last executing test programs: 2m5.931724982s ago: executing program 1 (id=4126): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 2m5.714239801s ago: executing program 1 (id=4127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 2m5.486954542s ago: executing program 1 (id=4128): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016800800"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m5.340004663s ago: executing program 1 (id=4129): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f0000000100)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pselect6(0x40, &(0x7f0000000340)={0x1, 0x0, 0x3, 0x272, 0x1000, 0xcbdf, 0x0, 0x2}, &(0x7f0000000400)={0x4, 0x2, 0x1, 0x9, 0x100000001, 0x1, 0x4, 0x4}, &(0x7f0000000640)={0x9, 0x4, 0x2, 0xffffffffffff8001, 0x3, 0x81, 0x5, 0x3}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x8001]}, 0x8}) getsockname$packet(r6, 0x0, &(0x7f0000000100)) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r5, &(0x7f0000000440)=[{{&(0x7f0000000540)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="57c778df", 0x4}, {&(0x7f0000000180)="ef9b510000d71636360fbe1c6d229c19a9", 0x11}, {0x0, 0x13}], 0x3}}], 0x2, 0x48014) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) 2m3.431413713s ago: executing program 1 (id=4132): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 2m2.789270689s ago: executing program 1 (id=4134): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000680)="b9a30a00000f320f01df67670f56256664660f3880982bb7d7b13e0f7982422e00000f01c3660fc7770066b891008ec00fc79d8000c0fee094"}], 0x1, 0x7e, 0x0, 0x5f) r0 = io_uring_setup(0xf83, &(0x7f0000000040)={0x0, 0xc472, 0x800, 0x1001ffff, 0xf5}) r1 = syz_clone(0x40100400, &(0x7f0000000200)="2ee8527510924f07c8e5c3ab0ec2fecf39f00f7f02159f241ead8f8697aa5d", 0x1f, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)="e9f2195a45a8d08a02f89604110eb31f11fa2f5a7c3b5287") sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x4) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) accept$inet6(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88d82, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x2, 0x5, 0x0, 0x5}, 0x20) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x81) r5 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r0], 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r8, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0xdb59ac46fb48cf57}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f00000000c0)={0xd000, 0x12000, 0x8}) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000"], 0x48) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x78) close(r9) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 29.427174458s ago: executing program 0 (id=4392): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 29.270916431s ago: executing program 0 (id=4394): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x9, &(0x7f00000001c0)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r8, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e0000000000001400038010000380"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x2000c000) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x1c) 25.662183949s ago: executing program 0 (id=4402): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000080)="01fd0000fe", 0x5, 0x2a25}]) 25.301828155s ago: executing program 0 (id=4404): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080014000700100008001300080003000800"], 0x44}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) 18.624428594s ago: executing program 0 (id=4415): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="10000000000000060100000002000000"], 0x10}}], 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/connector\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) 14.749282576s ago: executing program 0 (id=4419): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 9.801498511s ago: executing program 2 (id=4432): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = socket(0x10, 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) write(r1, &(0x7f0000000140)="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", 0xfc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffb, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe, 0x204031, r0, 0xe4776000) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 6.620982592s ago: executing program 3 (id=4437): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x8, 0x100000000, 0xca8}, {0x0, 0x0, 0x0, 0x9}, 0xfffffffd, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x4d5, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0xfe, 0x4}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}]}]}, 0x13c}}, 0x80) 6.49337364s ago: executing program 4 (id=4438): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 6.389076119s ago: executing program 3 (id=4439): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f0000000240)='grpquota\x9aa\xca\x86\x0f^\xb5\xd3\x99\xfd\xec\xf6\xb7\v\xc0JP.Q\xad\xcbu\xfc\x96\xe3\x85Z\x1a\x8fV\xd0\x80bW:1\xed\xbc\b\xc8\x17R\x04\x17i\x10\xdd\xff\xf9L\x84\xe8(\xf4Z\xf8') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x101081) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043c"], 0xa) 6.3885784s ago: executing program 4 (id=4440): syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="10000000000000060100000002000000"], 0x10}}], 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/connector\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) 4.468378954s ago: executing program 4 (id=4441): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x0, 0x0) 4.372957215s ago: executing program 2 (id=4442): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0xfd89}}, 0x1006) 4.045042506s ago: executing program 2 (id=4443): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, 0x2, 0x6, 0x303, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x4000004) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x37, '\x00', @data=0x4, 0x2}, {0x32, '\x00', @st={0x4, [{0x0, @uvalue=0xfffffffffffffffa}, {0x1, @uvalue=0x18}, {0x2, @uvalue=0x48e5e63d}, {0x0, @svalue=0x6}]}, 0x76e}]}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x800, 0x300, 0x0, 0x180, 0x0, 0x0, {}, {0x40, 0x0, 0x1}, {0x0, 0x7}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x4, 0x1}) 3.956119494s ago: executing program 2 (id=4444): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010001d0025c77000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 2.937957621s ago: executing program 3 (id=4445): ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f0000000900)={&(0x7f0000000600)=[{&(0x7f0000000180)="339df00071b81e60b70e00f71f0f3b066c1ee1328a1bf37c77ef78bfb0698cec74469512960a91038998e7687c563b21fad152e1423a69b8b8c940f05c5bd42f44298c551aaf3f97b8ca31415794eec742fc3ac10e539c319e7101fe4f711af82a933694757f541f0b1d21a3678c05b2f9e6ba5c0a6dec869ce03992ddc762478d1ae2afffde1f", 0x87}, {&(0x7f0000000980)="868b5ea429f1e874b79cdd88637c78a98b4aab1370c4bb0f517a9316d5f7c8e549c1269565bfb156276b4d3f3747c153d0a4997d8ce855a8ae7b9567c32c8c5e18bbf5980eb68095b32227bf868b723d9005d38ac26b0f85e902e06211ea2c297e0729f188e130aa80986dbf5450687fa929498e887e5a70f8d7a72bf9f78ab74eb927c914816569453cbd37fe2edb869ef6327916888562afb682d76aa0268603ae05c2ae59f614bdcebbfef02d6a5853ed678a122919e9844ac4f73162948c0333ea51883ff5cbaf2937823d52185572ea87825003bec645ce6041e26a7b", 0xdf}, {&(0x7f0000000340)}, {&(0x7f0000000480)="5587782b91ba6371ef080ee7479dbed5ce35b6fe78691edb0092cdecff8d1d45d457f4ab5031b4c62ab8df83c3398caf21f595307c6796dda8a9", 0x3a}], 0x4, 0x3, 0x0, 0xfff, 0x8001, 0x9, 0x8, 0x8}) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000000)={0x61, 0x8, 0x1, 0xff, 0xb2, 0x8, 0x8}) socket$inet6(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 2.864725297s ago: executing program 4 (id=4446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg(r3, &(0x7f00000016c0)={&(0x7f0000000000)=@phonet={0x23, 0x9, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="88dcb74ee8309490ee8ff95d", 0xc}], 0x1, &(0x7f0000000600)=[{0x10, 0x1, 0x1}], 0x10}, 0x40051) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x88}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) 2.770865568s ago: executing program 3 (id=4447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x44810}, 0x4000000) 1.595556854s ago: executing program 2 (id=4448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80) 1.456995808s ago: executing program 4 (id=4449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000000c0)={0x5c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80d}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_CMDTEST(r5, 0x8050640a, &(0x7f0000000100)={0x0, 0x30000, 0x0, 0x9, 0x40, 0x3, 0x2, 0xda, 0x80, 0xfff, 0xffffffff, 0x6, 0x0, 0x0, 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.425731642s ago: executing program 3 (id=4450): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x1c, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r8) unshare(0x8000000) r9 = semget$private(0x0, 0x4000, 0x0) semtimedop(r9, &(0x7f0000000000)=[{0x2, 0x81, 0x1800}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x20a00) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r10, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) 1.401406721s ago: executing program 2 (id=4451): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = socket(0x10, 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) write(r1, &(0x7f0000000140)="fc00000018000703ab092500090007000a070000000000060000369321000700ff2500000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffb, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe, 0x204031, r0, 0xe4776000) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 884.101355ms ago: executing program 4 (id=4452): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000005c0)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44381d31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b51df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1010}}, 0x1006) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000100)) r4 = dup(r0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 0s ago: executing program 3 (id=4453): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, 0x2, 0x6, 0x303, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x4000004) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x37, '\x00', @data=0x4, 0x2}, {0x32, '\x00', @st={0x4, [{0x0, @uvalue=0xfffffffffffffffa}, {0x1, @uvalue=0x18}, {0x2, @uvalue=0x48e5e63d}, {0x0, @svalue=0x6}]}, 0x76e}]}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x800, 0x300, 0x0, 0x180, 0x0, 0x0, {}, {0x40, 0x0, 0x1}, {0x0, 0x7}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x4, 0x1}) kernel console output (not intermixed with test programs): 50.731663][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1350.816972][T17125] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1351.044885][T14679] udevd[14679]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1351.210554][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1351.248648][ T5663] usb 5-1: USB disconnect, device number 61 [ 1351.303946][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1352.392715][ T5662] Bluetooth: hci2: command tx timeout [ 1352.683935][ T1069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.091749][T17148] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3930'. [ 1353.230887][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1354.475920][ T5662] Bluetooth: hci2: command tx timeout [ 1354.633600][ T1069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.643488][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1354.832632][T15794] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1354.856943][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1354.974590][T17173] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1354.984793][T15794] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1354.984827][T15794] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1354.986982][T15794] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1354.987012][T15794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.987032][T15794] usb 3-1: Product: syz [ 1354.987047][T15794] usb 3-1: Manufacturer: syz [ 1354.987062][T15794] usb 3-1: SerialNumber: syz [ 1355.080754][T17175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3939'. [ 1355.094808][T17173] bridge0: port 3(team0) entered disabled state [ 1355.095156][T17173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.100582][T17173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.140029][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3939'. [ 1355.202882][ T5780] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1355.343725][T15794] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1355.459412][ T5780] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1355.459450][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.473369][ T5780] usb 5-1: config 0 descriptor?? [ 1355.532177][ T5766] usb 3-1: USB disconnect, device number 52 [ 1355.599148][ T5780] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1355.620422][ T5766] usblp0: removed [ 1355.746190][T17172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.746855][T17172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.848129][T17109] udevd[17109]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1356.094067][ T1069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.209474][ T5780] gspca_cpia1: usb_control_msg 01, error -71 [ 1356.209498][ T5780] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1356.215170][ T5780] usb 5-1: USB disconnect, device number 62 [ 1356.733441][ T5662] Bluetooth: hci2: command tx timeout [ 1357.363836][T15794] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1357.593483][T15794] usb 2-1: Using ep0 maxpacket: 32 [ 1357.595834][T15794] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1357.595866][T15794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.647966][T15794] usb 2-1: config 0 descriptor?? [ 1357.671057][T15794] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1357.881970][T17207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3945'. [ 1357.901807][T17204] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1357.919645][T17204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.939468][T17208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3945'. [ 1357.942434][T17204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.119875][ T1069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.474254][T17211] block2mtd: error: cannot open device /dev/loop0 [ 1358.875678][ T5662] Bluetooth: hci2: command tx timeout [ 1359.250103][T15794] gspca_vc032x: reg_w err -71 [ 1359.250124][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250137][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250148][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250158][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250168][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250180][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250190][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250201][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250211][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250221][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250231][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250241][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250251][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250261][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250270][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250280][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250291][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250301][T15794] gspca_vc032x: I2c Bus Busy Wait 00 [ 1359.250309][T15794] gspca_vc032x: Unknown sensor... [ 