last executing test programs: 3.671851364s ago: executing program 1 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.553285526s ago: executing program 3 (id=125): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) brk(0x689d80000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBENT(r6, 0x4b47, 0x0) 3.455055561s ago: executing program 1 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x5, 0xc9}}}, 0x6) 2.597496461s ago: executing program 3 (id=133): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0xfffffffc, 0x10, 0x5, 0x20, 0x1, 0x1, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 2.559249708s ago: executing program 1 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 2.496485996s ago: executing program 3 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x773) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x42000000) 2.453397697s ago: executing program 0 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) socket$alg(0x26, 0x5, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xa0302, 0x5e) sendfile(r3, r3, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.416571715s ago: executing program 1 (id=138): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10}}], 0x18}}], 0x1, 0x40040) 2.234183953s ago: executing program 1 (id=140): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4) write(r0, &(0x7f0000000280)='3', 0x1) 2.176511081s ago: executing program 0 (id=141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="33000000080006010100fff400a0", 0xe) 2.061792619s ago: executing program 0 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x2e0) write(r2, &(0x7f0000000280)='0', 0x1) pipe(&(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) 2.006294201s ago: executing program 3 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x454e}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1.985740268s ago: executing program 2 (id=145): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20141, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x2, 0xa, 0xf, 0xe, 0x5, 0x7c, 0x5, 0x8000c, 0x0, 0x2, 0x6d, 0xb, 0x1, 0x2000000, 0x4, 0xfffffffb, 0x1, 0x81b, 0x7fffffff, 0x8e, 0x7, 0x4, 0x20001e58, 0x3, 0xf39d, 0x6, 0x40000003, 0xa6b5, 0x2, 0xfffffff8]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000200)={0x0, 0xe8030000, 0x2, 0x0, 0x4, 0x0, 0x10, 0x3e8, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 1.706782974s ago: executing program 0 (id=146): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.691285564s ago: executing program 2 (id=147): sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x23, 0x1, 0xd}, 0x10) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r0) 1.675605889s ago: executing program 1 (id=148): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000080)='.\x00', 0x10000, 0x5b) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8d, 0x870, 0x1, 0x68b6ea9042ff3741, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fb, 0x2800, 0x440, 0x3, 0xd, 0x3, {0x45, 0x80}, 0xcd, 0x3}}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dfdffb, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c8001}, 0x1050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, r8, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xca}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r9 = syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x8, 0x90, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x2, 0x4, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x6, 0x2, "201e1dcf71cc"}, @as_header={0x7, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x6, 0x4, {0x7, 0x25, 0x1, 0xc, 0xbb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4a, 0x6, 0x3, "3c0907a9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xc, 0x6, 0x7f, {0x7, 0x25, 0x1, 0x4, 0x2, 0x3}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x9, 0x6, 0x20, 0x62}, 0x25, &(0x7f0000000140)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x81, 0xc, 0x401, 0x1c}, @generic={0xa, 0x10, 0x1, "a5fe740f935fbb"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0xe, 0x1, 0xfff, 0x48}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x408}}, {0xb9, &(0x7f00000001c0)=@string={0xb9, 0x3, "684a8e37764ae64d745523538972c67d89d762ac78c98ea5bbbbdfc6076377c5ee57dc689c1b31ad953604859b646d76ac8e4a25a3f4cd12d198a619ed8e0062b57b2564422fabe98fce507d1241b6514710e035de001cc6deb7233700484558f4226cb14f15e4d542acae3c800816c32d3f1673c06295bd7310a0abbfe109faefee8d5918a71410ed1e2deab3180977b8514a7251aa47129ea820d32629d657ea8a63a430176b4e5e8ba792777cb92f95a9ac9936a913"}}, {0x93, &(0x7f0000000280)=@string={0x93, 0x3, "32933d0f2e1161bdc52cffb2e393d7ac978ada482a1226723d2030f39929e0338f9b663b7b264f083c7fd3fef7b8dfbdc4028f0e47b62c929d6b57d9e528190e35608e411d7c8c4f3d344c30ec6236b1faa3091aef89cf3944c743b8aed805b6aeaab36a7522c9ecec76e10e6aa1666461163c4b279e7daf3ca199e5d03cdd7f9a015dd75818601d9e60301157f08b3644"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40c}}, {0x8a, &(0x7f0000000380)=@string={0x8a, 0x3, "da5906d7420b437cd7838a71652dafa7abf76ba3fa78456378149aa7c413f94d65cd7a3c0544268a3f475c2cb4df4f77677befcb0637adc526fad5e25ae2318a8d64e1b141f9d9d895bbcad8c8cda555e52701d2ccb52dfb71f7bb3726936a4dc7b91c3ab08986311e5248e9a65a05d4ced4c07d4e2a41d6a4951820d07363a44789b627cbdae6c5"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42a}}, {0xf9, &(0x7f0000000480)=@string={0xf9, 0x3, "66442c50ec1aeac7b0a2dabdf9d5834db2deb5a86c99c93940efc27ffb2e6c08f69449b18d49c957dd001d50bbe987ef67db3942d666d433510e19320a80eac6b7c74138c1146bdddae66770a292e2c2b300a48d6eb5456755ec6c5ef185319900210cbdf0e75a09128858b68a5da471500fa203716f83f4358d451a9b6c1c7f28cd5cfb9695b643540c62d411a6793650b32782c17fa9db3e02f2842daf147f1363b1418be08bf8b6f3ea76d9834445794c877120253bc688af5108bf24603677f3b001bf0c1b8fe602dbb9feaca672ac06b9f603b57641caebdda4d8e380319cfbc9e9ec098f48e27f88ff1a1b676a8c48d11ef9e922"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.641540184s ago: executing program 3 (id=149): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.518939577s ago: executing program 0 (id=150): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1.44486362s ago: executing program 2 (id=151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}, 0x1, 0x0, 0x0, 0x2004c850}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x346d50d5346c5465}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 890.156809ms ago: executing program 2 (id=152): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x5, 0x0, 0x400, 0xb7, 0xc20022}) 603.552092ms ago: executing program 2 (id=153): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$TCSETSW(r1, 0x40087101, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 101.481537ms ago: executing program 0 (id=154): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x5) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 59.032762ms ago: executing program 3 (id=155): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 0s ago: executing program 2 (id=156): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xfffffffe, 0xfff, 0x1000, 0xfffffffd, 0x20000004, 0x4, 0xa, 0x800, 0x6, 0x5, 0x1, 0x9, 0xffffffff, 0xfffffff8, 0x10009, 0xfe9, 0x6, 0xa, 0x6, 0x8004, 0x9, 0x44, 0x4, 0x80, 0x0, 0x81, 0x5, 0x1]}) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000004}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. [ 81.016926][ T5598] cgroup: Unknown subsys name 'net' [ 81.144620][ T5598] cgroup: Unknown subsys name 'cpuset' [ 81.155160][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.792380][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.081104][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.084777][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.086526][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.087524][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.088475][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.213766][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.216235][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.217270][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.229506][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.247504][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.275484][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.287904][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.297171][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.301284][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.302422][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.341247][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.342680][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.343786][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.355556][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.369645][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.813870][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.814000][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.814134][ T5607] bridge_slave_0: entered allmulticast mode [ 86.816295][ T5607] bridge_slave_0: entered promiscuous mode [ 86.860538][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.860633][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.862278][ T5607] bridge_slave_1: entered allmulticast mode [ 86.866909][ T5607] bridge_slave_1: entered promiscuous mode [ 86.985044][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.998436][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.998724][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.999123][ T5616] bridge_slave_0: entered allmulticast mode [ 87.021653][ T5616] bridge_slave_0: entered promiscuous mode [ 87.049291][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.083240][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.083365][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.083493][ T5616] bridge_slave_1: entered allmulticast mode [ 87.085527][ T5616] bridge_slave_1: entered promiscuous mode [ 87.128906][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.129101][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.129504][ T5614] bridge_slave_0: entered allmulticast mode [ 87.152577][ T5614] bridge_slave_0: entered promiscuous mode [ 87.161680][ T4927] Bluetooth: hci0: command tx timeout [ 87.215193][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.215430][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.215551][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.215678][ T5614] bridge_slave_1: entered allmulticast mode [ 87.217421][ T5614] bridge_slave_1: entered promiscuous mode [ 87.258185][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.283414][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.284691][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.284835][ T5613] bridge_slave_0: entered allmulticast mode [ 87.287182][ T5613] bridge_slave_0: entered promiscuous mode [ 87.321143][ T4927] Bluetooth: hci1: command tx timeout [ 87.354434][ T5607] team0: Port device team_slave_0 added [ 87.354649][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.355709][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.356141][ T5613] bridge_slave_1: entered allmulticast mode [ 87.357870][ T5613] bridge_slave_1: entered promiscuous mode [ 87.401825][ T4927] Bluetooth: hci3: command tx timeout [ 87.402092][ T5617] Bluetooth: hci2: command tx timeout [ 87.438756][ T5607] team0: Port device team_slave_1 added [ 87.482032][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.483969][ T5616] team0: Port device team_slave_0 added [ 87.508121][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.510530][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.516609][ T5616] team0: Port device team_slave_1 added [ 87.545687][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.578594][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.578617][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.578640][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.650424][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.650443][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.650470][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.674286][ T5614] team0: Port device team_slave_0 added [ 87.708167][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.708185][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.708207][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.759232][ T5614] team0: Port device team_slave_1 added [ 87.776731][ T5613] team0: Port device team_slave_0 added [ 87.777796][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.777809][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.777832][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.781637][ T5613] team0: Port device team_slave_1 added [ 87.885312][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.885329][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.885352][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.946509][ T5607] hsr_slave_0: entered promiscuous mode [ 87.947552][ T5607] hsr_slave_1: entered promiscuous mode [ 87.949117][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.949130][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.949152][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.979629][ T5616] hsr_slave_0: entered promiscuous mode [ 87.983327][ T5616] hsr_slave_1: entered promiscuous mode [ 87.985649][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 87.985899][ T5616] Cannot create hsr debugfs directory [ 87.990309][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.990350][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.990415][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.049587][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.049638][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.049709][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.239503][ T5614] hsr_slave_0: entered promiscuous mode [ 88.240274][ T5614] hsr_slave_1: entered promiscuous mode [ 88.246955][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 88.247017][ T5614] Cannot create hsr debugfs directory [ 88.265944][ T5613] hsr_slave_0: entered promiscuous mode [ 88.266721][ T5613] hsr_slave_1: entered promiscuous mode [ 88.267303][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 88.267323][ T5613] Cannot create hsr debugfs directory [ 88.681506][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.689172][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.690753][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.717105][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.719763][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.737519][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.738654][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.755843][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.829867][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.845603][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.860614][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.866645][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.868896][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.894904][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.896747][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.899852][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.022429][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.027179][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.029535][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.058464][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.077268][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.089599][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.108345][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.121581][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.232847][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.236779][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.237614][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.240156][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.241450][ T5617] Bluetooth: hci0: command tx timeout [ 89.277726][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.289273][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.290374][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.308417][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.324396][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.401803][ T5617] Bluetooth: hci1: command tx timeout [ 89.409958][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.437499][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.479445][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.479559][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.489145][ T5617] Bluetooth: hci3: command tx timeout [ 89.497825][ T5617] Bluetooth: hci2: command tx timeout [ 89.517933][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.518009][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.539122][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.569513][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.569617][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.595208][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.610065][ T983] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.610161][ T983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.693186][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.736907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.737021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.738666][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.738738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.805464][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.857258][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.894279][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.894441][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.935101][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.935214][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.756149][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.934784][ T5607] veth0_vlan: entered promiscuous mode [ 90.989517][ T5607] veth1_vlan: entered promiscuous mode [ 91.039910][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.066577][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.119652][ T5607] veth0_macvtap: entered promiscuous mode [ 91.148954][ T5607] veth1_macvtap: entered promiscuous mode [ 91.165837][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.227859][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.256131][ T5616] veth0_vlan: entered promiscuous mode [ 91.269902][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.270083][ T5613] veth0_vlan: entered promiscuous mode [ 91.324205][ T5617] Bluetooth: hci0: command tx timeout [ 91.342590][ T5616] veth1_vlan: entered promiscuous mode [ 91.344245][ T5613] veth1_vlan: entered promiscuous mode [ 91.378462][ T5614] veth0_vlan: entered promiscuous mode [ 91.420901][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.420961][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.420995][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.421029][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.477090][ T5614] veth1_vlan: entered promiscuous mode [ 91.480899][ T5617] Bluetooth: hci1: command tx timeout [ 91.544570][ T5613] veth0_macvtap: entered promiscuous mode [ 91.545514][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.545541][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.565577][ T5617] Bluetooth: hci2: command tx timeout [ 91.565612][ T5617] Bluetooth: hci3: command tx timeout [ 91.607940][ T5616] veth0_macvtap: entered promiscuous mode [ 91.609733][ T5613] veth1_macvtap: entered promiscuous mode [ 91.661816][ T5616] veth1_macvtap: entered promiscuous mode [ 91.679604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.679627][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.710534][ T5614] veth0_macvtap: entered promiscuous mode [ 91.742144][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.764528][ T5614] veth1_macvtap: entered promiscuous mode [ 91.779094][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.793624][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.832617][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.840619][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.870914][ T1383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.875058][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.932480][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.041101][ T3349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.042585][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.042923][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.043140][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.057314][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.111125][ T3349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113156][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113278][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113371][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113478][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113551][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.179620][ T992] cfg80211: failed to load regulatory.db [ 92.228929][ T3349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.228951][ T3349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.309264][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.309287][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.329937][ T5713] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.393190][ T3349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.393212][ T3349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.429414][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.429435][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.505995][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 92.506937][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.506956][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.507976][ T5713] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 92.559118][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.559150][ T5713] usb 1-1: Product: 録༽ᄮ뵡ⳅ닿鏣곗誗䣚ሪ爦‽⦙㏠鮏㭦♻ࡏ缼ﻓ룷뷟˄ຏ뙇鈬殝⣥น怵䆎簝侌㐽が括넶ꏺᨉ觯㧏을롃똅ꪮ檳≵盬໡ꅪ摦ᙡ䬼鸧꽽ꄼ㳐翝ƚ흝ᡘᵠ悞ᄰ㚋 [ 92.559178][ T5713] usb 1-1: Manufacturer: 䩨㞎䩶䷦啴匣犉緆힉걢쥸ꖎ뮻웟指앷埮棜ᮜ괱㚕蔄撛癭躬╊ው飑ᦦ軭戀箵搥⽂캏結䄒冶၇㗠Þ옜럞㜣䠀塅⋴녬ᕏ헤걂㲮ࢀ쌖㼭猖拀붕ၳꮠ降妍ꜘနửᢳ眉冸牊꩑ቇꢞ팠⤦埖諪ꑣᜰ乫譞銧籷⾹ꦕ馬ꤶ [ 92.559208][ T5713] usb 1-1: SerialNumber: Ќ [ 92.658122][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.658143][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.933456][ T5713] usb 1-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 92.933490][ T5713] usb 1-1: found format II with max.bitrate = 9, frame size=6 [ 92.933704][ T5713] usb 1-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 92.933726][ T5713] usb 1-1: found format II with max.bitrate = 9, frame size=6 [ 92.986562][ T5713] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 93.027701][ T5765] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.145504][ T5713] usb 1-1: USB disconnect, device number 2 [ 93.199624][ T5767] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.383467][ T5771] FAULT_INJECTION: forcing a failure. [ 93.383467][ T5771] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.383528][ T5771] CPU: 0 UID: 0 PID: 5771 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 93.383557][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.383578][ T5771] Call Trace: [ 93.383591][ T5771] [ 93.383600][ T5771] dump_stack_lvl+0xe8/0x150 [ 93.383630][ T5771] should_fail_ex+0x3eb/0x540 [ 93.383658][ T5771] _copy_from_user+0x2d/0xb0 [ 93.383680][ T5771] vmci_host_unlocked_ioctl+0x296/0x2840 [ 93.383710][ T5771] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 93.383756][ T5771] ? kasan_quarantine_put+0xbb/0x1f0 [ 93.383789][ T5771] ? tomoyo_path_number_perm+0x219/0x5f0 [ 93.383814][ T5771] ? tomoyo_path_number_perm+0x219/0x5f0 [ 93.383841][ T5771] ? do_vfs_ioctl+0x116f/0x1530 [ 93.383866][ T5771] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 93.383901][ T5771] ? do_futex+0x3e7/0x4e0 [ 93.383942][ T5771] ? __fget_files+0x2a/0x420 [ 93.383965][ T5771] ? __fget_files+0x2a/0x420 [ 93.383985][ T5771] ? __fget_files+0x2a/0x420 [ 93.384009][ T5771] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.384030][ T5771] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 93.384053][ T5771] __se_sys_ioctl+0xfc/0x170 [ 93.384078][ T5771] do_syscall_64+0x166/0x520 [ 93.384097][ T5771] ? trace_irq_disable+0x3b/0x140 [ 93.384117][ T5771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.384140][ T5771] ? clear_bhb_loop+0x70/0xc0 [ 93.384163][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.384193][ T5771] RIP: 0033:0x7fc4fb79e1d9 [ 93.384221][ T5771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.384239][ T5771] RSP: 002b:00007fc4fc628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.384268][ T5771] RAX: ffffffffffffffda RBX: 00007fc4fba25fa0 RCX: 00007fc4fb79e1d9 [ 93.384285][ T5771] RDX: 0000200000000000 RSI: 00000000000007a0 RDI: 0000000000000004 [ 93.384297][ T5771] RBP: 00007fc4fb835888 R08: 0000000000000000 R09: 0000000000000000 [ 93.384311][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.384323][ T5771] R13: 00007fc4fba26038 R14: 00007fc4fba25fa0 R15: 00007ffcaa5a50a8 [ 93.384358][ T5771] [ 93.404737][ T4927] Bluetooth: hci0: command tx timeout [ 93.575526][ T4927] Bluetooth: hci1: command tx timeout [ 93.637152][ T5773] udevd[5773]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.656893][ T5617] Bluetooth: hci2: command tx timeout [ 93.656943][ T4927] Bluetooth: hci3: command tx timeout [ 93.797076][ T5781] FAULT_INJECTION: forcing a failure. [ 93.797076][ T5781] name failslab, interval 1, probability 0, space 0, times 1 [ 93.797108][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 93.797133][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.797146][ T5781] Call Trace: [ 93.797154][ T5781] [ 93.797164][ T5781] dump_stack_lvl+0xe8/0x150 [ 93.797193][ T5781] should_fail_ex+0x3eb/0x540 [ 93.797221][ T5781] should_failslab+0xa8/0x100 [ 93.797243][ T5781] ? proc_reg_open+0x1f1/0x530 [ 93.797265][ T5781] kmem_cache_alloc_noprof+0x9c/0x600 [ 93.797288][ T5781] ? __pfx_apparmor_file_open+0x10/0x10 [ 93.797320][ T5781] ? proc_reg_open+0x1f1/0x530 [ 93.797348][ T5781] proc_reg_open+0x1f1/0x530 [ 93.797370][ T5781] ? __pfx_proc_reg_open+0x10/0x10 [ 93.797391][ T5781] do_dentry_open+0x80e/0x1360 [ 93.797423][ T5781] vfs_open_consume+0x4a/0x350 [ 93.797441][ T5781] ? path_openat+0x148a/0x1da0 [ 93.797464][ T5781] path_openat+0x14a6/0x1da0 [ 93.797501][ T5781] do_file_open+0x23e/0x4a0 [ 93.797526][ T5781] ? __pfx_do_file_open+0x10/0x10 [ 93.797553][ T5781] ? __pfx_kfree_link+0x10/0x10 [ 93.797583][ T5781] ? _raw_spin_unlock+0x28/0x50 [ 93.797600][ T5781] ? alloc_fd+0x6af/0x760 [ 93.797628][ T5781] do_sys_openat2+0x115/0x200 [ 93.797646][ T5781] ? __se_sys_futex+0x3a8/0x450 [ 93.797667][ T5781] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.797692][ T5781] ? rcu_is_watching+0x16/0xb0 [ 93.797717][ T5781] __x64_sys_openat+0x138/0x170 [ 93.797742][ T5781] do_syscall_64+0x166/0x520 [ 93.797760][ T5781] ? trace_irq_disable+0x3b/0x140 [ 93.797780][ T5781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.797801][ T5781] ? clear_bhb_loop+0x70/0xc0 [ 93.797826][ T5781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.797847][ T5781] RIP: 0033:0x7f09ba35ea0e [ 93.797868][ T5781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.797885][ T5781] RSP: 002b:00007f09bb267ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.797906][ T5781] RAX: ffffffffffffffda RBX: 00007f09bb2686c0 RCX: 00007f09ba35ea0e [ 93.797919][ T5781] RDX: 0000000000000002 RSI: 00007f09bb267f90 RDI: ffffffffffffff9c [ 93.797932][ T5781] RBP: 00007f09ba435888 R08: 0000000000000000 R09: 0000000000000000 [ 93.797945][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.797957][ T5781] R13: 00007f09ba626038 R14: 00007f09ba625fa0 R15: 00007ffcfffa9408 [ 93.797990][ T5781] [ 94.179008][ T5785] FAULT_INJECTION: forcing a failure. [ 94.179008][ T5785] name failslab, interval 1, probability 0, space 0, times 0 [ 94.179043][ T5785] CPU: 1 UID: 0 PID: 5785 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 94.179068][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.179082][ T5785] Call Trace: [ 94.179090][ T5785] [ 94.179100][ T5785] dump_stack_lvl+0xe8/0x150 [ 94.179130][ T5785] should_fail_ex+0x3eb/0x540 [ 94.179158][ T5785] should_failslab+0xa8/0x100 [ 94.179182][ T5785] __kmalloc_cache_noprof+0x9e/0x600 [ 94.179209][ T5785] ? syslog_print+0x103/0x610 [ 94.179227][ T5785] ? syslog_print+0x103/0x610 [ 94.179255][ T5785] syslog_print+0x103/0x610 [ 94.179276][ T5785] ? hook_capable+0x24b/0x7b0 [ 94.179298][ T5785] ? __pfx_syslog_print+0x10/0x10 [ 94.179319][ T5785] ? futex_wait+0x2a2/0x390 [ 94.179339][ T5785] ? __pfx_hook_capable+0x10/0x10 [ 94.179360][ T5785] ? __pfx_futex_wait+0x10/0x10 [ 94.179392][ T5785] ? apparmor_capable+0x126/0x170 [ 94.179416][ T5785] ? bpf_lsm_capable+0x9/0x20 [ 94.179434][ T5785] ? security_capable+0x7e/0x2c0 [ 94.179462][ T5785] do_syslog+0x583/0x7d0 [ 94.179480][ T5785] ? __pfx_do_syslog+0x10/0x10 [ 94.179506][ T5785] ? __se_sys_futex+0x3a8/0x450 [ 94.179537][ T5785] ? rcu_is_watching+0x16/0xb0 [ 94.179568][ T5785] __x64_sys_syslog+0x7c/0x90 [ 94.179591][ T5785] do_syscall_64+0x166/0x520 [ 94.179612][ T5785] ? trace_irq_disable+0x3b/0x140 [ 94.179629][ T5785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.179649][ T5785] ? clear_bhb_loop+0x70/0xc0 [ 94.179674][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.179697][ T5785] RIP: 0033:0x7fc4fb79e1d9 [ 94.179717][ T5785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.179736][ T5785] RSP: 002b:00007fc4fc628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 94.179760][ T5785] RAX: ffffffffffffffda RBX: 00007fc4fba25fa0 RCX: 00007fc4fb79e1d9 [ 94.179786][ T5785] RDX: 0000000000000092 RSI: 0000200000000340 RDI: 0000000000000002 [ 94.179800][ T5785] RBP: 00007fc4fb835888 R08: 0000000000000000 R09: 0000000000000000 [ 94.179814][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.179827][ T5785] R13: 00007fc4fba26038 R14: 00007fc4fba25fa0 R15: 00007ffcaa5a50a8 [ 94.179862][ T5785] [ 94.580380][ T5788] Bluetooth: MGMT ver 1.23 [ 94.779484][ T5796] ubi0: attaching mtd0 [ 94.800406][ T5796] ubi0: scanning is finished [ 94.800433][ T5796] ubi0: empty MTD device detected [ 94.964579][ T5796] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 94.964606][ T5796] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 94.964625][ T5796] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.964643][ T5796] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 94.964680][ T5796] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.964698][ T5796] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 94.964716][ T5796] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 345387247 [ 94.964736][ T5796] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.967426][ T5802] ubi0: background thread "ubi_bgt0d" started, PID 5802 [ 94.970125][ T5797] ubi0: detaching mtd0 [ 95.132681][ T5797] ubi0: mtd0 is detached [ 96.124574][ T4927] Bluetooth: hci3: command tx timeout [ 96.325333][ T5816] FAULT_INJECTION: forcing a failure. [ 96.325333][ T5816] name failslab, interval 1, probability 0, space 0, times 0 [ 96.325363][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 96.325388][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.325401][ T5816] Call Trace: [ 96.325410][ T5816] [ 96.325419][ T5816] dump_stack_lvl+0xe8/0x150 [ 96.325458][ T5816] should_fail_ex+0x3eb/0x540 [ 96.325487][ T5816] should_failslab+0xa8/0x100 [ 96.325511][ T5816] __kmalloc_cache_noprof+0x9e/0x600 [ 96.325535][ T5816] ? __kmalloc_cache_noprof+0x148/0x600 [ 96.325554][ T5816] ? assoc_array_insert+0x417/0x2f60 [ 96.325576][ T5816] ? assoc_array_insert+0x417/0x2f60 [ 96.325605][ T5816] assoc_array_insert+0x417/0x2f60 [ 96.325645][ T5816] ? __pfx_down_write+0x10/0x10 [ 96.325676][ T5816] __key_link_begin+0xd6/0x1f0 [ 96.325702][ T5816] __key_create_or_update+0x3ef/0xa70 [ 96.325736][ T5816] ? __pfx___key_create_or_update+0x10/0x10 [ 96.325781][ T5816] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 96.325816][ T5816] key_create_or_update+0x42/0x60 [ 96.325843][ T5816] __se_sys_add_key+0x349/0x420 [ 96.325869][ T5816] ? __pfx___se_sys_add_key+0x10/0x10 [ 96.325902][ T5816] ? __x64_sys_add_key+0x20/0xc0 [ 96.325926][ T5816] do_syscall_64+0x166/0x520 [ 96.325947][ T5816] ? trace_irq_disable+0x3b/0x140 [ 