last executing test programs: 6.481694639s ago: executing program 4 (id=1601): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = dup(r3) r5 = dup(r4) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bff000/0x400000)=nil) 4.972471502s ago: executing program 2 (id=1614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 4.184937062s ago: executing program 2 (id=1621): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r0, 0x40106184, 0x0) 4.016455035s ago: executing program 0 (id=1624): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd0b6bcda", 0x86}, {&(0x7f0000000500)="59a6ccfde72fa606722d4f1aada8234cd925b0c5b4b44d432d79c736d25b702feb8b26ebb83614c28fd37b1df3d5e301ce49ca0a68cc6752bc1835b0c12e4258ae26b7bce5fec86548a396b1a88364993770513f07482070caa8739973a6e3d829284696bc7779eb0600000000000000a9848881d1c2dad97818d6b9696729bb010fc7388b6b820d253074e33add76cb7ca4a1b2aa03febba3bb605b197143eb", 0xa0}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de07483696ffacc1906cfad346b7cf08529f396b2afe8db4899c02bd3cc8", 0x40}], 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="d800000000"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320", 0x50}, {&(0x7f0000000400)="7f", 0x1}], 0x2) write(r0, &(0x7f0000001e00)="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", 0x37b) 3.928510736s ago: executing program 0 (id=1625): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x82702) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)={r1}) 3.856312709s ago: executing program 0 (id=1626): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c000580080022"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 3.811462702s ago: executing program 1 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x303}, "053200", "1ec2d524d78682576ec2d9e13dad1018", "993161e3"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) exit(0x7ffd) close(r0) 3.72473933s ago: executing program 0 (id=1629): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.525528925s ago: executing program 3 (id=1630): syz_emit_vhci(&(0x7f00000006c0)=ANY=[], 0xe) 3.436827512s ago: executing program 2 (id=1631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.357585305s ago: executing program 2 (id=1632): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff11"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'gretap0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x80, 0x40, 0xa, 0x5, {{0x44, 0x4, 0x2, 0x1d, 0x110, 0x67, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0x24, 0x5a, 0x1, 0x5, [{@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x5}, {@local, 0x1}]}, @lsrr={0x83, 0x7, 0xc3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x0, [{@private=0xa010100, 0xfffffffe}]}, @cipso={0x86, 0x44, 0x0, [{0x5, 0x4, 'a]'}, {0x1, 0x12, "1a00c0e427586f714d183ab539333c07"}, {0x6, 0xc, "05c3eee5d8c3d97ede8a"}, {0x5, 0x7, "42d7cc73d5"}, {0x0, 0xe, "192f1abe1bd32012720d5712"}, {0x1, 0x7, "4ae254f52e"}]}, @ssrr={0x89, 0xb, 0xd1, [@empty, @empty]}, @lsrr={0x83, 0xb, 0xd, [@empty, @multicast2]}, @cipso={0x86, 0x4c, 0x3, [{0x5, 0x7, "0628799540"}, {0x5, 0x10, "560f99fb45109b99fc1f0081ac11"}, {0x7, 0x4, 'UD'}, {0x6, 0x12, "3bf14ee694a2dcc0bfc360bfef56deb0"}, {0x7, 0xf, "4052942f0a00266666edd4929b"}, {0x7, 0xa, "da5c2e3b16f9e02d"}]}, @ssrr={0x89, 0x1b, 0x4b, [@loopback, @private=0xa010100, @multicast2, @multicast1, @empty, @remote]}]}}}}}) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="072884b8a9ab4726787c0670302b174a7799b55be3ae6083978a79bc413d8790229755a0f6a27fdcbbcd0fdfa2563b8d4496f0dfe48c9ca6b851c88188e0ad5df2b07b32723d84ced892ae4ab923ada9359bc8a0b700517aa70cd7734491175735047317ae155c359a50dba94eb10791246c58422e2a91759efb5b834a2c15c8155d06", 0x83}, {&(0x7f0000000500)="a209f76541aae46cbdccb7b9e002e0d8119f71117bab069427c4b259e8015c8c43b0e908065b42ded08057c2ce76a2ac895725582b0a63f2b4dbf1af288e8ac565cf0e71ff5831cba397df0e6e1c7ddf2537c0636f2c9b3782b6ec950df4b4f1fa8f5c9c9f2d2abcef2fc9ece279fe4c6ef485a6410af2285e9b7df1ec57e85f14d7901582240105e18e98c16a037e59d761995af25c13b11066ee3d4fc31493d2391438b10bd5746f023efdb74355d19d5b7eae9a6d5c49731baab63a01d5f9f6b6190313fc38632c0a5de3fd3d3b6784ff0fc837fe36007e548fd7ab9f70a12c", 0xe1}, {&(0x7f0000000600)="37384ef4b82e45947930d244ec42ed06eb011d9d5fefe7e29396dc5a01b60e672765549d3c7aa7d822de481aa918a67474aa", 0x32}, {&(0x7f0000000640)="042c19f6f90dbc63e730243d7648e1be03e96c83bf0431bfdfe0041ae8d38ce7f7db8d7dfb3111392582610d4da6236890b5", 0x32}, {&(0x7f0000000680)="dfe88f4413195972d6a7ea411ceebf194b4a62534202be2f10442f09ec9c4f759c32719c00280fea779da149654e3f5aa4bba8a48775df0aa843841016db419a4ac52ca5d786bdc3236a7bc252f466f99c7f1d0a4c8fe35ef17fd4de23bad4997360ed8642551e1906d49c287702d81da408fbd39f6f179ef1e81082d58da4bc437df490943c", 0x86}, {&(0x7f0000000740)="a3", 0x1}, {&(0x7f0000000780)="e29ba7e9838efd7c1539672a4e4af5ed44338f4ed125c3a5faee7975d585dbc69a3470d25121a80ffce68d58582aa385d7c178", 0x33}], 0x7, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xb0}, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x73, 0x3, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x700, 0x8000, 0x2, 0x2}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100060000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 3.263320007s ago: executing program 2 (id=1633): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) 3.176008842s ago: executing program 4 (id=1634): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x5, 0x1, 0xe, 0xe, 0x5, 0x7d, 0x3, 0x8000c, 0xfffffffe, 0x2, 0x6d, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x1, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x40000003, 0xa6b5, 0x2, 0x3]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) 3.035147227s ago: executing program 4 (id=1635): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db", 0xa2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd0b6bcda", 0x86}, {&(0x7f0000000500)="59a6ccfde72fa606722d4f1aada8234cd925b0c5b4b44d432d79c736d25b702feb8b26ebb83614c28fd37b1df3d5e301ce49ca0a68cc6752bc1835b0c12e4258ae26b7bce5fec86548a396b1a88364993770513f07482070caa8739973a6e3d829284696bc7779eb0600000000000000a9848881d1c2dad97818d6b9696729bb010fc7388b6b820d253074e33add76cb7ca4a1b2aa03febba3bb605b197143eb", 0xa0}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de07483696ffacc1906cfad346b7cf08529f396b2afe8db4899c02bd3cc8", 0x40}], 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="d800000000"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320", 0x50}, {&(0x7f0000000400)="7f", 0x1}], 0x2) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97", 0x37b) 2.888651139s ago: executing program 3 (id=1636): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1:0', 0x3) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='active', 0x6) 2.888474419s ago: executing program 1 (id=1637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="05000000000000000000220000000a0001001852822a31acca"], 0x20}}, 0x4000000) 2.784937435s ago: executing program 1 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "1c5e32580647e616d330ce66832da7a00b263c75e674440a64cc25157ae2b540", "f815da0908739580401dbcce3c2602d58a1de2e16eab1910e12429638a6d0a2f80ac7e3bc49aa3a422dd65f077f23ac8", "0360f6fe19d20f05ab9e310e6df04a63dc1e21de21325e22a8bd65d0", {"bdc64c272f2a91c926129ba0ece74f6d", "e4cda2060000000000000000254059d5"}}}}}}}, 0x0) 2.709156749s ago: executing program 3 (id=1639): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff0000", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c000580080022"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 2.596796349s ago: executing program 1 (id=1640): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1e9) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x20000044}]) 2.536894073s ago: executing program 3 (id=1641): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106184, 0x0) 2.431800747s ago: executing program 1 (id=1642): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 2.25345408s ago: executing program 1 (id=1643): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff11"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'gretap0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x80, 0x40, 0xa, 0x5, {{0x32, 0x4, 0x2, 0x1d, 0xc8, 0x67, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0x24, 0x5a, 0x1, 0x5, [{@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x5}, {@local, 0x1}]}, @lsrr={0x83, 0x7, 0xc3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x0, [{@private=0xa010100, 0xfffffffe}]}, @cipso={0x86, 0x44, 0x0, [{0x5, 0x4, 'a]'}, {0x1, 0x12, "1a00c0e427586f714d183ab539333c07"}, {0x6, 0xc, "05c3eee5d8c3d97ede8a"}, {0x5, 0x7, "42d7cc73d5"}, {0x0, 0xe, "192f1abe1bd32012720d5712"}, {0x1, 0x7, "4ae254f52e"}]}, @ssrr={0x89, 0xb, 0xd1, [@empty, @empty]}, @lsrr={0x83, 0xb, 0xd, [@empty, @multicast2]}, @ssrr={0x89, 0x1f, 0x4b, [@dev={0xac, 0x14, 0x14, 0x28}, @loopback, @private=0xa010100, @multicast2, @multicast1, @empty, @remote]}]}}}}}) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="072884b8a9ab4726787c0670302b174a7799b55be3ae6083978a79bc413d8790229755a0f6a27fdcbbcd0fdfa2563b8d4496f0dfe48c9ca6b851c88188e0ad5df2b07b32723d84ced892ae4ab923ada9359bc8a0b700517aa70cd7734491175735047317ae155c359a50dba94eb10791246c58422e2a91759efb5b834a2c15c8155d06", 0x83}, {&(0x7f0000000500)="a209f76541aae46cbdccb7b9e002e0d8119f71117bab069427c4b259e8015c8c43b0e908065b42ded08057c2ce76a2ac895725582b0a63f2b4dbf1af288e8ac565cf0e71ff5831cba397df0e6e1c7ddf2537c0636f2c9b3782b6ec950df4b4f1fa8f5c9c9f2d2abcef2fc9ece279fe4c6ef485a6410af2285e9b7df1ec57e85f14d7901582240105e18e98c16a037e59d761995af25c13b11066ee3d4fc31493d2391438b10bd5746f023efdb74355d19d5b7eae9a6d5c49731baab63a01d5f9f6b6190313fc38632c0a5de3fd3d3b6784ff0fc837fe36007e548fd7ab9f70a12c", 0xe1}, {&(0x7f0000000600)="37384ef4b82e45947930d244ec42ed06eb011d9d5fefe7e29396dc5a01b60e672765549d3c7aa7d822de481aa918a67474aa", 0x32}, {&(0x7f0000000640)="042c19f6f90dbc63e730243d7648e1be03e96c83bf0431bfdfe0041ae8d38ce7f7db8d7dfb3111392582610d4da6236890b5", 0x32}, {&(0x7f0000000680)="dfe88f4413195972d6a7ea411ceebf194b4a62534202be2f10442f09ec9c4f759c32719c00280fea779da149654e3f5aa4bba8a48775df0aa843841016db419a4ac52ca5d786bdc3236a7bc252f466f99c7f1d0a4c8fe35ef17fd4de23bad4997360ed8642551e1906d49c287702d81da408fbd39f6f179ef1e81082d58da4bc437df490943c", 0x86}, {&(0x7f0000000740)="a3", 0x1}, {&(0x7f0000000780)="e29ba7e9838efd7c1539672a4e4af5ed44338f4ed125c3a5faee7975d585dbc69a3470d25121a80ffce68d58582aa385d7c178", 0x33}], 0x7, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xb0}, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x73, 0x3, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x700, 0x8000, 0x2, 0x2}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100060000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 2.140524782s ago: executing program 4 (id=1644): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0x3, 0x5796, 0x9}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) keyctl$update(0x2, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 885.057497ms ago: executing program 3 (id=1645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x38, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x2) 530.450203ms ago: executing program 4 (id=1646): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 483.329287ms ago: executing program 0 (id=1647): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x2004c044) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, 0x0, 0x48040) write(r2, &(0x7f0000000280)='0', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x80) 381.877048ms ago: executing program 3 (id=1648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000001004)="01", 0x1, 0x1004) pwrite64(r0, &(0x7f0000001008)="01", 0x1, 0x1008) pwrite64(r0, &(0x7f000000100c)='\b', 0x1, 0x1060) pwrite64(r0, &(0x7f0000001010)="10", 0x1, 0x1080) pwrite64(r0, &(0x7f0000001018)='\n', 0x1, 0x1088) pwrite64(r0, &(0x7f0000001020)='\b', 0x1, 0x1090) pwrite64(r0, &(0x7f0000001028)="284f2ba9", 0x4, 0x10d8) fsync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1.2', 0x3) write(0xffffffffffffffff, &(0x7f0000000800)='1:0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) 182.259512ms ago: executing program 0 (id=1649): write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x180, 0xb) 65.758778ms ago: executing program 2 (id=1650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) 0s ago: executing program 4 (id=1651): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff0000", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c000580080022"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) kernel console output (not intermixed with test programs): or=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.140851][ T37] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.140880][ T37] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.140901][ T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.140978][ T37] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 211.141007][ T37] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 211.194477][ T37] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.194500][ T37] usb 2-1: Product: syz [ 211.194517][ T37] usb 2-1: Manufacturer: syz [ 211.321237][ T37] cdc_wdm 2-1:1.0: skipping garbage [ 211.321251][ T37] cdc_wdm 2-1:1.0: skipping garbage [ 211.342159][ T37] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 211.342177][ T37] cdc_wdm 2-1:1.0: Unknown control protocol [ 211.730533][ T37] usb 2-1: USB disconnect, device number 11 [ 212.096742][ T7938] Bluetooth: hci3: command 0x0406 tx timeout [ 212.096951][ T7938] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.096989][ T7938] Bluetooth: hci2: command 0x0406 tx timeout [ 212.097211][ T7938] Bluetooth: hci1: command 0x0406 tx timeout [ 212.246720][ T7987] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.779'. [ 212.494373][ C1] net_ratelimit: 67 callbacks suppressed [ 212.958016][ T38] audit: type=1804 audit(1789987521.093:14): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.785" name="/newroot/137/file0" dev="tmpfs" ino=737 res=1 errno=0 [ 213.318466][ T8017] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.790'. [ 213.544568][ T5782] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 213.705447][ T5782] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.707410][ T5782] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.707437][ T5782] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 213.707459][ T5782] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.707535][ T5782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 213.707564][ T5782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 213.713895][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.713918][ T5782] usb 1-1: Product: syz [ 213.713933][ T5782] usb 1-1: Manufacturer: syz [ 213.816563][ T5782] cdc_wdm 1-1:1.0: skipping garbage [ 213.816578][ T5782] cdc_wdm 1-1:1.0: skipping garbage [ 213.857903][ T5782] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 213.857922][ T5782] cdc_wdm 1-1:1.0: Unknown control protocol [ 214.354641][ T5782] usb 1-1: USB disconnect, device number 3 [ 215.795084][ T5782] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 215.944725][ T5782] usb 2-1: Using ep0 maxpacket: 32 [ 215.951198][ T5782] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 215.953859][ T5782] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 215.966947][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 215.966968][ T5782] usb 2-1: Product: syz [ 215.966983][ T5782] usb 2-1: Manufacturer: syz [ 215.966997][ T5782] usb 2-1: SerialNumber: syz [ 216.114441][ T8069] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.805'. [ 216.171088][ T5782] usb 2-1: config 0 descriptor?? [ 216.172491][ T8058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.205710][ T5782] hub 2-1:0.0: bad descriptor, ignoring hub [ 216.205748][ T5782] hub 2-1:0.0: probe with driver hub failed with error -5 [ 216.594055][ T5782] usb 2-1: USB disconnect, device number 12 [ 216.771559][ T8080] FAULT_INJECTION: forcing a failure. [ 216.771559][ T8080] name failslab, interval 1, probability 0, space 0, times 0 [ 216.771591][ T8080] CPU: 0 UID: 0 PID: 8080 Comm: syz.3.813 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.771617][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.771631][ T8080] Call Trace: [ 216.771642][ T8080] [ 216.771653][ T8080] dump_stack_lvl+0xe8/0x150 [ 216.771694][ T8080] should_fail_ex+0x46b/0x600 [ 216.771744][ T8080] should_failslab+0xa8/0x100 [ 216.771780][ T8080] ? sctp_get_port_local+0x749/0x17a0 [ 216.771813][ T8080] kmem_cache_alloc_noprof+0x9e/0x690 [ 216.771846][ T8080] ? sctp_get_port_local+0x749/0x17a0 [ 216.771886][ T8080] sctp_get_port_local+0x749/0x17a0 [ 216.771935][ T8080] ? __pfx_sctp_get_port_local+0x10/0x10 [ 216.771972][ T8080] ? sctp_bind_addr_match+0x30/0x2b0 [ 216.771998][ T8080] ? sctp_bind_addr_match+0x28b/0x2b0 [ 216.772031][ T8080] sctp_do_bind+0x4d9/0x9a0 [ 216.772075][ T8080] sctp_bind+0x9c/0x130 [ 216.772107][ T8080] __sys_bind+0x2e9/0x410 [ 216.772145][ T8080] ? __pfx___sys_bind+0x10/0x10 [ 216.772194][ T8080] ? rcu_is_watching+0x16/0xb0 [ 216.772238][ T8080] __x64_sys_bind+0x7a/0x90 [ 216.772273][ T8080] do_syscall_64+0x166/0x520 [ 216.772295][ T8080] ? trace_irq_disable+0x3b/0x140 [ 216.772324][ T8080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.772348][ T8080] ? clear_bhb_loop+0x70/0xc0 [ 216.772375][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.772400][ T8080] RIP: 0033:0x7fb10fd2e159 [ 216.772421][ T8080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.772441][ T8080] RSP: 002b:00007fb10df86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 216.772467][ T8080] RAX: ffffffffffffffda RBX: 00007fb10ffb5fa0 RCX: 00007fb10fd2e159 [ 216.772484][ T8080] RDX: 000000000000001c RSI: 00002000004b8fe4 RDI: 0000000000000003 [ 216.772499][ T8080] RBP: 00007fb10fdc506b R08: 0000000000000000 R09: 0000000000000000 [ 216.772514][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.772527][ T8080] R13: 00007fb10ffb6038 R14: 00007fb10ffb5fa0 R15: 00007fffe0afd458 [ 216.772571][ T8080] [ 217.534378][ C1] net_ratelimit: 64 callbacks suppressed [ 218.219039][ T8123] netlink: 256 bytes leftover after parsing attributes in