last executing test programs: 22.054436281s ago: executing program 4 (id=696): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)={0x4, 0x100000000, 0x80005, 0x800, 0xffff32e8, 0x4, '&\x00', 0xc, 0x0, 0x5, 0xa, 0x0, 0x7, 0xe}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r5, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r5, 0x1d, 0x0, 0x7, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40) syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_ublk_add_dev(r5, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x4e4, 0x0, 0x0, 0x1000, 0x9, r3, 0x0, 0xa4}}}, &(0x7f0000000300)=0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000200)={0x1}) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 17.868672169s ago: executing program 4 (id=706): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x100, 0x0, {}, {0x0, 0x0, 0x1, 0x2, 0x3, 0x4}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@acl}]}, 0x4, 0x5c4, &(0x7f0000000cc0)="$eJzs3c9vVNUeAPDvnZkW2r732kdenuLCNBqERGlpAYM/FrAnBH/s3FhpIcjwI7RGiyaWBDcmxo0LElcuxP9CiW5dmbhw4caVIcEfYaMxOuZO7wxDZ6adlk4v9n4+yWXOuedOz7nAt+fce8+ZCaCwxtM/ShG7I+JSEjHaUlaJrHB8qH7cnV/fOZVuSdRqL/2cRJLtaxyfZK8j2Zv/HI345sskdpXb651fvHJuplqdu5zlJxfOX5qcX7yy/+z5mTNzZ+YuTD89feTwocNHpg7c1/mVWtLHr73+5uj7J1759OM/kqnPvj+RxNH46fRyWet5bJbxGI/farV3V+5P/16PbHZlOSk3/5/clVTadvGAqmQxMhARD8VolFv+6UbjvRdybRzQV7UkogYUVCL+oaAa44DGtX1v18GlPo9KgK1w+1jUr/7b47+yfG8wxur3BvaseF+HW3obktbx9VcnrqVb9Ok+HNDZ0tUdWWpl/Cf12ByLnfXc8J3SPTd10xHAyew13f/iBusfX5EX/7B1lq5GxMOdxv9rx/+rLfH/2gbrF/8AAAAAAACweW4ei4inOj3/K2XP5nbGY/Xnf8ny879v764QPLoJ9a/9/K90axOqATq4fSzi+Y7zf5tzfMfKWe7fy7MBk9Nnq3MHIuI/EbEvBnak+alV6tj/wa7r3cpa5/+lW1p/Yy5g1o5blR33vmd2ZmHmfs4ZWHb7asQjle7zf9L+P2nt/zPp74NLPdaxa8+Nk93K1o5/oF9qn0Ts7dj/J81jktU/n2OyPh6YbIwK2j369oefd6tf/EN+0v5/ePX4H0taP69nfn0/fzAiDi5Wat3KNzr+H0xeLjd+fuqtmYWFy1MRg8nx9v3T62szbDNP/JIlGvHQiJc0/vc9vvr9v+b4vyUOhyJiqcfK///XyA/dyvT/kJ80/mfX1f+vPzF9Y+yLbvX31v8fqvfp+7I97v/B6noN0LzbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RKWI+FckpYlmulSamIgYiYj/xXCpenF+4cnTF9+4MJuW1b//v9T4pt/R5XzS+P7/sZb89Ir8wYj4b0R8VB6q5ydOXazO5n3yAAAAAAAAAAAAAAAAAAAA8IAY6bL+P/VjOe/WAX1XyV7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/HBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28rN5565nkTE0rND9S01mJU1HwwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJm6vdap/Lus/+T/jQIAAAAAAAAAAAAAGizd/fN79Zc/w9sS9b/Q3FZ/w/FtXL9/3BO7QC2nmt8YK1V/Nb/AwAAAAAAAAAAAED+5hevnJupVucu9ztxNCK2qi6J7ZEYiIgHoBk5JAa3OjzbEzn/YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr+DgAA///vpySz") ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14.958900972s ago: executing program 4 (id=710): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000005700), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) 13.497178695s ago: executing program 3 (id=714): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file1\x00', 0x4000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656b2c0075b26038ff1837c965f9b83e349c9ce965cdec5a1dfcf07fa09e1d6da48000b8"], 0xf9, 0x5dab, &(0x7f000000bb40)="$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") writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 12.231864348s ago: executing program 4 (id=716): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)={0x4, 0x100000000, 0x80005, 0x800, 0xffff32e8, 0x4, '&\x00', 0xc, 0x0, 0x5, 0xa, 0x0, 0x7, 0xe}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r5, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r5, 0x1d, 0x0, 0x7, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40) syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_ublk_add_dev(r5, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x4e4, 0x0, 0x0, 0x1000, 0x9, r3, 0x0, 0xa4}}}, &(0x7f0000000300)=0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000200)={0x1}) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 12.163987276s ago: executing program 3 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="180000009100000000000000010a000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='md0', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000380)="0000004a0000000004000002000000020000000000000001000000007c") openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', &(0x7f0000000000)=""/113, 0x71) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 9.770549376s ago: executing program 1 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = inotify_init() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8010) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r6 = socket(0x10, 0x3, 0x1000000) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x14, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) 9.643696779s ago: executing program 3 (id=721): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20280, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x6) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) 8.364878475s ago: executing program 4 (id=723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) unshare(0x6a040000) socket(0x28, 0xa, 0x9) 8.305202851s ago: executing program 3 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f00000ac000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0xe8102000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$pppoe(0x18, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x8001, 0x3, 0x80, 0xfffffffffffffffd}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0xf29, 0x663, 0x7fffffff, 0x3}, 0x0, 0x0) 8.000765818s ago: executing program 2 (id=725): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9, 0x1, 0x401, 0x200, 0x3, 0xf801, 0xb, 0x6, 0xfffd, 0xa256, 0x20c, 0x83, 0x9, 0x8, 0x200, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 6.685647904s ago: executing program 4 (id=727): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000005700), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) 6.128526776s ago: executing program 3 (id=729): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) 6.117604909s ago: executing program 2 (id=730): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@userptr={0x0, 0x1, 0x4, 0x8, 0x80002, {0x77359400}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '#\x00\a\x00'}, 0xfffe, 0x2, {0x0}, 0x2}) 6.032487421s ago: executing program 1 (id=731): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.707183279s ago: executing program 2 (id=734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20280, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x6) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) 4.592944148s ago: executing program 1 (id=735): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) r2 = syz_open_procfs(r0, &(0x7f00000003c0)='stat\x00') setreuid(0xee01, 0xee01) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.542042041s ago: executing program 3 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlockall(0x7) 4.489226044s ago: executing program 2 (id=737): write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x52) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000240)) syz_emit_vhci(0x0, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) r4 = semget(0x1, 0x4, 0x39c) semop(r4, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 3.557505522s ago: executing program 1 (id=738): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x3, @mcast2, 0xffff}, 0x1c) listen(r2, 0x5) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r3, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 3.456126878s ago: executing program 0 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mremap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000be6000/0x2000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f91000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.930916012s ago: executing program 0 (id=740): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x4c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9, 0x1, 0x401, 0x200, 0x3, 0xf801, 0xb, 0x6, 0xfffd, 0xa256, 0x20c, 0x83, 0x9, 0x8, 0x200, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 2.836865536s ago: executing program 1 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = inotify_init() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8010) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r6 = socket(0x10, 0x3, 0x1000000) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x14, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) 2.712526838s ago: executing program 0 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') 1.458048258s ago: executing program 1 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) 1.307819316s ago: executing program 0 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000280)=0x80, 0x4) 1.268220266s ago: executing program 2 (id=745): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@userptr={0x0, 0x1, 0x4, 0x8, 0x80002, {0x77359400}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '#\x00\a\x00'}, 0xfffe, 0x2, {0x0}, 0x2}) 912.886377ms ago: executing program 0 (id=746): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700), 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) 58.464735ms ago: executing program 2 (id=747): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20280, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 0s ago: executing program 0 (id=748): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) listen(r0, 0xa) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) kernel console output (not intermixed with test programs): ave_0: link becomes ready [ 70.598533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.611864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.620988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.669563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.680466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.694625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.705495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.714435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.724735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.734683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.744014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.754676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.764851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.773244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.781557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.790224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.802642][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.813906][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.825658][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.836093][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.857307][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.868687][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.883917][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.891403][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.899459][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.908684][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.917901][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.925039][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.933612][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.950279][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.977828][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.993211][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.008080][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.025169][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.032331][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.048710][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.057891][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.071190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.112383][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.128439][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.140405][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.157252][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.168903][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.177783][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.186458][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.194988][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.202205][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 71.203591][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 71.209016][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 71.215001][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 71.222578][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.236461][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.243620][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.274215][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.282247][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 71.290929][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.297539][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.304786][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.327187][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.353191][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.363175][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.370284][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.403810][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.413486][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.425995][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.444117][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.484116][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.494395][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.503612][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.513482][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.521801][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.532056][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.540406][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.548954][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.557834][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.567559][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.596398][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.609696][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.620933][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.635631][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.646630][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.658688][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.670515][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.686788][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.697020][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.714633][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.726609][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.738347][ T4274] device veth0_vlan entered promiscuous mode [ 71.748375][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.756897][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.786594][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.804748][ T4274] device veth1_vlan entered promiscuous mode [ 