last executing test programs: 8.760870206s ago: executing program 3 (id=249): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 7.511861271s ago: executing program 0 (id=260): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 7.351504729s ago: executing program 0 (id=261): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000314050600000000000000000900666404020073797a30000000000800410072786500140033006c6f00"/59], 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x2}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, r5, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r5, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) timer_create(0x7, &(0x7f0000000140)={0x0, 0x2a, 0x2, @thr={&(0x7f00000000c0)="1a5f5a21e8c72a2ee5381dd5d6b6648fc166b9921c2fb7053f494d69de8c46baf06b10e5464024dc5b648fac70d3f3b72dade039", &(0x7f0000000100)="102b65d3f326"}}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240b030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000172401020000000001000100"], 0x0) 4.77870367s ago: executing program 0 (id=281): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f00000007c0)=0x2, 0x4) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0xffffffff, "152a44e39305000000000000c200002011000000000000101000000800"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) r4 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x1000) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x5, r4, 0x2}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f0000000140)=[{r5, 0x8301}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x2d, 0x107, 0xfffffffe, 0x1, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0xc02063a1, 0x0) 3.874341447s ago: executing program 0 (id=289): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000314050600000000000000000900666404020073797a30000000000800410072786500140033006c6f00"/59], 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x2}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, r5, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r5, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) timer_create(0x7, &(0x7f0000000140)={0x0, 0x2a, 0x2, @thr={&(0x7f00000000c0)="1a5f5a21e8c72a2ee5381dd5d6b6648fc166b9921c2fb7053f494d69de8c46baf06b10e5464024dc5b648fac70d3f3b72dade039", &(0x7f0000000100)="102b65d3f326"}}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240b030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000172401020000000001000100"], 0x0) 3.708260688s ago: executing program 2 (id=291): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) add_key$keyring(&(0x7f0000000940), 0x0, 0x0, 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'team0\x00', 0x2}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f007, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x84) madvise(&(0x7f0000422000/0x4000)=nil, 0x4000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) madvise(&(0x7f00007dc000/0x1000)=nil, 0x1000, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000890}, 0x2000c000) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 3.247537624s ago: executing program 2 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) fallocate(r0, 0x100000000000011, 0x2000, 0x3) 3.11659766s ago: executing program 2 (id=293): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 3.102010427s ago: executing program 2 (id=294): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 3.050625921s ago: executing program 2 (id=295): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.979062237s ago: executing program 3 (id=303): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 1.860201547s ago: executing program 3 (id=306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 1.73505928s ago: executing program 3 (id=307): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl(r2, 0x8914, &(0x7f0000000100)="63616e3000000000000000000000000001") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.547186617s ago: executing program 3 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) fallocate(r0, 0x100000000000011, 0x2000, 0x3) 1.392492197s ago: executing program 3 (id=311): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x13, 0xc, "cefb56c5b548b087a597bd59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.291876039s ago: executing program 0 (id=312): syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc02063a1, 0x0) (fail_nth: 1) 1.216983295s ago: executing program 0 (id=313): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0xc, 0x9a, {0x9a, 0x23, "f94c766a5acf15f9ce49d3a026d6a07cee6aefff45ca6fc04243eab18f269efb34c359da9d3689bdbbbd5e1712107fd4aecfd166a0544865ec94b2bb7cb17e8ccd6018c359e40f002f4ab90adaf584d108dd07708683cde2166cee509e7e254b8369b30d978c8708532b2f5bea7846b9068fe6f5c647b90261ce621322a0db97ed684a1250d031c4fe5c316ac82aab243159453cf6d826f4"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x162f}}, &(0x7f00000001c0)={0x0, 0x22, 0x20, {[@local=@item_012={0x2, 0x2, 0x4, "df7a"}, @main=@item_4={0x3, 0x0, 0xc, "1489f2b0"}, @main=@item_4={0x3, 0x0, 0xa, "86be1e4b"}, @main=@item_012={0x1, 0x0, 0xf, "9b"}, @local=@item_4={0x3, 0x2, 0x0, "25d73f08"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0xa, "9da844a9"}, @global=@item_4={0x3, 0x1, 0x4, "19b29238"}, @global]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfdc, 0x3, 0x1, {0x22, 0x64e}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0x15, 0xa1, "cba9855a164ebfd4fbdd0ea7cef83131eb28a0847d5cba687f2f657da462dbedddeb79614f2694f87e28aedd51b0491793170f8878dd0fe3bb07b7d4fdf4a681eee6efb5ab3e95dc46c31a1f631f2b9a51033740a68ce195946375140cf33ace36869dad88906dd908ad297231f1a568b75d834b428edbba7f22a8f7fde0150b4ca8210b5898a97c6482922d80cdcef070dda583e0edab32ca239f9b96158a07de"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x1, 0xb, "9f9ccc10f0e13d5fdbda33"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x1, 