process `syz.4.824'. [ 219.482478][ T8152] ======================================================= [ 219.482478][ T8152] WARNING: The mand mount option has been deprecated and [ 219.482478][ T8152] and is ignored by this kernel. Remove the mand [ 219.482478][ T8152] option from the mount to silence this warning. [ 219.482478][ T8152] ======================================================= [ 219.761253][ T8157] random: crng reseeded on system resumption [ 219.917270][ T8162] netlink: 256 bytes leftover after parsing attributes in process `syz.1.841'. [ 220.513076][ T8169] Restarting kernel threads ... [ 220.571980][ T8169] Done restarting kernel threads. [ 220.839204][ T8177] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 220.958603][ T8178] syz.3.845 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 220.958638][ T8178] CPU: 0 UID: 0 PID: 8178 Comm: syz.3.845 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 220.958664][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.958677][ T8178] Call Trace: [ 220.958687][ T8178] [ 220.958698][ T8178] dump_stack_lvl+0xe8/0x150 [ 220.958733][ T8178] dump_header+0xd3/0x4b0 [ 220.958766][ T8178] oom_kill_process+0x3ab/0x9e0 [ 220.958792][ T8178] out_of_memory+0x1064/0x1480 [ 220.958841][ T8178] ? __pfx_out_of_memory+0x10/0x10 [ 220.958872][ T8178] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 220.958903][ T8178] ? _mutex_lock_killable+0x152/0x1d0 [ 220.958929][ T8178] ? try_charge_memcg+0xcc3/0x16f0 [ 220.958965][ T8178] try_charge_memcg+0xd82/0x16f0 [ 220.959012][ T8178] ? __pfx_try_charge_memcg+0x10/0x10 [ 220.959040][ T8178] ? lock_acquire+0x115/0x350 [ 220.959089][ T8178] ? charge_memcg+0x47/0x310 [ 220.959135][ T8178] charge_memcg+0x1dd/0x310 [ 220.959169][ T8178] __mem_cgroup_charge+0x25/0x80 [ 220.959200][ T8178] do_pte_missing+0x859/0x28f0 [ 220.959239][ T8178] ? handle_mm_fault+0xeb/0x28c0 [ 220.959271][ T8178] handle_mm_fault+0xf64/0x28c0 [ 220.959305][ T8178] ? handle_mm_fault+0xeb/0x28c0 [ 220.959342][ T8178] ? __pfx_handle_mm_fault+0x10/0x10 [ 220.959366][ T8178] ? lock_vma_under_rcu+0x45a/0x500 [ 220.959426][ T8178] do_user_addr_fault+0xa4f/0x1340 [ 220.959461][ T8178] ? trace_page_fault_user+0x84/0x1e0 [ 220.959487][ T8178] exc_page_fault+0x6a/0xc0 [ 220.959520][ T8178] asm_exc_page_fault+0x26/0x30 [ 220.959542][ T8178] RIP: 0033:0x7fb10fcdc69f [ 220.959563][ T8178] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 220.959582][ T8178] RSP: 002b:00007fb10df64ff0 EFLAGS: 00010246 [ 220.959603][ T8178] RAX: 00007fb10df650d0 RBX: 0000000000020000 RCX: 00007fb10df64ff0 [ 220.959618][ T8178] RDX: 00007fb10fde18ad RSI: 0000000000000023 RDI: 00007fb10df650d0 [ 220.959633][ T8178] RBP: 00007fb10df46000 R08: 0000000000000000 R09: 00007fffe0afd457 [ 220.959648][ T8178] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fb10df650d0 [ 220.959662][ T8178] R13: 000000000000006e R14: 00007fffe0afd370 R15: 00007fffe0afd458 [ 220.959696][ T8178] [ 220.959832][ T8178] memory: usage 0kB, limit 0kB, failcnt 19 [ 220.959850][ T8178] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 220.959864][ T8178] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 220.959877][ T8178] Memory cgroup stats for /syz3/test [ 220.960180][ T8178] : [ 220.960274][ T8178] cache 0 [ 220.960285][ T8178] rss 0 [ 220.960293][ T8178] shmem 0 [ 220.960301][ T8178] mapped_file 0 [ 220.960312][ T8178] dirty 0 [ 220.960320][ T8178] writeback 0 [ 220.960328][ T8178] workingset_refault_anon 0 [ 220.960337][ T8178] workingset_refault_file 0 [ 220.960346][ T8178] swap 0 [ 220.960354][ T8178] swapcached 0 [ 220.960362][ T8178] pgpgin 0 [ 220.960370][ T8178] pgpgout 0 [ 220.960377][ T8178] pgfault 0 [ 220.960384][ T8178] pgmajfault 0 [ 220.960392][ T8178] inactive_anon 0 [ 220.960400][ T8178] active_anon 0 [ 220.960408][ T8178] inactive_file 0 [ 220.960416][ T8178] active_file 0 [ 220.960424][ T8178] unevictable 0 [ 220.960432][ T8178] hierarchical_memory_limit 0 [ 220.960441][ T8178] hierarchical_memsw_limit 9223372036854771712 [ 220.960451][ T8178] total_cache 0 [ 220.960459][ T8178] total_rss 0 [ 220.960467][ T8178] total_shmem 0 [ 220.960475][ T8178] total_mapped_file 0 [ 220.960483][ T8178] total_dirty 0 [ 220.960492][ T8178] total_writeback 0 [ 220.960501][ T8178] total_workingset_refault_anon 0 [ 220.960509][ T8178] total_workingset_refault_file 0 [ 220.960519][ T8178] total_swap 0 [ 220.960527][ T8178] total_swapcached 0 [ 220.960536][ T8178] total_pgpgin 0 [ 220.960544][ T8178] total_pgpgout 0 [ 220.960552][ T8178] total_pgfault 0 [ 220.960560][ T8178] total_pgmajfault 0 [ 220.960568][ T8178] total_inactive_anon 0 [ 220.960575][ T8178] total_active_anon 0 [ 220.960584][ T8178] total_inactive_file 0 [ 220.960592][ T8178] total_active_file 0 [ 220.960601][ T8178] total_unevictable 0 [ 220.960608][ T8178] anon_cost 0 [ 220.960616][ T8178] file_cost 0 [ 220.960625][ T8178] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 220.960677][ T8178] /,mems_allowed=0-1 [ 220.960712][ T8178] ,oom_memcg= [ 220.960731][ T8178] /syz3/test,task_memcg=/syz3/test,task=syz.3.845,pid=8171,uid=0 [ 221.329002][ T8184] FAULT_INJECTION: forcing a failure. [ 221.329002][ T8184] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 221.329039][ T8184] CPU: 1 UID: 0 PID: 8184 Comm: syz.4.847 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.329063][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.329075][ T8184] Call Trace: [ 221.329083][ T8184] [ 221.329092][ T8184] dump_stack_lvl+0xe8/0x150 [ 221.329128][ T8184] should_fail_ex+0x46b/0x600 [ 221.329168][ T8184] _copy_from_user+0x2d/0xb0 [ 221.329198][ T8184] __sys_bind+0x1cc/0x410 [ 221.329228][ T8184] ? __pfx___sys_bind+0x10/0x10 [ 221.329277][ T8184] __x64_sys_bind+0x7a/0x90 [ 221.329307][ T8184] do_syscall_64+0x166/0x520 [ 221.329325][ T8184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.329347][ T8184] ? clear_bhb_loop+0x70/0xc0 [ 221.329372][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.329392][ T8184] RIP: 0033:0x7fab5168e159 [ 221.329411][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.329428][ T8184] RSP: 002b:00007fab4f8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 221.329451][ T8184] RAX: ffffffffffffffda RBX: 00007fab51915fa0 RCX: 00007fab5168e159 [ 221.329467][ T8184] RDX: 000000000000001c RSI: 00002000004b8fe4 RDI: 0000000000000003 [ 221.329480][ T8184] RBP: 00007fab5172506b R08: 0000000000000000 R09: 0000000000000000 [ 221.329493][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.329506][ T8184] R13: 00007fab51916038 R14: 00007fab51915fa0 R15: 00007fffe7847978 [ 221.329536][ T8184] [ 221.594111][ T8178] Memory cgroup out of memory: Killed process 8171 (syz.3.845) total-vm:102384kB, anon-rss:1428kB, file-rss:22804kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 221.745896][ T8184] syz.4.847 (8184) used greatest stack depth: 18664 bytes left [ 222.575785][ C1] net_ratelimit: 57 callbacks suppressed [ 222.722223][ T8206] netlink: 256 bytes leftover after parsing attributes in process `syz.4.854'. [ 222.874206][ T8209] netlink: 'syz.3.852': attribute type 3 has an invalid length. [ 223.399616][ T8219] FAULT_INJECTION: forcing a failure. [ 223.399616][ T8219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.399655][ T8219] CPU: 0 UID: 0 PID: 8219 Comm: syz.1.858 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.399682][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.399696][ T8219] Call Trace: [ 223.399707][ T8219] [ 223.399717][ T8219] dump_stack_lvl+0xe8/0x150 [ 223.399756][ T8219] should_fail_ex+0x46b/0x600 [ 223.399793][ T8219] _copy_from_user+0x2d/0xb0 [ 223.399833][ T8219] __sys_bind+0x1cc/0x410 [ 223.399870][ T8219] ? __pfx___sys_bind+0x10/0x10 [ 223.399914][ T8219] ? rcu_is_watching+0x16/0xb0 [ 223.399957][ T8219] __x64_sys_bind+0x7a/0x90 [ 223.399990][ T8219] do_syscall_64+0x166/0x520 [ 223.400011][ T8219] ? trace_irq_disable+0x3b/0x140 [ 223.400040][ T8219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.400064][ T8219] ? clear_bhb_loop+0x70/0xc0 [ 223.400093][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.400125][ T8219] RIP: 0033:0x7f77e1dce159 [ 223.400149][ T8219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.400169][ T8219] RSP: 002b:00007f77e0026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 223.400196][ T8219] RAX: ffffffffffffffda RBX: 00007f77e2055fa0 RCX: 00007f77e1dce159 [ 223.400214][ T8219] RDX: 000000000000001c RSI: 00002000004b8fe4 RDI: 0000000000000003 [ 223.400230][ T8219] RBP: 00007f77e1e6506b R08: 0000000000000000 R09: 0000000000000000 [ 223.400246][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.400261][ T8219] R13: 00007f77e2056038 R14: 00007f77e2055fa0 R15: 00007ffe7531d228 [ 223.400297][ T8219] [ 223.735698][ T8226] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 224.364587][ T8241] netlink: 'syz.0.866': attribute type 3 has an invalid length. [ 224.488518][ T8243] netlink: 256 bytes leftover after parsing attributes in process `syz.4.867'. [ 225.035341][ T8265] random: crng reseeded on system resumption [ 225.043701][ T8264] syz0: rxe_newlink: already configured on ipvlan0 [ 226.058291][ T8279] Restarting kernel threads ... [ 226.107126][ T8279] Done restarting kernel threads. [ 226.217706][ T8284] netlink: 256 bytes leftover after parsing attributes in process `syz.0.883'. [ 227.400138][ T8314] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 227.400598][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.404040][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.467070][ T8312] netlink: 256 bytes leftover after parsing attributes in process `syz.2.895'. [ 227.633320][ T8314] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.633484][ T8314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.634089][ T8314] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.664547][ T8314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.683354][ T8314] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 227.693844][ T8316] bridge0: port 3(syz_tun) entered blocking state [ 227.693949][ T8316] bridge0: port 3(syz_tun) entered disabled state [ 227.694168][ T8316] syz_tun: entered allmulticast mode [ 227.758781][ T8316] syz_tun: entered promiscuous mode [ 227.774424][ C1] net_ratelimit: 164 callbacks suppressed [ 227.807110][ T8321] netlink: zone id is out of range [ 227.807126][ T8321] netlink: zone id is out of range [ 227.807137][ T8321] netlink: zone id is out of range [ 227.807147][ T8321] netlink: zone id is out of range [ 227.807157][ T8321] netlink: zone id is out of range [ 227.807166][ T8321] netlink: zone id is out of range [ 227.807176][ T8321] netlink: zone id is out of range [ 227.807185][ T8321] netlink: zone id is out of range [ 227.892295][ T8316] bridge0: port 3(syz_tun) entered blocking state [ 227.892429][ T8316] bridge0: port 3(syz_tun) entered forwarding state [ 228.151629][ T8330] random: crng reseeded on system resumption [ 228.474431][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 228.624484][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 228.627580][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.629200][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 228.650165][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.650193][ T10] usb 3-1: Product: syz [ 228.650208][ T10] usb 3-1: Manufacturer: syz [ 228.650222][ T10] usb 3-1: SerialNumber: syz [ 228.730940][ T10] usb 3-1: config 0 descriptor?? [ 228.733529][ T8325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 228.756180][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 228.756200][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 228.817158][ T8337] Restarting kernel threads ... [ 228.817969][ T8337] Done restarting kernel threads. [ 229.065570][ T5782] usb 3-1: USB disconnect, device number 7 [ 229.550975][ T8353] netlink: 256 bytes leftover after parsing attributes in process `syz.3.911'. [ 229.710369][ T8356] FAULT_INJECTION: forcing a failure. [ 229.710369][ T8356] name failslab, interval 1, probability 0, space 0, times 0 [ 229.710415][ T8356] CPU: 1 UID: 0 PID: 8356 Comm: syz.2.913 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.710443][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.710457][ T8356] Call Trace: [ 229.710467][ T8356] [ 229.710478][ T8356] dump_stack_lvl+0xe8/0x150 [ 229.710520][ T8356] should_fail_ex+0x46b/0x600 [ 229.710557][ T8356] should_failslab+0xa8/0x100 [ 229.710594][ T8356] kmem_cache_alloc_node_noprof+0xac/0x660 [ 229.710626][ T8356] ? alloc_vmap_area+0x21c/0x1420 [ 229.710651][ T8356] ? alloc_vmap_area+0x21c/0x1420 [ 229.710685][ T8356] alloc_vmap_area+0x21c/0x1420 [ 229.710737][ T8356] ? __pfx_alloc_vmap_area+0x10/0x10 [ 229.710767][ T8356] ? __get_vm_area_node+0x155/0x2f0 [ 229.710800][ T8356] __get_vm_area_node+0x200/0x2f0 [ 229.710836][ T8356] __vmalloc_node_range_noprof+0x343/0x1540 [ 229.710867][ T8356] ? write_ldt+0x4f7/0x930 [ 229.710927][ T8356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.710958][ T8356] ? __kasan_kmalloc+0x93/0xb0 [ 229.710997][ T8356] ? write_ldt+0x4f7/0x930 [ 229.711020][ T8356] __vmalloc_noprof+0xd2/0x120 [ 229.711045][ T8356] ? write_ldt+0x4f7/0x930 [ 229.711075][ T8356] write_ldt+0x4f7/0x930 [ 229.711103][ T8356] ? __se_sys_futex+0x3a8/0x450 [ 229.711130][ T8356] ? __pfx_write_ldt+0x10/0x10 [ 229.711161][ T8356] ? rcu_is_watching+0x16/0xb0 [ 229.711203][ T8356] __se_sys_modify_ldt+0x6c/0x310 [ 229.711233][ T8356] do_syscall_64+0x166/0x520 [ 229.711259][ T8356] ? trace_irq_disable+0x3b/0x140 [ 229.711288][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.711312][ T8356] ? clear_bhb_loop+0x70/0xc0 [ 229.711342][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.711364][ T8356] RIP: 0033:0x7f3d4d8be159 [ 229.711386][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.711402][ T8356] RSP: 002b:00007f3d4bb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 229.711423][ T8356] RAX: ffffffffffffffda RBX: 00007f3d4db45fa0 RCX: 00007f3d4d8be159 [ 229.711437][ T8356] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 229.711448][ T8356] RBP: 00007f3d4d95506b R08: 0000000000000000 R09: 0000000000000000 [ 229.711459][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.711470][ T8356] R13: 00007f3d4db46038 R14: 00007f3d4db45fa0 R15: 00007fff279a65a8 [ 229.711497][ T8356] [ 229.994604][ T8356] syz.2.913: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 229.994786][ T8356] CPU: 1 UID: 0 PID: 8356 Comm: syz.2.913 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.994814][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.994829][ T8356] Call Trace: [ 229.994839][ T8356] [ 229.994849][ T8356] dump_stack_lvl+0xe8/0x150 [ 229.994889][ T8356] warn_alloc+0x24d/0x270 [ 229.994922][ T8356] ? lockdep_hardirqs_on+0x7b/0x110 [ 229.994961][ T8356] ? __pfx_warn_alloc+0x10/0x10 [ 229.994991][ T8356] ? kfree+0x1c5/0x6d0 [ 229.995027][ T8356] ? __get_vm_area_node+0x219/0x2f0 [ 229.995063][ T8356] __vmalloc_node_range_noprof+0x36b/0x1540 [ 229.995120][ T8356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.995153][ T8356] ? __kasan_kmalloc+0x93/0xb0 [ 229.995189][ T8356] ? write_ldt+0x4f7/0x930 [ 229.995215][ T8356] __vmalloc_noprof+0xd2/0x120 [ 229.995241][ T8356] ? write_ldt+0x4f7/0x930 [ 229.995270][ T8356] write_ldt+0x4f7/0x930 [ 229.995297][ T8356] ? __se_sys_futex+0x3a8/0x450 [ 229.995323][ T8356] ? __pfx_write_ldt+0x10/0x10 [ 229.995356][ T8356] ? rcu_is_watching+0x16/0xb0 [ 229.995398][ T8356] __se_sys_modify_ldt+0x6c/0x310 [ 229.995431][ T8356] do_syscall_64+0x166/0x520 [ 229.995451][ T8356] ? trace_irq_disable+0x3b/0x140 [ 229.995480][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.995504][ T8356] ? clear_bhb_loop+0x70/0xc0 [ 229.995532][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.995554][ T8356] RIP: 0033:0x7f3d4d8be159 [ 229.995577][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.995597][ T8356] RSP: 002b:00007f3d4bb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 229.995622][ T8356] RAX: ffffffffffffffda RBX: 00007f3d4db45fa0 RCX: 00007f3d4d8be159 [ 229.995640][ T8356] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 229.995655][ T8356] RBP: 00007f3d4d95506b R08: 0000000000000000 R09: 0000000000000000 [ 229.995671][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.995685][ T8356] R13: 00007f3d4db46038 R14: 00007f3d4db45fa0 R15: 00007fff279a65a8 [ 229.995735][ T8356] [ 230.222437][ T8356] Mem-Info: [ 230.222456][ T8356] active_anon:183 inactive_anon:8980 isolated_anon:0 [ 230.222456][ T8356] active_file:5488 inactive_file:37819 isolated_file:0 [ 230.222456][ T8356] unevictable:0 dirty:258 writeback:0 [ 230.222456][ T8356] slab_reclaimable:11551 slab_unreclaimable:104774 [ 230.222456][ T8356] mapped:33918 shmem:3391 pagetables:1265 [ 230.222456][ T8356] sec_pagetables:0 bounce:0 [ 230.222456][ T8356] kernel_misc_reclaimable:0 [ 230.222456][ T8356] free:1323989 free_pcp:3588 free_cma:0 [ 230.222521][ T8356] Node 0 active_anon:732kB inactive_anon:35920kB active_file:21748kB inactive_file:151276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135672kB dirty:1032kB writeback:0kB shmem:13564kB kernel_stack:13276kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 230.222578][ T8356] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 230.222629][ T8356] Node 0 DMA free:15328kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.222695][ T8356] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 230.222737][ T8356] Node 0 DMA32 free:1351852kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:732kB inactive_anon:35920kB active_file:21748kB inactive_file:151276kB unevictable:0kB writepending:1032kB zspages:0kB present:3129332kB managed:2559096kB mlocked:0kB bounce:0kB free_pcp:14344kB local_pcp:6224kB free_cma:0kB [ 230.222804][ T8356] lowmem_reserve[]: 0 0 1 1 1 [ 230.222843][ T8356] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 230.222902][ T8356] lowmem_reserve[]: 0 0 0 0 0 [ 230.222940][ T8356] Node 1 Normal free:3928776kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.223000][ T8356] lowmem_reserve[]: 0 0 0 0 0 [ 230.223040][ T8356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 230.223586][ T8356] Node 0 DMA32: 173*4kB (UM) 18*8kB (UE) 32*16kB (UM) 119*32kB (UME) 143*64kB (UME) 