96.325967][ T5816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.325991][ T5816] ? clear_bhb_loop+0x70/0xc0 [ 96.326016][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.326039][ T5816] RIP: 0033:0x7ff62ad9e1d9 [ 96.326060][ T5816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.326079][ T5816] RSP: 002b:00007ff62bc41028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 96.326102][ T5816] RAX: ffffffffffffffda RBX: 00007ff62b025fa0 RCX: 00007ff62ad9e1d9 [ 96.326119][ T5816] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 96.326133][ T5816] RBP: 00007ff62ae35888 R08: ffffffffffffffff R09: 0000000000000000 [ 96.326148][ T5816] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 96.326161][ T5816] R13: 00007ff62b026038 R14: 00007ff62b025fa0 R15: 00007fff72d40a78 [ 96.326197][ T5816] [ 96.711962][ T5679] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.871249][ T5679] usb 2-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 96.874476][ T5679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.874535][ T5679] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 96.874565][ T5679] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.883351][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 96.883410][ T5679] usb 2-1: Product: syz [ 96.883444][ T5679] usb 2-1: Manufacturer: syz [ 96.984740][ T5815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.016353][ T5679] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 97.086713][ T5820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.125139][ T5679] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 97.388128][ T5679] usb 2-1: USB disconnect, device number 2 [ 97.519434][ T5679] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 97.540608][ T5679] garmin_gps 2-1:1.0: device disconnected [ 98.051585][ T5679] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 98.069956][ T5757] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 98.107557][ T5679] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 98.210046][ T4927] Bluetooth: hci3: command tx timeout [ 98.372781][ T5679] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 98.426869][ T5679] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 98.689610][ T5829] ceph: No mds server is up or the cluster is laggy [ 98.695708][ T5832] ceph: No mds server is up or the cluster is laggy [ 98.901909][ T5679] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 98.931970][ T5757] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 99.351759][ T5849] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 99.352367][ T5849] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 99.355598][ T5849] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 99.358493][ T5849] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 99.847663][ T5856] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 99.848281][ T5856] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 99.848930][ T5856] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 99.849551][ T5856] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 100.564620][ C1] net_ratelimit: 300 callbacks suppressed [ 100.820814][ T5757] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 100.971632][ T5757] usb 3-1: New USB device found: idVendor=05ac, idProduct=024f, bcdDevice=0.00 [ 100.973415][ T5757] usb 3-1: config 0 interface 0 altsetting 252 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 100.973448][ T5757] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.973478][ T5757] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.973505][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.973593][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.065425][ T5757] usb 3-1: config 0 descriptor?? [ 101.338018][ T5870] FAULT_INJECTION: forcing a failure. [ 101.338018][ T5870] name failslab, interval 1, probability 0, space 0, times 0 [ 101.338056][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz.3.40 Tainted: G S syzkaller #0 PREEMPT(full) [ 101.338088][ T5870] Tainted: [S]=CPU_OUT_OF_SPEC [ 101.338098][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.338113][ T5870] Call Trace: [ 101.338122][ T5870] [ 101.338132][ T5870] dump_stack_lvl+0xe8/0x150 [ 101.338163][ T5870] should_fail_ex+0x3eb/0x540 [ 101.338193][ T5870] should_failslab+0xa8/0x100 [ 101.338217][ T5870] __kmalloc_cache_node_noprof+0xa5/0x620 [ 101.338240][ T5870] ? __raw_spin_lock_init+0x45/0x100 [ 101.338258][ T5870] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 101.338278][ T5870] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 101.338297][ T5870] ? __init_waitqueue_head+0xa8/0x150 [ 101.338323][ T5870] sbitmap_queue_init_node+0x1dc/0x4d0 [ 101.338346][ T5870] blk_mq_init_tags+0x1a3/0x2d0 [ 101.338371][ T5870] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 101.338393][ T5870] ? kfree+0x1c5/0x650 [ 101.338410][ T5870] ? blk_mq_map_queues+0x3ea/0x490 [ 101.338432][ T5870] ? blk_mq_map_queues+0x3ea/0x490 [ 101.338453][ T5870] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 101.338492][ T5870] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 101.338522][ T5870] loop_add+0x436/0xb40 [ 101.338540][ T5870] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.338563][ T5870] ? __pfx_loop_add+0x10/0x10 [ 101.338608][ T5870] loop_control_ioctl+0x12b/0x5a0 [ 101.338626][ T5870] ? __fget_files+0x2a/0x420 [ 101.338645][ T5870] ? __pfx_loop_control_ioctl+0x10/0x10 [ 101.338667][ T5870] ? bpf_lsm_file_ioctl+0x9/0x20 [ 101.338687][ T5870] ? __pfx_loop_control_ioctl+0x10/0x10 [ 101.338706][ T5870] __se_sys_ioctl+0xfc/0x170 [ 101.338727][ T5870] do_syscall_64+0x166/0x520 [ 101.338747][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.338771][ T5870] ? clear_bhb_loop+0x70/0xc0 [ 101.338793][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.338812][ T5870] RIP: 0033:0x7f578f19e1d9 [ 101.338832][ T5870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.338849][ T5870] RSP: 002b:00007f579013c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.338871][ T5870] RAX: ffffffffffffffda RBX: 00007f578f425fa0 RCX: 00007f578f19e1d9 [ 101.338887][ T5870] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 101.338902][ T5870] RBP: 00007f578f235888 R08: 0000000000000000 R09: 0000000000000000 [ 101.338917][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.338930][ T5870] R13: 00007f578f426038 R14: 00007f578f425fa0 R15: 00007fffe4d3fd48 [ 101.338964][ T5870] [ 101.339148][ T5870] blk-mq: reduced tag depth (128 -> 64) [ 101.649163][ T5757] apple 0003:05AC:024F.0001: failed to start in urb: -90 [ 101.673154][ T5757] apple 0003:05AC:024F.0001: hidraw0: USB HID vff.ff Device [HID 05ac:024f] on usb-dummy_hcd.2-1/input0 [ 101.793992][ T5342] usb 3-1: USB disconnect, device number 2 [ 101.800835][ T4927] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.049411][ T5871] fido_id[5871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 102.206592][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 102.206630][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 102.334729][ T5882] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 102.335547][ T5882] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 102.339512][ T5882] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 102.340274][ T5882] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 102.804091][ T5887] comedi comedi1: 8255: I/O base address not correctly aligned [ 102.960394][ T5890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.194520][ T5897] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 103.400817][ T5342] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 103.436859][ T5908] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.561912][ T5342] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.568548][ T5342] usb 2-1: config 0 has no interfaces? [ 103.568604][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.603322][ T5342] usb 2-1: config 0 descriptor?? [ 103.829281][ T5898] FAULT_INJECTION: forcing a failure. [ 103.829281][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 103.829314][ T5898] CPU: 0 UID: 0 PID: 5898 Comm: syz.1.51 Tainted: G S syzkaller #0 PREEMPT(full) [ 103.829347][ T5898] Tainted: [S]=CPU_OUT_OF_SPEC [ 103.829356][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.829370][ T5898] Call Trace: [ 103.829380][ T5898] [ 103.829391][ T5898] dump_stack_lvl+0xe8/0x150 [ 103.829423][ T5898] should_fail_ex+0x3eb/0x540 [ 103.829453][ T5898] should_failslab+0xa8/0x100 [ 103.829475][ T5898] ? __kernfs_new_node+0xe6/0x980 [ 103.829499][ T5898] kmem_cache_alloc_noprof+0x9c/0x600 [ 103.829524][ T5898] ? __pfx_stack_trace_save+0x10/0x10 [ 103.829547][ T5898] ? __kernfs_new_node+0xe6/0x980 [ 103.829576][ T5898] __kernfs_new_node+0xe6/0x980 [ 103.829600][ T5898] ? kasan_save_track+0x4f/0x80 [ 103.829621][ T5898] ? kasan_save_track+0x3e/0x80 [ 103.829641][ T5898] ? kasan_save_free_info+0x40/0x50 [ 103.829668][ T5898] ? kfree+0x1c5/0x650 [ 103.829691][ T5898] ? __pfx___kernfs_new_node+0x10/0x10 [ 103.829734][ T5898] ? lock_acquire+0x115/0x350 [ 103.829759][ T5898] ? kernfs_root+0x1c/0x230 [ 103.829787][ T5898] ? kernfs_root+0x1c/0x230 [ 103.829808][ T5898] ? kernfs_root+0x1c/0x230 [ 103.829828][ T5898] ? kernfs_root+0x1c/0x230 [ 103.829855][ T5898] kernfs_new_node+0xeb/0x140 [ 103.829889][ T5898] __kernfs_create_file+0x4b/0x2e0 [ 103.829917][ T5898] sysfs_add_file_mode_ns+0x237/0x300 [ 103.829949][ T5898] sysfs_create_file_ns+0x12b/0x1b0 [ 103.829976][ T5898] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 103.829998][ T5898] ? module_add_driver+0x31b/0x320 [ 103.830026][ T5898] ? module_add_driver+0x31b/0x320 [ 103.830052][ T5898] bus_add_driver+0x409/0x6e0 [ 103.830085][ T5898] driver_register+0x23a/0x320 [ 103.830111][ T5898] usb_gadget_register_driver_owner+0xf9/0x270 [ 103.830142][ T5898] raw_ioctl+0x1541/0x41c0 [ 103.830173][ T5898] ? tomoyo_path_number_perm+0x219/0x5f0 [ 103.830202][ T5898] ? do_vfs_ioctl+0x116f/0x1530 [ 103.830228][ T5898] ? __pfx_raw_ioctl+0x10/0x10 [ 103.830287][ T5898] ? __fget_files+0x2a/0x420 [ 103.830312][ T5898] ? __fget_files+0x2a/0x420 [ 103.830335][ T5898] ? __fget_files+0x2a/0x420 [ 103.830360][ T5898] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.830384][ T5898] ? __pfx_raw_ioctl+0x10/0x10 [ 103.830406][ T5898] __se_sys_ioctl+0xfc/0x170 [ 103.830431][ T5898] do_syscall_64+0x166/0x520 [ 103.830454][ T5898] ? trace_irq_disable+0x3b/0x140 [ 103.830475][ T5898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.830499][ T5898] ? clear_bhb_loop+0x70/0xc0 [ 103.830524][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.830549][ T5898] RIP: 0033:0x7fc4fb79de6b [ 103.830571][ T5898] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 103.830593][ T5898] RSP: 002b:00007fc4fc604f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.830618][ T5898] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fc4fb79de6b [ 103.830635][ T5898] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 103.830648][ T5898] RBP: 00007fc4fc605fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 103.830662][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.830675][ T5898] R13: 0000200000000100 R14: 0000000000000005 R15: 0000000000000868 [ 103.830707][ T5898] [ 103.953348][ T5898] bus_add_driver: uevent attr (raw-gadget.1) failed [ 103.982234][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.004536][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.720752][ C1] net_ratelimit: 109 callbacks suppressed [ 105.941143][ T5930] FAULT_INJECTION: forcing a failure. [ 105.941143][ T5930] name failslab, interval 1, probability 0, space 0, times 0 [ 105.941182][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: syz.0.65 Tainted: G S syzkaller #0 PREEMPT(full) [ 105.941216][ T5930] Tainted: [S]=CPU_OUT_OF_SPEC [ 105.941226][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.941240][ T5930] Call Trace: [ 105.941250][ T5930] [ 105.941261][ T5930] dump_stack_lvl+0xe8/0x150 [ 105.941294][ T5930] should_fail_ex+0x3eb/0x540 [ 105.941322][ T5930] ? __alloc_skb+0x1db/0x7a0 [ 105.941344][ T5930] should_failslab+0xa8/0x100 [ 105.941369][ T5930] ? __alloc_skb+0x1db/0x7a0 [ 105.941389][ T5930] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 105.941417][ T5930] ? __alloc_skb+0x1db/0x7a0 [ 105.941445][ T5930] __alloc_skb+0x1db/0x7a0 [ 105.941472][ T5930] tcp_stream_alloc_skb+0x3f/0x580 [ 105.941501][ T5930] tcp_sendmsg_locked+0x1337/0x5320 [ 105.941533][ T5930] ? aa_inet_msg_perm+0xb55/0xff0 [ 105.941563][ T5930] ? __lock_acquire+0x747/0x2de0 [ 105.941596][ T5930] ? __pfx___futex_wait+0x10/0x10 [ 105.941640][ T5930] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 105.941672][ T5930] ? tcp_sendmsg+0x21/0x50 [ 105.941696][ T5930] ? __local_bh_enable_ip+0xd6/0x140 [ 105.941725][ T5930] tcp_sendmsg+0x2f/0x50 [ 105.941748][ T5930] ? __pfx_inet6_sendmsg+0x10/0x10 [ 105.941769][ T5930] sock_sendmsg_nosec+0x90/0x190 [ 105.941801][ T5930] __sys_sendto+0x408/0x5a0 [ 105.941831][ T5930] ? __pfx___sys_sendto+0x10/0x10 [ 105.941883][ T5930] ? rcu_is_watching+0x16/0xb0 [ 105.941914][ T5930] __x64_sys_sendto+0xde/0x100 [ 105.941941][ T5930] do_syscall_64+0x166/0x520 [ 105.941963][ T5930] ? trace_irq_disable+0x3b/0x140 [ 105.941985][ T5930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.942010][ T5930] ? clear_bhb_loop+0x70/0xc0 [ 105.942037][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.942070][ T5930] RIP: 0033:0x7f09ba39e1d9 [ 105.942093][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.942115][ T5930] RSP: 002b:00007f09bb268028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 105.942140][ T5930] RAX: ffffffffffffffda RBX: 00007f09ba625fa0 RCX: 00007f09ba39e1d9 [ 105.942156][ T5930] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 105.942170][ T5930] RBP: 00007f09ba435888 R08: 0000000000000000 R09: 0000000000000000 [ 105.942185][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.942198][ T5930] R13: 00007f09ba626038 R14: 00007f09ba625fa0 R15: 00007ffcfffa9408 [ 105.942233][ T5930] [ 106.269436][ T1582] usb 2-1: USB disconnect, device number 3 [ 106.368610][ T5933] can0: slcan on ttyS3. [ 106.417073][ T5936] 0x000000000000-0x000000010000 : "" [ 106.454146][ T5936] ftl_cs: FTL header not found. [ 106.502884][ T5936] FAULT_INJECTION: forcing a failure. [ 106.502884][ T5936] name failslab, interval 1, probability 0, space 0, times 0 [ 106.502916][ T5936] CPU: 0 UID: 0 PID: 5936 Comm: syz.1.67 Tainted: G S syzkaller #0 PREEMPT(full) [ 106.502948][ T5936] Tainted: [S]=CPU_OUT_OF_SPEC [ 106.502957][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.502972][ T5936] Call Trace: [ 106.502982][ T5936] [ 106.502992][ T5936] dump_stack_lvl+0xe8/0x150 [ 106.503023][ T5936] should_fail_ex+0x3eb/0x540 [ 106.503054][ T5936] should_failslab+0xa8/0x100 [ 106.503081][ T5936] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 106.503110][ T5936] ? __lock_acquire+0x747/0x2de0 [ 106.503133][ T5936] ? __kernfs_new_node+0xa9/0x980 [ 106.503154][ T5936] ? __kernfs_new_node+0xa9/0x980 [ 106.503183][ T5936] kstrdup+0x42/0x100 [ 106.503207][ T5936] __kernfs_new_node+0xa9/0x980 [ 106.503239][ T5936] ? __pfx___kernfs_new_node+0x10/0x10 [ 106.503261][ T5936] ? kernfs_root+0x1c/0x230 [ 106.503290][ T5936] ? kernfs_root+0x1c/0x230 [ 106.503311][ T5936] ? kernfs_root+0x1c/0x230 [ 106.503331][ T5936] ? kernfs_root+0x1c/0x230 [ 106.503359][ T5936] kernfs_new_node+0xeb/0x140 [ 106.503385][ T5936] kernfs_create_link+0xe3/0x240 [ 106.503414][ T5936] sysfs_do_create_link_sd+0x83/0x110 [ 106.503440][ T5936] device_create_sys_dev_entry+0x122/0x190 [ 106.503465][ T5936] ? __pfx_device_create_sys_dev_entry+0x10/0x10 [ 106.503504][ T5936] ? device_create_file+0xf4/0x1b0 [ 106.503531][ T5936] device_add+0x71e/0xb80 [ 106.503557][ T5936] __add_disk+0x517/0xdb0 [ 106.503592][ T5936] add_disk_fwnode+0x100/0x3a0 [ 106.503622][ T5936] add_mtd_blktrans_dev+0xe79/0x14b0 [ 106.503661][ T5936] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 106.503708][ T5936] ? __kmalloc_cache_noprof+0x31c/0x600 [ 106.503731][ T5936] ? __kmalloc_cache_noprof+0x148/0x600 [ 106.503752][ T5936] ? mtdblock_add_mtd+0x57/0x240 [ 106.503783][ T5936] mtdblock_add_mtd+0x18a/0x240 [ 106.503809][ T5936] blktrans_notify_add+0x9f/0xf0 [ 106.503834][ T5936] add_mtd_device+0x117f/0x17b0 [ 106.503854][ T5936] ? preempt_schedule_thunk+0x16/0x40 [ 106.503891][ T5936] ? __pfx_add_mtd_device+0x10/0x10 [ 106.503922][ T5936] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 106.503951][ T5936] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.503993][ T5936] mtd_add_partition+0x388/0x590 [ 106.504024][ T5936] ? __pfx_mtd_add_partition+0x10/0x10 [ 106.504054][ T5936] ? __might_fault+0xaf/0x130 [ 106.504085][ T5936] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 106.504108][ T5936] ? __pfx___dynamic_pr_debug+0x10/0x10 [ 106.504132][ T5936] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 106.504177][ T5936] ? __might_fault+0xaf/0x130 [ 106.504208][ T5936] mtdchar_ioctl+0x14f7/0x1bc0 [ 106.504238][ T5936] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 106.504271][ T5936] ? __lock_acquire+0x747/0x2de0 [ 106.504312][ T5936] ? tomoyo_path_number_perm+0x219/0x5f0 [ 106.504347][ T5936] ? __mutex_trylock_common+0x15f/0x270 [ 106.504374][ T5936] ? __pfx___mutex_trylock_common+0x10/0x10 [ 106.504402][ T5936] ? rcu_is_watching+0x16/0xb0 [ 106.504425][ T5936] ? trace_contention_end+0x3d/0x140 [ 106.504450][ T5936] ? __mutex_lock+0x305/0x15a0 [ 106.504473][ T5936] ? do_futex+0x3e7/0x4e0 [ 106.504509][ T5936] ? mtdchar_unlocked_ioctl+0xa1/0xd0 [ 106.504535][ T5936] ? __pfx___mutex_lock+0x10/0x10 [ 106.504568][ T5936] ? __fget_files+0x2a/0x420 [ 106.504591][ T5936] ? __fget_files+0x2a/0x420 [ 106.504618][ T5936] mtdchar_unlocked_ioctl+0xae/0xd0 [ 106.504642][ T5936] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 106.504668][ T5936] __se_sys_ioctl+0xfc/0x170 [ 106.504695][ T5936] do_syscall_64+0x166/0x520 [ 106.504717][ T5936] ? trace_irq_disable+0x3b/0x140 [ 106.504738][ T5936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.504762][ T5936] ? clear_bhb_loop+0x70/0xc0 [ 106.504789][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.504812][ T5936] RIP: 0033:0x7fc4fb79e1d9 [ 106.504835][ T5936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.504855][ T5936] RSP: 002b:00007fc4fc628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.504879][ T5936] RAX: ffffffffffffffda RBX: 00007fc4fba25fa0 RCX: 00007fc4fb79e1d9 [ 106.504897][ T5936] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000008 [ 106.504913][ T5936] RBP: 00007fc4fb835888 R08: 0000000000000000 R09: 0000000000000000 [ 106.504928][ T5936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.504943][ T5936] R13: 00007fc4fba26038 R14: 00007fc4fba25fa0 R15: 00007ffcaa5a50a8 [ 106.504979][ T5936] [ 106.673630][ T5757] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.882596][ T5757] usb 4-1: device descriptor read/64, error -71 [ 107.160842][ T5757] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.291040][ T5757] usb 4-1: device descriptor read/64, error -71 [ 107.385385][ T5958] device-mapper: table: 248:0: multipath: invalid number of priority groups (-EINVAL) [ 107.385417][ T5958] device-mapper: ioctl: error adding target to table [ 107.401622][ T5757] usb usb4-port1: attempt power cycle [ 107.550753][ T5754] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.715712][ T5754] usb 2-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 107.718002][ T5754] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 107.718038][ T5754] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.718054][ T5754] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.718071][ T5754] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.719405][ T5754] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 107.719439][ T5754] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.719455][ T5754] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.719472][ T5754] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.737454][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.737524][ T5754] usb 2-1: Product: syz [ 107.737568][ T5754] usb 2-1: Manufacturer: syz [ 107.737774][ T5754] usb 2-1: SerialNumber: syz [ 107.774018][ T5757] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.780783][ T1582] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.813646][ T5757] usb 4-1: device descriptor read/8, error -71 [ 107.869780][ T5754] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 107.893537][ T5754] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 107.896834][ T5754] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 107.961272][ T1582] usb 3-1: Using ep0 maxpacket: 8 [ 107.962306][ T1582] usb 3-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 107.964311][ T1582] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.964339][ T1582] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.964364][ T1582] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.964421][ T1582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.028166][ T1582] usb 3-1: config 0 descriptor?? [ 108.080315][ T5953] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 108.082639][ T5757] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.100262][ T5342] usb 2-1: USB disconnect, device number 4 [ 108.110137][ T5757] usb 4-1: device descriptor read/8, error -71 [ 108.138645][ T5342] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 108.155238][ T5342] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 108.156440][ T5342] ti_usb_3410_5052 2-1:2.0: device disconnected [ 108.212073][ T5757] usb usb4-port1: unable to enumerate USB device [ 108.445674][ T1582] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 108.445710][ T1582] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 108.445740][ T1582] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 108.445768][ T1582] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 108.445797][ T1582] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 108.446834][ T1582] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 108.668141][ T1582] usb 3-1: USB disconnect, device number 3 [ 109.473404][ T5933] can0 (unregistered): slcan off ttyS3. [ 109.810760][ T5713] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.939886][ T5943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.963019][ T5713] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 109.967981][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.968192][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.974273][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.974295][ T5713] usb 4-1: Product: syz [ 109.974311][ T5713] usb 4-1: Manufacturer: syz [ 109.974326][ T5713] usb 4-1: SerialNumber: syz [ 110.058349][ T5713] usb 4-1: selecting invalid altsetting 1 [ 110.496390][ T5713] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 110.496527][ T5713] cdc_mbim 4-1:1.0: bind() failure [ 110.920804][ C1] net_ratelimit: 93 callbacks suppressed [ 112.322232][ T6015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.80'. [ 112.375297][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 112.634024][ T5713] usb 4-1: USB disconnect, device number 6 [ 112.916782][ T6027] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 113.020942][ T992] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.172326][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 113.182124][ T992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.182177][ T992] usb 1-1: New USB device found: idVendor=0644, idProduct=800f, bcdDevice=0.40 [ 113.183963][ T992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.184073][ T992] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.184095][ T992] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.184138][ T992] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 113.187595][ T992] usb 1-1: string descriptor 0 read error: -22 [ 113.187750][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.408433][ T992] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.408501][ T992] usb 1-1: MIDIStreaming interface descriptor not found [ 113.944156][ T6049] 0x000000000000-0x000000010000 : "" [ 114.011048][ T88] IPVS: starting estimator thread 0... [ 114.019034][ T992] usb 1-1: USB disconnect, device number 3 [ 114.020272][ T6049] ftl_cs: FTL header not found. [ 114.111811][ T6053] IPVS: using max 27 ests per chain, 64800 per kthread [ 114.131306][ T6049] FAULT_INJECTION: forcing a failure. [ 114.131306][ T6049] name failslab, interval 1, probability 0, space 0, times 0 [ 114.131361][ T6049] CPU: 1 UID: 0 PID: 6049 Comm: syz.1.86 Tainted: G S syzkaller #0 PREEMPT(full) [ 114.131394][ T6049] Tainted: [S]=CPU_OUT_OF_SPEC [ 114.131403][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.131419][ T6049] Call Trace: [ 114.131429][ T6049] [ 114.131439][ T6049] dump_stack_lvl+0xe8/0x150 [ 114.131486][ T6049] should_fail_ex+0x3eb/0x540 [ 114.131512][ T6049] should_failslab+0xa8/0x100 [ 114.131530][ T6049] ? __kernfs_new_node+0xe6/0x980 [ 114.131551][ T6049] kmem_cache_alloc_noprof+0x9c/0x600 [ 114.131575][ T6049] ? __kernfs_new_node+0xe6/0x980 [ 114.131601][ T6049] __kernfs_new_node+0xe6/0x980 [ 114.131629][ T6049] ? __pfx___kernfs_new_node+0x10/0x10 [ 114.131648][ T6049] ? lock_acquire+0x115/0x350 [ 114.131668][ T6049] ? kernfs_root+0x1c/0x230 [ 114.131694][ T6049] ? kernfs_root+0x1c/0x230 [ 114.131713][ T6049] ? kernfs_root+0x1c/0x230 [ 114.131732][ T6049] ? kernfs_root+0x1c/0x230 [ 114.131760][ T6049] kernfs_new_node+0xeb/0x140 [ 114.131787][ T6049] __kernfs_create_file+0x4b/0x2e0 [ 114.131816][ T6049] sysfs_add_file_mode_ns+0x237/0x300 [ 114.131848][ T6049] internal_create_group+0x679/0x1180 [ 114.131886][ T6049] ? __pfx_internal_create_group+0x10/0x10 [ 114.131918][ T6049] ? up_write+0x19d/0x4a0 [ 114.131945][ T6049] sysfs_create_groups+0x59/0x120 [ 114.131972][ T6049] device_add_attrs+0x12c/0x600 [ 114.131996][ T6049] ? __pfx_device_add_attrs+0x10/0x10 [ 114.132015][ T6049] ? kobject_put+0x50f/0x550 [ 114.132042][ T6049] ? device_add_class_symlinks+0x21f/0x240 [ 114.132066][ T6049] device_add+0x488/0xb80 [ 114.132090][ T6049] __add_disk+0x517/0xdb0 [ 114.132124][ T6049] add_disk_fwnode+0x100/0x3a0 [ 114.132154][ T6049] add_mtd_blktrans_dev+0xe79/0x14b0 [ 114.132191][ T6049] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 114.132238][ T6049] ? __kmalloc_cache_noprof+0x31c/0x600 [ 114.132262][ T6049] ? __kmalloc_cache_noprof+0x148/0x600 [ 114.132294][ T6049] ? mtdblock_add_mtd+0x57/0x240 [ 114.132325][ T6049] mtdblock_add_mtd+0x18a/0x240 [ 114.132349][ T6049] blktrans_notify_add+0x9f/0xf0 [ 114.132372][ T6049] add_mtd_device+0x117f/0x17b0 [ 114.132407][ T6049] ? __pfx_add_mtd_device+0x10/0x10 [ 114.132437][ T6049] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 114.132467][ T6049] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.132507][ T6049] mtd_add_partition+0x388/0x590 [ 114.132538][ T6049] ? __pfx_mtd_add_partition+0x10/0x10 [ 114.132567][ T6049] ? __might_fault+0xaf/0x130 [ 114.132598][ T6049] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 114.132621][ T6049] ? __pfx___dynamic_pr_debug+0x10/0x10 [ 114.132646][ T6049] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 114.132689][ T6049] ? __might_fault+0xaf/0x130 [ 114.132718][ T6049] mtdchar_ioctl+0x14f7/0x1bc0 [ 114.132748][ T6049] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 114.132781][ T6049] ? __lock_acquire+0x747/0x2de0 [ 114.132823][ T6049] ? tomoyo_path_number_perm+0x219/0x5f0 [ 114.132856][ T6049] ? __mutex_trylock_common+0x15f/0x270 [ 114.132883][ T6049] ? __pfx___mutex_trylock_common+0x10/0x10 [ 114.132911][ T6049] ? rcu_is_watching+0x16/0xb0 [ 114.132934][ T6049] ? trace_contention_end+0x3d/0x140 [ 114.132959][ T6049] ? __mutex_lock+0x305/0x15a0 [ 114.132980][ T6049] ? do_futex+0x3e7/0x4e0 [ 114.133010][ T6049] ? mtdchar_unlocked_ioctl+0xa1/0xd0 [ 114.133048][ T6049] ? __pfx___mutex_lock+0x10/0x10 [ 114.133080][ T6049] ? __fget_files+0x2a/0x420 [ 114.133104][ T6049] ? __fget_files+0x2a/0x420 [ 114.133130][ T6049] mtdchar_unlocked_ioctl+0xae/0xd0 [ 114.133153][ T6049] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 114.133177][ T6049] __se_sys_ioctl+0xfc/0x170 [ 114.133203][ T6049] do_syscall_64+0x166/0x520 [ 114.133224][ T6049] ? trace_irq_disable+0x3b/0x140 [ 114.133244][ T6049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.133268][ T6049] ? clear_bhb_loop+0x70/0xc0 [ 114.133304][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.133328][ T6049] RIP: 0033:0x7fc4fb79e1d9 [ 114.133360][ T6049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.133380][ T6049] RSP: 002b:00007fc4fc628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.133409][ T6049] RAX: ffffffffffffffda RBX: 00007fc4fba25fa0 RCX: 00007fc4fb79e1d9 [ 114.133427][ T6049] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000006 [ 114.133442][ T6049] RBP: 00007fc4fb835888 R08: 0000000000000000 R09: 0000000000000000 [ 114.133457][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.133470][ T6049] R13: 00007fc4fba26038 R14: 00007fc4fba25fa0 R15: 00007ffcaa5a50a8 [ 114.133507][ T6049] [ 114.845661][ T6064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.034182][ T6066] FAULT_INJECTION: forcing a failure. [ 115.034182][ T6066] name failslab, interval 1, probability 0, space 0, times 0 [ 115.034212][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.2.95 Tainted: G S syzkaller #0 PREEMPT(full) [ 115.034245][ T6066] Tainted: [S]=CPU_OUT_OF_SPEC [ 115.034253][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.034285][ T6066] Call Trace: [ 115.034295][ T6066] [ 115.034307][ T6066] dump_stack_lvl+0xe8/0x150 [ 115.034338][ T6066] should_fail_ex+0x3eb/0x540 [ 115.034368][ T6066] should_failslab+0xa8/0x100 [ 115.034394][ T6066] __kmalloc_cache_noprof+0x9e/0x600 [ 115.034420][ T6066] ? _printk+0xdd/0x130 [ 115.034441][ T6066] ? nsim_fib_event_nb+0x185/0x11d0 [ 115.034463][ T6066] ? nsim_fib_event_nb+0x185/0x11d0 [ 115.034494][ T6066] nsim_fib_event_nb+0x185/0x11d0 [ 115.034522][ T6066] ? lock_acquire+0x115/0x350 [ 115.034552][ T6066] notifier_call_chain+0x1a5/0x3d0 [ 115.034581][ T6066] ? atomic_notifier_call_chain+0x26/0x180 [ 115.034608][ T6066] atomic_notifier_call_chain+0xda/0x180 [ 115.034635][ T6066] call_fib_notifiers+0x31/0x60 [ 115.034661][ T6066] call_fib_entry_notifiers+0x158/0x200 [ 115.034694][ T6066] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 115.034730][ T6066] ? lockdep_rtnl_is_held+0x26/0x40 [ 115.034753][ T6066] ? fib_find_node+0x2b0/0x2f0 [ 115.034782][ T6066] fib_table_delete+0xa47/0xd40 [ 115.034832][ T6066] fib_magic+0x45d/0x530 [ 115.034862][ T6066] ? __pfx_fib_magic+0x10/0x10 [ 115.034882][ T6066] ? irqentry_exit+0x218/0x920 [ 115.034932][ T6066] fib_del_ifaddr+0x10a9/0x1490 [ 115.034963][ T6066] ? inetaddr_event+0xef/0x150 [ 115.034987][ T6066] ? __pfx_inetaddr_event+0x10/0x10 [ 115.035017][ T6066] fib_inetaddr_event+0xbb/0x190 [ 115.035044][ T6066] notifier_call_chain+0x1a5/0x3d0 [ 115.035076][ T6066] blocking_notifier_call_chain+0x6a/0x90 [ 115.035104][ T6066] __inet_del_ifa+0xa69/0x1040 [ 115.035145][ T6066] inetdev_event+0x500/0x1610 [ 115.035174][ T6066] ? __pfx_inetdev_event+0x10/0x10 [ 115.035210][ T6066] notifier_call_chain+0x1a5/0x3d0 [ 115.035244][ T6066] netif_set_mtu_ext+0x5ac/0x830 [ 115.035288][ T6066] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 115.035311][ T6066] ? __pfx___mutex_trylock_common+0x10/0x10 [ 115.035344][ T6066] ? trace_contention_end+0x3d/0x140 [ 115.035369][ T6066] ? __mutex_lock+0x305/0x15a0 [ 115.035400][ T6066] netif_set_mtu+0xd7/0x1b0 [ 115.035422][ T6066] ? __pfx_hook_capable+0x10/0x10 [ 115.035447][ T6066] ? __pfx_netif_set_mtu+0x10/0x10 [ 115.035486][ T6066] ? __dev_get_by_name+0xe5/0x130 [ 115.035515][ T6066] dev_set_mtu+0x105/0x210 [ 115.035542][ T6066] dev_ioctl+0x7b4/0x1150 [ 115.035571][ T6066] sock_do_ioctl+0x23e/0x320 [ 115.035597][ T6066] ? __pfx_sock_do_ioctl+0x10/0x10 [ 115.035617][ T6066] ? do_futex+0x3e7/0x4e0 [ 115.035659][ T6066] sock_ioctl+0x57a/0x7e0 [ 115.035682][ T6066] ? __fget_files+0x2a/0x420 [ 115.035704][ T6066] ? __pfx_sock_ioctl+0x10/0x10 [ 115.035725][ T6066] ? __fget_files+0x2a/0x420 [ 115.035745][ T6066] ? __fget_files+0x2a/0x420 [ 115.035772][ T6066] ? bpf_lsm_file_ioctl+0x9/0x20 [ 115.035795][ T6066] ? __pfx_sock_ioctl+0x10/0x10 [ 115.035816][ T6066] __se_sys_ioctl+0xfc/0x170 [ 115.035841][ T6066] do_syscall_64+0x166/0x520 [ 115.035861][ T6066] ? trace_irq_disable+0x3b/0x140 [ 115.035882][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.035906][ T6066] ? clear_bhb_loop+0x70/0xc0 [ 