last executing test programs: 6.722977996s ago: executing program 2 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000a8006000100003f01000800034000000002"], 0x1a50}, 0x1, 0x0, 0x1908}, 0x8000) 6.683714854s ago: executing program 2 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) creat(0x0, 0x28) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write$ppp(r2, &(0x7f0000000140)="1f02011821da8d0ea4889df6edf4d0319b8bb3dd2d8c69c1d82b21aab57adb0ae706fefa4774b22e30b2d35da941fce89b05aa1fcab49fd2300ae5b625f79b3944fc2843b2148541af09900e5be4479e0d3b4b37db8bf766ec7eeaf1d55b8f527d87df34d53a4478f9e66b9a4c418b000ee8", 0x72) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000240)={0x3, 0x0, [{0x0, 0x6, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x5, 0x110, 0x3}]}) 6.430734908s ago: executing program 2 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000000206030000000000000000000003000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 6.138541382s ago: executing program 2 (id=135): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143902, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180), 0xc00, &(0x7f00000001c0)=ANY=[@ANYBLOB]) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x79}}}, 0x0) ioctl(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000300)={r1, r1, 0x7, 0x0, 0x0, 0xe, 0xff, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$tun(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={0x0, 0x10, 0x5381}, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000400)={@any, 0x3}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nilfs2\x00', 0x8008, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f20c506200010102030109022000010100803209040000020806500007058102000200070502020002"], 0x0) 3.779251415s ago: executing program 0 (id=145): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x4, 0x3d0, [0x0, 0x2000000, 0x0, 0x0, 0x0, 0x200000000a40], 0x0, 0x0, &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x72, 0x5, 'macvlan1\x00', 'ip_vti0\x00', 'batadv0\x00', 'veth0_to_bridge\x00', @local, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff], 0x0, 0xd0, 0xd0, 0x108, [@state={{'state\x00', 0x0, 0x8}, {{0x4}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0xff, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}, {0x5, 0x0, 0x9, 'sit0\x00', 'wlan1\x00', 'vcan0\x00', 'pim6reg\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xfc, 0xfd, {0x3}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x3, 0x3, 0x2414, 'macvtap0\x00', 'veth0_macvtap\x00', 'ipvlan1\x00', 'geneve0\x00', @remote, [0x0, 0xd5ab5cb31136697f, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', {0x1eb}}}}}, {0x5, 0x8, 0x880e, 'syzkaller1\x00', 'team_slave_0\x00', 'veth0_to_hsr\x00', 'vlan0\x00', @local, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @random="ecd182850a38", [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x7ffffffc, {0xc}}}}}]}]}, 0x448) 3.304529497s ago: executing program 0 (id=149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000001000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.123207711s ago: executing program 0 (id=150): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1601, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000007c0)='27', 0x2) add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, 0xffffffffffffffff) 2.75710038s ago: executing program 0 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs_dir\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./tracefs_dir\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001c40)={'pimreg0\x00', 0x7c2}) syz_usb_connect(0x0, 0xb3, &(0x7f0000001b80)=ANY=[@ANYBLOB="120100020f030140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200f7082403"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@rights={{0x18, 0x1, 0x1, [r4]}}], 0x18, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4000000}}], 0x2, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@rights={{0x18, 0x1, 0x1, [r4]}}], 0x18, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4000000}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000003c0)=0xfffffffe, 0x4) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000001540), 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001580)={'vcan0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f00000015c0)={&(0x7f0000001600)={0x1d, r8}, 0x10, &(0x7f0000001640)={&(0x7f0000001680)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "c70e88260c7efc47770fec8b8498b71f007c423b6727a5f8dbc1f2625074053d0c3c91343f0cc9fb97434318efca5e4512b8efdde73c971d7826c7c08904b2a7"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4044000) syz_genetlink_get_family_id$team(&(0x7f0000000340), r0) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r0) r10 = syz_open_dev$vim2m(&(0x7f0000000380), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000001a00)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x13, r10, 0x10002000) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)={0x2dc, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x2, 0x1, 0x995a}, {0x7f, 0x9, 0x80, 0x5}, {0x8, 0x9, 0x8, 0x5ca}]}}}]}}, {{0x8, 0x1, r6}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)={0x2dc, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x2, 0x1, 0x995a}, {0x7f, 0x9, 0x80, 0x5}, {0x8, 0x9, 0x8, 0x5ca}]}}}]}}, {{0x8, 0x1, r6}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.692494011s ago: executing program 3 (id=152): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x6000000000000000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.518279021s ago: executing program 2 (id=154): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0xf5, 0x0, 0x402}]) 2.480983588s ago: executing program 3 (id=155): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000d00)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x1300, 0xa0811, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x8, 0x0, 0x98, 'raid\x00', {'raid10_far', 0x20, '3 64 rebuild 0', 0x20, 0x2, [{0x20, @dev=@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}}, {0x20, @none, 0x20, @ram={'/dev/ram', 0x1}}]}}]}) 2.404470992s ago: executing program 2 (id=156): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x2, 0x30a8}, &(0x7f00000000c0)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x4, 0x20}, {0x6, 0x0, 0xfe, 0x4}]}) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x2}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x96, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000040)="070000000000000001000000ffffffff40894088") (async) ioctl(r4, 0x4048aecb, &(0x7f0000000040)="070000000000000001000000ffffffff40894088") renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x2) 2.234771056s ago: executing program 3 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0x4, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x40}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 2.055610623s ago: executing program 3 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/4100, 0x1004}, {&(0x7f00000013c0)=""/4104, 0x1008}], 0x2}, 0x900300}, {{0x0, 0x0, 0x0}, 0xb87f}], 0x8, 0x100, 0x0) 1.936807417s ago: executing program 3 (id=159): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1601, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000007c0)='27', 0x2) add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, 0xffffffffffffffff) 1.767290386s ago: executing program 3 (id=160): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000002b40)={0x14, &(0x7f0000002ac0)={0x40, 0x1, 0x17, {0x17, 0x5, "0b46da166070e77207e7bbdbe1a8d26cb465c1e25b"}}, &(0x7f0000002b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000002d80)={0x34, &(0x7f0000002b80)={0x0, 0x14, 0xb1, "70b71e675c2f53db9e3d8ba387905bab7f67015ec4e6b1953697c241b4fda2d2c57313038808a9da20e0bb6cccf8c42e2eb873a57ee431b272586e2f5fc1964fbe37922586674024c5b9e92da9b1b68051da67fae179f9e4389d97caeb8dd06d3772a2ce6f052c91cdd89114261d523b8ae377afc0bd81508647e9c71674efc6fd18fbddc4cd770bbc5212693de7453217bf7935c7fb1c92562f1df81a62ac545fd88596ebfe8f8d97fddb8ccac0e88607"}, &(0x7f0000002c40)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000002c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002cc0)={0xc0, 0xa1, 0x4, 0xa}, &(0x7f0000002d00)={0x40, 0xa0, 0x4, 0x100}, &(0x7f0000002d40)={0xc0, 0xa2, 0x2f, "e59fb5f107c0fb6b855103fcf89c8fc3a05fea434cabd14108e67b02e09449af62a6e5fdb5010b3d4f0f935622dbf3"}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e40)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002e80)='./proc\x00', 0x5d) mount(0x0, &(0x7f0000002ec0)='./proc\x00', &(0x7f0000002f00)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002f40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000002f80)='3', 0x4e) add_key$keyring(&(0x7f0000002fc0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffe4) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000240)={0x40, 0xa}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000280)={0x34, &(0x7f00000003c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000002980)={0x84, &(0x7f0000002a40)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002a80)={0x2c, &(0x7f0000002ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='10', 0x2) dup(r4) 1.235807264s ago: executing program 1 (id=162): r0 = syz_open_dev$video(&(0x7f0000000100), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x3c0, 0x82ff, 0x5, 0xfeedcafe, 0x3, 0x0, 0x2, 0x6}}) 1.17549533s ago: executing program 1 (id=163): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x25, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f8000", 0x9) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000380)={0x7ffffffe, 0xffffffff, 0x3, 0xfffffffc}, 0x10) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000080)={0x5, 0x80000}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 965.493705ms ago: executing program 1 (id=164): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40c02) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000240)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {0x1, 0x7f}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) r2 = openat$kvm(0x0, &(0x7f0000000480), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000a80), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000ac0)={&(0x7f0000000b00)=[{0x9e, 0x1000, 0x0, 0x0}, {0xce, 0x6001, 0x0, 0x0}], 0x2}) syz_io_uring_complete(0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000209000/0x400000)=nil) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x13) tkill(r6, 0x12) waitid(0x2, 0x0, 0x0, 0x6100000b, 0x0) r7 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r8], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$KVM_RUN(r7, 0xae80, 0x0) rt_tgsigqueueinfo(r6, r6, 0x2b, &(0x7f0000000280)={0x2a, 0x5, 0x3}) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f0000000080)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) mount$nfs(&(0x7f0000000000)='}-#\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x5000, &(0x7f0000000200)={[{'-]\x80[@\'}!{]\'%]'}, {'*:'}, {'tmpfs\x00'}], [{@subj_user={'subj_user', 0x3d, 'tmpfs\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x61, 0x65, 0x64, 0xc, 0x38, 0x37, 0x35], 0x2d, [0x36, 0x32, 0x38, 0x66], 0x2d, [0x35, 0x65, 0x32, 0x36], 0x2d, [0x30, 0x34, 0x39, 0x32], 0x2d, [0x65, 0x39, 0x38, 0x37, 0x38, 0x56, 0x37, 0x32]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x65, 0x39, 0x34, 0x38, 0x38, 0x34, 0x63], 0x2d, [0x32, 0x72, 0x37, 0x63], 0x2d, [0x61, 0x66, 0x30, 0x32], 0x2d, [0x39, 0x35, 0x37, 0x38], 0x2d, [0x64, 0x0, 0x54, 0x35, 0x61, 0x35, 0x33, 0x66]}}}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'tmpfs\x00'}}, {@fsmagic}]}) 745.39683ms ago: executing program 0 (id=166): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x8100, 0x3, 0x1}, 0x30, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x4401}, 0x0, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/30, 0x1e}], 0x1, 0x42, 0x116d) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000200)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}}) ioctl$KVM_CREATE_VM(r2, 0x5452, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0x5452, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 286.081094ms ago: executing program 1 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x20) (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000200)='\x00'/65, 0x0, 0xeeef0000}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000340)='\x00'/183, 0x0, 0x9000}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000640)=@filename='./dev/sda1\x00', &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) llistxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=""/14, 0xe) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000440)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000480)={@my=0x1}) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000004c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000500)=0x4, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x3}}, './file1\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000780)=0x7, 0x8) 197.766145ms ago: executing program 1 (id=168): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1601, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000007c0)='27', 0x2) add_key(&(0x7f0000000800)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, 0xffffffffffffffff) 0s ago: executing program 1 (id=169): add_key(0x0, 0x0, &(0x7f0000000380)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f8efde300a06082a8648ce3d040302303a3138303606035504030c2f43657212776669", 0x43, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x4000000, 0x0, 0xfffffffffffffffc}, {0x1, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 84.845209][ T5624] cgroup: Unknown subsys name 'net' [ 84.955620][ T5624] cgroup: Unknown subsys name 'cpuset' [ 84.964175][ T5624] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.600001][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.129277][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.139029][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.140782][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.143550][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.147721][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.258243][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.259054][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.259607][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.260711][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.262574][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.365325][ T4955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.366631][ T4955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.367225][ T4955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.368275][ T4955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.369505][ T4955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.427233][ T4955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.429023][ T4955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.429564][ T4955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.430852][ T4955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.460486][ T5650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.178864][ T5647] rdma_rxe: Failed to create IPv4 UDP tunnel [ 90.189853][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 90.196055][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.212778][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.221738][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.405197][ T5645] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 90.565572][ T5642] infiniband rxe0: set active [ 90.566393][ T5642] infiniband rxe0: added rxe_eth0 [ 90.583576][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.614050][ T5642] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.614089][ T5642] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.614130][ T5642] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.685555][ T5642] RDS/IB: rxe0: added [ 90.685940][ T5642] smc: adding ib device rxe0 with port count 1 [ 90.686042][ T5642] smc: ib device rxe0 port 1 has no pnetid [ 90.712174][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.732650][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.093977][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.223255][ T5636] Bluetooth: hci0: command tx timeout [ 91.301593][ T5636] Bluetooth: hci1: command tx timeout [ 91.372163][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.372303][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.372466][ T5647] bridge_slave_0: entered allmulticast mode [ 91.375326][ T5647] bridge_slave_0: entered promiscuous mode [ 91.414223][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.450858][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.452495][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.452596][ T5647] bridge_slave_1: entered allmulticast mode [ 91.454569][ T5647] bridge_slave_1: entered promiscuous mode [ 91.461733][ T5636] Bluetooth: hci2: command tx timeout [ 91.534636][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.534756][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.535239][ T5634] bridge_slave_0: entered allmulticast mode [ 91.537465][ T5634] bridge_slave_0: entered promiscuous mode [ 91.551948][ T5636] Bluetooth: hci3: command tx timeout [ 91.597897][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.598406][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.598858][ T5634] bridge_slave_1: entered allmulticast mode [ 91.600878][ T5634] bridge_slave_1: entered promiscuous mode [ 91.648795][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.662239][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.737748][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.760737][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.760851][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.760982][ T5645] bridge_slave_0: entered allmulticast mode [ 91.782866][ T5645] bridge_slave_0: entered promiscuous mode [ 91.793684][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.794090][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.794243][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.794378][ T5645] bridge_slave_1: entered allmulticast mode [ 91.797328][ T5645] bridge_slave_1: entered promiscuous mode [ 91.839823][ T5647] team0: Port device team_slave_0 added [ 91.874832][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.878615][ T5647] team0: Port device team_slave_1 added [ 91.908207][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.908344][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.967401][ T5634] team0: Port device team_slave_0 added [ 91.990802][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.990822][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.990889][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.007059][ T5634] team0: Port device team_slave_1 added [ 92.015025][ T5645] team0: Port device team_slave_0 added [ 92.023527][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.023577][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.023695][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.090590][ T33] cfg80211: failed to load regulatory.db [ 92.130119][ T5645] team0: Port device team_slave_1 added [ 92.146726][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.146745][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.146771][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.191301][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.191351][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.193801][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.296431][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.296451][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.296479][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.338289][ T5647] hsr_slave_0: entered promiscuous mode [ 92.348767][ T5647] hsr_slave_1: entered promiscuous mode [ 92.361576][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.361595][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.361622][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.465372][ T5634] hsr_slave_0: entered promiscuous mode [ 92.466138][ T5634] hsr_slave_1: entered promiscuous mode [ 92.466693][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 92.466726][ T5634] Cannot create hsr debugfs directory [ 92.550755][ T5645] hsr_slave_0: entered promiscuous mode [ 92.553623][ T5645] hsr_slave_1: entered promiscuous mode [ 92.555813][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 92.555870][ T5645] Cannot create hsr debugfs directory [ 93.029765][ T5647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.044138][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.045191][ T5647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.050022][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.057887][ T5647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.086202][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.087190][ T5647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.092417][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.247570][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.247729][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.247857][ T5642] bridge_slave_0: entered allmulticast mode [ 93.249383][ T5642] bridge_slave_0: entered promiscuous mode [ 93.267856][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.268217][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.268646][ T5642] bridge_slave_1: entered allmulticast mode [ 93.300387][ T5642] bridge_slave_1: entered promiscuous mode [ 93.307633][ T5636] Bluetooth: hci0: command tx timeout [ 93.321271][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.332253][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.354646][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.358150][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.381681][ T5636] Bluetooth: hci1: command tx timeout [ 93.387375][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.390667][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.422006][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.437507][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.449388][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.455800][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.517773][ T5642] team0: Port device team_slave_0 added [ 93.528220][ T5642] team0: Port device team_slave_1 added [ 93.552040][ T5636] Bluetooth: hci2: command tx timeout [ 93.581164][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.592908][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.593966][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.593980][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.594004][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.594430][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.597603][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.600332][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.600345][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.600368][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.647510][ T5636] Bluetooth: hci3: command tx timeout [ 93.675376][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.724698][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.738194][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.744030][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.809738][ T5642] hsr_slave_0: entered promiscuous mode [ 93.810501][ T5642] hsr_slave_1: entered promiscuous mode [ 93.811250][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 93.811268][ T5642] Cannot create hsr debugfs directory [ 93.912622][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.050015][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.085625][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.085752][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.119680][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.119837][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.170671][ T5642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.180114][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.199820][ T5642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.209528][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.211201][ T5642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.229513][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.245836][ T5642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.249300][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.271822][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.305256][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.368667][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.380088][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.412663][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.412774][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.416238][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.416358][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.474844][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.475006][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.479246][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.479420][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.719363][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.796964][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.822484][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.822602][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.864368][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.864482][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.382430][ T5636] Bluetooth: hci0: command tx timeout [ 95.471771][ T5636] Bluetooth: hci1: command tx timeout [ 95.499509][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.621680][ T5636] Bluetooth: hci2: command tx timeout [ 95.629549][ T5647] veth0_vlan: entered promiscuous mode [ 95.668854][ T5647] veth1_vlan: entered promiscuous mode [ 95.702107][ T5636] Bluetooth: hci3: command tx timeout [ 95.756105][ T5647] veth0_macvtap: entered promiscuous mode [ 95.784695][ T5647] veth1_macvtap: entered promiscuous mode [ 95.797666][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.867192][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.895039][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.932956][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.954029][ T159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.973069][ T159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.974504][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.974677][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.081339][ T5634] veth0_vlan: entered promiscuous mode [ 96.126338][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.163976][ T5634] veth1_vlan: entered promiscuous mode [ 96.217218][ T5645] veth0_vlan: entered promiscuous mode [ 96.239864][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.239891][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.282406][ T5645] veth1_vlan: entered promiscuous mode [ 96.318006][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.318029][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.363445][ T5642] veth0_vlan: entered promiscuous mode [ 96.382880][ T5634] veth0_macvtap: entered promiscuous mode [ 96.403645][ T5634] veth1_macvtap: entered promiscuous mode [ 96.426964][ T5642] veth1_vlan: entered promiscuous mode [ 96.472312][ T5647] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.488178][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.500272][ T5645] veth0_macvtap: entered promiscuous mode [ 96.542520][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.567523][ T5645] veth1_macvtap: entered promiscuous mode [ 96.636265][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.677393][ T5642] veth0_macvtap: entered promiscuous mode [ 96.691861][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.703905][ T5642] veth1_macvtap: entered promiscuous mode [ 96.832351][ T159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832404][ T159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832444][ T159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832482][ T159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832520][ T159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.833852][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.833870][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.853609][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.856448][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.856869][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.871299][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.969627][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.998950][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.998967][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.050985][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.051007][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.083108][ T33] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.132045][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.132097][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.132133][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.132182][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.187538][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.187559][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.246698][ T33] usb 4-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=1.00 [ 97.258492][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.408100][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.408125][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.471900][ T5636] Bluetooth: hci0: command tx timeout [ 97.518785][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.518810][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.541678][ T5636] Bluetooth: hci1: command tx timeout [ 97.613846][ T33] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 12:09:de:6d:92:f6 [ 97.711935][ T5636] Bluetooth: hci2: command tx timeout [ 97.781888][ T5636] Bluetooth: hci3: command tx timeout [ 98.033049][ T5818] FAULT_INJECTION: forcing a failure. [ 98.033049][ T5818] name failslab, interval 1, probability 0, space 0, times 1 [ 98.033096][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 98.033123][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 98.033147][ T5818] Call Trace: [ 98.033157][ T5818] [ 98.033167][ T5818] dump_stack_lvl+0xe8/0x150 [ 98.033211][ T5818] should_fail_ex+0x3eb/0x540 [ 98.033250][ T5818] should_failslab+0xa8/0x100 [ 98.033289][ T5818] __kmalloc_cache_noprof+0x9e/0x600 [ 98.033322][ T5818] ? once_disable_jump+0x52/0x1a0 [ 98.033358][ T5818] ? once_disable_jump+0x52/0x1a0 [ 98.033392][ T5818] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.033433][ T5818] once_disable_jump+0x52/0x1a0 [ 98.033470][ T5818] __rds_conn_create+0x228b/0x2290 [ 98.033537][ T5818] ? __pfx___rds_conn_create+0x10/0x10 [ 98.033575][ T5818] ? trace_kmalloc+0x2a/0xf0 [ 98.033610][ T5818] ? __raw_spin_lock_init+0x45/0x100 [ 98.033655][ T5818] rds_conn_create_outgoing+0x43/0x60 [ 98.033698][ T5818] rds_sendmsg+0x1048/0x21e0 [ 98.033748][ T5818] ? __pfx_rds_sendmsg+0x10/0x10 [ 98.033781][ T5818] ? lock_acquire+0x115/0x350 [ 98.033811][ T5818] ? __pfx_aa_sk_perm+0x10/0x10 [ 98.033844][ T5818] ? aa_sock_msg_perm+0x144/0x210 [ 98.033883][ T5818] ? apparmor_socket_sendmsg+0x98/0x360 [ 98.033914][ T5818] ? __pfx_rds_sendmsg+0x10/0x10 [ 98.033940][ T5818] sock_sendmsg_nosec+0x14e/0x190 [ 98.033971][ T5818] ____sys_sendmsg+0x54e/0x850 [ 98.034015][ T5818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.034061][ T5818] ? import_iovec+0x73/0xa0 [ 98.034098][ T5818] ___sys_sendmsg+0x2a6/0x360 [ 98.034131][ T5818] ? __lock_acquire+0x747/0x2de0 [ 98.034165][ T5818] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.034245][ T5818] ? __fget_files+0x3a2/0x420 [ 98.034275][ T5818] ? __fget_files+0x2a/0x420 [ 98.034317][ T5818] __x64_sys_sendmsg+0x1b1/0x290 [ 98.034355][ T5818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.034415][ T5818] do_syscall_64+0x171/0x540 [ 98.034451][ T5818] ? trace_irq_disable+0x3b/0x140 [ 98.034494][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.034520][ T5818] ? clear_bhb_loop+0x70/0xc0 [ 98.034551][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.034576][ T5818] RIP: 0033:0x00007f80b5fa8f19 [ 98.034610][ T5818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.034630][ T5818] RSP: 002b:00007f80b6d9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.034657][ T5818] RAX: ffffffffffffffda RBX: 00007f80b6225fa0 RCX: 00007f80b5fa8f19 [ 98.034675][ T5818] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 98.034690][ T5818] RBP: 00007f80b6d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 98.034706][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.034720][ T5818] R13: 00007f80b6226038 R14: 00007f80b6225fa0 R15: 00007ffdb5d35198 [ 98.034759][ T5818] [ 98.686869][ T5796] usb 4-1: USB disconnect, device number 2 [ 98.703826][ T5796] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 98.722927][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.882310][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 98.883186][ T10] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 98.887921][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 98.887964][ T10] usb 3-1: config 0 has no interface number 0 [ 98.888010][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 98.935949][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.935981][ T10] usb 3-1: Product: syz [ 98.935997][ T10] usb 3-1: Manufacturer: syz [ 98.936014][ T10] usb 3-1: SerialNumber: syz [ 98.977922][ T10] usb 3-1: config 0 descriptor?? [ 99.280992][ T5843] device-mapper: cache-policy-smq: tunable 'sequential_threshold' no longer has any effect, mq policy is now an alias for smq [ 99.340596][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.600332][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 99.642288][ T5853] capability: warning: `syz.3.14' uses deprecated v2 capabilities in a way that may be insecure [ 99.645789][ T5853] program syz.3.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.779755][ T5853] bond0: option arp_interval: invalid value () [ 99.779782][ T5853] bond0: option arp_interval: allowed values 0 - 2147483647 [ 100.074822][ T34] audit: type=1400 audit(1794406358.722:2): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=5861 comm="syz.3.17" name="p" offset=79 [ 100.195258][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.195406][ T5828] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.265945][ T5828] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.291762][ T5828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.293380][ T5828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.322966][ T5828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.338430][ T5828] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.339804][ T5828] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.366778][ T5873] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 100.370278][ T5828] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.389929][ T5828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.391676][ T5828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.417183][ T5828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.437902][ T5878] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 100.483671][ T5876] loop5: detected capacity change from 0 to 7 [ 100.507984][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508051][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508098][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508144][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508192][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508239][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508271][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508287][ T5876] ldm_validate_partition_table(): Disk read failed. [ 100.508315][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508346][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508377][ T5876] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.508410][ T5876] Dev loop5: unable to read RDB block 0 [ 100.508477][ T5876] loop5: unable to read partition table [ 100.532008][ T5876] loop5: partition table beyond EOD, truncated [ 100.532071][ T5876] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰•¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ`ÉæÖã«…ˆ) failed (rc=-5) [ 100.629476][ T5882] Zero length message leads to an empty skb [ 100.705722][ T5887] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.706067][ T5887] CIFS: Attempting to mount //127.0.0.1/share [ 101.039162][ T10] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 101.039269][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 101.039289][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 101.039386][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 101.095369][ T10] usb 3-1: USB disconnect, device number 2 [ 101.234498][ T5887] CIFS: VFS: cifs_mount failed w/return code = -112 [ 101.266282][ T5004] ldm_validate_partition_table(): Disk read failed. [ 101.266363][ T5004] Dev loop5: unable to read RDB block 0 [ 101.266426][ T5004] loop5: unable to read partition table [ 101.266644][ T5004] loop5: partition table beyond EOD, truncated [ 101.514376][ T5906] fuse: Bad value for 'fd' [ 101.540409][ T5902] device-mapper: table: 248:3: multipath: unknown path selector type (-EINVAL) [ 101.540454][ T5902] device-mapper: ioctl: error adding target to table [ 101.719688][ T5909] FAULT_INJECTION: forcing a failure. [ 101.719688][ T5909] name failslab, interval 1, probability 0, space 0, times 0 [ 101.719722][ T5909] CPU: 1 UID: 0 PID: 5909 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 101.719747][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 101.719760][ T5909] Call Trace: [ 101.719768][ T5909] [ 101.719778][ T5909] dump_stack_lvl+0xe8/0x150 [ 101.719817][ T5909] should_fail_ex+0x3eb/0x540 [ 101.719853][ T5909] should_failslab+0xa8/0x100 [ 101.719885][ T5909] ? mas_alloc_nodes+0x291/0x350 [ 101.719920][ T5909] kmem_cache_alloc_noprof+0x9c/0x600 [ 101.719947][ T5909] ? mas_alloc_nodes+0x291/0x350 [ 101.719988][ T5909] mas_alloc_nodes+0x291/0x350 [ 101.720027][ T5909] mas_preallocate+0x42a/0x840 [ 101.720068][ T5909] ? __pfx_mas_preallocate+0x10/0x10 [ 101.720126][ T5909] commit_merge+0x21c/0x820 [ 101.720159][ T5909] ? lockdep_hardirqs_on+0x7b/0x110 [ 101.720196][ T5909] ? __pfx_commit_merge+0x10/0x10 [ 101.720242][ T5909] ? vma_assert_stabilised+0x5d/0x1f0 [ 101.720279][ T5909] vma_modify+0x2756/0x34f0 [ 101.720334][ T5909] vma_modify_flags+0x2a4/0x3c0 [ 101.720368][ T5909] ? __pfx_vma_modify_flags+0x10/0x10 [ 101.720415][ T5909] ? mprotect_fixup+0x6b2/0xf20 [ 101.720447][ T5909] ? may_expand_vm+0x24d/0x390 [ 101.720486][ T5909] mprotect_fixup+0x54f/0xf20 [ 101.720524][ T5909] ? __pfx_mprotect_fixup+0x10/0x10 [ 101.720549][ T5909] ? mas_next_slot+0xa9f/0xc20 [ 101.720596][ T5909] ? apparmor_file_mprotect+0x1ec/0x3a0 [ 101.720617][ T5909] ? security_file_mprotect+0x1a/0x290 [ 101.720647][ T5909] do_mprotect_pkey+0x8e7/0xd40 [ 101.720696][ T5909] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 101.720722][ T5909] ? __mutex_unlock_slowpath+0x731/0x900 [ 101.720769][ T5909] ? fdget+0x1ac/0x250 [ 101.720803][ T5909] ? ksys_write+0x242/0x270 [ 101.720834][ T5909] ? __pfx_ksys_write+0x10/0x10 [ 101.720890][ T5909] __x64_sys_mprotect+0x80/0x90 [ 101.720925][ T5909] do_syscall_64+0x171/0x540 [ 101.720958][ T5909] ? trace_irq_disable+0x3b/0x140 [ 101.720988][ T5909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.721011][ T5909] ? clear_bhb_loop+0x70/0xc0 [ 101.721038][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.721061][ T5909] RIP: 0033:0x00007f0a765a8f19 [ 101.721083][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.721100][ T5909] RSP: 002b:00007f0a773f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 101.721123][ T5909] RAX: ffffffffffffffda RBX: 00007f0a76825fa0 RCX: 00007f0a765a8f19 [ 101.721139][ T5909] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 101.721154][ T5909] RBP: 00007f0a773f2090 R08: 0000000000000000 R09: 0000000000000000 [ 101.721167][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.721180][ T5909] R13: 00007f0a76826038 R14: 00007f0a76825fa0 R15: 00007ffde7c31548 [ 101.721217][ T5909] [ 102.021112][ T5914] libceph: Failed to parse secret: -22 [ 102.032158][ T5912] libceph: Failed to parse secret: -22 [ 102.039988][ T5897] orangefs_mount: mount request failed with -4 [ 102.131841][ T5747] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.192229][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.227924][ T5923] FAULT_INJECTION: forcing a failure. [ 102.227924][ T5923] name failslab, interval 1, probability 0, space 0, times 0 [ 102.227948][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT(full) [ 102.227965][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 102.227975][ T5923] Call Trace: [ 102.227981][ T5923] [ 102.227987][ T5923] dump_stack_lvl+0xe8/0x150 [ 102.228016][ T5923] should_fail_ex+0x3eb/0x540 [ 102.228041][ T5923] should_failslab+0xa8/0x100 [ 102.228067][ T5923] __kmalloc_noprof+0xf9/0x710 [ 102.228086][ T5923] ? tomoyo_encode+0x2ad/0x570 [ 102.228107][ T5923] ? tomoyo_encode+0x2ad/0x570 [ 102.228141][ T5923] tomoyo_encode+0x2ad/0x570 [ 102.228191][ T5923] tomoyo_realpath_from_path+0x5fd/0x640 [ 102.228233][ T5923] ? tomoyo_path_number_perm+0x219/0x5f0 [ 102.228260][ T5923] tomoyo_path_number_perm+0x246/0x5f0 [ 102.228292][ T5923] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.228309][ T5923] ? __lock_acquire+0x747/0x2de0 [ 102.228357][ T5923] ? __fget_files+0x2a/0x420 [ 102.228379][ T5923] ? __fget_files+0x2a/0x420 [ 102.228399][ T5923] ? __fget_files+0x2a/0x420 [ 102.228421][ T5923] security_file_ioctl+0xc3/0x2a0 [ 102.228439][ T5923] __se_sys_ioctl+0x47/0x170 [ 102.228465][ T5923] do_syscall_64+0x171/0x540 [ 102.228488][ T5923] ? trace_irq_disable+0x3b/0x140 [ 102.228509][ T5923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.228525][ T5923] ? clear_bhb_loop+0x70/0xc0 [ 102.228544][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.228559][ T5923] RIP: 0033:0x00007fcf9d1a8f19 [ 102.228576][ T5923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.228592][ T5923] RSP: 002b:00007fcf9e035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.228608][ T5923] RAX: ffffffffffffffda RBX: 00007fcf9d425fa0 RCX: 00007fcf9d1a8f19 [ 102.228622][ T5923] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 102.228632][ T5923] RBP: 00007fcf9e035090 R08: 0000000000000000 R09: 0000000000000000 [ 102.228642][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.228651][ T5923] R13: 00007fcf9d426038 R14: 00007fcf9d425fa0 R15: 00007ffe2c0c1fc8 [ 102.228676][ T5923] [ 102.228690][ T5923] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.240334][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032e15000: rx timeout, send abort [ 102.292638][ T5747] usb 3-1: Using ep0 maxpacket: 8 [ 102.297049][ T5747] usb 3-1: New USB device found: idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 102.331144][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.331217][ T5747] usb 3-1: Product: syz [ 102.331259][ T5747] usb 3-1: Manufacturer: syz [ 102.331300][ T5747] usb 3-1: SerialNumber: syz [ 102.344658][ T5650] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.344942][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.421873][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.444635][ T5747] usb 3-1: config 0 descriptor?? [ 102.552324][ T5747] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 102.579091][ T5925] FAULT_INJECTION: forcing a failure. [ 102.579091][ T5925] name failslab, interval 1, probability 0, space 0, times 0 [ 102.579567][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: syz.3.32 Not tainted syzkaller #0 PREEMPT(full) [ 102.579593][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 102.579607][ T5925] Call Trace: [ 102.579617][ T5925] [ 102.579627][ T5925] dump_stack_lvl+0xe8/0x150 [ 102.579665][ T5925] should_fail_ex+0x3eb/0x540 [ 102.579704][ T5925] should_failslab+0xa8/0x100 [ 102.579730][ T5925] __kmalloc_cache_noprof+0x9e/0x600 [ 102.579750][ T5925] ? nvmf_dev_write+0x243/0x2d90 [ 102.579803][ T5925] ? nvmf_dev_write+0x243/0x2d90 [ 102.579835][ T5925] ? _copy_from_user+0x94/0xb0 [ 102.579872][ T5925] nvmf_dev_write+0x243/0x2d90 [ 102.579901][ T5925] ? lock_acquire+0x115/0x350 [ 102.579948][ T5925] ? aa_file_perm+0x18b/0x15f0 [ 102.579984][ T5925] ? aa_file_perm+0x4ed/0x15f0 [ 102.580012][ T5925] ? aa_file_perm+0x18b/0x15f0 [ 102.580044][ T5925] ? __pfx_nvmf_dev_write+0x10/0x10 [ 102.580069][ T5925] ? kstrtoull+0x137/0x1d0 [ 102.580117][ T5925] ? __pfx_aa_file_perm+0x10/0x10 [ 102.580150][ T5925] ? lock_acquire+0x115/0x350 [ 102.580177][ T5925] ? get_pid_task+0x20/0x1f0 [ 102.580201][ T5925] ? __lock_acquire+0x747/0x2de0 [ 102.580221][ T5925] ? get_pid_task+0x20/0x1f0 [ 102.580255][ T5925] ? apparmor_file_permission+0x1fb/0x2b0 [ 102.580283][ T5925] ? bpf_lsm_file_permission+0x9/0x20 [ 102.580309][ T5925] ? security_file_permission+0x75/0x260 [ 102.580333][ T5925] ? rw_verify_area+0x203/0x4c0 [ 102.580361][ T5925] ? __pfx_nvmf_dev_write+0x10/0x10 [ 102.580384][ T5925] vfs_write+0x296/0xba0 [ 102.580435][ T5925] ? __pfx_vfs_write+0x10/0x10 [ 102.580466][ T5925] ? __fget_files+0x2a/0x420 [ 102.580498][ T5925] ? __fget_files+0x3a2/0x420 [ 102.580517][ T5925] ? __fget_files+0x2a/0x420 [ 102.580539][ T5925] ? fdget+0x1ac/0x250 [ 102.580585][ T5925] ksys_write+0x150/0x270 [ 102.580617][ T5925] ? __pfx_ksys_write+0x10/0x10 [ 102.580659][ T5925] do_syscall_64+0x171/0x540 [ 102.580694][ T5925] ? trace_irq_disable+0x3b/0x140 [ 102.580724][ T5925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.580748][ T5925] ? clear_bhb_loop+0x70/0xc0 [ 102.580774][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.580798][ T5925] RIP: 0033:0x00007fcf9d1a8f19 [ 102.580819][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.580832][ T5925] RSP: 002b:00007fcf9e035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.580849][ T5925] RAX: ffffffffffffffda RBX: 00007fcf9d425fa0 RCX: 00007fcf9d1a8f19 [ 102.580878][ T5925] RDX: 0000000000000037 RSI: 00002000000015c0 RDI: 0000000000000003 [ 102.580893][ T5925] RBP: 00007fcf9e035090 R08: 0000000000000000 R09: 0000000000000000 [ 102.580906][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.580918][ T5925] R13: 00007fcf9d426038 R14: 00007fcf9d425fa0 R15: 00007ffe2c0c1fc8 [ 102.580953][ T5925] [ 102.742267][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032e15000: abort rx timeout. Force session deactivation [ 102.743392][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032e14c00: rx timeout, send abort [ 103.107073][ T5932] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.158582][ T34] audit: type=1400 audit(1794406361.802:3): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=5931 comm="syz.1.35" [ 103.243437][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032e14c00: abort rx timeout. Force session deactivation [ 103.350363][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.356040][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.537806][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff8171ada2 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 103.537866][ C0] Call Trace: [ 103.537877][ C0] [ 103.537893][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 103.537935][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 103.537974][ C0] ? sched_clock_cpu+0x74/0x440 [ 103.538016][ C0] mce_cpu_restart+0x11a/0x2c0 [ 103.538033][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 103.538053][ C0] __flush_smp_call_function_queue+0x35d/0xc50 [ 103.538080][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 103.538102][ C0] __sysvec_call_function_single+0x9a/0x3d0 [ 103.538130][ C0] sysvec_call_function_single+0x9e/0xc0 [ 103.538155][ C0] [ 103.538161][ C0] [ 103.538168][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 103.538187][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 103.538213][ C0] Code: 9b a5 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 ab 21 00 fb f4 7c 1e 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 103.538227][ C0] RSP: 0018:ffffffff90007ca0 EFLAGS: 00000242 [ 103.538244][ C0] RAX: 00000000000a8bf1 RBX: ffffffff819ce220 RCX: 8000000000000001 [ 103.538259][ C0] RDX: 0000000000000001 RSI: ffffffff8e9f856c RDI: ffffffff8cb02a80 [ 103.538275][ C0] RBP: ffffffff90007d78 R08: ffff8880b8233edb R09: 1ffff110170467db [ 103.538288][ C0] R10: dffffc0000000000 R11: ffffed10170467dc R12: 0000000000000000 [ 103.538300][ C0] R13: 1ffffffff2011df8 R14: 1ffffffff2000f9c R15: dffffc0000000000 [ 103.538316][ C0] ? do_idle+0x2e0/0x540 [ 103.538342][ C0] default_idle+0x9/0x20 [ 103.538358][ C0] default_idle_call+0x72/0xb0 [ 103.538375][ C0] do_idle+0x2e0/0x540 [ 103.538395][ C0] ? __pfx_do_idle+0x10/0x10 [ 103.538421][ C0] cpu_startup_entry+0x43/0x60 [ 103.538439][ C0] rest_init+0x378/0x3a0 [ 103.538458][ C0] ? __pfx_rest_init+0x10/0x10 [ 103.538484][ C0] ? __pfx_kernel_init+0x10/0x10 [ 103.538505][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 103.538528][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 103.538555][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 103.538585][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 103.538607][ C0] start_kernel+0x397/0x3e0 [ 103.538627][ C0] x86_64_start_reservations+0x24/0x30 [ 103.538651][ C0] x86_64_start_kernel+0x137/0x1b0 [ 103.538674][ C0] common_startup_64+0x13e/0x157 [ 103.538711][ C0] [ 103.538960][ T5940] FAULT_INJECTION: forcing a failure. [ 103.538960][ T5940] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.538989][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(full) [ 103.539013][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 103.539025][ T5940] Call Trace: [ 103.539033][ T5940] [ 103.539042][ T5940] dump_stack_lvl+0xe8/0x150 [ 103.539078][ T5940] should_fail_ex+0x3eb/0x540 [ 103.539113][ T5940] _copy_to_user+0x31/0xb0 [ 103.539147][ T5940] simple_read_from_buffer+0xe1/0x170 [ 103.539179][ T5940] proc_fail_nth_read+0x1bb/0x230 [ 103.539210][ T5940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.539229][ T5940] ? rw_verify_area+0x24a/0x4c0 [ 103.539272][ T5940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.539296][ T5940] vfs_read+0x213/0xa80 [ 103.539329][ T5940] ? __pfx___mutex_lock+0x10/0x10 [ 103.539369][ T5940] ? __pfx_vfs_read+0x10/0x10 [ 103.539391][ T5940] ? __fget_files+0x2a/0x420 [ 103.539410][ T5940] ? __fget_files+0x3a2/0x420 [ 103.539451][ T5940] ? __fget_files+0x2a/0x420 [ 103.539488][ T5940] ? fdget+0x1ac/0x250 [ 103.539525][ T5940] ksys_read+0x150/0x270 [ 103.539548][ T5940] ? __pfx_ksys_read+0x10/0x10 [ 103.539596][ T5940] do_syscall_64+0x171/0x540 [ 103.539630][ T5940] ? trace_irq_disable+0x3b/0x140 [ 103.539658][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.539685][ T5940] ? clear_bhb_loop+0x70/0xc0 [ 103.539704][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.539723][ T5940] RIP: 0033:0x00007f80b5f6974e [ 103.539757][ T5940] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.539775][ T5940] RSP: 002b:00007f80b6d99fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.539796][ T5940] RAX: ffffffffffffffda RBX: 00007f80b6d9a6c0 RCX: 00007f80b5f6974e [ 103.539811][ T5940] RDX: 000000000000000f RSI: 00007f80b6d9a0a0 RDI: 0000000000000004 [ 103.539824][ T5940] RBP: 00007f80b6d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.539843][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.539852][ T5940] R13: 00007f80b6226038 R14: 00007f80b6225fa0 R15: 00007ffdb5d35198 [ 103.539877][ T5940] [ 103.711622][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.817439][ T5737] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.058968][ T28] usb 2-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 104.071323][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.081730][ T28] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 104.099836][ T5747] gspca_sonixj: reg_w1 err -71 [ 104.100026][ T5747] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 104.126555][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.126588][ T28] usb 2-1: Product: syz [ 104.126606][ T28] usb 2-1: Manufacturer: syz [ 104.126624][ T28] usb 2-1: SerialNumber: syz [ 104.133500][ T5747] usb 3-1: USB disconnect, device number 3 [ 104.180223][ T28] usb-storage 2-1:1.0: USB Mass Storage device detected [ 104.206197][ T28] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 104.207124][ T28] scsi host1: usb-storage 2-1:1.0 [ 104.261556][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.396361][ T5937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.409044][ T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.422135][ T5650] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.422240][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.430938][ T5747] usb 2-1: USB disconnect, device number 2 [ 104.501581][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.544472][ T5823] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 104.547240][ T5946] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 104.796880][ T5961] FAULT_INJECTION: forcing a failure. [ 104.796880][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 104.796912][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.2.42 Not tainted syzkaller #0 PREEMPT(full) [ 104.796935][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.796951][ T5961] Call Trace: [ 104.796959][ T5961] [ 104.796969][ T5961] dump_stack_lvl+0xe8/0x150 [ 104.797008][ T5961] should_fail_ex+0x3eb/0x540 [ 104.797043][ T5961] should_failslab+0xa8/0x100 [ 104.797094][ T5961] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 104.797125][ T5961] ? kasprintf+0xe2/0x140 [ 104.797154][ T5961] ? kasprintf+0xe2/0x140 [ 104.797191][ T5961] kvasprintf+0xeb/0x1a0 [ 104.797225][ T5961] ? __pfx_kvasprintf+0x10/0x10 [ 104.797258][ T5961] ? __bfs+0x153/0x290 [ 104.797283][ T5961] ? __pfx_hlock_conflict+0x10/0x10 [ 104.797325][ T5961] kasprintf+0xe2/0x140 [ 104.797364][ T5961] ? __pfx_kasprintf+0x10/0x10 [ 104.797391][ T5961] ? __lock_acquire+0x1511/0x2de0 [ 104.797425][ T5961] ? __lock_acquire+0x1511/0x2de0 [ 104.797452][ T5961] ? __pfx_input_devnode+0x10/0x10 [ 104.797479][ T5961] device_get_devnode+0x168/0x2a0 [ 104.797514][ T5961] devtmpfs_delete_node+0xf8/0x230 [ 104.797549][ T5961] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 104.797604][ T5961] ? __pfx_klist_children_put+0x10/0x10 [ 104.797642][ T5961] ? kobject_put+0x50f/0x550 [ 104.797667][ T5961] ? _raw_spin_unlock+0x28/0x50 [ 104.797696][ T5961] ? klist_del+0xc7/0x110 [ 104.797722][ T5961] device_del+0x2ce/0x8f0 [ 104.797759][ T5961] ? __pfx_device_del+0x10/0x10 [ 104.797788][ T5961] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.797818][ T5961] cdev_device_del+0x27/0xf0 [ 104.797843][ T5961] mousedev_disconnect+0x203/0x2f0 [ 104.797883][ T5961] __input_unregister_device+0x356/0x650 [ 104.797915][ T5961] input_unregister_device+0x9b/0x100 [ 104.797943][ T5961] psmouse_disconnect+0x5b2/0x8a0 [ 104.797984][ T5961] ? __pfx_serio_driver_remove+0x10/0x10 [ 104.798010][ T5961] serio_driver_remove+0x85/0xa0 [ 104.798039][ T5961] device_release_driver_internal+0x42b/0x7d0 [ 104.798081][ T5961] drvctl_store+0xb4c/0x11e0 [ 104.798114][ T5961] ? sysfs_kf_write+0x166/0x260 [ 104.798153][ T5961] ? __pfx_sysfs_kf_write+0x10/0x10 [ 104.798185][ T5961] kernfs_fop_write_iter+0x3a4/0x540 [ 104.798221][ T5961] vfs_write+0x612/0xba0 [ 104.798261][ T5961] ? __pfx_vfs_write+0x10/0x10 [ 104.798296][ T5961] ? __fget_files+0x3a2/0x420 [ 104.798324][ T5961] ? __fget_files+0x2a/0x420 [ 104.798357][ T5961] ? fdget+0x1ac/0x250 [ 104.798395][ T5961] ksys_write+0x150/0x270 [ 104.798429][ T5961] ? __pfx_ksys_write+0x10/0x10 [ 104.798476][ T5961] do_syscall_64+0x171/0x540 [ 104.798509][ T5961] ? trace_irq_disable+0x3b/0x140 [ 104.798540][ T5961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.798563][ T5961] ? clear_bhb_loop+0x70/0xc0 [ 104.798592][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.798616][ T5961] RIP: 0033:0x00007f33d63a8f19 [ 104.798639][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.798657][ T5961] RSP: 002b:00007f33d727e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.798681][ T5961] RAX: ffffffffffffffda RBX: 00007f33d6625fa0 RCX: 00007f33d63a8f19 [ 104.798698][ T5961] RDX: 0000000000000003 RSI: 0000200000000480 RDI: 0000000000000003 [ 104.798711][ T5961] RBP: 00007f33d727e090 R08: 0000000000000000 R09: 0000000000000000 [ 104.798725][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.798738][ T5961] R13: 00007f33d6626038 R14: 00007f33d6625fa0 R15: 00007fff0ec09d68 [ 104.798777][ T5961] [ 105.277747][ T5972] CIFS: Attempting to mount //127.0.0.1/share [ 105.397093][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.530119][ T5961] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 105.541745][ T1572] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.578994][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.579052][ T28] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 105.583688][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 105.583805][ T28] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 105.614627][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.614722][ T28] usb 1-1: Product: syz [ 105.614780][ T28] usb 1-1: Manufacturer: syz [ 105.614822][ T28] usb 1-1: SerialNumber: syz [ 105.701772][ T1572] usb 2-1: device descriptor read/64, error -71 [ 105.706807][ T5978] syzkaller1: entered promiscuous mode [ 105.706836][ T5978] syzkaller1: entered allmulticast mode [ 105.725190][ T5978] FAULT_INJECTION: forcing a failure. [ 105.725190][ T5978] name failslab, interval 1, probability 0, space 0, times 0 [ 105.725275][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.2.47 Not tainted syzkaller #0 PREEMPT(full) [ 105.725346][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 105.725378][ T5978] Call Trace: [ 105.725406][ T5978] [ 105.725427][ T5978] dump_stack_lvl+0xe8/0x150 [ 105.725523][ T5978] should_fail_ex+0x3eb/0x540 [ 105.725614][ T5978] ? __alloc_skb+0x1db/0x7a0 [ 105.725680][ T5978] should_failslab+0xa8/0x100 [ 105.725773][ T5978] ? __alloc_skb+0x1db/0x7a0 [ 105.725830][ T5978] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 105.725893][ T5978] ? __alloc_skb+0x18d/0x7a0 [ 105.725977][ T5978] ? __alloc_skb+0x1db/0x7a0 [ 105.726060][ T5978] __alloc_skb+0x1db/0x7a0 [ 105.726112][ T5978] alloc_skb_with_frags+0xc6/0x760 [ 105.726153][ T5978] sock_alloc_send_pskb+0xc69/0xd90 [ 105.726204][ T5978] ? __lock_acquire+0x747/0x2de0 [ 105.726230][ T5978] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 105.726283][ T5978] ? iov_iter_advance+0x8b/0x1e0 [ 105.726369][ T5978] tun_get_user+0x9c8/0x4430 [ 105.726513][ T5978] ? aa_file_perm+0x18b/0x15f0 [ 105.726607][ T5978] ? aa_file_perm+0x4ed/0x15f0 [ 105.726681][ T5978] ? __pfx_tun_get_user+0x10/0x10 [ 105.726744][ T5978] ? __lock_acquire+0x747/0x2de0 [ 105.726823][ T5978] ? kstrtoull+0x137/0x1d0 [ 105.726939][ T5978] ? irqentry_exit+0x2a0/0x9b0 [ 105.727024][ T5978] ? irqentry_exit+0x2a0/0x9b0 [ 105.727103][ T5978] ? trace_irq_disable+0x3b/0x140 [ 105.727215][ T5978] ? tun_chr_write_iter+0xd9/0x200 [ 105.727324][ T5978] tun_chr_write_iter+0x113/0x200 [ 105.727416][ T5978] vfs_write+0x612/0xba0 [ 105.727532][ T5978] ? __pfx_vfs_write+0x10/0x10 [ 105.727615][ T5978] ? __fget_files+0x3a2/0x420 [ 105.727678][ T5978] ? __fget_files+0x2a/0x420 [ 105.727754][ T5978] ? fdget+0x1ac/0x250 [ 105.727853][ T5978] ksys_write+0x150/0x270 [ 105.727935][ T5978] ? __pfx_ksys_write+0x10/0x10 [ 105.728039][ T5978] do_syscall_64+0x171/0x540 [ 105.728122][ T5978] ? trace_irq_disable+0x3b/0x140 [ 105.728193][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.728257][ T5978] ? clear_bhb_loop+0x70/0xc0 [ 105.728330][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.728391][ T5978] RIP: 0033:0x00007f33d63a8f19 [ 105.728445][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.728487][ T5978] RSP: 002b:00007f33d727e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.728549][ T5978] RAX: ffffffffffffffda RBX: 00007f33d6625fa0 RCX: 00007f33d63a8f19 [ 105.728591][ T5978] RDX: 0000000000000036 RSI: 0000200000000740 RDI: 0000000000000004 [ 105.728630][ T5978] RBP: 00007f33d727e090 R08: 0000000000000000 R09: 0000000000000000 [ 105.728661][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.728693][ T5978] R13: 00007f33d6626038 R14: 00007f33d6625fa0 R15: 00007fff0ec09d68 [ 105.728778][ T5978] [ 106.005526][ T28] usb 1-1: Can't get UAC3 power state for id 10 [ 106.024729][ T1572] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.053069][ T28] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 106.060413][ T28] usb 1-1: 2:0: cannot get RANGE values for control 2 (id 2) [ 106.060435][ T28] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 106.060447][ T28] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 106.098364][ T5972] CIFS: VFS: cifs_mount failed w/return code = -112 [ 106.182806][ T1572] usb 2-1: device descriptor read/64, error -71 [ 106.270479][ T5984] CIFS: Attempting to mount //127.0.0.1/share [ 106.271896][ T28] usb 1-1: USB disconnect, device number 2 [ 106.301322][ T1572] usb usb2-port1: attempt power cycle [ 106.315535][ T5984] CIFS: VFS: Error connecting to socket. Aborting operation. [ 106.315604][ T5984] CIFS: VFS: cifs_mount failed w/return code = -111 [ 106.341515][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.502322][ T5650] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.502382][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.553284][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.583277][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.654606][ T1572] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.675133][ T1572] usb 2-1: device descriptor read/8, error -71 [ 106.751278][ T6003] tmpfs: Using encoding : utf8-12.1.0 [ 106.763915][ T5635] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.892364][ T5635] usb 4-1: device descriptor read/64, error -71 [ 106.911738][ T1572] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.933671][ T1572] usb 2-1: device descriptor read/8, error -71 [ 107.052175][ T1572] usb usb2-port1: unable to enumerate USB device [ 107.161538][ T5635] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.291545][ T5635] usb 4-1: device descriptor read/64, error -71 [ 107.331633][ T5747] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.403971][ T5635] usb usb4-port1: attempt power cycle [ 107.491522][ T5747] usb 3-1: Using ep0 maxpacket: 16 [ 107.493801][ T5747] usb 3-1: New USB device found: idVendor=046d, idProduct=08f3, bcdDevice=b.28 [ 107.495054][ T5747] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 107.495080][ T5747] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.495102][ T5747] usb 3-1: config 0 has no interface number 0 [ 107.497746][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.497765][ T5747] usb 3-1: Product: syz [ 107.497776][ T5747] usb 3-1: Manufacturer: syz [ 107.497786][ T5747] usb 3-1: SerialNumber: syz [ 107.501831][ T5747] usb 3-1: config 0 descriptor?? [ 107.517100][ T5747] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 107.517177][ T5747] uvcvideo 3-1:0.105: No valid video chain found. [ 107.741531][ T5635] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.762143][ T5635] usb 4-1: device descriptor read/8, error -71 [ 107.861861][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.011723][ T5635] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.013729][ T5835] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.015213][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.017852][ T5835] usb 1-1: config 0 descriptor?? [ 108.055795][ T5635] usb 4-1: device descriptor read/8, error -71 [ 108.059287][ T5835] cp210x 1-1:0.0: cp210x converter detected [ 108.162626][ T5635] usb usb4-port1: unable to enumerate USB device [ 108.318311][ T6023] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.425911][ T5835] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 108.455830][ T5835] usb 1-1: cp210x converter now attached to ttyUSB0 [ 108.622664][ T995] libceph: connect (1)[c::]:6789 error -101 [ 108.624140][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 108.628792][ T995] libceph: connect (1)[c::]:6789 error -101 [ 108.628953][ T995] libceph: mon0 (1)[c::]:6789 connect error [ 108.654295][ T6027] ceph: No mds server is up or the cluster is laggy [ 108.673980][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.675447][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.701293][ T5747] usb 1-1: USB disconnect, device number 3 [ 108.767805][ T5747] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.770822][ T5747] cp210x 1-1:0.0: device disconnected [ 109.121535][ T5635] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.267054][ T6034] FAULT_INJECTION: forcing a failure. [ 109.267054][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 109.267091][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(full) [ 109.267109][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 109.267119][ T6034] Call Trace: [ 109.267125][ T6034] [ 109.267132][ T6034] dump_stack_lvl+0xe8/0x150 [ 109.267160][ T6034] should_fail_ex+0x3eb/0x540 [ 109.267186][ T6034] should_failslab+0xa8/0x100 [ 109.267213][ T6034] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 109.267254][ T6034] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 109.267283][ T6034] ? vidtv_psi_short_event_desc_init+0x294/0x6c0 [ 109.267316][ T6034] ? vidtv_psi_short_event_desc_init+0x294/0x6c0 [ 109.267359][ T6034] kstrdup+0x42/0x100 [ 109.267377][ T6034] vidtv_psi_short_event_desc_init+0x294/0x6c0 [ 109.267406][ T6034] vidtv_psi_desc_clone+0x299/0x680 [ 109.267431][ T6034] vidtv_channel_si_init+0x898/0x15c0 [ 109.267467][ T6034] vidtv_mux_init+0x503/0x1960 [ 109.267484][ T6034] ? __mutex_lock+0x305/0x15a0 [ 109.267515][ T6034] vidtv_start_feed+0x36b/0x5a0 [ 109.267541][ T6034] ? __pfx_vidtv_start_feed+0x10/0x10 [ 109.267582][ T6034] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 109.267634][ T6034] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.267665][ T6034] dmx_section_feed_start_filtering+0x519/0x6b0 [ 109.267696][ T6034] dvb_dmxdev_filter_start+0xcdb/0x10d0 [ 109.267720][ T6034] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 109.267741][ T6034] dvb_demux_do_ioctl+0x470/0x540 [ 109.267763][ T6034] dvb_usercopy+0x199/0x2e0 [ 109.267779][ T6034] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 109.267797][ T6034] ? __pfx_dvb_usercopy+0x10/0x10 [ 109.267823][ T6034] ? __fget_files+0x2a/0x420 [ 109.267845][ T6034] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 109.267876][ T6034] dvb_demux_ioctl+0x29/0x40 [ 109.267894][ T6034] __se_sys_ioctl+0xfc/0x170 [ 109.267919][ T6034] do_syscall_64+0x171/0x540 [ 109.267949][ T6034] ? trace_irq_disable+0x3b/0x140 [ 109.267973][ T6034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.267990][ T6034] ? clear_bhb_loop+0x70/0xc0 [ 109.268010][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.268025][ T6034] RIP: 0033:0x00007f80b5fa8f19 [ 109.268041][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.268053][ T6034] RSP: 002b:00007f80b6d9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.268070][ T6034] RAX: ffffffffffffffda RBX: 00007f80b6225fa0 RCX: 00007f80b5fa8f19 [ 109.268082][ T6034] RDX: 00002000000001c0 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 109.268092][ T6034] RBP: 00007f80b6037f6d R08: 0000000000000000 R09: 0000000000000000 [ 109.268122][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.268135][ T6034] R13: 00007f80b6226038 R14: 00007f80b6225fa0 R15: 00007ffdb5d35198 [ 109.268172][ T6034] [ 109.309005][ T5635] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 109.355287][ T5635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.355334][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.503654][ T5635] usb 2-1: config 0 descriptor?? [ 109.712373][ T6036] process 'syz.0.62' launched './file0' with NULL argv: empty string added [ 109.826313][ T5635] usbhid 2-1:0.0: can't add hid device: -71 [ 109.826440][ T5635] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.847092][ T5635] usb 2-1: USB disconnect, device number 7 [ 109.882776][ T6046] overlayfs: workdir and upperdir must be separate subtrees [ 109.953486][ T6048] netlink: 9976 bytes leftover after parsing attributes in process `syz.0.64'. [ 110.132418][ T5835] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 110.155685][ T5747] usb 3-1: USB disconnect, device number 4 [ 110.284945][ T5835] usb 4-1: New USB device found: idVendor=133e, idProduct=0815, bcdDevice=0.40 [ 110.288260][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.288286][ T5835] usb 4-1: Product: syz [ 110.288302][ T5835] usb 4-1: Manufacturer: syz [ 110.288318][ T5835] usb 4-1: SerialNumber: syz [ 110.326938][ T5635] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.473146][ T5635] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 110.479339][ T5635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.479377][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.486568][ T5635] usb 2-1: config 0 descriptor?? [ 110.544542][ T5835] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 110.567298][ T5835] usb 4-1: USB disconnect, device number 7 [ 110.629568][ T6057] FAULT_INJECTION: forcing a failure. [ 110.629568][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 110.629602][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(full) [ 110.629620][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 110.629630][ T6057] Call Trace: [ 110.629650][ T6057] [ 110.629660][ T6057] dump_stack_lvl+0xe8/0x150 [ 110.629700][ T6057] should_fail_ex+0x3eb/0x540 [ 110.629737][ T6057] should_failslab+0xa8/0x100 [ 110.629769][ T6057] __kmalloc_noprof+0xf9/0x710 [ 110.629788][ T6057] ? x509_get_sig_params+0x490/0x690 [ 110.629827][ T6057] ? asymmetric_key_generate_id+0x60/0x170 [ 110.629871][ T6057] ? asymmetric_key_generate_id+0x60/0x170 [ 110.629917][ T6057] asymmetric_key_generate_id+0x60/0x170 [ 110.629947][ T6057] x509_cert_parse+0x5bb/0x7a0 [ 110.629989][ T6057] x509_key_preparse+0x64/0x6d0 [ 110.630017][ T6057] ? down_read+0x2b9/0x320 [ 110.630044][ T6057] asymmetric_key_preparse+0xb9/0x1b0 [ 110.630071][ T6057] __key_create_or_update+0x360/0xab0 [ 110.630101][ T6057] ? __pfx___key_create_or_update+0x10/0x10 [ 110.630138][ T6057] ? lookup_user_key+0x112c/0x12c0 [ 110.630183][ T6057] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 110.630226][ T6057] key_create_or_update+0x42/0x60 [ 110.630251][ T6057] __se_sys_add_key+0x349/0x420 [ 110.630297][ T6057] ? __pfx___se_sys_add_key+0x10/0x10 [ 110.630341][ T6057] ? __x64_sys_add_key+0x20/0xc0 [ 110.630377][ T6057] do_syscall_64+0x171/0x540 [ 110.630412][ T6057] ? trace_irq_disable+0x3b/0x140 [ 110.630444][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.630470][ T6057] ? clear_bhb_loop+0x70/0xc0 [ 110.630497][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.630540][ T6057] RIP: 0033:0x00007f80b5fa8f19 [ 110.630557][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.630570][ T6057] RSP: 002b:00007f80b6d9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 110.630608][ T6057] RAX: ffffffffffffffda RBX: 00007f80b6225fa0 RCX: 00007f80b5fa8f19 [ 110.630625][ T6057] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800 [ 110.630643][ T6057] RBP: 00007f80b6037f6d R08: ffffffffffffffff R09: 0000000000000000 [ 110.630657][ T6057] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 110.630669][ T6057] R13: 00007f80b6226038 R14: 00007f80b6225fa0 R15: 00007ffdb5d35198 [ 110.630721][ T6057] [ 110.887456][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.889330][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.915523][ T5635] usbhid 2-1:0.0: can't add hid device: -71 [ 110.915603][ T5635] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.937425][ T5635] usb 2-1: USB disconnect, device number 8 [ 110.963694][ T1572] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.084163][ T34] audit: type=1800 audit(1794406369.732:4): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="/" dev="fuse" ino=4 res=0 errno=-4 [ 111.114642][ T1572] usb 1-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 111.124964][ T1572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.125110][ T1572] usb 1-1: Product: syz [ 111.125361][ T1572] usb 1-1: Manufacturer: syz [ 111.125403][ T1572] usb 1-1: SerialNumber: syz [ 111.158349][ T1572] usb 1-1: config 0 descriptor?? [ 111.169162][ T1572] ch341 1-1:0.0: ch341-uart converter detected [ 111.335595][ T6071] jffs2: notice: (6071) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.376312][ T1572] usb 1-1: failed to receive control message: -121 [ 111.376378][ T1572] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 111.529746][ T6081] FAULT_INJECTION: forcing a failure. [ 111.529746][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 111.529787][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(full) [ 111.529813][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 111.529827][ T6081] Call Trace: [ 111.529835][ T6081] [ 111.529845][ T6081] dump_stack_lvl+0xe8/0x150 [ 111.529885][ T6081] should_fail_ex+0x3eb/0x540 [ 111.529920][ T6081] should_failslab+0xa8/0x100 [ 111.529956][ T6081] __kmalloc_node_noprof+0xfb/0x720 [ 111.529984][ T6081] ? lock_acquire+0x115/0x350 [ 111.530017][ T6081] ? qdisc_alloc+0x92/0x9d0 [ 111.530037][ T6081] ? qdisc_alloc+0x92/0x9d0 [ 111.530066][ T6081] qdisc_alloc+0x92/0x9d0 [ 111.530096][ T6081] qdisc_create+0x151/0x1450 [ 111.530131][ T6081] ? lockdep_rtnl_is_held+0x26/0x40 [ 111.530154][ T6081] ? qdisc_lookup+0x364/0x6c0 [ 111.530185][ T6081] tc_modify_qdisc+0x17af/0x2390 [ 111.530232][ T6081] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 111.530265][ T6081] ? __pfx_hook_capable+0x10/0x10 [ 111.530325][ T6081] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 111.530357][ T6081] rtnetlink_rcv_msg+0x7b9/0xc00 [ 111.530393][ T6081] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 111.530423][ T6081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.530456][ T6081] ? __lock_acquire+0x747/0x2de0 [ 111.530497][ T6081] netlink_rcv_skb+0x226/0x4a0 [ 111.530527][ T6081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.530565][ T6081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.530607][ T6081] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.530633][ T6081] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.530666][ T6081] netlink_unicast+0x8ef/0xa80 [ 111.530710][ T6081] netlink_sendmsg+0x7f0/0xb20 [ 111.530745][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.530775][ T6081] ? aa_sock_msg_perm+0x144/0x210 [ 111.530816][ T6081] ? apparmor_socket_sendmsg+0x98/0x360 [ 111.530843][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.530869][ T6081] sock_sendmsg_nosec+0x14e/0x190 [ 111.530897][ T6081] sock_write_iter+0x2de/0x3e0 [ 111.530920][ T6081] ? __pfx_sock_write_iter+0x10/0x10 [ 111.530972][ T6081] ? bpf_lsm_file_permission+0x9/0x20 [ 111.531001][ T6081] ? security_file_permission+0x75/0x260 [ 111.531033][ T6081] vfs_write+0x612/0xba0 [ 111.531073][ T6081] ? __pfx_vfs_write+0x10/0x10 [ 111.531106][ T6081] ? __fget_files+0x3a2/0x420 [ 111.531132][ T6081] ? __fget_files+0x2a/0x420 [ 111.531162][ T6081] ? fdget+0x1ac/0x250 [ 111.531196][ T6081] ksys_write+0x150/0x270 [ 111.531230][ T6081] ? __pfx_ksys_write+0x10/0x10 [ 111.531273][ T6081] do_syscall_64+0x171/0x540 [ 111.531306][ T6081] ? trace_irq_disable+0x3b/0x140 [ 111.531337][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.531361][ T6081] ? clear_bhb_loop+0x70/0xc0 [ 111.531389][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.531410][ T6081] RIP: 0033:0x00007f33d63a8f19 [ 111.531432][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.531449][ T6081] RSP: 002b:00007f33d727e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.531473][ T6081] RAX: ffffffffffffffda RBX: 00007f33d6625fa0 RCX: 00007f33d63a8f19 [ 111.531490][ T6081] RDX: 00000000000000a0 RSI: 0000200000000100 RDI: 0000000000000004 [ 111.531504][ T6081] RBP: 00007f33d6437f6d R08: 0000000000000000 R09: 0000000000000000 [ 111.531518][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.531531][ T6081] R13: 00007f33d6626038 R14: 00007f33d6625fa0 R15: 00007fff0ec09d68 [ 111.531567][ T6081] [ 112.007307][ T6057] device-mapper: table: 248:4: multipath: unknown path selector type (-EINVAL) [ 112.007336][ T6057] device-mapper: ioctl: error adding target to table [ 112.009136][ T28] usb 1-1: USB disconnect, device number 4 [ 112.046576][ T28] ch341 1-1:0.0: device disconnected [ 112.381235][ T6099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.381259][ T6099] IPv6: NLM_F_CREATE should be set when creating new route [ 112.381373][ T6099] IPv6: NLM_F_CREATE should be set when creating new route [ 112.381473][ T6099] IPv6: NLM_F_CREATE should be set when creating new route [ 112.491564][ T5747] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.651574][ T5747] usb 3-1: Using ep0 maxpacket: 16 [ 112.652585][ T5747] usb 3-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 112.654072][ T5747] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.654107][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.654153][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.660453][ T5747] usb 3-1: config 0 descriptor?? [ 112.887670][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 112.940854][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 112.971554][ T5737] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.039632][ T6120] FAULT_INJECTION: forcing a failure. [ 113.039632][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 113.039665][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.1.91 Not tainted syzkaller #0 PREEMPT(full) [ 113.039691][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 113.039704][ T6120] Call Trace: [ 113.039712][ T6120] [ 113.039722][ T6120] dump_stack_lvl+0xe8/0x150 [ 113.039760][ T6120] should_fail_ex+0x3eb/0x540 [ 113.039794][ T6120] should_failslab+0xa8/0x100 [ 113.039829][ T6120] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 113.039857][ T6120] ? __lock_acquire+0x747/0x2de0 [ 113.039882][ T6120] ? __kernfs_new_node+0xa9/0x980 [ 113.039904][ T6120] ? __kernfs_new_node+0xa9/0x980 [ 113.039936][ T6120] kstrdup+0x42/0x100 [ 113.039961][ T6120] __kernfs_new_node+0xa9/0x980 [ 113.039997][ T6120] ? __pfx___kernfs_new_node+0x10/0x10 [ 113.040023][ T6120] ? kernfs_root+0x1c/0x230 [ 113.040053][ T6120] ? kernfs_root+0x1c/0x230 [ 113.040075][ T6120] ? kernfs_root+0x1c/0x230 [ 113.040106][ T6120] ? kernfs_root+0x1c/0x230 [ 113.040139][ T6120] kernfs_create_dir_ns+0xfe/0x230 [ 113.040197][ T6120] sysfs_create_dir_ns+0x12f/0x2a0 [ 113.040247][ T6120] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 113.040310][ T6120] ? do_raw_spin_unlock+0xf5/0x200 [ 113.040343][ T6120] kobject_add_internal+0x622/0xcd0 [ 113.040380][ T6120] kobject_add+0x163/0x240 [ 113.040413][ T6120] ? __pfx_kobject_add+0x10/0x10 [ 113.040446][ T6120] ? get_device_parent+0x366/0x3a0 [ 113.040478][ T6120] device_add+0x3fa/0xb80 [ 113.040508][ T6120] rfkill_register+0x170/0x9b0 [ 113.040543][ T6120] nfc_register_device+0x13d/0x370 [ 113.040584][ T6120] nci_register_device+0x8a2/0xa00 [ 113.040618][ T6120] ? __pfx_nci_register_device+0x10/0x10 [ 113.040640][ T6120] ? __raw_spin_lock_init+0x45/0x100 [ 113.040678][ T6120] ? __raw_spin_lock_init+0x45/0x100 [ 113.040715][ T6120] ? __init_waitqueue_head+0xa8/0x150 [ 113.040753][ T6120] virtual_ncidev_open+0x129/0x1a0 [ 113.040780][ T6120] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 113.040802][ T6120] misc_open+0x2d5/0x350 [ 113.040834][ T6120] chrdev_open+0x4d9/0x600 [ 113.040873][ T6120] ? __pfx_chrdev_open+0x10/0x10 [ 113.040907][ T6120] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 113.040943][ T6120] ? devcgroup_check_permission+0x31/0x8f0 [ 113.040984][ T6120] ? __pfx_chrdev_open+0x10/0x10 [ 113.041018][ T6120] do_dentry_open+0x80e/0x1360 [ 113.041055][ T6120] vfs_open_consume+0x4a/0x350 [ 113.041076][ T6120] ? path_openat+0x16e1/0x20f0 [ 113.041120][ T6120] path_openat+0x16fc/0x20f0 [ 113.041175][ T6120] do_file_open+0x23e/0x4a0 [ 113.041214][ T6120] ? __pfx_do_file_open+0x10/0x10 [ 113.041270][ T6120] ? _raw_spin_unlock+0x28/0x50 [ 113.041299][ T6120] ? alloc_fd+0x6af/0x760 [ 113.041351][ T6120] do_sys_openat2+0x115/0x200 [ 113.041374][ T6120] ? __se_sys_futex+0x3a8/0x450 [ 113.041396][ T6120] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.041432][ T6120] __x64_sys_openat+0x138/0x170 [ 113.041461][ T6120] do_syscall_64+0x171/0x540 [ 113.041492][ T6120] ? trace_irq_disable+0x3b/0x140 [ 113.041519][ T6120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.041540][ T6120] ? clear_bhb_loop+0x70/0xc0 [ 113.041567][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.041588][ T6120] RIP: 0033:0x00007f0a765a8f19 [ 113.041609][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.041625][ T6120] RSP: 002b:00007f0a773f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.041648][ T6120] RAX: ffffffffffffffda RBX: 00007f0a76825fa0 RCX: 00007f0a765a8f19 [ 113.041663][ T6120] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 113.041677][ T6120] RBP: 00007f0a76637f6d R08: 0000000000000000 R09: 0000000000000000 [ 113.041690][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.041702][ T6120] R13: 00007f0a76826038 R14: 00007f0a76825fa0 R15: 00007ffde7c31548 [ 113.041737][ T6120] [ 113.045644][ T6120] kobject: kobject_add_internal failed for rfkill19 (error: -12 parent: nfc2) [ 113.048628][ T6119] random: crng reseeded on system resumption [ 113.097404][ T6124] xt_l2tp: v2 sid > 0xffff: 1245184 [ 113.124177][ T6120] xt_l2tp: v2 sid > 0xffff: 1245184 [ 113.197945][ T5737] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 113.233503][ T5737] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 113.233587][ T5737] usb 4-1: config 0 has no interface number 0 [ 113.233705][ T5737] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.304177][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.304227][ T5737] usb 4-1: Product: syz [ 113.304240][ T5737] usb 4-1: Manufacturer: syz [ 113.304253][ T5737] usb 4-1: SerialNumber: syz [ 113.402374][ T5737] usb 4-1: config 0 descriptor?? [ 113.549435][ T5747] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 113.549464][ T5747] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 113.549483][ T5747] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 113.549502][ T5747] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 113.549520][ T5747] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 113.598795][ T5737] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 113.658985][ T5747] uclogic 0003:5543:0064.0001: hiddev1,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 113.681798][ T5747] usb 3-1: USB disconnect, device number 5 [ 113.766201][ T6128] fido_id[6128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 113.891064][ T6133] FAULT_INJECTION: forcing a failure. [ 113.891064][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 113.891108][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 113.891127][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 113.891143][ T6133] Call Trace: [ 113.891149][ T6133] [ 113.891172][ T6133] dump_stack_lvl+0xe8/0x150 [ 113.891225][ T6133] should_fail_ex+0x3eb/0x540 [ 113.891280][ T6133] should_failslab+0xa8/0x100 [ 113.891319][ T6133] __kmalloc_noprof+0xf9/0x710 [ 113.891346][ T6133] ? __kmalloc_noprof+0x1a6/0x710 [ 113.891371][ T6133] ? x509_get_sig_params+0x397/0x690 [ 113.891403][ T6133] ? x509_get_sig_params+0x397/0x690 [ 113.891439][ T6133] x509_get_sig_params+0x397/0x690 [ 113.891476][ T6133] x509_cert_parse+0x514/0x7a0 [ 113.891508][ T6133] x509_key_preparse+0x64/0x6d0 [ 113.891537][ T6133] ? down_read+0x2b9/0x320 [ 113.891566][ T6133] asymmetric_key_preparse+0xb9/0x1b0 [ 113.891591][ T6133] __key_create_or_update+0x360/0xab0 [ 113.891632][ T6133] ? __pfx___key_create_or_update+0x10/0x10 [ 113.891652][ T6133] ? lookup_user_key+0x112c/0x12c0 [ 113.891712][ T6133] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 113.891753][ T6133] key_create_or_update+0x42/0x60 [ 113.891789][ T6133] __se_sys_add_key+0x349/0x420 [ 113.891817][ T6133] ? __pfx___se_sys_add_key+0x10/0x10 [ 113.891875][ T6133] ? __x64_sys_add_key+0x20/0xc0 [ 113.891911][ T6133] do_syscall_64+0x171/0x540 [ 113.891945][ T6133] ? trace_irq_disable+0x3b/0x140 [ 113.891968][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.891999][ T6133] ? clear_bhb_loop+0x70/0xc0 [ 113.892036][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.892059][ T6133] RIP: 0033:0x00007f80b5fa8f19 [ 113.892093][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.892107][ T6133] RSP: 002b:00007f80b6d9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 113.892125][ T6133] RAX: ffffffffffffffda RBX: 00007f80b6225fa0 RCX: 00007f80b5fa8f19 [ 113.892137][ T6133] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800 [ 113.892165][ T6133] RBP: 00007f80b6037f6d R08: ffffffffffffffff R09: 0000000000000000 [ 113.892181][ T6133] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 113.892195][ T6133] R13: 00007f80b6226038 R14: 00007f80b6225fa0 R15: 00007ffdb5d35198 [ 113.892231][ T6133] [ 114.482576][ T6145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.505698][ T5636] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 114.701565][ T5737] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 114.852922][ T5737] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.854572][ T5737] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.854607][ T5737] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 114.854678][ T5737] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.857644][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.857670][ T5737] usb 1-1: Product: syz [ 114.857936][ T5737] usb 1-1: Manufacturer: syz [ 114.857954][ T5737] usb 1-1: SerialNumber: syz [ 114.871366][ T5737] usb 1-1: config 0 descriptor?? [ 114.939141][ T5737] usb 1-1: selecting invalid altsetting 0 [ 115.007304][ T6150] fuse: Unknown parameter '‰·0x0000000000000005' [ 115.148076][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.148714][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.152621][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.154711][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.155823][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.157002][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.158101][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.159182][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.160525][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.161987][ T6142] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.235613][ T5737] usb 1-1: USB disconnect, device number 5 [ 115.316864][ T6143] overlayfs: failed to resolve './file0': -2 [ 115.702997][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 115.728694][ T5737] usb 4-1: USB disconnect, device number 8 [ 115.741695][ T5737] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 115.860334][ T6156] FAULT_INJECTION: forcing a failure. [ 115.860334][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 115.860386][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT(full) [ 115.860413][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 115.860427][ T6156] Call Trace: [ 115.860437][ T6156] [ 115.860447][ T6156] dump_stack_lvl+0xe8/0x150 [ 115.860489][ T6156] should_fail_ex+0x3eb/0x540 [ 115.860526][ T6156] should_failslab+0xa8/0x100 [ 115.860564][ T6156] __kmalloc_noprof+0xf9/0x710 [ 115.860590][ T6156] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 115.860619][ T6156] ? x509_get_sig_params+0x331/0x690 [ 115.860646][ T6156] ? x509_get_sig_params+0x331/0x690 [ 115.860696][ T6156] x509_get_sig_params+0x331/0x690 [ 115.860731][ T6156] x509_cert_parse+0x514/0x7a0 [ 115.860762][ T6156] x509_key_preparse+0x64/0x6d0 [ 115.860790][ T6156] ? down_read+0x2b9/0x320 [ 115.860829][ T6156] asymmetric_key_preparse+0xb9/0x1b0 [ 115.860855][ T6156] __key_create_or_update+0x360/0xab0 [ 115.860896][ T6156] ? __pfx___key_create_or_update+0x10/0x10 [ 115.860923][ T6156] ? lookup_user_key+0x112c/0x12c0 [ 115.860967][ T6156] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 115.861007][ T6156] key_create_or_update+0x42/0x60 [ 115.861040][ T6156] __se_sys_add_key+0x349/0x420 [ 115.861077][ T6156] ? __pfx___se_sys_add_key+0x10/0x10 [ 115.861120][ T6156] ? __x64_sys_add_key+0x20/0xc0 [ 115.861156][ T6156] do_syscall_64+0x171/0x540 [ 115.861190][ T6156] ? trace_irq_disable+0x3b/0x140 [ 115.861220][ T6156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.861243][ T6156] ? clear_bhb_loop+0x70/0xc0 [ 115.861271][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.861293][ T6156] RIP: 0033:0x00007fcf9d1a8f19 [ 115.861315][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.861334][ T6156] RSP: 002b:00007fcf9e035028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 115.861357][ T6156] RAX: ffffffffffffffda RBX: 00007fcf9d425fa0 RCX: 00007fcf9d1a8f19 [ 115.861374][ T6156] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800 [ 115.861392][ T6156] RBP: 00007fcf9d237f6d R08: ffffffffffffffff R09: 0000000000000000 [ 115.861405][ T6156] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 115.861418][ T6156] R13: 00007fcf9d426038 R14: 00007fcf9d425fa0 R15: 00007ffe2c0c1fc8 [ 115.861456][ T6156] [ 116.025740][ T34] audit: type=1804 audit(1794406374.662:5): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.104" name="/newroot/25/file1" dev="tmpfs" ino=166 res=1 errno=0 [ 116.145032][ T34] audit: type=1804 audit(1794406374.792:6): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.104" name="/newroot/25/file1" dev="tmpfs" ino=166 