40*128kB (M) 21*256kB (UM) 12*512kB (ME) 6*1024kB (UME) 2*2048kB (UM) 320*4096kB (M) = 1351908kB [ 230.223781][ T8356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 230.372810][ T8356] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.372851][ T8356] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 5*16kB (UM) 4*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3928776kB [ 230.373022][ T8356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.373039][ T8356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.373056][ T8356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.373073][ T8356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.373090][ T8356] 46694 total pagecache pages [ 230.373099][ T8356] 0 pages in swap cache [ 230.373107][ T8356] Free swap = 124996kB [ 230.373116][ T8356] Total swap = 124996kB [ 230.373124][ T8356] 2097051 pages RAM [ 230.373133][ T8356] 0 pages HighMem/MovableOnly [ 230.373140][ T8356] 425209 pages reserved [ 230.373163][ T8356] 0 pages cma reserved [ 231.160314][ T8382] netlink: 256 bytes leftover after parsing attributes in process `syz.4.925'. [ 231.491780][ T8388] syzkaller0: entered promiscuous mode [ 231.491808][ T8388] syzkaller0: entered allmulticast mode [ 231.908499][ T8400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.931'. [ 232.338862][ T8415] netlink: 256 bytes leftover after parsing attributes in process `syz.1.937'. [ 232.969781][ T8436] random: crng reseeded on system resumption [ 232.976428][ T12] net_ratelimit: 110 callbacks suppressed [ 232.977998][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'. [ 233.376631][ T8440] netlink: 256 bytes leftover after parsing attributes in process `syz.1.952'. [ 233.536538][ T8442] Restarting kernel threads ... [ 233.597693][ T8442] Done restarting kernel threads. [ 234.805452][ T37] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 234.904851][ T8477] netlink: 256 bytes leftover after parsing attributes in process `syz.3.966'. [ 234.954457][ T37] usb 1-1: device descriptor read/64, error -71 [ 235.224415][ T37] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 235.376124][ T37] usb 1-1: device descriptor read/64, error -71 [ 235.485197][ T37] usb usb1-port1: attempt power cycle [ 235.962730][ T37] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 235.989308][ T37] usb 1-1: device descriptor read/8, error -71 [ 236.234889][ T37] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 236.275425][ T37] usb 1-1: device descriptor read/8, error -71 [ 236.396218][ T37] usb usb1-port1: unable to enumerate USB device [ 236.771240][ T8510] netlink: 256 bytes leftover after parsing attributes in process `syz.4.979'. [ 236.847844][ T8512] netlink: 'syz.2.978': attribute type 10 has an invalid length. [ 236.848326][ T8512] bridge0: port 3(syz_tun) entered disabled state [ 236.873005][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.873937][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.910934][ T8512] bridge0: port 3(syz_tun) entered blocking state [ 236.911097][ T8512] bridge0: port 3(syz_tun) entered forwarding state [ 236.911654][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.911826][ T8512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.912260][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.912450][ T8512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.966835][ T8512] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 237.116431][ T8518] random: crng reseeded on system resumption [ 238.086754][ T8541] Restarting kernel threads ... [ 238.108546][ T8541] Done restarting kernel threads. [ 238.194749][ T8542] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.987'. [ 238.554622][ T8553] netlink: 256 bytes leftover after parsing attributes in process `syz.0.991'. [ 238.574351][ C1] net_ratelimit: 85 callbacks suppressed [ 239.274402][ T5726] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 239.424462][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 239.427050][ T5726] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 239.429682][ T5726] usb 1-1: config 137 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.429713][ T5726] usb 1-1: config 137 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 239.429780][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.176738][ T8583] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1001'. [ 241.557013][ T8611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1010'. [ 242.040832][ T5726] usbhid 1-1:137.0: can't add hid device: -71 [ 242.040996][ T5726] usbhid 1-1:137.0: probe with driver usbhid failed with error -71 [ 242.161479][ T5726] usb 1-1: USB disconnect, device number 8 [ 242.272224][ T8620] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1014'. [ 243.359666][ T8659] random: crng reseeded on system resumption [ 243.774481][ C0] net_ratelimit: 106 callbacks suppressed [ 244.140788][ T8668] Restarting kernel threads ... [ 244.170550][ T8668] Done restarting kernel threads. [ 244.433840][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1033'. [ 245.735867][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1046'. [ 245.770438][ T8696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1045'. [ 246.230462][ T8705] random: crng reseeded on system resumption [ 246.709120][ T8709] Restarting kernel threads ... [ 246.710859][ T8709] Done restarting kernel threads. [ 247.324581][ T37] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 247.484459][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 247.485394][ T37] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 247.487187][ T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 247.521931][ T37] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 247.521955][ T37] usb 3-1: Product: syz [ 247.521972][ T37] usb 3-1: Manufacturer: syz [ 247.521997][ T37] usb 3-1: SerialNumber: syz [ 247.572717][ T37] usb 3-1: config 0 descriptor?? [ 247.592684][ T8712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.952929][ T37] usb 3-1: USB disconnect, device number 8 [ 248.131058][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'. [ 248.293451][ T8730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1059'. [ 248.819850][ C1] net_ratelimit: 93 callbacks suppressed [ 248.916606][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.090440][ T8748] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 249.280590][ T8753] random: crng reseeded on system resumption [ 249.926198][ T8765] Restarting kernel threads ... [ 249.952315][ T8765] Done restarting kernel threads. [ 250.755307][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.772026][ T5726] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 250.838506][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.921249][ T5726] usb 3-1: device descriptor read/64, error -71 [ 251.158480][ T5726] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 251.284444][ T5726] usb 3-1: device descriptor read/64, error -71 [ 251.394880][ T5726] usb usb3-port1: attempt power cycle [ 251.735465][ T5726] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 251.756769][ T5726] usb 3-1: device descriptor read/8, error -71 [ 251.995507][ T5726] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 252.017128][ T5726] usb 3-1: device descriptor read/8, error -71 [ 252.037739][ T8782] netlink: 'syz.3.1076': attribute type 5 has an invalid length. [ 252.037761][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 252.124977][ T5726] usb usb3-port1: unable to enumerate USB device [ 252.682580][ T8720] tipc: Resetting bearer [ 252.714486][ T8720] syzkaller0: left promiscuous mode [ 252.714509][ T8720] syzkaller0: left allmulticast mode [ 252.816014][ T8782] netlink: 'syz.3.1076': attribute type 5 has an invalid length. [ 252.816037][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 252.847075][ T68] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.853173][ T68] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.853225][ T68] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.853265][ T68] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.958834][ T8786] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 252.974434][ T5600] Bluetooth: hci4: command 0x0406 tx timeout [ 253.231681][ T8794] random: crng reseeded on system resumption [ 253.813222][ T8808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1086'. [ 253.813774][ T8809] Restarting kernel threads ... [ 253.840091][ T8809] Done restarting kernel threads. [ 254.015988][ C0] net_ratelimit: 280 callbacks suppressed [ 254.542303][ T8818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1090'. [ 254.614083][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 255.066554][ T8834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1097'. [ 255.234459][ T5867] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 255.364480][ T5867] usb 1-1: device descriptor read/64, error -71 [ 255.608135][ T8846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1103'. [ 255.636886][ T5867] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 255.661263][ T60] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 255.764451][ T5867] usb 1-1: device descriptor read/64, error -71 [ 255.877925][ T5867] usb usb1-port1: attempt power cycle [ 256.045157][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.103923][ T8857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1108'. [ 256.231256][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 256.244379][ T5867] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 256.265727][ T5867] usb 1-1: device descriptor read/8, error -71 [ 256.514391][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 256.535967][ T5867] usb 1-1: device descriptor read/8, error -71 [ 256.646949][ T5867] usb usb1-port1: unable to enumerate USB device [ 256.829443][ T8871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1115'. [ 256.982919][ T8876] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 257.107729][ T60] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 257.148479][ T8880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1119'. [ 258.052968][ T38] audit: type=1804 audit(1789987566.183:15): pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1132" name="/newroot/213/file0" dev="tmpfs" ino=1130 res=1 errno=0 [ 258.109680][ T8914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1133'. [ 258.523069][ T60] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 258.970204][ T8912] FAULT_INJECTION: forcing a failure. [ 258.970204][ T8912] name failslab, interval 1, probability 0, space 0, times 0 [ 258.970243][ T8912] CPU: 0 UID: 0 PID: 8912 Comm: syz.2.1132 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 258.970271][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.970286][ T8912] Call Trace: [ 258.970296][ T8912] [ 258.970307][ T8912] dump_stack_lvl+0xe8/0x150 [ 258.970348][ T8912] should_fail_ex+0x46b/0x600 [ 258.970381][ T8912] ? __d_alloc+0x37/0x6f0 [ 258.970410][ T8912] should_failslab+0xa8/0x100 [ 258.970447][ T8912] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 258.970481][ T8912] ? __d_alloc+0x37/0x6f0 [ 258.970514][ T8912] __d_alloc+0x37/0x6f0 [ 258.970547][ T8912] d_alloc_pseudo+0x21/0xc0 [ 258.970586][ T8912] alloc_path_pseudo+0x107/0x220 [ 258.970623][ T8912] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 258.970656][ T8912] ? rt_spin_lock+0x1e2/0x400 [ 258.970701][ T8912] alloc_file_pseudo+0xa8/0x1e0 [ 258.970739][ T8912] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 258.970776][ T8912] ? alloc_fd+0x654/0x6d0 [ 258.970804][ T8912] sock_alloc_file+0xb8/0x2f0 [ 258.970832][ T8912] ? __sys_socket+0x12b/0x1b0 [ 258.970866][ T8912] __sys_socket+0x13f/0x1b0 [ 258.970902][ T8912] __x64_sys_socket+0x7a/0x90 [ 258.970934][ T8912] do_syscall_64+0x166/0x520 [ 258.970956][ T8912] ? trace_irq_disable+0x3b/0x140 [ 258.970985][ T8912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.971008][ T8912] ? clear_bhb_loop+0x70/0xc0 [ 258.971037][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.971060][ T8912] RIP: 0033:0x7f3d4d8be159 [ 258.971081][ T8912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.971102][ T8912] RSP: 002b:00007f3d4bb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 258.971129][ T8912] RAX: ffffffffffffffda RBX: 00007f3d4db45fa0 RCX: 00007f3d4d8be159 [ 258.971146][ T8912] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 258.971160][ T8912] RBP: 00007f3d4d95506b R08: 0000000000000000 R09: 0000000000000000 [ 258.971176][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.971192][ T8912] R13: 00007f3d4db46038 R14: 00007f3d4db45fa0 R15: 00007fff279a65a8 [ 258.971229][ T8912] [ 259.054363][ C1] net_ratelimit: 72 callbacks suppressed [ 259.055521][ T982] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 259.229224][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 259.230635][ T982] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 259.235209][ T982] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 259.245906][ T982] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 259.245926][ T982] usb 4-1: Product: syz [ 259.245941][ T982] usb 4-1: Manufacturer: syz [ 259.245955][ T982] usb 4-1: SerialNumber: syz [ 259.283048][ T982] usb 4-1: config 0 descriptor?? [ 259.292398][ T8927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.334976][ T4923] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 259.487055][ T4923] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.488957][ T4923] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.488984][ T4923] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.489006][ T4923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.489081][ T4923] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.489110][ T4923] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.493859][ T4923] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.493882][ T4923] usb 5-1: Product: syz [ 259.493899][ T4923] usb 5-1: Manufacturer: syz [ 259.591711][ T4923] cdc_wdm 5-1:1.0: skipping garbage [ 259.591726][ T4923] cdc_wdm 5-1:1.0: skipping garbage [ 259.614935][ T4923] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 259.614956][ T4923] cdc_wdm 5-1:1.0: Unknown control protocol [ 259.640397][ T5726] usb 4-1: USB disconnect, device number 4 [ 259.805398][ T982] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 259.859771][ T8944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1145'. [ 259.965688][ T982] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 259.969633][ T982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.969660][ T982] usb 1-1: config 0 has no interfaces? [ 259.969717][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.988906][ T982] usb 1-1: config 0 descriptor?? [ 260.055303][ T5726] usb 5-1: USB disconnect, device number 5 [ 260.283140][ T982] usb 1-1: USB disconnect, device number 13 [ 260.649133][ T60] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 260.804564][ T4923] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 260.978978][ T4923] usb 4-1: Using ep0 maxpacket: 16 [ 260.980068][ T4923] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.982850][ T4923] usb 4-1: config 137 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.982880][ T4923] usb 4-1: config 137 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.982941][ T4923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.354126][ T8969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1156'. [ 261.430500][ T38] audit: type=1804 audit(1789987569.563:16): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1157" name="/newroot/218/file0" dev="tmpfs" ino=1134 res=1 errno=0 [ 262.114750][ T8971] FAULT_INJECTION: forcing a failure. [ 262.114750][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 262.114787][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.0.1157 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.114812][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.114825][ T8971] Call Trace: [ 262.114835][ T8971] [ 262.114845][ T8971] dump_stack_lvl+0xe8/0x150 [ 262.114883][ T8971] should_fail_ex+0x46b/0x600 [ 262.114917][ T8971] should_failslab+0xa8/0x100 [ 262.114951][ T8971] __kmalloc_noprof+0xfb/0x790 [ 262.114980][ T8971] ? udpv6_init_sock+0x1a9/0x3c0 [ 262.115002][ T8971] ? udpv6_init_sock+0x1a9/0x3c0 [ 262.115031][ T8971] udpv6_init_sock+0x1a9/0x3c0 [ 262.115061][ T8971] inet6_create+0xf0b/0x1280 [ 262.115098][ T8971] ? inet6_create+0x80/0x1280 [ 262.115132][ T8971] __sock_create+0x4b3/0x9d0 [ 262.115172][ T8971] __sys_socket+0xd6/0x1b0 [ 262.115207][ T8971] __x64_sys_socket+0x7a/0x90 [ 262.115237][ T8971] do_syscall_64+0x166/0x520 [ 262.115257][ T8971] ? trace_irq_disable+0x3b/0x140 [ 262.115285][ T8971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.115309][ T8971] ? clear_bhb_loop+0x70/0xc0 [ 262.115335][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.115358][ T8971] RIP: 0033:0x7fcf7715e159 [ 262.115379][ T8971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.115397][ T8971] RSP: 002b:00007fcf753b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 262.115421][ T8971] RAX: ffffffffffffffda RBX: 00007fcf773e5fa0 RCX: 00007fcf7715e159 [ 262.115437][ T8971] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 262.115451][ T8971] RBP: 00007fcf771f506b R08: 0000000000000000 R09: 0000000000000000 [ 262.115486][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.115501][ T8971] R13: 00007fcf773e6038 R14: 00007fcf773e5fa0 R15: 00007ffc44cd7208 [ 262.115536][ T8971] [ 262.424399][ T982] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 262.605350][ T982] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.608266][ T982] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.608293][ T982] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.608315][ T982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.608391][ T982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 262.608418][ T982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 262.611534][ T982] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.611556][ T982] usb 3-1: Product: syz [ 262.611573][ T982] usb 3-1: Manufacturer: syz [ 262.721578][ T982] cdc_wdm 3-1:1.0: skipping garbage [ 262.721592][ T982] cdc_wdm 3-1:1.0: skipping garbage [ 262.754756][ T982] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 262.754780][ T982] cdc_wdm 3-1:1.0: Unknown control protocol [ 262.939841][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'. [ 263.127641][ T982] usb 3-1: USB disconnect, device number 13 [ 263.275914][ T8994] random: crng reseeded on system resumption [ 263.654998][ T4923] usbhid 4-1:137.0: can't add hid device: -71 [ 263.655166][ T4923] usbhid 4-1:137.0: probe with driver usbhid failed with error -71 [ 263.697846][ T4923] usb 4-1: USB disconnect, device number 5 [ 264.094633][ T9011] Restarting kernel threads ... [ 264.100086][ T9011] Done restarting kernel threads. [ 264.121670][ T9010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1169'. [ 264.174502][ C1] net_ratelimit: 63 callbacks suppressed [ 264.310155][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1175'. [ 264.703988][ T9030] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1181'. [ 265.232050][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'. [ 265.645381][ T9058] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1193'. [ 265.685978][ T9055] syz.3.1192 uses obsolete (PF_INET,SOCK_PACKET) [ 265.934908][ T9063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1196'. [ 266.854574][ T5867] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 267.024508][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 267.025661][ T5867] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.025725][ T5867] usb 1-1: no configurations [ 267.025740][ T5867] usb 1-1: can't read configurations, error -22 [ 267.044805][ T9087] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1206'. [ 267.154468][ T5867] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 267.304426][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 267.305538][ T5867] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.305599][ T5867] usb 1-1: no configurations [ 267.305614][ T5867] usb 1-1: can't read configurations, error -22 [ 267.307550][ T5867] usb usb1-port1: attempt power cycle [ 267.704685][ T5867] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 267.745396][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 267.746419][ T5867] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.746480][ T5867] usb 1-1: no configurations [ 267.746495][ T5867] usb 1-1: can't read configurations, error -22 [ 267.839432][ T9102] random: crng reseeded on system resumption [ 267.876605][ T5867] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 267.997750][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 267.999023][ T5867] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.999084][ T5867] usb 1-1: no configurations [ 267.999098][ T5867] usb 1-1: can't read configurations, error -22 [ 267.999947][ T5867] usb usb1-port1: unable to enumerate USB device [ 268.167104][ T9107] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1216'. [ 268.333588][ T9112] Restarting kernel threads ... [ 268.393854][ T9112] Done restarting kernel threads. [ 269.364461][ C1] net_ratelimit: 52 callbacks suppressed [ 270.165654][ T5867] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 270.317722][ T5867] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 270.319499][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.319560][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 270.319590][ T5867] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 270.319657][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.870611][ T5867] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 270.871076][ T5867] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 270.871092][ T5867] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 271.028227][ T5867] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 271.089272][ T5867] usb 2-1: USB disconnect, device number 13 [ 271.708283][ T9146] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1228'. [ 273.314428][ T5726] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 273.464452][ T5726] usb 3-1: Using ep0 maxpacket: 32 [ 273.467745][ T5726] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.469174][ T5726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.469197][ T5726] usb 3-1: config 0 has no interfaces? [ 273.498678][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.498702][ T5726] usb 3-1: Product: syz [ 273.498718][ T5726] usb 3-1: Manufacturer: syz [ 273.498734][ T5726] usb 3-1: SerialNumber: syz [ 273.536523][ T5726] usb 3-1: config 0 descriptor?? [ 273.704815][ T9181] random: crng reseeded on system resumption [ 273.794499][ T5867] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 273.817058][ T5726] usb 3-1: USB disconnect, device number 14 [ 273.957296][ T5867] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 273.978612][ T5867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.978698][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.041472][ T5867] metro_usb 4-1:1.0: required endpoints missing [ 274.245114][ T5867] usb 4-1: USB disconnect, device number 6 [ 274.705615][ T9203] Restarting kernel threads ... [ 274.709760][ T9203] Done restarting kernel threads. [ 275.054417][ C0] net_ratelimit: 59 callbacks suppressed [ 275.345951][ T982] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 275.525918][ T982] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 275.573117][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.573181][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 275.573206][ T982] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 275.573231][ T982] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.581542][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 275.581564][ T982] usb 4-1: Product: syz [ 275.581578][ T982] usb 4-1: Manufacturer: syz [ 275.656624][ T982] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 275.853889][ T982] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 275.870957][ T982] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 275.952610][ T982] usb 4-1: USB disconnect, device number 7 [ 275.974522][ T4923] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.019372][ T982] garmin_gps 4-1:1.0: device disconnected [ 276.145545][ T4923] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.147707][ T4923] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 276.147733][ T4923] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 276.147754][ T4923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.147825][ T4923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 276.147853][ T4923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 276.150913][ T4923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.150936][ T4923] usb 3-1: Product: syz [ 276.150952][ T4923] usb 3-1: Manufacturer: syz [ 276.247973][ T4923] cdc_wdm 3-1:1.0: skipping garbage [ 276.247988][ T4923] cdc_wdm 3-1:1.0: skipping garbage [ 276.275647][ T4923] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 276.275666][ T4923] cdc_wdm 3-1:1.0: Unknown control protocol [ 276.372286][ T9237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1264'. [ 276.960166][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 277.571057][ T9268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1277'. [ 278.191357][ T9274] random: crng reseeded on system resumption [ 278.590845][ T9282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1283'. [ 278.992051][ T982] usb 3-1: USB disconnect, device number 15 [ 279.219222][ T9295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1288'. [ 279.639452][ T9307] Restarting kernel threads ... [ 279.643321][ T9307] Done restarting kernel threads. [ 280.424337][ C1] net_ratelimit: 66 callbacks suppressed [ 280.494066][ T9322] batman_adv: batadv0: Adding interface: syzkaller0 [ 280.494080][ T9322] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.542910][ T9322] batman_adv: batadv0: Interface activated: syzkaller0 [ 280.630465][ T9316] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 280.706301][ T4923] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 280.756669][ T9331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1301'. [ 280.869111][ T9316] batman_adv: batadv0: Removing interface: syzkaller0 [ 280.896105][ T4923] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.899737][ T4923] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.899763][ T4923] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 280.899785][ T4923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.899876][ T4923] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 280.899915][ T4923] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 280.926594][ T4923] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.926618][ T4923] usb 5-1: Product: syz [ 280.926635][ T4923] usb 5-1: Manufacturer: syz [ 281.020136][ T4923] cdc_wdm 5-1:1.0: skipping garbage [ 281.020150][ T4923] cdc_wdm 5-1:1.0: skipping garbage [ 281.055271][ T4923] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 281.055292][ T4923] cdc_wdm 5-1:1.0: Unknown control protocol [ 281.085734][ T60] Bluetooth: hci2: unexpected event for opcode 0x616c [ 281.484469][ T5726] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 281.640305][ T5726] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 281.651351][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.651406][ T5726] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.651728][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.890057][ T5726] metro_usb 2-1:1.0: required endpoints missing [ 282.054843][ T4923] usb 2-1: USB disconnect, device number 14 [ 282.825856][ T9364] random: crng reseeded on system resumption [ 282.889809][ T9366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1315'. [ 282.903840][ T5915] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 283.065862][ T5915] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 283.071775][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.071911][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.071938][ T5915] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.071964][ T5915] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.126600][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 283.126623][ T5915] usb 1-1: Product: syz [ 283.126640][ T5915] usb 1-1: Manufacturer: syz [ 283.167923][ T5915] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 283.173165][ T5915] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 283.201162][ T5915] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 283.398031][ T4923] usb 1-1: USB disconnect, device number 18 [ 283.456515][ T4923] garmin_gps 1-1:1.0: device disconnected [ 283.724650][ T4923] usb 5-1: USB disconnect, device number 6 [ 284.197231][ T4923] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 284.336926][ T9389] Restarting kernel threads ... [ 284.345526][ T9389] Done restarting kernel threads. [ 284.375881][ T4923] usb 5-1: Using ep0 maxpacket: 8 [ 284.377025][ T4923] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 284.393516][ T4923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.484215][ T4923] pvrusb2: Hardware description: Terratec Grabster AV400 [ 284.486514][ T4923] pvrusb2: ********** [ 284.486528][ T4923] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 284.486543][ T4923] pvrusb2: Important functionality might not be entirely working. [ 284.486555][ T4923] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 284.486568][ T4923] pvrusb2: ********** [ 284.699347][ T2376] pvrusb2: Invalid write control endpoint [ 284.914445][ T4923] usb 5-1: USB disconnect, device number 7 [ 284.963561][ T9399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1326'. [ 285.327589][ T5915] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 285.394108][ T2376] pvrusb2: Invalid write control endpoint [ 285.394122][ T2376] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 285.394134][ T2376] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 285.394144][ T2376] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 285.394156][ T2376] pvrusb2: Device being rendered inoperable [ 285.447873][ T2376] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 285.447935][ T2376] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 285.454528][ C0] net_ratelimit: 48 callbacks suppressed [ 285.524759][ T5915] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.528365][ T5915] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.528393][ T5915] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 285.528414][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.528488][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 285.528516][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 285.580902][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.580922][ T5915] usb 1-1: Product: syz [ 285.580936][ T5915] usb 1-1: Manufacturer: syz [ 285.625667][ T2376] pvrusb2: Attached sub-driver cx25840 [ 285.625679][ T2376] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 285.625691][ T2376] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 285.824555][ T5915] cdc_wdm 1-1:1.0: skipping garbage [ 285.824571][ T5915] cdc_wdm 1-1:1.0: skipping garbage [ 285.876052][ T5915] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 285.876075][ T5915] cdc_wdm 1-1:1.0: Unknown control protocol [ 286.130060][ T5915] usb 1-1: USB disconnect, device number 19 [ 286.273642][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'. [ 286.854449][ T5915] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 287.056256][ T5915] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 287.056316][ T5915] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 287.058160][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.058218][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.058248][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.061534][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.061593][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.061624][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.067716][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.067765][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.067792][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.071955][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.072005][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.072031][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.073871][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.073918][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.073944][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.082962][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.083012][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.083039][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.085595][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.085644][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.085670][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.089593][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.089641][ T5915] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.089666][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.108121][ T5915] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 287.108141][ T5915] usb 3-1: Product: syz [ 287.108156][ T5915] usb 3-1: Manufacturer: syz [ 287.108170][ T5915] usb 3-1: SerialNumber: syz [ 287.163025][ T5915] usb 3-1: config 0 descriptor?? [ 287.467601][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 287.570339][ T9446] random: crng reseeded on system resumption [ 287.629741][ T5915] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 287.654005][ T9450] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1348'. [ 287.753504][ T5915] usb 3-1: USB disconnect, device number 16 [ 287.836212][ T9452] netlink: 'syz.3.1347': attribute type 10 has an invalid length. [ 287.853942][ T5915] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 288.199918][ T982] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 288.366868][ T982] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.370069][ T982] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 288.370096][ T982] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 288.370134][ T982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.370330][ T982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 288.370369][ T982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 288.408892][ T982] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.408914][ T982] usb 1-1: Product: syz [ 288.408930][ T982] usb 1-1: Manufacturer: syz [ 288.472377][ T982] cdc_wdm 1-1:1.0: skipping garbage [ 288.472393][ T982] cdc_wdm 1-1:1.0: skipping garbage [ 288.486660][ T982] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 288.486679][ T982] cdc_wdm 1-1:1.0: Unknown control protocol [ 289.328892][ T9469] Restarting kernel threads ... [ 289.353824][ T9469] Done restarting kernel threads. [ 289.664652][ T31] usb 1-1: USB disconnect, device number 20 [ 290.140655][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'. [ 290.302907][ T38] audit: type=1804 audit(1789987598.433:17): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1359" name="/newroot/263/file0" dev="tmpfs" ino=1364 res=1 errno=0 [ 290.480027][ T9493] netlink: 'syz.1.1361': attribute type 2 has an invalid length. [ 290.576970][ T3406] net_ratelimit: 49 callbacks suppressed [ 290.733099][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 290.733125][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 290.934669][ T5726] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 291.092442][ T5726] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 291.097823][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.097882][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 291.097909][ T5726] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 291.097969][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.164914][ T9489] FAULT_INJECTION: forcing a failure. [ 291.164914][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 291.164951][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: syz.0.1359 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 291.164978][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.164990][ T9489] Call Trace: [ 291.165000][ T9489] [ 291.165009][ T9489] dump_stack_lvl+0xe8/0x150 [ 291.165048][ T9489] should_fail_ex+0x46b/0x600 [ 291.165083][ T9489] should_failslab+0xa8/0x100 [ 291.165118][ T9489] __kmalloc_noprof+0xfb/0x790 [ 291.165146][ T9489] ? udpv6_init_sock+0x1a9/0x3c0 [ 291.165168][ T9489] ? udpv6_init_sock+0x1a9/0x3c0 [ 291.165199][ T9489] udpv6_init_sock+0x1a9/0x3c0 [ 291.165229][ T9489] inet6_create+0xf0b/0x1280 [ 291.165264][ T9489] ? inet6_create+0x80/0x1280 [ 291.165296][ T9489] __sock_create+0x4b3/0x9d0 [ 291.165336][ T9489] __sys_socket+0xd6/0x1b0 [ 291.165371][ T9489] __x64_sys_socket+0x7a/0x90 [ 291.165401][ T9489] do_syscall_64+0x166/0x520 [ 291.165422][ T9489] ? trace_irq_disable+0x3b/0x140 [ 291.165449][ T9489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.165472][ T9489] ? clear_bhb_loop+0x70/0xc0 [ 291.165500][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.165523][ T9489] RIP: 0033:0x7fcf7715e159 [ 291.165546][ T9489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.165566][ T9489] RSP: 002b:00007fcf753b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 291.165592][ T9489] RAX: ffffffffffffffda RBX: 00007fcf773e5fa0 RCX: 00007fcf7715e159 [ 291.165610][ T9489] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 291.165625][ T9489] RBP: 00007fcf771f506b R08: 0000000000000000 R09: 0000000000000000 [ 291.165639][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.165651][ T9489] R13: 00007fcf773e6038 R14: 00007fcf773e5fa0 R15: 00007ffc44cd7208 [ 291.165685][ T9489] [ 291.643783][ T5726] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 291.643816][ T5726] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 291.643831][ T5726] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 291.916563][ T5726] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 291.973826][ T5726] usb 2-1: USB disconnect, device number 15 [ 292.044432][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 292.206570][ T31] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 292.209953][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.210011][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.320141][ T31] metro_usb 3-1:1.0: required endpoints missing [ 292.579779][ T31] usb 3-1: USB disconnect, device number 17 [ 292.825124][ T9530] random: crng reseeded on system resumption [ 292.947011][ T9515] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 293.322899][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 293.322927][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 293.334416][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 293.516718][ T31] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 293.520036][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.520070][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.520133][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.579486][ T31] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 293.614606][ T5726] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 293.648044][ T31] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 293.680238][ T9545] Restarting kernel threads ... [ 293.681794][ T9545] Done restarting kernel threads. [ 293.775683][ T5726] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 293.775742][ T5726] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 293.783017][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.783077][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.783107][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.843139][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.843198][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.843227][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.852389][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.852541][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.852570][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.858656][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.858709][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.858749][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.871132][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.871184][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.871210][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.877466][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.877514][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.877540][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.881493][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.881542][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.881567][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.883917][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.883965][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.883990][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.907246][ T5726] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 293.907267][ T5726] usb 3-1: Product: syz [ 293.907280][ T5726] usb 3-1: Manufacturer: syz [ 293.907294][ T5726] usb 3-1: SerialNumber: syz [ 293.966365][ T5726] usb 3-1: config 0 descriptor?? [ 294.180062][ T5726] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 294.321518][ T5726] usb 3-1: USB disconnect, device number 18 [ 294.326811][ T9533] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 294.370751][ T31] usb 4-1: USB disconnect, device number 8 [ 294.539946][ T5726] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 294.623560][ T38] audit: type=1804 audit(1789987602.753:18): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1385" name="/newroot/297/file0" dev="tmpfs" ino=1554 res=1 errno=0 [ 294.719573][ T31] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 294.720758][ T31] metro_usb 4-1:1.0: device disconnected [ 294.920568][ T60] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 295.516108][ T9552] FAULT_INJECTION: forcing a failure. [ 295.516108][ T9552] name failslab, interval 1, probability 0, space 0, times 0 [ 295.516144][ T9552] CPU: 0 UID: 0 PID: 9552 Comm: syz.4.1385 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 295.516171][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.516185][ T9552] Call Trace: [ 295.516195][ T9552] [ 295.516205][ T9552] dump_stack_lvl+0xe8/0x150 [ 295.516243][ T9552] should_fail_ex+0x46b/0x600 [ 295.516274][ T9552] ? __d_alloc+0x37/0x6f0 [ 295.516302][ T9552] should_failslab+0xa8/0x100 [ 295.516337][ T9552] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 295.516367][ T9552] ? __d_alloc+0x37/0x6f0 [ 295.516402][ T9552] __d_alloc+0x37/0x6f0 [ 295.516434][ T9552] d_alloc_pseudo+0x21/0xc0 [ 295.516462][ T9552] alloc_path_pseudo+0x107/0x220 [ 295.516500][ T9552] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 295.516531][ T9552] ? rt_spin_lock+0x1e2/0x400 [ 295.516570][ T9552] alloc_file_pseudo+0xa8/0x1e0 [ 295.516607][ T9552] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 295.516643][ T9552] ? alloc_fd+0x654/0x6d0 [ 295.516671][ T9552] sock_alloc_file+0xb8/0x2f0 [ 295.516699][ T9552] ? __sys_socket+0x12b/0x1b0 [ 295.516732][ T9552] __sys_socket+0x13f/0x1b0 [ 295.516777][ T9552] __x64_sys_socket+0x7a/0x90 [ 295.516809][ T9552] do_syscall_64+0x166/0x520 [ 295.516829][ T9552] ? trace_irq_disable+0x3b/0x140 [ 295.516857][ T9552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.516878][ T9552] ? clear_bhb_loop+0x70/0xc0 [ 295.516903][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.516927][ T9552] RIP: 0033:0x7fab5168e159 [ 295.516949][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.516971][ T9552] RSP: 002b:00007fab4f8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 295.516996][ T9552] RAX: ffffffffffffffda RBX: 00007fab51915fa0 RCX: 00007fab5168e159 [ 295.517014][ T9552] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 295.517028][ T9552] RBP: 00007fab5172506b R08: 0000000000000000 R09: 0000000000000000 [ 295.517043][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.517057][ T9552] R13: 00007fab51916038 R14: 00007fab51915fa0 R15: 00007fffe7847978 [ 295.517092][ T9552] [ 295.624321][ C1] net_ratelimit: 36 callbacks suppressed [ 295.814373][ T5726] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 295.975410][ T5726] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 295.979822][ T5726] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.979857][ T5726] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.979921][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.046488][ T5726] metro_usb 1-1:1.0: Metrologic USB to Serial converter detected [ 296.066705][ T5726] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 296.289995][ T9564] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 296.377926][ T5915] usb 1-1: USB disconnect, device number 21 [ 296.455178][ T5915] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 296.462891][ T5915] metro_usb 1-1:1.0: device disconnected [ 296.624410][ T4923] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 296.664548][ T5726] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 296.694454][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 296.800614][ T4923] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 296.802027][ T4923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.802104][ T4923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 296.802134][ T4923] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 296.802202][ T4923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.858923][ T5726] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 296.859926][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 296.879527][ T5726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.891101][ T5726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.891175][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.901512][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.939275][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.939306][ T10] usb 5-1: Product: syz [ 296.939323][ T10] usb 5-1: Manufacturer: syz [ 296.939338][ T10] usb 5-1: SerialNumber: syz [ 296.972977][ T10] usb 5-1: config 0 descriptor?? [ 297.008513][ T10] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 297.008854][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 297.008960][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 297.071415][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 297.071532][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 297.071645][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 297.071760][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 297.071871][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 297.185151][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 297.190876][ T5726] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 297.382502][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 297.382600][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 297.382696][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 297.382794][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 297.382890][ T10] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 297.409314][ T4923] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 297.409341][ T4923] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 297.409356][ T4923] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 297.471511][ T5726] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB2 [ 297.471918][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 297.498513][ T4923] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 297.676554][ T4923] usb 2-1: USB disconnect, device number 16 [ 297.818426][ T31] usb 5-1: USB disconnect, device number 8 [ 297.931529][ T60] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 297.983101][ T5726] usb 4-1: USB disconnect, device number 9 [ 298.050193][ T5726] metro-usb ttyUSB2: Metrologic USB to Serial converter now disconnected from ttyUSB2 [ 298.066917][ T5726] metro_usb 4-1:1.0: device disconnected [ 298.279908][ T9601] random: crng reseeded on system resumption [ 298.280291][ T31] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 298.450861][ T31] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 298.452169][ T31] keyspan 5-1:0.0: device disconnected [ 298.472622][ T38] audit: type=1804 audit(1789987606.603:19): pid=9604 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1408" name="/newroot/273/file0" dev="tmpfs" ino=1439 res=1 errno=0 [ 299.113872][ T9604] FAULT_INJECTION: forcing a failure. [ 299.113872][ T9604] name failslab, interval 1, probability 0, space 0, times 0 [ 299.113907][ T9604] CPU: 0 UID: 0 PID: 9604 Comm: syz.2.1408 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 299.113931][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.113945][ T9604] Call Trace: [ 299.113954][ T9604] [ 299.113964][ T9604] dump_stack_lvl+0xe8/0x150 [ 299.114002][ T9604] should_fail_ex+0x46b/0x600 [ 299.114037][ T9604] should_failslab+0xa8/0x100 [ 299.114074][ T9604] __kmalloc_noprof+0xfb/0x790 [ 299.114103][ T9604] ? udpv6_init_sock+0x1a9/0x3c0 [ 299.114126][ T9604] ? udpv6_init_sock+0x1a9/0x3c0 [ 299.114161][ T9604] udpv6_init_sock+0x1a9/0x3c0 [ 299.114190][ T9604] inet6_create+0xf0b/0x1280 [ 299.114220][ T9604] ? inet6_create+0x80/0x1280 [ 299.114254][ T9604] __sock_create+0x4b3/0x9d0 [ 299.114294][ T9604] __sys_socket+0xd6/0x1b0 [ 299.114327][ T9604] __x64_sys_socket+0x7a/0x90 [ 299.114361][ T9604] do_syscall_64+0x166/0x520 [ 299.114393][ T9604] ? trace_irq_disable+0x3b/0x140 [ 299.114421][ T9604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.114444][ T9604] ? clear_bhb_loop+0x70/0xc0 [ 299.114473][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.114495][ T9604] RIP: 0033:0x7f3d4d8be159 [ 299.114519][ T9604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.114539][ T9604] RSP: 002b:00007f3d4bb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 299.114565][ T9604] RAX: ffffffffffffffda RBX: 00007f3d4db45fa0 RCX: 00007f3d4d8be159 [ 299.114582][ T9604] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 299.114596][ T9604] RBP: 00007f3d4d95506b R08: 0000000000000000 R09: 0000000000000000 [ 299.114611][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.114626][ T9604] R13: 00007f3d4db46038 R14: 00007f3d4db45fa0 R15: 00007fff279a65a8 [ 299.114662][ T9604] [ 299.545393][ T9622] Restarting kernel threads ... [ 299.551477][ T9622] Done restarting kernel threads. [ 300.124372][ T5726] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 300.295253][ T5726] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 300.295313][ T5726] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 300.296968][ T5726] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.297027][ T5726] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.297055][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.301274][ T5726] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.301349][ T5726] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.301379][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.303175][ T5726] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.303240][ T5726] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.303268][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.417038][ T5726] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.417097][ T5726] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.417127][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.423777][ T5726] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.423835][ T5726] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.423865][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.443650][ T5726] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.443708][ T5726] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.443734][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.474836][ T5726] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.474893][ T5726] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.474924][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.477485][ T5726] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.477544][ T5726] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.477575][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.488932][ T5726] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 300.488955][ T5726] usb 4-1: Product: syz [ 300.488971][ T5726] usb 4-1: Manufacturer: syz [ 300.488986][ T5726] usb 4-1: SerialNumber: syz [ 300.542561][ T60] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 300.606052][ T5726] usb 4-1: config 0 descriptor?? [ 300.655066][ T5726] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 300.816082][ C0] net_ratelimit: 45 callbacks suppressed [ 301.041498][ T5915] usb 4-1: USB disconnect, device number 10 [ 301.084975][ T9629] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 301.085131][ T9644] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 301.280920][ T5915] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 301.664950][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 301.819720][ T31] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 301.827408][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.827463][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 301.827490][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 301.827552][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.355193][ T31] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 302.407214][ T9663] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 302.407235][ T9663] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 302.468744][ T31] usb 1-1: USB disconnect, device number 22 [ 302.830441][ T9674] random: crng reseeded on system resumption [ 302.874908][ T60] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 303.231730][ T9674] Restarting kernel threads ... [ 303.233200][ T9674] Done restarting kernel threads. [ 303.990223][ T60] Bluetooth: hci4: unexpected event for opcode 0x2087 [ 304.936972][ T9684] syz.3.1436 (9684) used greatest stack depth: 15528 bytes left [ 304.980646][ T9706] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 305.039617][ T5915] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 305.083996][ T9709] netlink: 6692 bytes leftover after parsing attributes in process `syz.2.1448'. [ 