71.817675][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.827565][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.838520][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.883877][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.896064][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.905230][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.915499][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.925090][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.937576][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.948924][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.965045][ T4273] device veth0_vlan entered promiscuous mode [ 71.997705][ T4273] device veth1_vlan entered promiscuous mode [ 72.013152][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.027319][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.036167][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.056710][ T4271] device veth0_vlan entered promiscuous mode [ 72.077023][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.087048][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.094998][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.104227][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.114451][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.125027][ T4274] device veth0_macvtap entered promiscuous mode [ 72.141150][ T4274] device veth1_macvtap entered promiscuous mode [ 72.158133][ T4271] device veth1_vlan entered promiscuous mode [ 72.188939][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.198591][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.207622][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.216459][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.224863][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.234918][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.251283][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.265678][ T4273] device veth0_macvtap entered promiscuous mode [ 72.279916][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.289396][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.298757][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.307045][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.317930][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.337412][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.347487][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.360395][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.374820][ T4273] device veth1_macvtap entered promiscuous mode [ 72.386524][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.397668][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.406783][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.415837][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.443556][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.453321][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.461320][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.469171][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.494829][ T4271] device veth0_macvtap entered promiscuous mode [ 72.514236][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.526110][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.544457][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.560084][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.568729][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.578090][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.587899][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.597934][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.622554][ T4271] device veth1_macvtap entered promiscuous mode [ 72.653693][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.674057][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.685387][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.701660][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.728080][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.743742][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.758151][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.768041][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.794199][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.804303][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.813757][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.822621][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.832298][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.843354][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.854658][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.866071][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.877855][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.896814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.913092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.938092][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.949393][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.959436][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.970322][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.983411][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.996413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.005940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.015472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.024343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.033283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.041465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.050071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.058044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.079342][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.091507][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.101487][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.111716][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.127383][ T4272] device veth0_vlan entered promiscuous mode [ 73.149633][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.159521][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.174057][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.182411][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.211613][ T4272] device veth1_vlan entered promiscuous mode [ 73.218539][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.227925][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.240236][ T4286] device veth0_vlan entered promiscuous mode [ 73.258701][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.270644][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.278956][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.282930][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 73.287651][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 73.292314][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 73.298320][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 73.362747][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 73.391741][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.394519][ T4286] device veth1_vlan entered promiscuous mode [ 73.418470][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.436340][ T4272] device veth0_macvtap entered promiscuous mode [ 73.446503][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.447345][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.462021][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.468087][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.477792][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.488259][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.496853][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.506168][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.514834][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.549798][ T4286] device veth0_macvtap entered promiscuous mode [ 73.582542][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.594715][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.606852][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.618461][ T4272] device veth1_macvtap entered promiscuous mode [ 73.650467][ T4286] device veth1_macvtap entered promiscuous mode [ 73.659635][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.673999][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.684440][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.697573][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.709187][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.732053][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.742810][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.753650][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.764820][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.775552][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.810061][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.886816][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.932123][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.979762][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.026369][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.707597][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.719576][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.745369][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.754541][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.787251][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.810113][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.822153][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.833308][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.843959][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.854550][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.871655][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.886260][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.897552][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.907429][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.918335][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.928527][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.939621][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.951072][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.959929][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.968391][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.977093][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.986095][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.995469][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.011754][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.027963][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.038618][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.050121][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.060069][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.070784][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.080705][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.095634][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.117548][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.147528][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.157855][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.164973][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.174662][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.187879][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.196894][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.207456][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223290][ T4286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.232772][ T4286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.271993][ T4286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.287633][ T4286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.362039][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 75.364002][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 75.368074][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 75.372407][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 75.379596][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.397903][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.407744][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.420724][ T4318] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.430027][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.443370][ T4315] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.445513][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 75.476530][ T4318] usb 3-1: config 0 descriptor?? [ 75.519904][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.536386][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.544600][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.586848][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.600651][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.612372][ T4356] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.621763][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.622473][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.631811][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.649252][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.674015][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.700307][ T4315] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 75.712037][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.727660][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.735707][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.748417][ T4315] usb 2-1: config 0 has no interface number 0 [ 75.759885][ T4315] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 75.778716][ T4315] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 75.789187][ T4315] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.811326][ T4315] usb 2-1: config 0 interface 52 has no altsetting 0 [ 75.820668][ T4356] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 75.838089][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.861966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.871949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.881945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.891948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.901936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.911937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.921942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.931940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.941940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.951938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 77.217914][ T4318] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 77.243580][ T4318] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 77.277174][ T4315] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 77.297428][ T4315] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 77.327219][ T4315] usb 2-1: Product: syz [ 77.331587][ T4315] usb 2-1: Manufacturer: syz [ 77.351830][ T4315] usb 2-1: SerialNumber: syz [ 77.378743][ T4315] usb 2-1: config 0 descriptor?? [ 77.637097][ T4356] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 77.869243][ T4383] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input5 [ 78.122351][ T4315] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 78.142963][ T4356] usb 1-1: USB disconnect, device number 2 [ 78.168368][ T4315] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 78.390065][ T127] usb 2-1: USB disconnect, device number 2 [ 78.405569][ T4360] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 78.440573][ T4360] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.460707][ T4360] overlayfs: missing 'lowerdir' [ 78.891678][ T4399] tmpfs: Unknown parameter 'usrquota' [ 81.336501][ T4356] usb 3-1: USB disconnect, device number 2 [ 81.630703][ T4431] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.031253][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.046274][ T955] cfg80211: failed to load regulatory.db [ 87.253999][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 87.278884][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.557024][ T14] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 88.514638][ T127] usb 4-1: USB disconnect, device number 2 [ 88.971990][ T4356] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.753506][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.794893][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.837740][ T4496] tmpfs: Unknown parameter 'quota' [ 89.926375][ T4356] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.449738][ T4356] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.587451][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.697424][ T4356] usb 1-1: config 0 descriptor?? [ 92.150778][ T4356] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 92.178167][ T4356] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 92.187842][ T4483] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 92.232114][ T4483] overlayfs: missing 'lowerdir' [ 92.377415][ T4356] usb 1-1: USB disconnect, device number 3 [ 94.766012][ T4516] fido_id[4516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 95.008607][ T4385] rpcbind: server 127.0.0.1 not responding, timed out [ 96.825374][ T26] audit: type=1326 audit(1790680572.489:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.0.