990938][T11211] ? clear_bhb_loop+0x70/0xc0 [ 1106.990953][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.990965][T11211] RIP: 0033:0x7fab6b25e159 [ 1106.990979][T11211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.990991][T11211] RSP: 002b:00007fab694b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.991015][T11211] RAX: ffffffffffffffda RBX: 00007fab6b4e5fa0 RCX: 00007fab6b25e159 [ 1106.991031][T11211] RDX: 0000000004000014 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1106.991044][T11211] RBP: 00007fab694b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.991056][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.991069][T11211] R13: 00007fab6b4e6038 R14: 00007fab6b4e5fa0 R15: 00007fffc2014308 [ 1106.991103][T11211] [ 1109.330521][T11026] team0: Port device team_slave_0 added [ 1109.349924][T11026] team0: Port device team_slave_1 added [ 1109.436587][T11240] FAULT_INJECTION: forcing a failure. [ 1109.436587][T11240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.436629][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.1.872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1109.436659][T11240] Tainted: [L]=SOFTLOCKUP [ 1109.436668][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1109.436681][T11240] Call Trace: [ 1109.436690][T11240] [ 1109.436699][T11240] dump_stack_lvl+0xe8/0x150 [ 1109.436738][T11240] should_fail_ex+0x46b/0x600 [ 1109.436774][T11240] _copy_to_user+0x31/0xb0 [ 1109.436807][T11240] bpf_log_attr_finalize+0x124/0x1e0 [ 1109.436879][T11240] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1109.436912][T11240] ? btf_parse_str_sec+0x1e7/0x2f0 [ 1109.436946][T11240] btf_new_fd+0x36c/0xc70 [ 1109.436984][T11240] __sys_bpf+0xd2e/0xd90 [ 1109.437024][T11240] ? __pfx___sys_bpf+0x10/0x10 [ 1109.437057][T11240] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1109.437085][T11240] ? rt_mutex_slowunlock+0x219/0x460 [ 1109.437134][T11240] ? ksys_write+0x248/0x270 [ 1109.437165][T11240] ? __pfx_ksys_write+0x10/0x10 [ 1109.437197][T11240] __x64_sys_bpf+0xba/0xd0 [ 1109.437230][T11240] do_syscall_64+0x166/0x520 [ 1109.437257][T11240] ? trace_irq_disable+0x3b/0x140 [ 1109.437285][T11240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.437308][T11240] ? clear_bhb_loop+0x70/0xc0 [ 1109.437334][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.437355][T11240] RIP: 0033:0x7f423390e159 [ 1109.437376][T11240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.437396][T11240] RSP: 002b:00007f4231b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1109.437421][T11240] RAX: ffffffffffffffda RBX: 00007f4233b95fa0 RCX: 00007f423390e159 [ 1109.437438][T11240] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 1109.437452][T11240] RBP: 00007f4231b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.437467][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.437482][T11240] R13: 00007f4233b96038 R14: 00007f4233b95fa0 R15: 00007ffe484014b8 [ 1109.437516][T11240] [ 1109.927126][T11244] FAULT_INJECTION: forcing a failure. [ 1109.927126][T11244] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.927165][T11244] CPU: 1 UID: 0 PID: 11244 Comm: syz.1.873 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1109.927195][T11244] Tainted: [L]=SOFTLOCKUP [ 1109.927201][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1109.927212][T11244] Call Trace: [ 1109.927219][T11244] [ 1109.927227][T11244] dump_stack_lvl+0xe8/0x150 [ 1109.927263][T11244] should_fail_ex+0x46b/0x600 [ 1109.927298][T11244] should_failslab+0xa8/0x100 [ 1109.927319][T11244] ? __pmd_alloc+0xa4/0x5e0 [ 1109.927342][T11244] kmem_cache_alloc_noprof+0x9e/0x690 [ 1109.927368][T11244] ? __pmd_alloc+0xa4/0x5e0 [ 1109.927396][T11244] __pmd_alloc+0xa4/0x5e0 [ 1109.927423][T11244] handle_mm_fault+0x2198/0x28c0 [ 1109.927452][T11244] ? handle_mm_fault+0xeb/0x28c0 [ 1109.927473][T11244] ? mt_find+0x186/0x630 [ 1109.927495][T11244] ? __pfx_mt_find+0x10/0x10 [ 1109.927526][T11244] ? __pfx_handle_mm_fault+0x10/0x10 [ 1109.927551][T11244] ? lock_acquire+0x115/0x350 [ 1109.927580][T11244] ? __pfx_find_vma+0x10/0x10 [ 1109.927612][T11244] fixup_user_fault+0x324/0x6f0 [ 1109.927640][T11244] fault_in_user_writeable+0x71/0xd0 [ 1109.927695][T11244] futex_wake_op+0xbc8/0xdd0 [ 1109.927732][T11244] ? __pfx_futex_wake_op+0x10/0x10 [ 1109.927760][T11244] ? do_raw_spin_lock+0x12b/0x2f0 [ 1109.927792][T11244] do_futex+0x480/0x4e0 [ 1109.927816][T11244] ? __pfx_do_futex+0x10/0x10 [ 1109.927833][T11244] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1109.927864][T11244] __se_sys_futex+0x3a8/0x450 [ 1109.927887][T11244] ? ksys_write+0x248/0x270 [ 1109.927908][T11244] ? __pfx___se_sys_futex+0x10/0x10 [ 1109.927937][T11244] ? __pfx_ksys_write+0x10/0x10 [ 1109.927963][T11244] ? __x64_sys_futex+0x21/0xf0 [ 1109.927984][T11244] do_syscall_64+0x166/0x520 [ 1109.928003][T11244] ? trace_irq_disable+0x3b/0x140 [ 1109.928026][T11244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.928044][T11244] ? clear_bhb_loop+0x70/0xc0 [ 1109.928066][T11244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.928083][T11244] RIP: 0033:0x7f423390e159 [ 1109.928104][T11244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.928120][T11244] RSP: 002b:00007f4231b24028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1109.928142][T11244] RAX: ffffffffffffffda RBX: 00007f4233b96180 RCX: 00007f423390e159 [ 1109.928157][T11244] RDX: 0000000000000008 RSI: 0000000000000085 RDI: 0000000000000000 [ 1109.928169][T11244] RBP: 00007f4231b24090 R08: 0000000000000000 R09: 0000000040000000 [ 1109.928182][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.928193][T11244] R13: 00007f4233b96218 R14: 00007f4233b96180 R15: 00007ffe484014b8 [ 1109.928224][T11244] [ 1109.949059][T11026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.949078][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.949105][T11026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.967188][T11026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.967207][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.967235][T11026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.916146][T11026] hsr_slave_0: entered promiscuous mode [ 1110.917506][T11026] hsr_slave_1: entered promiscuous mode [ 1110.918552][T11026] debugfs: 'hsr0' already exists in 'hsr' [ 1110.918582][T11026] Cannot create hsr debugfs directory [ 1111.001190][ T5721] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1111.152015][ T5721] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.158268][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1111.159712][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1111.159740][ T5721] usb 5-1: SerialNumber: syz [ 1113.664826][ T5721] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1113.740366][ T5721] usb 5-1: USB disconnect, device number 22 [ 1114.601418][T11271] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 1116.041248][ T5860] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1116.192978][ T5860] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1116.197339][ T5860] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.197373][ T5860] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.200710][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.200741][ T5860] usb 5-1: Product: syz [ 1116.200756][ T5860] usb 5-1: Manufacturer: syz [ 1116.200771][ T5860] usb 5-1: SerialNumber: syz [ 1116.325240][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.329133][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.355389][T11290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.879'. [ 1116.382310][T11290] ip6gretap1: entered allmulticast mode [ 1116.399221][T11290] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1116.399242][T11290] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.399280][T11290] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1118.562197][ T5860] usb 5-1: 0:1 : does not exist [ 1118.562294][ T5860] usb 5-1: BAAD SPEAKER p_chmask mismatch [ 1118.833054][ T5860] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1118.841848][ T5860] usb 5-1: USB disconnect, device number 23 [ 1120.357889][T11203] udevd[11203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.670894][T11319] FAULT_INJECTION: forcing a failure. [ 1121.670894][T11319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.670963][T11319] CPU: 1 UID: 0 PID: 11319 Comm: syz.1.883 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1121.670992][T11319] Tainted: [L]=SOFTLOCKUP [ 1121.671003][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1121.671015][T11319] Call Trace: [ 1121.671024][T11319] [ 1121.671034][T11319] dump_stack_lvl+0xe8/0x150 [ 1121.671072][T11319] should_fail_ex+0x46b/0x600 [ 1121.671107][T11319] _copy_from_user+0x2d/0xb0 [ 1121.671138][T11319] __sys_bpf+0x2e7/0xd90 [ 1121.671177][T11319] ? __pfx___sys_bpf+0x10/0x10 [ 1121.671210][T11319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1121.671239][T11319] ? rt_mutex_slowunlock+0x219/0x460 [ 1121.671282][T11319] ? ksys_write+0x248/0x270 [ 1121.671299][T11319] ? __pfx_ksys_write+0x10/0x10 [ 1121.671317][T11319] __x64_sys_bpf+0xba/0xd0 [ 1121.671335][T11319] do_syscall_64+0x166/0x520 [ 1121.671348][T11319] ? trace_irq_disable+0x3b/0x140 [ 1121.671363][T11319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.671376][T11319] ? clear_bhb_loop+0x70/0xc0 [ 1121.671391][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.671403][T11319] RIP: 0033:0x7f423390e159 [ 1121.671416][T11319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.671430][T11319] RSP: 002b:00007f4231b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1121.671447][T11319] RAX: ffffffffffffffda RBX: 00007f4233b96090 RCX: 00007f423390e159 [ 1121.671456][T11319] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1121.671465][T11319] RBP: 00007f4231b45090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.671473][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.671481][T11319] R13: 00007f4233b96128 R14: 00007f4233b96090 R15: 00007ffe484014b8 [ 1121.671500][T11319] [ 1122.742274][T10567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1122.794046][T10567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1122.797259][T10567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1122.798930][T10567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1122.799644][T10567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1123.123400][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1125.218706][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1125.259709][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1125.276829][ T8214] Bluetooth: hci5: command tx timeout [ 1125.295186][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1125.310364][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1125.314656][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1126.282338][T11379] Non-string source [ 1126.500154][T11383] netlink: 'syz.1.890': attribute type 4 has an invalid length. [ 1126.500173][T11383] netlink: 17 bytes leftover after parsing attributes in process `syz.1.890'. [ 1126.754114][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1126.821974][ T6199] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1126.972261][ T6199] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1126.974157][ T6199] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1126.974195][ T6199] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1126.974235][ T6199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.114670][T11383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1127.160288][ T6199] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1127.282825][T10567] Bluetooth: hci5: command tx timeout [ 1127.524501][T10567] Bluetooth: hci6: command tx timeout [ 1127.948153][ T36] audit: type=1326 audit(1790995733.021:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1127.948196][ T36] audit: type=1326 audit(1790995733.