1359.250396][T15794] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1359.428542][T15794] usb 2-1: USB disconnect, device number 75 [ 1359.827617][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1359.906028][T17237] fuse: Bad value for 'user_id' [ 1359.906051][T17237] fuse: Bad value for 'user_id' [ 1360.142679][ T5773] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1360.297472][ T5773] usb 1-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice= 0.40 [ 1360.297507][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.297529][ T5773] usb 1-1: Product: ࠗ [ 1360.297553][ T5773] usb 1-1: Manufacturer: ࠔ [ 1360.297570][ T5773] usb 1-1: SerialNumber: syz [ 1360.625083][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.676881][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.012096][ T5773] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1361.024303][ T5773] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1361.086302][T17111] udevd[17111]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1361.114606][ T5773] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1361.115173][ T5773] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1361.160872][ T5773] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1361.241215][T17111] udevd[17111]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1361.254816][T17255] FAULT_INJECTION: forcing a failure. [ 1361.254816][T17255] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.254856][T17255] CPU: 1 UID: 0 PID: 17255 Comm: syz.1.3959 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1361.254888][T17255] Tainted: [L]=SOFTLOCKUP [ 1361.254897][T17255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1361.254911][T17255] Call Trace: [ 1361.254920][T17255] [ 1361.254930][T17255] dump_stack_lvl+0xe8/0x150 [ 1361.254972][T17255] should_fail_ex+0x467/0x600 [ 1361.255013][T17255] should_failslab+0xa8/0x100 [ 1361.255043][T17255] __kmalloc_noprof+0xfe/0x780 [ 1361.255065][T17255] ? rcu_is_watching+0x15/0xb0 [ 1361.255093][T17255] ? tomoyo_realpath_from_path+0xef/0x640 [ 1361.255125][T17255] ? tomoyo_realpath_from_path+0xef/0x640 [ 1361.255163][T17255] tomoyo_realpath_from_path+0xef/0x640 [ 1361.255205][T17255] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1361.255232][T17255] tomoyo_path_number_perm+0x246/0x5f0 [ 1361.255260][T17255] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1361.255286][T17255] ? __lock_acquire+0x683/0x2ce0 [ 1361.255324][T17255] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1361.255352][T17255] ? hook_file_ioctl+0x1f3/0x600 [ 1361.255387][T17255] ? lockdep_hardirqs_on+0x7a/0x110 [ 1361.255435][T17255] ? __fget_files+0x2a/0x420 [ 1361.255473][T17255] ? __fget_files+0x2a/0x420 [ 1361.255497][T17255] ? __fget_files+0x3a8/0x420 [ 1361.255519][T17255] ? __fget_files+0x2a/0x420 [ 1361.255549][T17255] security_file_ioctl+0xc3/0x2a0 [ 1361.255578][T17255] __se_sys_ioctl+0x47/0x170 [ 1361.255616][T17255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.255640][T17255] do_syscall_64+0x174/0x580 [ 1361.255667][T17255] ? trace_irq_disable+0x3b/0x140 [ 1361.255691][T17255] ? clear_bhb_loop+0x40/0x90 [ 1361.255720][T17255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.255743][T17255] RIP: 0033:0x7f6815dfde99 [ 1361.255765][T17255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.255784][T17255] RSP: 002b:00007f6814056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.255809][T17255] RAX: ffffffffffffffda RBX: 00007f6816085fa0 RCX: 00007f6815dfde99 [ 1361.255826][T17255] RDX: 0000200000000180 RSI: 00000000800448d4 RDI: 0000000000000004 [ 1361.255841][T17255] RBP: 00007f6814056090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.255855][T17255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.255868][T17255] R13: 00007f6816086038 R14: 00007f6816085fa0 R15: 00007ffc8cba0c38 [ 1361.255903][T17255] [ 1361.255939][T17255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1361.589309][ T5773] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1361.664305][ T5773] usb 1-1: USB disconnect, device number 24 [ 1361.685322][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.685394][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.688440][T17111] udevd[17111]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1361.760825][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3960'. [ 1361.773781][T14720] udevd[14720]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1361.781758][T17249] vlan2: entered promiscuous mode [ 1361.781777][T17249] bridge0: entered promiscuous mode [ 1362.657633][T14679] udevd[14679]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1363.075405][T17101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.075628][T17101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.075879][T17101] bridge_slave_0: entered allmulticast mode [ 1363.080384][T17101] bridge_slave_0: entered promiscuous mode [ 1363.115084][T17101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.115217][T17101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.115553][T17101] bridge_slave_1: entered allmulticast mode [ 1363.122476][T17101] bridge_slave_1: entered promiscuous mode [ 1363.215776][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1363.552734][ T5621] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1363.682683][ T9929] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1363.759298][ T1069] bridge_slave_1: left allmulticast mode [ 1363.759338][ T1069] bridge_slave_1: left promiscuous mode [ 1363.778528][ T5621] usb 2-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice= 0.40 [ 1363.778565][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.778581][ T5621] usb 2-1: Product: ࠗ [ 1363.778591][ T5621] usb 2-1: Manufacturer: ࠔ [ 1363.778602][ T5621] usb 2-1: SerialNumber: syz [ 1363.828289][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.850571][ T9929] usb 3-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice= 0.40 [ 1363.850605][ T9929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.850630][ T9929] usb 3-1: Product: ࠗ [ 1363.850645][ T9929] usb 3-1: Manufacturer: ࠔ [ 1363.850662][ T9929] usb 3-1: SerialNumber: syz [ 1364.015632][ T1069] bridge_slave_0: left allmulticast mode [ 1364.015674][ T1069] bridge_slave_0: left promiscuous mode [ 1364.080524][T17284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.090377][T17284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.137118][T17286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.137573][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.139109][ T5621] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1364.139690][ T5621] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1364.141948][T17286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.190181][ T5621] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1364.190567][ T5621] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1364.214350][ T9929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1364.214888][ T9929] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1364.221133][ T5621] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1364.289576][ T5621] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1364.290380][ T9929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1364.290910][ T9929] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1364.329341][ T9929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1364.353084][ T5621] usb 2-1: USB disconnect, device number 76 [ 1364.476411][T14679] udevd[14679]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1364.560844][ T9929] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1364.578039][ T9929] usb 3-1: USB disconnect, device number 53 [ 1364.669170][T14720] udevd[14720]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1364.779442][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 1365.158936][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1365.190633][T17301] Bluetooth: MGMT ver 1.23 [ 1365.259545][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1365.465617][T17305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1365.540629][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1367.013483][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.034861][ T1069] bond_slave_0: left allmulticast mode [ 1367.073399][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.093275][ T1069] bond_slave_1: left allmulticast mode [ 1367.095228][ T1069] bond0 (unregistering): Released all slaves [ 1367.108172][ T1069] bond1 (unregistering): Released all slaves [ 1367.134018][ T1069] bond2 (unregistering): Released all slaves [ 1367.196527][T17101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.489503][T17304] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1367.582837][T17101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.652806][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3983'. [ 1367.711888][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1368.846975][ T1069] tipc: Disabling bearer [ 1369.068996][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3989'. [ 1369.164337][ T1069] tipc: Left network mode [ 1369.231888][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1369.418021][T17101] team0: Port device team_slave_0 added [ 1369.440711][T17101] team0: Port device team_slave_1 added [ 1369.516826][T14720] udevd[14720]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1369.611563][T17344] Bluetooth: MGMT ver 1.23 [ 1369.636259][T17101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.636278][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.636311][T17101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.640865][T17101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.640884][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.640917][T17101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.812225][T17346] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 1369.826064][T17346] comedi comedi0: 8255: I/O base address not correctly aligned [ 1370.041879][ T5621] IPVS: starting estimator thread 0... [ 1370.132891][T17349] IPVS: using max 8 ests per chain, 19200 per kthread [ 1370.148831][T17341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.144616][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1373.163944][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1373.219301][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1373.237941][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1373.316213][T17368] udevd[17368]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1374.005983][T17361] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1374.007152][T17361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.007992][T17361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.183855][T17363] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1375.195904][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1375.406943][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1375.599359][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1375.599761][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1375.602771][ T5780] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1375.724388][T17101] hsr_slave_0: entered promiscuous mode [ 1375.733127][T17415] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4003'. [ 1375.733328][T17101] hsr_slave_1: entered promiscuous mode [ 1375.740512][T17101] debugfs: 'hsr0' already exists in 'hsr' [ 1375.740590][T17101] Cannot create hsr debugfs directory [ 1375.812844][ T5780] usb 3-1: Using ep0 maxpacket: 8 [ 1375.815184][ T5780] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1375.815227][ T5780] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1375.815278][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1375.815311][ T5780] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1375.815341][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1375.815370][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1375.815400][ T5780] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1375.815775][ T5780] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1375.817211][ T5780] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1375.817252][ T5780] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1375.817296][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1375.817327][ T5780] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1375.817355][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1375.817386][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1375.817415][ T5780] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1375.817454][ T5780] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1375.827158][ T5780] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1375.827200][ T5780] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1375.827245][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1375.827277][ T5780] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1375.827306][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1375.827335][ T5780] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1375.827364][ T5780] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1375.827395][ T5780] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1375.836788][ T5780] usb 3-1: string descriptor 0 read error: -22 [ 1375.836936][ T5780] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1375.836963][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.163868][ T5780] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1376.376969][ T5780] usb 3-1: USB disconnect, device number 54 [ 1379.030333][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1379.242821][ T1069] hsr_slave_0: left promiscuous mode [ 1379.248786][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1379.282957][ T1069] hsr_slave_1: left promiscuous mode [ 1379.285477][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.285499][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.323625][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.323659][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.416054][ T1069] veth1_macvtap: left promiscuous mode [ 1379.416132][ T1069] veth0_macvtap: left promiscuous mode [ 1379.416305][ T1069] veth1_vlan: left promiscuous mode [ 1379.416429][ T1069] veth0_vlan: left promiscuous mode [ 1381.746011][ T1069] IPVS: stop unused estimator thread 0... [ 1383.044666][T17101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1383.101053][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1383.112090][T17101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1383.308082][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1383.320283][T17101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1383.533637][ T9929] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1383.590547][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1383.648859][T17101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1383.680582][T17511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1383.697211][T17101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1383.697681][T17510] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1383.702725][ T9929] usb 1-1: Using ep0 maxpacket: 8 [ 1383.714416][ T9929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.714489][ T9929] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1383.714516][ T9929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.764140][T17510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1383.767869][ T9929] usb 1-1: config 0 descriptor?? [ 1383.794760][ T9929] rndis_host 1-1:0.0: missing cdc header descriptor [ 1383.796092][ T9929] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 1383.796114][ T9929] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 1383.796153][ T9929] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 1383.919811][T17368] udevd[17368]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1383.978131][ T9929] usb 1-1: USB disconnect, device number 25 [ 1384.235485][T17101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.317816][T17101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.346297][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.346396][ T9481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.426479][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.426619][ T9481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.235611][T17101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.326035][T17101] veth0_vlan: entered promiscuous mode [ 1385.436202][T17101] veth1_vlan: entered promiscuous mode [ 1385.541942][T17101] veth0_macvtap: entered promiscuous mode [ 1385.590795][T17101] veth1_macvtap: entered promiscuous mode [ 1385.658736][T17101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.710333][T17101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.751902][T17011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.752191][T17011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.752444][T17011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.891749][T17011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.697583][ T8926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.697605][ T8926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.159029][ T8926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.159052][ T8926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.565689][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1390.674108][ T5621] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1390.832678][ T5621] usb 4-1: Using ep0 maxpacket: 16 [ 1390.835701][ T5621] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1390.835738][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1390.840808][ T5621] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1390.840840][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.840862][ T5621] usb 4-1: Product: syz [ 1390.840879][ T5621] usb 4-1: Manufacturer: syz [ 1390.840896][ T5621] usb 4-1: SerialNumber: syz [ 1390.907992][ T5621] usb 4-1: config 0 descriptor?? [ 1390.935771][ T5621] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1390.935799][ T5621] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1391.179602][T17593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.190320][T17593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.674397][ T5621] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1391.679733][ T5621] em28xx 4-1:0.0: Config register raw data: 0xbe [ 1391.679760][ T5621] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1391.679778][ T5621] em28xx 4-1:0.0: No AC97 audio processor [ 1391.847230][T17368] udevd[17368]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1393.551488][ T5621] usb 4-1: USB disconnect, device number 82 [ 1393.701881][T17635] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1393.749878][T17630] udevd[17630]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1393.797464][ T5875] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1393.922690][T10332] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 1394.022785][ T5621] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1394.042735][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 1394.045154][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.045180][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.045197][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1394.045345][ T5875] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1394.045371][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.101124][T10332] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1394.101170][T10332] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1394.101211][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1394.101240][T10332] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1394.101274][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1394.101303][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1394.101332][T10332] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1394.101362][T10332] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1394.113816][T10332] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1394.113861][T10332] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1394.113917][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1394.113945][T10332] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1394.113971][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1394.114000][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1394.114034][T10332] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1394.114063][T10332] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1394.116357][ T5875] usb 5-1: config 0 descriptor?? [ 1394.172597][ T5621] usb 2-1: Using ep0 maxpacket: 32 [ 1394.197774][T10332] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1394.197826][T10332] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1394.197871][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1394.197900][T10332] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1394.197928][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1394.197957][T10332] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1394.197987][T10332] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1394.198016][T10332] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1394.215316][ T5621] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1394.308310][ T5621] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1394.327331][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.327359][ T5621] usb 2-1: Product: syz [ 1394.327374][ T5621] usb 2-1: Manufacturer: syz [ 1394.327388][ T5621] usb 2-1: SerialNumber: syz [ 1394.478708][ T5621] usb 2-1: config 0 descriptor?? [ 1394.495458][T17635] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1394.510203][T10332] usb 1-1: string descriptor 0 read error: -22 [ 1394.510371][T10332] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1394.510399][T10332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.536966][ T5621] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1394.582320][T10332] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1394.785540][T17635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.786190][T17635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.822706][T17628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.823502][T17628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.856053][ T5780] usb 2-1: USB disconnect, device number 77 [ 1395.370856][ T5875] usbhid 5-1:0.0: can't add hid device: -71 [ 1395.371006][ T5875] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1396.232122][T17633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.321059][T17633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.390840][ T5875] usb 5-1: USB disconnect, device number 63 [ 1396.403356][ T9929] usb 1-1: USB disconnect, device number 26 [ 1396.837301][T17372] udevd[17372]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1396.867127][T17644] udevd[17644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1397.001663][T17667] netlink: 'syz.2.4029': attribute type 20 has an invalid length. [ 1397.001691][T17667] IPv6: NLM_F_CREATE should be specified when creating new route [ 1397.252650][ T9929] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1397.419269][ T9929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1397.419307][ T9929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1397.419338][ T9929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 255, setting to 64 [ 1397.427083][T17673] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4036'. [ 1397.478436][ T9929] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1397.478471][ T9929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.478494][ T9929] usb 3-1: Product: syz [ 1397.478511][ T9929] usb 3-1: Manufacturer: syz [ 1397.478528][ T9929] usb 3-1: SerialNumber: syz [ 1397.526935][ T9929] usb 3-1: config 0 descriptor?? [ 1397.528101][T17667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1397.884506][T17677] FAULT_INJECTION: forcing a failure. [ 1397.884506][T17677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.884547][T17677] CPU: 1 UID: 0 PID: 17677 Comm: syz.3.4037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1397.884579][T17677] Tainted: [L]=SOFTLOCKUP [ 1397.884613][T17677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1397.884629][T17677] Call Trace: [ 1397.884639][T17677] [ 1397.884649][T17677] dump_stack_lvl+0xe8/0x150 [ 1397.884690][T17677] should_fail_ex+0x467/0x600 [ 1397.884733][T17677] _copy_from_user+0x2d/0xb0 [ 1397.884764][T17677] do_fb_ioctl+0x327/0x750 [ 1397.884794][T17677] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1397.884842][T17677] ? __asan_memset+0x22/0x50 [ 1397.884883][T17677] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1397.884919][T17677] ? __fget_files+0x3a8/0x420 [ 1397.884945][T17677] ? __fget_files+0x2a/0x420 [ 1397.884974][T17677] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1397.884996][T17677] ? __pfx_fb_ioctl+0x10/0x10 [ 1397.885031][T17677] __se_sys_ioctl+0xff/0x170 [ 1397.885064][T17677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.885094][T17677] do_syscall_64+0x174/0x580 [ 1397.885123][T17677] ? trace_irq_disable+0x3b/0x140 [ 1397.885148][T17677] ? clear_bhb_loop+0x40/0x90 [ 1397.885178][T17677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.885201][T17677] RIP: 0033:0x7f36c566de99 [ 1397.885223][T17677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.885244][T17677] RSP: 002b:00007f36c38c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1397.885269][T17677] RAX: ffffffffffffffda RBX: 00007f36c58f5fa0 RCX: 00007f36c566de99 [ 1397.885286][T17677] RDX: 00002000000001c0 RSI: 0000000000004605 RDI: 0000000000000003 [ 1397.885300][T17677] RBP: 00007f36c38c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.885314][T17677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.885327][T17677] R13: 00007f36c58f6038 R14: 00007f36c58f5fa0 R15: 00007ffc0193c4a8 [ 1397.885362][T17677] [ 1397.989325][ T9929] rc_core: IR keymap rc-streamzap not found [ 1397.989379][ T9929] Registered IR keymap rc-empty [ 1398.048665][ T9929] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1398.125404][ T9929] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 1398.325129][T14591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1398.464110][T14591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1398.470803][T14591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1398.497789][T14591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1398.501464][T14591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1398.812614][ T5773] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1399.004261][ T5773] usb 4-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice= 0.40 [ 1399.004296][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.004320][ T5773] usb 4-1: Product: ࠗ [ 1399.004337][ T5773] usb 4-1: Manufacturer: ࠔ [ 1399.004354][ T5773] usb 4-1: SerialNumber: syz [ 1399.365706][T17683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.429847][T17683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.540053][ T9929] usb 3-1: USB disconnect, device number 55 [ 1399.595740][ T5773] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1399.599123][ T5773] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1399.645260][ T5773] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1399.645924][ T5773] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1399.675832][ T5773] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1399.865169][ T5773] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1399.885794][ T5773] usb 4-1: USB disconnect, device number 83 [ 1400.099776][T17372] udevd[17372]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1400.115862][T17646] udevd[17646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1400.755179][ T5662] Bluetooth: hci3: command tx timeout [ 1401.604094][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'. [ 1401.653577][T17712] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1401.706678][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1401.922613][ T5773] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1402.076944][ T5621] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1402.077139][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 1402.131591][ T5773] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1402.167863][ T5773] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1402.167897][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.167919][ T5773] usb 1-1: Product: syz [ 1402.167935][ T5773] usb 1-1: Manufacturer: syz [ 1402.167951][ T5773] usb 1-1: SerialNumber: syz [ 1402.221437][ T5773] usb 1-1: config 0 descriptor?? [ 1402.228606][T17712] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1402.249627][ T5773] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1402.275131][ T5621] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 1402.275178][ T5621] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 1402.275222][ T5621] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.275246][ T5621] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1402.275275][ T5621] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1402.275310][ T5621] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1402.275335][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.356851][ T5621] usb 4-1: config 0 descriptor?? [ 1402.454939][ T5621] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1402.501169][T17712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.518403][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1402.542126][T17712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.674364][ T5766] usb 4-1: USB disconnect, device number 84 [ 1402.757435][ T5773] usb 1-1: USB disconnect, device number 27 [ 1402.792834][T14591] Bluetooth: hci3: command tx timeout [ 1402.811787][T17678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.811915][T17678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.828123][T17678] bridge_slave_0: entered allmulticast mode [ 1402.862255][T17678] bridge_slave_0: entered promiscuous mode [ 1402.921418][T17678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.921546][T17678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.921769][T17678] bridge_slave_1: entered allmulticast mode [ 1402.944135][T17630] udevd[17630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1402.983683][T17678] bridge_slave_1: entered promiscuous mode [ 1403.228446][T17678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.252457][T17678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.500501][T17678] team0: Port device team_slave_0 added [ 1403.501263][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1403.541741][T17678] team0: Port device team_slave_1 added [ 1403.706936][T17678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.706956][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.706987][T17678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.878206][T17678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.878226][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.878255][T17678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.652302][ T5662] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1404.682856][ T5662] Bluetooth: hci0: command 0x0c1a tx timeout [ 1404.782325][T14591] Bluetooth: hci5: command 0x0406 tx timeout [ 1404.872746][T14591] Bluetooth: hci3: command tx timeout [ 1405.207139][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1405.292330][T17751] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4054'. [ 1405.556027][T17678] hsr_slave_0: entered promiscuous mode [ 1405.561794][T17678] hsr_slave_1: entered promiscuous mode [ 1405.568523][T17678] debugfs: 'hsr0' already exists in 'hsr' [ 1405.568555][T17678] Cannot create hsr debugfs directory [ 1405.683483][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1406.816299][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'. [ 1406.952696][T15449] Bluetooth: hci3: command tx timeout [ 1407.024622][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1407.482422][T17771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4061'. [ 1408.535310][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1408.547762][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1409.297804][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1410.181790][T17788] netlink: 'syz.1.4065': attribute type 106 has an invalid length. [ 1413.032558][ T5780] IPVS: starting estimator thread 0... [ 1413.162755][T17805] IPVS: using max 6 ests per chain, 14400 per kthread [ 1413.587657][ T5773] IPVS: starting estimator thread 0... [ 1413.629867][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1413.631024][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1413.672670][T17812] IPVS: using max 8 ests per chain, 19200 per kthread [ 1413.747629][T17815] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1413.852245][T17678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.926236][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1413.953035][T17818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4070'. [ 1414.219596][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1414.464441][T17824] netlink: 'syz.1.4074': attribute type 20 has an invalid length. [ 1414.733079][T15794] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1414.911724][T15794] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1414.911763][T15794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1414.911794][T15794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 255, setting to 64 [ 1414.954650][T15794] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1414.954694][T15794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.954717][T15794] usb 2-1: Product: syz [ 1414.954734][T15794] usb 2-1: Manufacturer: syz [ 1414.954752][T15794] usb 2-1: SerialNumber: syz [ 1415.016137][T15794] usb 2-1: config 0 descriptor?? [ 1415.054744][T17824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1416.052599][T15794] rc_core: IR keymap rc-streamzap not found [ 1416.052624][T15794] Registered IR keymap rc-empty [ 1416.054651][T15794] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1416.059239][T15794] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 1417.634155][T17678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.714737][T15794] usb 2-1: USB disconnect, device number 78 [ 1418.773798][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1419.924688][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1419.951395][T17678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.044810][T17861] ip6erspan0: entered allmulticast mode [ 1420.093105][T17864] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1420.102237][T17864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4086'. [ 1421.346835][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1421.423983][T17881] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1421.734700][ T5766] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1421.778373][ T5773] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1422.741920][ T5766] usb 4-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice= 0.40 [ 1422.741952][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.741973][ T5766] usb 4-1: Product: ࠗ [ 1422.741987][ T5766] usb 4-1: Manufacturer: ࠔ [ 1422.742002][ T5766] usb 4-1: SerialNumber: syz [ 1422.865580][ T5773] usb 3-1: Using ep0 maxpacket: 32 [ 1422.921409][ T5773] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1422.932389][ T5773] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1422.932423][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.932447][ T5773] usb 3-1: Product: syz [ 1422.932638][ T5773] usb 3-1: Manufacturer: syz [ 1422.932656][ T5773] usb 3-1: SerialNumber: syz [ 1423.034299][ T5773] usb 3-1: config 0 descriptor?? [ 1423.038754][T17882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1423.082287][ T5773] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.114448][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.114508][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.177709][T17368] udevd[17368]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1423.310431][T17882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.311025][T17882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.427689][T17368] udevd[17368]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1423.513560][ T5766] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.514120][ T5766] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1423.533577][ T5766] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.534022][ T5766] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1423.566184][ T5766] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.636021][T17678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.799735][ T5766] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1423.834710][ T5766] usb 4-1: USB disconnect, device number 85 [ 1423.854526][T17896] bond_slave_1: entered allmulticast mode [ 1423.879007][ T5780] usb 3-1: USB disconnect, device number 56 [ 1424.097727][T17646] udevd[17646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1424.466435][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1426.282181][T17910] tipc: Enabling of bearer rejected, failed to enable media [ 1426.444727][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1428.026227][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1428.527878][T17678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1428.735538][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1428.737120][T17678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1429.697207][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1429.786525][T17678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1429.878058][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1430.018703][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1430.020589][T17678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1430.132200][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1430.268669][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1430.478604][T15449] Bluetooth: hci0: command 0x0c1a tx timeout [ 1432.225919][T17952] tipc: Enabling of bearer rejected, failed to enable media [ 1432.510522][T17678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.711051][T17678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.776144][T17011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.778075][T17011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.846982][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.881156][ T8933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.205317][T17959] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1433.692700][ T5773] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1433.882708][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 1433.907199][ T5773] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1433.934798][ T5773] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1433.934833][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.934857][ T5773] usb 1-1: Product: syz [ 1433.934873][ T5773] usb 1-1: Manufacturer: syz [ 1433.934888][ T5773] usb 1-1: SerialNumber: syz [ 1433.976839][ T5773] usb 1-1: config 0 descriptor?? [ 1433.982743][T17962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1434.023402][ T5773] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1435.657922][ T5780] usb 1-1: USB disconnect, device number 28 [ 1436.657388][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1436.862678][ T9929] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1436.933997][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1437.013597][T17993] tipc: Enabling of bearer rejected, failed to enable media [ 1437.075938][ T9929] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 1437.075970][ T9929] usb 4-1: config 0 has no interface number 1 [ 1437.076038][ T9929] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1437.076065][ T9929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.129188][ T9929] usb 4-1: config 0 descriptor?? [ 1437.338856][ T9929] usb 4-1: Could not set interface, error -71 [ 1437.426650][ T9929] usb 4-1: USB disconnect, device number 86 [ 1437.746087][T17678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.896085][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1439.009995][T17678] veth0_vlan: entered promiscuous mode [ 1439.044874][T17678] veth1_vlan: entered promiscuous mode [ 1439.140537][T17358] udevd[17358]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1439.228852][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1439.269766][T17678] veth0_macvtap: entered promiscuous mode [ 1439.352821][T17678] veth1_macvtap: entered promiscuous mode [ 1439.449310][T17678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1439.475836][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1439.482403][T17678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1439.556278][ T8926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.556793][ T8926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.557082][ T8926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.557126][ T8926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.644257][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1440.828132][T18033] tipc: Enabling of bearer rejected, failed to enable media [ 1441.640260][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1441.973129][ T8912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.973154][ T8912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.207891][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1443.415568][T18056] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1443.535442][ T9468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.535458][ T9468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.101043][T18061] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1444.480302][T18066] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1444.522790][ T9929] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1444.572628][ T9] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1444.703238][ T9929] usb 3-1: Using ep0 maxpacket: 32 [ 1444.705989][ T9929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1444.714252][ T9929] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1444.714287][ T9929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.714332][ T9929] usb 3-1: Product: syz [ 1444.714373][ T9929] usb 3-1: Manufacturer: syz [ 1444.714409][ T9929] usb 3-1: SerialNumber: syz [ 1444.771035][ T9929] usb 3-1: config 0 descriptor?? [ 1444.779135][T18061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1444.841876][ T9929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1445.349019][ T9929] usb 3-1: USB disconnect, device number 57 [ 1446.367179][T18075] tipc: Enabling of bearer rejected, failed to enable media [ 1449.492632][T15794] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1449.643793][T15794] usb 3-1: Using ep0 maxpacket: 8 [ 1449.649342][T15794] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1449.650611][T15794] usb 3-1: config 7 has an invalid descriptor of length 103, skipping remainder of the config [ 1449.650639][T15794] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1449.688661][T15794] usb 3-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=d4.99 [ 1449.688699][T15794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.688715][T15794] usb 3-1: Product: syz [ 1449.688726][T15794] usb 3-1: Manufacturer: syz [ 1449.688738][T15794] usb 3-1: SerialNumber: syz [ 1450.381855][T18100] ip6erspan0: entered allmulticast mode [ 1451.269868][T17646] udevd[17646]: symlink '../../loop1' '/dev/disk/by-diskseq/95.tmp-b7:1' failed: Read-only file system [ 1451.649555][T18105] ieee802154 phy0 wpan0: encryption failed: -126 [ 1451.661818][T18105] ieee802154 phy0 wpan0: encryption failed: -126 [ 1452.116249][T15794] usb 3-1: USB disconnect, device number 58 [ 1452.188145][T15449] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1452.262160][T15449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1452.265915][T15449] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1452.288755][T15449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1452.381330][T15449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1452.853712][T18118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4154'. [ 1453.189740][ T36] audit: type=1326 audit(1452.779:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.189801][ T36] audit: type=1326 audit(1452.779:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.281485][ T36] audit: type=1326 audit(1452.799:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.281557][ T36] audit: type=1326 audit(1452.849:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.290007][ T36] audit: type=1326 audit(1452.879:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.290145][ T36] audit: type=1326 audit(1452.879:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.312815][ T36] audit: type=1326 audit(1452.899:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.314547][ T36] audit: type=1326 audit(1452.899:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.317678][ T36] audit: type=1326 audit(1452.909:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.317850][ T36] audit: type=1326 audit(1452.909:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18129 comm="syz.3.4159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c566de99 code=0x7ffc0000 [ 1453.838193][T18138] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1453.899625][T18138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1454.169080][T18155] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1454.534371][ T5766] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1454.658183][T14591] Bluetooth: hci4: command tx timeout [ 1454.734617][ T5766] usb 1-1: Using ep0 maxpacket: 32 [ 1454.752664][ T5766] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1454.765043][ T5766] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1454.765072][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.765092][ T5766] usb 1-1: Product: syz [ 1454.765107][ T5766] usb 1-1: Manufacturer: syz [ 1454.765122][ T5766] usb 1-1: SerialNumber: syz [ 1454.863404][ T5766] usb 1-1: config 0 descriptor?? [ 1454.864192][T18155] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1454.897891][ T5766] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1455.036200][ T8926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.429489][T18169] FAULT_INJECTION: forcing a failure. [ 1455.429489][T18169] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.429533][T18169] CPU: 0 UID: 0 PID: 18169 Comm: syz.3.4171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1455.429559][T18169] Tainted: [L]=SOFTLOCKUP [ 1455.429566][T18169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1455.429579][T18169] Call Trace: [ 1455.429586][T18169] [ 1455.429594][T18169] dump_stack_lvl+0xe8/0x150 [ 1455.429629][T18169] should_fail_ex+0x467/0x600 [ 1455.429664][T18169] should_failslab+0xa8/0x100 [ 1455.429689][T18169] kmem_cache_alloc_noprof+0xa4/0x650 [ 1455.429708][T18169] ? __inet_bhash2_update_saddr+0x1b8/0x2010 [ 1455.429735][T18169] ? __inet_bhash2_update_saddr+0x1b8/0x2010 [ 1455.429765][T18169] __inet_bhash2_update_saddr+0x1b8/0x2010 [ 1455.429797][T18169] ? tcp_chrono_stop+0x2e7/0x6f0 [ 