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6a39e159 code=0x0 [ 97.457386][ T4556] Zero length message leads to an empty skb [ 97.967387][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.273970][ T4571] netlink: 256 bytes leftover after parsing attributes in process `syz.3.59'. [ 99.283174][ T4571] netlink: 72 bytes leftover after parsing attributes in process `syz.3.59'. [ 99.419763][ T14] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.454790][ T14] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.476789][ T14] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.109980][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.308135][ T14] usb 3-1: can't set config #27, error -71 [ 101.409621][ T14] usb 3-1: USB disconnect, device number 3 [ 101.696979][ T4586] FAULT_INJECTION: forcing a failure. [ 101.696979][ T4586] name failslab, interval 1, probability 0, space 0, times 1 [ 101.821185][ T4586] CPU: 0 PID: 4586 Comm: syz.4.65 Not tainted syzkaller #0 [ 101.828454][ T4586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.838544][ T4586] Call Trace: [ 101.841843][ T4586] [ 101.844786][ T4586] dump_stack_lvl+0x188/0x24e [ 101.849502][ T4586] ? show_regs_print_info+0x12/0x12 [ 101.854719][ T4586] ? load_image+0x410/0x410 [ 101.859253][ T4586] ? __lock_acquire+0x7c40/0x7c40 [ 101.864307][ T4586] should_fail_ex+0x390/0x4c0 [ 101.869013][ T4586] should_failslab+0x5/0x20 [ 101.873536][ T4586] slab_pre_alloc_hook+0x59/0x300 [ 101.878580][ T4586] ? legacy_init_fs_context+0x4d/0xb0 [ 101.883969][ T4586] __kmem_cache_alloc_node+0x4f/0x270 [ 101.889361][ T4586] ? legacy_init_fs_context+0x4d/0xb0 [ 101.894755][ T4586] kmalloc_trace+0x26/0xe0 [ 101.899184][ T4586] legacy_init_fs_context+0x4d/0xb0 [ 101.904411][ T4586] alloc_fs_context+0x628/0x7d0 [ 101.909284][ T4586] __se_sys_fsopen+0xa0/0x2c0 [ 101.913978][ T4586] do_syscall_64+0x4c/0xa0 [ 101.918412][ T4586] ? clear_bhb_loop+0x60/0xb0 [ 101.923106][ T4586] ? clear_bhb_loop+0x60/0xb0 [ 101.927793][ T4586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.933710][ T4586] RIP: 0033:0x7ff32259e159 [ 101.938150][ T4586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.957773][ T4586] RSP: 002b:00007ff3233fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 101.966235][ T4586] RAX: ffffffffffffffda RBX: 00007ff322825fa0 RCX: 00007ff32259e159 [ 101.974243][ T4586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 101.982241][ T4586] RBP: 00007ff32263506b R08: 0000000000000000 R09: 0000000000000000 [ 101.990232][ T4586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.998215][ T4586] R13: 00007ff322826038 R14: 00007ff322825fa0 R15: 00007fffbaa01f68 [ 102.006212][ T4586] [ 105.207081][ T4622] netlink: 256 bytes leftover after parsing attributes in process `syz.1.73'. [ 105.216558][ T4622] netlink: 72 bytes leftover after parsing attributes in process `syz.1.73'. [ 105.626589][ T4628] process 'syz.1.75' launched './file1' with NULL argv: empty string added [ 106.427140][ T4356] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.671970][ T4356] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.626013][ T4356] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.635887][ T4356] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 108.648851][ T4356] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 108.657959][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.677264][ T4356] usb 5-1: can't set config #1, error -71 [ 108.684137][ T4356] usb 5-1: USB disconnect, device number 2 [ 112.305154][ T4674] netlink: 256 bytes leftover after parsing attributes in process `syz.2.96'. [ 112.314601][ T4674] netlink: 72 bytes leftover after parsing attributes in process `syz.2.96'. [ 113.653598][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.900232][ T4691] FAULT_INJECTION: forcing a failure. [ 113.900232][ T4691] name failslab, interval 1, probability 0, space 0, times 0 [ 113.913108][ T4691] CPU: 1 PID: 4691 Comm: syz.3.82 Not tainted syzkaller #0 [ 113.920330][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.930401][ T4691] Call Trace: [ 113.932275][ T14] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.933680][ T4691] [ 113.947576][ T4691] dump_stack_lvl+0x188/0x24e [ 113.952282][ T4691] ? show_regs_print_info+0x12/0x12 [ 113.954928][ T14] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.957485][ T4691] ? load_image+0x410/0x410 [ 113.971809][ T4691] ? __lock_acquire+0x7c40/0x7c40 [ 113.976869][ T4691] should_fail_ex+0x390/0x4c0 [ 113.981557][ T4691] should_failslab+0x5/0x20 [ 113.986068][ T4691] slab_pre_alloc_hook+0x59/0x300 [ 113.991096][ T4691] ? legacy_init_fs_context+0x4d/0xb0 [ 113.996495][ T4691] __kmem_cache_alloc_node+0x4f/0x270 [ 114.001861][ T4691] ? legacy_init_fs_context+0x4d/0xb0 [ 114.007843][ T4691] kmalloc_trace+0x26/0xe0 [ 114.012451][ T4691] legacy_init_fs_context+0x4d/0xb0 [ 114.017664][ T4691] alloc_fs_context+0x628/0x7d0 [ 114.022545][ T4691] __se_sys_fsopen+0xa0/0x2c0 [ 114.027243][ T4691] do_syscall_64+0x4c/0xa0 [ 114.031659][ T4691] ? clear_bhb_loop+0x60/0xb0 [ 114.036331][ T4691] ? clear_bhb_loop+0x60/0xb0 [ 114.041033][ T4691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.046942][ T4691] RIP: 0033:0x7fccee99e159 [ 114.051361][ T4691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.070965][ T4691] RSP: 002b:00007fccef953028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 114.079381][ T4691] RAX: ffffffffffffffda RBX: 00007fcceec25fa0 RCX: 00007fccee99e159 [ 114.087346][ T4691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 114.095311][ T4691] RBP: 00007fcceea3506b R08: 0000000000000000 R09: 0000000000000000 [ 114.103272][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.111234][ T4691] R13: 00007fcceec26038 R14: 00007fcceec25fa0 R15: 00007ffe7a174708 [ 114.119296][ T4691] [ 114.210161][ T14] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.219424][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.281878][ T4676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.925651][ T4402] usb 5-1: USB disconnect, device number 3 [ 120.225259][ T4725] netlink: 256 bytes leftover after parsing attributes in process `syz.4.99'. [ 120.234361][ T4725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.99'. [ 120.524346][ T4731] FAULT_INJECTION: forcing a failure. [ 120.524346][ T4731] name failslab, interval 1, probability 0, space 0, times 0 [ 120.537433][ T4731] CPU: 1 PID: 4731 Comm: syz.4.103 Not tainted syzkaller #0 [ 120.544755][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.554850][ T4731] Call Trace: [ 120.558150][ T4731] [ 120.561095][ T4731] dump_stack_lvl+0x188/0x24e [ 120.565815][ T4731] ? show_regs_print_info+0x12/0x12 [ 120.571027][ T4731] ? load_image+0x410/0x410 [ 120.575532][ T4731] ? __might_sleep+0xd0/0xd0 [ 120.580120][ T4731] ? __lock_acquire+0x7c40/0x7c40 [ 120.585146][ T4731] should_fail_ex+0x390/0x4c0 [ 120.589834][ T4731] should_failslab+0x5/0x20 [ 120.594338][ T4731] slab_pre_alloc_hook+0x59/0x300 [ 120.599365][ T4731] ? __kasan_kmalloc+0x8e/0xa0 [ 120.604132][ T4731] ? __se_sys_fsopen+0x135/0x2c0 [ 120.609075][ T4731] __kmem_cache_alloc_node+0x4f/0x270 [ 120.614448][ T4731] ? __se_sys_fsopen+0x135/0x2c0 [ 120.619389][ T4731] kmalloc_trace+0x26/0xe0 [ 120.623799][ T4731] __se_sys_fsopen+0x135/0x2c0 [ 120.628559][ T4731] do_syscall_64+0x4c/0xa0 [ 120.632969][ T4731] ? clear_bhb_loop+0x60/0xb0 [ 120.637644][ T4731] ? clear_bhb_loop+0x60/0xb0 [ 120.642318][ T4731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.648237][ T4731] RIP: 0033:0x7ff32259e159 [ 120.652654][ T4731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.672278][ T4731] RSP: 002b:00007ff3233fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 120.680734][ T4731] RAX: ffffffffffffffda RBX: 00007ff322825fa0 RCX: 00007ff32259e159 [ 120.688713][ T4731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 120.696697][ T4731] RBP: 00007ff32263506b R08: 0000000000000000 R09: 0000000000000000 [ 120.704667][ T4731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.712631][ T4731] R13: 00007ff322826038 R14: 00007ff322825fa0 R15: 00007fffbaa01f68 [ 120.720614][ T4731] [ 121.795527][ T4742] FAULT_INJECTION: forcing a failure. [ 121.795527][ T4742] name failslab, interval 1, probability 0, space 0, times 0 [ 121.939677][ T4742] CPU: 1 PID: 4742 Comm: syz.2.107 Not tainted syzkaller #0 [ 121.947039][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.957118][ T4742] Call Trace: [ 121.960411][ T4742] [ 121.963355][ T4742] dump_stack_lvl+0x188/0x24e [ 121.968060][ T4742] ? show_regs_print_info+0x12/0x12 [ 121.973286][ T4742] ? load_image+0x410/0x410 [ 121.977819][ T4742] ? __might_sleep+0xd0/0xd0 [ 121.982430][ T4742] ? __lock_acquire+0x7c40/0x7c40 [ 121.987488][ T4742] should_fail_ex+0x390/0x4c0 [ 121.992203][ T4742] should_failslab+0x5/0x20 [ 121.996729][ T4742] slab_pre_alloc_hook+0x59/0x300 [ 122.001789][ T4742] ? do_check_common+0x4111/0xc560 [ 122.006924][ T4742] __kmem_cache_alloc_node+0x4f/0x270 [ 122.012334][ T4742] ? do_check_common+0x4111/0xc560 [ 122.017463][ T4742] __kmalloc_node_track_caller+0xa0/0x240 [ 122.023217][ T4742] ? __phys_addr+0xb6/0x170 [ 122.027745][ T4742] krealloc+0x6a/0x100 [ 122.031838][ T4742] do_check_common+0x4111/0xc560 [ 122.036839][ T4742] ? push_insn+0x670/0x670 [ 122.041274][ T4742] ? do_check_subprogs+0x313/0x360 [ 122.046407][ T4742] bpf_check+0x3eb5/0x11010 [ 122.050947][ T4742] ? mark_lock+0x94/0x320 [ 122.055307][ T4742] ? bpf_get_btf_vmlinux+0x10/0x10 [ 122.060438][ T4742] ? __lock_acquire+0x1465/0x7c40 [ 122.065492][ T4742] ? mark_lock+0x94/0x320 [ 122.069850][ T4742] ? __lock_acquire+0x138a/0x7c40 [ 122.074912][ T4742] ? mark_lock+0x94/0x320 [ 122.079277][ T4742] ? __lock_acquire+0x1465/0x7c40 [ 122.084334][ T4742] ? mark_lock+0x94/0x320 [ 122.088698][ T4742] ? __lock_acquire+0x1465/0x7c40 [ 122.093769][ T4742] ? verify_lock_unused+0x140/0x140 [ 122.099007][ T4742] ? verify_lock_unused+0x140/0x140 [ 122.104237][ T4742] ? verify_lock_unused+0x140/0x140 [ 122.109468][ T4742] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 122.115324][ T4742] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.121338][ T4742] ? __lock_acquire+0x7c40/0x7c40 [ 122.126393][ T4742] ? lock_chain_count+0x20/0x20 [ 122.131368][ T4742] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 122.137635][ T4742] ? lockdep_hardirqs_on+0x94/0x140 [ 122.142860][ T4742] ? ktime_get_with_offset+0xff/0x320 [ 122.148260][ T4742] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 122.154530][ T4742] ? ktime_get_real_ts64+0x440/0x440 [ 122.159837][ T4742] ? do_raw_spin_unlock+0x11d/0x230 [ 122.165058][ T4742] ? __might_fault+0xc2/0x120 [ 122.169762][ T4742] ? memset+0x1e/0x40 [ 122.173768][ T4742] ? bpf_obj_name_cpy+0x190/0x1d0 [ 122.178815][ T4742] bpf_prog_load+0x100e/0x1530 [ 122.183609][ T4742] ? map_freeze+0x390/0x390 [ 122.188135][ T4742] ? __might_fault+0xa6/0x120 [ 122.192850][ T4742] ? __might_fault+0xa6/0x120 [ 122.197550][ T4742] ? __might_fault+0xc2/0x120 [ 122.202242][ T4742] ? __might_fault+0xa6/0x120 [ 122.206940][ T4742] ? bpf_lsm_bpf+0x5/0x10 [ 122.211289][ T4742] ? security_bpf+0x7a/0xa0 [ 122.215826][ T4742] __sys_bpf+0x5b8/0x780 [ 122.220098][ T4742] ? bpf_link_show_fdinfo+0x380/0x380 [ 122.225508][ T4742] ? lock_chain_count+0x20/0x20 [ 122.230390][ T4742] __x64_sys_bpf+0x78/0x90 [ 122.234832][ T4742] do_syscall_64+0x4c/0xa0 [ 122.239268][ T4742] ? clear_bhb_loop+0x60/0xb0 [ 122.243966][ T4742] ? clear_bhb_loop+0x60/0xb0 [ 122.248662][ T4742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.254580][ T4742] RIP: 0033:0x7fd7c739e159 [ 122.259015][ T4742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.278642][ T4742] RSP: 002b:00007fd7c81a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.287084][ T4742] RAX: ffffffffffffffda RBX: 00007fd7c7625fa0 RCX: 00007fd7c739e159 [ 122.295079][ T4742] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 122.303065][ T4742] RBP: 00007fd7c743506b R08: 0000000000000000 R09: 0000000000000000 [ 122.311055][ T4742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.319040][ T4742] R13: 00007fd7c7626038 R14: 00007fd7c7625fa0 R15: 00007ffd458c4e08 [ 122.327040][ T4742] [ 125.795085][ T4778] netlink: 256 bytes leftover after parsing attributes in process `syz.2.113'. [ 125.804117][ T4778] netlink: 72 bytes leftover after parsing attributes in process `syz.2.113'. [ 126.260613][ T4793] FAULT_INJECTION: forcing a failure. [ 126.260613][ T4793] name failslab, interval 1, probability 0, space 0, times 0 [ 126.274501][ T4793] CPU: 1 PID: 4793 Comm: syz.0.118 Not tainted syzkaller #0 [ 126.281838][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.291894][ T4793] Call Trace: [ 126.295181][ T4793] [ 126.298100][ T4793] dump_stack_lvl+0x188/0x24e [ 126.302769][ T4793] ? show_regs_print_info+0x12/0x12 [ 126.307957][ T4793] ? load_image+0x410/0x410 [ 126.312466][ T4793] ? __lock_acquire+0x7c40/0x7c40 [ 126.317539][ T4793] should_fail_ex+0x390/0x4c0 [ 126.322229][ T4793] should_failslab+0x5/0x20 [ 126.326740][ T4793] slab_pre_alloc_hook+0x59/0x300 [ 126.331753][ T4793] ? legacy_init_fs_context+0x4d/0xb0 [ 126.337124][ T4793] __kmem_cache_alloc_node+0x4f/0x270 [ 126.342493][ T4793] ? legacy_init_fs_context+0x4d/0xb0 [ 126.347875][ T4793] kmalloc_trace+0x26/0xe0 [ 126.352320][ T4793] legacy_init_fs_context+0x4d/0xb0 [ 126.357549][ T4793] alloc_fs_context+0x628/0x7d0 [ 126.362401][ T4793] __se_sys_fsopen+0xa0/0x2c0 [ 126.367110][ T4793] do_syscall_64+0x4c/0xa0 [ 126.371545][ T4793] ? clear_bhb_loop+0x60/0xb0 [ 126.376217][ T4793] ? clear_bhb_loop+0x60/0xb0 [ 126.380888][ T4793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.386779][ T4793] RIP: 0033:0x7f9c6a39e159 [ 126.391193][ T4793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.410816][ T4793] RSP: 002b:00007f9c6b1f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 126.419226][ T4793] RAX: ffffffffffffffda RBX: 00007f9c6a625fa0 RCX: 00007f9c6a39e159 [ 126.427196][ T4793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 126.435169][ T4793] RBP: 00007f9c6a43506b R08: 0000000000000000 R09: 0000000000000000 [ 126.443158][ T4793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.451131][ T4793] R13: 00007f9c6a626038 R14: 00007f9c6a625fa0 R15: 00007ffc6ffbd0c8 [ 126.459135][ T4793] [ 127.599460][ T4797] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input7 [ 131.680777][ T4842] FAULT_INJECTION: forcing a failure. [ 131.680777][ T4842] name failslab, interval 1, probability 0, space 0, times 0 [ 131.693735][ T4842] CPU: 0 PID: 4842 Comm: syz.2.132 Not tainted syzkaller #0 [ 131.701049][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.711138][ T4842] Call Trace: [ 131.714409][ T4842] [ 131.717323][ T4842] dump_stack_lvl+0x188/0x24e [ 131.722012][ T4842] ? show_regs_print_info+0x12/0x12 [ 131.727198][ T4842] ? load_image+0x410/0x410 [ 131.731695][ T4842] ? __might_sleep+0xd0/0xd0 [ 131.736267][ T4842] ? __lock_acquire+0x7c40/0x7c40 [ 131.741289][ T4842] should_fail_ex+0x390/0x4c0 [ 131.745960][ T4842] should_failslab+0x5/0x20 [ 131.750445][ T4842] slab_pre_alloc_hook+0x59/0x300 [ 131.755466][ T4842] ? __kasan_kmalloc+0x8e/0xa0 [ 131.760232][ T4842] ? __se_sys_fsopen+0x135/0x2c0 [ 131.765167][ T4842] __kmem_cache_alloc_node+0x4f/0x270 [ 131.770571][ T4842] ? __se_sys_fsopen+0x135/0x2c0 [ 131.775513][ T4842] kmalloc_trace+0x26/0xe0 [ 131.779922][ T4842] __se_sys_fsopen+0x135/0x2c0 [ 131.784681][ T4842] do_syscall_64+0x4c/0xa0 [ 131.789091][ T4842] ? clear_bhb_loop+0x60/0xb0 [ 131.793757][ T4842] ? clear_bhb_loop+0x60/0xb0 [ 131.798428][ T4842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.804325][ T4842] RIP: 0033:0x7fd7c739e159 [ 131.808735][ T4842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.828342][ T4842] RSP: 002b:00007fd7c81a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 131.836753][ T4842] RAX: ffffffffffffffda RBX: 00007fd7c7625fa0 RCX: 00007fd7c739e159 [ 131.844719][ T4842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 131.852684][ T4842] RBP: 00007fd7c743506b R08: 0000000000000000 R09: 0000000000000000 [ 131.860647][ T4842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.868607][ T4842] R13: 00007fd7c7626038 R14: 00007fd7c7625fa0 R15: 00007ffd458c4e08 [ 131.876587][ T4842] [ 132.753017][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759665][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.927034][ T4852] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8 [ 134.364960][ T4864] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 134.364960][ T4864] [ 134.378968][ T4864] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 134.393095][ T4864] CIFS: Attempting to mount \\127.0.0.1\share [ 135.186737][ T4864] CIFS: VFS: cifs_mount failed w/return code = -112 [ 138.110936][ T4882] FAULT_INJECTION: forcing a failure. [ 138.110936][ T4882] name failslab, interval 1, probability 0, space 0, times 0 [ 138.124565][ T4882] CPU: 1 PID: 4882 Comm: syz.3.145 Not tainted syzkaller #0 [ 138.131897][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.141979][ T4882] Call Trace: [ 138.145267][ T4882] [ 138.148242][ T4882] dump_stack_lvl+0x188/0x24e [ 138.152952][ T4882] ? show_regs_print_info+0x12/0x12 [ 138.158162][ T4882] ? load_image+0x410/0x410 [ 138.162709][ T4882] ? __might_sleep+0xd0/0xd0 [ 138.167300][ T4882] ? __lock_acquire+0x7c40/0x7c40 [ 138.172317][ T4882] should_fail_ex+0x390/0x4c0 [ 138.176986][ T4882] should_failslab+0x5/0x20 [ 138.181472][ T4882] slab_pre_alloc_hook+0x59/0x300 [ 138.186509][ T4882] ? __kasan_kmalloc+0x8e/0xa0 [ 138.191278][ T4882] ? __se_sys_fsopen+0x135/0x2c0 [ 138.196221][ T4882] __kmem_cache_alloc_node+0x4f/0x270 [ 138.201584][ T4882] ? __se_sys_fsopen+0x135/0x2c0 [ 138.206513][ T4882] kmalloc_trace+0x26/0xe0 [ 138.210914][ T4882] __se_sys_fsopen+0x135/0x2c0 [ 138.215683][ T4882] do_syscall_64+0x4c/0xa0 [ 138.220529][ T4882] ? clear_bhb_loop+0x60/0xb0 [ 138.225196][ T4882] ? clear_bhb_loop+0x60/0xb0 [ 138.229862][ T4882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.235745][ T4882] RIP: 0033:0x7fccee99e159 [ 138.240153][ T4882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.259755][ T4882] RSP: 002b:00007fccef953028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 138.268159][ T4882] RAX: ffffffffffffffda RBX: 00007fcceec25fa0 RCX: 00007fccee99e159 [ 138.276142][ T4882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 138.284100][ T4882] RBP: 00007fcceea3506b R08: 0000000000000000 R09: 0000000000000000 [ 138.292059][ T4882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.300036][ T4882] R13: 00007fcceec26038 R14: 00007fcceec25fa0 R15: 00007ffe7a174708 [ 138.308004][ T4882] [ 140.106843][ T4900] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input9 [ 141.611206][ T4314] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.062012][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 142.792669][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.805406][ T4314] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 142.819100][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.829851][ T4314] usb 3-1: config 0 descriptor?? [ 142.843068][ T4314] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 142.862009][ T4926] netlink: 5 bytes leftover after parsing attributes in process `syz.0.156'. [ 142.955883][ T4928] FAULT_INJECTION: forcing a failure. [ 142.955883][ T4928] name failslab, interval 1, probability 0, space 0, times 0 [ 142.971081][ T4928] CPU: 1 PID: 4928 Comm: syz.1.157 Not tainted syzkaller #0 [ 142.978412][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.988485][ T4928] Call Trace: [ 142.991773][ T4928] [ 142.994712][ T4928] dump_stack_lvl+0x188/0x24e [ 142.999415][ T4928] ? show_regs_print_info+0x12/0x12 [ 143.004629][ T4928] ? load_image+0x410/0x410 [ 143.009140][ T4928] ? __might_sleep+0xd0/0xd0 [ 143.013726][ T4928] ? __lock_acquire+0x7c40/0x7c40 [ 143.018751][ T4928] should_fail_ex+0x390/0x4c0 [ 143.023428][ T4928] should_failslab+0x5/0x20 [ 143.027920][ T4928] slab_pre_alloc_hook+0x59/0x300 [ 143.032943][ T4928] ? __kasan_kmalloc+0x8e/0xa0 [ 143.037704][ T4928] ? __se_sys_fsopen+0x135/0x2c0 [ 143.042635][ T4928] __kmem_cache_alloc_node+0x4f/0x270 [ 143.048001][ T4928] ? __se_sys_fsopen+0x135/0x2c0 [ 143.052936][ T4928] kmalloc_trace+0x26/0xe0 [ 143.057379][ T4928] __se_sys_fsopen+0x135/0x2c0 [ 143.062142][ T4928] do_syscall_64+0x4c/0xa0 [ 143.066560][ T4928] ? clear_bhb_loop+0x60/0xb0 [ 143.071232][ T4928] ? clear_bhb_loop+0x60/0xb0 [ 143.075903][ T4928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.081794][ T4928] RIP: 0033:0x7f944cb9e159 [ 143.086200][ T4928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.105806][ T4928] RSP: 002b:00007f944daeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 143.114239][ T4928] RAX: ffffffffffffffda RBX: 00007f944ce25fa0 RCX: 00007f944cb9e159 [ 143.122208][ T4928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 143.130172][ T4928] RBP: 00007f944cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 143.138145][ T4928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.146107][ T4928] R13: 00007f944ce26038 R14: 00007f944ce25fa0 R15: 00007fff509653a8 [ 143.154082][ T4928] [ 143.188353][ T4314] gspca_vc032x: reg_r err -32 [ 143.193388][ T4314] vc032x: probe of 3-1:0.0 failed with error -32 [ 143.412893][ T4926] netlink: 5 bytes leftover after parsing attributes in process `syz.0.156'. [ 143.448528][ T4937] dlm: non-version read from control device 36 [ 143.571250][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 143.863260][ T4939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.007944][ T4939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.704584][ T4945] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input10 [ 144.757832][ T4939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.806941][ T4314] usb 3-1: USB disconnect, device number 4 [ 144.935342][ T4939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.805418][ T4939] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.829165][ T4939] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.886531][ T4939] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.963630][ T4939] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.028821][ T4968] FAULT_INJECTION: forcing a failure. [ 146.028821][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 146.041722][ T4968] CPU: 0 PID: 4968 Comm: syz.0.169 Not tainted syzkaller #0 [ 146.049044][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.059117][ T4968] Call Trace: [ 146.062410][ T4968] [ 146.065353][ T4968] dump_stack_lvl+0x188/0x24e [ 146.070063][ T4968] ? show_regs_print_info+0x12/0x12 [ 146.075296][ T4968] ? load_image+0x410/0x410 [ 146.079831][ T4968] ? __might_sleep+0xd0/0xd0 [ 146.084445][ T4968] ? __lock_acquire+0x7c40/0x7c40 [ 146.089500][ T4968] should_fail_ex+0x390/0x4c0 [ 146.094209][ T4968] should_failslab+0x5/0x20 [ 146.098728][ T4968] slab_pre_alloc_hook+0x59/0x300 [ 146.103768][ T4968] ? __kasan_kmalloc+0x8e/0xa0 [ 146.108528][ T4968] ? __se_sys_fsopen+0x135/0x2c0 [ 146.113454][ T4968] __kmem_cache_alloc_node+0x4f/0x270 [ 146.118815][ T4968] ? __se_sys_fsopen+0x135/0x2c0 [ 146.123756][ T4968] kmalloc_trace+0x26/0xe0 [ 146.128196][ T4968] __se_sys_fsopen+0x135/0x2c0 [ 146.132987][ T4968] do_syscall_64+0x4c/0xa0 [ 146.137420][ T4968] ? clear_bhb_loop+0x60/0xb0 [ 146.142114][ T4968] ? clear_bhb_loop+0x60/0xb0 [ 146.146805][ T4968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.152720][ T4968] RIP: 0033:0x7f9c6a39e159 [ 146.157145][ T4968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.176768][ T4968] RSP: 002b:00007f9c6b1f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 146.185194][ T4968] RAX: ffffffffffffffda RBX: 00007f9c6a625fa0 RCX: 00007f9c6a39e159 [ 146.193175][ T4968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 146.201140][ T4968] RBP: 00007f9c6a43506b R08: 0000000000000000 R09: 0000000000000000 [ 146.209106][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.217081][ T4968] R13: 00007f9c6a626038 R14: 00007f9c6a625fa0 R15: 00007ffc6ffbd0c8 [ 146.225061][ T4968] [ 147.314102][ T4279] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 148.062407][ T4319] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.272275][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 148.288852][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.417903][ T4319] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 148.513006][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.717301][ T4319] usb 1-1: config 0 descriptor?? [ 148.865617][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 148.998820][ T4319] gspca_vc032x: reg_r err -32 [ 149.013215][ T4319] vc032x: probe of 1-1:0.0 failed with error -32 [ 150.099854][ T4279] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 150.109759][ T4279] Bluetooth: hci4: Injecting HCI hardware error event [ 150.119485][ T4279] Bluetooth: hci4: hardware error 0x00 [ 151.470921][ T4402] usb 1-1: USB disconnect, device number 4 [ 152.239300][ T5032] FAULT_INJECTION: forcing a failure. [ 152.239300][ T5032] name failslab, interval 1, probability 0, space 0, times 0 [ 152.368451][ T5032] CPU: 1 PID: 5032 Comm: syz.2.184 Not tainted syzkaller #0 [ 152.375798][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.385875][ T5032] Call Trace: [ 152.389173][ T5032] [ 152.392120][ T5032] dump_stack_lvl+0x188/0x24e [ 152.396832][ T5032] ? show_regs_print_info+0x12/0x12 [ 152.402055][ T5032] ? load_image+0x410/0x410 [ 152.406593][ T5032] ? __lock_acquire+0x7c40/0x7c40 [ 152.411629][ T5032] should_fail_ex+0x390/0x4c0 [ 152.416324][ T5032] should_failslab+0x5/0x20 [ 152.420816][ T5032] slab_pre_alloc_hook+0x59/0x300 [ 152.425837][ T5032] ? legacy_init_fs_context+0x4d/0xb0 [ 152.431203][ T5032] __kmem_cache_alloc_node+0x4f/0x270 [ 152.436588][ T5032] ? legacy_init_fs_context+0x4d/0xb0 [ 152.441960][ T5032] kmalloc_trace+0x26/0xe0 [ 152.446362][ T5032] legacy_init_fs_context+0x4d/0xb0 [ 152.451550][ T5032] alloc_fs_context+0x628/0x7d0 [ 152.456395][ T5032] __se_sys_fsopen+0xa0/0x2c0 [ 152.461061][ T5032] do_syscall_64+0x4c/0xa0 [ 152.465463][ T5032] ? clear_bhb_loop+0x60/0xb0 [ 152.470123][ T5032] ? clear_bhb_loop+0x60/0xb0 [ 152.474787][ T5032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.480669][ T5032] RIP: 0033:0x7fd7c739e159 [ 152.485092][ T5032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.504693][ T5032] RSP: 002b:00007fd7c81a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 152.513101][ T5032] RAX: ffffffffffffffda RBX: 00007fd7c7625fa0 RCX: 00007fd7c739e159 [ 152.521060][ T5032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 152.529039][ T5032] RBP: 00007fd7c743506b R08: 0000000000000000 R09: 0000000000000000 [ 152.537001][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.544960][ T5032] R13: 00007fd7c7626038 R14: 00007fd7c7625fa0 R15: 00007ffd458c4e08 [ 152.552948][ T5032] [ 152.562597][ T4279] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 153.422648][ T5047] kAFS: bad VL server IP address [ 154.897299][ T4402] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.152008][ T4319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.352017][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 160.359966][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.380653][ T4319] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 160.400870][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.422865][ T4319] usb 1-1: config 0 descriptor?? [ 160.443661][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 160.695072][ T4319] gspca_vc032x: reg_r err -32 [ 160.700364][ T4319] vc032x: probe of 1-1:0.0 failed with error -32 [ 161.339188][ T5103] FAULT_INJECTION: forcing a failure. [ 161.339188][ T5103] name failslab, interval 1, probability 0, space 0, times 0 [ 161.352049][ T5103] CPU: 1 PID: 5103 Comm: syz.2.199 Not tainted syzkaller #0 [ 161.359359][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.369427][ T5103] Call Trace: [ 161.372696][ T5103] [ 161.375614][ T5103] dump_stack_lvl+0x188/0x24e [ 161.380286][ T5103] ? show_regs_print_info+0x12/0x12 [ 161.385472][ T5103] ? load_image+0x410/0x410 [ 161.389963][ T5103] ? __might_sleep+0xd0/0xd0 [ 161.394558][ T5103] ? __lock_acquire+0x7c40/0x7c40 [ 161.399587][ T5103] should_fail_ex+0x390/0x4c0 [ 161.404258][ T5103] should_failslab+0x5/0x20 [ 161.408742][ T5103] slab_pre_alloc_hook+0x59/0x300 [ 161.413772][ T5103] ? __kasan_kmalloc+0x8e/0xa0 [ 161.418539][ T5103] ? __se_sys_fsopen+0x135/0x2c0 [ 161.423501][ T5103] __kmem_cache_alloc_node+0x4f/0x270 [ 161.428892][ T5103] ? __se_sys_fsopen+0x135/0x2c0 [ 161.433856][ T5103] kmalloc_trace+0x26/0xe0 [ 161.438295][ T5103] __se_sys_fsopen+0x135/0x2c0 [ 