res=1 errno=0 [ 117.170654][ T6171] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.366874][ T6180] FAULT_INJECTION: forcing a failure. [ 117.366874][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 117.366909][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.1.113 Not tainted syzkaller #0 PREEMPT(full) [ 117.366935][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 117.366949][ T6180] Call Trace: [ 117.366959][ T6180] [ 117.366969][ T6180] dump_stack_lvl+0xe8/0x150 [ 117.367011][ T6180] should_fail_ex+0x3eb/0x540 [ 117.367049][ T6180] should_failslab+0xa8/0x100 [ 117.367086][ T6180] __kmalloc_noprof+0xf9/0x710 [ 117.367113][ T6180] ? x509_get_sig_params+0x490/0x690 [ 117.367142][ T6180] ? asymmetric_key_generate_id+0x60/0x170 [ 117.367183][ T6180] ? asymmetric_key_generate_id+0x60/0x170 [ 117.367229][ T6180] asymmetric_key_generate_id+0x60/0x170 [ 117.367279][ T6180] x509_cert_parse+0x5bb/0x7a0 [ 117.367312][ T6180] x509_key_preparse+0x64/0x6d0 [ 117.367341][ T6180] ? down_read+0x2b9/0x320 [ 117.367371][ T6180] asymmetric_key_preparse+0xb9/0x1b0 [ 117.367397][ T6180] __key_create_or_update+0x360/0xab0 [ 117.367439][ T6180] ? __pfx___key_create_or_update+0x10/0x10 [ 117.367467][ T6180] ? lookup_user_key+0x112c/0x12c0 [ 117.367513][ T6180] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 117.367557][ T6180] key_create_or_update+0x42/0x60 [ 117.367592][ T6180] __se_sys_add_key+0x349/0x420 [ 117.367632][ T6180] ? __pfx___se_sys_add_key+0x10/0x10 [ 117.367677][ T6180] ? __x64_sys_add_key+0x20/0xc0 [ 117.367714][ T6180] do_syscall_64+0x171/0x540 [ 117.367759][ T6180] ? trace_irq_disable+0x3b/0x140 [ 117.367792][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.367816][ T6180] ? clear_bhb_loop+0x70/0xc0 [ 117.367845][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.367869][ T6180] RIP: 0033:0x00007f0a765a8f19 [ 117.367893][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.367911][ T6180] RSP: 002b:00007f0a773f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 117.367936][ T6180] RAX: ffffffffffffffda RBX: 00007f0a76825fa0 RCX: 00007f0a765a8f19 [ 117.367953][ T6180] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800 [ 117.367969][ T6180] RBP: 00007f0a76637f6d R08: ffffffffffffffff R09: 0000000000000000 [ 117.367984][ T6180] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 117.368010][ T6180] R13: 00007f0a76826038 R14: 00007f0a76825fa0 R15: 00007ffde7c31548 [ 117.368044][ T6180] [ 118.011568][ T1572] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 118.131632][ T5737] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 118.144861][ T1572] usb 4-1: device descriptor read/64, error -71 [ 118.286989][ T5737] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 118.301727][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.301756][ T5737] usb 1-1: Product: syz [ 118.301771][ T5737] usb 1-1: Manufacturer: syz [ 118.301788][ T5737] usb 1-1: SerialNumber: syz [ 118.307187][ T5737] usb 1-1: config 0 descriptor?? [ 118.381524][ T1572] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 118.511711][ T1572] usb 4-1: device descriptor read/64, error -71 [ 118.522933][ T5737] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.523448][ T6230] FAULT_INJECTION: forcing a failure. [ 118.523448][ T6230] name failslab, interval 1, probability 0, space 0, times 0 [ 118.523477][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.2.134 Not tainted syzkaller #0 PREEMPT(full) [ 118.523503][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 118.523516][ T6230] Call Trace: [ 118.523525][ T6230] [ 118.523535][ T6230] dump_stack_lvl+0xe8/0x150 [ 118.523578][ T6230] should_fail_ex+0x3eb/0x540 [ 118.523615][ T6230] should_failslab+0xa8/0x100 [ 118.523684][ T6230] __kmalloc_noprof+0xf9/0x710 [ 118.523712][ T6230] ? hash_netportnet_create+0x2f9/0x1080 [ 118.523738][ T6230] ? hash_netportnet_create+0x2f9/0x1080 [ 118.523772][ T6230] hash_netportnet_create+0x2f9/0x1080 [ 118.523809][ T6230] ? __nla_parse+0x40/0x60 [ 118.523844][ T6230] ? __pfx_hash_netportnet_create+0x10/0x10 [ 118.523873][ T6230] ip_set_create+0xae8/0x1a50 [ 118.523905][ T6230] ? ip_set_create+0x4ef/0x1a50 [ 118.523949][ T6230] ? __pfx_ip_set_create+0x10/0x10 [ 118.523977][ T6230] ? lock_acquire+0x115/0x350 [ 118.524042][ T6230] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 118.524072][ T6230] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 118.524118][ T6230] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.524184][ T6230] ? hook_capable+0x1c3/0x5e0 [ 118.524226][ T6230] netlink_rcv_skb+0x226/0x4a0 [ 118.524256][ T6230] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.524285][ T6230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.524325][ T6230] ? bpf_lsm_capable+0x9/0x20 [ 118.524357][ T6230] ? security_capable+0x7e/0x2c0 [ 118.524392][ T6230] nfnetlink_rcv+0x2b9/0x28c0 [ 118.524426][ T6230] ? __dev_queue_xmit+0x29b/0x3920 [ 118.524453][ T6230] ? __local_bh_enable_ip+0xd6/0x140 [ 118.524483][ T6230] ? lockdep_hardirqs_on+0x7b/0x110 [ 118.524517][ T6230] ? __dev_queue_xmit+0x29b/0x3920 [ 118.524537][ T6230] ? __local_bh_enable_ip+0xd6/0x140 [ 118.524566][ T6230] ? __dev_queue_xmit+0x29b/0x3920 [ 118.524585][ T6230] ? __dev_queue_xmit+0x1efb/0x3920 [ 118.524612][ T6230] ? __dev_queue_xmit+0x29b/0x3920 [ 118.524649][ T6230] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 118.524685][ T6230] ? __pfx___dev_queue_xmit+0x10/0x10 [ 118.524722][ T6230] ? __copy_skb_header+0xa3/0x4a0 [ 118.524758][ T6230] ? __asan_memcpy+0x40/0x70 [ 118.524801][ T6230] ? __skb_clone+0x5c/0x760 [ 118.524841][ T6230] ? __skb_clone+0x4a2/0x760 [ 118.524881][ T6230] ? skb_clone+0x246/0x3a0 [ 118.524921][ T6230] ? __netlink_deliver_tap+0x681/0x6e0 [ 118.524948][ T6230] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.524985][ T6230] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.525013][ T6230] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.525047][ T6230] netlink_unicast+0x8ef/0xa80 [ 118.525093][ T6230] netlink_sendmsg+0x7f0/0xb20 [ 118.525129][ T6230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.525163][ T6230] ? aa_sock_msg_perm+0x144/0x210 [ 118.525200][ T6230] ? apparmor_socket_sendmsg+0x98/0x360 [ 118.525229][ T6230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.525257][ T6230] sock_sendmsg_nosec+0x14e/0x190 [ 118.525287][ T6230] ____sys_sendmsg+0x54e/0x850 [ 118.525327][ T6230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.525371][ T6230] ? import_iovec+0x73/0xa0 [ 118.525407][ T6230] ___sys_sendmsg+0x2a6/0x360 [ 118.525438][ T6230] ? __lock_acquire+0x747/0x2de0 [ 118.525472][ T6230] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.525509][ T6230] ? futex_wait+0x2a2/0x390 [ 118.525571][ T6230] ? __fget_files+0x3a2/0x420 [ 118.525601][ T6230] ? __fget_files+0x2a/0x420 [ 118.525650][ T6230] __x64_sys_sendmsg+0x1b1/0x290 [ 118.525688][ T6230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.525746][ T6230] do_syscall_64+0x171/0x540 [ 118.525782][ T6230] ? trace_irq_disable+0x3b/0x140 [ 118.525813][ T6230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.525838][ T6230] ? clear_bhb_loop+0x70/0xc0 [ 118.525867][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.525890][ T6230] RIP: 0033:0x00007f33d63a8f19 [ 118.525914][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.525934][ T6230] RSP: 002b:00007f33d727e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.525959][ T6230] RAX: ffffffffffffffda RBX: 00007f33d6625fa0 RCX: 00007f33d63a8f19 [ 118.525988][ T6230] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000005 [ 118.526003][ T6230] RBP: 00007f33d6437f6d R08: 0000000000000000 R09: 0000000000000000 [ 118.526016][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.526030][ T6230] R13: 00007f33d6626038 R14: 00007f33d6625fa0 R15: 00007fff0ec09d68 [ 118.526065][ T6230] [ 118.622942][ T1572] usb usb4-port1: attempt power cycle [ 119.011655][ T1572] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 119.032565][ T1572] usb 4-1: device descriptor read/8, error -71 [ 119.271591][ T1572] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 119.293141][ T1572] usb 4-1: device descriptor read/8, error -71 [ 119.381632][ T5747] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.403139][ T1572] usb usb4-port1: unable to enumerate USB device [ 119.523213][ T5747] usb 3-1: device descriptor read/64, error -71 [ 119.772744][ T5747] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.791587][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.792245][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.901511][ T5747] usb 3-1: device descriptor read/64, error -71 [ 120.012015][ T5747] usb usb3-port1: attempt power cycle [ 120.303848][ T5737] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 120.308339][ T5737] usb 1-1: USB disconnect, device number 6 [ 120.354953][ T5747] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.375087][ T5747] usb 3-1: device descriptor read/8, error -71 [ 120.612238][ T5747] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.632175][ T5747] usb 3-1: device descriptor read/8, error -71 [ 120.742519][ T5747] usb usb3-port1: unable to enumerate USB device [ 120.869732][ T6246] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.138'. [ 120.969472][ T6253] netlink: 'syz.0.140': attribute type 11 has an invalid length. [ 121.062422][ T5650] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.085368][ T6257] netlink: 'syz.0.143': attribute type 27 has an invalid length. [ 121.106825][ T6257] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 121.273899][ T6266] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.360435][ T6269] FAULT_INJECTION: forcing a failure. [ 121.360435][ T6269] name failslab, interval 1, probability 0, space 0, times 0 [ 121.360468][ T6269] CPU: 0 UID: 0 PID: 6269 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(full) [ 121.360493][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 121.360505][ T6269] Call Trace: [ 121.360514][ T6269] [ 121.360523][ T6269] dump_stack_lvl+0xe8/0x150 [ 121.360562][ T6269] should_fail_ex+0x3eb/0x540 [ 121.360598][ T6269] should_failslab+0xa8/0x100 [ 121.360631][ T6269] ? __pfx_shmem_fill_super+0x10/0x10 [ 121.360665][ T6269] __kmalloc_cache_noprof+0x9e/0x600 [ 121.360693][ T6269] ? sget_fc+0x2f3/0x1980 [ 121.360718][ T6269] ? sget_fc+0x2f3/0x1980 [ 121.360746][ T6269] ? __pfx_shmem_fill_super+0x10/0x10 [ 121.360779][ T6269] sget_fc+0x2f3/0x1980 [ 121.360813][ T6269] ? __pfx_set_anon_super_fc+0x10/0x10 [ 121.360844][ T6269] ? __pfx_shmem_fill_super+0x10/0x10 [ 121.360878][ T6269] get_tree_nodev+0x2a/0x150 [ 121.360911][ T6269] vfs_get_tree+0x92/0x2a0 [ 121.360946][ T6269] do_new_mount+0x325/0xb00 [ 121.360979][ T6269] ? __pfx_do_new_mount+0x10/0x10 [ 121.361003][ T6269] ? security_capable+0x7e/0x2c0 [ 121.361033][ T6269] ? ns_capable+0x84/0xe0 [ 121.361064][ T6269] ? path_mount+0x643/0x1070 [ 121.361097][ T6269] ? user_path_at+0xd4/0x160 [ 121.361128][ T6269] __se_sys_mount+0x31d/0x420 [ 121.361162][ T6269] ? __pfx___se_sys_mount+0x10/0x10 [ 121.361196][ T6269] ? __x64_sys_mount+0x20/0xc0 [ 121.361226][ T6269] do_syscall_64+0x171/0x540 [ 121.361259][ T6269] ? trace_irq_disable+0x3b/0x140 [ 121.361288][ T6269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.361312][ T6269] ? clear_bhb_loop+0x70/0xc0 [ 121.361340][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.361370][ T6269] RIP: 0033:0x00007f0a765a8f19 [ 121.361392][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.361408][ T6269] RSP: 002b:00007f0a773f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.361431][ T6269] RAX: ffffffffffffffda RBX: 00007f0a76825fa0 RCX: 00007f0a765a8f19 [ 121.361446][ T6269] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 0000000000000000 [ 121.361462][ T6269] RBP: 00007f0a773f2090 R08: 0000200000000680 R09: 0000000000000000 [ 121.361476][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.361489][ T6269] R13: 00007f0a76826038 R14: 00007f0a76825fa0 R15: 00007ffde7c31548 [ 121.361525][ T6269] [ 121.846513][ T6275] FAULT_INJECTION: forcing a failure. [ 121.846513][ T6275] name failslab, interval 1, probability 0, space 0, times 0 [ 121.846544][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT(full) [ 121.846568][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 121.846580][ T6275] Call Trace: [ 121.846588][ T6275] [ 121.846596][ T6275] dump_stack_lvl+0xe8/0x150 [ 121.846633][ T6275] should_fail_ex+0x3eb/0x540 [ 121.846666][ T6275] should_failslab+0xa8/0x100 [ 121.846700][ T6275] __kmalloc_node_noprof+0xfb/0x720 [ 121.846724][ T6275] ? __pfx___up_read+0x10/0x10 [ 121.846758][ T6275] ? crypto_create_tfm_node+0x81/0x3c0 [ 121.846783][ T6275] ? crypto_create_tfm_node+0x81/0x3c0 [ 121.846823][ T6275] ? crypto_spawn_alg+0x8b/0x1a0 [ 121.846880][ T6275] crypto_create_tfm_node+0x81/0x3c0 [ 121.846912][ T6275] crypto_spawn_tfm2+0x5c/0x90 [ 121.846947][ T6275] rsassa_pkcs1_init_tfm+0x42/0x90 [ 121.846972][ T6275] crypto_create_tfm_node+0x143/0x3c0 [ 121.847004][ T6275] crypto_alloc_tfm_node+0x169/0x3e0 [ 121.847042][ T6275] public_key_verify_signature+0x242/0x9e0 [ 121.847083][ T6275] ? __pfx_public_key_verify_signature+0x10/0x10 [ 121.847124][ T6275] ? asymmetric_key_generate_id+0x60/0x170 [ 121.847157][ T6275] ? asymmetric_key_id_same+0x67/0xe0 [ 121.847200][ T6275] x509_check_for_self_signed+0x326/0x430 [ 121.847232][ T6275] x509_cert_parse+0x622/0x7a0 [ 121.847262][ T6275] x509_key_preparse+0x64/0x6d0 [ 121.847287][ T6275] ? down_read+0x2b9/0x320 [ 121.847322][ T6275] asymmetric_key_preparse+0xb9/0x1b0 [ 121.847346][ T6275] __key_create_or_update+0x360/0xab0 [ 121.847383][ T6275] ? __pfx___key_create_or_update+0x10/0x10 [ 121.847408][ T6275] ? lookup_user_key+0x112c/0x12c0 [ 121.847451][ T6275] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 121.847489][ T6275] key_create_or_update+0x42/0x60 [ 121.847519][ T6275] __se_sys_add_key+0x349/0x420 [ 121.847558][ T6275] ? __pfx___se_sys_add_key+0x10/0x10 [ 121.847608][ T6275] ? __x64_sys_add_key+0x20/0xc0 [ 121.847635][ T6275] do_syscall_64+0x171/0x540 [ 121.847659][ T6275] ? trace_irq_disable+0x3b/0x140 [ 121.847682][ T6275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.847698][ T6275] ? clear_bhb_loop+0x70/0xc0 [ 121.847718][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.847735][ T6275] RIP: 0033:0x00007f80b5fa8f19 [ 121.847751][ T6275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.847764][ T6275] RSP: 002b:00007f80b6d9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 121.847781][ T6275] RAX: ffffffffffffffda RBX: 00007f80b6225fa0 RCX: 00007f80b5fa8f19 [ 121.847793][ T6275] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800 [ 121.847804][ T6275] RBP: 00007f80b6037f6d R08: ffffffffffffffff R09: 0000000000000000 [ 121.847817][ T6275] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 121.847827][ T6275] R13: 00007f80b6226038 R14: 00007f80b6225fa0 R15: 00007ffdb5d35198 [ 121.847852][ T6275] [ 122.606894][ T34] audit: type=1326 