1455.429826][T18169] ? tcp_write_queue_purge+0x257/0x360 [ 1455.429849][T18169] ? tcp_fastopen_active_disable_ofo_check+0x57/0x750 [ 1455.429878][T18169] tcp_disconnect+0x4aa/0x2040 [ 1455.429900][T18169] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1455.429926][T18169] __inet_stream_connect+0x329/0xe00 [ 1455.429966][T18169] ? __pfx___inet_stream_connect+0x10/0x10 [ 1455.429993][T18169] ? __local_bh_enable+0x1e1/0x2f0 [ 1455.430028][T18169] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1455.430051][T18169] ? lockdep_hardirqs_on+0x7a/0x110 [ 1455.430079][T18169] inet_stream_connect+0x66/0xa0 [ 1455.430110][T18169] __sys_connect+0x336/0x470 [ 1455.430134][T18169] ? __pfx___sys_connect+0x10/0x10 [ 1455.430164][T18169] ? __pfx_ksys_write+0x10/0x10 [ 1455.430192][T18169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.430213][T18169] __x64_sys_connect+0x7a/0x90 [ 1455.430234][T18169] do_syscall_64+0x174/0x580 [ 1455.430256][T18169] ? trace_irq_disable+0x3b/0x140 [ 1455.430275][T18169] ? clear_bhb_loop+0x40/0x90 [ 1455.430298][T18169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.430316][T18169] RIP: 0033:0x7f36c566de99 [ 1455.430334][T18169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.430350][T18169] RSP: 002b:00007f36c38c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1455.430370][T18169] RAX: ffffffffffffffda RBX: 00007f36c58f5fa0 RCX: 00007f36c566de99 [ 1455.430384][T18169] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 1455.430396][T18169] RBP: 00007f36c38c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.430407][T18169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.430418][T18169] R13: 00007f36c58f6038 R14: 00007f36c58f5fa0 R15: 00007ffc0193c4a8 [ 1455.430452][T18169] [ 1455.602901][ T5766] usb 1-1: USB disconnect, device number 29 [ 1455.958252][T14591] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 1455.958291][T14591] Bluetooth: hci2: Dropping invalid advertising data [ 1455.958317][T14591] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1456.022980][ T5621] team_slave_0: entered promiscuous mode [ 1456.023033][ T5621] team_slave_1: entered promiscuous mode [ 1456.070571][T18171] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1456.070946][T18171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.071787][T18171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.407332][T18180] binder: 18178:18180 ioctl c0306201 0 returned -14 [ 1456.408023][T18180] binder: 18178:18180 ioctl c0306201 0 returned -14 [ 1456.682963][T15794] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1456.812367][T18188] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1456.823406][T15794] usb 5-1: device descriptor read/64, error -71 [ 1456.926173][T14591] Bluetooth: hci4: command tx timeout [ 1457.175031][ T5621] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1457.175643][T15794] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1457.453687][T15794] usb 5-1: device descriptor read/64, error -71 [ 1457.980521][T15794] usb usb5-port1: attempt power cycle [ 1457.992761][ T5621] usb 4-1: Using ep0 maxpacket: 32 [ 1457.994934][ T5621] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1457.998220][ T5621] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1457.998253][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.998275][ T5621] usb 4-1: Product: syz [ 1457.998292][ T5621] usb 4-1: Manufacturer: syz [ 1457.998310][ T5621] usb 4-1: SerialNumber: syz [ 1458.053234][ T5621] usb 4-1: config 0 descriptor?? [ 1458.056547][T18188] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1458.081432][ T5621] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.324184][T15794] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1458.343580][T15794] usb 5-1: device descriptor read/8, error -71 [ 1458.414183][ T5621] usb 4-1: USB disconnect, device number 88 [ 1458.435559][ T8926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.582680][T15794] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1458.613375][T15794] usb 5-1: device descriptor read/8, error -71 [ 1458.754377][T15794] usb usb5-port1: unable to enumerate USB device [ 1458.954717][T14591] Bluetooth: hci4: command tx timeout [ 1459.378611][ T8926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.415936][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1459.417467][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1459.471383][T18209] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1460.015002][T18223] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1460.132223][ T8926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.272640][ T5621] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1460.432830][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1460.432924][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1460.502626][ T5621] usb 5-1: Using ep0 maxpacket: 32 [ 1460.505854][ T5621] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1460.509238][ T5621] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1460.509272][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.509293][ T5621] usb 5-1: Product: syz [ 1460.509314][ T5621] usb 5-1: Manufacturer: syz [ 1460.509325][ T5621] usb 5-1: SerialNumber: syz [ 1460.562231][ T5621] usb 5-1: config 0 descriptor?? [ 1460.579426][T18223] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1460.600540][ T5621] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.698219][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1460.698292][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1460.814680][ T5621] usb 5-1: USB disconnect, device number 68 [ 1460.989238][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1460.989935][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1461.033443][T14591] Bluetooth: hci4: command tx timeout [ 1461.039565][T17630] udevd[17630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1466.458144][T18281] FAULT_INJECTION: forcing a failure. [ 1466.458144][T18281] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.458180][T18281] CPU: 1 UID: 0 PID: 18281 Comm: syz.0.4204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1466.458205][T18281] Tainted: [L]=SOFTLOCKUP [ 1466.458211][T18281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1466.458223][T18281] Call Trace: [ 1466.458230][T18281] [ 1466.458238][T18281] dump_stack_lvl+0xe8/0x150 [ 1466.458274][T18281] should_fail_ex+0x467/0x600 [ 1466.458307][T18281] should_failslab+0xa8/0x100 [ 1466.458331][T18281] __kmalloc_noprof+0xfe/0x780 [ 1466.458351][T18281] ? video_usercopy+0x1b1/0x1430 [ 1466.458377][T18281] ? video_usercopy+0x1b1/0x1430 [ 1466.458408][T18281] video_usercopy+0x1b1/0x1430 [ 1466.458438][T18281] ? smk_tskacc+0x2fb/0x370 [ 1466.458465][T18281] ? __pfx___video_do_ioctl+0x10/0x10 [ 1466.458494][T18281] ? __pfx_video_usercopy+0x10/0x10 [ 1466.458518][T18281] ? smack_file_ioctl+0x2c2/0x360 [ 1466.458555][T18281] ? __fget_files+0x2a/0x420 [ 1466.458574][T18281] ? __fget_files+0x3a8/0x420 [ 1466.458598][T18281] v4l2_ioctl+0x190/0x1e0 [ 1466.458627][T18281] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1466.458656][T18281] __se_sys_ioctl+0xff/0x170 [ 1466.458684][T18281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.458706][T18281] do_syscall_64+0x174/0x580 [ 1466.458728][T18281] ? trace_irq_disable+0x3b/0x140 [ 1466.458745][T18281] ? clear_bhb_loop+0x40/0x90 [ 1466.458768][T18281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.458786][T18281] RIP: 0033:0x7f787234de99 [ 1466.458803][T18281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1466.458819][T18281] RSP: 002b:00007f78705a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1466.458839][T18281] RAX: ffffffffffffffda RBX: 00007f78725d5fa0 RCX: 00007f787234de99 [ 1466.458853][T18281] RDX: 0000200000000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 1466.458864][T18281] RBP: 00007f78705a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.458876][T18281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.458886][T18281] R13: 00007f78725d6038 R14: 00007f78725d5fa0 R15: 00007ffd3fa2ed18 [ 1466.458913][T18281] [ 1466.492624][ T5759] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 1466.642708][ T5759] usb 5-1: Invalid ep0 maxpacket: 64 [ 1466.783324][ T5759] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 1466.887271][T18283] FAULT_INJECTION: forcing a failure. [ 1466.887271][T18283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.887305][T18283] CPU: 1 UID: 0 PID: 18283 Comm: syz.2.4207 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1466.887330][T18283] Tainted: [L]=SOFTLOCKUP [ 1466.887337][T18283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1466.887348][T18283] Call Trace: [ 1466.887355][T18283] [ 1466.887363][T18283] dump_stack_lvl+0xe8/0x150 [ 1466.887397][T18283] should_fail_ex+0x467/0x600 [ 1466.887431][T18283] _copy_from_user+0x2d/0xb0 [ 1466.887455][T18283] kstrtouint_from_user+0xd6/0x180 [ 1466.887487][T18283] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1466.887514][T18283] ? __lock_acquire+0x683/0x2ce0 [ 1466.887548][T18283] proc_fail_nth_write+0x8e/0x210 [ 1466.887571][T18283] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1466.887602][T18283] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1466.887625][T18283] vfs_write+0x29f/0xbb0 [ 1466.887660][T18283] ? __pfx_vfs_write+0x10/0x10 [ 1466.887687][T18283] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1466.887709][T18283] ? lockdep_hardirqs_on+0x7a/0x110 [ 1466.887731][T18283] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1466.887753][T18283] ? mutex_lock_nested+0x152/0x1d0 [ 1466.887781][T18283] ? fdget_pos+0x252/0x320 [ 1466.887808][T18283] ksys_write+0x156/0x270 [ 1466.887834][T18283] ? __pfx_ksys_write+0x10/0x10 [ 1466.887864][T18283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.887884][T18283] do_syscall_64+0x174/0x580 [ 1466.887907][T18283] ? trace_irq_disable+0x3b/0x140 [ 1466.887926][T18283] ? clear_bhb_loop+0x40/0x90 [ 1466.887948][T18283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.887967][T18283] RIP: 0033:0x7ff57a36e6ce [ 1466.887986][T18283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1466.888003][T18283] RSP: 002b:00007ff578605fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1466.888025][T18283] RAX: ffffffffffffffda RBX: 00007ff5786066c0 RCX: 00007ff57a36e6ce [ 1466.888040][T18283] RDX: 0000000000000001 RSI: 00007ff5786060a0 RDI: 0000000000000004 [ 1466.888052][T18283] RBP: 00007ff578606090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.888063][T18283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.888087][T18283] R13: 00007ff57a636038 R14: 00007ff57a635fa0 R15: 00007ffcf376e538 [ 1466.888114][T18283] [ 1467.032582][ T5759] usb 5-1: Invalid ep0 maxpacket: 64 [ 1467.041699][ T5759] usb usb5-port1: attempt power cycle [ 1467.392692][T18108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.393847][T18108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.394098][T18108] bridge_slave_0: entered allmulticast mode [ 1467.402238][T18108] bridge_slave_0: entered promiscuous mode [ 1467.422617][ T5759] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 1467.443419][ T5759] usb 5-1: Invalid ep0 maxpacket: 64 [ 1467.572711][ T5759] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 1467.593428][ T5759] usb 5-1: Invalid ep0 maxpacket: 64 [ 1467.593760][ T5759] usb usb5-port1: unable to enumerate USB device [ 1467.958322][ T8926] team0: left allmulticast mode [ 1467.958346][ T8926] team_slave_0: left allmulticast mode [ 1467.958375][ T8926] team_slave_1: left allmulticast mode [ 1468.078691][ T8926] team0: left promiscuous mode [ 1468.078781][ T8926] team_slave_0: left promiscuous mode [ 1468.079050][ T8926] team_slave_1: left promiscuous mode [ 1468.121061][ T8926] bridge0: port 3(team0) entered disabled state [ 1468.262251][T18305] 9p: p9: multiple sources not supported [ 1468.274398][ T8926] bridge_slave_1: left allmulticast mode [ 1468.274438][ T8926] bridge_slave_1: left promiscuous mode [ 1468.274687][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.345597][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1468.439104][ T8926] bridge_slave_0: left allmulticast mode [ 1468.439229][ T8926] bridge_slave_0: left promiscuous mode [ 1468.439613][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.554950][ T8926] bond_slave_1: left allmulticast mode [ 1468.632710][ T5875] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1468.792622][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 1468.818641][ T5875] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1468.818671][ T5875] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1468.818696][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1468.859581][ T5875] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1468.859643][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.859667][ T5875] usb 1-1: Product: syz [ 1468.859746][ T5875] usb 1-1: Manufacturer: syz [ 1468.859764][ T5875] usb 1-1: SerialNumber: syz [ 1468.916312][ T5875] usb 1-1: config 0 descriptor?? [ 1469.306046][ T5621] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1469.531100][ T5875] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 1469.531230][ T5875] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 1469.542614][ T5621] usb 4-1: Using ep0 maxpacket: 16 [ 1469.555809][ T5621] usb 4-1: config 0 has no interfaces? [ 1469.562410][ T5621] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1469.577792][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.577820][ T5621] usb 4-1: Product: syz [ 1469.577836][ T5621] usb 4-1: Manufacturer: syz [ 1469.577853][ T5621] usb 4-1: SerialNumber: syz [ 1469.612386][ T5621] usb 4-1: config 0 descriptor?? [ 1469.827298][T18310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4216'. [ 1469.880132][T18317] 9p: Bad value for 'rfdno' [ 1469.898694][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4219'. [ 1470.406603][ T8926] team0: Port device bridge1 removed [ 1470.618722][ T8926] team0: Port device bridge2 removed [ 1470.773569][ T8926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.833578][ T8926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.855253][ T8926] bond0 (unregistering): Released all slaves [ 1470.870505][ T8926] bond1 (unregistering): Released all slaves [ 1470.913225][T18108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.913313][T18108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.913558][T18108] bridge_slave_1: entered allmulticast mode [ 1470.915700][T18108] bridge_slave_1: entered promiscuous mode [ 1470.920361][T18305] syz_tun: refused to change device tx_queue_len [ 1470.957537][ T5621] usb 4-1: USB disconnect, device number 89 [ 1471.256212][T18108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.267827][ T8926] : left promiscuous mode [ 1471.461652][ T5759] usb 1-1: USB disconnect, device number 30 [ 1471.795983][T18108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.004642][T18108] team0: Port device team_slave_0 added [ 1472.136057][T18108] team0: Port device team_slave_1 added [ 1472.204898][T18332] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1472.227687][T14591] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1472.227719][T14591] CPU: 1 UID: 0 PID: 14591 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1472.227752][T14591] Tainted: [L]=SOFTLOCKUP [ 1472.227770][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1472.227786][T14591] Workqueue: hci3 hci_rx_work [ 1472.227819][T14591] Call Trace: [ 1472.227829][T14591] [ 1472.227839][T14591] dump_stack_lvl+0xe8/0x150 [ 1472.227881][T14591] sysfs_create_dir_ns+0x271/0x2a0 [ 1472.227917][T14591] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1472.227949][T14591] ? rt_spin_unlock+0x163/0x200 [ 1472.227993][T14591] kobject_add_internal+0x62c/0xce0 [ 1472.228037][T14591] kobject_add+0x163/0x240 [ 