0xf3, "2a9d1bfc", "025074b2"}}, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x122, 0x0, 0x7ff}]}) syz_usb_connect$uac3(0x2, 0xaf, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001000000208205650040000102030109029d000301039002080b0002012630000904000000010130000a24010ca26da2120a6ae6fbe6c2c5eae80a00010000000904010000010230000904010101010230000f240201530309ee555e9f80a8480409240201091b8006070905010910000209020a0b2505000000030700090402000001010101023000172401005f6a0000970b010000000000000008030500f6090582090004000000000000"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 880.647197ms ago: executing program 1 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/exports\x00', 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 772.753843ms ago: executing program 1 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x8000, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 707.228439ms ago: executing program 1 (id=318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 654.516942ms ago: executing program 1 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) fallocate(r0, 0x100000000000011, 0x2000, 0x3) 548.330521ms ago: executing program 1 (id=320): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl(r2, 0x8914, &(0x7f0000000100)="63616e3000000000000000000000000001") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) close_range(r3, 0xffffffffffffffff, 0x0) 469.728092ms ago: executing program 1 (id=321): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000314050600000000000000000900666404020073797a30000000000800410072786500140033006c6f00"/59], 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x2}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, r5, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r5, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x120) timer_create(0x7, &(0x7f0000000140)={0x0, 0x2a, 0x2, @thr={&(0x7f00000000c0)="1a5f5a21e8c72a2ee5381dd5d6b6648fc166b9921c2fb7053f494d69de8c46baf06b10e5464024dc5b648fac70d3f3b72dade039", &(0x7f0000000100)="102b65d3f326"}}, &(0x7f0000000180)=0x0) timer_settime(r6, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, &(0x7f0000000240)) syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240b030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000172401020000000001000100"], 0x0) 0s ago: executing program 2 (id=322): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) add_key$keyring(&(0x7f0000000940), 0x0, 0x0, 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'team0\x00', 0x2}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f007, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x84) madvise(&(0x7f0000422000/0x4000)=nil, 0x4000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) madvise(&(0x7f00007dc000/0x1000)=nil, 0x1000, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000890}, 0x2000c000) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 64.968676][ T5598] cgroup: Unknown subsys name 'net' [ 65.053375][ T5598] cgroup: Unknown subsys name 'cpuset' [ 65.055885][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.339080][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.005227][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.014533][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.016037][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.018872][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.019618][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.022076][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.022998][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.023907][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.024598][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.025716][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.026280][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.027174][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.028680][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.031467][ T4930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.032877][ T4930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.034035][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.040104][ T4930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.070104][ T4930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.151476][ T4930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.152033][ T4930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.375140][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.375209][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.438214][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.438317][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.438443][ T5610] bridge_slave_0: entered allmulticast mode [ 71.440918][ T5610] bridge_slave_0: entered promiscuous mode [ 71.469396][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.469620][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.469718][ T5610] bridge_slave_1: entered allmulticast mode [ 71.471432][ T5610] bridge_slave_1: entered promiscuous mode [ 71.550161][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.550256][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.550420][ T5611] bridge_slave_0: entered allmulticast mode [ 71.552007][ T5611] bridge_slave_0: entered promiscuous mode [ 71.582103][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.582318][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.582410][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.582831][ T5611] bridge_slave_1: entered allmulticast mode [ 71.584257][ T5611] bridge_slave_1: entered promiscuous mode [ 71.608491][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.608587][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.609007][ T5608] bridge_slave_0: entered allmulticast mode [ 71.612325][ T5608] bridge_slave_0: entered promiscuous mode [ 71.616554][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.616648][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.617637][ T5608] bridge_slave_1: entered allmulticast mode [ 71.619355][ T5608] bridge_slave_1: entered promiscuous mode [ 71.624716][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.689880][ T5610] team0: Port device team_slave_0 added [ 71.719225][ T5610] team0: Port device team_slave_1 added [ 71.727199][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.742978][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.757961][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.770854][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.770987][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.771093][ T5609] bridge_slave_0: entered allmulticast mode [ 71.772534][ T5609] bridge_slave_0: entered promiscuous mode [ 71.775774][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.808307][ T5611] team0: Port device team_slave_0 added [ 71.811712][ T5611] team0: Port device team_slave_1 added [ 71.825366][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.825525][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.826316][ T5609] bridge_slave_1: entered allmulticast mode [ 71.827959][ T5609] bridge_slave_1: entered promiscuous mode [ 71.862723][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.862743][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.862765][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.878394][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.878409][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.878432][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.911419][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.911436][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.911459][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.912725][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.912736][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.912758][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.927604][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.931269][ T5608] team0: Port device team_slave_0 added [ 71.948747][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.951284][ T5608] team0: Port device team_slave_1 added [ 72.060998][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.061014][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.061036][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.084438][ T5611] hsr_slave_0: entered promiscuous mode [ 72.086009][ T5611] hsr_slave_1: entered promiscuous mode [ 72.091380][ T4930] Bluetooth: hci3: command tx timeout [ 72.104069][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.104085][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.104108][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.108999][ T4930] Bluetooth: hci0: command tx timeout [ 72.109120][ T4930] Bluetooth: hci2: command tx timeout [ 72.181337][ T52] Bluetooth: hci1: command tx timeout [ 72.202239][ T5609] team0: Port device team_slave_0 added [ 72.204232][ T5609] team0: Port device team_slave_1 added [ 72.222311][ T5610] hsr_slave_0: entered promiscuous mode [ 72.223147][ T5610] hsr_slave_1: entered promiscuous mode [ 72.223595][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 72.223670][ T5610] Cannot create hsr debugfs directory [ 72.289656][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.289672][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.289694][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.314474][ T5608] hsr_slave_0: entered promiscuous mode [ 72.315539][ T5608] hsr_slave_1: entered promiscuous mode [ 72.316189][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 72.316205][ T5608] Cannot create hsr debugfs directory [ 72.325156][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.325171][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.325194][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.496786][ T5609] hsr_slave_0: entered promiscuous mode [ 72.497374][ T5609] hsr_slave_1: entered promiscuous mode [ 72.497786][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 72.497803][ T5609] Cannot create hsr debugfs directory [ 72.754718][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.761270][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.763705][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.772992][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.793278][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.798696][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.814341][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.817433][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.866655][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.880818][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.882757][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.885030][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.917508][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.920905][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.921656][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.929837][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.976543][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.982249][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.995160][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.005193][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.005943][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.008340][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.009133][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.022060][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.139110][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.144258][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.145027][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.149775][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.164541][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