last executing test programs: 15.624104728s ago: executing program 4 (id=485): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)=0xff}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900002700000000000000faff00", [0x8, 0xffffffff9673e35f]}}) 14.125367708s ago: executing program 3 (id=488): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 12.9437942s ago: executing program 0 (id=489): syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000007600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)=""/240, 0xf0}, 0x3}], 0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) 12.842336903s ago: executing program 3 (id=490): r0 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 12.187229796s ago: executing program 4 (id=491): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x34}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r2, 0x917, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) mkdir(&(0x7f00000001c0)='./file0\x00', 0x1) r3 = inotify_init1(0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x14000008) inotify_add_watch(r3, &(0x7f0000005780)='./file0\x00', 0x9600006f) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="65a793e3b5a7e81bcfa841b25e1f62d6f3161f84f950463227427703d35dbd704b52c312157a65fd67fcba47b5fc6ae39996bd4c55f8916199ef41ee99b1", 0x3e, 0x0, 0x1}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) 11.100661046s ago: executing program 0 (id=493): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x47ffe, 0x7c9d03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x40000) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendto$inet(r5, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "0000100000000000000000004000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x400, 0xffff, 0x6, 0xe92, 0xa, "9981d18ae7e39711e5a3f410a41053ee0f4ee0"}) unshare(0x2040400) 11.037599255s ago: executing program 3 (id=494): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0xe, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfde, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x1, 0x5, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x3, 0x1, [0x5], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9e, 0x80, 0x3, {0x7, 0x25, 0x1, 0x8, 0x8, 0x30}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xe8, 0x3, 0xa1, {0x7, 0x25, 0x1, 0xc, 0x7, 0x4}}}}}}}}]}}, 0x0) 11.035077398s ago: executing program 1 (id=495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9.938064482s ago: executing program 2 (id=496): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x40000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f000000b000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000440)="e6513ae1137c79abf7c1f99b69fadbaefe6174836315b23f", 0x18, 0x4a}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000380)="90972e6550", 0x5, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f000000d000/0x4000)=nil, 0x4000, 0x3}) 9.620072171s ago: executing program 1 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x40008000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r6}, 0xc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r8, 0x0, 0x0) ftruncate(r8, 0x2000009) sendfile(r4, r8, 0x0, 0x7ffff004) 9.582082239s ago: executing program 4 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x40008000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r7, 0x0, 0x0) ftruncate(r7, 0x2000009) sendfile(r4, r7, 0x0, 0x7ffff004) 9.566387537s ago: executing program 0 (id=499): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x47ffe, 0x7c9d03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x40000) sendto$inet(r5, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x400c0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "0000100000000000000000004000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x400, 0xffff, 0x6, 0xe92, 0xa, "9981d18ae7e39711e5a3f410a41053ee0f4ee0"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) unshare(0x2040400) 8.15843987s ago: executing program 2 (id=500): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 7.397671287s ago: executing program 1 (id=501): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x40000) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendto$inet(r4, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0) close(r4) 6.700003347s ago: executing program 4 (id=502): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000015a80)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x3f7}}, 0x3c}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 6.654363179s ago: executing program 3 (id=503): syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000007600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)=""/240, 0xf0}, 0x3}], 0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) 6.653626082s ago: executing program 0 (id=504): r0 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 6.584276943s ago: executing program 4 (id=505): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) recvmsg$can_j1939(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="e0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003b00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000000002000a0028001a00e0000002000000000000000000000000000000000000000000000000000000000a0002060c001c"], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x10}], 0x1}}], 0x1, 0x20000005) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x1, 0x9, 0x0, 0x8001}, 0x20) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)=0x3) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r10, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0884113, &(0x7f0000000000)={0x1, 0x1fffffe, 0x800007, 0x80000000006, 0x346a, 0x100000001, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0xfffffffd, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r11, 0xc0984124, &(0x7f00000005c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) close_range(r5, r5, 0x0) 6.250851665s ago: executing program 0 (id=506): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dmmidi(0x0, 0xca64, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) fcntl$notify(r1, 0x402, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r3, &(0x7f00000030c0)={0x2020}, 0x2020) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) write(r3, &(0x7f00000001c0)="f300533b6d1e0e495b21fa81aed055ad5056d0c5d0e173b92187aa4455cd3c0aec5d591a67cd93283a00e9d4f1c0a01021a3ce0c3067e07c9505e69e0284094da3f63cde93de29bb2d91a160411fe0129d3ef8a311b403a9e1b79c0a786707ae6b0981c83b6a56bb380e79489291eed29590d094ac82d2ce", 0x78) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000005c0)=""/210) openat$zero(0xffffff9c, &(0x7f00000000c0), 0x80002, 0x0) socket(0xa, 0x3, 0x3a) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {0x0}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) lseek(r0, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) 6.250651438s ago: executing program 2 (id=507): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x47ffe, 0x7c9d03) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x40000) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendto$inet(r4, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0) close(r4) 5.237360052s ago: executing program 1 (id=508): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x47ffe, 0x7c9d03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x40000) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendto$inet(r5, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "0000100000000000000000004000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x400, 0xffff, 0x6, 0xe92, 0xa, "9981d18ae7e39711e5a3f410a41053ee0f4ee0"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) unshare(0x2040400) 3.589842433s ago: executing program 0 (id=509): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x47ffe, 0x7c9d03) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x40000) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendto$inet(r5, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "0000100000000000000000004000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x400, 0xffff, 0x6, 0xe92, 0xa, "9981d18ae7e39711e5a3f410a41053ee0f4ee0"}) unshare(0x2040400) 3.585457235s ago: executing program 1 (id=510): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x40000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f000000b000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000440)="e6513ae1137c79abf7c1f99b69fadbaefe6174836315b23f", 0x18, 0x4a}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000380)="90972e6550", 0x5, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) 2.408452835s ago: executing program 1 (id=511): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d9c26c6789d98feac621054c738dcd81e12d6cd88f9ca0429531b32f76876468253effdaeda1a06b48bddc25f4e2b0575fe2a30c682a714aed74b77d62b3a165438e4c2243ccfbc7090935d6c2a2e93d58d592e7b5a832e499f91aeda0235106a00f7cb9262e15f291af69ab6174ff582c04e21c7cb726c8e86667c8b97e072161507be709abeb7b807e7c9b6815fa4734bb1488891c04a74227bf8f6f42744216452d689376806ef6c540218bbba9401fb9edba3909e10b8cd4069bf3788d583a966fdabd553c7b0fd8039202522ac4c56350e1bee7dc17b7fece6a83898c525faa195ce489d23459d3b45a93c8483eefc2af1700115196f4a738b1d2827112e958280565d39e4790fe603e27ad0ced6b29fbb42b2c1ec55cba3317541e25934ace54d832770cc6c220988987114b761f6c74235c55d316178aea6", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) 2.395083704s ago: executing program 3 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x40008000) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01, r4}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r5, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{}], 0x1, &(0x7f00000001c0)) ftruncate(r5, 0x2000009) sendfile(0xffffffffffffffff, r5, 0x0, 0x7ffff004) 2.302705158s ago: executing program 2 (id=513): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x1) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000001f40)=@usbdevfs_disconnect={0x8}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24008084) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000000000000bc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @loopback, @empty}, &(0x7f0000000440)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11a, 0x11a, 0x7, [@volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0xc, 0x1}, {0xc, 0x4}, {0xd, 0x2}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x4}, {0x9, 0x1}, {0x9, 0x5}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x6}, @enum64={0xf, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x3, 0x2, 0xa707}, {0x6, 0x63da, 0xecb}, {0x5, 0xd4c}, {0xb, 0x848, 0x6}]}, @enum={0x10, 0x5, 0x0, 0x6, 0x4, [{}, {0xd, 0x1}, {0x8, 0x10000}, {0xc, 0x800}, {0xb, 0x5c}]}, @datasec={0xe, 0x3, 0x0, 0xf, 0x2, [{0x3, 0x6, 0x7}, {0x2, 0x9, 0xf3d}, {0x3, 0x8, 0x3}], "927b"}]}, {0x0, [0x5f, 0x5f, 0x61, 0x10, 0x5f]}}, &(0x7f0000000600)=""/203, 0x13b, 0xcb, 0x1, 0x9, 0x10000, @value=r3}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x2, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x6, 0x7, 0x3, 0xb840, 0x1, 0x368d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000600)="8716799b2e810800b500148b1368c211d7000023268056ac8d5db0f12c23d285b18d91425a93c62676934bf2ab864fe7a500c0306b57165bc9943747acb8c56323151336b7986047bece6c74225c3dff9de2016180f21212d1e35f1a408380dfe85913bdf60eaf3c717aea06560b136351034b4a030240299b84bf3797295c635141cc473cf9efaa71a634d075c7c916a3800bfbdbfbfad341fecc89908b5918691e7b916cbb8ca23171eabb622eb244f8300923fc0094cf0e9e72d2eb6201097cef1ae65acede1564bf0d74039d60", 0xb09f}], 0x18) 337.115441ms ago: executing program 3 (id=514): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0xe, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfde, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x1, 0x5, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x3, 0x1, [0x5], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9e, 0x80, 0x3, {0x7, 0x25, 0x1, 0x8, 0x8, 0x30}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xe8, 0x3, 0xa1, {0x7, 0x25, 0x1, 0xc, 0x7, 0x4}}}}}}}}]}}, 0x0) 115.366389ms ago: executing program 2 (id=515): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000015a80)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x3f7}}, 0x3c}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 18.770622ms ago: executing program 4 (id=516): r0 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 0s ago: executing program 2 (id=517): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000000)=""/65, &(0x7f0000000180)=0x41) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x46d20153ed1f794b) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 82.403190][ T5781] cgroup: Unknown subsys name 'net' [ 82.644057][ T5781] cgroup: Unknown subsys name 'cpuset' [ 82.689819][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.631374][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.848038][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.855786][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.858291][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.859952][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.860996][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.869353][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.872793][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.873933][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.875110][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.876077][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.899909][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.905560][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.933552][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.960218][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.963990][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.965268][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.993689][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.993902][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.994921][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.996642][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.998441][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.049095][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.051980][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.054496][ T1230] cfg80211: failed to load regulatory.db [ 