1472.228074][T14591] ? rt_spin_unlock+0x157/0x200 [ 1472.228121][T14591] ? __pfx_kobject_add+0x10/0x10 [ 1472.228161][T14591] ? get_device_parent+0x370/0x3a0 [ 1472.228196][T14591] device_add+0x3fa/0xb80 [ 1472.228229][T14591] hci_conn_add_sysfs+0xd5/0x210 [ 1472.228259][T14591] le_conn_complete_evt+0xfef/0x1580 [ 1472.228411][T14591] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1472.228447][T14591] ? lockdep_hardirqs_on+0x7a/0x110 [ 1472.228477][T14591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1472.228505][T14591] ? rt_mutex_slowunlock+0x219/0x460 [ 1472.228542][T14591] ? skb_pull_data+0xf0/0x200 [ 1472.228583][T14591] hci_le_conn_complete_evt+0x187/0x470 [ 1472.228624][T14591] hci_event_packet+0x67a/0xf10 [ 1472.228681][T14591] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1472.228710][T14591] ? __pfx_hci_event_packet+0x10/0x10 [ 1472.228738][T14591] ? rt_spin_unlock+0x157/0x200 [ 1472.228784][T14591] ? hci_send_to_monitor+0xe2/0x590 [ 1472.228824][T14591] hci_rx_work+0x3ee/0x1020 [ 1472.228863][T14591] ? process_scheduled_works+0xa20/0x14e0 [ 1472.228894][T14591] process_scheduled_works+0xa8e/0x14e0 [ 1472.228956][T14591] ? __pfx_process_scheduled_works+0x10/0x10 [ 1472.228994][T14591] ? assign_work+0x3cf/0x5d0 [ 1472.229032][T14591] worker_thread+0xa47/0xfb0 [ 1472.229080][T14591] ? __kthread_parkme+0x71/0x1f0 [ 1472.229125][T14591] kthread+0x388/0x470 [ 1472.229162][T14591] ? __pfx_worker_thread+0x10/0x10 [ 1472.229192][T14591] ? __pfx_kthread+0x10/0x10 [ 1472.229231][T14591] ret_from_fork+0x514/0xb70 [ 1472.229272][T14591] ? __pfx_ret_from_fork+0x10/0x10 [ 1472.229310][T14591] ? __switch_to+0xc89/0x1420 [ 1472.229346][T14591] ? __pfx_kthread+0x10/0x10 [ 1472.229385][T14591] ret_from_fork_asm+0x1a/0x30 [ 1472.229443][T14591] [ 1472.230693][T14591] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1472.230745][T14591] Bluetooth: hci3: failed to register connection device [ 1472.252973][ T9929] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1472.521768][ T8926] tipc: Left network mode [ 1472.555741][ T9929] usb 1-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice= 0.40 [ 1472.555775][ T9929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.555802][ T9929] usb 1-1: Product: syz [ 1472.555813][ T9929] usb 1-1: Manufacturer: syz [ 1472.555825][ T9929] usb 1-1: SerialNumber: syz [ 1472.640370][T18108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.640391][T18108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1472.640423][T18108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.687333][T18108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.687352][T18108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1472.687386][T18108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.870931][ T9929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1472.871385][ T9929] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1472.933972][ T9929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1472.934532][ T9929] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1472.989276][ T9929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1473.177043][T18108] hsr_slave_0: entered promiscuous mode [ 1473.186912][T18108] hsr_slave_1: entered promiscuous mode [ 1473.195523][T18108] debugfs: 'hsr0' already exists in 'hsr' [ 1473.195554][T18108] Cannot create hsr debugfs directory [ 1473.371097][ T9929] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1473.457009][ T9929] usb 1-1: USB disconnect, device number 31 [ 1473.790070][T17646] udevd[17646]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1473.812585][ T5759] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1473.984090][ T5759] usb 5-1: Using ep0 maxpacket: 32 [ 1473.986669][ T5759] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.986698][ T5759] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1473.990936][ T5759] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1473.990966][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.990988][ T5759] usb 5-1: Product: syz [ 1473.991004][ T5759] usb 5-1: Manufacturer: syz [ 1473.991021][ T5759] usb 5-1: SerialNumber: syz [ 1474.080598][ T5759] usb 5-1: config 0 descriptor?? [ 1474.380842][ T5759] usb 5-1: USB disconnect, device number 73 [ 1474.519105][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1474.742900][T15794] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1474.910194][T15794] usb 4-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice= 0.40 [ 1474.910229][T15794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.910252][T15794] usb 4-1: Product: syz [ 1474.910268][T15794] usb 4-1: Manufacturer: syz [ 1474.910285][T15794] usb 4-1: SerialNumber: syz [ 1475.330381][T15794] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1475.331058][T15794] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1475.355414][T15794] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1475.383871][T15794] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1475.391593][T15794] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1475.515751][T15794] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1475.541239][T15794] usb 4-1: USB disconnect, device number 90 [ 1475.629323][T17646] udevd[17646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1475.737172][ T8926] hsr_slave_0: left promiscuous mode [ 1475.772725][ T8926] hsr_slave_1: left promiscuous mode [ 1475.773780][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.773811][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.826142][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1475.826172][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.190725][ T8926] veth1_macvtap: left promiscuous mode [ 1476.212690][ T8926] veth0_macvtap: left promiscuous mode [ 1476.212964][ T8926] veth1_vlan: left promiscuous mode [ 1476.213051][ T8926] veth0_vlan: left promiscuous mode [ 1476.393267][ T5662] Bluetooth: hci2: command 0x0406 tx timeout [ 1476.960541][T18388] netlink: 'syz.2.4236': attribute type 6 has an invalid length. [ 1476.960565][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4236'. [ 1477.445832][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 1477.995105][ T8926] team0 (unregistering): Port device team_slave_1 removed [ 1478.915222][ T8926] team0 (unregistering): Port device team_slave_0 removed [ 1484.563923][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.564016][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.034611][T18455] FAULT_INJECTION: forcing a failure. [ 1485.034611][T18455] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.034651][T18455] CPU: 1 UID: 0 PID: 18455 Comm: syz.2.4255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1485.034678][T18455] Tainted: [L]=SOFTLOCKUP [ 1485.034686][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1485.034699][T18455] Call Trace: [ 1485.034707][T18455] [ 1485.034717][T18455] dump_stack_lvl+0xe8/0x150 [ 1485.034759][T18455] should_fail_ex+0x467/0x600 [ 1485.034798][T18455] should_failslab+0xa8/0x100 [ 1485.034834][T18455] __kmalloc_noprof+0xfe/0x780 [ 1485.034858][T18455] ? group_cpus_evenly+0xcf/0x5e0 [ 1485.034885][T18455] ? group_cpus_evenly+0xcf/0x5e0 [ 1485.034921][T18455] group_cpus_evenly+0xcf/0x5e0 [ 1485.034954][T18455] ? __pfx_group_cpus_evenly+0x10/0x10 [ 1485.034998][T18455] blk_mq_map_queues+0xb1/0x490 [ 1485.035032][T18455] ? trace_kmalloc+0x2a/0xf0 [ 1485.035058][T18455] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 1485.035091][T18455] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 1485.035124][T18455] ? blk_mq_update_queue_map+0x383/0x450 [ 1485.035157][T18455] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 1485.035197][T18455] loop_add+0x436/0xb50 [ 1485.035229][T18455] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1485.035263][T18455] ? __pfx_loop_add+0x10/0x10 [ 1485.035317][T18455] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1485.035348][T18455] loop_control_ioctl+0x12b/0x5b0 [ 1485.035383][T18455] ? __fget_files+0x2a/0x420 [ 1485.035407][T18455] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1485.035438][T18455] ? __fget_files+0x2a/0x420 [ 1485.035465][T18455] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1485.035486][T18455] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1485.035523][T18455] __se_sys_ioctl+0xff/0x170 [ 1485.035555][T18455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.035580][T18455] do_syscall_64+0x174/0x580 [ 1485.035607][T18455] ? trace_irq_disable+0x3b/0x140 [ 1485.035631][T18455] ? clear_bhb_loop+0x40/0x90 [ 1485.035660][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.035684][T18455] RIP: 0033:0x7ff57a3ade99 [ 1485.035707][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.035726][T18455] RSP: 002b:00007ff578606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1485.035751][T18455] RAX: ffffffffffffffda RBX: 00007ff57a635fa0 RCX: 00007ff57a3ade99 [ 1485.035768][T18455] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 0000000000000003 [ 1485.035784][T18455] RBP: 00007ff578606090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.035799][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.035822][T18455] R13: 00007ff57a636038 R14: 00007ff57a635fa0 R15: 00007ffcf376e538 [ 1485.035858][T18455] [ 1485.697959][T18458] netlink: 'syz.3.4256': attribute type 6 has an invalid length. [ 1485.697983][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4256'. [ 1486.268608][T17646] udevd[17646]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1486.475040][T18468] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4260'. [ 1490.410140][T18502] ip6erspan0: entered allmulticast mode [ 1490.703125][T18508] FAULT_INJECTION: forcing a failure. [ 1490.703125][T18508] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.703166][T18508] CPU: 1 UID: 0 PID: 18508 Comm: syz.3.4267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1490.703197][T18508] Tainted: [L]=SOFTLOCKUP [ 1490.703206][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1490.703220][T18508] Call Trace: [ 1490.703229][T18508] [ 1490.703239][T18508] dump_stack_lvl+0xe8/0x150 [ 1490.703281][T18508] should_fail_ex+0x467/0x600 [ 1490.703327][T18508] should_failslab+0xa8/0x100 [ 1490.703358][T18508] __kmalloc_noprof+0xfe/0x780 [ 1490.703385][T18508] ? tomoyo_encode+0x2ad/0x570 [ 1490.703415][T18508] ? tomoyo_encode+0x2ad/0x570 [ 1490.703454][T18508] tomoyo_encode+0x2ad/0x570 [ 1490.703490][T18508] tomoyo_realpath_from_path+0x5fa/0x640 [ 1490.703534][T18508] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1490.703562][T18508] tomoyo_path_number_perm+0x246/0x5f0 [ 1490.703590][T18508] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1490.703615][T18508] ? __lock_acquire+0x683/0x2ce0 [ 1490.703657][T18508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1490.703683][T18508] ? hook_file_ioctl+0x1f3/0x600 [ 1490.703719][T18508] ? lockdep_hardirqs_on+0x7a/0x110 [ 1490.703767][T18508] ? __fget_files+0x2a/0x420 [ 1490.703796][T18508] ? __fget_files+0x2a/0x420 [ 1490.703819][T18508] ? __fget_files+0x3a8/0x420 [ 1490.703844][T18508] ? __fget_files+0x2a/0x420 [ 1490.703880][T18508] security_file_ioctl+0xc3/0x2a0 [ 1490.703911][T18508] __se_sys_ioctl+0x47/0x170 [ 1490.703942][T18508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.703969][T18508] do_syscall_64+0x174/0x580 [ 1490.703996][T18508] ? trace_irq_disable+0x3b/0x140 [ 1490.704019][T18508] ? clear_bhb_loop+0x40/0x90 [ 1490.704048][T18508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.704072][T18508] RIP: 0033:0x7f36c566de99 [ 1490.704093][T18508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.704113][T18508] RSP: 002b:00007f36c38c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.704138][T18508] RAX: ffffffffffffffda RBX: 00007f36c58f5fa0 RCX: 00007f36c566de99 [ 1490.704155][T18508] RDX: 00002000000014c0 RSI: 00000000c0bc5310 RDI: 0000000000000003 [ 1490.704171][T18508] RBP: 00007f36c38c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.704186][T18508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.704199][T18508] R13: 00007f36c58f6038 R14: 00007f36c58f5fa0 R15: 00007ffc0193c4a8 [ 1490.704235][T18508] [ 1490.705797][T18508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1491.412700][ T5780] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1491.462577][ T5766] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1491.572679][ T5780] usb 5-1: Using ep0 maxpacket: 32 [ 1491.574977][ T5780] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 1491.575007][ T5780] usb 5-1: config 2 has no interface number 0 [ 1491.575054][ T5780] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1491.575082][ T5780] usb 5-1: config 2 interface 88 has no altsetting 0 [ 1491.577749][ T5780] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1491.577775][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1491.577793][ T5780] usb 5-1: Product: syz [ 1491.577807][ T5780] usb 5-1: Manufacturer: syz [ 1491.577820][ T5780] usb 5-1: SerialNumber: syz [ 1491.644147][ T5766] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1491.647575][ T5766] usb 4-1: not running at top speed; connect to a high speed hub [ 1491.651856][ T5766] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1491.651883][ T5766] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1491.651904][ T5766] usb 4-1: config 14 has no interface number 0 [ 1491.651931][ T5766] usb 4-1: config 14 has no interface number 1 [ 1491.652004][ T5766] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1491.652032][ T5766] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 1491.652057][ T5766] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1491.652084][ T5766] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 1491.652114][ T5766] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 1491.652142][ T5766] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1491.652170][ T5766] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1491.652189][ T5766] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1491.662132][ T5766] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1491.662166][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.662188][ T5766] usb 4-1: Product: syz [ 1491.662204][ T5766] usb 4-1: Manufacturer: syz [ 1491.662220][ T5766] usb 4-1: SerialNumber: syz [ 1491.824595][T18515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1492.323040][ T5780] asix 5-1:2.88: probe with driver asix failed with error -71 [ 1492.392023][ T5780] usb 5-1: USB disconnect, device number 74 [ 1492.513454][ T5766] legousbtower 4-1:14.57: interrupt endpoints not found [ 1492.606482][ T5766] legousbtower 4-1:14.228: get version request failed: -71 [ 1492.606704][ T5766] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 1492.707984][ T5766] usb 4-1: USB disconnect, device number 91 [ 1496.232825][T18108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1496.672339][T18108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1497.314004][T18108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1497.614277][T18108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1497.616426][T18108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1497.728011][T18108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1497.731146][T18108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1497.752883][ T5621] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1497.835749][T18108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1497.874432][T18579] nvme_fabrics: missing parameter 'transport=%s' [ 1497.874453][T18579] nvme_fabrics: missing parameter 'nqn=%s' [ 1497.888720][T18583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4282'. [ 1497.922627][ T5621] usb 1-1: Using ep0 maxpacket: 32 [ 1497.964608][T18590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4282'. [ 1498.044802][ T5621] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1498.051974][ T5621] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1498.052008][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.052035][ T5621] usb 1-1: Product: syz [ 1498.052051][ T5621] usb 1-1: Manufacturer: syz [ 1498.052068][ T5621] usb 1-1: SerialNumber: syz [ 1498.105061][ T5621] usb 1-1: config 0 descriptor?? [ 1498.107620][T18573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1498.160790][ T5621] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1498.596073][ T5621] usb 1-1: USB disconnect, device number 32 [ 1498.656090][T18108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.746777][T17630] udevd[17630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1498.909774][T18108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.008169][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.008317][ T5797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.323150][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.323285][ T8912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.598023][T18620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1502.414490][T18621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1504.902322][T18613] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1508.474539][T18672] FAULT_INJECTION: forcing a failure. [ 1508.474539][T18672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1508.474580][T18672] CPU: 1 UID: 0 PID: 18672 Comm: syz.4.4294 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1508.474611][T18672] Tainted: [L]=SOFTLOCKUP [ 1508.474620][T18672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1508.474633][T18672] Call Trace: [ 1508.474642][T18672] [ 1508.474653][T18672] dump_stack_lvl+0xe8/0x150 [ 1508.474693][T18672] should_fail_ex+0x467/0x600 [ 1508.474736][T18672] _copy_to_iter+0x404/0x1810 [ 1508.474760][T18672] ? __pfx_netlink_seq_stop+0x10/0x10 [ 1508.474808][T18672] ? __pfx__copy_to_iter+0x10/0x10 [ 1508.474835][T18672] ? traverse+0x5f1/0x620 [ 1508.474884][T18672] seq_read_iter+0x2b1/0xcb0 [ 1508.474934][T18672] seq_read+0x36a/0x490 [ 1508.474963][T18672] ? kstrtoull+0x12f/0x1d0 [ 1508.475005][T18672] ? __pfx_seq_read+0x10/0x10 [ 1508.475044][T18672] ? __import_iovec+0x5d7/0x7e0 [ 1508.475084][T18672] ? __pfx_seq_read+0x10/0x10 [ 1508.475114][T18672] proc_reg_read+0x1f6/0x2f0 [ 1508.475149][T18672] vfs_readv+0x588/0x850 [ 1508.475174][T18672] ? __pfx_proc_reg_read+0x10/0x10 [ 1508.475208][T18672] ? __pfx_vfs_readv+0x10/0x10 [ 1508.475250][T18672] ? __fget_files+0x2a/0x420 [ 1508.475281][T18672] ? __fget_files+0x3a8/0x420 [ 1508.475305][T18672] ? __fget_files+0x2a/0x420 [ 1508.475347][T18672] __x64_sys_preadv+0x19f/0x2c0 [ 1508.475383][T18672] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1508.475424][T18672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.475450][T18672] do_syscall_64+0x174/0x580 [ 1508.475477][T18672] ? trace_irq_disable+0x3b/0x140 [ 1508.475501][T18672] ? clear_bhb_loop+0x40/0x90 [ 1508.475530][T18672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.475555][T18672] RIP: 0033:0x7fef86b0de99 [ 1508.475576][T18672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.475596][T18672] RSP: 002b:00007fef84d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1508.475622][T18672] RAX: ffffffffffffffda RBX: 00007fef86d95fa0 RCX: 00007fef86b0de99 [ 1508.475640][T18672] RDX: 0000000000000001 RSI: 0000200000001300 RDI: 0000000000000004 [ 1508.475655][T18672] RBP: 00007fef84d66090 R08: 00000000fffffffc R09: 0000000000000000 [ 1508.475671][T18672] R10: 0000000000000142 R11: 0000000000000246 R12: 0000000000000001 [ 1508.475685][T18672] R13: 00007fef86d96038 R14: 00007fef86d95fa0 R15: 00007ffedf0e2638 [ 1508.475722][T18672] [ 1508.950654][T18682] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1508.973892][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4307'. [ 1508.976684][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4307'. [ 1509.046446][T15794] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1509.053020][T18108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.246928][T15794] usb 1-1: Using ep0 maxpacket: 32 [ 1509.249875][T15794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1509.251632][T18108] veth0_vlan: entered promiscuous mode [ 1509.279910][T15794] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1509.279945][T15794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.279968][T15794] usb 1-1: Product: syz [ 1509.279986][T15794] usb 1-1: Manufacturer: syz [ 1509.280002][T15794] usb 1-1: SerialNumber: syz [ 1509.351587][T15794] usb 1-1: config 0 descriptor?? [ 1509.373392][T18675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1509.382345][T15794] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1509.410686][T18108] veth1_vlan: entered promiscuous mode [ 1509.487985][T18688] IPVS: set_ctl: invalid protocol: 33 172.30.0.4:20000 [ 1510.106320][T18108] veth0_macvtap: entered promiscuous mode [ 1510.114377][T18108] veth1_macvtap: entered promiscuous mode [ 1510.141272][T18108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.244476][T15794] usb 1-1: USB disconnect, device number 33 [ 1510.272223][T18108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.364145][ T9359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.366168][ T9359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.368970][ T9359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.369382][ T9359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.234786][T18705] udevd[18705]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1513.585415][ T5662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1513.638410][ T5662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1513.646621][ T5662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1513.729639][T18725] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4318'. [ 1513.758800][ T5662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1513.763262][ T5662] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1515.412777][ T5766] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1515.572099][ T5766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.585515][ T5766] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1515.585551][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.585573][ T5766] usb 3-1: Product: syz [ 1515.585589][ T5766] usb 3-1: Manufacturer: syz [ 1515.585606][ T5766] usb 3-1: SerialNumber: syz [ 1515.611780][ T5766] usb 3-1: config 0 descriptor?? [ 1515.635524][ T5766] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1515.999056][T15449] Bluetooth: hci1: command tx timeout [ 1516.052153][ T5766] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1516.052257][ T5766] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1516.097873][ T5766] usb 3-1: USB disconnect, device number 59 [ 1517.372647][ T5875] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1517.622682][ T5875] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1517.622716][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.823166][ T5875] usb 5-1: config 0 descriptor?? [ 1517.835262][ T5875] cp210x 5-1:0.0: cp210x converter detected [ 1518.080346][T15449] Bluetooth: hci1: command tx timeout [ 1518.304120][ T5875] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1519.636497][ T5875] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1520.127129][ T5773] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1520.142725][ T31] usb 5-1: USB disconnect, device number 75 [ 1520.164817][T15449] Bluetooth: hci1: command tx timeout [ 1520.192946][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1520.322572][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 1520.324516][ T5773] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1520.326881][ T5773] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1520.326912][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.326935][ T5773] usb 4-1: Product: syz [ 1520.326951][ T5773] usb 4-1: Manufacturer: syz [ 1520.326968][ T5773] usb 4-1: SerialNumber: syz [ 1520.381560][ T5773] usb 4-1: config 0 descriptor?? [ 1521.059917][T18803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1521.080189][ T5773] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1521.912737][ T5773] usb 4-1: USB disconnect, device number 92 [ 1522.062023][T18692] udevd[18692]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1522.123105][ T31] cp210x 5-1:0.0: device disconnected [ 1522.232912][ T5662] Bluetooth: hci1: command tx timeout [ 1522.952843][ T5662] Bluetooth: hci3: command 0x0406 tx timeout [ 1523.348991][ T8932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.531146][ T5759] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1524.932692][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 1524.935555][ T5759] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1524.939340][ T5759] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1524.939377][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.939403][ T5759] usb 3-1: Product: syz [ 1524.939422][ T5759] usb 3-1: Manufacturer: syz [ 1524.939441][ T5759] usb 3-1: SerialNumber: syz [ 1524.996409][T18714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.996566][T18714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.996839][T18714] bridge_slave_0: entered allmulticast mode [ 1525.200448][T18714] bridge_slave_0: entered promiscuous mode [ 1525.248220][T18714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.248352][T18714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.248603][T18714] bridge_slave_1: entered allmulticast mode [ 1525.271626][T18714] bridge_slave_1: entered promiscuous mode [ 1525.391926][T18714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.403798][T18714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.481098][T18714] team0: Port device team_slave_0 added [ 1525.494976][T18714] team0: Port device team_slave_1 added [ 1525.592047][ T5759] usb 3-1: config 0 descriptor?? [ 1525.629341][T18832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1525.665226][ T5759] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1525.953328][ T5759] usb 3-1: USB disconnect, device number 60 [ 1526.115558][T18692] udevd[18692]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1526.234797][ T8932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.242697][ T5773] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1526.395370][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 1526.400716][ T5773] usb 4-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1526.400753][ T5773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1526.400790][ T5773] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 1526.400816][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.498801][ T5773] usb 4-1: config 0 descriptor?? [ 1526.774356][T18714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.774375][T18714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.774401][T18714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.839516][T18714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.839530][T18714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.839592][T18714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.083358][ T5773] sony 0003:1430:474C.000A: unknown main item tag 0x2 [ 1527.083387][ T5773] sony 0003:1430:474C.000A: unknown main item tag 0x3 [ 1527.083407][ T5773] sony 0003:1430:474C.000A: unknown main item tag 0x0 [ 1527.083426][ T5773] sony 0003:1430:474C.000A: item fetching failed at offset 15/40 [ 1527.083970][ T5773] sony 0003:1430:474C.000A: parse failed [ 1527.084054][ T5773] sony 0003:1430:474C.000A: probe with driver sony failed with error -22 [ 1528.223230][T18858] nvme_fabrics: missing parameter 'transport=%s' [ 1528.223250][T18858] nvme_fabrics: missing parameter 'nqn=%s' [ 1528.315237][ T8932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.606311][ T5773] usb 4-1: USB disconnect, device number 93 [ 1528.639474][T18863] nvme_fabrics: missing parameter 'transport=%s' [ 1528.639492][T18863] nvme_fabrics: missing parameter 'nqn=%s' [ 1528.671192][T18714] hsr_slave_0: entered promiscuous mode [ 1528.699307][T18714] hsr_slave_1: entered promiscuous mode [ 1528.700377][T18714] debugfs: 'hsr0' already exists in 'hsr' [ 1528.700405][T18714] Cannot create hsr debugfs directory [ 1530.551744][ T8932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.706503][ T9929] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1530.862578][ T9929] usb 3-1: Using ep0 maxpacket: 32 [ 1530.961269][ T9929] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1530.974926][ T9929] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1530.974959][ T9929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.974981][ T9929] usb 3-1: Product: syz [ 1530.974996][ T9929] usb 3-1: Manufacturer: syz [ 1530.975012][ T9929] usb 3-1: SerialNumber: syz [ 1531.040547][ T9929] usb 3-1: config 0 descriptor?? [ 1531.044906][T18881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1531.159203][ T9929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1531.289362][ T9929] usb 3-1: USB disconnect, device number 61 [ 1531.459339][T18890] netlink: 'syz.3.4370': attribute type 6 has an invalid length. [ 1531.459360][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4370'. [ 1531.723137][T18692] udevd[18692]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1534.284528][T18920] netlink: 'syz.2.4380': attribute type 6 has an invalid length. [ 1534.284550][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4380'. [ 1534.952111][T18940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1535.007177][T18942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1535.079625][ T8932] bridge_slave_1: left allmulticast mode [ 1535.079664][ T8932] bridge_slave_1: left promiscuous mode [ 1535.079969][ T8932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.305599][ T8932] bridge_slave_0: left allmulticast mode [ 1535.305639][ T8932] bridge_slave_0: left promiscuous mode [ 1535.305897][ T8932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.933683][ T8932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.036921][ T8932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.075856][ T8932] bond0 (unregistering): Released all slaves [ 1539.250537][T18939] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1539.371325][T18939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.372179][T18939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.514542][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1546.005877][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.005955][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.182375][T19019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1546.233752][T19022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1550.189198][T19018] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1552.432083][T19068] FAULT_INJECTION: forcing a failure. [ 1552.432083][T19068] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.432119][T19068] CPU: 0 UID: 0 PID: 19068 Comm: syz.2.4427 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1552.432145][T19068] Tainted: [L]=SOFTLOCKUP [ 1552.432152][T19068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1552.432163][T19068] Call Trace: [ 1552.432170][T19068] [ 1552.432178][T19068] dump_stack_lvl+0xe8/0x150 [ 1552.432212][T19068] should_fail_ex+0x467/0x600 [ 1552.432247][T19068] should_failslab+0xa8/0x100 [ 1552.432272][T19068] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1552.432294][T19068] ? bpf_prog_alloc_no_stats+0xd8/0x4f0 [ 1552.432314][T19068] ? bpf_prog_alloc_no_stats+0xd8/0x4f0 [ 1552.432340][T19068] bpf_prog_alloc_no_stats+0xd8/0x4f0 [ 1552.432358][T19068] ? bpf_prog_alloc+0x2a/0x1a0 [ 1552.432380][T19068] bpf_prog_alloc+0x3c/0x1a0 [ 1552.432406][T19068] bpf_prog_load+0x7f8/0x1c00 [ 