305.185299][ T5915] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 305.188802][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.188872][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.254775][ T5915] metro_usb 5-1:1.0: Metrologic USB to Serial converter detected [ 305.325568][ T5915] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 305.403487][ T9715] random: crng reseeded on system resumption [ 305.464995][ T5915] usb 5-1: USB disconnect, device number 9 [ 305.532792][ T5915] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 305.557969][ T5915] metro_usb 5-1:1.0: device disconnected [ 305.817301][ T9715] Restarting kernel threads ... [ 305.818714][ T9715] Done restarting kernel threads. [ 305.934411][ T3338] net_ratelimit: 143 callbacks suppressed [ 306.094863][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 306.567318][ T9737] random: crng reseeded on system resumption [ 306.691388][ T9744] random: crng reseeded on system resumption [ 306.783699][ T9746] netlink: 6692 bytes leftover after parsing attributes in process `syz.0.1461'. [ 307.048424][ T5600] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 307.072496][ T9752] Restarting kernel threads ... [ 307.073279][ T9752] Done restarting kernel threads. [ 307.174453][ T4923] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 307.341642][ T4923] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 307.343778][ T4923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.343847][ T4923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.362191][ T4923] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 307.399380][ T4923] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 307.611562][ T5600] Bluetooth: hci2: unexpected event for opcode 0x2087 [ 307.655292][ T4923] usb 4-1: USB disconnect, device number 11 [ 307.746116][ T4923] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 307.781066][ T4923] metro_usb 4-1:1.0: device disconnected [ 308.124423][ T982] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 308.253565][ T9775] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1475'. [ 308.253595][ T9775] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1475'. [ 308.295433][ T982] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 308.295495][ T982] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 308.297244][ T982] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.297303][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.297334][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.299006][ T982] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.299065][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.299095][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.300775][ T982] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.300833][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.300864][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.302518][ T982] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.302572][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.302602][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.331663][ T982] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.331724][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.331756][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.458659][ T982] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.458713][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.458741][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.462304][ T982] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.462362][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.462391][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.524983][ T982] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.525044][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.525074][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.528642][ T982] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 308.528674][ T982] usb 5-1: Product: syz [ 308.528689][ T982] usb 5-1: Manufacturer: syz [ 308.528705][ T982] usb 5-1: SerialNumber: syz [ 308.591172][ T982] usb 5-1: config 0 descriptor?? [ 308.708222][ T982] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 308.843622][ T982] usb 5-1: USB disconnect, device number 10 [ 308.869031][ T982] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 309.102178][ T9793] random: crng reseeded on system resumption [ 309.505776][ T9799] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1489'. [ 309.505803][ T9799] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1489'. [ 309.597581][ T9800] Restarting kernel threads ... [ 309.599251][ T9800] Done restarting kernel threads. [ 310.760865][ T9829] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1501'. [ 310.760909][ T9829] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1501'. [ 310.792839][ T9831] FAULT_INJECTION: forcing a failure. [ 310.792839][ T9831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 310.792879][ T9831] CPU: 0 UID: 0 PID: 9831 Comm: syz.4.1500 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 310.792907][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.792923][ T9831] Call Trace: [ 310.792933][ T9831] [ 310.792947][ T9831] dump_stack_lvl+0xe8/0x150 [ 310.792987][ T9831] should_fail_ex+0x46b/0x600 [ 310.793022][ T9831] get_futex_key+0x1b4/0x1580 [ 310.793069][ T9831] ? __pfx_get_futex_key+0x10/0x10 [ 310.793105][ T9831] ? update_se+0x90/0xef0 [ 310.793141][ T9831] futex_wait_setup+0x4a/0x590 [ 310.793175][ T9831] ? __futex_wait+0xe1/0x410 [ 310.793207][ T9831] __futex_wait+0x161/0x410 [ 310.793240][ T9831] ? __pfx___futex_wait+0x10/0x10 [ 310.793277][ T9831] ? __pfx_futex_wake_mark+0x10/0x10 [ 310.793308][ T9831] ? try_to_wake_up+0x84b/0x1430 [ 310.793346][ T9831] futex_wait+0x121/0x390 [ 310.793377][ T9831] ? __pfx_futex_wait+0x10/0x10 [ 310.793423][ T9831] do_futex+0x3e7/0x4e0 [ 310.793452][ T9831] ? __pfx_do_futex+0x10/0x10 [ 310.793471][ T9831] ? kmem_cache_free+0x187/0x6d0 [ 310.793503][ T9831] ? do_sys_openat2+0x14e/0x200 [ 310.793544][ T9831] __se_sys_futex+0x3a8/0x450 [ 310.793574][ T9831] ? __pfx___se_sys_futex+0x10/0x10 [ 310.793597][ T9831] ? rcu_is_watching+0x16/0xb0 [ 310.793637][ T9831] ? __x64_sys_futex+0x21/0xf0 [ 310.793663][ T9831] do_syscall_64+0x166/0x520 [ 310.793683][ T9831] ? trace_irq_disable+0x3b/0x140 [ 310.793711][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.793734][ T9831] ? clear_bhb_loop+0x70/0xc0 [ 310.793761][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.793785][ T9831] RIP: 0033:0x7fab5168e159 [ 310.793815][ T9831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.793835][ T9831] RSP: 002b:00007fab4f8e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 310.793862][ T9831] RAX: ffffffffffffffda RBX: 00007fab51915fa8 RCX: 00007fab5168e159 [ 310.793878][ T9831] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fab51915fa8 [ 310.793894][ T9831] RBP: 00007fab51915fa0 R08: 0000000000000000 R09: 0000000000000000 [ 310.793909][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.793923][ T9831] R13: 00007fab51916038 R14: 00007fffe7847890 R15: 00007fffe7847978 [ 310.793959][ T9831] [ 311.054527][ T68] net_ratelimit: 92 callbacks suppressed [ 311.294944][ T9843] random: crng reseeded on system resumption [ 312.104881][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 312.234966][ T9861] Restarting kernel threads ... [ 312.238339][ T9861] Done restarting kernel threads. [ 312.285511][ T5915] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 312.287341][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.287398][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.287423][ T5915] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 312.287449][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.291370][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 312.291393][ T5915] usb 2-1: Product: syz [ 312.291409][ T5915] usb 2-1: Manufacturer: syz [ 312.406282][ T5915] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 312.413928][ T5915] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 312.433155][ T5915] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 312.547779][ T9866] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1517'. [ 312.547807][ T9866] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1517'. [ 312.621821][ T5915] usb 2-1: USB disconnect, device number 17 [ 312.641157][ T5915] garmin_gps 2-1:1.0: device disconnected [ 313.815156][ T9893] serio: Serial port ttyS3 [ 313.955396][ T9897] random: crng reseeded on system resumption [ 314.482236][ T9904] Restarting kernel threads ... [ 314.500445][ T9904] Done restarting kernel threads. [ 315.454765][ T5726] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 315.606113][ T5726] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 315.606173][ T5726] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 315.608861][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.608920][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.608950][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.612252][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.612325][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.612354][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.688146][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.688212][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.688243][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.704576][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 315.723133][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.723193][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.723225][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.744359][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.744419][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.744450][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.784406][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.784468][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.784499][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.813466][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.823613][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.823649][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.842662][ T5726] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.842730][ T5726] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.842760][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.874060][ T5726] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 315.874083][ T5726] usb 3-1: Product: syz [ 315.874100][ T5726] usb 3-1: Manufacturer: syz [ 315.874117][ T5726] usb 3-1: SerialNumber: syz [ 315.929077][ T5726] usb 3-1: config 0 descriptor?? [ 315.966005][ T5726] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 316.094355][ C0] net_ratelimit: 168 callbacks suppressed [ 316.687888][ T9944] socket: no more sockets [ 316.864376][ T4923] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 317.017993][ T4923] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 317.020779][ T4923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.020838][ T4923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.020861][ T4923] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 317.020885][ T4923] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.093635][ T4923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 317.093658][ T4923] usb 4-1: Product: syz [ 317.093682][ T4923] usb 4-1: Manufacturer: syz [ 317.157963][ T4923] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 317.166046][ T4923] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 317.172935][ T4923] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 317.419172][ T5726] usb 4-1: USB disconnect, device number 12 [ 317.463115][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.534442][ T5600] Bluetooth: hci4: command 0x0406 tx timeout [ 317.640270][ T5726] garmin_gps 4-1:1.0: device disconnected [ 317.774741][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 318.194804][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 318.541346][ T5726] usb 3-1: USB disconnect, device number 19 [ 318.580874][ T5726] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 318.835810][ T9972] serio: Serial port ttyS3 [ 319.586099][ T9980] random: crng reseeded on system resumption [ 319.615410][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 319.786138][ T9981] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1562'. [ 320.131088][ T9990] Restarting kernel threads ... [ 320.151813][ T9990] Done restarting kernel threads. [ 321.070569][T10015] serio: Serial port ttyS3 [ 321.134373][ C1] net_ratelimit: 46 callbacks suppressed [ 321.450471][T10019] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1575'. [ 321.450637][T10019] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1575'. [ 322.045833][T10028] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1578'. [ 322.243906][T10034] random: crng reseeded on system resumption [ 322.749302][T10044] Restarting kernel threads ... [ 322.751680][T10044] Done restarting kernel threads. [ 323.728313][T10074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1592'. [ 323.833761][T10076] zram: failed to load dictionary d (err=-2) [ 324.169558][T10088] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1602'. [ 324.283792][T10088] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1602'. [ 324.354387][ T5726] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 324.435905][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 324.504378][ T5726] usb 5-1: Using ep0 maxpacket: 32 [ 324.505471][ T5726] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 324.507650][ T5726] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 324.507677][ T5726] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 324.507700][ T5726] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 324.507752][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.507776][ T5726] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 324.507801][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 324.507868][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.568218][ T5726] usb 5-1: config 0 descriptor?? [ 324.626959][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 324.626998][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 324.630075][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.630109][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.630126][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.633827][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.633862][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.633879][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.715368][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.715402][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.715418][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.716741][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.716774][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.716790][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.718158][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.718190][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.718214][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.720469][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.720501][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.720516][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.780266][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.780388][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.780417][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.853195][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.853259][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.853286][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.871558][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 324.871579][ T9] usb 2-1: Product: syz [ 324.871594][ T9] usb 2-1: Manufacturer: syz [ 324.871608][ T9] usb 2-1: SerialNumber: syz [ 324.899998][ T5726] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 324.924563][ T9] usb 2-1: config 0 descriptor?? [ 324.945029][ T5726] usb 5-1: USB disconnect, device number 11 [ 325.109739][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 325.273544][ T5726] usblp0: removed [ 325.358489][ T9] usb 2-1: USB disconnect, device number 18 [ 325.391578][ T9] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 325.392391][T10112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1610'. [ 325.543946][T10116] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1615'. [ 325.553495][T10116] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1615'. [ 325.673434][T10122] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1613'. [ 325.673461][T10122] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1613'. [ 325.704420][ T5726] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 325.854486][ T5726] usb 5-1: Using ep0 maxpacket: 32 [ 325.857669][ T5726] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 325.862557][ T5726] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 325.862580][ T5726] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 325.862599][ T5726] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 325.862648][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 325.862670][ T5726] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 325.862694][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 325.862752][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.924075][ T5726] usb 5-1: config 0 descriptor?? [ 326.028524][T10130] FAULT_INJECTION: forcing a failure. [ 326.028524][T10130] name failslab, interval 1, probability 0, space 0, times 0 [ 326.028559][T10130] CPU: 0 UID: 0 PID: 10130 Comm: syz.3.1618 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.028588][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.028601][T10130] Call Trace: [ 326.028611][T10130] [ 326.028626][T10130] dump_stack_lvl+0xe8/0x150 [ 326.028664][T10130] should_fail_ex+0x46b/0x600 [ 326.028697][T10130] ? sock_alloc_inode+0x2c/0x1a0 [ 326.028728][T10130] should_failslab+0xa8/0x100 [ 326.028764][T10130] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 326.028796][T10130] ? sock_alloc_inode+0x2c/0x1a0 [ 326.028831][T10130] ? __pfx_sock_alloc_inode+0x10/0x10 [ 326.028859][T10130] sock_alloc_inode+0x2c/0x1a0 [ 326.028887][T10130] ? __pfx_sock_alloc_inode+0x10/0x10 [ 326.028914][T10130] alloc_inode+0x6a/0x1b0 [ 326.028938][T10130] __sock_create+0x12d/0x9d0 [ 326.028981][T10130] __sys_socket+0xd6/0x1b0 [ 326.029017][T10130] __x64_sys_socket+0x7a/0x90 [ 326.029049][T10130] do_syscall_64+0x166/0x520 [ 326.029079][T10130] ? trace_irq_disable+0x3b/0x140 [ 326.029107][T10130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.029130][T10130] ? clear_bhb_loop+0x70/0xc0 [ 326.029159][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.029183][T10130] RIP: 0033:0x7fb10fd2e159 [ 326.029206][T10130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.029226][T10130] RSP: 002b:00007fb10df86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 326.029251][T10130] RAX: ffffffffffffffda RBX: 00007fb10ffb5fa0 RCX: 00007fb10fd2e159 [ 326.029270][T10130] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 326.029285][T10130] RBP: 00007fb10fdc506b R08: 0000000000000000 R09: 0000000000000000 [ 326.029300][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.029314][T10130] R13: 00007fb10ffb6038 R14: 00007fb10ffb5fa0 R15: 00007fffe0afd458 [ 326.029351][T10130] [ 326.248882][ T5726] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 326.414459][ C1] net_ratelimit: 53 callbacks suppressed [ 326.673915][T10146] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1626'. [ 326.677092][T10146] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1626'. [ 326.749385][ T8737] usb 5-1: USB disconnect, device number 12 [ 326.789241][ T8737] usblp0: removed [ 327.494595][ T5726] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 327.604811][T10169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 327.624358][ T5726] usb 3-1: device descriptor read/64, error -71 [ 327.880262][T10176] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1639'. [ 327.880542][T10176] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1639'. [ 327.914401][ T5726] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 328.046688][ T5726] usb 3-1: device descriptor read/64, error -71 [ 328.156675][ T5726] usb usb3-port1: attempt power cycle [ 328.294385][ T982] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 328.445407][ T982] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 328.447201][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.447273][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 328.447303][ T982] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 328.447371][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.515565][ T5726] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 328.578932][ T5726] usb 3-1: device descriptor read/8, error -71 [ 328.865468][ T5726] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 328.894546][ T5726] usb 3-1: device descriptor read/8, error -71 [ 328.990672][ T982] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 328.990700][ T982] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 328.990716][ T982] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 329.006652][ T5726] usb usb3-port1: unable to enumerate USB device [ 329.024690][ T982] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 329.070040][ T982] usb 4-1: USB disconnect, device number 13 [ 329.290002][T10187] FAULT_INJECTION: forcing a failure. [ 329.290002][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 329.290037][T10187] CPU: 0 UID: 0 PID: 10187 Comm: syz.4.1644 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 329.290064][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.290079][T10187] Call Trace: [ 329.290088][T10187] [ 329.290106][T10187] dump_stack_lvl+0xe8/0x150 [ 329.290146][T10187] should_fail_ex+0x46b/0x600 [ 329.290187][T10187] should_failslab+0xa8/0x100 [ 329.290225][T10187] __kmalloc_noprof+0xfb/0x790 [ 329.290257][T10187] ? udpv6_init_sock+0x1a9/0x3c0 [ 329.290280][T10187] ? udpv6_init_sock+0x1a9/0x3c0 [ 329.290312][T10187] udpv6_init_sock+0x1a9/0x3c0 [ 329.290343][T10187] inet6_create+0xf0b/0x1280 [ 329.290378][T10187] ? inet6_create+0x80/0x1280 [ 329.290416][T10187] __sock_create+0x4b3/0x9d0 [ 329.290458][T10187] __sys_socket+0xd6/0x1b0 [ 329.290493][T10187] __x64_sys_socket+0x7a/0x90 [ 329.290526][T10187] do_syscall_64+0x166/0x520 [ 329.290547][T10187] ? trace_irq_disable+0x3b/0x140 [ 329.290577][T10187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.290600][T10187] ? clear_bhb_loop+0x70/0xc0 [ 329.290629][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.290652][T10187] RIP: 0033:0x7fab5168e159 [ 329.290674][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.290694][T10187] RSP: 002b:00007fab4f8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 329.290720][T10187] RAX: ffffffffffffffda RBX: 00007fab51915fa0 RCX: 00007fab5168e159 [ 329.290737][T10187] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 329.290752][T10187] RBP: 00007fab5172506b R08: 0000000000000000 R09: 0000000000000000 [ 329.290767][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.290783][T10187] R13: 00007fab51916038 R14: 00007fab51915fa0 R15: 00007fffe7847978 [ 329.290819][T10187] [ 330.381239][T10198] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 330.516675][T10203] debugfs: creating file '10203-4' [ 330.516848][T10203] debugfs: creating file 'remote_tlb_flush' [ 330.516981][T10203] debugfs: creating file 'remote_tlb_flush_requests' [ 330.517116][T10203] debugfs: creating file 'mmu_shadow_zapped' [ 330.517236][T10203] debugfs: creating file 'mmu_pte_write' [ 330.517378][T10203] debugfs: creating file 'mmu_pde_zapped' [ 330.520698][T10203] debugfs: creating file 'mmu_flooded' [ 330.520859][T10203] debugfs: creating file 'mmu_recycled' [ 330.520985][T10203] debugfs: creating file 'mmu_cache_miss' [ 330.521114][T10203] debugfs: creating file 'mmu_unsync' [ 330.521236][T10203] debugfs: creating file 'mmu_shadow_pages' [ 330.521362][T10203] debugfs: creating file 'pages_4k' [ 330.521498][T10203] debugfs: creating file 'pages_2m' [ 330.521620][T10203] debugfs: creating file 'pages_1g' [ 330.521774][T10203] debugfs: creating file 'nx_lpage_splits' [ 330.521901][T10203] debugfs: creating file 'max_mmu_rmap_size' [ 330.522035][T10203] debugfs: creating file 'max_mmu_page_hash_collisions' [ 330.523756][T10203] debugfs: creating file 'halt_successful_poll' [ 330.523880][T10201] [ 330.523878][T10203] debugfs: creating file 'halt_attempted_poll' [ 330.523942][T10203] debugfs: creating file 'halt_poll_invalid' [ 330.524009][T10203] debugfs: creating file 'halt_wakeup' [ 330.524068][T10203] debugfs: creating file 'halt_poll_success_ns' [ 330.524131][T10203] debugfs: creating file 'halt_poll_fail_ns' [ 330.524191][T10203] debugfs: creating file 'halt_wait_ns' [ 330.525913][T10203] debugfs: creating file 'halt_poll_success_hist' [ 330.525987][T10203] debugfs: creating file 'halt_poll_fail_hist' [ 330.526050][T10203] debugfs: creating file 'halt_wait_hist' [ 330.526109][T10203] debugfs: creating file 'blocking' [ 330.526168][T10203] debugfs: creating file 'pf_taken' [ 330.526267][T10203] debugfs: creating file 'pf_fixed' [ 330.526325][T10203] debugfs: creating file 'pf_emulate' [ 330.526386][T10203] debugfs: creating file 'pf_spurious' [ 330.526444][T10203] debugfs: creating file 'pf_fast' [ 330.526504][T10203] debugfs: creating file 'pf_mmio_spte_created' [ 330.526563][T10203] debugfs: creating file 'pf_guest' [ 330.526624][T10203] debugfs: creating file 'tlb_flush' [ 330.526689][T10203] debugfs: creating file 'invlpg' [ 330.526750][T10203] debugfs: creating file 'exits' [ 330.528368][T10203] debugfs: creating file 'io_exits' [ 330.528441][T10203] debugfs: creating file 'mmio_exits' [ 330.528500][T10203] debugfs: creating file 'signal_exits' [ 330.528565][T10203] debugfs: creating file 'irq_window_exits' [ 330.528637][T10203] debugfs: creating file 'nmi_window_exits' [ 330.528699][T10203] debugfs: creating file 'l1d_flush' [ 330.528756][T10203] debugfs: creating file 'halt_exits' [ 330.528813][T10203] debugfs: creating file 'request_irq_exits' [ 330.528873][T10203] debugfs: creating file 'irq_exits' [ 330.528931][T10203] debugfs: creating file 'host_state_reload' [ 330.528991][T10203] debugfs: creating file 'fpu_reload' [ 330.529049][T10203] debugfs: creating file 'insn_emulation' [ 330.529111][T10203] debugfs: creating file 'insn_emulation_fail' [ 330.529170][T10203] debugfs: creating file 'hypercalls' [ 330.529231][T10203] debugfs: creating file 'irq_injections' [ 330.529323][T10203] debugfs: creating file 'nmi_injections' [ 330.529383][T10203] debugfs: creating file 'req_event' [ 330.529441][T10203] debugfs: creating file 'nested_run' [ 330.529501][T10203] debugfs: creating file 'directed_yield_attempted' [ 330.529561][T10203] debugfs: creating file 'directed_yield_successful' [ 330.529622][T10203] debugfs: creating file 'preemption_reported' [ 330.529688][T10203] debugfs: creating file 'preemption_other' [ 330.529749][T10203] debugfs: creating file 'guest_mode' [ 330.529806][T10203] debugfs: creating file 'notify_window_exits' [ 330.531412][T10203] debugfs: creating file 'mmu_rmaps_stat' [ 330.573915][T10204] kcov: kcov_start: t = ffff88802c898000, size = 524288, area = ffffc9000fd24000 [ 330.591902][ T1198] virtqueue callback for ffff8880287df200 (ffffffff8631cfa0) [ 330.591937][ C1] No more buffers in queue [ 330.591979][ C1] Receiving skb proto 0x0800 len 124 type 0 [ 330.592002][ C1] No more buffers in queue [ 330.592167][ C1] eth0: xmit ffff8880392e6780 42:01:0a:80:00:01 [ 330.592195][ C1] Added buffer head 0 to ffff8880287dec00 [ 330.592240][ T1199] virtqueue callback for ffff8880287dec00 (ffffffff8631d0e0) [ 330.592263][ C1] Sent skb ffff8880392e6780 [ 330.592294][ C1] No more buffers in queue [ 330.613928][T10184] kcov: kcov_task_exit: t = ffff88802a4bbe80, kcov->t = ffff88802a4bbe80 [ 330.951594][T10201] ====================================================== [ 330.958614][T10201] WARNING: possible circular locking dependency detected [ 330.965630][T10201] syzkaller #0 Not tainted [ 330.970039][T10201] ------------------------------------------------------ [ 330.977049][T10201] syz.0.1649/10201 is trying to acquire lock: [ 330.983112][T10201] ffff88803436d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 330.992436][T10201] [ 330.992436][T10201] but task is already holding lock: [ 330.999795][T10201] ffff888040817058 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x20d/0x1240 [ 331.009450][T10201] [ 331.009450][T10201] which lock already depends on the new lock. [ 331.009450][T10201] [ 331.019850][T10201] [ 331.019850][T10201] the existing dependency chain (in reverse order) is: [ 331.028865][T10201] [ 331.028865][T10201] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 331.036250][T10201] mutex_lock_nested+0x5a/0x1d0 [ 331.041626][T10201] anon_pipe_write+0x292/0x1a30 [ 331.047003][T10201] __kernel_write_iter+0x453/0x8f0 [ 331.052636][T10201] __kernel_write+0x106/0x170 [ 331.057832][T10201] autofs_notify_daemon+0x777/0xed0 [ 331.063553][T10201] autofs_wait+0x11d8/0x18b0 [ 331.068664][T10201] autofs_mount_wait+0x16b/0x390 [ 331.074121][T10201] autofs_d_automount+0x64e/0x810 [ 331.079666][T10201] __traverse_mounts+0x2fe/0x5d0 [ 331.085123][T10201] step_into_slowpath+0x4ba/0x820 [ 331.090672][T10201] path_lookupat+0x433/0x8c0 [ 331.095780][T10201] filename_lookup+0x265/0x5d0 [ 331.101062][T10201] kern_path+0x3d/0x150 [ 331.105747][T10201] lookup_bdev+0xc8/0x2b0 [ 331.110596][T10201] resume_store+0x16f/0x4f0 [ 331.115619][T10201] kernfs_fop_write_iter+0x3a5/0x540 [ 331.121430][T10201] vfs_write+0x61e/0xbb0 [ 331.126193][T10201] ksys_write+0x156/0x270 [ 331.131043][T10201] do_syscall_64+0x166/0x520 [ 331.136154][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.142576][T10201] [ 331.142576][T10201] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 331.150309][T10201] mutex_lock_nested+0x5a/0x1d0 [ 331.155682][T10201] autofs_notify_daemon+0x764/0xed0 [ 331.161421][T10201] autofs_wait+0x11d8/0x18b0 [ 331.166532][T10201] autofs_mount_wait+0x16b/0x390 [ 331.171990][T10201] autofs_d_automount+0x64e/0x810 [ 331.177533][T10201] __traverse_mounts+0x2fe/0x5d0 [ 331.182992][T10201] step_into_slowpath+0x4ba/0x820 [ 331.188556][T10201] path_lookupat+0x433/0x8c0 [ 331.193667][T10201] filename_lookup+0x265/0x5d0 [ 331.198951][T10201] kern_path+0x3d/0x150 [ 331.203628][T10201] lookup_bdev+0xc8/0x2b0 [ 331.208478][T10201] resume_store+0x16f/0x4f0 [ 331.213502][T10201] kernfs_fop_write_iter+0x3a5/0x540 [ 331.219311][T10201] vfs_write+0x61e/0xbb0 [ 331.224076][T10201] ksys_write+0x156/0x270 [ 331.228933][T10201] do_syscall_64+0x166/0x520 [ 331.234048][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.240462][T10201] [ 331.240462][T10201] -> #0 (&of->mutex){+.+.}-{4:4}: [ 331.247673][T10201] __lock_acquire+0x164c/0x2de0 [ 331.253052][T10201] lock_acquire+0x115/0x350 [ 331.258081][T10201] mutex_lock_nested+0x5a/0x1d0 [ 331.263460][T10201] kernfs_fop_write_iter+0x1d9/0x540 [ 331.269270][T10201] iter_file_splice_write+0xa36/0x1240 [ 331.275260][T10201] do_splice+0xf29/0x1990 [ 331.280112][T10201] __se_sys_splice+0x353/0x490 [ 331.285398][T10201] do_syscall_64+0x166/0x520 [ 331.290505][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.296916][T10201] [ 331.296916][T10201] other info that might help us debug this: [ 331.296916][T10201] [ 331.307139][T10201] Chain exists of: [ 331.307139][T10201] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 331.307139][T10201] [ 331.319565][T10201] Possible unsafe locking scenario: [ 331.319565][T10201] [ 331.327013][T10201] CPU0 CPU1 [ 331.332373][T10201] ---- ---- [ 331.337734][T10201] lock(&pipe->mutex); [ 331.341894][T10201] lock(&sbi->pipe_mutex); [ 331.348918][T10201] lock(&pipe->mutex); [ 331.355592][T10201] lock(&of->mutex); [ 331.359575][T10201] [ 331.359575][T10201] *** DEADLOCK *** [ 331.359575][T10201] [ 331.367715][T10201] locks held by syz.0.1649/10201: 2, last CPU#0: [ 331.374038][T10201] #0: ffff888037688510 (sb_writers#10){.+.+}-{0:0}, at: do_splice+0xe99/0x1990 [ 331.383107][T10201] #1: ffff888040817058 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x20d/0x1240 [ 331.393206][T10201] [ 331.393206][T10201] stack backtrace: [ 331.399102][T10201] CPU: 0 UID: 0 PID: 10201 Comm: syz.0.1649 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.408997][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.419054][T10201] Call Trace: [ 331.422343][T10201] [ 331.425274][T10201] dump_stack_lvl+0xe8/0x150 [ 331.429872][T10201] print_circular_bug+0x2e2/0x300 [ 331.434907][T10201] check_noncircular+0x12f/0x150 [ 331.439858][T10201] __lock_acquire+0x164c/0x2de0 [ 331.444715][T10201] ? _copy_from_iter+0x8a1/0x1660 [ 331.449746][T10201] ? __asan_memcpy+0x40/0x70 [ 331.454341][T10201] ? _copy_from_iter+0x963/0x1660 [ 331.459370][T10201] lock_acquire+0x115/0x350 [ 331.463877][T10201] ? kernfs_fop_write_iter+0x1d9/0x540 [ 331.469353][T10201] ? kernfs_fop_write_iter+0x1d9/0x540 [ 331.474838][T10201] ? kernfs_fop_write_iter+0x1d9/0x540 [ 331.480314][T10201] mutex_lock_nested+0x5a/0x1d0 [ 331.485171][T10201] ? kernfs_fop_write_iter+0x1d9/0x540 [ 331.490649][T10201] kernfs_fop_write_iter+0x1d9/0x540 [ 331.495954][T10201] iter_file_splice_write+0xa36/0x1240 [ 331.501432][T10201] ? __pfx_iter_file_splice_write+0x10/0x10 [ 331.507344][T10201] ? __pfx_iter_file_splice_write+0x10/0x10 [ 331.513244][T10201] do_splice+0xf29/0x1990 [ 331.517593][T10201] ? lock_acquire+0x115/0x350 [ 331.522281][T10201] ? __pfx_do_splice+0x10/0x10 [ 331.527050][T10201] __se_sys_splice+0x353/0x490 [ 331.531837][T10201] ? __pfx___se_sys_splice+0x10/0x10 [ 331.537154][T10201] ? __x64_sys_splice+0x21/0xf0 [ 331.542026][T10201] do_syscall_64+0x166/0x520 [ 331.546632][T10201] ? trace_irq_disable+0x3b/0x140 [ 331.551670][T10201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.557744][T10201] ? clear_bhb_loop+0x70/0xc0 [ 331.562427][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.568323][T10201] RIP: 0033:0x7fcf7715e159 [ 331.572744][T10201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.592352][T10201] RSP: 002b:00007fcf753b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 331.600772][T10201] RAX: ffffffffffffffda RBX: 00007fcf773e5fa0 RCX: 00007fcf7715e159 [ 331.608749][T10201] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 331.616719][T10201] RBP: 00007fcf771f506b R08: 0000000000000180 R09: 000000000000000b [ 331.624691][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.632661][T10201] R13: 00007fcf773e6038 R14: 00007fcf773e5fa0 R15: 00007ffc44cd7208 [ 331.640643][T10201] [ 331.643711][ T1198] virtqueue callback for ffff8880287df200 (ffffffff8631cfa0) [ 331.643746][ C1] No more buffers in queue [ 331.643799][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 331.643991][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 331.644073][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 331.644129][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 331.644145][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 331.644378][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 331.644423][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 331.644443][ C1] No more buffers in queue [ 331.644720][ C1] eth0: xmit ffff88802beaa140 42:01:0a:80:00:01 [ 331.644749][ C1] Added buffer head 0 to ffff8880287dec00 [ 331.644748][ C0] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 19) [ 331.644892][ C1] eth0: xmit ffff88802beaa640 42:01:0a:80:00:01 [ 331.644915][ C1] Added buffer head 8 to ffff8880287dec00 [ 331.645009][ C1] eth0: xmit ffff88802beaa000 42:01:0a:80:00:01 [ 331.645032][ C1] Added buffer head 2 to ffff8880287dec00 [ 331.645136][ T1199] virtqueue callback for ffff8880287dec00 (ffffffff8631d0e0) [ 331.645164][ C1] Sent skb ffff88802beaa140 [ 331.645199][ C1] Sent skb ffff88802beaa640 [ 331.645229][ C1] Sent skb ffff88802beaa000 [ 331.645229][ C0] net_ratelimit: 37 callbacks suppressed [ 331.645245][ C0] wireguard: wg0: Sending keepalive packet to peer 20 ([::1]:20003/0%0) [ 331.645260][ C1] No more buffers in queue [ 331.645290][ C0] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 20) [ 331.645341][ C0] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 