87.055944][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.056880][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.907164][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 87.933404][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 88.002698][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 88.138591][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 88.198929][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 88.366832][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.367806][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.367923][ T5801] bridge_slave_0: entered allmulticast mode [ 88.370923][ T5801] bridge_slave_0: entered promiscuous mode [ 88.389002][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.389169][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.389704][ T5800] bridge_slave_0: entered allmulticast mode [ 88.391206][ T5800] bridge_slave_0: entered promiscuous mode [ 88.445260][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.445358][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.445472][ T5801] bridge_slave_1: entered allmulticast mode [ 88.447064][ T5801] bridge_slave_1: entered promiscuous mode [ 88.468993][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.469119][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.469299][ T5800] bridge_slave_1: entered allmulticast mode [ 88.471186][ T5800] bridge_slave_1: entered promiscuous mode [ 88.513136][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.513271][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.513418][ T5799] bridge_slave_0: entered allmulticast mode [ 88.514985][ T5799] bridge_slave_0: entered promiscuous mode [ 88.581155][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.581281][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.581395][ T5799] bridge_slave_1: entered allmulticast mode [ 88.583091][ T5799] bridge_slave_1: entered promiscuous mode [ 88.663654][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.663923][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.664084][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.664259][ T5798] bridge_slave_0: entered allmulticast mode [ 88.666186][ T5798] bridge_slave_0: entered promiscuous mode [ 88.672720][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.744563][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.747016][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.747346][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.747487][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.747596][ T5798] bridge_slave_1: entered allmulticast mode [ 88.750042][ T5798] bridge_slave_1: entered promiscuous mode [ 88.753972][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.754109][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.754281][ T5794] bridge_slave_0: entered allmulticast mode [ 88.757055][ T5794] bridge_slave_0: entered promiscuous mode [ 88.942498][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.980347][ T60] Bluetooth: hci2: command tx timeout [ 88.980543][ T5810] Bluetooth: hci0: command tx timeout [ 88.986084][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.986186][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.986297][ T5794] bridge_slave_1: entered allmulticast mode [ 88.987817][ T5794] bridge_slave_1: entered promiscuous mode [ 89.003629][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.048914][ T60] Bluetooth: hci1: command tx timeout [ 89.049164][ T5810] Bluetooth: hci3: command tx timeout [ 89.086054][ T5801] team0: Port device team_slave_0 added [ 89.088153][ T5800] team0: Port device team_slave_0 added [ 89.092527][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.127187][ T5801] team0: Port device team_slave_1 added [ 89.136452][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.139558][ T5800] team0: Port device team_slave_1 added [ 89.143192][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.145653][ T5799] team0: Port device team_slave_0 added [ 89.148790][ T5810] Bluetooth: hci4: command tx timeout [ 89.198285][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.209972][ T5799] team0: Port device team_slave_1 added [ 89.287847][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.287860][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.287875][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.293760][ T5798] team0: Port device team_slave_0 added [ 89.295579][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.295592][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.295614][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.341626][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.341642][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.341665][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.344121][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.344133][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.344156][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.347491][ T5798] team0: Port device team_slave_1 added [ 89.351662][ T5794] team0: Port device team_slave_0 added [ 89.352456][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.352467][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.352489][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.404826][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.404844][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.404866][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.408013][ T5794] team0: Port device team_slave_1 added [ 89.474154][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.474170][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.474193][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.523902][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.523918][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.523943][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.625492][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.625520][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.625544][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.641413][ T5801] hsr_slave_0: entered promiscuous mode [ 89.642952][ T5801] hsr_slave_1: entered promiscuous mode [ 89.655386][ T5800] hsr_slave_0: entered promiscuous mode [ 89.656696][ T5800] hsr_slave_1: entered promiscuous mode [ 89.657741][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 89.657835][ T5800] Cannot create hsr debugfs directory [ 89.662236][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.662249][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.662273][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.712874][ T5799] hsr_slave_0: entered promiscuous mode [ 89.714200][ T5799] hsr_slave_1: entered promiscuous mode [ 89.715164][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 89.715186][ T5799] Cannot create hsr debugfs directory [ 90.485371][ T5798] hsr_slave_0: entered promiscuous mode [ 90.486205][ T5798] hsr_slave_1: entered promiscuous mode [ 90.486800][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 90.486821][ T5798] Cannot create hsr debugfs directory [ 90.573305][ T5794] hsr_slave_0: entered promiscuous mode [ 90.574069][ T5794] hsr_slave_1: entered promiscuous mode [ 90.574636][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 90.574652][ T5794] Cannot create hsr debugfs directory [ 91.049907][ T60] Bluetooth: hci2: command tx timeout [ 91.050003][ T5810] Bluetooth: hci0: command tx timeout [ 91.128959][ T60] Bluetooth: hci1: command tx timeout [ 91.129052][ T5810] Bluetooth: hci3: command tx timeout [ 91.209041][ T5810] Bluetooth: hci4: command tx timeout [ 91.256996][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.287577][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.325441][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.379681][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.475974][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.509934][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.546327][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.596375][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.742286][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.768191][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.813619][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.860917][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.010944][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.049889][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.077840][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.129768][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.166932][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.269320][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.314514][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.351909][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.353970][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.397022][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.457835][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.466343][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.485671][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.522666][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.522814][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.595780][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.640075][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.640159][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.684141][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.684282][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.710991][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.807959][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.875423][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.878515][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.881664][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.917343][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.917580][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.000421][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.048245][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.062647][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.076985][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.123413][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.123502][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.133024][ T5810] Bluetooth: hci0: command tx timeout [ 93.133060][ T5810] Bluetooth: hci2: command tx timeout [ 93.209181][ T5810] Bluetooth: hci3: command tx timeout [ 93.209217][ T5810] Bluetooth: hci1: command tx timeout [ 93.241602][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.298023][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.298385][ T3937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.298992][ T60] Bluetooth: hci4: command tx timeout [ 93.348250][ T3937] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.350868][ T3937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.397925][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.585278][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.743964][ T5801] veth0_vlan: entered promiscuous mode [ 93.820809][ T5801] veth1_vlan: entered promiscuous mode [ 93.862279][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.928523][ T5800] veth0_vlan: entered promiscuous mode [ 93.994701][ T5800] veth1_vlan: entered promiscuous mode [ 94.053038][ T5801] veth0_macvtap: entered promiscuous mode [ 94.082969][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.085598][ T5801] veth1_macvtap: entered promiscuous mode [ 94.138158][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.167433][ T5799] veth0_vlan: entered promiscuous mode [ 94.195482][ T5800] veth0_macvtap: entered promiscuous mode [ 94.210933][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.230411][ T5800] veth1_macvtap: entered promiscuous mode [ 94.236454][ T5799] veth1_vlan: entered promiscuous mode [ 94.257236][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.320575][ T1364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.341338][ T1364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.346594][ T1364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.367480][ T1364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.373664][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.469798][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.552142][ T1364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.586756][ T1364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.606540][ T1364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.620737][ T5794] veth0_vlan: entered promiscuous mode [ 94.626322][ T1364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.627981][ T5799] veth0_macvtap: entered promiscuous mode [ 94.707289][ T5799] veth1_macvtap: entered promiscuous mode [ 94.747234][ T5794] veth1_vlan: entered promiscuous mode [ 94.797178][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.797202][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.945172][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.966321][ T5798] veth0_vlan: entered promiscuous mode [ 94.983415][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.983440][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.025129][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.069542][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.069566][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.098301][ T5798] veth1_vlan: entered promiscuous mode [ 95.110355][ T1173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.114144][ T1173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.119673][ T1173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.145480][ T1173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.163337][ T5794] veth0_macvtap: entered promiscuous mode [ 95.208200][ T5794] veth1_macvtap: entered promiscuous mode [ 95.209324][ T60] Bluetooth: hci2: command tx timeout [ 95.209346][ T5810] Bluetooth: hci0: command tx timeout [ 95.232102][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.232126][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.289298][ T5810] Bluetooth: hci1: command tx timeout [ 95.289308][ T60] Bluetooth: hci3: command tx timeout [ 95.369997][ T60] Bluetooth: hci4: command tx timeout [ 95.672250][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.384822][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.386469][ T5798] veth0_macvtap: entered promiscuous mode [ 96.615101][ T5798] veth1_macvtap: entered promiscuous mode [ 96.632464][ T1173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.647556][ T1173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.828781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.834237][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.942321][ T991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.963646][ T1364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.963701][ T1364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.843802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.843840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.843926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.843979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.323256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 98.323290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 98.593924][ T808] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 98.760547][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.779010][ T808] usb 2-1: device descriptor read/64, error -71 [ 98.833638][ T3937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.833659][ T3937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.923935][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.968267][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.013840][ T1364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.189396][ T1364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.209750][ T1364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.229175][ T808] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 99.859026][ T808] usb 2-1: device descriptor read/64, error -71 [ 99.974892][ T808] usb usb2-port1: attempt power cycle [ 100.090537][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.090560][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.423454][ T808] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 100.464534][ T808] usb 2-1: device descriptor read/8, error -71 [ 100.572221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.572258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.572340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.747084][ T808] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 101.347082][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 101.557806][ T808] usb 2-1: device descriptor read/8, error -71 [ 101.714463][ T808] usb usb2-port1: unable to enumerate USB device [ 102.265842][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.265867][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.381147][ T5949] trusted_key: encrypted_key: insufficient parameters specified [ 102.451367][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.451391][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.468492][ T5947] process 'syz.2.13' launched './file1' with NULL argv: empty string added [ 103.404486][ T3937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.404508][ T3937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.498275][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 108.295013][ T5948] IPVS: starting estimator thread 0... [ 108.409199][ T5998] IPVS: using max 7 ests per chain, 16800 per kthread [ 110.080169][ T6013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.426730][ T6014] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 110.597421][ T6014] bond1 (unregistering): Released all slaves [ 111.596663][ T1230] IPVS: starting estimator thread 0... [ 111.680970][ T6033] IPVS: using max 7 ests per chain, 16800 per kthread [ 112.216079][ T6019] hsr0 speed is unknown, defaulting to 1000 [ 112.242576][ T6019] hsr0 speed is unknown, defaulting to 1000 [ 112.263875][ T6019] hsr0 speed is unknown, defaulting to 1000 [ 112.281993][ T6037] netlink: 'syz.1.33': attribute type 11 has an invalid length. [ 112.286762][ T6019] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.313175][ T6019] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.724421][ T6019] hsr0 speed is unknown, defaulting to 1000 [ 112.739901][ T6019] hsr0 speed is unknown, defaulting to 1000 [ 112.812094][ T6019] hsr0 speed is unknown, defaulting to 1000 [ 112.827987][ T6019] hsr0 speed is unknown, defaulting to 1000 [ 112.860061][ T6019] hsr0 speed is unknown, defaulting to 1000 [ 112.957109][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 114.403931][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.033448][ T6079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.45'. [ 121.126735][ T6083] netlink: 68 bytes leftover after parsing attributes in process `syz.4.46'. [ 121.216067][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 121.378911][ T5796] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.440086][ T5892] IPVS: starting estimator thread 0... [ 121.558174][ T6090] team0: Port device team_slave_0 removed [ 121.559083][ T6096] IPVS: using max 7 ests per chain, 16800 per kthread [ 121.559224][ T5796] usb 4-1: device descriptor read/64, error -71 [ 121.580502][ T6097] veth0: entered promiscuous mode [ 121.829657][ T5796] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.112116][ T5796] usb 4-1: device descriptor read/64, error -71 [ 122.505465][ T5796] usb usb4-port1: attempt power cycle [ 122.710952][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 122.829955][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 122.858928][ T5796] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.879654][ T5796] usb 4-1: device descriptor read/8, error -71 [ 123.122631][ T5796] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.139948][ T5796] usb 4-1: device descriptor read/8, error -71 [ 123.249822][ T5796] usb usb4-port1: unable to enumerate USB device [ 123.761988][ T6093] veth0_to_team: entered promiscuous mode [ 123.857063][ T6097] veth0_to_team: left promiscuous mode [ 128.275207][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 129.996609][ T67] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.228848][ T5987] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.385582][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.385612][ T5987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.388921][ T5987] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.388951][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.388970][ T5987] usb 4-1: Product: syz [ 130.388983][ T5987] usb 4-1: Manufacturer: syz [ 130.388996][ T5987] usb 4-1: SerialNumber: syz [ 130.422116][ T6181] tmpfs: Bad value for 'mpol' [ 130.454655][ T6103] IPVS: starting estimator thread 0... [ 130.472004][ T5987] usb 4-1: config 0 descriptor?? [ 130.542701][ T6183] IPVS: using max 8 ests per chain, 19200 per kthread [ 130.605194][ T6188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.72'. [ 131.090487][ T5867] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.339204][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 131.613994][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 131.614068][ T5867] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 131.614091][ T5867] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 131.614115][ T5867] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 131.614135][ T5867] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 131.614158][ T5867] usb 5-1: config 1 interface 0 has no altsetting 0 [ 131.614193][ T5867] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 131.614216][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.017915][ T60] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.501725][ T5867] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 132.668143][ T5867] scsi host1: usb-storage 5-1:1.0 [ 132.796371][ T37] audit: type=1804 audit(1772490927.731:2): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.76" name="/newroot/19/file1" dev="fuse" ino=1 res=1 errno=0 [ 133.186507][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.186609][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.226856][ T5867] usb 5-1: USB disconnect, device number 2 [ 133.857577][ T5867] usb 4-1: USB disconnect, device number 6 [ 134.078614][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 135.809448][ T6234] openvswitch: netlink: IP tunnel dst address not specified [ 136.098843][ T5987] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 136.304545][ T5987] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.304626][ T5987] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.304652][ T5987] usb 3-1: config 1 interface 0 has no altsetting 0 [ 136.308118][ T5987] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.40 [ 136.308148][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.308168][ T5987] usb 3-1: Product: syz [ 136.308182][ T5987] usb 3-1: Manufacturer: syz [ 136.308196][ T5987] usb 3-1: SerialNumber: syz [ 137.577816][ T5987] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 138.653687][ T5987] usb 3-1: USB disconnect, device number 2 [ 139.088664][ T6266] dlm: no local IP address has been set [ 139.090886][ T6266] dlm: cannot start dlm midcomms -107 [ 139.293011][ T6268] FAULT_INJECTION: forcing a failure. [ 139.293011][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 139.293047][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.3.93 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.293069][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.293080][ T6268] Call Trace: [ 139.293088][ T6268] [ 139.293097][ T6268] dump_stack_lvl+0xe8/0x150 [ 139.293135][ T6268] should_fail_ex+0x46b/0x600 [ 139.293186][ T6268] should_failslab+0xa8/0x100 [ 139.293221][ T6268] kmem_cache_alloc_noprof+0x87/0x680 [ 139.293251][ T6268] ? do_getname+0x2e/0x250 [ 139.293279][ T6268] do_getname+0x2e/0x250 [ 139.293299][ T6268] ? user_path_at+0x1e/0x160 [ 139.293329][ T6268] user_path_at+0x2a/0x160 [ 139.293366][ T6268] __se_sys_mount+0x2dc/0x420 [ 139.293398][ T6268] ? __pfx___se_sys_mount+0x10/0x10 [ 139.293429][ T6268] ? __x64_sys_mount+0x20/0xc0 [ 139.293456][ T6268] do_syscall_64+0x14d/0xf80 [ 139.293484][ T6268] ? trace_irq_disable+0x3b/0x150 [ 139.293508][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.293530][ T6268] ? clear_bhb_loop+0x40/0x90 [ 139.293556][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.293577][ T6268] RIP: 0033:0x7fe85bbbc799 [ 139.293598][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.293616][ T6268] RSP: 002b:00007fe859e0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.293639][ T6268] RAX: ffffffffffffffda RBX: 00007fe85be35fa0 RCX: 00007fe85bbbc799 [ 139.293655][ T6268] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 139.293670][ T6268] RBP: 00007fe859e0e090 R08: 00002000000001c0 R09: 0000000000000000 [ 139.293684][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.293697][ T6268] R13: 00007fe85be36038 R14: 00007fe85be35fa0 R15: 00007ffdf16023f8 [ 139.293727][ T6268] [ 139.559611][ T6270] trusted_key: encrypted_key: insufficient parameters specified [ 139.720215][ T6272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.97'. [ 140.061107][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 140.297248][ T6286] FAULT_INJECTION: forcing a failure. [ 140.297248][ T6286] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.297276][ T6286] CPU: 1 UID: 0 PID: 6286 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.297290][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.297298][ T6286] Call Trace: [ 140.297303][ T6286] [ 140.297308][ T6286] dump_stack_lvl+0xe8/0x150 [ 140.297367][ T6286] should_fail_ex+0x46b/0x600 [ 140.297389][ T6286] _copy_from_iter+0x1d3/0x1670 [ 140.297407][ T6286] ? trace_kmem_cache_alloc+0x29/0xf0 [ 140.297422][ T6286] ? __alloc_skb+0x27d/0x7d0 [ 140.297436][ T6286] ? __pfx__copy_from_iter+0x10/0x10 [ 140.297448][ T6286] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 140.297464][ T6286] ? __alloc_skb+0x27d/0x7d0 [ 140.297491][ T6286] ? netlink_sendmsg+0x650/0xb40 [ 140.297510][ T6286] ? skb_put+0x11b/0x210 [ 140.297540][ T6286] netlink_sendmsg+0x6c0/0xb40 [ 140.297573][ T6286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.297602][ T6286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.297621][ T6286] ____sys_sendmsg+0xa4e/0xac0 [ 140.297641][ T6286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.297661][ T6286] ? import_iovec+0x73/0xa0 [ 140.297677][ T6286] ___sys_sendmsg+0x2a5/0x360 [ 140.297695][ T6286] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.297730][ T6286] ? __fget_files+0x2a/0x420 [ 140.297744][ T6286] ? __fget_files+0x3a6/0x420 [ 140.297763][ T6286] __x64_sys_sendmsg+0x1c3/0x2a0 [ 140.297780][ T6286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.297800][ T6286] ? __pfx_ksys_write+0x10/0x10 [ 140.297823][ T6286] do_syscall_64+0x14d/0xf80 [ 140.297839][ T6286] ? trace_irq_disable+0x3b/0x150 [ 140.297852][ T6286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.297863][ T6286] ? clear_bhb_loop+0x40/0x90 [ 140.297878][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.297889][ T6286] RIP: 0033:0x7fe85bbbc799 [ 140.297902][ T6286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.297912][ T6286] RSP: 002b:00007fe859e0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.297926][ T6286] RAX: ffffffffffffffda RBX: 00007fe85be35fa0 RCX: 00007fe85bbbc799 [ 140.297935][ T6286] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 140.297943][ T6286] RBP: 00007fe859e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 140.297950][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.297957][ T6286] R13: 00007fe85be36038 R14: 00007fe85be35fa0 R15: 00007ffdf16023f8 [ 140.297975][ T6286] [ 140.528932][ T5796] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.680045][ T5796] usb 1-1: Using ep0 maxpacket: 8 [ 140.740852][ T5796] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.740873][ T5796] usb 1-1: config 179 has no interface number 0 [ 140.740901][ T5796] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 140.740916][ T5796] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 140.740932][ T5796] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.740946][ T5796] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 140.740961][ T5796] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.740988][ T5796] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.741000][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.859970][ T6285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.998899][ T6282] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 141.157593][ T6282] bond1 (unregistering): Released all slaves [ 143.442376][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 144.098195][ T5867] usb 1-1: USB disconnect, device number 2 [ 144.098208][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 144.098553][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 144.837504][ T6313] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.881873][ T6315] trusted_key: encrypted_key: insufficient parameters specified [ 144.924399][ T6320] FAULT_INJECTION: forcing a failure. [ 144.924399][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.924436][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 144.924459][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.924471][ T6320] Call Trace: [ 144.924479][ T6320] [ 144.924488][ T6320] dump_stack_lvl+0xe8/0x150 [ 144.924526][ T6320] should_fail_ex+0x46b/0x600 [ 144.924567][ T6320] _copy_from_user+0x2d/0xb0 [ 144.924593][ T6320] kstrtouint_from_user+0xd6/0x180 [ 144.924618][ T6320] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 144.924648][ T6320] ? __lock_acquire+0x6b5/0x2cf0 [ 144.924679][ T6320] proc_fail_nth_write+0x8e/0x210 [ 144.924703][ T6320] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.924733][ T6320] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.924759][ T6320] vfs_write+0x2a3/0xba0 [ 144.924799][ T6320] ? __pfx_vfs_write+0x10/0x10 [ 144.924829][ T6320] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 144.924859][ T6320] ? lockdep_hardirqs_on+0x7a/0x110 [ 144.924887][ T6320] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 144.924914][ T6320] ? mutex_lock_nested+0x152/0x1d0 [ 144.924935][ T6320] ? fdget_pos+0x252/0x320 [ 144.924971][ T6320] ksys_write+0x156/0x270 [ 144.925004][ T6320] ? __pfx_ksys_write+0x10/0x10 [ 144.925046][ T6320] do_syscall_64+0x14d/0xf80 [ 144.925073][ T6320] ? trace_irq_disable+0x3b/0x150 [ 144.925096][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.925117][ T6320] ? clear_bhb_loop+0x40/0x90 [ 144.925143][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.925165][ T6320] RIP: 0033:0x7f485c09cfce [ 144.925185][ T6320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.925201][ T6320] RSP: 002b:00007f485a314fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.925225][ T6320] RAX: ffffffffffffffda RBX: 00007f485a3156c0 RCX: 00007f485c09cfce [ 144.925240][ T6320] RDX: 0000000000000001 RSI: 00007f485a3150a0 RDI: 0000000000000003 [ 144.925253][ T6320] RBP: 00007f485a315090 R08: 0000000000000000 R09: 0000000000000000 [ 144.925265][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.925278][ T6320] R13: 00007f485c356128 R14: 00007f485c356090 R15: 00007ffd6612f3c8 [ 144.925313][ T6320] [ 145.003142][ T6317] gretap1: entered promiscuous mode [ 145.293360][ T5867] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.783102][ T5867] usb 3-1: device descriptor read/64, error -71 [ 146.038948][ T5867] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.341775][ T6332] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 146.506628][ T6332] bond1 (unregistering): Released all slaves [ 148.846558][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 150.959414][ T6365] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 152.982231][ T6375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.781218][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 157.257944][ T6405] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 157.965766][ T6415] Zero length message leads to an empty skb [ 158.523277][ T6427] FAULT_INJECTION: forcing a failure. [ 158.523277][ T6427] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 158.523315][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.523338][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.523349][ T6427] Call Trace: [ 158.523358][ T6427] [ 158.523367][ T6427] dump_stack_lvl+0xe8/0x150 [ 158.523402][ T6427] should_fail_ex+0x46b/0x600 [ 158.523442][ T6427] prepare_alloc_pages+0x22a/0x6b0 [ 158.523472][ T6427] __alloc_frozen_pages_noprof+0x12f/0x380 [ 158.523499][ T6427] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 158.523525][ T6427] ? __pfx_policy_nodemask+0x10/0x10 [ 158.523557][ T6427] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 158.523583][ T6427] alloc_pages_mpol+0xd1/0x380 [ 158.523617][ T6427] ___kmalloc_large_node+0x4e/0x150 [ 158.523652][ T6427] __kmalloc_large_node_noprof+0x18/0x90 [ 158.523685][ T6427] __kmalloc_noprof+0x4a3/0x7b0 [ 158.523712][ T6427] ? vhost_dev_set_owner+0x2a3/0xaf0 [ 158.523741][ T6427] vhost_dev_set_owner+0x2a3/0xaf0 [ 158.523781][ T6427] vhost_net_ioctl+0x8f9/0x17d0 [ 158.523806][ T6427] ? __asan_memset+0x22/0x50 [ 158.523832][ T6427] ? smack_file_ioctl+0x263/0x360 [ 158.523861][ T6427] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 158.523897][ T6427] ? ksys_write+0x202/0x270 [ 158.523935][ T6427] ? bpf_lsm_file_ioctl+0x9/0x20 [ 158.523967][ T6427] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 158.523993][ T6427] __se_sys_ioctl+0xff/0x170 [ 158.524028][ T6427] do_syscall_64+0x14d/0xf80 [ 158.524054][ T6427] ? trace_irq_disable+0x3b/0x150 [ 158.524078][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.524100][ T6427] ? clear_bhb_loop+0x40/0x90 [ 158.524127][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.524145][ T6427] RIP: 0033:0x7f485c0dc799 [ 158.524165][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.524182][ T6427] RSP: 002b:00007f485a336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.524204][ T6427] RAX: ffffffffffffffda RBX: 00007f485c355fa0 RCX: 00007f485c0dc799 [ 158.524219][ T6427] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000003 [ 158.524232][ T6427] RBP: 00007f485a336090 R08: 0000000000000000 R09: 0000000000000000 [ 158.524245][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.524257][ T6427] R13: 00007f485c356038 R14: 00007f485c355fa0 R15: 00007ffd6612f3c8 [ 158.524292][ T6427] [ 159.216191][ T37] audit: type=1326 audit(1772490954.151:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.258816][ T37] audit: type=1326 audit(1772490954.151:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.260511][ T37] audit: type=1326 audit(1772490954.201:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.260568][ T37] audit: type=1326 audit(1772490954.201:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.260623][ T37] audit: type=1326 audit(1772490954.201:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.262389][ T37] audit: type=1326 audit(1772490954.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.262439][ T37] audit: type=1326 audit(1772490954.201:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.271866][ T37] audit: type=1326 audit(1772490954.201:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.271926][ T37] audit: type=1326 audit(1772490954.201:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 159.404296][ T37] audit: type=1326 audit(1772490954.301:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6434 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c0dc799 code=0x7ffc0000 [ 160.156796][ T6448] trusted_key: syz.2.142 sent an empty control message without MSG_MORE. [ 162.233193][ T6465] overlayfs: failed to resolve './bus': -2 [ 162.528880][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.678798][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 162.758992][ T5783] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.332668][ T10] usb 5-1: config 16 has an invalid interface number: 99 but max is 0 [ 164.332701][ T10] usb 5-1: config 16 has an invalid interface number: 90 but max is 0 [ 164.332720][ T10] usb 5-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 164.332738][ T10] usb 5-1: config 16 has 2 interfaces, different from the descriptor's value: 1 [ 164.332759][ T10] usb 5-1: config 16 has no interface number 0 [ 164.332775][ T10] usb 5-1: config 16 has no interface number 1 [ 164.332838][ T10] usb 5-1: config 16 interface 99 altsetting 106 has an invalid descriptor for endpoint zero, skipping [ 164.332861][ T10] usb 5-1: config 16 interface 99 altsetting 106 has an invalid descriptor for endpoint zero, skipping [ 164.332882][ T10] usb 5-1: config 16 interface 99 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 164.332910][ T10] usb 5-1: too many endpoints for config 16 interface 90 altsetting 72: 189, using maximum allowed: 30 [ 164.332961][ T10] usb 5-1: config 16 interface 90 altsetting 72 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 164.332990][ T10] usb 5-1: config 16 interface 90 altsetting 72 endpoint 0x3 has invalid maxpacket 1463, setting to 1024 [ 164.333017][ T10] usb 5-1: config 16 interface 90 altsetting 72 bulk endpoint 0x3 has invalid maxpacket 1024 [ 164.333041][ T10] usb 5-1: config 16 interface 90 altsetting 72 has an invalid descriptor for endpoint zero, skipping [ 164.333064][ T10] usb 5-1: config 16 interface 90 altsetting 72 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 164.333088][ T10] usb 5-1: config 16 interface 90 altsetting 72 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 164.333110][ T10] usb 5-1: config 16 interface 90 altsetting 72 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 164.333138][ T10] usb 5-1: config 16 interface 90 altsetting 72 bulk endpoint 0xC has invalid maxpacket 16 [ 164.333162][ T10] usb 5-1: config 16 interface 90 altsetting 72 has a duplicate endpoint with address 0x5, skipping [ 164.333185][ T10] usb 5-1: config 16 interface 90 altsetting 72 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 164.333223][ T10] usb 5-1: config 16 interface 90 altsetting 72 has 10 endpoint descriptors, different from the interface descriptor's value: 189 [ 164.333250][ T10] usb 5-1: config 16 interface 99 has no altsetting 0 [ 164.333269][ T10] usb 5-1: config 16 interface 90 has no altsetting 0 [ 164.459749][ T10] usb 5-1: New USB device found, idVendor=19d2, idProduct=0284, bcdDevice=3d.c9 [ 164.459770][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.459782][ T10] usb 5-1: Product: ࿠쏁붢먠ᳯ螪ୠዞ彪ŋ塨ⵞꍻ豐悂ꑣ櫀罀癿꩛蘻リ噾醭稰曉ⴖ훕ቐ冮㓂㕭솵鲜鱩Ꚙ갨翞궻遁雭䳇╯ᇵ叓妰糽׻㮚䜦ᄂ襻蘼ℱⶡ䖨ᦕ屁洲鋜䠭徹笽᜻붋娽鶛 [ 164.459794][ T10] usb 5-1: Manufacturer: Ж [ 164.459803][ T10] usb 5-1: SerialNumber: 뷷帢蓜ꈼ耻懪눹ᅿ糧冷ꪇヸ쪘怺㷱繸딙髷薺➔▭늭怏멘ʗ휇 [ 164.686179][ T5783] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 164.686223][ T5783] usb 2-1: config 1 has no interface number 0 [ 164.686272][ T5783] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 164.686298][ T5783] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 164.686324][ T5783] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 164.686348][ T5783] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.768428][ T5783] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 164.768462][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.768482][ T5783] usb 2-1: Product: syz [ 164.768495][ T5783] usb 2-1: Manufacturer: syz [ 164.768509][ T5783] usb 2-1: SerialNumber: syz [ 164.840555][ T6474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.840682][ T6474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.100490][ T10] option 5-1:16.99: GSM modem (1-port) converter detected [ 165.180928][ T6474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.267615][ T6474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.267748][ T6474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.320267][ T10] usb 5-1: USB disconnect, device number 3 [ 165.354643][ T10] option 5-1:16.99: device disconnected [ 165.589332][ T5783] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 165.806767][ T6480] loop6: detected capacity change from 0 to 7 [ 166.091101][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.091287][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.348249][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.348277][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.446291][ T5783] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 166.446390][ T5783] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 166.474374][ T5783] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 166.474479][ T5783] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 166.764041][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.764084][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.842157][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.842198][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.950677][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.950719][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 168.569276][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.569317][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.043810][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.043849][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.281170][ T6480] ldm_validate_partition_table(): Disk read failed. [ 169.292966][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.293001][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.293748][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.293779][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.294870][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.294909][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.295249][ T6480] Dev loop6: unable to read RDB block 0 [ 169.311866][ T6480] loop6: unable to read partition table [ 169.312870][ T6480] loop6: partition table beyond EOD, truncated [ 169.312914][ T6480] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 169.558817][ T10] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 169.559458][ T10] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 169.593779][ T10] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 169.593808][ T10] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 169.779468][ T5783] usb 2-1: USB disconnect, device number 6 [ 169.783935][ T5783] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 169.827514][ T6484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.119709][ T5783] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 171.303412][ T6504] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 171.367272][ T6504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.894356][ T6504] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 173.745317][ T6524] hsr0 speed is unknown, defaulting to 1000 [ 174.454764][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'. [ 174.454805][ T6531] netlink: 'syz.4.169': attribute type 6 has an invalid length. [ 174.454818][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 176.502036][ T6546] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 176.548851][ T5892] IPVS: starting estimator thread 0... [ 176.638881][ T6553] IPVS: using max 7 ests per chain, 16800 per kthread [ 176.679700][ T6546] bond1 (unregistering): Released all slaves [ 179.180291][ T6563] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 179.215740][ T6563] bond1 (unregistering): Released all slaves [ 179.819463][ T5796] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.778484][ T5796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.813238][ T5796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 180.813308][ T5796] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 180.813349][ T5796] usb 2-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.813376][ T5796] usb 2-1: config 1 interface 0 has no altsetting 0 [ 180.813393][ T5796] usb 2-1: config 1 interface 0 has no altsetting 1 [ 180.880762][ T5796] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 180.880812][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.880832][ T5796] usb 2-1: Product: syz [ 180.880847][ T5796] usb 2-1: Manufacturer: syz [ 180.880861][ T5796] usb 2-1: SerialNumber: syz [ 181.539061][ T6103] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 181.708845][ T6103] usb 3-1: Using ep0 maxpacket: 16 [ 181.717409][ T6103] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.742062][ T6103] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.785732][ T6103] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 181.785754][ T6103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.785765][ T6103] usb 3-1: Product: syz [ 181.785773][ T6103] usb 3-1: Manufacturer: syz [ 181.785782][ T6103] usb 3-1: SerialNumber: syz [ 182.603836][ T5796] smsusb:smsusb_probe: board id=8, interface number 0 [ 182.603858][ T5796] usb 2-1: selecting invalid altsetting 0 [ 182.603867][ T5796] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 182.603885][ T5796] smsusb 2-1:1.0: probe with driver smsusb failed with error -22 [ 182.660716][ T5796] usb 2-1: USB disconnect, device number 7 [ 185.536387][ T5867] hsr0 speed is unknown, defaulting to 1000 [ 185.849720][ T6614] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 186.145349][ T6614] bond1 (unregistering): Released all slaves [ 186.602958][ T6103] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 188.732407][ T6103] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 188.739016][ T6103] usb 3-1: can't set first interface for hiFace device. [ 188.739057][ T6103] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 188.750948][ T6103] usb 3-1: can't set first interface for hiFace device. [ 188.750988][ T6103] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 188.767508][ T6103] usb 3-1: can't set first interface for hiFace device. [ 188.767546][ T6103] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 188.833178][ T6103] usb 3-1: USB disconnect, device number 5 [ 189.156158][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.336293][ T6103] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.498964][ T6103] usb 3-1: Using ep0 maxpacket: 32 [ 191.528564][ T6103] usb 3-1: config 16 has an invalid interface number: 99 but max is 0 [ 191.528584][ T6103] usb 3-1: config 16 has an invalid interface number: 90 but max is 0 [ 191.528596][ T6103] usb 3-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 191.528607][ T6103] usb 3-1: config 16 has 2 interfaces, different from the descriptor's value: 1 [ 191.528619][ T6103] usb 3-1: config 16 has no interface number 0 [ 191.528628][ T6103] usb 3-1: config 16 has no interface number 1 [ 191.529763][ T6103] usb 3-1: config 16 interface 99 altsetting 106 has an invalid descriptor for endpoint zero, skipping [ 191.529786][ T6103] usb 3-1: config 16 interface 99 altsetting 106 has an invalid descriptor for endpoint zero, skipping [ 191.529805][ T6103] usb 3-1: config 16 interface 99 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 191.529830][ T6103] usb 3-1: too many endpoints for config 16 interface 90 altsetting 72: 189, using maximum allowed: 30 [ 191.529866][ T6103] usb 3-1: config 16 interface 90 altsetting 72 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 191.529891][ T6103] usb 3-1: config 16 interface 90 altsetting 72 endpoint 0x3 has invalid maxpacket 1463, setting to 1024 [ 191.529914][ T6103] usb 3-1: config 16 interface 90 altsetting 72 bulk endpoint 0x3 has invalid maxpacket 1024 [ 191.529936][ T6103] usb 3-1: config 16 interface 90 altsetting 72 has an invalid descriptor for endpoint zero, skipping [ 191.529956][ T6103] usb 3-1: config 16 interface 90 altsetting 72 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 191.529979][ T6103] usb 3-1: config 16 interface 90 altsetting 72 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 191.530012][ T6103] usb 3-1: config 16 interface 90 altsetting 72 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 191.530035][ T6103] usb 3-1: config 16 interface 90 altsetting 72 bulk endpoint 0xC has invalid maxpacket 16 [ 191.530056][ T6103] usb 3-1: config 16 interface 90 altsetting 72 has a duplicate endpoint with address 0x5, skipping [ 191.530075][ T6103] usb 3-1: config 16 interface 90 altsetting 72 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 191.530099][ T6103] usb 3-1: config 16 interface 90 altsetting 72 has 10 endpoint descriptors, different from the interface descriptor's value: 189 [ 191.530121][ T6103] usb 3-1: config 16 interface 99 has no altsetting 0 [ 191.530137][ T6103] usb 3-1: config 16 interface 90 has no altsetting 0 [ 191.570916][ T6103] usb 3-1: New USB device found, idVendor=19d2, idProduct=0284, bcdDevice=3d.c9 [ 191.570948][ T6103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.570966][ T6103] usb 3-1: Product: ࿠쏁붢먠ᳯ螪ୠዞ彪ŋ塨ⵞꍻ豐悂ꑣ櫀罀癿꩛蘻リ噾醭稰曉ⴖ훕ቐ冮㓂㕭솵鲜鱩Ꚙ갨翞궻遁雭䳇╯ᇵ叓妰糽׻㮚䜦ᄂ襻蘼ℱⶡ䖨ᦕ屁洲鋜䠭徹笽᜻붋娽鶛 [ 191.570988][ T6103] usb 3-1: Manufacturer: Ж [ 191.571001][ T6103] usb 3-1: SerialNumber: 뷷帢蓜ꈼ耻懪눹ᅿ糧冷ꪇヸ쪘怺㷱繸딙髷薺➔▭늭怏멘ʗ휇 [ 192.367131][ T6103] usb 3-1: can't set config #16, error -71 [ 192.386361][ T6103] usb 3-1: USB disconnect, device number 6 [ 192.445589][ T6662] faux_driver vkms: [drm] Unknown color mode 1055804; guessing buffer size. [ 194.582554][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.582603][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.594680][ T6687] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 196.009852][ T6687] bond1 (unregistering): Released all slaves [ 200.218913][ T6720] netlink: 'syz.3.216': attribute type 10 has an invalid length. [ 200.239181][ T6720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.245457][ T6720] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 200.348859][ T6489] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 200.528905][ T6489] usb 1-1: Using ep0 maxpacket: 16 [ 201.033699][ T6489] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 201.033720][ T6489] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.033731][ T6489] usb 1-1: config 0 has no interface number 0 [ 201.033757][ T6489] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 201.033772][ T6489] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 201.033788][ T6489] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 201.033803][ T6489] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 12147, setting to 1024 [ 201.033818][ T6489] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 201.033831][ T6489] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 201.033856][ T6489] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 201.033869][ T6489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.065313][ T6489] usb 1-1: config 0 descriptor?? [ 201.082901][ T6718] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.083860][ T6718] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.094717][ T6489] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.114812][ T6739] netlink: 224 bytes leftover after parsing attributes in process `syz.1.219'. [ 203.510208][ T6489] usb 1-1: USB disconnect, device number 3 [ 203.846151][ T1173] Bluetooth: hci5: Frame reassembly failed (-84) [ 204.678176][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 205.230444][ T5867] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.230463][ T5867] usb 4-1: config 0 has no interface number 0 [ 205.232326][ T5867] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 205.232342][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.232353][ T5867] usb 4-1: Product: syz [ 205.232361][ T5867] usb 4-1: Manufacturer: syz [ 205.232369][ T5867] usb 4-1: SerialNumber: syz [ 206.190014][ T5867] usb 4-1: config 0 descriptor?? [ 206.256851][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 206.839608][ T5867] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 207.509811][ T5867] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 207.509832][ T5867] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 208.807347][ T6793] netlink: 224 bytes leftover after parsing attributes in process `syz.2.234'. [ 210.693916][ T6805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.251717][ T6801] Bluetooth: hci0: command 0x0406 tx timeout [ 212.294456][ T6801] Bluetooth: hci1: command 0x0406 tx timeout [ 212.294499][ T6801] Bluetooth: hci3: command 0x0406 tx timeout [ 212.294525][ T6801] Bluetooth: hci4: command 0x0406 tx timeout [ 212.294856][ T6800] Bluetooth: hci2: command 0x0406 tx timeout [ 215.119144][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.242'. [ 219.204049][ T6857] netlink: 224 bytes leftover after parsing attributes in process `syz.0.248'. [ 222.401051][ T6883] FAULT_INJECTION: forcing a failure. [ 222.401051][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 222.401076][ T6883] CPU: 1 UID: 0 PID: 6883 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 222.401090][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.401097][ T6883] Call Trace: [ 222.401102][ T6883] [ 222.401108][ T6883] dump_stack_lvl+0xe8/0x150 [ 222.401131][ T6883] should_fail_ex+0x46b/0x600 [ 222.401153][ T6883] should_failslab+0xa8/0x100 [ 222.401172][ T6883] __kmalloc_cache_noprof+0x84/0x690 [ 222.401189][ T6883] ? __kernel_text_address+0xd/0x30 [ 222.401201][ T6883] ? alloc_pipe_info+0xe8/0x4d0 [ 222.401217][ T6883] ? unwind_get_return_address+0x4d/0x90 [ 222.401238][ T6883] alloc_pipe_info+0xe8/0x4d0 [ 222.401269][ T6883] splice_direct_to_actor+0xa19/0xc80 [ 222.401295][ T6883] ? __lock_acquire+0x6b5/0x2cf0 [ 222.401324][ T6883] ? __pfx_direct_splice_actor+0x10/0x10 [ 222.401345][ T6883] ? __lock_acquire+0x6b5/0x2cf0 [ 222.401367][ T6883] ? kstrtouint+0x6e/0xe0 [ 222.401391][ T6883] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 222.401411][ T6883] do_splice_direct+0x19b/0x2a0 [ 222.401426][ T6883] ? __pfx_do_splice_direct+0x10/0x10 [ 222.401450][ T6883] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 222.401473][ T6883] vfs_copy_file_range+0xb20/0x1390 [ 222.401498][ T6883] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 222.401517][ T6883] __se_sys_copy_file_range+0x2fb/0x480 [ 222.401539][ T6883] ? __pfx___se_sys_copy_file_range+0x10/0x10 [ 222.401561][ T6883] ? __pfx_ksys_write+0x10/0x10 [ 222.401595][ T6883] ? __x64_sys_copy_file_range+0x21/0xf0 [ 222.401621][ T6883] do_syscall_64+0x14d/0xf80 [ 222.401648][ T6883] ? trace_irq_disable+0x3b/0x150 [ 222.401669][ T6883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.401681][ T6883] ? clear_bhb_loop+0x40/0x90 [ 222.401696][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.401707][ T6883] RIP: 0033:0x7fe85bbbc799 [ 222.401720][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.401730][ T6883] RSP: 002b:00007fe859e0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 222.401751][ T6883] RAX: ffffffffffffffda RBX: 00007fe85be35fa0 RCX: 00007fe85bbbc799 [ 222.401760][ T6883] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 222.401767][ T6883] RBP: 00007fe859e0e090 R08: 0000000000000002 R09: 0000000000000000 [ 222.401774][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.401781][ T6883] R13: 00007fe85be36038 R14: 00007fe85be35fa0 R15: 00007ffdf16023f8 [ 222.401799][ T6883] [ 241.200715][ T7013] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 241.580595][ T7013] bond1 (unregistering): Released all slaves [ 247.260230][ T5890] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 247.428793][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 247.432440][ T5890] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 158, changing to 7 [ 247.432494][ T5890] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 247.450292][ T5890] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 247.450332][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.450350][ T5890] usb 1-1: Product: syz [ 247.450363][ T5890] usb 1-1: Manufacturer: syz [ 247.450375][ T5890] usb 1-1: SerialNumber: syz [ 247.518216][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 247.741052][ T5890] usb 1-1: selecting invalid altsetting 1 [ 247.748118][ T5890] usb 1-1: selecting invalid altsetting 1 [ 247.782988][ T5890] usb 1-1: selecting invalid altsetting 1 [ 247.839413][ T5948] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 248.664677][ T5948] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.664762][ T5948] usb 3-1: config 0 has no interface number 0 [ 248.788949][ T5948] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 248.788979][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.788998][ T5948] usb 3-1: Product: syz [ 248.789011][ T5948] usb 3-1: Manufacturer: syz [ 248.789024][ T5948] usb 3-1: SerialNumber: syz [ 248.810768][ T5948] usb 3-1: config 0 descriptor?? [ 249.610721][ T5797] Bluetooth: hci5: command 0x1003 tx timeout [ 249.896739][ T60] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 249.919893][ T5890] usb 1-1: USB disconnect, device number 4 [ 249.963214][ T5948] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 250.166062][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.383223][ T67] Bluetooth: hci6: Frame reassembly failed (-84) [ 250.779648][ T6489] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 250.823328][ T7103] FAULT_INJECTION: forcing a failure. [ 250.823328][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 250.823450][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz.0.315 