1552.432437][T19068] ? __pfx_bpf_prog_load+0x10/0x10 [ 1552.432478][T19068] __sys_bpf+0xd0d/0xd90 [ 1552.432504][T19068] ? __pfx___sys_bpf+0x10/0x10 [ 1552.432526][T19068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1552.432554][T19068] ? rt_mutex_slowunlock+0x219/0x460 [ 1552.432607][T19068] ? ksys_write+0x248/0x270 [ 1552.432633][T19068] ? __pfx_ksys_write+0x10/0x10 [ 1552.432661][T19068] __x64_sys_bpf+0xba/0xd0 [ 1552.432690][T19068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.432710][T19068] do_syscall_64+0x174/0x580 [ 1552.432733][T19068] ? trace_irq_disable+0x3b/0x140 [ 1552.432751][T19068] ? clear_bhb_loop+0x40/0x90 [ 1552.432774][T19068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.432793][T19068] RIP: 0033:0x7ff57a3ade99 [ 1552.432811][T19068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.432827][T19068] RSP: 002b:00007ff578606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1552.432847][T19068] RAX: ffffffffffffffda RBX: 00007ff57a635fa0 RCX: 00007ff57a3ade99 [ 1552.432861][T19068] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 1552.432873][T19068] RBP: 00007ff578606090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.432885][T19068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.432895][T19068] R13: 00007ff57a636038 R14: 00007ff57a635fa0 R15: 00007ffcf376e538 [ 1552.432924][T19068] [ 1554.702579][ T5759] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1554.861681][ T5759] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1554.861717][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.861740][ T5759] usb 4-1: Product: syz [ 1554.861772][ T5759] usb 4-1: Manufacturer: syz [ 1554.861789][ T5759] usb 4-1: SerialNumber: syz [ 1555.028369][T15794] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1555.377732][ T8932] hsr_slave_0: left promiscuous mode [ 1555.424207][ T8932] hsr_slave_1: left promiscuous mode [ 1555.425371][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.425401][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.452747][ T31] usb 4-1: USB disconnect, device number 94 [ 1555.533807][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.533839][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.719500][ T8932] veth1_macvtap: left promiscuous mode [ 1555.719614][ T8932] veth0_macvtap: left promiscuous mode [ 1555.719894][ T8932] veth1_vlan: left promiscuous mode [ 1555.720099][ T8932] veth0_vlan: left promiscuous mode [ 1556.236400][T15794] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1556.364939][T15794] ath9k_htc: Failed to initialize the device [ 1556.366712][ T31] usb 4-1: ath9k_htc: USB layer deinitialized [ 1560.525831][T19118] tmpfs: Unknown parameter 'grpquotaaʆ^ә JP.QuZVЀbW:1RiL(Z' [ 1560.872599][T15794] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1560.998716][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4444'. [ 1561.022535][T15794] usb 4-1: Using ep0 maxpacket: 32 [ 1561.024983][T15794] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1561.028006][T15794] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1561.028039][T15794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.028061][T15794] usb 4-1: Product: syz [ 1561.028077][T15794] usb 4-1: Manufacturer: syz [ 1561.028094][T15794] usb 4-1: SerialNumber: syz [ 1561.124510][T15794] usb 4-1: config 0 descriptor?? [ 1561.125736][T19119] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1561.145577][T15794] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1561.393449][T15794] usb 4-1: USB disconnect, device number 95 [ 1561.504791][ T8932] team0 (unregistering): Port device team_slave_1 removed [ 1561.577781][T19127] udevd[19127]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.741970][ T8932] team0 (unregistering): Port device team_slave_0 removed [ 1562.030541][T19132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4445'. [ 1562.136910][T19125] bond0: Unable to set down delay as MII monitoring is disabled [ 1564.352574][ T5780] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1564.517066][ T5780] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1564.517097][ T5780] usb 5-1: config 0 has no interface number 0 [ 1564.517145][ T5780] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1564.517174][ T5780] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1564.517204][ T5780] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1564.580462][ T5780] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1564.580495][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1564.580518][ T5780] usb 5-1: Product: syz [ 1564.580533][ T5780] usb 5-1: SerialNumber: syz [ 1564.625775][ T5780] usb 5-1: config 0 descriptor?? [ 1564.924212][ T5780] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1564.932138][ T5780] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input37 [ 1565.080347][ T5780] ------------[ cut here ]------------ [ 1565.080364][ T5780] URB ffff88801f2d4400 submitted while active [ 1565.080387][ T5780] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: kworker/1:5/5780 [ 1565.080443][ T5780] Modules linked in: [ 1565.080468][ T5780] CPU: 1 UID: 0 PID: 5780 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1565.080502][ T5780] Tainted: [L]=SOFTLOCKUP [ 1565.080512][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1565.080528][ T5780] Workqueue: usb_hub_wq hub_event [ 1565.080554][ T5780] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1565.080588][ T5780] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 c9 4f 56 fb 49 83 3e 00 74 40 e8 ee dc ec fa 48 8d 3d d7 75 e3 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d3 dc ec fa eb 05 e8 cc dc [ 1565.080608][ T5780] RSP: 0018:ffffc90005746bf8 EFLAGS: 00010283 [ 1565.080629][ T5780] RAX: ffffffff86d8ee02 RBX: ffff88801f2d4400 RCX: 0000000000100000 [ 1565.080647][ T5780] RDX: ffffc9001b18e000 RSI: ffff88801f2d4400 RDI: ffffffff8fbc63e0 [ 1565.080666][ T5780] RBP: dffffc0000000000 R08: ffffffff8faf9837 R09: 1ffffffff1f5f306 [ 1565.080682][ T5780] R10: dffffc0000000000 R11: fffffbfff1f5f307 R12: 1ffff1100c492e0a [ 1565.080699][ T5780] R13: ffff888062497048 R14: ffff88801f2d4408 R15: 0000000000000cc0 [ 1565.080715][ T5780] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 1565.080733][ T5780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1565.080747][ T5780] CR2: 00007f66bbfc20a3 CR3: 0000000074aba000 CR4: 00000000003526f0 [ 1565.080768][ T5780] Call Trace: [ 1565.080778][ T5780] [ 1565.080788][ T5780] ? lockdep_hardirqs_on+0x7a/0x110 [ 1565.080831][ T5780] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1565.080860][ T5780] ? mutex_lock_nested+0x152/0x1d0 [ 1565.080893][ T5780] ? cm109_input_open+0x97/0x460 [ 1565.080934][ T5780] cm109_input_open+0x1fb/0x460 [ 1565.080980][ T5780] input_open_device+0x1f9/0x3b0 [ 1565.081016][ T5780] kbd_connect+0xf6/0x150 [ 1565.081050][ T5780] input_register_device+0xd08/0x1150 [ 1565.081095][ T5780] cm109_usb_probe+0x11e4/0x16f0 [ 1565.081159][ T5780] usb_probe_interface+0x653/0xc60 [ 1565.084635][ T5780] ? __pfx_usb_probe_interface+0x10/0x10 [ 1565.084680][ T5780] really_probe+0x254/0xae0 [ 1565.084736][ T5780] __driver_probe_device+0x1e8/0x360 [ 1565.084775][ T5780] driver_probe_device+0x4f/0x240 [ 1565.084817][ T5780] __device_attach_driver+0x270/0x410 [ 1565.084868][ T5780] bus_for_each_drv+0x25b/0x2f0 [ 1565.084897][ T5780] ? __pfx___device_attach_driver+0x10/0x10 [ 1565.084959][ T5780] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1565.084985][ T5780] ? rt_spin_unlock+0x163/0x200 [ 1565.085032][ T5780] __device_attach+0x2c7/0x450 [ 1565.085064][ T5780] ? rt_spin_unlock+0x157/0x200 [ 1565.085104][ T5780] ? __pfx___device_attach+0x10/0x10 [ 1565.085150][ T5780] device_initial_probe+0xa1/0xd0 [ 1565.085186][ T5780] bus_probe_device+0x12d/0x220 [ 1565.085215][ T5780] device_add+0x7d7/0xb80 [ 1565.085251][ T5780] usb_set_configuration+0x1ad8/0x2180 [ 1565.085312][ T5780] usb_generic_driver_probe+0x8d/0x150 [ 1565.085345][ T5780] usb_probe_device+0x1c3/0x3b0 [ 1565.085380][ T5780] ? __pfx_usb_probe_device+0x10/0x10 [ 1565.085408][ T5780] really_probe+0x254/0xae0 [ 1565.085449][ T5780] __driver_probe_device+0x1e8/0x360 [ 1565.085487][ T5780] driver_probe_device+0x4f/0x240 [ 1565.085528][ T5780] __device_attach_driver+0x270/0x410 [ 1565.085570][ T5780] bus_for_each_drv+0x25b/0x2f0 [ 1565.085598][ T5780] ? __pfx___device_attach_driver+0x10/0x10 [ 1565.085634][ T5780] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1565.085661][ T5780] ? rt_spin_unlock+0x163/0x200 [ 1565.085716][ T5780] __device_attach+0x2c7/0x450 [ 1565.085756][ T5780] ? __pfx___device_attach+0x10/0x10 [ 1565.085805][ T5780] device_initial_probe+0xa1/0xd0 [ 1565.085843][ T5780] bus_probe_device+0x12d/0x220 [ 1565.085875][ T5780] device_add+0x7d7/0xb80 [ 1565.085912][ T5780] usb_new_device+0x98d/0x1610 [ 1565.085948][ T5780] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1565.085986][ T5780] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1565.086026][ T5780] ? __pfx_usb_new_device+0x10/0x10 [ 1565.086106][ T5780] hub_event+0x28cf/0x4cf0 [ 1565.086195][ T5780] ? __pfx_hub_event+0x10/0x10 [ 1565.086224][ T5780] ? process_scheduled_works+0xa20/0x14e0 [ 1565.086265][ T5780] ? rcu_is_watching+0x15/0xb0 [ 1565.086301][ T5780] ? process_scheduled_works+0xa20/0x14e0 [ 1565.086331][ T5780] process_scheduled_works+0xa8e/0x14e0 [ 1565.086396][ T5780] ? __pfx_process_scheduled_works+0x10/0x10 [ 1565.086437][ T5780] ? assign_work+0x3cf/0x5d0 [ 1565.086474][ T5780] worker_thread+0xa47/0xfb0 [ 1565.086523][ T5780] ? __kthread_parkme+0x71/0x1f0 [ 1565.086571][ T5780] kthread+0x388/0x470 [ 1565.086610][ T5780] ? __pfx_worker_thread+0x10/0x10 [ 1565.086639][ T5780] ? __pfx_kthread+0x10/0x10 [ 1565.086679][ T5780] ret_from_fork+0x514/0xb70 [ 1565.086828][ T5780] ? __pfx_ret_from_fork+0x10/0x10 [ 1565.086870][ T5780] ? __switch_to+0xc89/0x1420 [ 1565.086908][ T5780] ? __pfx_kthread+0x10/0x10 [ 1565.086949][ T5780] ret_from_fork_asm+0x1a/0x30 [ 1565.086996][ T5780] [ 1565.087010][ T5780] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1565.087033][ T5780] CPU: 1 UID: 0 PID: 5780 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1565.087065][ T5780] Tainted: [L]=SOFTLOCKUP [ 1565.087074][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1565.087088][ T5780] Workqueue: usb_hub_wq hub_event [ 1565.087115][ T5780] Call Trace: [ 1565.087139][ T5780] [ 1565.087149][ T5780] vpanic+0x56c/0xa60 [ 1565.087184][ T5780] ? __pfx__printk+0x10/0x10 [ 1565.087219][ T5780] ? __pfx_vpanic+0x10/0x10 [ 1565.087239][ T5780] ? is_bpf_text_address+0x292/0x2b0 [ 1565.087268][ T5780] ? is_bpf_text_address+0x26/0x2b0 [ 1565.087306][ T5780] panic+0xc5/0xd0 [ 1565.087332][ T5780] ? __pfx_panic+0x10/0x10 [ 1565.087370][ T5780] ? ret_from_fork_asm+0x1a/0x30 [ 1565.087406][ T5780] __warn+0x315/0x4c0 [ 1565.087428][ T5780] ? usb_submit_urb+0x79/0x18b0 [ 1565.087466][ T5780] ? usb_submit_urb+0x79/0x18b0 [ 1565.087505][ T5780] __report_bug+0x276/0x570 [ 1565.087543][ T5780] ? usb_submit_urb+0x79/0x18b0 [ 1565.087584][ T5780] ? __pfx___report_bug+0x10/0x10 [ 1565.087637][ T5780] report_bug_entry+0x19a/0x290 [ 1565.087670][ T5780] ? usb_submit_urb+0x7c/0x18b0 [ 1565.087706][ T5780] ? usb_submit_urb+0x81/0x18b0 [ 1565.087742][ T5780] handle_bug+0xce/0x200 [ 1565.087774][ T5780] exc_invalid_op+0x1a/0x50 [ 1565.087814][ T5780] asm_exc_invalid_op+0x1a/0x20 [ 1565.087839][ T5780] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1565.087879][ T5780] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 c9 4f 56 fb 49 83 3e 00 74 40 e8 ee dc ec fa 48 8d 3d d7 75 e3 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d3 dc ec fa eb 05 e8 cc dc [ 1565.087900][ T5780] RSP: 0018:ffffc90005746bf8 EFLAGS: 00010283 [ 1565.087919][ T5780] RAX: ffffffff86d8ee02 RBX: ffff88801f2d4400 RCX: 0000000000100000 [ 1565.087936][ T5780] RDX: ffffc9001b18e000 RSI: ffff88801f2d4400 RDI: ffffffff8fbc63e0 [ 1565.087953][ T5780] RBP: dffffc0000000000 R08: ffffffff8faf9837 R09: 1ffffffff1f5f306 [ 1565.087969][ T5780] R10: dffffc0000000000 R11: fffffbfff1f5f307 R12: 1ffff1100c492e0a [ 1565.087988][ T5780] R13: ffff888062497048 R14: ffff88801f2d4408 R15: 0000000000000cc0 [ 1565.088017][ T5780] ? usb_submit_urb+0x72/0x18b0 [ 1565.088062][ T5780] ? usb_submit_urb+0x72/0x18b0 [ 1565.088094][ T5780] ? lockdep_hardirqs_on+0x7a/0x110 [ 1565.088208][ T5780] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1565.088262][ T5780] ? mutex_lock_nested+0x152/0x1d0 [ 1565.088300][ T5780] ? cm109_input_open+0x97/0x460 [ 1565.088336][ T5780] cm109_input_open+0x1fb/0x460 [ 1565.088376][ T5780] input_open_device+0x1f9/0x3b0 [ 1565.088415][ T5780] kbd_connect+0xf6/0x150 [ 1565.088454][ T5780] input_register_device+0xd08/0x1150 [ 1565.088497][ T5780] cm109_usb_probe+0x11e4/0x16f0 [ 1565.088560][ T5780] usb_probe_interface+0x653/0xc60 [ 1565.088606][ T5780] ? __pfx_usb_probe_interface+0x10/0x10 [ 1565.088634][ T5780] really_probe+0x254/0xae0 [ 1565.088672][ T5780] __driver_probe_device+0x1e8/0x360 [ 1565.088707][ T5780] driver_probe_device+0x4f/0x240 [ 1565.088744][ T5780] __device_attach_driver+0x270/0x410 [ 1565.088786][ T5780] bus_for_each_drv+0x25b/0x2f0 [ 1565.088814][ T5780] ? __pfx___device_attach_driver+0x10/0x10 [ 1565.088846][ T5780] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1565.088870][ T5780] ? rt_spin_unlock+0x163/0x200 [ 1565.088914][ T5780] __device_attach+0x2c7/0x450 [ 1565.088946][ T5780] ? rt_spin_unlock+0x157/0x200 [ 1565.088984][ T5780] ? __pfx___device_attach+0x10/0x10 [ 1565.089026][ T5780] device_initial_probe+0xa1/0xd0 [ 1565.089059][ T5780] bus_probe_device+0x12d/0x220 [ 1565.089091][ T5780] device_add+0x7d7/0xb80 [ 1565.089126][ T5780] usb_set_configuration+0x1ad8/0x2180 [ 1565.089185][ T5780] usb_generic_driver_probe+0x8d/0x150 [ 1565.089217][ T5780] usb_probe_device+0x1c3/0x3b0 [ 1565.089263][ T5780] ? __pfx_usb_probe_device+0x10/0x10 [ 1565.089292][ T5780] really_probe+0x254/0xae0 [ 1565.089334][ T5780] __driver_probe_device+0x1e8/0x360 [ 1565.089370][ T5780] driver_probe_device+0x4f/0x240 [ 1565.089408][ T5780] __device_attach_driver+0x270/0x410 [ 1565.089451][ T5780] bus_for_each_drv+0x25b/0x2f0 [ 1565.089477][ T5780] ? __pfx___device_attach_driver+0x10/0x10 [ 1565.089510][ T5780] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1565.089537][ T5780] ? rt_spin_unlock+0x163/0x200 [ 1565.089585][ T5780] __device_attach+0x2c7/0x450 [ 1565.089624][ T5780] ? __pfx___device_attach+0x10/0x10 [ 1565.089672][ T5780] device_initial_probe+0xa1/0xd0 [ 1565.089708][ T5780] bus_probe_device+0x12d/0x220 [ 1565.089740][ T5780] device_add+0x7d7/0xb80 [ 1565.089777][ T5780] usb_new_device+0x98d/0x1610 [ 1565.089812][ T5780] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1565.089848][ T5780] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1565.089887][ T5780] ? __pfx_usb_new_device+0x10/0x10 [ 1565.089938][ T5780] hub_event+0x28cf/0x4cf0 [ 1565.090025][ T5780] ? __pfx_hub_event+0x10/0x10 [ 1565.090053][ T5780] ? process_scheduled_works+0xa20/0x14e0 [ 1565.090092][ T5780] ? rcu_is_watching+0x15/0xb0 [ 1565.090129][ T5780] ? process_scheduled_works+0xa20/0x14e0 [ 1565.090159][ T5780] process_scheduled_works+0xa8e/0x14e0 [ 1565.090234][ T5780] ? __pfx_process_scheduled_works+0x10/0x10 [ 1565.090275][ T5780] ? assign_work+0x3cf/0x5d0 [ 1565.090313][ T5780] worker_thread+0xa47/0xfb0 [ 1565.090363][ T5780] ? __kthread_parkme+0x71/0x1f0 [ 1565.090419][ T5780] kthread+0x388/0x470 [ 1565.090459][ T5780] ? __pfx_worker_thread+0x10/0x10 [ 1565.090488][ T5780] ? __pfx_kthread+0x10/0x10 [ 1565.090527][ T5780] ret_from_fork+0x514/0xb70 [ 1565.090571][ T5780] ? __pfx_ret_from_fork+0x10/0x10 [ 1565.090613][ T5780] ? __switch_to+0xc89/0x1420 [ 1565.090650][ T5780] ? __pfx_kthread+0x10/0x10 [ 1565.090703][ T5780] ret_from_fork_asm+0x1a/0x30 [ 1565.090751][ T5780] [ 1565.091362][ T5780] Kernel Offset: disabled