115.035930][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.035953][ T6066] RIP: 0033:0x7ff62ad9e1d9 [ 115.035974][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.035995][ T6066] RSP: 002b:00007ff62bc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.036018][ T6066] RAX: ffffffffffffffda RBX: 00007ff62b025fa0 RCX: 00007ff62ad9e1d9 [ 115.036037][ T6066] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000004 [ 115.036052][ T6066] RBP: 00007ff62ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 115.036067][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.036082][ T6066] R13: 00007ff62b026038 R14: 00007ff62b025fa0 R15: 00007fff72d40a78 [ 115.036121][ T6066] [ 115.055493][ T5757] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.711900][ T6076] device-mapper: table: 248:0: multipath: invalid number of hardware handler args (-EINVAL) [ 115.711951][ T6076] device-mapper: ioctl: error adding target to table [ 115.884808][ T5757] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.884870][ T5757] usb 4-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 115.886062][ T5757] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 115.886129][ T5757] usb 4-1: can't read configurations, error -71 [ 115.971306][ T6079] net_ratelimit: 66 callbacks suppressed [ 115.971329][ T6079] socket: no more sockets [ 116.158331][ T6087] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.210957][ T6090] FAULT_INJECTION: forcing a failure. [ 116.210957][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 116.210992][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.0.104 Tainted: G S syzkaller #0 PREEMPT(full) [ 116.211022][ T6090] Tainted: [S]=CPU_OUT_OF_SPEC [ 116.211031][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.211044][ T6090] Call Trace: [ 116.211053][ T6090] [ 116.211063][ T6090] dump_stack_lvl+0xe8/0x150 [ 116.211092][ T6090] should_fail_ex+0x3eb/0x540 [ 116.211120][ T6090] should_failslab+0xa8/0x100 [ 116.211146][ T6090] __kvmalloc_node_noprof+0x171/0x820 [ 116.211185][ T6090] ? listxattr+0xb9/0x380 [ 116.211205][ T6090] ? listxattr+0xb9/0x380 [ 116.211232][ T6090] listxattr+0xb9/0x380 [ 116.211251][ T6090] ? __fget_files+0x2a/0x420 [ 116.211270][ T6090] ? __pfx_listxattr+0x10/0x10 [ 116.211289][ T6090] ? __fget_files+0x2a/0x420 [ 116.211306][ T6090] ? __fget_files+0x3a2/0x420 [ 116.211323][ T6090] ? __fget_files+0x2a/0x420 [ 116.211346][ T6090] ? fdget+0x1ac/0x250 [ 116.211366][ T6090] __x64_sys_flistxattr+0x135/0x1b0 [ 116.211390][ T6090] do_syscall_64+0x166/0x520 [ 116.211412][ T6090] ? trace_irq_disable+0x3b/0x140 [ 116.211431][ T6090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.211452][ T6090] ? clear_bhb_loop+0x70/0xc0 [ 116.211480][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.211501][ T6090] RIP: 0033:0x7f09ba39e1d9 [ 116.211521][ T6090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.211540][ T6090] RSP: 002b:00007f09bb268028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 116.211563][ T6090] RAX: ffffffffffffffda RBX: 00007f09ba625fa0 RCX: 00007f09ba39e1d9 [ 116.211579][ T6090] RDX: 000000000000001a RSI: 00002000000000c0 RDI: 0000000000000004 [ 116.211594][ T6090] RBP: 00007f09ba435888 R08: 0000000000000000 R09: 0000000000000000 [ 116.211608][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.211621][ T6090] R13: 00007f09ba626038 R14: 00007f09ba625fa0 R15: 00007ffcfffa9408 [ 116.211654][ T6090] [ 116.719014][ T6105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.028276][ T5617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 117.028293][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:3 Tainted: G S syzkaller #0 PREEMPT(full) [ 117.028315][ T5617] Tainted: [S]=CPU_OUT_OF_SPEC [ 117.028321][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.028332][ T5617] Workqueue: hci1 hci_rx_work [ 117.028353][ T5617] Call Trace: [ 117.028359][ T5617] [ 117.028366][ T5617] dump_stack_lvl+0xe8/0x150 [ 117.028386][ T5617] sysfs_create_dir_ns+0x271/0x2a0 [ 117.028405][ T5617] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 117.028425][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 117.028448][ T5617] kobject_add_internal+0x622/0xcd0 [ 117.028470][ T5617] kobject_add+0x163/0x240 [ 117.028489][ T5617] ? __pfx_kobject_add+0x10/0x10 [ 117.028528][ T5617] ? get_device_parent+0x366/0x3a0 [ 117.028548][ T5617] device_add+0x3fa/0xb80 [ 117.028596][ T5617] hci_conn_add_sysfs+0xd5/0x210 [ 117.028624][ T5617] le_conn_complete_evt+0x1094/0x1780 [ 117.028659][ T5617] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 117.028698][ T5617] ? skb_pull_data+0xf0/0x200 [ 117.028719][ T5617] hci_le_conn_complete_evt+0x187/0x470 [ 117.028743][ T5617] hci_event_packet+0x67a/0xf10 [ 117.028764][ T5617] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 117.028780][ T5617] ? __pfx_hci_event_packet+0x10/0x10 [ 117.028800][ T5617] ? kcov_remote_start+0x523/0x7e0 [ 117.028818][ T5617] ? hci_send_to_monitor+0xdf/0x600 [ 117.028837][ T5617] hci_rx_work+0x2b4/0x1110 [ 117.028859][ T5617] ? process_scheduled_works+0x97a/0x1630 [ 117.028877][ T5617] process_scheduled_works+0xc3d/0x1630 [ 117.028917][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.028938][ T5617] ? assign_work+0x3cf/0x5d0 [ 117.028959][ T5617] worker_thread+0xa47/0xfb0 [ 117.028985][ T5617] ? __kthread_parkme+0x71/0x1f0 [ 117.029008][ T5617] kthread+0x38b/0x480 [ 117.029024][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 117.029037][ T5617] ? __pfx_kthread+0x10/0x10 [ 117.029053][ T5617] ret_from_fork+0x514/0xb70 [ 117.029068][ T5617] ? save_fpregs_to_fpstate+0x176/0x200 [ 117.029085][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 117.029101][ T5617] ? __switch_to+0xc78/0x1410 [ 117.029119][ T5617] ? __pfx_kthread+0x10/0x10 [ 117.029162][ T5617] ret_from_fork_asm+0x1a/0x30 [ 117.029203][ T5617] [ 117.029252][ T5617] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 117.029282][ T5617] Bluetooth: hci1: failed to register connection device [ 118.059856][ T6068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.169730][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 118.448718][ T6126] LUN: removable file: (no medium) [ 118.866647][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.124'. [ 118.896407][ T6139] Zero length message leads to an empty skb [ 119.145283][ T6148] process 'syz.0.127' launched './file0' with NULL argv: empty string added [ 119.164440][ T6148] FAULT_INJECTION: forcing a failure. [ 119.164440][ T6148] name failslab, interval 1, probability 0, space 0, times 0 [ 119.164477][ T6148] CPU: 0 UID: 0 PID: 6148 Comm: syz.0.127 Tainted: G S syzkaller #0 PREEMPT(full) [ 119.164510][ T6148] Tainted: [S]=CPU_OUT_OF_SPEC [ 119.164520][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.164535][ T6148] Call Trace: [ 119.164544][ T6148] [ 119.164554][ T6148] dump_stack_lvl+0xe8/0x150 [ 119.164585][ T6148] should_fail_ex+0x3eb/0x540 [ 119.164614][ T6148] should_failslab+0xa8/0x100 [ 119.164639][ T6148] __kmalloc_cache_noprof+0x9e/0x600 [ 119.164663][ T6148] ? tomoyo_init_log+0x187/0x1f60 [ 119.164685][ T6148] ? tomoyo_init_log+0x187/0x1f60 [ 119.164714][ T6148] tomoyo_init_log+0x187/0x1f60 [ 119.164739][ T6148] ? stack_depot_save_flags+0x33/0x7f0 [ 119.164760][ T6148] ? __lock_acquire+0x6f0/0x2de0 [ 119.164789][ T6148] ? format_decode+0xdc/0xda0 [ 119.164812][ T6148] ? widen_string+0x3b/0x2a0 [ 119.164831][ T6148] ? string+0x28a/0x2d0 [ 119.164857][ T6148] ? __pfx_tomoyo_init_log+0x10/0x10 [ 119.164880][ T6148] ? tomoyo_profile+0x11/0x50 [ 119.164901][ T6148] ? tomoyo_domain_quota_is_ok+0x422/0x570 [ 119.164931][ T6148] tomoyo_supervisor+0x35f/0x1550 [ 119.164976][ T6148] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 119.165019][ T6148] ? tomoyo_check_path_acl+0x137/0x1d0 [ 119.165046][ T6148] ? tomoyo_check_acl+0x386/0x400 [ 119.165070][ T6148] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 119.165098][ T6148] tomoyo_path_permission+0x262/0x3b0 [ 119.165125][ T6148] tomoyo_check_open_permission+0x2b2/0x470 [ 119.165151][ T6148] ? tomoyo_check_open_permission+0x1d3/0x470 [ 119.165175][ T6148] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 119.165199][ T6148] ? __asan_memset+0x22/0x50 [ 119.165262][ T6148] ? tomoyo_file_open+0x163/0x220 [ 119.165283][ T6148] ? devcgroup_check_permission+0x31/0x8f0 [ 119.165312][ T6148] security_file_open+0xa9/0x240 [ 119.165337][ T6148] do_dentry_open+0x495/0x1360 [ 119.165373][ T6148] vfs_open_consume+0x4a/0x350 [ 119.165393][ T6148] ? path_openat+0x148a/0x1da0 [ 119.165418][ T6148] path_openat+0x14a6/0x1da0 [ 119.165461][ T6148] do_file_open+0x23e/0x4a0 [ 119.165490][ T6148] ? __pfx_do_file_open+0x10/0x10 [ 119.165536][ T6148] ? _raw_spin_unlock+0x28/0x50 [ 119.165558][ T6148] ? alloc_fd+0x6af/0x760 [ 119.165592][ T6148] do_sys_openat2+0x115/0x200 [ 119.165618][ T6148] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.165648][ T6148] ? do_user_addr_fault+0xd3f/0x1480 [ 119.165677][ T6148] __x64_sys_openat+0x138/0x170 [ 119.165705][ T6148] do_syscall_64+0x166/0x520 [ 119.165726][ T6148] ? trace_irq_disable+0x3b/0x140 [ 119.165748][ T6148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.165772][ T6148] ? clear_bhb_loop+0x70/0xc0 [ 119.165799][ T6148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.165822][ T6148] RIP: 0033:0x7f09ba35ea0e [ 119.165843][ T6148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.165863][ T6148] RSP: 002b:00007f09bb267b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.165888][ T6148] RAX: ffffffffffffffda RBX: 00007f09bb2686c0 RCX: 00007f09ba35ea0e [ 119.165906][ T6148] RDX: fffffffff4000000 RSI: 00007f09bb267c00 RDI: ffffffffffffff9c [ 119.165923][ T6148] RBP: 00007f09bb267c00 R08: 0000000000000000 R09: 0000000000000000 [ 119.165939][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 119.165963][ T6148] R13: 00007f09ba626038 R14: 00007f09ba625fa0 R15: 00007ffcfffa9408 [ 119.166001][ T6148] [ 119.935009][ T6165] comedi comedi0: 8255: I/O port conflict (0x100,4) [ 120.124971][ T6171] Bluetooth: ISO socket layer initialized [ 120.485886][ T6176] FAULT_INJECTION: forcing a failure. [ 120.485886][ T6176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.485922][ T6176] CPU: 0 UID: 0 PID: 6176 Comm: syz.1.140 Tainted: G S syzkaller #0 PREEMPT(full) [ 120.485954][ T6176] Tainted: [S]=CPU_OUT_OF_SPEC [ 120.485963][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.485978][ T6176] Call Trace: [ 120.485987][ T6176] [ 120.485997][ T6176] dump_stack_lvl+0xe8/0x150 [ 120.486027][ T6176] should_fail_ex+0x3eb/0x540 [ 120.486056][ T6176] _copy_from_user+0x2d/0xb0 [ 120.486080][ T6176] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 120.486106][ T6176] ? signal_setup_done+0x315/0x410 [ 120.486135][ T6176] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 120.486155][ T6176] ? fpu__clear_user_states+0x7e/0x400 [ 120.486205][ T6176] ? rcu_is_watching+0x16/0xb0 [ 