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.823474][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.823487][ T7103] Call Trace: [ 250.823495][ T7103] [ 250.823505][ T7103] dump_stack_lvl+0xe8/0x150 [ 250.823543][ T7103] should_fail_ex+0x46b/0x600 [ 250.823592][ T7103] should_failslab+0xa8/0x100 [ 250.823627][ T7103] kmem_cache_alloc_noprof+0x87/0x680 [ 250.823657][ T7103] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.823684][ T7103] ? do_getname+0x2e/0x250 [ 250.823712][ T7103] do_getname+0x2e/0x250 [ 250.823732][ T7103] ? getname_flags+0x11/0x20 [ 250.823757][ T7103] do_sys_openat2+0xca/0x200 [ 250.823781][ T7103] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.823810][ T7103] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.823850][ T7103] __x64_sys_openat+0x138/0x170 [ 250.823880][ T7103] do_syscall_64+0x14d/0xf80 [ 250.823908][ T7103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.823930][ T7103] ? clear_bhb_loop+0x40/0x90 [ 250.823957][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.823978][ T7103] RIP: 0033:0x7f485c09cfce [ 250.823998][ T7103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.824015][ T7103] RSP: 002b:00007f485a2f3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.824038][ T7103] RAX: ffffffffffffffda RBX: 00007f485a2f46c0 RCX: 00007f485c09cfce [ 250.824053][ T7103] RDX: 0000000000000002 RSI: 00007f485a2f3f90 RDI: ffffffffffffff9c [ 250.824067][ T7103] RBP: 00007f485a2f4090 R08: 0000000000000000 R09: 0000000000000000 [ 250.824080][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.824093][ T7103] R13: 00007f485c356218 R14: 00007f485c356180 R15: 00007ffd6612f3c8 [ 250.824127][ T7103] [ 251.737255][ T6489] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.737285][ T6489] usb 2-1: config 0 has no interface number 0 [ 251.759416][ T6489] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 251.759449][ T6489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.759470][ T6489] usb 2-1: Product: syz [ 251.759484][ T6489] usb 2-1: Manufacturer: syz [ 251.759509][ T6489] usb 2-1: SerialNumber: syz [ 251.822801][ T6489] usb 2-1: config 0 descriptor?? [ 251.982414][ T5948] usb 3-1: USB disconnect, device number 7 [ 252.043068][ T6489] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 252.060138][ T6489] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 252.060550][ T6489] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 252.060608][ T6489] usb 2-1: media controller created [ 252.072214][ T6489] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.237356][ T7117] FAULT_INJECTION: forcing a failure. [ 252.237356][ T7117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.237393][ T7117] CPU: 1 UID: 0 PID: 7117 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.237415][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.237427][ T7117] Call Trace: [ 252.237436][ T7117] [ 252.237444][ T7117] dump_stack_lvl+0xe8/0x150 [ 252.237479][ T7117] should_fail_ex+0x46b/0x600 [ 252.237515][ T7117] _copy_to_user+0x31/0xb0 [ 252.237540][ T7117] simple_read_from_buffer+0xe1/0x170 [ 252.237568][ T7117] proc_fail_nth_read+0x1be/0x230 [ 252.237596][ T7117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.237623][ T7117] ? rw_verify_area+0x2ac/0x4e0 [ 252.237649][ T7117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.237673][ T7117] vfs_read+0x212/0xa80 [ 252.237705][ T7117] ? __pfx_vfs_read+0x10/0x10 [ 252.237734][ T7117] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.237761][ T7117] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.237788][ T7117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 252.237815][ T7117] ? mutex_lock_nested+0x152/0x1d0 [ 252.237836][ T7117] ? fdget_pos+0x252/0x320 [ 252.237869][ T7117] ksys_read+0x156/0x270 [ 252.237898][ T7117] ? __pfx_ksys_read+0x10/0x10 [ 252.237935][ T7117] do_syscall_64+0x14d/0xf80 [ 252.237960][ T7117] ? trace_irq_disable+0x3b/0x150 [ 252.237983][ T7117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.238004][ T7117] ? clear_bhb_loop+0x40/0x90 [ 252.238031][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.238052][ T7117] RIP: 0033:0x7fe85bb7cfce [ 252.238072][ T7117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.238087][ T7117] RSP: 002b:00007fe859e0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.238107][ T7117] RAX: ffffffffffffffda RBX: 00007fe859e0e6c0 RCX: 00007fe85bb7cfce [ 252.238121][ T7117] RDX: 000000000000000f RSI: 00007fe859e0e0a0 RDI: 0000000000000006 [ 252.238134][ T7117] RBP: 00007fe859e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 252.238146][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.238158][ T7117] R13: 00007fe85be36038 R14: 00007fe85be35fa0 R15: 00007ffdf16023f8 [ 252.238190][ T7117] [ 252.408959][ T60] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 252.410302][ T5797] Bluetooth: hci6: command 0x1003 tx timeout [ 252.507499][ T7121] FAULT_INJECTION: forcing a failure. [ 252.507499][ T7121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.507537][ T7121] CPU: 1 UID: 0 PID: 7121 Comm: syz.4.320 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.507558][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.507569][ T7121] Call Trace: [ 252.507576][ T7121] [ 252.507592][ T7121] dump_stack_lvl+0xe8/0x150 [ 252.507625][ T7121] should_fail_ex+0x46b/0x600 [ 252.507661][ T7121] _copy_from_user+0x2d/0xb0 [ 252.507688][ T7121] sctp_getsockopt_default_send_param+0xd6/0x4f0 [ 252.507714][ T7121] ? __pfx_sctp_getsockopt_default_send_param+0x10/0x10 [ 252.507737][ T7121] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 252.507763][ T7121] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.507793][ T7121] sctp_getsockopt+0x50f/0xb90 [ 252.507813][ T7121] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 252.507840][ T7121] do_sock_getsockopt+0x2d3/0x3f0 [ 252.507869][ T7121] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 252.507894][ T7121] ? __fget_files+0x3a6/0x420 [ 252.507917][ T7121] ? __fget_files+0x2a/0x420 [ 252.507948][ T7121] __x64_sys_getsockopt+0x1aa/0x250 [ 252.507982][ T7121] do_syscall_64+0x14d/0xf80 [ 252.508009][ T7121] ? trace_irq_disable+0x3b/0x150 [ 252.508032][ T7121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.508051][ T7121] ? clear_bhb_loop+0x40/0x90 [ 252.508074][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.508092][ T7121] RIP: 0033:0x7f6bd4a7c799 [ 252.508111][ T7121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.508125][ T7121] RSP: 002b:00007f6bd2cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 252.508146][ T7121] RAX: ffffffffffffffda RBX: 00007f6bd4cf5fa0 RCX: 00007f6bd4a7c799 [ 252.508161][ T7121] RDX: 000000000000000a RSI: 0000000000000084 RDI: 0000000000000003 [ 252.508174][ T7121] RBP: 00007f6bd2cce090 R08: 0000200000000480 R09: 0000000000000000 [ 252.508187][ T7121] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 252.508198][ T7121] R13: 00007f6bd4cf6038 R14: 00007f6bd4cf5fa0 R15: 00007ffd5b80be98 [ 252.508230][ T7121] [ 253.209472][ T6489] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 253.388830][ T6489] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 253.566243][ T6489] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.566303][ T6489] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 253.566330][ T6489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 253.566356][ T6489] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 253.566379][ T6489] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 253.629265][ T6489] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 253.629297][ T6489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 253.629318][ T6489] usb 5-1: Product: syz [ 253.629333][ T6489] usb 5-1: Manufacturer: syz [ 253.629348][ T6489] usb 5-1: SerialNumber: syz [ 253.671851][ T6489] usb 5-1: config 0 descriptor?? [ 253.904494][ T6489] radio-si470x 5-1:0.0: DeviceID=0x26c8 ChipID=0x4a9b [ 254.011432][ T7144] netlink: 'syz.0.327': attribute type 10 has an invalid length. [ 254.011455][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.327'. [ 254.011844][ T7144] team0: entered promiscuous mode [ 254.011862][ T7144] team_slave_0: entered promiscuous mode [ 254.012097][ T7144] team_slave_1: entered promiscuous mode [ 254.012304][ T7144] team0: entered allmulticast mode [ 254.012317][ T7144] team_slave_0: entered allmulticast mode [ 254.012329][ T7144] team_slave_1: entered allmulticast mode [ 254.013189][ T7144] bridge0: port 3(team0) entered blocking state [ 254.024620][ T7144] bridge0: port 3(team0) entered disabled state [ 254.035199][ T5948] usb 2-1: USB disconnect, device number 8 [ 254.044809][ T7144] bridge0: port 3(team0) entered blocking state [ 254.044959][ T7144] bridge0: port 3(team0) entered forwarding state [ 254.193427][ T7149] netlink: 'syz.4.323': attribute type 8 has an invalid length. [ 254.409092][ T6489] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 254.409125][ T6489] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 254.409508][ T6489] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 254.448932][ T5796] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 254.479003][ T6489] usb 5-1: USB disconnect, device number 4 [ 254.526676][ T7152] binder: 7151:7152 ioctl c0306201 0 returned -14 [ 254.610823][ T5796] usb 3-1: Using ep0 maxpacket: 8 [ 254.616982][ T5796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 254.638585][ T5796] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 254.638602][ T5796] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 254.638613][ T5796] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 254.638623][ T5796] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 254.696650][ T5796] usb 3-1: New USB device found, idVendor=19d1, idProduct=2d05, bcdDevice= 0.40 [ 254.696672][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.696683][ T5796] usb 3-1: Product: syz [ 254.696692][ T5796] usb 3-1: Manufacturer: syz [ 254.696700][ T5796] usb 3-1: SerialNumber: syz [ 255.708747][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 255.708768][ T37] audit: type=1107 audit(1772491050.241:26): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 255.899569][ T5796] usb 3-1: USB disconnect, device number 8 [ 256.070635][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.071985][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.305292][ T7183] FAULT_INJECTION: forcing a failure. [ 258.305292][ T7183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.305326][ T7183] CPU: 0 UID: 0 PID: 7183 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 258.305348][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.305359][ T7183] Call Trace: [ 258.305367][ T7183] [ 258.305375][ T7183] dump_stack_lvl+0xe8/0x150 [ 258.305411][ T7183] should_fail_ex+0x46b/0x600 [ 258.305450][ T7183] _copy_to_user+0x31/0xb0 [ 258.305490][ T7183] simple_read_from_buffer+0xe1/0x170 [ 258.305521][ T7183] proc_fail_nth_read+0x1be/0x230 [ 258.305548][ T7183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.305575][ T7183] ? rw_verify_area+0x2ac/0x4e0 [ 258.305602][ T7183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.305626][ T7183] vfs_read+0x212/0xa80 [ 258.305663][ T7183] ? __pfx_vfs_read+0x10/0x10 [ 258.305694][ T7183] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 258.305722][ T7183] ? lockdep_hardirqs_on+0x7a/0x110 [ 258.305749][ T7183] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.305777][ T7183] ? mutex_lock_nested+0x152/0x1d0 [ 258.305798][ T7183] ? fdget_pos+0x252/0x320 [ 258.305834][ T7183] ksys_read+0x156/0x270 [ 258.305867][ T7183] ? __pfx_ksys_read+0x10/0x10 [ 258.305909][ T7183] do_syscall_64+0x14d/0xf80 [ 258.305936][ T7183] ? trace_irq_disable+0x3b/0x150 [ 258.305959][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.305981][ T7183] ? clear_bhb_loop+0x40/0x90 [ 258.306008][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.306041][ T7183] RIP: 0033:0x7fbf6afbcfce [ 258.306062][ T7183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.306079][ T7183] RSP: 002b:00007fbf69255fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.306102][ T7183] RAX: ffffffffffffffda RBX: 00007fbf692566c0 RCX: 00007fbf6afbcfce [ 258.306116][ T7183] RDX: 000000000000000f RSI: 00007fbf692560a0 RDI: 0000000000000004 [ 258.306130][ T7183] RBP: 00007fbf69256090 R08: 0000000000000000 R09: 0000000000000000 [ 258.306142][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.306155][ T7183] R13: 00007fbf6b276038 R14: 00007fbf6b275fa0 R15: 00007ffd4c292a18 [ 258.306190][ T7183] [ 258.477970][ T7186] binder: 7185:7186 ioctl c0306201 0 returned -14 [ 259.627995][ T7193] FAULT_INJECTION: forcing a failure. [ 259.627995][ T7193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.628033][ T7193] CPU: 1 UID: 0 PID: 7193 Comm: syz.4.345 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.628056][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.628068][ T7193] Call Trace: [ 259.628077][ T7193] [ 259.628085][ T7193] dump_stack_lvl+0xe8/0x150 [ 259.628123][ T7193] should_fail_ex+0x46b/0x600 [ 259.628164][ T7193] _copy_to_iter+0x404/0x17d0 [ 259.628186][ T7193] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 259.628244][ T7193] ? __pfx__copy_to_iter+0x10/0x10 [ 259.628270][ T7193] ? fput+0xa0/0xd0 [ 259.628295][ T7193] ? seq_show+0x5a3/0x700 [ 259.628326][ T7193] seq_read_iter+0xbf6/0xe20 [ 259.628370][ T7193] seq_read+0x36a/0x490 [ 259.628412][ T7193] ? __pfx_seq_read+0x10/0x10 [ 259.628464][ T7193] ? rw_verify_area+0x2ac/0x4e0 [ 259.628493][ T7193] ? __pfx_seq_read+0x10/0x10 [ 259.628526][ T7193] vfs_read+0x212/0xa80 [ 259.628565][ T7193] ? __pfx_vfs_read+0x10/0x10 [ 259.628598][ T7193] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.628631][ T7193] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.628657][ T7193] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 259.628683][ T7193] ? mutex_lock_nested+0x152/0x1d0 [ 259.628704][ T7193] ? fdget_pos+0x252/0x320 [ 259.628741][ T7193] ksys_read+0x156/0x270 [ 259.628773][ T7193] ? __pfx_ksys_read+0x10/0x10 [ 259.628817][ T7193] do_syscall_64+0x14d/0xf80 [ 259.628844][ T7193] ? trace_irq_disable+0x3b/0x150 [ 259.628868][ T7193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.628889][ T7193] ? clear_bhb_loop+0x40/0x90 [ 259.628916][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.628937][ T7193] RIP: 0033:0x7f6bd4a7c799 [ 