161.443087][ T5103] do_syscall_64+0x4c/0xa0 [ 161.447522][ T5103] ? clear_bhb_loop+0x60/0xb0 [ 161.452217][ T5103] ? clear_bhb_loop+0x60/0xb0 [ 161.456921][ T5103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.462840][ T5103] RIP: 0033:0x7fd7c739e159 [ 161.467290][ T5103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.486919][ T5103] RSP: 002b:00007fd7c81a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 161.495360][ T5103] RAX: ffffffffffffffda RBX: 00007fd7c7625fa0 RCX: 00007fd7c739e159 [ 161.503354][ T5103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 161.511343][ T5103] RBP: 00007fd7c743506b R08: 0000000000000000 R09: 0000000000000000 [ 161.519333][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.527327][ T5103] R13: 00007fd7c7626038 R14: 00007fd7c7625fa0 R15: 00007ffd458c4e08 [ 161.535334][ T5103] [ 162.084654][ T4319] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.134303][ T7] usb 1-1: USB disconnect, device number 5 [ 162.404415][ T4319] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.029609][ T4319] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.039865][ T4319] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.049673][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.073475][ T5101] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 165.718695][ T4319] usb 4-1: USB disconnect, device number 3 [ 168.633930][ T5171] FAULT_INJECTION: forcing a failure. [ 168.633930][ T5171] name failslab, interval 1, probability 0, space 0, times 0 [ 168.664950][ T5171] CPU: 1 PID: 5171 Comm: syz.4.218 Not tainted syzkaller #0 [ 168.672320][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.682395][ T5171] Call Trace: [ 168.685675][ T5171] [ 168.688600][ T5171] dump_stack_lvl+0x188/0x24e [ 168.693273][ T5171] ? show_regs_print_info+0x12/0x12 [ 168.698464][ T5171] ? load_image+0x410/0x410 [ 168.702963][ T5171] ? __lock_acquire+0x7c40/0x7c40 [ 168.707987][ T5171] should_fail_ex+0x390/0x4c0 [ 168.712662][ T5171] should_failslab+0x5/0x20 [ 168.717155][ T5171] slab_pre_alloc_hook+0x59/0x300 [ 168.722173][ T5171] ? legacy_init_fs_context+0x4d/0xb0 [ 168.727536][ T5171] __kmem_cache_alloc_node+0x4f/0x270 [ 168.732903][ T5171] ? legacy_init_fs_context+0x4d/0xb0 [ 168.738270][ T5171] kmalloc_trace+0x26/0xe0 [ 168.742676][ T5171] legacy_init_fs_context+0x4d/0xb0 [ 168.747918][ T5171] alloc_fs_context+0x628/0x7d0 [ 168.752769][ T5171] __se_sys_fsopen+0xa0/0x2c0 [ 168.757440][ T5171] do_syscall_64+0x4c/0xa0 [ 168.761852][ T5171] ? clear_bhb_loop+0x60/0xb0 [ 168.766522][ T5171] ? clear_bhb_loop+0x60/0xb0 [ 168.771187][ T5171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.777089][ T5171] RIP: 0033:0x7ff32259e159 [ 168.781504][ T5171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.801109][ T5171] RSP: 002b:00007ff3233fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 168.809521][ T5171] RAX: ffffffffffffffda RBX: 00007ff322825fa0 RCX: 00007ff32259e159 [ 168.817485][ T5171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 168.825452][ T5171] RBP: 00007ff32263506b R08: 0000000000000000 R09: 0000000000000000 [ 168.833411][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.841370][ T5171] R13: 00007ff322826038 R14: 00007ff322825fa0 R15: 00007fffbaa01f68 [ 168.849337][ T5171] [ 168.855642][ T4319] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.112133][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 170.119789][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.131598][ T4319] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 170.148812][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.169798][ T4319] usb 3-1: config 0 descriptor?? [ 170.188669][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 170.482107][ T4319] gspca_vc032x: reg_r err -32 [ 170.486969][ T4319] vc032x: probe of 3-1:0.0 failed with error -32 [ 172.160577][ T127] usb 3-1: USB disconnect, device number 6 [ 173.516574][ T5229] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input14 [ 174.882276][ T26] audit: type=1326 audit(1790680650.539:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz.3.230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccee99e159 code=0x0 [ 179.842079][ T4319] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 180.112114][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 180.126519][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.220146][ T4319] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 180.322482][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.355862][ T4319] usb 4-1: config 0 descriptor?? [ 180.405012][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 180.976104][ T4319] gspca_vc032x: reg_r err -32 [ 181.299381][ T4319] vc032x: probe of 4-1:0.0 failed with error -32 [ 182.450385][ T4314] usb 4-1: USB disconnect, device number 4 [ 183.583823][ T5302] FAULT_INJECTION: forcing a failure. [ 183.583823][ T5302] name failslab, interval 1, probability 0, space 0, times 0 [ 183.611945][ T5302] CPU: 0 PID: 5302 Comm: syz.1.235 Not tainted syzkaller #0 [ 183.619286][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.629358][ T5302] Call Trace: [ 183.632650][ T5302] [ 183.635585][ T5302] dump_stack_lvl+0x188/0x24e [ 183.640254][ T5302] ? show_regs_print_info+0x12/0x12 [ 183.645438][ T5302] ? load_image+0x410/0x410 [ 183.649927][ T5302] ? __lock_acquire+0x7c40/0x7c40 [ 183.654940][ T5302] should_fail_ex+0x390/0x4c0 [ 183.659608][ T5302] should_failslab+0x5/0x20 [ 183.664108][ T5302] slab_pre_alloc_hook+0x59/0x300 [ 183.669147][ T5302] ? legacy_init_fs_context+0x4d/0xb0 [ 183.674521][ T5302] __kmem_cache_alloc_node+0x4f/0x270 [ 183.679916][ T5302] ? legacy_init_fs_context+0x4d/0xb0 [ 183.685280][ T5302] kmalloc_trace+0x26/0xe0 [ 183.689694][ T5302] legacy_init_fs_context+0x4d/0xb0 [ 183.694908][ T5302] alloc_fs_context+0x628/0x7d0 [ 183.699756][ T5302] __se_sys_fsopen+0xa0/0x2c0 [ 183.704428][ T5302] do_syscall_64+0x4c/0xa0 [ 183.708855][ T5302] ? clear_bhb_loop+0x60/0xb0 [ 183.713536][ T5302] ? clear_bhb_loop+0x60/0xb0 [ 183.718218][ T5302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.724145][ T5302] RIP: 0033:0x7f944cb9e159 [ 183.728559][ T5302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.748164][ T5302] RSP: 002b:00007f944daeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 183.756604][ T5302] RAX: ffffffffffffffda RBX: 00007f944ce25fa0 RCX: 00007f944cb9e159 [ 183.764601][ T5302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 183.772575][ T5302] RBP: 00007f944cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 183.780553][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.788513][ T5302] R13: 00007f944ce26038 R14: 00007f944ce25fa0 R15: 00007fff509653a8 [ 183.796488][ T5302] [ 186.774555][ T26] audit: type=1326 audit(1790680662.439:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5337 comm="syz.3.248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccee99e159 code=0x0 [ 188.330465][ T5350] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 189.732058][ T5350] syz.1.250 (5350) used greatest stack depth: 20848 bytes left [ 190.062059][ T4349] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.942184][ T4349] usb 5-1: Using ep0 maxpacket: 8 [ 191.122215][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 191.123047][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 191.135901][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 191.142011][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 191.778155][ T4349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.868055][ T4349] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 192.877322][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.888890][ T4349] usb 5-1: config 0 descriptor?? [ 192.997794][ T4349] usb 5-1: can't set config #0, error -71 [ 193.014249][ T4349] usb 5-1: USB disconnect, device number 4 [ 194.182869][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189911][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.083232][ T5414] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input17 [ 198.152534][ T4349] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.372073][ T4349] usb 4-1: Using ep0 maxpacket: 8 [ 198.379268][ T4349] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.349683][ T4349] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 201.371966][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.392824][ T4349] usb 4-1: config 0 descriptor?? [ 201.451084][ T4349] usb 4-1: can't set config #0, error -71 [ 201.458594][ T4349] usb 4-1: USB disconnect, device number 5 [ 201.993707][ T5458] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input18 [ 206.950026][ T5497] sched: RT throttling activated [ 208.452205][ T4314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 208.702515][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 208.728507][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.908962][ T4314] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 209.082837][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.967360][ T4314] usb 2-1: config 0 descriptor?? [ 210.982695][ T4314] usb 2-1: can't set config #0, error -71 [ 210.992294][ T4314] usb 2-1: USB disconnect, device number 3 [ 211.500203][ T5535] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input20 [ 216.065410][ T5565] FAULT_INJECTION: forcing a failure. [ 216.065410][ T5565] name failslab, interval 1, probability 0, space 0, times 0 [ 216.212271][ T5565] CPU: 0 PID: 5565 Comm: syz.3.304 Not tainted syzkaller #0 [ 216.219621][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.229688][ T5565] Call Trace: [ 216.232982][ T5565] [ 216.235924][ T5565] dump_stack_lvl+0x188/0x24e [ 216.240623][ T5565] ? show_regs_print_info+0x12/0x12 [ 216.245838][ T5565] ? load_image+0x410/0x410 [ 216.250362][ T5565] ? __might_sleep+0xd0/0xd0 [ 216.254966][ T5565] ? __lock_acquire+0x7c40/0x7c40 [ 216.260017][ T5565] should_fail_ex+0x390/0x4c0 [ 216.264719][ T5565] should_failslab+0x5/0x20 [ 216.269235][ T5565] slab_pre_alloc_hook+0x59/0x300 [ 216.274275][ T5565] ? __kasan_kmalloc+0x8e/0xa0 [ 216.279052][ T5565] ? __se_sys_fsopen+0x135/0x2c0 [ 216.283992][ T5565] __kmem_cache_alloc_node+0x4f/0x270 [ 216.289387][ T5565] ? __se_sys_fsopen+0x135/0x2c0 [ 216.294337][ T5565] kmalloc_trace+0x26/0xe0 [ 216.298747][ T5565] __se_sys_fsopen+0x135/0x2c0 [ 216.303511][ T5565] do_syscall_64+0x4c/0xa0 [ 216.307920][ T5565] ? clear_bhb_loop+0x60/0xb0 [ 216.312591][ T5565] ? clear_bhb_loop+0x60/0xb0 [ 216.317256][ T5565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.323150][ T5565] RIP: 0033:0x7fccee99e159 [ 216.327555][ T5565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.347153][ T5565] RSP: 002b:00007fccef953028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 216.355560][ T5565] RAX: ffffffffffffffda RBX: 00007fcceec25fa0 RCX: 00007fccee99e159 [ 216.363530][ T5565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 216.371499][ T5565] RBP: 00007fcceea3506b R08: 0000000000000000 R09: 0000000000000000 [ 216.379467][ T5565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.387426][ T5565] R13: 00007fcceec26038 R14: 00007fcceec25fa0 R15: 00007ffe7a174708 [ 216.395402][ T5565] [ 222.683057][ T26] audit: type=1326 audit(1790680698.339:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.2.315" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7c739e159 code=0x0 [ 223.216328][ T5628] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input22 [ 223.804716][ T5632] FAULT_INJECTION: forcing a failure. [ 223.804716][ T5632] name failslab, interval 1, probability 0, space 0, times 0 [ 224.037874][ T5632] CPU: 0 PID: 5632 Comm: syz.4.319 Not tainted syzkaller #0 [ 224.045219][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.055285][ T5632] Call Trace: [ 224.058571][ T5632] [ 224.061508][ T5632] dump_stack_lvl+0x188/0x24e [ 224.066204][ T5632] ? show_regs_print_info+0x12/0x12 [ 224.071416][ T5632] ? load_image+0x410/0x410 [ 224.075942][ T5632] ? __might_sleep+0xd0/0xd0 [ 224.080540][ T5632] ? __lock_acquire+0x7c40/0x7c40 [ 224.085587][ T5632] should_fail_ex+0x390/0x4c0 [ 224.090287][ T5632] should_failslab+0x5/0x20 [ 224.094800][ T5632] slab_pre_alloc_hook+0x59/0x300 [ 224.099836][ T5632] ? __kasan_kmalloc+0x8e/0xa0 [ 224.104619][ T5632] ? __se_sys_fsopen+0x135/0x2c0 [ 224.109573][ T5632] __kmem_cache_alloc_node+0x4f/0x270 [ 224.114959][ T5632] ? __se_sys_fsopen+0x135/0x2c0 [ 224.119907][ T5632] kmalloc_trace+0x26/0xe0 [ 224.124332][ T5632] __se_sys_fsopen+0x135/0x2c0 [ 224.129115][ T5632] do_syscall_64+0x4c/0xa0 [ 224.133550][ T5632] ? clear_bhb_loop+0x60/0xb0 [ 224.138236][ T5632] ? clear_bhb_loop+0x60/0xb0 [ 224.142928][ T5632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.148851][ T5632] RIP: 0033:0x7ff32259e159 [ 224.153276][ T5632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.172889][ T5632] RSP: 002b:00007ff3233fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 224.181312][ T5632] RAX: ffffffffffffffda RBX: 00007ff322825fa0 RCX: 00007ff32259e159 [ 224.189289][ T5632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 224.197267][ T5632] RBP: 00007ff32263506b R08: 0000000000000000 R09: 0000000000000000 [ 224.205242][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.213217][ T5632] R13: 00007ff322826038 R14: 00007ff322825fa0 R15: 00007fffbaa01f68 [ 224.221210][ T5632] [ 227.012198][ T4356] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.042005][ T4356] usb 3-1: Using ep0 maxpacket: 8 [ 229.051260][ T4356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.102823][ T4356] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 229.150621][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.208141][ T4356] usb 3-1: config 0 descriptor?? [ 229.256952][ T4356] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 230.376030][ T5682] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input24 [ 230.389222][ T4356] gspca_vc032x: reg_r err -32 [ 230.702284][ T4356] vc032x: probe of 3-1:0.0 failed with error -32 [ 231.972870][ T4314] usb 3-1: USB disconnect, device number 7 [ 232.091309][ T5694] FAULT_INJECTION: forcing a failure. [ 232.091309][ T5694] name failslab, interval 1, probability 0, space 0, times 0 [ 232.124605][ T5694] CPU: 1 PID: 5694 Comm: syz.2.333 Not tainted syzkaller #0 [ 232.131951][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.142026][ T5694] Call Trace: [ 232.145318][ T5694] [ 232.148259][ T5694] dump_stack_lvl+0x188/0x24e [ 232.152955][ T5694] ? show_regs_print_info+0x12/0x12 [ 232.158176][ T5694] ? load_image+0x410/0x410 [ 232.162701][ T5694] ? __lock_acquire+0x7c40/0x7c40 [ 232.167755][ T5694] should_fail_ex+0x390/0x4c0 [ 232.172426][ T5694] should_failslab+0x5/0x20 [ 232.176909][ T5694] slab_pre_alloc_hook+0x59/0x300 [ 232.181925][ T5694] ? legacy_init_fs_context+0x4d/0xb0 [ 232.187294][ T5694] __kmem_cache_alloc_node+0x4f/0x270 [ 232.192649][ T5694] ? legacy_init_fs_context+0x4d/0xb0 [ 232.198003][ T5694] kmalloc_trace+0x26/0xe0 [ 232.202424][ T5694] legacy_init_fs_context+0x4d/0xb0 [ 232.207606][ T5694] alloc_fs_context+0x628/0x7d0 [ 232.212442][ T5694] __se_sys_fsopen+0xa0/0x2c0 [ 232.217104][ T5694] do_syscall_64+0x4c/0xa0 [ 232.221507][ T5694] ? clear_bhb_loop+0x60/0xb0 [ 232.226165][ T5694] ? clear_bhb_loop+0x60/0xb0 [ 232.230839][ T5694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.236722][ T5694] RIP: 0033:0x7fd7c739e159 [ 232.241128][ T5694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.260720][ T5694] RSP: 002b:00007fd7c81a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 232.269126][ T5694] RAX: ffffffffffffffda RBX: 00007fd7c7625fa0 RCX: 00007fd7c739e159 [ 232.277100][ T5694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 232.285060][ T5694] RBP: 00007fd7c743506b R08: 0000000000000000 R09: 0000000000000000 [ 232.293015][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.300968][ T5694] R13: 00007fd7c7626038 R14: 00007fd7c7625fa0 R15: 00007ffd458c4e08 [ 232.308930][ T5694] [ 235.806958][ T5724] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input26 [ 237.942121][ T4319] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 238.142171][ T4319] usb 2-1: Using ep0 maxpacket: 8 [ 238.151605][ T4319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.214184][ T4319] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 238.271747][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.379744][ T4319] usb 2-1: config 0 descriptor?? [ 238.477837][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 238.903143][ T5754] FAULT_INJECTION: forcing a failure. [ 238.903143][ T5754] name failslab, interval 1, probability 0, space 0, times 0 [ 238.952322][ T5754] CPU: 1 PID: 5754 Comm: syz.4.346 Not tainted syzkaller #0 [ 238.959672][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.969750][ T5754] Call Trace: [ 238.973046][ T5754] [ 238.975986][ T5754] dump_stack_lvl+0x188/0x24e [ 238.980697][ T5754] ? show_regs_print_info+0x12/0x12 [ 238.985929][ T5754] ? load_image+0x410/0x410 [ 238.990463][ T5754] ? __lock_acquire+0x7c40/0x7c40 [ 238.995517][ T5754] should_fail_ex+0x390/0x4c0 [ 239.000223][ T5754] should_failslab+0x5/0x20 [ 239.004742][ T5754] slab_pre_alloc_hook+0x59/0x300 [ 239.009791][ T5754] ? legacy_init_fs_context+0x4d/0xb0 [ 239.015193][ T5754] __kmem_cache_alloc_node+0x4f/0x270 [ 239.020586][ T5754] ? legacy_init_fs_context+0x4d/0xb0 [ 239.025978][ T5754] kmalloc_trace+0x26/0xe0 [ 239.030408][ T5754] legacy_init_fs_context+0x4d/0xb0 [ 239.035626][ T5754] alloc_fs_context+0x628/0x7d0 [ 239.040501][ T5754] __se_sys_fsopen+0xa0/0x2c0 [ 239.045202][ T5754] do_syscall_64+0x4c/0xa0 [ 239.049634][ T5754] ? clear_bhb_loop+0x60/0xb0 [ 239.054332][ T5754] ? clear_bhb_loop+0x60/0xb0 [ 239.059029][ T5754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.064950][ T5754] RIP: 0033:0x7ff32259e159 [ 239.069379][ T5754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.089013][ T5754] RSP: 002b:00007ff3233fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 239.097452][ T5754] RAX: ffffffffffffffda RBX: 00007ff322825fa0 RCX: 00007ff32259e159 [ 239.105443][ T5754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 239.113433][ T5754] RBP: 00007ff32263506b R08: 0000000000000000 R09: 0000000000000000 [ 239.121421][ T5754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.129409][ T5754] R13: 00007ff322826038 R14: 00007ff322825fa0 R15: 00007fffbaa01f68 [ 239.137414][ T5754] [ 239.935603][ T4319] gspca_vc032x: reg_r err -32 [ 239.940404][ T4319] vc032x: probe of 2-1:0.0 failed with error -32 [ 241.030354][ T4349] usb 2-1: USB disconnect, device number 4 [ 246.492208][ T4318] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 247.001988][ T4318] usb 2-1: Using ep0 maxpacket: 8 [ 247.736563][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.024484][ T4318] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 248.033842][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.050234][ T4318] usb 2-1: config 0 descriptor?? [ 248.063564][ T4318] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 248.367564][ T4318] gspca_vc032x: reg_r err -71 [ 248.382202][ T4318] vc032x: probe of 2-1:0.0 failed with error -71 [ 248.405743][ T4318] usb 2-1: USB disconnect, device number 5 [ 255.615088][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.621449][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.511980][ T26] audit: type=1326 audit(1790680733.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.0.379" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6a39e159 code=0x0 [ 266.741991][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 267.917547][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.000895][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.582330][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 269.568769][ T14] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 270.794742][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.812047][ T14] usb 2-1: can't set config #1, error -71 [ 270.831181][ T14] usb 2-1: USB disconnect, device number 6 [ 278.537833][ T6068] FAULT_INJECTION: forcing a failure. [ 278.537833][ T6068] name failslab, interval 1, probability 0, space 0, times 0 [ 278.721715][ T6068] CPU: 1 PID: 6068 Comm: syz.0.414 Not tainted syzkaller #0 [ 278.729061][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.739127][ T6068] Call Trace: [ 278.742411][ T6068] [ 278.745351][ T6068] dump_stack_lvl+0x188/0x24e [ 278.750051][ T6068] ? show_regs_print_info+0x12/0x12 [ 278.755271][ T6068] ? load_image+0x410/0x410 [ 278.759791][ T6068] ? __might_sleep+0xd0/0xd0 [ 278.764389][ T6068] ? __lock_acquire+0x7c40/0x7c40 [ 278.769468][ T6068] should_fail_ex+0x390/0x4c0 [ 278.774176][ T6068] should_failslab+0x5/0x20 [ 278.778723][ T6068] slab_pre_alloc_hook+0x59/0x300 [ 278.783768][ T6068] ? __kasan_kmalloc+0x8e/0xa0 [ 278.788548][ T6068] ? __se_sys_fsopen+0x135/0x2c0 [ 278.793498][ T6068] __kmem_cache_alloc_node+0x4f/0x270 [ 278.798882][ T6068] ? __se_sys_fsopen+0x135/0x2c0 [ 278.803831][ T6068] kmalloc_trace+0x26/0xe0 [ 278.808256][ T6068] __se_sys_fsopen+0x135/0x2c0 [ 278.813048][ T6068] do_syscall_64+0x4c/0xa0 [ 278.817477][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 278.822175][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 278.826860][ T6068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.832768][ T6068] RIP: 0033:0x7f9c6a39e159 [ 278.837191][ T6068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.856809][ T6068] RSP: 002b:00007f9c6b1f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 278.865280][ T6068] RAX: ffffffffffffffda RBX: 00007f9c6a625fa0 RCX: 00007f9c6a39e159 [ 278.873262][ T6068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 278.881241][ T6068] RBP: 00007f9c6a43506b R08: 0000000000000000 R09: 0000000000000000 [ 278.889222][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.897197][ T6068] R13: 00007f9c6a626038 R14: 00007f9c6a625fa0 R15: 00007ffc6ffbd0c8 [ 278.905190][ T6068] [ 285.327444][ T26] audit: type=1326 audit(1790680760.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.1.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f944cb9e159 code=0x0 [ 285.863889][ T4319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 286.428790][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.299152][ T4319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.378263][ T4319] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 287.597890][ T4319] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 287.607486][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.620849][ T4319] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints [ 287.631159][ T4319] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 288.682928][ T6139] FAULT_INJECTION: forcing a failure. [ 288.682928][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 289.238074][ T6139] CPU: 1 PID: 6139 Comm: syz.4.430 Not tainted syzkaller #0 [ 289.245418][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.255487][ T6139] Call Trace: [ 289.258833][ T6139] [ 289.261763][ T6139] dump_stack_lvl+0x188/0x24e [ 289.266438][ T6139] ? show_regs_print_info+0x12/0x12 [ 289.271630][ T6139] ? load_image+0x410/0x410 [ 289.276135][ T6139] ? __lock_acquire+0x7c40/0x7c40 [ 289.281154][ T6139] should_fail_ex+0x390/0x4c0 [ 289.285861][ T6139] should_failslab+0x5/0x20 [ 289.290356][ T6139] slab_pre_alloc_hook+0x59/0x300 [ 289.295383][ T6139] ? legacy_init_fs_context+0x4d/0xb0 [ 289.300760][ T6139] __kmem_cache_alloc_node+0x4f/0x270 [ 289.306134][ T6139] ? legacy_init_fs_context+0x4d/0xb0 [ 289.311509][ T6139] kmalloc_trace+0x26/0xe0 [ 289.315921][ T6139] legacy_init_fs_context+0x4d/0xb0 [ 289.321128][ T6139] alloc_fs_context+0x628/0x7d0 [ 289.325991][ T6139] __se_sys_fsopen+0xa0/0x2c0 [ 289.330679][ T6139] do_syscall_64+0x4c/0xa0 [ 289.335089][ T6139] ? clear_bhb_loop+0x60/0xb0 [ 289.339770][ T6139] ? clear_bhb_loop+0x60/0xb0 [ 289.344433][ T6139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.350314][ T6139] RIP: 0033:0x7ff32259e159 [ 289.354727][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.374339][ T6139] RSP: 002b:00007ff3233fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 289.382746][ T6139] RAX: ffffffffffffffda RBX: 00007ff322825fa0 RCX: 00007ff32259e159 [ 289.390711][ T6139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 289.398672][ T6139] RBP: 00007ff32263506b R08: 0000000000000000 R09: 0000000000000000 [ 289.406644][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.414600][ T6139] R13: 00007ff322826038 R14: 00007ff322825fa0 R15: 00007fffbaa01f68 [ 289.422590][ T6139] [ 289.986896][ T4318] usb 1-1: USB disconnect, device number 6 [ 301.053824][ T6241] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input28 [ 301.294143][ T6247] FAULT_INJECTION: forcing a failure. [ 301.294143][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 301.307107][ T6247] CPU: 0 PID: 6247 Comm: syz.1.448 Not tainted syzkaller #0 [ 301.314417][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.324502][ T6247] Call Trace: [ 301.327788][ T6247] [ 301.330731][ T6247] dump_stack_lvl+0x188/0x24e [ 301.335435][ T6247] ? show_regs_print_info+0x12/0x12 [ 301.340656][ T6247] ? load_image+0x410/0x410 [ 301.345185][ T6247] ? __might_sleep+0xd0/0xd0 [ 301.349787][ T6247] ? __lock_acquire+0x7c40/0x7c40 [ 301.354840][ T6247] should_fail_ex+0x390/0x4c0 [ 301.359521][ T6247] should_failslab+0x5/0x20 [ 301.364020][ T6247] slab_pre_alloc_hook+0x59/0x300 [ 301.369037][ T6247] ? __kasan_kmalloc+0x8e/0xa0 [ 301.373801][ T6247] ? __se_sys_fsopen+0x135/0x2c0 [ 301.378740][ T6247] __kmem_cache_alloc_node+0x4f/0x270 [ 301.384109][ T6247] ? __se_sys_fsopen+0x135/0x2c0 [ 301.389039][ T6247] kmalloc_trace+0x26/0xe0 [ 301.393448][ T6247] __se_sys_fsopen+0x135/0x2c0 [ 301.398213][ T6247] do_syscall_64+0x4c/0xa0 [ 301.402619][ T6247] ? clear_bhb_loop+0x60/0xb0 [ 301.407290][ T6247] ? clear_bhb_loop+0x60/0xb0 [ 301.411957][ T6247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.417850][ T6247] RIP: 0033:0x7f944cb9e159 [ 301.422258][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.441856][ T6247] RSP: 002b:00007f944daeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 301.450269][ T6247] RAX: ffffffffffffffda RBX: 00007f944ce25fa0 RCX: 00007f944cb9e159 [ 301.458242][ T6247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 301.466209][ T6247] RBP: 00007f944cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 301.474170][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.482132][ T6247] R13: 00007f944ce26038 R14: 00007f944ce25fa0 R15: 00007fff509653a8 [ 301.490104][ T6247] [ 309.883251][ T6306] FAULT_INJECTION: forcing a failure. [ 309.883251][ T6306] name failslab, interval 1, probability 0, space 0, times 0 [ 309.999741][ T6306] CPU: 1 PID: 6306 Comm: syz.1.468 Not tainted syzkaller #0 [ 310.007082][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.017143][ T6306] Call Trace: [ 310.020434][ T6306] [ 310.023366][ T6306] dump_stack_lvl+0x188/0x24e [ 310.028052][ T6306] ? show_regs_print_info+0x12/0x12 [ 310.033255][ T6306] ? load_image+0x410/0x410 [ 310.037772][ T6306] ? __might_sleep+0xd0/0xd0 [ 310.042368][ T6306] ? __lock_acquire+0x7c40/0x7c40 [ 310.047411][ T6306] should_fail_ex+0x390/0x4c0 [ 310.052110][ T6306] should_failslab+0x5/0x20 [ 310.056621][ T6306] slab_pre_alloc_hook+0x59/0x300 [ 310.061656][ T6306] ? __kasan_kmalloc+0x8e/0xa0 [ 310.066427][ T6306] ? __se_sys_fsopen+0x135/0x2c0 [ 310.071373][ T6306] __kmem_cache_alloc_node+0x4f/0x270 [ 310.076760][ T6306] ? __se_sys_fsopen+0x135/0x2c0 [ 310.081706][ T6306] kmalloc_trace+0x26/0xe0 [ 310.086127][ T6306] __se_sys_fsopen+0x135/0x2c0 [ 310.090907][ T6306] do_syscall_64+0x4c/0xa0 [ 310.095344][ T6306] ? clear_bhb_loop+0x60/0xb0 [ 310.100026][ T6306] ? clear_bhb_loop+0x60/0xb0 [ 310.104709][ T6306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.110615][ T6306] RIP: 0033:0x7f944cb9e159 [ 310.115036][ T6306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.134654][ T6306] RSP: 002b:00007f944daeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 310.143077][ T6306] RAX: ffffffffffffffda RBX: 00007f944ce25fa0 RCX: 00007f944cb9e159 [ 310.151057][ T6306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 310.159034][ T6306] RBP: 00007f944cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 310.167183][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.175162][ T6306] R13: 00007f944ce26038 R14: 00007f944ce25fa0 R15: 00007fff509653a8 [ 310.183153][ T6306] [ 312.270972][ T6313] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 312.303561][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 312.312888][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 312.923880][ T6319] infiniband syz0: set active [ 313.006030][ T6319] infiniband syz0: added veth1_to_bridge [ 313.052346][ T4318] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 313.277787][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.308448][ T6319] rdma_rxe: unable to create cq [ 313.315817][ T4318] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.326600][ T4318] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 313.339913][ T4318] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 313.342343][ T6319] infiniband syz0: Couldn't create ib_mad CQ [ 313.349355][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.365731][ T6319] infiniband syz0: Couldn't open port 1 [ 313.438188][ T4318] cxacru 2-1:1.0: cxacru_bind: interface has incorrect endpoints [ 313.462892][ T6319] RDS/IB: syz0: added [ 313.467508][ T6319] smc: adding ib device syz0 with port count 1 [ 313.473866][ T4318] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 313.503544][ T6319] smc: ib device syz0 port 1 has pnetid [ 314.148897][ T6333] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 314.444316][ T6345] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input29 [ 316.073397][ T4314] usb 2-1: USB disconnect, device number 7 [ 317.247795][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.255270][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.565186][ T26] audit: type=1326 audit(1790680793.229:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f944cb9e159 code=0x0 [ 317.901998][ T4314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 317.927377][ T6372] FAULT_INJECTION: forcing a failure. [ 317.927377][ T6372] name failslab, interval 1, probability 0, space 0, times 0 [ 317.940711][ T6372] CPU: 0 PID: 6372 Comm: syz.4.483 Not tainted syzkaller #0 [ 317.948017][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.958062][ T6372] Call Trace: [ 317.961351][ T6372] [ 317.964282][ T6372] dump_stack_lvl+0x188/0x24e [ 317.968946][ T6372] ? show_regs_print_info+0x12/0x12 [ 317.974149][ T6372] ? load_image+0x410/0x410 [ 317.978643][ T6372] ? __might_sleep+0xd0/0xd0 [ 317.983219][ T6372] ? __lock_acquire+0x7c40/0x7c40 [ 317.988230][ T6372] should_fail_ex+0x390/0x4c0 [ 317.992896][ T6372] should_failslab+0x5/0x20 [ 317.997381][ T6372] slab_pre_alloc_hook+0x59/0x300 [ 318.002387][ T6372] ? __kasan_kmalloc+0x8e/0xa0 [ 318.007133][ T6372] ? __se_sys_fsopen+0x135/0x2c0 [ 318.012054][ T6372] __kmem_cache_alloc_node+0x4f/0x270 [ 318.017407][ T6372] ? __se_sys_fsopen+0x135/0x2c0 [ 318.022329][ T6372] kmalloc_trace+0x26/0xe0 [ 318.026728][ T6372] __se_sys_fsopen+0x135/0x2c0 [ 318.031488][ T6372] do_syscall_64+0x4c/0xa0 [ 318.035907][ T6372] ? clear_bhb_loop+0x60/0xb0 [ 318.040563][ T6372] ? clear_bhb_loop+0x60/0xb0 [ 318.045232][ T6372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.051112][ T6372] RIP: 0033:0x7ff32259e159 [ 318.055525][ T6372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.075119][ T6372] RSP: 002b:00007ff3233fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 318.083537][ T6372] RAX: ffffffffffffffda RBX: 00007ff322825fa0 RCX: 00007ff32259e159 [ 318.091487][ T6372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 318.099439][ T6372] RBP: 00007ff32263506b R08: 0000000000000000 R09: 0000000000000000 [ 318.107390][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.115357][ T6372] R13: 00007ff322826038 R14: 00007ff322825fa0 R15: 00007fffbaa01f68 [ 318.123320][ T6372] [ 318.288622][ T4314] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.132075][ T4314] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.200763][ T4314] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.231507][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.262070][ T6369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 320.634037][ T127] usb 4-1: USB disconnect, device number 6 [ 322.412088][ T4368] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 322.608488][ T4368] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.645673][ T4368] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.677817][ T4368] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 323.165721][ T4368] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 323.204294][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.525888][ T4368] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints [ 323.679908][ T4368] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 327.642004][ T4318] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 327.768137][ T26] audit: type=1326 audit(1790680803.429:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.2.501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7c739e159 code=0x0 [ 327.807662][ T127] usb 1-1: USB disconnect, device number 7 [ 328.036548][ T4318] usb 5-1: not running at top speed; connect to a high speed hub [ 328.084995][ T4318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 328.158663][ T4318] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 328.252123][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.273148][ T4318] usb 5-1: Product: syz [ 328.277445][ T4318] usb 5-1: Manufacturer: syz [ 328.284933][ T4318] usb 5-1: SerialNumber: syz [ 329.113370][ T6433] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 329.142849][ T4318] oti6858 5-1:1.0: oti6858 converter detected [ 329.162818][ T4318] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 330.394092][ T4317] usb 5-1: USB disconnect, device number 5 [ 330.434317][ T4317] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 331.283715][ T4317] oti6858 5-1:1.0: device disconnected [ 335.722129][ T127] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 335.926927][ T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.953454][ T127] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.995487][ T127] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 336.010295][ T127] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 336.040054][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.440544][ T127] cxacru 4-1:1.0: cxacru_bind: interface has incorrect endpoints [ 336.508353][ T127] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 338.215024][ T4318] usb 4-1: USB disconnect, device number 7 [ 349.265718][ T4317] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 349.882116][ T955] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 349.916749][ T4317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.791632][ T4317] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.813019][ T4317] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 351.827477][ T4317] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 351.836877][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.872341][ T4317] cxacru 3-1:1.0: cxacru_bind: interface has incorrect endpoints [ 351.880332][ T4317] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 351.922743][ T955] usb 2-1: device descriptor read/all, error -71 [ 352.072304][ T4365] usb 3-1: USB disconnect, device number 8 [ 353.542114][ T4365] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 353.591110][ T6623] null_blk: disk nullb1 created [ 353.772150][ T4365] usb 1-1: Using ep0 maxpacket: 8 [ 353.785513][ T4365] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.885688][ T4365] usb 1-1: config 0 has no interface number 0 [ 353.891837][ T4365] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 353.921958][ T4365] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 353.931079][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.959513][ T4365] usb 1-1: config 0 descriptor?? [ 353.982638][ T4365] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 355.124464][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.135327][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.621750][ T4275] usb 1-1: USB disconnect, device number 8 [ 358.388747][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.484208][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.496359][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.668364][ T6656] infiniband syz0: set active [ 359.229250][ T6662] netlink: 3552 bytes leftover after parsing attributes in process `syz.4.567'. [ 359.240437][ T6662] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.567'. [ 359.475904][ T6666] loop0: detected capacity change from 0 to 6 [ 359.740754][ T6669] Dev loop0: unable to read RDB block 6 [ 359.767198][ T6669] loop0: unable to read partition table [ 359.803821][ T6669] loop0: partition table beyond EOD, truncated [ 359.856119][ T6669] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 359.978280][ T3638] Dev loop0: unable to read RDB block 6 [ 359.998768][ T3638] loop0: unable to read partition table [ 360.039100][ T3638] loop0: partition table beyond EOD, truncated [ 361.286830][ T6694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.572'. [ 364.172032][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 365.024872][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.056218][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.067739][ T26] audit: type=1326 audit(1790680840.729:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.3.577" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccee99e159 code=0x0 [ 365.102191][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 365.155841][ T7] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 365.186337][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.254142][ T7] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints [ 365.288210][ T7] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 365.292092][ T4275] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 365.497972][ T4275] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.523794][ T4275] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.584804][ T4275] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 365.659163][ T4275] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 365.764909][ T4275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.849664][ T4275] usb 5-1: Product: syz [ 366.854130][ T4275] usb 5-1: Manufacturer: syz [ 366.858751][ T4275] usb 5-1: SerialNumber: syz [ 366.876409][ T4316] usb 1-1: USB disconnect, device number 9 [ 367.218491][ T4275] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 368.431994][ T4275] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 368.594610][ T4275] usb 5-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 368.619488][ T4275] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 369.408343][ T4275] usb 5-1: 0:2 : does not exist [ 369.426118][ T4275] usb 5-1: USB disconnect, device number 6 [ 369.645584][ T5130] udevd[5130]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.997009][ T6767] FAULT_INJECTION: forcing a failure. [ 370.997009][ T6767] name failslab, interval 1, probability 0, space 0, times 0 [ 371.062335][ T6767] CPU: 0 PID: 6767 Comm: syz.0.589 Not tainted syzkaller #0 [ 371.069680][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.079752][ T6767] Call Trace: [ 371.083118][ T6767] [ 371.086124][ T6767] dump_stack_lvl+0x188/0x24e [ 371.090889][ T6767] ? show_regs_print_info+0x12/0x12 [ 371.096127][ T6767] ? load_image+0x410/0x410 [ 371.100634][ T6767] ? __might_sleep+0xd0/0xd0 [ 371.105256][ T6767] ? __lock_acquire+0x7c40/0x7c40 [ 371.110311][ T6767] ? tcp_current_mss+0x6e0/0x6e0 [ 371.115248][ T6767] should_fail_ex+0x390/0x4c0 [ 371.119990][ T6767] should_failslab+0x5/0x20 [ 371.124535][ T6767] slab_pre_alloc_hook+0x59/0x300 [ 371.129711][ T6767] kmem_cache_alloc_node+0x5a/0x310 [ 371.134926][ T6767] ? __alloc_skb+0xf9/0x7d0 [ 371.139497][ T6767] __alloc_skb+0xf9/0x7d0 [ 371.143833][ T6767] tcp_stream_alloc_skb+0x3e/0x330 [ 371.148962][ T6767] tcp_sendmsg_locked+0xca4/0x39e0 [ 371.154085][ T6767] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 371.160063][ T6767] ? tcp_sendmsg+0x1d/0x40 [ 371.164482][ T6767] ? tcp_set_state+0x520/0x520 [ 371.169255][ T6767] tcp_sendmsg+0x2b/0x40 [ 371.173493][ T6767] __sys_sendto+0x497/0x650 [ 371.177997][ T6767] ? __ia32_sys_getpeername+0x80/0x80 [ 371.183379][ T6767] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 371.189357][ T6767] ? lock_chain_count+0x20/0x20 [ 371.194206][ T6767] __x64_sys_sendto+0xda/0xf0 [ 371.198879][ T6767] do_syscall_64+0x4c/0xa0 [ 371.203285][ T6767] ? clear_bhb_loop+0x60/0xb0 [ 371.208024][ T6767] ? clear_bhb_loop+0x60/0xb0 [ 371.212695][ T6767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.218632][ T6767] RIP: 0033:0x7f9c6a39e159 [ 371.223085][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.242728][ T6767] RSP: 002b:00007f9c6b1f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 371.251137][ T6767] RAX: ffffffffffffffda RBX: 00007f9c6a625fa0 RCX: 00007f9c6a39e159 [ 371.259101][ T6767] RDX: ffffffffffffff50 RSI: 0000200000000080 RDI: 0000000000000003 [ 371.267067][ T6767] RBP: 00007f9c6a43506b R08: 0000000000000000 R09: 0000000000000000 [ 371.275033][ T6767] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000000 [ 371.282992][ T6767] R13: 00007f9c6a626038 R14: 00007f9c6a625fa0 R15: 00007ffc6ffbd0c8 [ 371.290968][ T6767] [ 375.189369][ T26] audit: type=1326 audit(1790680850.849:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.0.594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6a39e159 code=0x0 [ 375.864610][ T955] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 376.063521][ T955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.095095][ T955] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.113103][ T955] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 376.233855][ T955] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 376.279150][ T955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.307869][ T955] usb 4-1: can't set config #1, error -71 [ 376.320037][ T955] usb 4-1: USB disconnect, device number 8 [ 378.486413][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.492808][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.642046][ T4318] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 384.127236][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.247491][ T4318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.932342][ T4318] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 385.626236][ T4318] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 385.659880][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.697160][ T4318] cxacru 4-1:1.0: cxacru_bind: interface has incorrect endpoints [ 385.716630][ T4318] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 386.954395][ T14] usb 4-1: USB disconnect, device number 9 [ 387.167686][ T6857] FAULT_INJECTION: forcing a failure. [ 387.167686][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 387.239472][ T6857] CPU: 1 PID: 6857 Comm: syz.3.613 Not tainted syzkaller #0 [ 387.246815][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.256882][ T6857] Call Trace: [ 387.260175][ T6857] [ 387.263115][ T6857] dump_stack_lvl+0x188/0x24e [ 387.267786][ T6857] ? show_regs_print_info+0x12/0x12 [ 387.272966][ T6857] ? load_image+0x410/0x410 [ 387.277458][ T6857] ? __might_sleep+0xd0/0xd0 [ 387.282034][ T6857] ? __lock_acquire+0x7c40/0x7c40 [ 387.287049][ T6857] should_fail_ex+0x390/0x4c0 [ 387.291746][ T6857] should_failslab+0x5/0x20 [ 387.296241][ T6857] slab_pre_alloc_hook+0x59/0x300 [ 387.301264][ T6857] ? snd_timer_instance_new+0x66/0x210 [ 387.306784][ T6857] __kmem_cache_alloc_node+0x4f/0x270 [ 387.312147][ T6857] ? snd_timer_instance_new+0x66/0x210 [ 387.317591][ T6857] __kmalloc_node_track_caller+0xa0/0x240 [ 387.323394][ T6857] kstrdup+0x37/0x70 [ 387.327321][ T6857] snd_timer_instance_new+0x66/0x210 [ 387.332595][ T6857] snd_seq_timer_open+0x237/0x600 [ 387.337680][ T6857] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 387.343036][ T6857] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 387.348933][ T6857] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 387.354813][ T6857] ? _raw_spin_unlock+0x40/0x40 [ 387.359669][ T6857] ? snd_seq_timer_defaults+0x31/0x530 [ 387.365116][ T6857] snd_seq_queue_alloc+0x3b3/0x740 [ 387.370235][ T6857] snd_seq_ioctl_create_queue+0x7b/0x3b0 [ 387.375856][ T6857] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 387.382095][ T6857] snd_seq_oss_open+0x622/0xf00 [ 387.386944][ T6857] ? snd_seq_oss_delete_client+0x50/0x50 [ 387.392588][ T6857] ? trace_raw_output_contention_end+0xd0/0xd0 [ 387.398748][ T6857] ? odev_open+0x58/0x90 [ 387.402977][ T6857] ? __lock_acquire+0x7c40/0x7c40 [ 387.408010][ T6857] ? snd_seq_oss_process_event+0x2910/0x2910 [ 387.413990][ T6857] ? async_call_lookup_ports+0x10/0x10 [ 387.419462][ T6857] ? do_raw_spin_unlock+0x11d/0x230 [ 387.424651][ T6857] ? soundcore_open+0x309/0x4b0 [ 387.429593][ T6857] odev_open+0x63/0x90 [ 387.433649][ T6857] chrdev_open+0x585/0x5f0 [ 387.438114][ T6857] ? cd_forget+0x160/0x160 [ 387.442514][ T6857] ? fsnotify_perm+0x39b/0x550 [ 387.447316][ T6857] ? cd_forget+0x160/0x160 [ 387.451720][ T6857] do_dentry_open+0x7dd/0x10b0 [ 387.456541][ T6857] path_openat+0x2674/0x2f10 [ 387.461139][ T6857] ? verify_lock_unused+0x140/0x140 [ 387.466330][ T6857] ? do_sys_openat2+0xdd/0x4f0 [ 387.471087][ T6857] ? do_filp_open+0x420/0x420 [ 387.475757][ T6857] do_filp_open+0x1ee/0x420 [ 387.480244][ T6857] ? vfs_tmpfile+0x470/0x470 [ 387.484824][ T6857] ? _raw_spin_unlock+0x24/0x40 [ 387.489660][ T6857] ? alloc_fd+0x590/0x640 [ 387.494002][ T6857] do_sys_openat2+0x14b/0x4f0 [ 387.498662][ T6857] ? do_sys_open+0xe0/0xe0 [ 387.503063][ T6857] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 387.509031][ T6857] ? lock_chain_count+0x20/0x20 [ 387.513888][ T6857] __x64_sys_openat+0x135/0x160 [ 387.518722][ T6857] do_syscall_64+0x4c/0xa0 [ 387.523130][ T6857] ? clear_bhb_loop+0x60/0xb0 [ 387.527788][ T6857] ? clear_bhb_loop+0x60/0xb0 [ 387.532446][ T6857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.538332][ T6857] RIP: 0033:0x7fccee99e159 [ 387.542766][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.562370][ T6857] RSP: 002b:00007fccef953028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.570806][ T6857] RAX: ffffffffffffffda RBX: 00007fcceec25fa0 RCX: 00007fccee99e159 [ 387.578761][ T6857] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 387.586727][ T6857] RBP: 00007fcceea3506b R08: 0000000000000000 R09: 0000000000000000 [ 387.594701][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.602668][ T6857] R13: 00007fcceec26038 R14: 00007fcceec25fa0 R15: 00007ffe7a174708 [ 387.610633][ T6857] [ 391.172020][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 391.363498][ T14] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 391.381981][ T14] usb 2-1: config 0 has no interface number 0 [ 391.392515][ T14] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.436170][ T14] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 391.465889][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.508393][ T14] usb 2-1: Product: syz [ 392.512940][ T14] usb 2-1: Manufacturer: syz [ 392.517559][ T14] usb 2-1: SerialNumber: syz [ 392.533062][ T14] usb 2-1: config 0 descriptor?? [ 392.615120][ T14] usb 2-1: can't set config #0, error -71 [ 392.643020][ T14] usb 2-1: USB disconnect, device number 10 [ 394.192139][ T127] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 394.382639][ T127] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 394.456088][ T6907] capability: warning: `syz.2.627' uses 32-bit capabilities (legacy support in use) [ 395.861995][ T4356] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 395.864965][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.880048][ T127] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.899572][ T127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.915857][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.013204][ T127] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.073020][ T127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.226801][ T4356] usb 5-1: not running at top speed; connect to a high speed hub [ 396.921746][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.957501][ T127] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.971251][ T4356] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.993458][ T127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 397.001446][ T127] usb 4-1: unable to read config index 3 descriptor/start: -71 [ 397.010573][ T127] usb 4-1: can't read configurations, error -71 [ 397.024072][ T4356] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 397.040678][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.096233][ T4356] usb 5-1: Found UVC 1.00 device (046d:0825) [ 397.913890][ T4356] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 397.927243][ T4356] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 397.939094][ T4356] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 397.951548][ T4356] usb 5-1: USB disconnect, device number 7 [ 399.991983][ T4275] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 400.223877][ T4275] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.282788][ T4275] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 400.323345][ T4275] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 400.342188][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.392163][ T6936] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.625317][ T4275] usb 1-1: USB disconnect, device number 10 [ 403.873202][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 403.881177][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 403.894721][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.902124][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.337052][ T6962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.372771][ T7009] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.948704][ T7009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.062211][ T7009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.740553][ T7027] jffs2: notice: (7027) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 416.116245][ T7059] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 420.212243][ T7086] jffs2: notice: (7086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 424.037166][ T127] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 424.312926][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 424.323394][ T127] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 424.352963][ T127] usb 3-1: config 0 has no interface number 0 [ 424.382266][ T127] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 424.462251][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.542487][ T127] usb 3-1: Product: syz [ 424.591524][ T127] usb 3-1: Manufacturer: syz [ 424.652060][ T127] usb 3-1: SerialNumber: syz [ 424.762744][ T127] usb 3-1: config 0 descriptor?? [ 424.816121][ T127] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 424.978406][ T127] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 425.057971][ T127] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 425.460374][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 425.476250][ T127] usb 3-1: USB disconnect, device number 9 [ 425.536693][ T127] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 425.627391][ T127] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 425.714709][ T127] quatech2 3-1:0.51: device disconnected [ 429.335446][ T7154] ======================================================= [ 429.335446][ T7154] WARNING: The mand mount option has been deprecated and [ 429.335446][ T7154] and is ignored by this kernel. Remove the mand [ 429.335446][ T7154] option from the mount to silence this warning. [ 429.335446][ T7154] ======================================================= [ 429.747101][ T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 429.963741][ T14] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.987703][ T14] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.021982][ T14] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.051704][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.115321][ T7158] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 430.239509][ T7165] loop4: detected capacity change from 0 to 1024 [ 431.615875][ T4402] usb 4-1: USB disconnect, device number 12 [ 434.269692][ T7192] loop3: detected capacity change from 0 to 32768 [ 434.445309][ T7193] capability: warning: `syz.3.714' uses deprecated v2 capabilities in a way that may be insecure [ 437.074858][ T7209] __vm_enough_memory: pid: 7209, comm: syz.3.718, no enough memory for the allocation [ 439.030477][ T7224] loop2: detected capacity change from 0 to 256 [ 440.579075][ T7232] syz.4.723 (7232) used greatest stack depth: 19472 bytes left [ 440.704975][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.711326][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.427570][ T7242] MTD: Couldn't look up './dev/mtdblock0': -2 [ 445.301567][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 445.416815][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 445.488096][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.500772][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.879504][ T7288] MTD: Couldn't look up './dev/mtdblock0': -2 [ 447.607392][ T7300] [ 447.609775][ T7300] ====================================================== [ 447.616800][ T7300] WARNING: possible circular locking dependency detected [ 447.623836][ T7300] syzkaller #0 Not tainted [ 447.628241][ T7300] ------------------------------------------------------ [ 447.635260][ T7300] syz.0.748/7300 is trying to acquire lock: [ 447.641135][ T7300] ffff888077b7b618 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x109/0xac0 [ 447.652665][ T7300] [ 447.652665][ T7300] but task is already holding lock: [ 447.660113][ T7300] ffff888077b797b0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 447.669133][ T7300] [ 447.669133][ T7300] which lock already depends on the new lock. [ 447.669133][ T7300] [ 447.679532][ T7300] [ 447.679532][ T7300] the existing dependency chain (in reverse order) is: [ 447.688631][ T7300] [ 447.688631][ T7300] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 447.696375][ T7300] lock_sock_nested+0x44/0x100 [ 447.701702][ T7300] smc_listen_out+0xd4/0x3c0 [ 447.706815][ T7300] smc_listen_work+0x57c/0xd60 [ 447.712099][ T7300] process_one_work+0x8ab/0x1160 [ 447.717563][ T7300] worker_thread+0xaf5/0x12a0 [ 447.722751][ T7300] kthread+0x29d/0x330 [ 447.727414][ T7300] ret_from_fork+0x1f/0x30 [ 447.732424][ T7300] [ 447.732424][ T7300] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 447.742645][ T7300] __lock_acquire+0x2d18/0x7c40 [ 447.748026][ T7300] lock_acquire+0x1bb/0x4a0 [ 447.753076][ T7300] __flush_work+0x122/0xac0 [ 447.758102][ T7300] __cancel_work_timer+0x3f4/0x560 [ 447.763736][ T7300] smc_clcsock_release+0x5c/0xe0 [ 447.769248][ T7300] __smc_release+0x644/0x7b0 [ 447.774349][ T7300] smc_close_non_accepted+0xd1/0x1f0 [ 447.780139][ T7300] smc_close_active+0xae2/0xea0 [ 447.785533][ T7300] __smc_release+0x9c/0x7b0 [ 447.790775][ T7300] smc_release+0x2c1/0x520 [ 447.795709][ T7300] sock_close+0xbf/0x210 [ 447.800481][ T7300] __fput+0x20a/0x8b0 [ 447.804988][ T7300] task_work_run+0x1d0/0x260 [ 447.810104][ T7300] exit_to_user_mode_loop+0xe6/0x110 [ 447.816051][ T7300] exit_to_user_mode_prepare+0xee/0x180 [ 447.822200][ T7300] syscall_exit_to_user_mode+0x16/0x40 [ 447.828169][ T7300] do_syscall_64+0x58/0xa0 [ 447.833120][ T7300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.839540][ T7300] [ 447.839540][ T7300] other info that might help us debug this: [ 447.839540][ T7300] [ 447.849830][ T7300] Possible unsafe locking scenario: [ 447.849830][ T7300] [ 447.857274][ T7300] CPU0 CPU1 [ 447.862624][ T7300] ---- ---- [ 447.867970][ T7300] lock(sk_lock-AF_SMC/1); [ 447.872461][ T7300] lock((work_completion)(&new_smc->smc_listen_work)); [ 447.881907][ T7300] lock(sk_lock-AF_SMC/1); [ 447.888934][ T7300] lock((work_completion)(&new_smc->smc_listen_work)); [ 447.895956][ T7300] [ 447.895956][ T7300] *** DEADLOCK *** [ 447.895956][ T7300] [ 447.904358][ T7300] 2 locks held by syz.0.748/7300: [ 447.909400][ T7300] #0: ffff88807f6cbe10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 447.919574][ T7300] #1: ffff888077b797b0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 447.929050][ T7300] [ 447.929050][ T7300] stack backtrace: [ 447.935037][ T7300] CPU: 0 PID: 7300 Comm: syz.0.748 Not tainted syzkaller #0 [ 447.942322][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.952374][ T7300] Call Trace: [ 447.955646][ T7300] [ 447.958568][ T7300] dump_stack_lvl+0x188/0x24e [ 447.963248][ T7300] ? load_image+0x410/0x410 [ 447.967859][ T7300] ? show_regs_print_info+0x12/0x12 [ 447.973059][ T7300] ? print_circular_bug+0x12b/0x1a0 [ 447.978258][ T7300] check_noncircular+0x296/0x330 [ 447.983297][ T7300] ? look_up_lock_class+0x75/0x140 [ 447.988399][ T7300] ? add_chain_block+0x9b0/0x9b0 [ 447.993324][ T7300] ? lockdep_lock+0xf1/0x1f0 [ 447.997901][ T7300] ? lock_release+0xcf/0x920 [ 448.002477][ T7300] ? _find_first_zero_bit+0xd2/0x100 [ 448.007819][ T7300] __lock_acquire+0x2d18/0x7c40 [ 448.012675][ T7300] ? deref_stack_reg+0x18e/0x220 [ 448.017803][ T7300] ? deref_stack_reg+0x18e/0x220 [ 448.022858][ T7300] ? verify_lock_unused+0x140/0x140 [ 448.028072][ T7300] ? __bfs+0x27a/0x560 [ 448.032188][ T7300] ? check_path+0x40/0x40 [ 448.036627][ T7300] ? mark_lock+0x94/0x320 [ 448.040948][ T7300] ? __lock_acquire+0x1465/0x7c40 [ 448.046054][ T7300] ? lockdep_lock+0xf1/0x1f0 [ 448.050661][ T7300] lock_acquire+0x1bb/0x4a0 [ 448.055245][ T7300] ? __flush_work+0x109/0xac0 [ 448.059916][ T7300] ? __lock_acquire+0x1465/0x7c40 [ 448.064937][ T7300] ? read_lock_is_recursive+0x10/0x10 [ 448.070300][ T7300] ? __flush_work+0x109/0xac0 [ 448.074952][ T7300] __flush_work+0x122/0xac0 [ 448.079442][ T7300] ? __flush_work+0x109/0xac0 [ 448.084128][ T7300] ? flush_work+0x20/0x20 [ 448.088441][ T7300] ? try_to_grab_pending+0xfa/0x890 [ 448.093623][ T7300] ? lockdep_hardirqs_off+0x70/0x100 [ 448.098895][ T7300] ? mark_lock+0x94/0x320 [ 448.103212][ T7300] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 448.109254][ T7300] ? mod_delayed_work_on+0x1b0/0x1b0 [ 448.114538][ T7300] ? lock_chain_count+0x20/0x20 [ 448.119471][ T7300] ? __cancel_work_timer+0x36a/0x560 [ 448.124737][ T7300] __cancel_work_timer+0x3f4/0x560 [ 448.129831][ T7300] ? cancel_work_sync+0x20/0x20 [ 448.134667][ T7300] ? __smc_release+0x63c/0x7b0 [ 448.139412][ T7300] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.144791][ T7300] ? lockdep_hardirqs_on+0x94/0x140 [ 448.149974][ T7300] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.155326][ T7300] ? _local_bh_enable+0xa0/0xa0 [ 448.160185][ T7300] smc_clcsock_release+0x5c/0xe0 [ 448.165117][ T7300] __smc_release+0x644/0x7b0 [ 448.169693][ T7300] smc_close_non_accepted+0xd1/0x1f0 [ 448.174980][ T7300] smc_close_active+0xae2/0xea0 [ 448.179835][ T7300] ? sock_no_sendpage_locked+0x1c0/0x1c0 [ 448.185498][ T7300] __smc_release+0x9c/0x7b0 [ 448.190020][ T7300] smc_release+0x2c1/0x520 [ 448.194433][ T7300] sock_close+0xbf/0x210 [ 448.198660][ T7300] ? sock_mmap+0x90/0x90 [ 448.202885][ T7300] __fput+0x20a/0x8b0 [ 448.206875][ T7300] task_work_run+0x1d0/0x260 [ 448.211549][ T7300] ? task_work_cancel+0x220/0x220 [ 448.216563][ T7300] ? __close_range+0x20c/0x770 [ 448.221321][ T7300] ? exit_to_user_mode_loop+0x3b/0x110 [ 448.226799][ T7300] exit_to_user_mode_loop+0xe6/0x110 [ 448.232092][ T7300] exit_to_user_mode_prepare+0xee/0x180 [ 448.237623][ T7300] syscall_exit_to_user_mode+0x16/0x40 [ 448.243105][ T7300] do_syscall_64+0x58/0xa0 [ 448.247500][ T7300] ? clear_bhb_loop+0x60/0xb0 [ 448.252175][ T7300] ? clear_bhb_loop+0x60/0xb0 [ 448.256835][ T7300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.262720][ T7300] RIP: 0033:0x7f9c6a39e159 [ 448.267142][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.286768][ T7300] RSP: 002b:00007ffc6ffbd228 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 448.295168][ T7300] RAX: 0000000000000000 RBX: 00007ffc6ffbd310 RCX: 00007f9c6a39e159 [ 448.303128][ T7300] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 448.311083][ T7300] RBP: 000000000006d41a R08: 0000000000000001 R09: 0000000000000000 [ 448.319047][ T7300] R10: 0000001b2ea20000 R11: 0000000000000246 R12: 00007ffc6ffbd350 [ 448.327006][ T7300] R13: 00007f9c6a625fac R14: 000000000006d457 R15: 00007f9c6a625fa0 [ 448.334964][ T7300] [ 450.519221][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 454.857717][ T6984] syz.4.647 (6984) used greatest stack depth: 18704 bytes left