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1127.966304][ T6199] usb 2-1: USB disconnect, device number 26 [ 1128.044778][ T36] audit: type=1326 audit(1790995733.121:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1128.044838][ T36] audit: type=1326 audit(1790995733.121:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1128.044887][ T36] audit: type=1326 audit(1790995733.121:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1128.053102][ T36] audit: type=1326 audit(1790995733.121:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1128.053157][ T36] audit: type=1326 audit(1790995733.121:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1128.053198][ T36] audit: type=1326 audit(1790995733.121:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1128.237401][ T36] audit: type=1326 audit(1790995733.231:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1128.237476][ T36] audit: type=1326 audit(1790995733.301:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11405 comm="syz.4.892" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab6b25e159 code=0x7ffc0000 [ 1128.716507][ T5850] bridge_slave_1: left allmulticast mode [ 1128.716537][ T5850] bridge_slave_1: left promiscuous mode [ 1128.716761][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.054481][ T5850] bridge_slave_0: left allmulticast mode [ 1129.054510][ T5850] bridge_slave_0: left promiscuous mode [ 1129.054724][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.365081][T10567] Bluetooth: hci5: command tx timeout [ 1129.587271][ T5850] bridge_slave_1: left allmulticast mode [ 1129.587317][ T5850] bridge_slave_1: left promiscuous mode [ 1129.587655][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.602341][T10567] Bluetooth: hci6: command tx timeout [ 1130.796848][ T5850] bridge_slave_0: left allmulticast mode [ 1130.796891][ T5850] bridge_slave_0: left promiscuous mode [ 1130.798731][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.017368][T11434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.896'. [ 1131.103422][T11436] CIFS: Attempting to mount //::1/share [ 1131.442633][T10567] Bluetooth: hci5: command tx timeout [ 1131.715574][T10567] Bluetooth: hci6: command tx timeout [ 1131.729842][T11436] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1131.730144][T11436] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1131.835457][T11442] Invalid source name [ 1132.730644][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.140235][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.271925][ T5850] bond0 (unregistering): Released all slaves [ 1133.431256][T11452] netlink: 'syz.1.900': attribute type 4 has an invalid length. [ 1133.431292][T11452] netlink: 17 bytes leftover after parsing attributes in process `syz.1.900'. [ 1133.768090][T10567] Bluetooth: hci6: command tx timeout [ 1134.263370][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.295043][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 1134.354830][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.395542][ T5850] bond0 (unregistering): Released all slaves [ 1135.076284][T11470] netlink: 'syz.1.905': attribute type 4 has an invalid length. [ 1135.076310][T11470] netlink: 17 bytes leftover after parsing attributes in process `syz.1.905'. [ 1135.100715][ T6198] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1135.271317][ T6198] usb 5-1: Using ep0 maxpacket: 8 [ 1135.300564][ T6198] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1135.300625][ T6198] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1135.321223][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1135.323267][ T6198] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.323294][ T6198] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1135.351472][ T6198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.351512][ T6198] usb 5-1: Product: й [ 1135.351524][ T6198] usb 5-1: Manufacturer: ы [ 1135.351536][ T6198] usb 5-1: SerialNumber: 蔳濾㤗ᙞ摵利蚁໏렓❴콭꧁幻㬜ᙴ⩦홬ɿ삆 [ 1135.471357][ T5850] hsr_slave_0: left promiscuous mode [ 1135.472172][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.476291][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1135.476329][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1135.476381][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.502257][T11470] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1135.509300][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1135.564158][ T5850] hsr_slave_1: left promiscuous mode [ 1135.565347][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.620070][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.673839][ T6198] usb 5-1: 0:2 : does not exist [ 1135.765186][ T6198] usb 5-1: USB disconnect, device number 24 [ 1135.843389][ T5850] hsr_slave_0: left promiscuous mode [ 1135.888055][ T5850] hsr_slave_1: left promiscuous mode [ 1135.938091][T11471] udevd[11471]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1135.944305][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.982353][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.571137][T11480] Invalid source name [ 1137.871145][ T5860] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1137.992108][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 1138.033025][ T5860] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1138.035150][ T5860] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1138.035181][ T5860] usb 5-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1138.035203][ T5860] usb 5-1: config 0 has no interface number 0 [ 1138.078145][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.078175][ T5860] usb 5-1: Product: syz [ 1138.078191][ T5860] usb 5-1: Manufacturer: syz [ 1138.078206][ T5860] usb 5-1: SerialNumber: syz [ 1138.104354][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 1138.126738][ T5860] usb 5-1: config 0 descriptor?? [ 1138.153751][ T5860] hub 5-1:0.31: bad descriptor, ignoring hub [ 1138.153797][ T5860] hub 5-1:0.31: probe with driver hub failed with error -5 [ 1138.449548][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.466655][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.805674][ T6198] usb 2-1: USB disconnect, device number 27 [ 1139.684492][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 1139.752040][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 1140.721873][ T5860] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1140.722214][ T5860] uvcvideo 5-1:0.31: No valid video chain found. [ 1142.324342][ T5860] usb 5-1: USB disconnect, device number 25 [ 1142.661135][ T5860] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1142.835950][ T5860] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1142.837692][ T5860] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1142.845167][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1142.845197][ T5860] usb 5-1: SerialNumber: syz [ 1143.839005][T11336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.840168][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.840371][T11336] bridge_slave_0: entered allmulticast mode [ 1143.890004][T11336] bridge_slave_0: entered promiscuous mode [ 1143.908152][ T5860] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1143.984652][ T5600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1144.033507][ T5600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1144.036723][ T5860] usb 5-1: USB disconnect, device number 26 [ 1144.039535][ T5600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1144.045162][ T5600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1144.047650][ T5600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1144.144260][T11336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.144393][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.144594][T11336] bridge_slave_1: entered allmulticast mode [ 1144.371643][T11336] bridge_slave_1: entered promiscuous mode [ 1144.518887][T11545] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 1144.710082][T11541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.913'. [ 1144.884070][T11550] netlink: 'syz.4.912': attribute type 4 has an invalid length. [ 1144.884096][T11550] netlink: 17 bytes leftover after parsing attributes in process `syz.4.912'. [ 1145.012515][T11548] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1145.024899][T11548] bond2: (slave bond3): making interface the new active one [ 1145.025716][T11548] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1145.037941][T11336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.053552][T11541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1145.090829][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1145.559411][T11336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.559799][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.559875][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.559980][T11363] bridge_slave_0: entered allmulticast mode [ 1145.562096][T11363] bridge_slave_0: entered