.173986][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.185452][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.188624][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.249486][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.286156][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.300799][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.323065][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.323215][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.351628][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.351713][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.357721][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.361423][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.370666][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.370768][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.392522][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.392617][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.442520][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.479380][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.479436][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.515977][ T5611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.522872][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.522966][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.538424][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.556023][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.587003][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.587444][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.627276][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.627370][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.172983][ T52] Bluetooth: hci2: command tx timeout [ 74.173015][ T52] Bluetooth: hci0: command tx timeout [ 74.173036][ T52] Bluetooth: hci3: command tx timeout [ 74.253537][ T4930] Bluetooth: hci1: command tx timeout [ 74.389082][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.459686][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.597340][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.617215][ T5610] veth0_vlan: entered promiscuous mode [ 74.637779][ T5611] veth0_vlan: entered promiscuous mode [ 74.659437][ T5610] veth1_vlan: entered promiscuous mode [ 74.681486][ T5611] veth1_vlan: entered promiscuous mode [ 74.715166][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.756964][ T5609] veth0_vlan: entered promiscuous mode [ 74.773943][ T5610] veth0_macvtap: entered promiscuous mode [ 74.793393][ T5610] veth1_macvtap: entered promiscuous mode [ 74.803244][ T5611] veth0_macvtap: entered promiscuous mode [ 74.805987][ T5609] veth1_vlan: entered promiscuous mode [ 74.826595][ T5611] veth1_macvtap: entered promiscuous mode [ 74.857968][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.870687][ T5608] veth0_vlan: entered promiscuous mode [ 74.879419][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.885465][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.894553][ T5608] veth1_vlan: entered promiscuous mode [ 74.921302][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.926842][ T5609] veth0_macvtap: entered promiscuous mode [ 74.941422][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.941563][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.941596][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.941628][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.975809][ T5609] veth1_macvtap: entered promiscuous mode [ 74.991490][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991579][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991614][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991646][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.024343][ T5608] veth0_macvtap: entered promiscuous mode [ 75.038894][ T5608] veth1_macvtap: entered promiscuous mode [ 75.055623][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.096874][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.101561][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.138551][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.200955][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.200999][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.201033][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.201067][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.204520][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.204548][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.289399][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.289420][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.310765][ T148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.310811][ T148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.311205][ T148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.311237][ T148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.312309][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.312325][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.427741][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.427761][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.468370][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.468391][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.511350][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.618291][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.618313][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.716532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.716552][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.774397][ T5764] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.827924][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.827944][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.881738][ T5766] FAULT_INJECTION: forcing a failure. [ 75.881738][ T5766] name failslab, interval 