120.486241][ T6176] do_syscall_64+0x166/0x520 [ 120.486272][ T6176] ? trace_irq_disable+0x3b/0x140 [ 120.486293][ T6176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.486322][ T6176] ? clear_bhb_loop+0x70/0xc0 [ 120.486347][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.486371][ T6176] RIP: 0033:0x7fc4fb73f559 [ 120.486392][ T6176] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 120.486411][ T6176] RSP: 002b:00007fc4fc627a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 120.486435][ T6176] RAX: ffffffffffffffda RBX: 00007fc4fba25fa0 RCX: 00007fc4fb73f559 [ 120.486452][ T6176] RDX: 00007fc4fc627a80 RSI: 00007fc4fc627bb0 RDI: 0000000000000011 [ 120.486468][ T6176] RBP: 00007fc4fb835888 R08: 0000000000000000 R09: 00000000fffffffb [ 120.486485][ T6176] R10: 0000000004040004 R11: 0000000000000246 R12: 0000000000000000 [ 120.486499][ T6176] R13: 00007fc4fba26038 R14: 00007fc4fba25fa0 R15: 00007ffcaa5a50a8 [ 120.486534][ T6176] [ 121.080738][ T5713] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.163890][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 121.231867][ T5713] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.233243][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.233325][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.238503][ T5713] usb 2-1: config 0 descriptor?? [ 121.279049][ T5713] pwc: Askey VC010 type 2 USB webcam detected. [ 121.320767][ C1] net_ratelimit: 816 callbacks suppressed [ 121.666759][ T5713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.951177][ T6218] FAULT_INJECTION: forcing a failure. [ 121.951177][ T6218] name failslab, interval 1, probability 0, space 0, times 0 [ 121.951217][ T6218] CPU: 1 UID: 0 PID: 6218 Comm: syz.2.153 Tainted: G S syzkaller #0 PREEMPT(full) [ 121.951251][ T6218] Tainted: [S]=CPU_OUT_OF_SPEC [ 121.951261][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.951276][ T6218] Call Trace: [ 121.951285][ T6218] [ 121.951296][ T6218] dump_stack_lvl+0xe8/0x150 [ 121.951327][ T6218] should_fail_ex+0x3eb/0x540 [ 121.951357][ T6218] should_failslab+0xa8/0x100 [ 121.951382][ T6218] __kmalloc_cache_node_noprof+0xa5/0x620 [ 121.951407][ T6218] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 121.951431][ T6218] ? __alloc_workqueue+0xbd7/0x21d0 [ 121.951454][ T6218] ? __alloc_workqueue+0xbd7/0x21d0 [ 121.951484][ T6218] __alloc_workqueue+0xbd7/0x21d0 [ 121.951528][ T6218] alloc_workqueue_noprof+0xe3/0x210 [ 121.951558][ T6218] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 121.951600][ T6218] ? mutex_init_lockdep+0xdf/0x110 [ 121.951626][ T6218] __rds_conn_create+0x1334/0x2290 [ 121.951648][ T6218] ? __rds_conn_create+0x2d5/0x2290 [ 121.951685][ T6218] ? __pfx___rds_conn_create+0x10/0x10 [ 121.951707][ T6218] ? trace_kmalloc+0x2a/0xf0 [ 121.951737][ T6218] ? __raw_spin_lock_init+0x45/0x100 [ 121.951763][ T6218] rds_conn_create_outgoing+0x43/0x60 [ 121.951792][ T6218] rds_sendmsg+0xfca/0x20e0 [ 121.951831][ T6218] ? __pfx_rds_sendmsg+0x10/0x10 [ 121.951858][ T6218] ? __lock_acquire+0x747/0x2de0 [ 121.951884][ T6218] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.951910][ T6218] ? aa_sock_msg_perm+0x144/0x210 [ 121.951938][ T6218] ? apparmor_socket_sendmsg+0x98/0x360 [ 121.951963][ T6218] ? __pfx_rds_sendmsg+0x10/0x10 [ 121.951983][ T6218] sock_sendmsg_nosec+0x14e/0x190 [ 121.952012][ T6218] ____sys_sendmsg+0x54e/0x850 [ 121.952040][ T6218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.952088][ T6218] ? import_iovec+0x73/0xa0 [ 121.952115][ T6218] ___sys_sendmsg+0x2a5/0x360 [ 121.952136][ T6218] ? __lock_acquire+0x747/0x2de0 [ 121.952164][ T6218] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.952190][ T6218] ? futex_wait+0x2a2/0x390 [ 121.952244][ T6218] ? __fget_files+0x3a2/0x420 [ 121.952265][ T6218] ? __fget_files+0x2a/0x420 [ 121.952296][ T6218] __x64_sys_sendmsg+0x1b1/0x290 [ 121.952322][ T6218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.952368][ T6218] do_syscall_64+0x166/0x520 [ 121.952400][ T6218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.952425][ T6218] ? clear_bhb_loop+0x70/0xc0 [ 121.952451][ T6218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.952474][ T6218] RIP: 0033:0x7ff62ad9e1d9 [ 121.952495][ T6218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.952516][ T6218] RSP: 002b:00007ff62bc41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.952541][ T6218] RAX: ffffffffffffffda RBX: 00007ff62b025fa0 RCX: 00007ff62ad9e1d9 [ 121.952559][ T6218] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000004 [ 121.952574][ T6218] RBP: 00007ff62ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 121.952589][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.952603][ T6218] R13: 00007ff62b026038 R14: 00007ff62b025fa0 R15: 00007fff72d40a78 [ 121.952637][ T6218] [ 122.408747][ T6221] ------------[ cut here ]------------ [ 122.408762][ T6221] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 122.408789][ T6221] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#1: syz.0.154/6221 [ 122.434484][ T6221] Modules linked in: [ 122.438447][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.0.154 Tainted: G S syzkaller #0 PREEMPT(full) [ 122.449636][ T6221] Tainted: [S]=CPU_OUT_OF_SPEC [ 122.454531][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.464787][ T6221] RIP: 0010:__fortify_report+0x89/0xa0 [ 122.470293][ T6221] Code: e8 ec f1 4b fd 48 8d 3d c5 7e d7 0c 45 84 e4 49 8b 37 48 c7 c0 40 8d 8d 8c 48 c7 c1 60 8d 8d 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d e9 45 84 14 07 cc cc cc cc [ 122.490034][ T6221] RSP: 0018:ffffc9000726fdc8 EFLAGS: 00010246 [ 122.496254][ T6221] RAX: ffffffff8c8d8d40 RBX: 0000000000000000 RCX: ffffffff8c8d8d40 [ 122.504492][ T6221] RDX: 0000000000000010 RSI: ffffffff8c8d8c20 RDI: ffffffff91c743f0 [ 122.513753][ T6221] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100f088d11 [ 122.519113][ T5713] pwc: recv_control_msg error -32 req 02 val 2700 [ 122.527115][ T5713] pwc: recv_control_msg error -32 req 02 val 2c00 [ 122.531710][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.534492][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.545626][ T5713] pwc: recv_control_msg error -32 req 04 val 1000 [ 122.559585][ T6221] R10: dffffc0000000000 R11: ffffed100f088d12 R12: 0000000000000000 [ 122.567697][ T6221] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c8d8a78 [ 122.575794][ T6221] FS: 00007f09bb2686c0(0000) GS:ffff888123529000(0000) knlGS:0000000000000000 [ 122.584850][ T6221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.591590][ T6221] CR2: 000000110c3c6aad CR3: 000000005f6f0000 CR4: 00000000003526f0 [ 122.599623][ T6221] Call Trace: [ 122.603042][ T6221] [ 122.606046][ T6221] __fortify_panic+0x9/0x10 [ 122.610602][ T6221] landlock_merge_ruleset+0xc46/0xc90 [ 122.617325][ T6221] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 122.624793][ T6221] do_syscall_64+0x166/0x520 [ 122.629444][ T6221] ? trace_irq_disable+0x3b/0x140 [ 122.635422][ T6221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.641612][ T6221] ? clear_bhb_loop+0x70/0xc0 [ 122.646364][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.652400][ T6221] RIP: 0033:0x7f09ba39e1d9 [ 122.656901][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.676757][ T6221] RSP: 002b:00007f09bb268028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 122.685467][ T6221] RAX: ffffffffffffffda RBX: 00007f09ba625fa0 RCX: 00007f09ba39e1d9 [ 122.693606][ T6221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 122.701693][ T6221] RBP: 00007f09ba435888 R08: 0000000000000000 R09: 0000000000000000 [ 122.710011][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.718193][ T6221] R13: 00007f09ba626038 R14: 00007f09ba625fa0 R15: 00007ffcfffa9408 [ 122.727346][ T6221] [ 122.730430][ T6221] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.737756][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.0.154 Tainted: G S syzkaller #0 PREEMPT(full) [ 122.749000][ T6221] Tainted: [S]=CPU_OUT_OF_SPEC [ 122.753973][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.764166][ T6221] Call Trace: [ 122.769443][ T6221] [ 122.772514][ T6221] vpanic+0x26f/0x710 [ 122.776725][ T6221] panic+0xc5/0xd0 [ 122.780499][ T6221] ? __pfx_panic+0x10/0x10 [ 122.784978][ T6221] __warn+0x315/0x4c0 [ 122.788998][ T6221] ? __fortify_report+0x6b/0xa0 [ 122.793976][ T6221] ? __fortify_report+0x6b/0xa0 [ 122.798952][ T6221] __report_bug+0x276/0x570 [ 122.803753][ T6221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.810053][ T6221] ? __fortify_report+0x6b/0xa0 [ 122.815051][ T6221] ? __pfx___report_bug+0x10/0x10 [ 122.820403][ T6221] report_bug_entry+0x19b/0x290 [ 122.825297][ T6221] ? __fortify_report+0x89/0xa0 [ 122.830809][ T6221] ? __fortify_report+0x8e/0xa0 [ 122.835708][ T6221] handle_bug+0xce/0x200 [ 122.840350][ T6221] exc_invalid_op+0x1a/0x50 [ 122.844907][ T6221] asm_exc_invalid_op+0x1a/0x20 [ 122.851106][ T6221] RIP: 0010:__fortify_report+0x89/0xa0 [ 122.857092][ T6221] Code: e8 ec f1 4b fd 48 8d 3d c5 7e d7 0c 45 84 e4 49 8b 37 48 c7 c0 40 8d 8d 8c 48 c7 c1 60 8d 8d 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d e9 45 84 14 07 cc cc cc cc [ 122.881626][ T6221] RSP: 0018:ffffc9000726fdc8 EFLAGS: 00010246 [ 122.888432][ T6221] RAX: ffffffff8c8d8d40 RBX: 0000000000000000 RCX: ffffffff8c8d8d40 [ 122.896923][ T6221] RDX: 0000000000000010 RSI: ffffffff8c8d8c20 RDI: ffffffff91c743f0 [ 122.904945][ T6221] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100f088d11 [ 122.913043][ T6221] R10: dffffc0000000000 R11: ffffed100f088d12 R12: 0000000000000000 [ 122.921240][ T6221] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c8d8a78 [ 122.929894][ T6221] ? __fortify_report+0x2c/0xa0 [ 122.934809][ T6221] __fortify_panic+0x9/0x10 [ 122.939365][ T6221] landlock_merge_ruleset+0xc46/0xc90 [ 122.944823][ T6221] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 122.951040][ T6221] do_syscall_64+0x166/0x520 [ 122.955682][ T6221] ? trace_irq_disable+0x3b/0x140 [ 122.960774][ T6221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.966998][ T6221] ? clear_bhb_loop+0x70/0xc0 [ 122.971734][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.977682][ T6221] RIP: 0033:0x7f09ba39e1d9 [ 122.982232][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.001885][ T6221] RSP: 002b:00007f09bb268028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 123.010354][ T6221] RAX: ffffffffffffffda RBX: 00007f09ba625fa0 RCX: 00007f09ba39e1d9 [ 123.018361][ T6221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 123.026372][ T6221] RBP: 00007f09ba435888 R08: 0000000000000000 R09: 0000000000000000 [ 123.034391][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.042403][ T6221] R13: 00007f09ba626038 R14: 00007f09ba625fa0 R15: 00007ffcfffa9408 [ 123.050446][ T6221] [ 123.054086][ T6221] Kernel Offset: disabled [ 123.058445][ T6221] Rebooting in 86400 seconds..