promiscuous mode [ 1145.903905][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.904053][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.904251][T11363] bridge_slave_1: entered allmulticast mode [ 1145.909125][T11363] bridge_slave_1: entered promiscuous mode [ 1145.914836][T11566] FAULT_INJECTION: forcing a failure. [ 1145.914836][T11566] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.914890][T11566] CPU: 0 UID: 0 PID: 11566 Comm: syz.1.916 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1145.914921][T11566] Tainted: [L]=SOFTLOCKUP [ 1145.914929][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1145.914942][T11566] Call Trace: [ 1145.914952][T11566] [ 1145.914963][T11566] dump_stack_lvl+0xe8/0x150 [ 1145.915005][T11566] should_fail_ex+0x46b/0x600 [ 1145.915045][T11566] should_failslab+0xa8/0x100 [ 1145.915071][T11566] __kvmalloc_node_noprof+0x176/0x890 [ 1145.915109][T11566] ? seq_read_iter+0x1eb/0xcb0 [ 1145.915139][T11566] ? seq_read_iter+0x1eb/0xcb0 [ 1145.915174][T11566] ? seq_read_iter+0xa5/0xcb0 [ 1145.915210][T11566] seq_read_iter+0x1eb/0xcb0 [ 1145.915260][T11566] proc_reg_read_iter+0x1bf/0x290 [ 1145.915297][T11566] vfs_read+0x59e/0xa90 [ 1145.915335][T11566] ? __pfx_vfs_read+0x10/0x10 [ 1145.915364][T11566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1145.915395][T11566] ? mutex_lock_nested+0x152/0x1d0 [ 1145.915422][T11566] ? fdget_pos+0x252/0x320 [ 1145.915457][T11566] ksys_read+0x156/0x270 [ 1145.915487][T11566] ? __pfx_ksys_read+0x10/0x10 [ 1145.915527][T11566] do_syscall_64+0x166/0x520 [ 1145.915550][T11566] ? trace_irq_disable+0x3b/0x140 [ 1145.915580][T11566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.915603][T11566] ? clear_bhb_loop+0x70/0xc0 [ 1145.915631][T11566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.915652][T11566] RIP: 0033:0x7f423390e159 [ 1145.915674][T11566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.915692][T11566] RSP: 002b:00007f4231b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1145.915717][T11566] RAX: ffffffffffffffda RBX: 00007f4233b96090 RCX: 00007f423390e159 [ 1145.915733][T11566] RDX: 0000000000000001 RSI: 0000200000003680 RDI: 0000000000000005 [ 1145.915747][T11566] RBP: 00007f4231b45090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.915762][T11566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.915775][T11566] R13: 00007f4233b96128 R14: 00007f4233b96090 R15: 00007ffe484014b8 [ 1145.915812][T11566] [ 1145.932274][T11565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1146.083741][ T5600] Bluetooth: hci7: command tx timeout [ 1146.536504][T11567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1146.573745][T11336] team0: Port device team_slave_0 added [ 1146.647285][T11336] team0: Port device team_slave_1 added [ 1146.904385][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.181563][ T5721] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1147.288910][ T5850] bridge_slave_1: left allmulticast mode [ 1147.288940][ T5850] bridge_slave_1: left promiscuous mode [ 1147.289122][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.332027][ T5721] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1147.333339][ T5721] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1147.334324][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1147.334340][ T5721] usb 2-1: SerialNumber: syz [ 1147.433249][ T5850] bridge_slave_0: left allmulticast mode [ 1147.433303][ T5850] bridge_slave_0: left promiscuous mode [ 1147.433592][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.954050][T11579] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1148.161174][ T5600] Bluetooth: hci7: command tx timeout [ 1148.243140][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.324098][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.384650][ T5850] bond0 (unregistering): Released all slaves [ 1148.452678][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.679461][ T5721] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1148.723811][ T5721] usb 2-1: USB disconnect, device number 28 [ 1148.880540][T11336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.880559][T11336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.880582][T11336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.978221][T11336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.978240][T11336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.978265][T11336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.120009][T11363] team0: Port device team_slave_0 added [ 1149.173917][T11589] netlink: 'syz.1.924': attribute type 4 has an invalid length. [ 1149.173943][T11589] netlink: 17 bytes leftover after parsing attributes in process `syz.1.924'. [ 1149.180919][T11363] team0: Port device team_slave_1 added [ 1149.581199][ T5850] hsr_slave_0: left promiscuous mode [ 1149.621259][ T5850] hsr_slave_1: left promiscuous mode [ 1149.622159][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.664276][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.191945][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 1150.241162][ T5600] Bluetooth: hci7: command tx timeout [ 1150.257492][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 1150.573165][T11595] netlink: 'syz.1.927': attribute type 6 has an invalid length. [ 1152.520567][ T5600] Bluetooth: hci7: command tx timeout [ 1152.974841][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.974864][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.974895][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.703310][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.703331][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.703361][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.726049][T11336] hsr_slave_0: entered promiscuous mode [ 1153.729679][T11336] hsr_slave_1: entered promiscuous mode [ 1153.732829][T11336] debugfs: 'hsr0' already exists in 'hsr' [ 1153.732872][T11336] Cannot create hsr debugfs directory [ 1154.481354][ T198] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1154.515789][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1154.632183][ T198] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1154.633817][ T198] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1154.633853][ T198] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1154.633896][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.650634][T11626] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1154.668507][ T198] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1154.712676][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.714266][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1154.715795][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1154.715821][ T31] usb 2-1: SerialNumber: syz [ 1154.955780][T11363] hsr_slave_0: entered promiscuous mode [ 1155.016517][T11363] hsr_slave_1: entered promiscuous mode [ 1155.048520][T11363] debugfs: 'hsr0' already exists in 'hsr' [ 1155.048554][T11363] Cannot create hsr debugfs directory [ 1155.698643][ T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1155.750824][ T31] usb 2-1: USB disconnect, device number 29 [ 1156.523909][ T5600] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1157.482153][ T198] usb 5-1: USB disconnect, device number 27 [ 1157.782216][T11648] FAULT_INJECTION: forcing a failure. [ 1157.782216][T11648] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.782258][T11648] CPU: 0 UID: 0 PID: 11648 Comm: syz.4.936 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1157.782289][T11648] Tainted: [L]=SOFTLOCKUP [ 1157.782297][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1157.782310][T11648] Call Trace: [ 1157.782319][T11648] [ 1157.782330][T11648] dump_stack_lvl+0xe8/0x150 [ 1157.782368][T11648] should_fail_ex+0x46b/0x600 [ 1157.782405][T11648] should_failslab+0xa8/0x100 [ 1157.782429][T11648] __kmalloc_noprof+0xfb/0x790 [ 1157.782461][T11648] ? tomoyo_realpath_from_path+0xef/0x640 [ 1157.782495][T11648] ? tomoyo_realpath_from_path+0xef/0x640 [ 1157.782536][T11648] tomoyo_realpath_from_path+0xef/0x640 [ 1157.782574][T11648] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1157.782601][T11648] tomoyo_path_number_perm+0x246/0x5f0 [ 1157.782632][T11648] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1157.782658][T11648] ? __lock_acquire+0x747/0x2de0 [ 1157.782706][T11648] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1157.782729][T11648] ? hook_file_ioctl+0x1f5/0x610 [ 1157.782776][T11648] ? __fget_files+0x2a/0x420 [ 1157.782803][T11648] ? __fget_files+0x2a/0x420 [ 1157.782826][T11648] ? __fget_files+0x3a8/0x420 [ 1157.782847][T11648] ? __fget_files+0x2a/0x420 [ 1157.782874][T11648] security_file_ioctl+0xc3/0x2a0 [ 1157.782906][T11648] __se_sys_ioctl+0x47/0x170 [ 1157.782940][T11648] do_syscall_64+0x166/0x520 [ 1157.782962][T11648] ? trace_irq_disable+0x3b/0x140 [ 1157.782990][T11648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.783013][T11648] ? clear_bhb_loop+0x70/0xc0 [ 1157.783041][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.783061][T11648] RIP: 0033:0x7fab6b25e159 [ 1157.783083][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.783101][T11648] RSP: 002b:00007fab694b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.783125][T11648] RAX: ffffffffffffffda RBX: 00007fab6b4e5fa0 RCX: 00007fab6b25e159 [ 1157.783141][T11648] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003 [ 1157.783164][T11648] RBP: 00007fab694b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.783178][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.783192][T11648] R13: 00007fab6b4e6038 R14: 00007fab6b4e5fa0 R15: 00007fffc2014308 [ 1157.783227][T11648] [ 1157.783383][T11648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1159.923375][ T6198] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1159.952207][T11531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.952426][T11531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.952698][T11531] bridge_slave_0: entered allmulticast mode [ 1159.954906][T11531] bridge_slave_0: entered promiscuous mode [ 1159.959244][T11531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.959424][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.959549][T11531] bridge_slave_1: entered allmulticast mode [ 1159.964036][T11531] bridge_slave_1: entered promiscuous mode [ 1160.660744][T11531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.668957][T11531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.992182][ T6198] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1160.993844][ T6198] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1160.995441][ T6198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1160.995469][ T6198] usb 5-1: SerialNumber: syz [ 1160.999480][T11531] team0: Port device team_slave_0 added [ 1161.107547][T11531] team0: Port device team_slave_1 added [ 1161.167968][T11531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.167990][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.168018][T11531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.170652][T11531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.170669][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.170699][T11531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.260624][T11531] hsr_slave_0: entered promiscuous mode [ 1161.262205][T11531] hsr_slave_1: entered promiscuous mode [ 1161.263664][T11531] debugfs: 'hsr0' already exists in 'hsr' [ 1161.263690][T11531] Cannot create hsr debugfs directory [ 1161.336438][ T198] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1161.493384][ T198] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1161.497170][ T198] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1161.497216][ T198] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1161.497242][ T198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.536485][T11680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1161.580817][ T198] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1161.692134][ T6198] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1161.736184][ T6198] usb 5-1: USB disconnect, device number 28 [ 1162.122524][ T198] usb 2-1: USB disconnect, device number 30 [ 1163.012217][T11709] netlink: 'syz.4.946': attribute type 11 has an invalid length. [ 1163.135655][ T5850] bridge_slave_1: left allmulticast mode [ 1163.135696][ T5850] bridge_slave_1: left promiscuous mode [ 1163.136022][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.334356][ T5850] bridge_slave_0: left allmulticast mode [ 1163.334401][ T5850] bridge_slave_0: left promiscuous mode [ 1163.334687][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.573493][ T198] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1163.701938][ T198] usb 2-1: device descriptor read/64, error -71 [ 1163.941374][ T198] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1163.964086][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1164.071274][ T198] usb 2-1: device descriptor read/64, error -71 [ 1164.072155][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.166782][ T5850] bond0 (unregistering): Released all slaves [ 1164.181606][ T198] usb usb2-port1: attempt power cycle [ 1164.641168][ T198] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 1164.677412][ T198] usb 2-1: device descriptor read/8, error -71 [ 1164.911331][ T198] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1164.933017][ T198] usb 2-1: device descriptor read/8, error -71 [ 1165.041891][ T198] usb usb2-port1: unable to enumerate USB device [ 1165.081213][ T5850] hsr_slave_0: left promiscuous mode [ 1165.111339][ T5850] hsr_slave_1: left promiscuous mode [ 1165.112990][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.152139][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.561182][ T198] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1165.602513][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 1165.655553][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 1165.712893][ T198] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1165.714188][ T198] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.716824][ T198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1165.716850][ T198] usb 5-1: Product: syz [ 1165.716866][ T198] usb 5-1: Manufacturer: syz [ 1165.820517][ T198] usb 5-1: selecting invalid altsetting 1 [ 1165.835225][ T198] dvb_ttusb_budget: ttusb_init_controller: error [ 1165.836524][ T198] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1166.403635][ T198] DVB: Unable to find symbol cx22700_attach() [ 1166.515485][ T198] DVB: Unable to find symbol tda10046_attach() [ 1166.515505][ T198] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1166.520465][ T198] usb 5-1: USB disconnect, device number 29 [ 1168.101318][ T6199] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1168.302200][ T6199] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.306062][ T6199] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1168.307574][ T6199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1168.307592][ T6199] usb 2-1: SerialNumber: syz [ 1168.636131][ T6199] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1168.764930][ T6198] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1168.778138][ T6199] usb 2-1: USB disconnect, device number 35 [ 1168.943263][ T6198] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1168.975373][ T6198] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1168.975412][ T6198] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1168.975454][ T6198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.984753][T11779] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1169.071466][ T6198] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1169.502613][ T9272] bridge_slave_1: left allmulticast mode [ 1169.502658][ T9272] bridge_slave_1: left promiscuous mode [ 1169.502976][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.670698][ T9272] bridge_slave_0: left allmulticast mode [ 1169.670743][ T9272] bridge_slave_0: left promiscuous mode [ 1169.686199][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.422341][ T9272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.543832][ T9272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.623782][ T9272] bond0 (unregistering): Released all slaves [ 1170.960774][ T6198] usb 5-1: USB disconnect, device number 30 [ 1171.331370][ T9272] hsr_slave_0: left promiscuous mode [ 1171.371771][ T9272] hsr_slave_1: left promiscuous mode [ 1171.372689][ T9272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.426080][ T9272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.162614][ T9272] team0 (unregistering): Port device team_slave_1 removed [ 1174.254088][ T9272] team0 (unregistering): Port device team_slave_0 removed [ 1175.932130][T11363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1176.183507][T11363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.289330][T11363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1176.315477][T11363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.331211][T11363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1176.443563][T11363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1176.832543][T11363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1176.856010][T11363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1177.506820][T11336] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1177.708445][T11336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1177.727572][T11336] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1177.775512][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.775597][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.813946][T11336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1177.822523][T11336] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1177.855403][T11336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1177.869530][T11336] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1177.871187][ T198] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1177.924556][T11336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.032094][ T198] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1178.033677][ T198] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1178.033723][ T198] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1178.033766][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.083368][T11847] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1178.103168][ T198] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1179.675647][ T198] usb 5-1: USB disconnect, device number 31 [ 1180.069286][T11531] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1180.097349][T11531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.108363][T11531] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1180.148876][T11531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1180.193190][T11531] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1180.241585][T11531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1180.253823][T11531] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1182.076942][T11531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1182.132683][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.719951][T11363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.938878][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.939048][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.224820][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.224982][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.166106][T11531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.766187][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.833187][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.833350][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.889339][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.889526][ T9272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.970703][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1185.023000][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1185.026268][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1185.030575][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1185.061408][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1186.558391][T11917] FAULT_INJECTION: forcing a failure. [ 1186.558391][T11917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.558431][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.4.976 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1186.558458][T11917] Tainted: [L]=SOFTLOCKUP [ 1186.558466][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1186.558477][T11917] Call Trace: [ 1186.558484][T11917] [ 1186.558493][T11917] dump_stack_lvl+0xe8/0x150 [ 1186.558534][T11917] should_fail_ex+0x46b/0x600 [ 1186.558565][T11917] _copy_from_user+0x2d/0xb0 [ 1186.558594][T11917] do_sock_getsockopt+0x200/0x7e0 [ 1186.558620][T11917] ? __pfx_vfs_write+0x10/0x10 [ 1186.558642][T11917] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1186.558662][T11917] ? do_sys_openat2+0x14e/0x200 [ 1186.558676][T11917] ? kmem_cache_free+0x187/0x6d0 [ 1186.558716][T11917] ? ksys_write+0x202/0x270 [ 1186.558741][T11917] __x64_sys_getsockopt+0x1aa/0x250 [ 1186.558769][T11917] do_syscall_64+0x166/0x520 [ 1186.558787][T11917] ? trace_irq_disable+0x3b/0x140 [ 1186.558810][T11917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.558828][T11917] ? clear_bhb_loop+0x70/0xc0 [ 1186.558850][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.558868][T11917] RIP: 0033:0x7fab6b25e159 [ 1186.558887][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.558903][T11917] RSP: 002b:00007fab694b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1186.558925][T11917] RAX: ffffffffffffffda RBX: 00007fab6b4e5fa0 RCX: 00007fab6b25e159 [ 1186.558939][T11917] RDX: 0000000000000022 RSI: 0000000000000001 RDI: 0000000000000003 [ 1186.558951][T11917] RBP: 00007fab694b6090 R08: 0000200000000340 R09: 0000000000000000 [ 1186.558963][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.558974][T11917] R13: 00007fab6b4e6038 R14: 00007fab6b4e5fa0 R15: 00007fffc2014308 [ 1186.559003][T11917] [ 1187.137594][T10567] Bluetooth: hci0: command tx timeout [ 1187.824064][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1187.893522][T11928] netlink: 312 bytes leftover after parsing attributes in process `syz.1.975'. [ 1188.008931][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1188.031059][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1188.057507][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1188.147226][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1188.704594][T11928] netlink: 1 bytes leftover after parsing attributes in process `syz.1.975'. [ 1189.201461][T10567] Bluetooth: hci0: command tx timeout [ 1190.241348][T10567] Bluetooth: hci1: command tx timeout [ 1191.281224][T10567] Bluetooth: hci0: command tx timeout [ 1191.521166][ T198] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1191.671228][ T198] usb 2-1: Using ep0 maxpacket: 16 [ 1191.672292][ T198] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1191.673956][ T198] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 1191.673984][ T198] usb 2-1: config 0 has no interface number 0 [ 1191.674034][ T198] usb 2-1: config 0 interface 231 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1191.674074][ T198] usb 2-1: config 0 interface 231 has no altsetting 0 [ 1191.677650][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.677677][ T198] usb 2-1: Product: syz [ 1191.677693][ T198] usb 2-1: Manufacturer: syz [ 1191.677709][ T198] usb 2-1: SerialNumber: syz [ 1191.801095][ T198] usb 2-1: config 0 descriptor?? [ 1191.820429][ T198] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1192.240619][ T198] gspca_spca508: reg_read err -32 [ 1192.266015][ T198] gspca_spca508: reg_read err -32 [ 1192.299445][ T198] gspca_spca508: reg_read err -32 [ 1192.313556][ T198] gspca_spca508: reg_read err -32 [ 1192.317049][ T198] gspca_spca508: reg_read err -32 [ 1192.322540][T10567] Bluetooth: hci1: command tx timeout [ 1192.341027][ T198] gspca_spca508: reg write: error -71 [ 1192.341137][ T198] spca508 2-1:0.231: probe with driver spca508 failed with error -71 [ 1192.418999][ T198] usb 2-1: USB disconnect, device number 36 [ 1192.831347][ T5860] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1192.982826][ T5860] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1192.986273][ T5860] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1192.986313][ T5860] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1192.986352][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.025586][T11950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1193.100019][ T5860] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1193.212764][T11962] FAULT_INJECTION: forcing a failure. [ 1193.212764][T11962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.212806][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.1.983 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1193.212835][T11962] Tainted: [L]=SOFTLOCKUP [ 1193.212843][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1193.212855][T11962] Call Trace: [ 1193.212864][T11962] [ 1193.212873][T11962] dump_stack_lvl+0xe8/0x150 [ 1193.212916][T11962] should_fail_ex+0x46b/0x600 [ 1193.212952][T11962] _copy_from_user+0x2d/0xb0 [ 1193.212983][T11962] ___sys_sendmsg+0x1c6/0x360 [ 1193.213007][T11962] ? __lock_acquire+0x747/0x2de0 [ 1193.213050][T11962] ? __pfx____sys_sendmsg+0x10/0x10 [ 1193.213111][T11962] ? __fget_files+0x2a/0x420 [ 1193.213134][T11962] ? __fget_files+0x3a8/0x420 [ 1193.213167][T11962] __x64_sys_sendmsg+0x1b7/0x290 [ 1193.213193][T11962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1193.213237][T11962] do_syscall_64+0x166/0x520 [ 1193.213259][T11962] ? trace_irq_disable+0x3b/0x140 [ 1193.213284][T11962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.213305][T11962] ? clear_bhb_loop+0x70/0xc0 [ 1193.213330][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.213350][T11962] RIP: 0033:0x7f423390e159 [ 1193.213370][T11962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.213389][T11962] RSP: 002b:00007f4231b66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1193.213413][T11962] RAX: ffffffffffffffda RBX: 00007f4233b95fa0 RCX: 00007f423390e159 [ 1193.213429][T11962] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1193.213442][T11962] RBP: 00007f4231b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.213456][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.213469][T11962] R13: 00007f4233b96038 R14: 00007f4233b95fa0 R15: 00007ffe484014b8 [ 1193.213503][T11962] [ 1193.372760][T10567] Bluetooth: hci0: command tx timeout [ 1193.735997][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.835913][T11969] capability: warning: `syz.1.984' uses 32-bit capabilities (legacy support in use) [ 1193.839519][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 1194.401953][T10567] Bluetooth: hci1: command tx timeout [ 1195.723025][ T198] usb 5-1: USB disconnect, device number 32 [ 1196.481256][T10567] Bluetooth: hci1: command tx timeout [ 1199.644996][T11894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.645180][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.645399][T11894] bridge_slave_0: entered allmulticast mode [ 1199.672347][T11894] bridge_slave_0: entered promiscuous mode [ 1199.738564][T11894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.738721][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.738936][T11894] bridge_slave_1: entered allmulticast mode [ 1199.776216][T11894] bridge_slave_1: entered promiscuous mode [ 1200.254495][T11894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.287885][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.288059][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.288180][T11922] bridge_slave_0: entered allmulticast mode [ 1200.289917][T11922] bridge_slave_0: entered promiscuous mode [ 1200.343768][T11894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.384756][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.384835][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.384946][T11922] bridge_slave_1: entered allmulticast mode [ 1200.386572][T11922] bridge_slave_1: entered promiscuous mode [ 1200.441154][ T31] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1200.498820][T11531] veth0_vlan: entered promiscuous mode [ 1200.592824][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1200.598602][T11894] team0: Port device team_slave_0 added [ 1200.599469][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1200.599491][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1200.599518][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.614028][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.629177][ T31] usb 2-1: config 0 descriptor?? [ 1200.652431][T12025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1200.746964][T11894] team0: Port device team_slave_1 added [ 1200.757500][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.917409][ T31] uclogic 0003:28BD:0078.0001: interface is invalid, ignoring [ 1201.041736][ T70] bridge_slave_1: left allmulticast mode [ 1201.041793][ T70] bridge_slave_1: left promiscuous mode [ 1201.042102][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.077655][ T10] usb 2-1: USB disconnect, device number 37 [ 1201.172426][ T70] bridge_slave_0: left allmulticast mode [ 1201.172457][ T70] bridge_slave_0: left promiscuous mode [ 1201.172667][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.211158][ T198] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1201.373783][ T198] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1201.376861][ T198] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1201.376896][ T198] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1201.376922][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.424307][T12034] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1201.468257][ T198] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1202.041971][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.163291][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.260942][ T70] bond0 (unregistering): Released all slaves [ 1202.758074][T11894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.758096][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.758126][T11894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.761920][T11922] team0: Port device team_slave_0 added [ 1202.772715][T11531] veth1_vlan: entered promiscuous mode [ 1202.779330][T11922] team0: Port device team_slave_1 added [ 1202.963443][ T70] hsr_slave_0: left promiscuous mode [ 1203.001650][ T70] hsr_slave_1: left promiscuous mode [ 1203.003524][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.042211][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.245546][ T31] usb 5-1: USB disconnect, device number 33 [ 1203.811720][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1203.873785][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1204.345598][T11894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.345614][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.345631][T11894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.670570][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.670591][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.670608][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.746308][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.746329][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.746357][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.054608][T11894] hsr_slave_0: entered promiscuous mode [ 1205.107208][T11894] hsr_slave_1: entered promiscuous mode [ 1205.122050][T11894] debugfs: 'hsr0' already exists in 'hsr' [ 1205.122084][T11894] Cannot create hsr debugfs directory [ 1205.381805][T12057] FAULT_INJECTION: forcing a failure. [ 1205.381805][T12057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.381834][T12057] CPU: 0 UID: 0 PID: 12057 Comm: syz.4.1001 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1205.381852][T12057] Tainted: [L]=SOFTLOCKUP [ 1205.381857][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1205.381864][T12057] Call Trace: [ 1205.381869][T12057] [ 1205.381875][T12057] dump_stack_lvl+0xe8/0x150 [ 1205.381899][T12057] should_fail_ex+0x46b/0x600 [ 1205.381919][T12057] _copy_from_user+0x2d/0xb0 [ 1205.381936][T12057] __sys_bpf+0x2e7/0xd90 [ 1205.381959][T12057] ? __pfx___sys_bpf+0x10/0x10 [ 1205.381977][T12057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1205.381995][T12057] ? rt_mutex_slowunlock+0x219/0x460 [ 1205.382021][T12057] ? ksys_write+0x248/0x270 [ 1205.382037][T12057] ? __pfx_ksys_write+0x10/0x10 [ 1205.382054][T12057] __x64_sys_bpf+0xba/0xd0 [ 1205.382076][T12057] do_syscall_64+0x166/0x520 [ 1205.382089][T12057] ? trace_irq_disable+0x3b/0x140 [ 1205.382104][T12057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.382117][T12057] ? clear_bhb_loop+0x70/0xc0 [ 1205.382152][T12057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.382165][T12057] RIP: 0033:0x7fab6b25e159 [ 1205.382178][T12057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.382189][T12057] RSP: 002b:00007fab69495028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1205.382205][T12057] RAX: ffffffffffffffda RBX: 00007fab6b4e6090 RCX: 00007fab6b25e159 [ 1205.382214][T12057] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1205.382223][T12057] RBP: 00007fab69495090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.382231][T12057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.382239][T12057] R13: 00007fab6b4e6128 R14: 00007fab6b4e6090 R15: 00007fffc2014308 [ 1205.382258][T12057] [ 1205.387166][T11922] hsr_slave_0: entered promiscuous mode [ 1205.387716][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1205.388605][T11922] hsr_slave_1: entered promiscuous mode [ 1205.389490][T11922] debugfs: 'hsr0' already exists in 'hsr' [ 1205.389515][T11922] Cannot create hsr debugfs directory [ 1205.670927][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1205.683526][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1205.692202][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1205.695460][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1209.001230][T10567] Bluetooth: hci3: command tx timeout [ 1209.138377][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1209.693494][T12100] FAULT_INJECTION: forcing a failure. [ 1209.693494][T12100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.693522][T12100] CPU: 1 UID: 0 PID: 12100 Comm: syz.4.1007 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1209.693541][T12100] Tainted: [L]=SOFTLOCKUP [ 1209.693548][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1209.693557][T12100] Call Trace: [ 1209.693562][T12100] [ 1209.693568][T12100] dump_stack_lvl+0xe8/0x150 [ 1209.693592][T12100] should_fail_ex+0x46b/0x600 [ 1209.693613][T12100] _copy_from_user+0x2d/0xb0 [ 1209.693631][T12100] do_sock_getsockopt+0x200/0x7e0 [ 1209.693647][T12100] ? __pfx_vfs_write+0x10/0x10 [ 1209.693662][T12100] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1209.693679][T12100] ? do_sys_openat2+0x14e/0x200 [ 1209.693690][T12100] ? kmem_cache_free+0x187/0x6d0 [ 1209.693716][T12100] ? ksys_write+0x202/0x270 [ 1209.693734][T12100] __x64_sys_getsockopt+0x1aa/0x250 [ 1209.693753][T12100] do_syscall_64+0x166/0x520 [ 1209.693766][T12100] ? trace_irq_disable+0x3b/0x140 [ 1209.693781][T12100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.693794][T12100] ? clear_bhb_loop+0x70/0xc0 [ 1209.693808][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.693820][T12100] RIP: 0033:0x7fab6b25e159 [ 1209.693833][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.693845][T12100] RSP: 002b:00007fab694b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1209.693860][T12100] RAX: ffffffffffffffda RBX: 00007fab6b4e5fa0 RCX: 00007fab6b25e159 [ 1209.693870][T12100] RDX: 000000000000004a RSI: 0000000000000001 RDI: 0000000000000003 [ 1209.693878][T12100] RBP: 00007fab694b6090 R08: 0000200000000280 R09: 0000000000000000 [ 1209.693886][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.693894][T12100] R13: 00007fab6b4e6038 R14: 00007fab6b4e5fa0 R15: 00007fffc2014308 [ 1209.693913][T12100] [ 1210.365306][T12105] FAULT_INJECTION: forcing a failure. [ 1210.365306][T12105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1210.365348][T12105] CPU: 0 UID: 0 PID: 12105 Comm: syz.1.1009 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1210.365379][T12105] Tainted: [L]=SOFTLOCKUP [ 1210.365388][T12105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1210.365401][T12105] Call Trace: [ 1210.365410][T12105] [ 1210.365420][T12105] dump_stack_lvl+0xe8/0x150 [ 1210.365459][T12105] should_fail_ex+0x46b/0x600 [ 1210.365495][T12105] _copy_from_user+0x2d/0xb0 [ 1210.365527][T12105] __sys_bpf+0x2e7/0xd90 [ 1210.365569][T12105] ? __pfx___sys_bpf+0x10/0x10 [ 1210.365604][T12105] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1210.365641][T12105] ? rt_mutex_slowunlock+0x219/0x460 [ 1210.365688][T12105] ? ksys_write+0x248/0x270 [ 1210.365716][T12105] ? __pfx_ksys_write+0x10/0x10 [ 1210.365747][T12105] __x64_sys_bpf+0xba/0xd0 [ 1210.365779][T12105] do_syscall_64+0x166/0x520 [ 1210.365800][T12105] ? trace_irq_disable+0x3b/0x140 [ 1210.365829][T12105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.365850][T12105] ? clear_bhb_loop+0x70/0xc0 [ 1210.365877][T12105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.365902][T12105] RIP: 0033:0x7f423390e159 [ 1210.365924][T12105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.365942][T12105] RSP: 002b:00007f4231b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1210.365966][T12105] RAX: ffffffffffffffda RBX: 00007f4233b95fa0 RCX: 00007f423390e159 [ 1210.365982][T12105] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1210.365996][T12105] RBP: 00007f4231b66090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.366010][T12105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.366024][T12105] R13: 00007f4233b96038 R14: 00007f4233b95fa0 R15: 00007ffe484014b8 [ 1210.366061][T12105] [ 1210.475809][ T6199] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1210.691999][ T6199] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1210.693951][ T6199] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1210.693990][ T6199] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1210.694032][ T6199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.767612][T12103] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1210.797156][ T6199] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1211.052378][T10567] Bluetooth: hci3: command tx timeout [ 1213.124777][T10567] Bluetooth: hci3: command tx timeout [ 1213.761433][ T198] usb 5-1: USB disconnect, device number 34 [ 1217.081705][T10567] Bluetooth: hci3: command tx timeout [ 1220.023607][T12147] hub 8-0:1.0: USB hub found [ 1220.027908][T12147] hub 8-0:1.0: 1 port detected [ 1221.141961][T12149] netlink: 'syz.1.1017': attribute type 4 has an invalid length. [ 1221.141981][T12149] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1017'. [ 1221.245223][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1223.166794][T12173] netlink: set zone limit has 4 unknown bytes [ 1223.951171][ T5721] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1224.122210][ T5721] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1224.123961][ T5721] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1224.123990][ T5721] usb 5-1: config 0 has no interface number 0 [ 1224.124037][ T5721] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1224.136210][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.136240][ T5721] usb 5-1: Product: syz [ 1224.136256][ T5721] usb 5-1: Manufacturer: syz [ 1224.136272][ T5721] usb 5-1: SerialNumber: syz [ 1224.213679][ T5721] usb 5-1: config 0 descriptor?? [ 1224.531176][ T5860] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1225.080713][ T5721] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1225.737965][ T5860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1225.738035][ T5860] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1225.739125][ T5860] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1225.739177][ T5860] usb 2-1: can't read configurations, error -71 [ 1225.830937][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.835444][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.836389][T12054] bridge_slave_0: entered allmulticast mode [ 1225.862580][T12054] bridge_slave_0: entered promiscuous mode [ 1225.882448][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.882689][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.882901][T12054] bridge_slave_1: entered allmulticast mode [ 1225.917914][T12054] bridge_slave_1: entered promiscuous mode [ 1226.365485][T12054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.377832][ T5721] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1226.378343][ T5721] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1226.378653][ T5721] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1226.422707][ T5721] usb 5-1: USB disconnect, device number 35 [ 1226.452259][T12054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.863365][T12054] team0: Port device team_slave_0 added [ 1226.866818][T12054] team0: Port device team_slave_1 added [ 1227.079910][T12054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.079925][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.079942][T12054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.126255][T12054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.126268][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.126285][T12054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.548681][T12249] jffs2: notice: (12249) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1227.909130][T12256] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1227.909162][T12256] CPU: 1 UID: 0 PID: 12256 Comm: syz.1.1037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1227.909196][T12256] Tainted: [L]=SOFTLOCKUP [ 1227.909205][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1227.909218][T12256] Call Trace: [ 1227.909228][T12256] [ 1227.909240][T12256] dump_stack_lvl+0xe8/0x150 [ 1227.909283][T12256] sysfs_create_dir_ns+0x271/0x2a0 [ 1227.909316][T12256] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1227.909350][T12256] ? rt_spin_unlock+0x165/0x200 [ 1227.909384][T12256] kobject_add_internal+0x62c/0xce0 [ 1227.909430][T12256] kobject_add+0x163/0x240 [ 1227.909456][T12256] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1227.909489][T12256] ? __pfx_kobject_add+0x10/0x10 [ 1227.909523][T12256] ? get_device_parent+0x370/0x3a0 [ 1227.909558][T12256] ? __pfx_klist_children_get+0x10/0x10 [ 1227.909587][T12256] device_add+0x3fa/0xb80 [ 1227.909623][T12256] tty_register_device_attr+0x425/0x990 [ 1227.909765][T12256] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1227.909806][T12256] ? tty_port_init+0x140/0x1b0 [ 1227.909865][T12256] ? gsm_dlci_alloc+0x341/0x650 [ 1227.909898][T12256] gsm_activate_mux+0x110/0x2a0 [ 1227.909932][T12256] gsmld_ioctl+0x12d3/0x1930 [ 1227.909969][T12256] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1227.910009][T12256] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1227.910052][T12256] ? ldsem_down_read+0x12/0x40 [ 1227.910081][T12256] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1227.910107][T12256] tty_ioctl+0x9c3/0xde0 [ 1227.910134][T12256] ? __pfx_tty_ioctl+0x10/0x10 [ 1227.910160][T12256] __se_sys_ioctl+0xff/0x170 [ 1227.910193][T12256] do_syscall_64+0x166/0x520 [ 1227.910216][T12256] ? trace_irq_disable+0x3b/0x140 [ 1227.910245][T12256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.910267][T12256] ? clear_bhb_loop+0x70/0xc0 [ 1227.910291][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.910312][T12256] RIP: 0033:0x7f423390e159 [ 1227.910333][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.910353][T12256] RSP: 002b:00007f4231b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1227.910379][T12256] RAX: ffffffffffffffda RBX: 00007f4233b96090 RCX: 00007f423390e159 [ 1227.910396][T12256] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 1227.910421][T12256] RBP: 00007f42339a506b R08: 0000000000000000 R09: 0000000000000000 [ 1227.910435][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.910450][T12256] R13: 00007f4233b96128 R14: 00007f4233b96090 R15: 00007ffe484014b8 [ 1227.910487][T12256] [ 1227.931199][T12256] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1227.944286][T12054] hsr_slave_0: entered promiscuous mode [ 1227.945575][T12054] hsr_slave_1: entered promiscuous mode [ 1227.946473][T12054] debugfs: 'hsr0' already exists in 'hsr' [ 1227.946496][T12054] Cannot create hsr debugfs directory [ 1229.234330][ T70] bridge_slave_1: left allmulticast mode [ 1229.234371][ T70] bridge_slave_1: left promiscuous mode [ 1229.234668][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.553662][ T70] bridge_slave_0: left allmulticast mode [ 1229.553707][ T70] bridge_slave_0: left promiscuous mode [ 1229.554018][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.821461][ T70] bridge_slave_1: left allmulticast mode [ 1229.821503][ T70] bridge_slave_1: left promiscuous mode [ 1229.821784][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.962821][ T70] bridge_slave_0: left allmulticast mode [ 1229.962864][ T70] bridge_slave_0: left promiscuous mode [ 1229.963185][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.250164][T12280] syz.1.1040 (12280) used greatest stack depth: 19296 bytes left [ 1230.952636][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.031974][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.053674][ T70] bond0 (unregistering): Released all slaves [ 1231.632222][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.711761][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.733333][ T70] bond0 (unregistering): Released all slaves [ 1231.956826][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1232.459040][T12287] loop2: detected capacity change from 0 to 4095 [ 1233.005266][T12141] Buffer I/O error on dev loop2, logical block 511, async page read [ 1233.291342][ T70] hsr_slave_0: left promiscuous mode [ 1233.311343][ T70] hsr_slave_1: left promiscuous mode [ 1233.312233][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.352722][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.492567][ T70] hsr_slave_0: left promiscuous mode [ 1233.511449][ T70] hsr_slave_1: left promiscuous mode [ 1233.513887][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.555042][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.631921][ T70] veth1_vlan: left promiscuous mode [ 1233.632067][ T70] veth0_vlan: left promiscuous mode [ 1236.271979][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1236.335947][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1236.473270][T12310] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1236.901829][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1236.951805][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1237.208917][T12301] tipc: Started in network mode [ 1237.208947][T12301] tipc: Node identity ac1414aa, cluster identity 4711 [ 1237.251467][T12301] tipc: New replicast peer: 172.20.20.187 [ 1237.255901][T12301] tipc: Enabled bearer , priority 10 [ 1237.424551][T11894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1237.506432][T11894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1237.508268][T11894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1237.564235][T11894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1237.581522][T11894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1237.687616][T11894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.690826][T11894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1237.701098][ T5721] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1237.770065][T11894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.854925][ T5721] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1237.856661][ T5721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1237.856690][ T5721] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1237.859658][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.859687][ T5721] usb 2-1: Product: syz [ 1237.859702][ T5721] usb 2-1: Manufacturer: syz [ 1237.859715][ T5721] usb 2-1: SerialNumber: syz [ 1238.344086][ T5721] usb 2-1: Limiting number of CPorts to U8_MAX [ 1238.535451][ T198] tipc: Node number set to 2886997162 [ 1238.672310][ C0] usb 2-1: check_urb_status: overflow actual length is 128 [ 1238.672404][ C0] usb 2-1: arpc in-urb error -75 (dropped) [ 1238.898808][ T5721] usb 2-1: failed to set cport flags for port 0 [ 1238.899005][ T5721] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1239.037239][ T5721] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1239.052655][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1239.097237][ T5721] usb 2-1: USB disconnect, device number 40 [ 1239.224966][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.225051][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.370646][T12343] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1055'. [ 1239.593946][T11922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1239.682134][T11922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1239.785184][T11922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1239.898750][T11922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1239.935184][T11922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1240.003978][T11922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1240.523659][T11922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1240.566102][T11922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1241.012500][ T5694] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1241.049498][T11894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.182154][ T5694] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1241.193283][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.199098][ T5694] usb 5-1: config 0 descriptor?? [ 1241.299241][ T5694] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1241.472307][ T5694] gp8psk: usb in 128 operation failed. [ 1241.694386][T11894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.714332][ T5694] gp8psk: usb in 146 operation failed. [ 1241.714358][ T5694] gp8psk: failed to get FW version [ 1241.719335][ T5694] gp8psk: usb in 149 operation failed. [ 1241.719358][ T5694] gp8psk: failed to get FPGA version [ 1241.732843][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.733072][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.743947][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.749463][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.795084][ T5694] gp8psk: usb in 138 operation failed. [ 1241.795182][ T5694] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1241.795285][ T5694] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1241.861409][ T5694] usb 5-1: USB disconnect, device number 36 [ 1242.170071][T12389] FAULT_INJECTION: forcing a failure. [ 1242.170071][T12389] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.170116][T12389] CPU: 0 UID: 0 PID: 12389 Comm: syz.1.1063 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1242.170149][T12389] Tainted: [L]=SOFTLOCKUP [ 1242.170158][T12389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1242.170172][T12389] Call Trace: [ 1242.170181][T12389] [ 1242.170191][T12389] dump_stack_lvl+0xe8/0x150 [ 1242.170232][T12389] should_fail_ex+0x46b/0x600 [ 1242.170271][T12389] should_failslab+0xa8/0x100 [ 1242.170296][T12389] __kmalloc_noprof+0xfb/0x790 [ 1242.170328][T12389] ? group_cpus_evenly+0x2cf/0x5e0 [ 1242.170353][T12389] ? group_cpus_evenly+0x2cf/0x5e0 [ 1242.170385][T12389] group_cpus_evenly+0x2cf/0x5e0 [ 1242.170413][T12389] ? __pfx_group_cpus_evenly+0x10/0x10 [ 1242.170455][T12389] blk_mq_map_queues+0xb1/0x490 [ 1242.170528][T12389] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 1242.170550][T12389] ? __kmalloc_node_noprof+0x58e/0x7b0 [ 