13) [ 331.645407][ C0] wireguard: wg1: Sending keepalive packet to peer 15 ([::1]:20001/0%0) [ 331.645438][ C1] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 331.645472][ C0] wireguard: wg1: Sending keepalive packet to peer 22 (127.0.0.1:20003) [ 331.645626][ T1199] virtqueue interrupt with no work for ffff8880287dec00 [ 331.645753][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 331.646574][T10203] kobject: 'kvm' (ffff88801bbcd000): kobject_uevent_env [ 331.646616][T10203] kobject: 'kvm' (ffff88801bbcd000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 331.652411][ T4962] kobject: 'loop4' (ffff888023454450): kobject_uevent_env [ 331.652452][ T4962] kobject: 'loop4' (ffff888023454450): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 331.652753][ T3380] wireguard: wg2: Sending handshake initiation to peer 30 (127.0.0.1:20002) [ 331.653072][ T3380] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 331.653123][ T3380] wireguard: wg2: Sending handshake initiation to peer 17 ([::1]:20001/0%0) [ 331.653424][ T3380] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 331.653539][ T3380] wireguard: wg1: Sending handshake initiation to peer 9 ([::1]:20001/0%0) [ 331.664543][ T3406] wireguard: wg1: Sending handshake initiation to peer 15 ([::1]:20001/0%0) [ 331.665878][ T982] Added buffer head 0 to ffff88801bb6aa00 [ 331.667434][ C1] proto(17) != IPPROTO_TCP or too short (len = 156) [ 331.680709][ T5617] inotify_handle_inode_event: group=ffff888035f57000 mark=ffff88802d8b4d68 mask=8000 [ 331.680744][ T5617] fsnotify_insert_event: group=ffff888035f57000 event=ffff88803e6e09c0 [ 331.687722][ T4962] get_one_event: group=ffff888035f57000 event=ffff88803e6e09c0 [ 331.687747][ T4962] fsnotify_remove_first_event: group=ffff888035f57000 event=ffff88803e6e09c0 [ 331.687766][ T4962] inotify_read: group=ffff888035f57000 kevent=ffff88803e6e09c0 [ 331.687783][ T4962] copy_event_to_user: group=ffff888035f57000 event=ffff88803e6e09c0 [ 331.687810][ T4962] inotify_read: group=ffff888035f57000 kevent=0000000000000000 [ 331.689788][T10206] kcov: kcov_start: t = ffff8880369f0000, size = 524288, area = ffffc9000f121000 [ 331.692975][T10206] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1651'. [ 331.693153][T10206] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1651'. [ 331.693727][T10206] kcov: kcov_task_exit: t = ffff8880369f0000, kcov->t = ffff8880369f0000 [ 331.698382][T10202] kobject: 'kvm' (ffff88801bbcd000): kobject_uevent_env [ 331.698430][T10202] kobject: 'kvm' (ffff88801bbcd000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 331.713936][ T5602] send_to_group: group=ffff888035f57000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff8880345c58c0 data_type=2 dir=0000000000000000 cookie=0 [ 331.713975][ T5602] inotify_handle_inode_event: group=ffff888035f57000 mark=ffff8880383e4528 mask=8 [ 331.714016][ T5602] fsnotify_insert_event: group=ffff888035f57000 event=ffff88802add4bc0 [ 331.715302][ T4962] get_one_event: group=ffff888035f57000 event=ffff88802add4bc0 [ 331.715323][ T4962] fsnotify_remove_first_event: group=ffff888035f57000 event=ffff88802add4bc0 [ 331.715342][ T4962] inotify_read: group=ffff888035f57000 kevent=ffff88802add4bc0 [ 331.715360][ T4962] copy_event_to_user: group=ffff888035f57000 event=ffff88802add4bc0 [ 331.715387][ T4962] inotify_read: group=ffff888035f57000 kevent=0000000000000000 [ 331.722028][ T4962] kobject: 'loop4' (ffff888023454450): kobject_uevent_env [ 331.722067][ T4962] kobject: 'loop4' (ffff888023454450): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 331.724338][ T5594] inotify_handle_inode_event: group=ffff888035f57000 mark=ffff8880383e4528 mask=8000 [ 331.724371][ T5594] fsnotify_insert_event: group=ffff888035f57000 event=ffff88802add4340 [ 331.724458][ T4962] get_one_event: group=ffff888035f57000 event=ffff88802add4340 [ 331.724476][ T4962] fsnotify_remove_first_event: group=ffff888035f57000 event=ffff88802add4340 [ 331.724494][ T4962] inotify_read: group=ffff888035f57000 kevent=ffff88802add4340 [ 331.724510][ T4962] copy_event_to_user: group=ffff888035f57000 event=ffff88802add4340 [ 331.724535][ T4962] inotify_read: group=ffff888035f57000 kevent=0000000000000000 [ 331.761819][T10201] kcov: kcov_task_exit: t = ffff88802a968000, kcov->t = ffff88802a968000 [ 331.789125][ T5593] send_to_group: group=ffff888035f57000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88804142e0c0 data_type=2 dir=0000000000000000 cookie=0 [ 331.789164][ T5593] inotify_handle_inode_event: group=ffff888035f57000 mark=ffff88802d8b4738 mask=8 [ 331.789192][ T5593] fsnotify_insert_event: group=ffff888035f57000 event=ffff88802e06a4c0 [ 331.790267][ T4962] get_one_event: group=ffff888035f57000 event=ffff88802e06a4c0 [ 331.790286][ T4962] fsnotify_remove_first_event: group=ffff888035f57000 event=ffff88802e06a4c0 [ 331.790303][ T4962] inotify_read: group=ffff888035f57000 kevent=ffff88802e06a4c0 [ 331.790319][ T4962] copy_event_to_user: group=ffff888035f57000 event=ffff88802e06a4c0 [ 331.790344][ T4962] inotify_read: group=ffff888035f57000 kevent=0000000000000000 [ 331.800896][ T4962] kobject: 'loop3' (ffff888023455190): kobject_uevent_env [ 331.800938][ T4962] kobject: 'loop3' (ffff888023455190): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 331.803078][ T5594] inotify_handle_inode_event: group=ffff888035f57000 mark=ffff88802d8b4738 mask=8000 [ 331.803108][ T5594] fsnotify_insert_event: group=ffff888035f57000 event=ffff88802e06af40 [ 331.803201][ T4962] get_one_event: group=ffff888035f57000 event=ffff88802e06af40 [ 331.803218][ T4962] fsnotify_remove_first_event: group=ffff888035f57000 event=ffff88802e06af40 [ 331.803235][ T4962] inotify_read: group=ffff888035f57000 kevent=ffff88802e06af40 [ 331.803251][ T4962] copy_event_to_user: group=ffff888035f57000 event=ffff88802e06af40 [ 331.803275][ T4962] inotify_read: group=ffff888035f57000 kevent=0000000000000000 [ 331.854452][ C0] proto(17) != IPPROTO_TCP or too short (len = 40) [ 331.885248][T10203] kcov: kcov_task_exit: t = ffff88802c89ddc0, kcov->t = ffff88802c89ddc0 [ 331.885644][T10204] kcov: kcov_task_exit: t = ffff88802c898000, kcov->t = ffff88802c898000 [ 331.901033][ T5597] send_to_group: group=ffff888035f57000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88802cc62ac0 data_type=2 dir=0000000000000000 cookie=0 [ 331.901081][ T5597] inotify_handle_inode_event: group=ffff888035f57000 mark=ffff8880383e4948 mask=8 [ 331.901108][ T5597] fsnotify_insert_event: group=ffff888035f57000 event=ffff88802e06abc0 [ 331.901361][ T4962] get_one_event: group=ffff888035f57000 event=ffff88802e06abc0 [ 331.901380][ T4962] fsnotify_remove_first_event: group=ffff888035f57000 event=ffff88802e06abc0 [ 331.901396][ T4962] inotify_read: group=ffff888035f57000 kevent=ffff88802e06abc0 [ 331.901412][ T4962] copy_event_to_user: group=ffff888035f57000 event=ffff88802e06abc0 [ 331.901437][ T4962] inotify_read: group=ffff888035f57000 kevent=0000000000000000 [ 331.910226][ T4962] kobject: 'loop2' (ffff888023455ed0): kobject_uevent_env [ 331.910263][ T4962] kobject: 'loop2' (ffff888023455ed0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 331.912429][ T5594] inotify_handle_inode_event: group=ffff888035f57000 mark=ffff8880383e4948 mask=8000 [ 331.912459][ T5594] fsnotify_insert_event: group=ffff888035f57000 event=ffff888039254500 [ 331.912554][ T4962] get_one_event: group=ffff888035f57000 event=ffff888039254500 [ 331.912571][ T4962] fsnotify_remove_first_event: group=ffff888035f57000 event=ffff888039254500 [ 331.912589][ T4962] inotify_read: group=ffff888035f57000 kevent=ffff888039254500 [ 331.912604][ T4962] copy_event_to_user: group=ffff888035f57000 event=ffff888039254500 [ 331.912629][ T4962] inotify_read: group=ffff888035f57000 kevent=0000000000000000 [ 332.174256][ C0] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4) [ 332.197724][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 332.197787][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 332.197801][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 332.198022][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 332.814849][ C1] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 332.815131][ C1] addr is not unicast. [ 332.815172][ C1] addr is not unicast. [ 333.197658][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 333.197705][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 333.197714][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 333.197852][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 333.374812][ T156] sd 0:0:1:0: cmd ffff888033575b10 CDB: 0x2a [ 333.374839][ T156] Added buffer head 262 to ffff8880275a4c00 [ 333.374871][ T156] sd 0:0:1:0: cmd ffff888033575ed0 CDB: 0x2a [ 333.374884][ T156] Added buffer head 209 to ffff8880275a4c00 [ 333.374910][ T156] sd 0:0:1:0: cmd ffff888033576290 CDB: 0x2a [ 333.374925][ T156] Added buffer head 187 to ffff8880275a4c00 [ 333.379714][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 333.379737][ T1043] sd 0:0:1:0: cmd ffff888033575b10 response 0 status 0x0 sense_len 0 [ 333.379753][ T1043] No more buffers in queue [ 333.396817][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 333.396838][ T1043] sd 0:0:1:0: cmd ffff888033575ed0 response 0 status 0x0 sense_len 0 [ 333.396853][ T1043] No more buffers in queue [ 333.403991][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 333.404010][ T1043] sd 0:0:1:0: cmd ffff888033576290 response 0 status 0x0 sense_len 0 [ 333.404023][ T1043] No more buffers in queue [ 333.454254][ C0] wireguard: wg0: Handshake for peer 25 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 333.454331][ T4923] firmware_class: device_uncache_fw_images [ 333.454346][ C0] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 333.455232][ C0] proto(17) != IPPROTO_TCP or too short (len = 156) [ 334.014248][ C0] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3) [ 334.094259][ C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 334.094328][ C0] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 20) [ 334.197686][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 334.197740][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 334.197750][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 334.197933][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 334.894623][ C0] proto(17) != IPPROTO_TCP or too short (len = 40) [ 335.197703][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 335.197744][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 335.197753][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 335.197906][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 335.384250][ C0] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 20) [ 335.384681][ C0] Dropped {multi|broad}cast of type=[86dd] [ 336.197708][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 336.197764][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 336.197773][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 336.197899][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 336.654259][ C1] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 20) [ 336.654407][ T12] net_ratelimit: 51 callbacks suppressed [ 336.654424][ T12] wireguard: wg2: Sending handshake initiation to peer 30 (127.0.0.1:20002) [ 336.654762][ T12] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 336.656865][ T4924] sd 0:0:1:0: cmd ffff88803350ed50 CDB: 0x2a [ 336.656888][ T4924] Added buffer head 187 to ffff8880275a4c00 [ 336.658484][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 336.658508][ T1043] sd 0:0:1:0: cmd ffff88803350ed50 response 0 status 0x0 sense_len 0 [ 336.658525][ T1043] No more buffers in queue [ 336.658802][ T105] sd 0:0:1:0: cmd ffff888027323910 CDB: 0x35 [ 336.658821][ T105] Added buffer head 187 to ffff8880275a4c00 [ 336.658901][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 336.658917][ T1043] sd 0:0:1:0: cmd ffff888027323910 response 0 status 0x0 sense_len 0 [ 336.658931][ T1043] No more buffers in queue [ 336.658990][ T32] sd 0:0:1:0: cmd ffff888033576650 CDB: 0x2a [ 336.659006][ T32] Added buffer head 187 to ffff8880275a4c00 [ 336.675245][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 336.675266][ T1043] sd 0:0:1:0: cmd ffff888033576650 response 0 status 0x0 sense_len 0 [ 336.675280][ T1043] No more buffers in queue [ 336.675792][ T32] sd 0:0:1:0: cmd ffff888027323910 CDB: 0x35 [ 336.675809][ T32] Added buffer head 187 to ffff8880275a4c00 [ 336.675871][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 336.675885][ T1043] sd 0:0:1:0: cmd ffff888027323910 response 0 status 0x0 sense_len 0 [ 336.675897][ T1043] No more buffers in queue [ 336.894324][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 336.900418][ T5712] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 337.197745][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 337.197788][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 337.197797][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 337.197953][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 337.294280][ C1] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 14) [ 337.294308][ C0] wireguard: wg1: Sending keepalive packet to peer 10 (127.0.0.1:20003) [ 337.294365][ C1] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 337.294415][ C1] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 337.294463][ C1] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 20 attempts, giving up [ 337.294992][ T156] wireguard: wg1: Sending handshake initiation to peer 9 ([::1]:20001/0%0) [ 337.295313][ T156] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 337.295406][ C1] proto(17) != IPPROTO_TCP or too short (len = 156) [ 337.295467][ T156] wireguard: wg0: Sending handshake initiation to peer 26 ([::1]:20003/0%0) [ 337.295755][ T156] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 337.295785][ T156] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 337.522164][ T1198] virtqueue callback for ffff8880287df200 (ffffffff8631cfa0) [ 337.522194][ C1] No more buffers in queue [ 337.522344][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 337.522358][ C1] No more buffers in queue [ 337.522456][ C1] eth0: xmit ffff888026c033c0 42:01:0a:80:00:01 [ 337.522486][ C1] Added buffer head 2 to ffff8880287dec00 [ 337.522545][ T1199] virtqueue callback for ffff8880287dec00 (ffffffff8631d0e0) [ 337.522561][ C1] Sent skb ffff888026c033c0 [ 337.522579][ C1] No more buffers in queue [ 337.934762][ T12] IPv6: now = 4294970880, schedule = 4294982900, rounded schedule = 4294983000 => 4294982900 [ 337.934866][ C1] addr is not unicast. [ 337.944573][ C0] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 337.944842][ C0] addr is not unicast. [ 337.947991][ C0] proto(17) != IPPROTO_TCP or too short (len = 40) [ 338.197717][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 338.197765][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 338.197774][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 338.197907][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 338.415434][ T12] sd 0:0:1:0: cmd ffff888033576a10 CDB: 0x2a [ 338.415462][ T12] Added buffer head 187 to ffff8880275a4c00 [ 338.415479][ T12] sd 0:0:1:0: cmd ffff888033576dd0 CDB: 0x2a [ 338.415492][ T12] Added buffer head 272 to ffff8880275a4c00 [ 338.415507][ T12] sd 0:0:1:0: cmd ffff888033577190 CDB: 0x2a [ 338.415519][ T12] Added buffer head 56 to ffff8880275a4c00 [ 338.415533][ T12] sd 0:0:1:0: cmd ffff888033577550 CDB: 0x2a [ 338.415544][ T12] Added buffer head 120 to ffff8880275a4c00 [ 338.415579][ T12] sd 0:0:1:0: cmd ffff888033577910 CDB: 0x2a [ 338.415597][ T12] Added buffer head 242 to ffff8880275a4c00 [ 338.415621][ T12] sd 0:0:1:0: cmd ffff888033577cd0 CDB: 0x2a [ 338.415635][ T12] Added buffer head 210 to ffff8880275a4c00 [ 338.417081][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 338.417102][ T1043] sd 0:0:1:0: cmd ffff888033576dd0 response 0 status 0x0 sense_len 0 [ 338.417117][ T1043] No more buffers in queue [ 338.419762][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 338.419778][ T1043] sd 0:0:1:0: cmd ffff888033577550 response 0 status 0x0 sense_len 0 [ 338.419791][ T1043] No more buffers in queue [ 338.426968][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 338.426997][ T1043] sd 0:0:1:0: cmd ffff888033576a10 response 0 status 0x0 sense_len 0 [ 338.427022][ T1043] No more buffers in queue [ 338.431805][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 338.431823][ T1043] sd 0:0:1:0: cmd ffff888033577190 response 0 status 0x0 sense_len 0 [ 338.431836][ T1043] No more buffers in queue [ 338.434623][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 338.434649][ T1043] sd 0:0:1:0: cmd ffff888033577910 response 0 status 0x0 sense_len 0 [ 338.434671][ T1043] No more buffers in queue [ 338.447937][ T1043] virtqueue callback for ffff8880275a4c00 (ffffffff85e03860) [ 338.447955][ T1043] sd 0:0:1:0: cmd ffff888033577cd0 response 0 status 0x0 sense_len 0 [ 338.447969][ T1043] No more buffers in queue [ 338.494245][ C0] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 338.494735][ C0] proto(17) != IPPROTO_TCP or too short (len = 156) [ 338.574249][ C0] wireguard: wg0: Handshake for peer 25 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 338.574321][ C0] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 339.197751][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 339.197799][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 339.197809][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 339.197933][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 339.214261][ C1] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 4) [ 339.864244][ C0] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 20 attempts, giving up [ 339.864297][ C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 340.197756][ T208] virtqueue callback for ffff88801bb6aa00 (ffffffff854cf260) [ 340.197806][ T208] virtqueue interrupt with no work for ffff88801bb6ac00 [ 340.197815][ T208] virtqueue interrupt with no work for ffff88801bb6ae00 [ 340.197943][ T5726] Added buffer head 0 to ffff88801bb6aa00 [ 340.414254][ C1] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 340.494731][ C1] proto(17) != IPPROTO_TCP or too short (len = 40)