audit(1794406381.252:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.156" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33d63a8f19 code=0x0 [ 122.746419][ T5747] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.902309][ T5747] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 122.903339][ T5747] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.903362][ T5747] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.903411][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.942136][ T5747] gspca_main: spca501-2.14.0 probing 0000:0000 [ 122.963138][ T5835] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.045546][ T6304] FAULT_INJECTION: forcing a failure. [ 123.045546][ T6304] name failslab, interval 1, probability 0, space 0, times 0 [ 123.045600][ T6304] CPU: 0 UID: 0 PID: 6304 Comm: syz.3.159 Not tainted syzkaller #0 PREEMPT(full) [ 123.045618][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 123.045628][ T6304] Call Trace: [ 123.045634][ T6304] [ 123.045641][ T6304] dump_stack_lvl+0xe8/0x150 [ 123.045670][ T6304] should_fail_ex+0x3eb/0x540 [ 123.045697][ T6304] should_failslab+0xa8/0x100 [ 123.045733][ T6304] __kmalloc_node_noprof+0xfb/0x720 [ 123.045753][ T6304] ? crypto_create_tfm_node+0x81/0x3c0 [ 123.045773][ T6304] ? crypto_create_tfm_node+0x81/0x3c0 [ 123.045798][ T6304] crypto_create_tfm_node+0x81/0x3c0 [ 123.045821][ T6304] crypto_alloc_tfm_node+0x169/0x3e0 [ 123.045848][ T6304] public_key_verify_signature+0x242/0x9e0 [ 123.045878][ T6304] ? __pfx_public_key_verify_signature+0x10/0x10 [ 123.045909][ T6304] ? asymmetric_key_generate_id+0x60/0x170 [ 123.045934][ T6304] ? asymmetric_key_id_same+0x67/0xe0 [ 123.045965][ T6304] x509_check_for_self_signed+0x326/0x430 [ 123.045989][ T6304] x509_cert_parse+0x622/0x7a0 [ 123.046011][ T6304] x509_key_preparse+0x64/0x6d0 [ 123.046030][ T6304] ? down_read+0x2b9/0x320 [ 123.046050][ T6304] asymmetric_key_preparse+0xb9/0x1b0 [ 123.046068][ T6304] __key_create_or_update+0x360/0xab0 [ 123.046097][ T6304] ? __pfx___key_create_or_update+0x10/0x10 [ 123.046116][ T6304] ? lookup_user_key+0x112c/0x12c0 [ 123.046147][ T6304] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 123.046177][ T6304] key_create_or_update+0x42/0x60 [ 123.046201][ T6304] __se_sys_add_key+0x349/0x420 [ 123.046230][ T6304] ? __pfx___se_sys_add_key+0x10/0x10 [ 123.046263][ T6304] ? __x64_sys_add_key+0x20/0xc0 [ 123.046289][ T6304] do_syscall_64+0x171/0x540 [ 123.046313][ T6304] ? trace_irq_disable+0x3b/0x140 [ 123.046335][ T6304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.046352][ T6304] ? clear_bhb_loop+0x70/0xc0 [ 123.046371][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.046388][ T6304] RIP: 0033:0x00007fcf9d1a8f19 [ 123.046404][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.046417][ T6304] RSP: 002b:00007fcf9e035028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 123.046434][ T6304] RAX: ffffffffffffffda RBX: 00007fcf9d425fa0 RCX: 00007fcf9d1a8f19 [ 123.046446][ T6304] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800 [ 123.046457][ T6304] RBP: 00007fcf9d237f6d R08: ffffffffffffffff R09: 0000000000000000 [ 123.046467][ T6304] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 123.046477][ T6304] R13: 00007fcf9d426038 R14: 00007fcf9d425fa0 R15: 00007ffe2c0c1fc8 [ 123.046502][ T6304] [ 123.171947][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 123.187722][ T5835] usb 3-1: New USB device found: idVendor=17ef, idProduct=60fe, bcdDevice=0.00 [ 123.243674][ T5835] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 123.243714][ T5835] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.243742][ T5835] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.243778][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.401290][ T5835] usb 3-1: config 0 descriptor?? [ 123.456495][ T5747] gspca_spca501: reg write: error -110 [ 123.456514][ T5747] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 123.456596][ T5747] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 123.457186][ T5747] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -22 [ 123.521338][ T5747] usb 1-1: USB disconnect, device number 7 [ 123.761570][ T28] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 123.818958][ T5835] lenovo 0003:17EF:60FE.0002: unknown main item tag 0x0 [ 123.818999][ T5835] lenovo 0003:17EF:60FE.0002: unknown main item tag 0x0 [ 123.819030][ T5835] lenovo 0003:17EF:60FE.0002: unknown main item tag 0x0 [ 123.819061][ T5835] lenovo 0003:17EF:60FE.0002: unknown main item tag 0x0 [ 123.819133][ T5835] lenovo 0003:17EF:60FE.0002: unknown main item tag 0x0 [ 123.884765][ T5835] lenovo 0003:17EF:60FE.0002: hiddev0,hidraw0: USB HID v0.96 Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0 [ 123.951540][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 123.953508][ T28] usb 4-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 123.961145][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.961173][ T28] usb 4-1: Product: syz [ 123.961189][ T28] usb 4-1: Manufacturer: syz [ 123.961205][ T28] usb 4-1: SerialNumber: syz [ 124.006898][ T28] usb 4-1: config 0 descriptor?? [ 124.029571][ T28] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 124.461562][ T5737] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.611552][ T5737] usb 1-1: Using ep0 maxpacket: 32 [ 124.613284][ T5737] usb 1-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 124.614707][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.620905][ T5737] usb 1-1: config 0 descriptor?? [ 124.664877][ T5737] gspca_main: sunplus-2.14.0 probing 041e:400b [ 124.803932][ T6331] FAULT_INJECTION: forcing a failure. [ 124.803932][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 124.804001][ T6331] CPU: 1 UID: 0 PID: 6331 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT(full) [ 124.804024][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.804037][ T6331] Call Trace: [ 124.804051][ T6331] [ 124.804058][ T6331] dump_stack_lvl+0xe8/0x150 [ 124.804086][ T6331] should_fail_ex+0x3eb/0x540 [ 124.804132][ T6331] should_failslab+0xa8/0x100 [ 124.804170][ T6331] __kmalloc_node_noprof+0xfb/0x720 [ 124.804198][ T6331] ? __pfx___up_read+0x10/0x10 [ 124.804229][ T6331] ? crypto_create_tfm_node+0x81/0x3c0 [ 124.804261][ T6331] ? crypto_create_tfm_node+0x81/0x3c0 [ 124.804298][ T6331] ? crypto_spawn_alg+0x8b/0x1a0 [ 124.804337][ T6331] crypto_create_tfm_node+0x81/0x3c0 [ 124.804368][ T6331] crypto_spawn_tfm2+0x5c/0x90 [ 124.804402][ T6331] rsassa_pkcs1_init_tfm+0x42/0x90 [ 124.804420][ T6331] crypto_create_tfm_node+0x143/0x3c0 [ 124.804459][ T6331] crypto_alloc_tfm_node+0x169/0x3e0 [ 124.804504][ T6331] public_key_verify_signature+0x242/0x9e0 [ 124.804546][ T6331] ? __pfx_public_key_verify_signature+0x10/0x10 [ 124.804576][ T6331] ? asymmetric_key_generate_id+0x60/0x170 [ 124.804619][ T6331] ? asymmetric_key_id_same+0x67/0xe0 [ 124.804662][ T6331] x509_check_for_self_signed+0x326/0x430 [ 124.804699][ T6331] x509_cert_parse+0x622/0x7a0 [ 124.804722][ T6331] x509_key_preparse+0x64/0x6d0 [ 124.804741][ T6331] ? down_read+0x2b9/0x320 [ 124.804799][ T6331] asymmetric_key_preparse+0xb9/0x1b0 [ 124.804825][ T6331] __key_create_or_update+0x360/0xab0 [ 124.804863][ T6331] ? __pfx___key_create_or_update+0x10/0x10 [ 124.804891][ T6331] ? lookup_user_key+0x112c/0x12c0 [ 124.804938][ T6331] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 124.804981][ T6331] key_create_or_update+0x42/0x60 [ 124.805016][ T6331] __se_sys_add_key+0x349/0x420 [ 124.805056][ T6331] ? __pfx___se_sys_add_key+0x10/0x10 [ 124.805103][ T6331] ? __x64_sys_add_key+0x20/0xc0 [ 124.805140][ T6331] do_syscall_64+0x171/0x540 [ 124.805173][ T6331] ? trace_irq_disable+0x3b/0x140 [ 124.805204][ T6331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.805220][ T6331] ? clear_bhb_loop+0x70/0xc0 [ 124.805261][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.805286][ T6331] RIP: 0033:0x00007f0a765a8f19 [ 124.805310][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.805329][ T6331] RSP: 002b:00007f0a773f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 124.805352][ T6331] RAX: ffffffffffffffda RBX: 00007f0a76825fa0 RCX: 00007f0a765a8f19 [ 124.805368][ T6331] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000200000000800 [ 124.805388][ T6331] RBP: 00007f0a76637f6d R08: ffffffffffffffff R09: 0000000000000000 [ 124.805399][ T6331] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 124.805426][ T6331] R13: 00007f0a76826038 R14: 00007f0a76825fa0 R15: 00007ffde7c31548 [ 124.805463][ T6331] [ 124.999110][ C0] [ 125.123909][ C0] ============================= [ 125.128779][ C0] [ BUG: Invalid wait context ] [ 125.133667][ C0] syzkaller #0 Not tainted [ 125.138116][ C0] ----------------------------- [ 125.142984][ C0] pr/ttyS0/35 is trying to lock: [ 125.147940][ C0] ffff88805960dbc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 125.157492][ C0] other info that might help us debug this: [ 125.163397][ C0] context-{2:2} [ 125.166895][ C0] locks held by pr/ttyS0/35: 2, on CPU#0: [ 125.172648][ C0] #0: ffffffff902346f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 125.182545][ C0] #1: ffff88805960e118 (&kvm->srcu){.?.?}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 125.192565][ C0] stack backtrace: [ 125.196318][ C0] CPU: 0 UID: 0 PID: 35 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 125.205277][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 125.215366][ C0] Call Trace: [ 125.218681][ C0] [ 125.221560][ C0] dump_stack_lvl+0xe8/0x150 [ 125.226196][ C0] __lock_acquire+0xf5b/0x2de0 [ 125.231036][ C0] lock_acquire+0x115/0x350 [ 125.235572][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 125.241265][ C0] ? xa_load+0x1db/0x210 [ 125.245550][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 125.250799][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 125.256476][ C0] kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 125.261978][ C0] ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 125.267690][ C0] xen_timer_callback+0x109/0x220 [ 125.272770][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 125.278354][ C0] __hrtimer_run_queues+0x371/0xa10 [ 125.283601][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 125.288591][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 125.294613][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 125.300298][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.306310][ C0] RIP: 0010:handle_softirqs+0x19f/0x8d0 [ 125.311933][ C0] Code: 6c 24 24 44 0f b7 f3 48 c7 c7 00 54 4b 8c e8 58 71 9e 0a 65 66 c7 05 2a 1c 85 13 00 00 e8 d9 52 48 00 fb 48 c7 c3 c0 a0 00 90 ff ff ff ff 41 0f bc c6 41 89 c5 41 ff c5 0f 84 f9 03 00 00 48 [ 125.331571][ C0] RSP: 0018:ffffc90000007f38 EFLAGS: 00000206 [ 125.337671][ C0] RAX: 0000000000022a0a RBX: ffffffff9000a0c0 RCX: 0000000000000101 [ 125.345685][ C0] RDX: 0000000000000000 RSI: ffffffff8e9f856c RDI: ffffffff8cb02a80 [ 125.353871][ C0] RBP: 000000000000000a R08: ffffffff91e196bf R09: 1ffffffff23c32d7 [ 125.361874][ C0] R10: dffffc0000000000 R11: fffffbfff23c32d8 R12: 0000000000000000 [ 125.369863][ C0] R13: 0000000000000000 R14: 0000000000000102 R15: dffffc0000000000 [ 125.377876][ C0] ? handle_softirqs+0x197/0x8d0 [ 125.382884][ C0] __irq_exit_rcu+0xc6/0x220 [ 125.387510][ C0] irq_exit_rcu+0x9/0x30 [ 125.391794][ C0] sysvec_call_function_single+0xa3/0xc0 [ 125.397479][ C0] [ 125.400432][ C0] [ 125.403435][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 125.409460][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 125.415927][ C0] Code: f7 e8 ed 69 7a f5 f7 c3 00 02 00 00 74 05 e8 30 31 a7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 53 6b f5 65 48 8b 05 2c fa e3 08 48 85 c0 74 18 5b 41 5e c3 [ 125.435579][ C0] RSP: 0018:ffffc90000ab7ca8 EFLAGS: 00000206 [ 125.441725][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 125.449742][ C0] RDX: 0000000000000000 RSI: ffffffff8e9f856c RDI: 0000000000000001 [ 125.453797][ T6307] FAULT_INJECTION: forcing a failure. [ 125.453797][ T6307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.470777][ C0] RBP: ffffc90000ab7e18 R08: ffffffff91e196bf R09: 1ffffffff23c32d7 [ 125.478806][ C0] R10: dffffc0000000000 R11: fffffbfff23c32d8 R12: 0000000000000002 [ 125.486813][ C0] R13: ffff8880212c1f40 R14: ffffffff9c4da140 R15: dffffc0000000000 [ 125.494832][ C0] nbcon_kthread_func+0x724/0x8d0 [ 125.499903][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 125.505150][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 125.510737][ C0] ? __kthread_parkme+0x71/0x1f0 [ 125.515732][ C0] ? __kthread_parkme+0x199/0x1f0 [ 125.520817][ C0] kthread+0x38b/0x480 [ 125.524928][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 125.530533][ C0] ? __pfx_kthread+0x10/0x10 [ 125.535161][ C0] ret_from_fork+0x514/0xb70 [ 125.539792][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 125.544939][ C0] ? __switch_to+0xc78/0x1410 [ 125.549656][ C0] ? __pfx_kthread+0x10/0x10 [ 125.554273][ C0] ret_from_fork_asm+0x1a/0x30 [ 125.559095][ C0] [ 125.562151][ T6307] CPU: 1 UID: 0 PID: 6307 Comm: syz.3.160 Not tainted syzkaller #0 PREEMPT(full) [ 125.562178][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 125.562191][ T6307] Call Trace: [ 125.562198][ T6307] [ 125.562207][ T6307] dump_stack_lvl+0xe8/0x150 [ 125.562242][ T6307] should_fail_ex+0x3eb/0x540 [ 125.562277][ T6307] strncpy_from_user+0x36/0x2c0 [ 125.562307][ T6307] __se_sys_add_key+0xdb/0x420 [ 125.562341][ T6307] ? __pfx___se_sys_add_key+0x10/0x10 [ 125.562377][ T6307] ? rcu_is_watching+0x16/0xb0 [ 125.562407][ T6307] ? __x64_sys_add_key+0x20/0xc0 [ 125.562446][ T6307] do_syscall_64+0x171/0x540 [ 125.562479][ T6307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.562501][ T6307] ? clear_bhb_loop+0x70/0xc0 [ 125.562526][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.562548][ T6307] RIP: 0033:0x00007fcf9d1a8f19 [ 125.562569][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.562586][ T6307] RSP: 002b:00007fcf9e035028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 125.562610][ T6307] RAX: ffffffffffffffda RBX: 00007fcf9d425fa0 RCX: 00007fcf9d1a8f19 [ 125.562627][ T6307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002fc0 [ 125.562641][ T6307] RBP: 00007fcf9d237f6d R08: fffffffffffffffe R09: 0000000000000000 [ 125.562657][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.562670][ T6307] R13: 00007fcf9d426038 R14: 00007fcf9d425fa0 R15: 00007ffe2c0c1fc8 [ 125.562695][ T6307] [ 125.585087][ T5737] gspca_sunplus: reg_r err -32 [ 125.585154][ T5737] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 125.644861][ T28] gspca_ov534_9: reg_r err -32 [ 125.752915][ T5835] usb 3-1: USB disconnect, device number 10 [ 125.901822][ T28] gspca_ov534_9: Unknown sensor 0000 [ 125.901902][ T28] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 127.024571][ T5835] usb 4-1: USB disconnect, device number 13 [ 127.237876][ T5737] usb 1-1: USB disconnect, device number 8 [ 132.982753][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.982804][ T1320] ieee802154 phy1 wpan1: encryption failed: -22