1242.170582][T12389] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 1242.170609][T12389] ? blk_mq_update_queue_map+0x383/0x450 [ 1242.170643][T12389] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 1242.170687][T12389] loop_add+0x436/0xb50 [ 1242.170785][T12389] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1242.170821][T12389] ? __pfx_loop_add+0x10/0x10 [ 1242.170880][T12389] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1242.170917][T12389] loop_control_ioctl+0x12b/0x5b0 [ 1242.170944][T12389] ? __fget_files+0x2a/0x420 [ 1242.170967][T12389] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1242.170987][T12389] ? __fget_files+0x2a/0x420 [ 1242.171013][T12389] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1242.171037][T12389] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1242.171061][T12389] __se_sys_ioctl+0xff/0x170 [ 1242.171093][T12389] do_syscall_64+0x166/0x520 [ 1242.171115][T12389] ? trace_irq_disable+0x3b/0x140 [ 1242.171141][T12389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.171164][T12389] ? clear_bhb_loop+0x70/0xc0 [ 1242.171192][T12389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.171215][T12389] RIP: 0033:0x7f423390e159 [ 1242.171237][T12389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.171257][T12389] RSP: 002b:00007f4231b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1242.171283][T12389] RAX: ffffffffffffffda RBX: 00007f4233b95fa0 RCX: 00007f423390e159 [ 1242.171300][T12389] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1242.171314][T12389] RBP: 00007f42339a506b R08: 0000000000000000 R09: 0000000000000000 [ 1242.171328][T12389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.171341][T12389] R13: 00007f4233b96038 R14: 00007f4233b95fa0 R15: 00007ffe484014b8 [ 1242.171377][T12389] [ 1242.853714][T11922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.951112][ T5694] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1243.022625][T11922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.101518][ T5694] usb 5-1: Using ep0 maxpacket: 32 [ 1243.102541][ T5694] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1243.104192][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.147550][ T5694] usb 5-1: config 0 descriptor?? [ 1243.222310][ T5694] as10x_usb: device has been detected [ 1243.223482][ T5694] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1243.270717][ T5694] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1243.360641][T12396] INFO: trying to register non-static key. [ 1243.366589][T12396] The code is fine but needs lockdep annotation, or maybe [ 1243.373899][T12396] you didn't initialize this object before use? [ 1243.380223][T12396] turning off the locking correctness validator. [ 1243.386594][T12396] CPU: 0 UID: 0 PID: 12396 Comm: syz.4.1064 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1243.398349][T12396] Tainted: [L]=SOFTLOCKUP [ 1243.402694][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1243.412859][T12396] Call Trace: [ 1243.416153][T12396] [ 1243.419093][T12396] dump_stack_lvl+0xe8/0x150 [ 1243.423729][T12396] assign_lock_key+0x133/0x150 [ 1243.428510][T12396] register_lock_class+0xcc/0x2e0 [ 1243.433554][T12396] ? __lock_acquire+0x747/0x2de0 [ 1243.438533][T12396] __lock_acquire+0x10c/0x2de0 [ 1243.443306][T12396] ? __lock_acquire+0x747/0x2de0 [ 1243.448284][T12396] ? do_raw_spin_lock+0x12b/0x2f0 [ 1243.453329][T12396] lock_acquire+0x115/0x350 [ 1243.457992][T12396] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1243.463746][T12396] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1243.469398][T12396] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1243.475127][T12396] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1243.481257][T12396] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1243.486927][T12396] as102_dvb_dmx_start_feed+0x70/0x290 [ 1243.492395][T12396] dmx_section_feed_start_filtering+0x519/0x6b0 [ 1243.498735][T12396] dvb_dmxdev_filter_start+0xcdb/0x10d0 [ 1243.504296][T12396] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 1243.509765][T12396] dvb_demux_do_ioctl+0x473/0x540 [ 1243.514804][T12396] dvb_usercopy+0x199/0x2e0 [ 1243.519313][T12396] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1243.524888][T12396] ? __pfx_dvb_usercopy+0x10/0x10 [ 1243.529924][T12396] ? __fget_files+0x3a8/0x420 [ 1243.534610][T12396] ? __fget_files+0x2a/0x420 [ 1243.539244][T12396] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1243.544537][T12396] dvb_demux_ioctl+0x29/0x40 [ 1243.549149][T12396] __se_sys_ioctl+0xff/0x170 [ 1243.554019][T12396] do_syscall_64+0x166/0x520 [ 1243.558629][T12396] ? trace_irq_disable+0x3b/0x140 [ 1243.563668][T12396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.569740][T12396] ? clear_bhb_loop+0x70/0xc0 [ 1243.574431][T12396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.580414][T12396] RIP: 0033:0x7fab6b25e159 [ 1243.584948][T12396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.604917][T12396] RSP: 002b:00007fab694b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.613603][T12396] RAX: ffffffffffffffda RBX: 00007fab6b4e5fa0 RCX: 00007fab6b25e159 [ 1243.621584][T12396] RDX: 0000200000000080 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 1243.629562][T12396] RBP: 00007fab6b2f506b R08: 0000000000000000 R09: 0000000000000000 [ 1243.637536][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.645633][T12396] R13: 00007fab6b4e6038 R14: 00007fab6b4e5fa0 R15: 00007fffc2014308 [ 1243.653640][T12396] [ 1243.764275][ T5694] as10x_usb: error during firmware upload part1 [ 1243.764688][ T5694] Registered device nBox DVB-T Dongle [ 1243.766587][ T5694] usb 5-1: USB disconnect, device number 37 [ 1243.804521][ T5694] Unregistered device nBox DVB-T Dongle [ 1243.808174][ T5694] as10x_usb: device has been disconnected [ 1243.917442][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.917581][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.950186][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.950320][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.479507][T12054] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1244.508384][T12054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1244.512046][T12054] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1244.556290][T12054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1244.564187][T12054] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1244.603503][T12054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1244.604325][T12054] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1244.652785][T12054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1244.670723][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.790815][T12054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.807358][T12054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.814350][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.814513][ T9272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.820521][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.820633][ T9272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.077833][T11894] veth0_vlan: entered promiscuous mode [ 1245.100742][T11894] veth1_vlan: entered promiscuous mode [ 1245.111749][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.159161][T11894] veth0_macvtap: entered promiscuous mode [ 1245.167994][T11894] veth1_macvtap: entered promiscuous mode [ 1245.194379][T11894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.197468][T11894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.373047][T11894] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 1245.423963][ T3391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.423986][ T3391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.428105][T11894] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 1245.430673][T12054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.501116][ T777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.501269][ T5852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.501287][ T5852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.522058][ T777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.522288][ T777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.522784][ T777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.586983][T11922] veth0_vlan: entered promiscuous mode [ 1245.601993][T11922] veth1_vlan: entered promiscuous mode [ 1245.644557][T11922] veth0_macvtap: entered promiscuous mode [ 1245.648747][T11922] veth1_macvtap: entered promiscuous mode [ 1245.683194][T11922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.693466][T11922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.718352][T12054] veth0_vlan: entered promiscuous mode [ 1245.777355][T12054] veth1_vlan: entered promiscuous mode [ 1245.861760][T11922] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 1245.896029][ T6475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.896054][ T6475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.900146][T11922] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 1245.937391][T12054] veth0_macvtap: entered promiscuous mode [ 1245.953193][T12054] veth1_macvtap: entered promiscuous mode [ 1245.958209][ T777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.958232][ T777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.998069][T12054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.010449][T12054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.157666][T12054] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 1246.182413][ T5852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.182438][ T5852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.185916][T12054] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 1246.201200][ T5852] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.202529][ T5852] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.202570][ T5852] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.202600][ T5852] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.202631][ T5852] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.203215][ T5852] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.203247][ T5852] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.203291][ T5852] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.295432][ T5852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.295457][ T5852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50