259.628959][ T7193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.628976][ T7193] RSP: 002b:00007f6bd2cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.629000][ T7193] RAX: ffffffffffffffda RBX: 00007f6bd4cf5fa0 RCX: 00007f6bd4a7c799 [ 259.629015][ T7193] RDX: 0000000000000545 RSI: 0000200000004100 RDI: 0000000000000005 [ 259.629029][ T7193] RBP: 00007f6bd2cce090 R08: 0000000000000000 R09: 0000000000000000 [ 259.629042][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.629054][ T7193] R13: 00007f6bd4cf6038 R14: 00007f6bd4cf5fa0 R15: 00007ffd5b80be98 [ 259.629090][ T7193] [ 260.017800][ T7202] FAULT_INJECTION: forcing a failure. [ 260.017800][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 260.017837][ T7202] CPU: 1 UID: 0 PID: 7202 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 260.017859][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.017869][ T7202] Call Trace: [ 260.017877][ T7202] [ 260.017885][ T7202] dump_stack_lvl+0xe8/0x150 [ 260.017920][ T7202] should_fail_ex+0x46b/0x600 [ 260.017959][ T7202] should_failslab+0xa8/0x100 [ 260.017993][ T7202] kmem_cache_alloc_noprof+0x87/0x680 [ 260.018023][ T7202] ? io_submit_one+0x130/0x14c0 [ 260.018058][ T7202] io_submit_one+0x130/0x14c0 [ 260.018091][ T7202] ? irqentry_exit+0x59e/0x620 [ 260.018118][ T7202] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.018145][ T7202] ? irqentry_exit+0x59e/0x620 [ 260.018172][ T7202] ? trace_irq_disable+0x3b/0x150 [ 260.018200][ T7202] ? __pfx_io_submit_one+0x10/0x10 [ 260.018246][ T7202] ? __might_fault+0xaf/0x130 [ 260.018282][ T7202] __se_sys_io_submit+0x195/0x340 [ 260.018313][ T7202] ? __pfx___se_sys_io_submit+0x10/0x10 [ 260.018338][ T7202] ? ksys_write+0x248/0x270 [ 260.018386][ T7202] do_syscall_64+0x14d/0xf80 [ 260.018413][ T7202] ? trace_irq_disable+0x3b/0x150 [ 260.018435][ T7202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.018465][ T7202] ? clear_bhb_loop+0x40/0x90 [ 260.018491][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.018512][ T7202] RIP: 0033:0x7f485c0dc799 [ 260.018533][ T7202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.018550][ T7202] RSP: 002b:00007f485a336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 260.018574][ T7202] RAX: ffffffffffffffda RBX: 00007f485c355fa0 RCX: 00007f485c0dc799 [ 260.018589][ T7202] RDX: 0000200000001580 RSI: 0000000000000001 RDI: 00007f485ce90000 [ 260.018603][ T7202] RBP: 00007f485a336090 R08: 0000000000000000 R09: 0000000000000000 [ 260.018615][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.018633][ T7202] R13: 00007f485c356038 R14: 00007f485c355fa0 R15: 00007ffd6612f3c8 [ 260.018663][ T7202] [ 262.840389][ T7236] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 262.840404][ T7236] netlink: 'syz.3.360': attribute type 2 has an invalid length. [ 262.840671][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 263.028175][ T7236] ======================================================= [ 263.028175][ T7236] WARNING: The mand mount option has been deprecated and [ 263.028175][ T7236] and is ignored by this kernel. Remove the mand [ 263.028175][ T7236] option from the mount to silence this warning. [ 263.028175][ T7236] ======================================================= [ 265.079917][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.361'. [ 266.990609][ T7286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'. [ 267.214620][ T7289] FAULT_INJECTION: forcing a failure. [ 267.214620][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.214658][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 267.214682][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.214694][ T7289] Call Trace: [ 267.214703][ T7289] [ 267.214711][ T7289] dump_stack_lvl+0xe8/0x150 [ 267.214748][ T7289] should_fail_ex+0x46b/0x600 [ 267.214788][ T7289] _copy_from_user+0x2d/0xb0 [ 267.214815][ T7289] sctp_setsockopt+0x1c4/0x12c0 [ 267.214846][ T7289] ? sock_common_setsockopt+0x36/0xc0 [ 267.214869][ T7289] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 267.214895][ T7289] do_sock_setsockopt+0x17c/0x1b0 [ 267.214927][ T7289] __x64_sys_setsockopt+0x143/0x1b0 [ 267.214961][ T7289] do_syscall_64+0x14d/0xf80 [ 267.214988][ T7289] ? trace_irq_disable+0x3b/0x150 [ 267.215012][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.215033][ T7289] ? clear_bhb_loop+0x40/0x90 [ 267.215060][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.215080][ T7289] RIP: 0033:0x7fcf1c7bc799 [ 267.215100][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.215117][ T7289] RSP: 002b:00007fcf1a9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.215140][ T7289] RAX: ffffffffffffffda RBX: 00007fcf1ca36090 RCX: 00007fcf1c7bc799 [ 267.215156][ T7289] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 267.215168][ T7289] RBP: 00007fcf1a9f5090 R08: 000000000000009c R09: 0000000000000000 [ 267.215181][ T7289] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 267.215195][ T7289] R13: 00007fcf1ca36128 R14: 00007fcf1ca36090 R15: 00007ffec2fd9978 [ 267.215228][ T7289] [ 269.261175][ T37] audit: type=1804 audit(1772491064.101:27): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.376" name="/newroot/66/file1" dev="tmpfs" ino=370 res=1 errno=0 [ 269.776976][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 269.793012][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 269.819801][ T7314] veth1_macvtap: left promiscuous mode [ 271.646985][ T5867] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 271.647047][ T5867] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 271.718832][ T5867] usb 4-1: USB disconnect, device number 7 [ 272.458904][ T5890] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 272.621718][ T7348] sock: sock_set_timeout: `syz.2.387' (pid 7348) tries to set negative timeout [ 272.642850][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 272.649770][ T5890] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 272.649800][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.649818][ T5890] usb 2-1: Product: syz [ 272.649831][ T5890] usb 2-1: Manufacturer: syz [ 272.649843][ T5890] usb 2-1: SerialNumber: syz [ 272.768813][ T6489] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 272.935025][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.935086][ T5890] usb 2-1: MIDIStreaming interface descriptor not found [ 272.996985][ T6489] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 272.997021][ T6489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.997042][ T6489] usb 4-1: Product: syz [ 272.997057][ T6489] usb 4-1: Manufacturer: syz [ 272.997072][ T6489] usb 4-1: SerialNumber: syz [ 273.047688][ T7341] syz.4.385 (7341) used greatest stack depth: 18528 bytes left [ 273.151987][ T6489] usb 4-1: config 0 descriptor?? [ 273.167678][ T6489] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 273.474568][ T5890] usb 2-1: USB disconnect, device number 9 [ 273.669623][ T6489] gspca_stk1135: reg_w 0x2 err -110 [ 273.672634][ T6489] gspca_stk1135: serial bus timeout: status=0x00 [ 273.672652][ T6489] gspca_stk1135: Sensor write failed [ 273.672683][ T6489] gspca_stk1135: serial bus timeout: status=0x00 [ 273.672694][ T6489] gspca_stk1135: Sensor write failed [ 273.672726][ T6489] gspca_stk1135: serial bus timeout: status=0x00 [ 273.672736][ T6489] gspca_stk1135: Sensor read failed [ 273.672767][ T6489] gspca_stk1135: serial bus timeout: status=0x00 [ 273.672777][ T6489] gspca_stk1135: Sensor read failed [ 273.672784][ T6489] gspca_stk1135: Detected sensor type unknown (0x0) [ 273.672820][ T6489] gspca_stk1135: serial bus timeout: status=0x00 [ 273.672830][ T6489] gspca_stk1135: Sensor read failed [ 273.672861][ T6489] gspca_stk1135: serial bus timeout: status=0x00 [ 273.672870][ T6489] gspca_stk1135: Sensor read failed [ 273.672900][ T6489] gspca_stk1135: serial bus timeout: status=0x00 [ 273.672910][ T6489] gspca_stk1135: Sensor write failed [ 273.672939][ T6489] gspca_stk1135: serial bus timeout: status=0x00 [ 273.672949][ T6489] gspca_stk1135: Sensor write failed [ 273.673052][ T6489] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 273.893767][ T7362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.893785][ T7362] IPv6: NLM_F_CREATE should be set when creating new route [ 273.897149][ T7362] IPv6: NLM_F_CREATE should be set when creating new route [ 273.897192][ T7362] IPv6: NLM_F_CREATE should be set when creating new route [ 273.954905][ T5796] usb 4-1: USB disconnect, device number 8 [ 274.115268][ T6754] udevd[6754]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.118815][ T5892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 275.799359][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 276.109216][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.109252][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.109275][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 276.109321][ T5892] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 276.109345][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.150122][ T5892] usb 4-1: config 0 descriptor?? [ 277.926672][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 277.926816][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 278.069942][ T5892] usb 4-1: USB disconnect, device number 9 [ 281.042722][ T7418] FAULT_INJECTION: forcing a failure. [ 281.042722][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 281.042758][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.4.408 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 281.042781][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.042793][ T7418] Call Trace: [ 281.042801][ T7418] [ 281.042810][ T7418] dump_stack_lvl+0xe8/0x150 [ 281.042842][ T7418] should_fail_ex+0x46b/0x600 [ 281.042876][ T7418] should_failslab+0xa8/0x100 [ 281.042901][ T7418] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 281.042929][ T7418] ? __alloc_skb+0x1d0/0x7d0 [ 281.042950][ T7418] ? lockdep_hardirqs_on+0x7a/0x110 [ 281.042982][ T7418] __alloc_skb+0x1d0/0x7d0 [ 281.043008][ T7418] alloc_skb_with_frags+0xca/0x890 [ 281.043032][ T7418] ? try_to_take_rt_mutex+0x840/0xb00 [ 281.043069][ T7418] sock_alloc_send_pskb+0x884/0x9a0 [ 281.043115][ T7418] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 281.043141][ T7418] ? __lock_acquire+0x6b5/0x2cf0 [ 281.043166][ T7418] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 281.043204][ T7418] unix_dgram_sendmsg+0x460/0x18e0 [ 281.043231][ T7418] ? __lock_acquire+0x6b5/0x2cf0 [ 281.043253][ T7418] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 281.043296][ T7418] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 281.043320][ T7418] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 281.043371][ T7418] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 281.043401][ T7418] ____sys_sendmsg+0xa4e/0xac0 [ 281.043427][ T7418] ? __lock_acquire+0x6b5/0x2cf0 [ 281.043455][ T7418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.043491][ T7418] ? import_iovec+0x73/0xa0 [ 281.043521][ T7418] ___sys_sendmsg+0x2a5/0x360 [ 281.043555][ T7418] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.043586][ T7418] ? kstrtouint+0x6e/0xe0 [ 281.043644][ T7418] ? __fget_files+0x2a/0x420 [ 281.043667][ T7418] ? __fget_files+0x3a6/0x420 [ 281.043702][ T7418] __sys_sendmmsg+0x282/0x4e0 [ 281.043735][ T7418] ? __pfx___sys_sendmmsg+0x10/0x10 [ 281.043772][ T7418] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 281.043807][ T7418] ? ksys_write+0x248/0x270 [ 281.043839][ T7418] ? __pfx_ksys_write+0x10/0x10 [ 281.043874][ T7418] __x64_sys_sendmmsg+0xa0/0xc0 [ 281.043905][ T7418] do_syscall_64+0x14d/0xf80 [ 281.043928][ T7418] ? trace_irq_disable+0x3b/0x150 [ 281.043950][ T7418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.043971][ T7418] ? clear_bhb_loop+0x40/0x90 [ 281.043997][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.044018][ T7418] RIP: 0033:0x7f6bd4a7c799 [ 281.044038][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.044055][ T7418] RSP: 002b:00007f6bd2cce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 281.044079][ T7418] RAX: ffffffffffffffda RBX: 00007f6bd4cf5fa0 RCX: 00007f6bd4a7c799 [ 281.044093][ T7418] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 281.044107][ T7418] RBP: 00007f6bd2cce090 R08: 0000000000000000 R09: 0000000000000000 [ 281.044120][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.044131][ T7418] R13: 00007f6bd4cf6038 R14: 00007f6bd4cf5fa0 R15: 00007ffd5b80be98 [ 281.044161][ T7418] [ 283.938937][ T5892] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 284.107160][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 284.168494][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.168526][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.168545][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.168584][ T5892] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 284.168605][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.208947][ T5892] usb 4-1: config 0 descriptor?? [ 286.778905][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 286.778989][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 286.810218][ T5892] usb 4-1: USB disconnect, device number 10 [ 288.074091][ T37] audit: type=1107 audit(1772491083.011:28): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 289.921218][ T6103] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 290.130068][ T6103] usb 3-1: Using ep0 maxpacket: 16 [ 290.882269][ T6103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.882306][ T6103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.882329][ T6103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 290.882374][ T6103] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 290.882397][ T6103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.982300][ T6103] usb 3-1: config 0 descriptor?? [ 292.335111][ T6103] usbhid 3-1:0.0: can't add hid device: -71 [ 292.384021][ T6103] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 292.677436][ T6103] usb 3-1: USB disconnect, device number 9 [ 293.341551][ T1230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 293.566653][ T1230] usb 1-1: Using ep0 maxpacket: 16 [ 293.664567][ T1230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.664601][ T1230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.664614][ T1230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.664640][ T1230] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 293.664653][ T1230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.671043][ T1230] usb 1-1: config 0 descriptor?? [ 294.249370][ T37] audit: type=1107 audit(1772491089.181:29): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 294.598475][ T1230] usbhid 1-1:0.0: can't add hid device: -71 [ 294.598562][ T1230] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 294.609967][ T1230] usb 1-1: USB disconnect, device number 5 [ 295.823524][ T6103] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 296.244014][ T7531] netlink: 192 bytes leftover after parsing attributes in process `syz.4.440'. [ 296.361568][ T6103] usb 2-1: Using ep0 maxpacket: 32 [ 296.382042][ T6103] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 296.382074][ T6103] usb 2-1: config 0 has no interface number 0 [ 296.385842][ T6103] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 296.385869][ T6103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.385888][ T6103] usb 2-1: Product: syz [ 296.385901][ T6103] usb 2-1: Manufacturer: syz [ 296.385914][ T6103] usb 2-1: SerialNumber: syz [ 296.399628][ T6103] usb 2-1: config 0 descriptor?? [ 296.893367][ T6103] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 296.893389][ T6103] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 297.174207][ T6103] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 297.174820][ T6103] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 297.233591][ T6103] usb 2-1: USB disconnect, device number 10 [ 310.232268][ T1107] Bluetooth: hci5: Frame reassembly failed (-84) [ 310.378961][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 310.551810][ T5892] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.551841][ T5892] usb 4-1: config 0 has no interface number 0 [ 310.557938][ T5892] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 310.557970][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.557991][ T5892] usb 4-1: Product: syz [ 310.558005][ T5892] usb 4-1: Manufacturer: syz [ 310.558019][ T5892] usb 4-1: SerialNumber: syz [ 310.607910][ T5892] usb 4-1: config 0 descriptor?? [ 311.691169][ T5892] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 312.248806][ T60] Bluetooth: hci5: command 0x1003 tx timeout [ 312.249493][ T5804] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 315.325757][ T5867] usb 4-1: USB disconnect, device number 11 [ 317.154764][ T7669] FAULT_INJECTION: forcing a failure. [ 317.154764][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.154812][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 317.154836][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.154848][ T7669] Call Trace: [ 317.154856][ T7669] [ 317.154865][ T7669] dump_stack_lvl+0xe8/0x150 [ 317.154900][ T7669] should_fail_ex+0x46b/0x600 [ 317.154938][ T7669] _copy_from_user+0x2d/0xb0 [ 317.154965][ T7669] ___sys_sendmsg+0x1c6/0x360 [ 317.154999][ T7669] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.155063][ T7669] ? __fget_files+0x2a/0x420 [ 317.155088][ T7669] ? __fget_files+0x3a6/0x420 [ 317.155122][ T7669] __x64_sys_sendmsg+0x1c3/0x2a0 [ 317.155154][ T7669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.155193][ T7669] ? __pfx_ksys_write+0x10/0x10 [ 317.155234][ T7669] do_syscall_64+0x14d/0xf80 [ 317.155261][ T7669] ? trace_irq_disable+0x3b/0x150 [ 317.155283][ T7669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.155305][ T7669] ? clear_bhb_loop+0x40/0x90 [ 317.155339][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.155360][ T7669] RIP: 0033:0x7fcf1c7bc799 [ 317.155380][ T7669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.155397][ T7669] RSP: 002b:00007fcf1aa16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.155420][ T7669] RAX: ffffffffffffffda RBX: 00007fcf1ca35fa0 RCX: 00007fcf1c7bc799 [ 317.155435][ T7669] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 317.155448][ T7669] RBP: 00007fcf1aa16090 R08: 0000000000000000 R09: 0000000000000000 [ 317.155461][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.155473][ T7669] R13: 00007fcf1ca36038 R14: 00007fcf1ca35fa0 R15: 00007ffec2fd9978 [ 317.155506][ T7669] [ 317.429022][ T5867] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 317.587901][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.588467][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.005796][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 318.195243][ T5867] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 158, changing to 7 [ 318.195298][ T5867] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 318.232274][ T5867] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 318.232308][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.232328][ T5867] usb 1-1: Product: syz [ 318.232343][ T5867] usb 1-1: Manufacturer: syz [ 318.232358][ T5867] usb 1-1: SerialNumber: syz [ 318.554891][ T5867] usb 1-1: selecting invalid altsetting 1 [ 318.604815][ T5867] usb 1-1: selecting invalid altsetting 1 [ 318.755385][ T5867] usb 1-1: selecting invalid altsetting 1 [ 319.113440][ T7686] capability: warning: `syz.2.481' uses deprecated v2 capabilities in a way that may be insecure [ 319.433918][ T7686] loop2: detected capacity change from 0 to 7 [ 319.705596][ T7686] Dev loop2: unable to read RDB block 7 [ 319.705649][ T7686] loop2: unable to read partition table [ 319.705915][ T7686] loop2: partition table beyond EOD, truncated [ 319.705937][ T7686] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 319.886545][ T5867] usb 1-1: USB disconnect, device number 6 [ 320.048244][ T7695] loop2: detected capacity change from 0 to 7 [ 320.053930][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.065526][ T5799] Dev loop2: unable to read RDB block 7 [ 320.065571][ T5799] loop2: unable to read partition table [ 320.065825][ T5799] loop2: partition table beyond EOD, truncated [ 320.080077][ T7695] Dev loop2: unable to read RDB block 7 [ 320.080124][ T7695] loop2: unable to read partition table [ 320.080351][ T7695] loop2: partition table beyond EOD, truncated [ 320.719065][ T7695] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 321.119906][ T5164] Dev loop2: unable to read RDB block 7 [ 321.119955][ T5164] loop2: unable to read partition table [ 321.120210][ T5164] loop2: partition table beyond EOD, truncated [ 325.788800][ T1230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 327.890062][ T1230] usb 4-1: Using ep0 maxpacket: 8 [ 328.658592][ T1230] usb 4-1: device descriptor read/all, error -71 [ 328.775771][ T37] audit: type=1107 audit(1772491123.711:30): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 333.212220][ T37] audit: type=1326 audit(1772491128.141:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 333.213992][ T37] audit: type=1326 audit(1772491128.151:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 333.279043][ T37] audit: type=1326 audit(1772491128.151:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 333.407329][ T37] audit: type=1326 audit(1772491128.221:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 333.407631][ T37] audit: type=1326 audit(1772491128.221:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 333.407702][ T37] audit: type=1326 audit(1772491128.221:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 333.407914][ T37] audit: type=1326 audit(1772491128.221:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 333.408295][ T37] audit: type=1326 audit(1772491128.231:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 333.408549][ T37] audit: type=1326 audit(1772491128.231:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 334.636334][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 334.636396][ T37] audit: type=1326 audit(1772491129.571:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 334.798984][ T37] audit: type=1326 audit(1772491129.581:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf6affc502 code=0x7ffc0000 [ 334.799287][ T37] audit: type=1326 audit(1772491129.591:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbf6affc597 code=0x7ffc0000 [ 334.799554][ T37] audit: type=1326 audit(1772491129.611:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbf6afb9491 code=0x7ffc0000 [ 334.799780][ T37] audit: type=1326 audit(1772491129.621:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbf6affd589 code=0x7ffc0000 [ 334.800049][ T37] audit: type=1326 audit(1772491129.641:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbf6afb94fb code=0x7ffc0000 [ 334.800354][ T37] audit: type=1326 audit(1772491129.641:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 334.800711][ T37] audit: type=1326 audit(1772491129.641:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6affc799 code=0x7ffc0000 [ 334.801252][ T37] audit: type=1326 audit(1772491129.661:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbf6afb8bec code=0x7ffc0000 [ 334.801500][ T37] audit: type=1326 audit(1772491129.671:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7786 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbf6afb8c4e code=0x7ffc0000 [ 335.399665][ T5892] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 335.548735][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 335.554219][ T5892] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 158, changing to 7 [ 335.554273][ T5892] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 335.591726][ T5892] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 335.591794][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.591941][ T5892] usb 4-1: Product: syz [ 335.591963][ T5892] usb 4-1: Manufacturer: syz [ 335.591978][ T5892] usb 4-1: SerialNumber: syz [ 336.450377][ T7805] netlink: 192 bytes leftover after parsing attributes in process `syz.2.517'. [ 336.606880][ T5892] usb 4-1: selecting invalid altsetting 1 [ 336.666702][ T5892] usb 4-1: selecting invalid altsetting 1 [ 336.695606][ T5892] usb 4-1: selecting invalid altsetting 1 [ 336.832285][ T5892] usb 4-1: USB disconnect, device number 14 [ 336.895307][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.050003][ T5892] ================================================================== [ 337.050019][ T5892] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 337.050056][ T5892] Read of size 8 at addr ffffc9000e841008 by task kworker/1:5/5892 [ 337.050074][ T5892] [ 337.050086][ T5892] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.050109][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.050121][ T5892] Workqueue: usb_hub_wq hub_event [ 337.050153][ T5892] Call Trace: [ 337.050162][ T5892] [ 337.050171][ T5892] dump_stack_lvl+0xe8/0x150 [ 337.050199][ T5892] print_report+0xba/0x230 [ 337.050223][ T5892] ? __list_add_valid_or_report+0x4e/0x130 [ 337.050250][ T5892] kasan_report+0x117/0x150 [ 337.050279][ T5892] ? __list_add_valid_or_report+0x4e/0x130 [ 337.050310][ T5892] __list_add_valid_or_report+0x4e/0x130 [ 337.050339][ T5892] kcov_remote_stop+0x457/0x680 [ 337.050363][ T5892] hub_event+0x49d8/0x4f60 [ 337.050408][ T5892] ? __pfx_hub_event+0x10/0x10 [ 337.050438][ T5892] ? process_scheduled_works+0xa25/0x1830 [ 337.050463][ T5892] ? process_scheduled_works+0xa25/0x1830 [ 337.050498][ T5892] process_scheduled_works+0xb02/0x1830 [ 337.050535][ T5892] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.050564][ T5892] ? assign_work+0x3d5/0x5e0 [ 337.050589][ T5892] worker_thread+0xa50/0xfc0 [ 337.050625][ T5892] kthread+0x388/0x470 [ 337.050753][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 337.050787][ T5892] ? __pfx_kthread+0x10/0x10 [ 337.050809][ T5892] ret_from_fork+0x51e/0xb90 [ 337.050838][ T5892] ? __pfx_ret_from_fork+0x10/0x10 [ 337.050862][ T5892] ? __switch_to+0xc7d/0x1450 [ 337.050886][ T5892] ? __pfx_kthread+0x10/0x10 [ 337.050965][ T5892] ret_from_fork_asm+0x1a/0x30 [ 337.050995][ T5892] [ 337.051003][ T5892] [ 337.051008][ T5892] The buggy address belongs to a vmalloc virtual mapping [ 337.051027][ T5892] Memory state around the buggy address: [ 337.051038][ T5892] ffffc9000e840f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.051051][ T5892] ffffc9000e840f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.051063][ T5892] >ffffc9000e841000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.051072][ T5892] ^ [ 337.051083][ T5892] ffffc9000e841080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.051095][ T5892] ffffc9000e841100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.051105][ T5892] ================================================================== [ 337.051140][ T5892] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 337.051156][ T5892] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.051180][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.051192][ T5892] Workqueue: usb_hub_wq hub_event [ 337.051221][ T5892] Call Trace: [ 337.051229][ T5892] [ 337.051237][ T5892] vpanic+0x56c/0xa60 [ 337.051267][ T5892] ? __pfx_vpanic+0x10/0x10 [ 337.051294][ T5892] ? __pfx___schedule+0x10/0x10 [ 337.051323][ T5892] panic+0xc5/0xd0 [ 337.051360][ T5892] ? __pfx_panic+0x10/0x10 [ 337.051379][ T5892] ? preempt_schedule_thunk+0x16/0x30 [ 337.051395][ T5892] ? __list_add_valid_or_report+0x4e/0x130 [ 337.051411][ T5892] check_panic_on_warn+0x89/0xb0 [ 337.051425][ T5892] ? __list_add_valid_or_report+0x4e/0x130 [ 337.051441][ T5892] end_report+0x73/0x180 [ 337.051458][ T5892] ? __list_add_valid_or_report+0x4e/0x130 [ 337.051474][ T5892] kasan_report+0x128/0x150 [ 337.051491][ T5892] ? __list_add_valid_or_report+0x4e/0x130 [ 337.051509][ T5892] __list_add_valid_or_report+0x4e/0x130 [ 337.051526][ T5892] kcov_remote_stop+0x457/0x680 [ 337.051541][ T5892] hub_event+0x49d8/0x4f60 [ 337.051568][ T5892] ? __pfx_hub_event+0x10/0x10 [ 337.051586][ T5892] ? process_scheduled_works+0xa25/0x1830 [ 337.051666][ T5892] ? process_scheduled_works+0xa25/0x1830 [ 337.051682][ T5892] process_scheduled_works+0xb02/0x1830 [ 337.051703][ T5892] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.051719][ T5892] ? assign_work+0x3d5/0x5e0 [ 337.051735][ T5892] worker_thread+0xa50/0xfc0 [ 337.051756][ T5892] kthread+0x388/0x470 [ 337.051768][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 337.051782][ T5892] ? __pfx_kthread+0x10/0x10 [ 337.051794][ T5892] ret_from_fork+0x51e/0xb90 [ 337.051815][ T5892] ? __pfx_ret_from_fork+0x10/0x10 [ 337.051829][ T5892] ? __switch_to+0xc7d/0x1450 [ 337.051843][ T5892] ? __pfx_kthread+0x10/0x10 [ 337.051859][ T5892] ret_from_fork_asm+0x1a/0x30 [ 337.051880][ T5892] [ 337.052348][ T5892] Kernel Offset: disabled