1, probability 0, space 0, times 1 [ 75.881778][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: syz.3.5 Not tainted syzkaller #0 PREEMPT(full) [ 75.881800][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.881818][ T5766] Call Trace: [ 75.881833][ T5766] [ 75.881841][ T5766] dump_stack_lvl+0xe8/0x150 [ 75.881879][ T5766] should_fail_ex+0x3eb/0x540 [ 75.881905][ T5766] should_failslab+0xa8/0x100 [ 75.881926][ T5766] ? __inet_hash_connect+0x162c/0x2590 [ 75.881950][ T5766] kmem_cache_alloc_noprof+0x9c/0x600 [ 75.881974][ T5766] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.881999][ T5766] ? __inet_hash_connect+0xe96/0x2590 [ 75.882019][ T5766] ? __inet_hash_connect+0x162c/0x2590 [ 75.882043][ T5766] __inet_hash_connect+0x162c/0x2590 [ 75.882078][ T5766] ? __inet_hash_connect+0x5ce/0x2590 [ 75.882105][ T5766] ? __pfx___inet_hash_connect+0x10/0x10 [ 75.882134][ T5766] ? sk_setup_caps+0x94f/0xbc0 [ 75.882155][ T5766] ? inet6_ehashfn+0x2f/0x3b0 [ 75.882183][ T5766] ? inet6_hash_connect+0xeb/0x170 [ 75.882211][ T5766] tcp_v6_connect+0x1231/0x1cf0 [ 75.882241][ T5766] ? kasan_save_track+0x3e/0x80 [ 75.882269][ T5766] ? __kasan_kmalloc+0x93/0xb0 [ 75.882300][ T5766] ? __pfx_tcp_v6_connect+0x10/0x10 [ 75.882332][ T5766] __inet_stream_connect+0x28c/0xf50 [ 75.882367][ T5766] ? __pfx___inet_stream_connect+0x10/0x10 [ 75.882394][ T5766] ? __kasan_kmalloc+0x93/0xb0 [ 75.882413][ T5766] ? __kmalloc_cache_noprof+0x31c/0x600 [ 75.882441][ T5766] ? __kmalloc_cache_noprof+0x148/0x600 [ 75.882467][ T5766] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 75.882502][ T5766] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 75.882536][ T5766] tcp_sendmsg_locked+0x4d3d/0x5640 [ 75.882571][ T5766] ? look_up_lock_class+0x57/0x110 [ 75.882601][ T5766] ? register_lock_class+0x31/0x2e0 [ 75.882632][ T5766] ? __lock_acquire+0x747/0x2de0 [ 75.882672][ T5766] ? __pfx_futex_wake_mark+0x10/0x10 [ 75.882716][ T5766] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 75.882751][ T5766] ? tcp_sendmsg+0x21/0x50 [ 75.882781][ T5766] ? __local_bh_enable_ip+0xd6/0x140 [ 75.882807][ T5766] tcp_sendmsg+0x2f/0x50 [ 75.882835][ T5766] ? __pfx_inet6_sendmsg+0x10/0x10 [ 75.882855][ T5766] sock_sendmsg_nosec+0x90/0x180 [ 75.882884][ T5766] __sys_sendto+0x408/0x5a0 [ 75.882908][ T5766] ? __pfx___sys_sendto+0x10/0x10 [ 75.882947][ T5766] ? rcu_is_watching+0x16/0xb0 [ 75.882968][ T5766] __x64_sys_sendto+0xde/0x100 [ 75.882988][ T5766] do_syscall_64+0x166/0x520 [ 75.883004][ T5766] ? trace_irq_disable+0x3b/0x140 [ 75.883033][ T5766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.883052][ T5766] ? clear_bhb_loop+0x70/0xc0 [ 75.883075][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.883093][ T5766] RIP: 0033:0x7fc706f9e159 [ 75.883123][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.883138][ T5766] RSP: 002b:00007fc707d93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 75.883162][ T5766] RAX: ffffffffffffffda RBX: 00007fc707225fa0 RCX: 00007fc706f9e159 [ 75.883177][ T5766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 75.883189][ T5766] RBP: 00007fc70703506b R08: 00002000000001c0 R09: 000000000000001c [ 75.883202][ T5766] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 75.883214][ T5766] R13: 00007fc707226038 R14: 00007fc707225fa0 R15: 00007ffdc71d2768 [ 75.883244][ T5766] [ 76.251159][ T4930] Bluetooth: hci3: command tx timeout [ 76.251200][ T4930] Bluetooth: hci0: command tx timeout [ 76.251221][ T4930] Bluetooth: hci2: command tx timeout [ 76.315812][ T5773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.330773][ T52] Bluetooth: hci1: command tx timeout [ 76.389912][ T5775] kvm: user requested TSC rate below hardware speed [ 76.488314][ T5782] comedi comedi1: dt2814: I/O base address or length out of range [ 76.584898][ T5784] can0: slcan on pts0. [ 76.643987][ T5715] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.722024][ T30] audit: type=1800 audit(1790182442.243:2): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 76.755054][ T5784] can0 (unregistered): slcan off pts0. [ 76.792144][ T30] audit: type=1800 audit(1790182442.313:3): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 76.824362][ T5715] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 76.842861][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.842915][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.917137][ T5715] as10x_usb: device has been detected [ 76.918453][ T5715] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 76.952594][ T5715] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 77.002382][ T5715] as10x_usb: error during firmware upload part1 [ 77.007953][ T5715] Registered device Abilis Systems DVB-Titan [ 77.453146][ T5752] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.614855][ T5752] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.615899][ T5752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.615938][ T5752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.615957][ T5752] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.615994][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.686473][ T5752] usb 1-1: config 0 descriptor?? [ 78.114093][ T5752] usbhid 1-1:0.0: can't add hid device: -71 [ 78.114187][ T5752] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 78.155253][ T5752] usb 1-1: USB disconnect, device number 2 [ 78.331604][ T52] Bluetooth: hci2: command tx timeout [ 78.331639][ T52] Bluetooth: hci0: command tx timeout [ 78.331661][ T52] Bluetooth: hci3: command tx timeout [ 78.410128][ T4930] Bluetooth: hci1: command tx timeout [ 78.797221][ T30] audit: type=1800 audit(1790182444.313:4): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 78.885329][ T5687] usb 2-1: USB disconnect, device number 2 [ 78.919107][ T30] audit: type=1800 audit(1790182444.433:5): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 79.007900][ T5687] Unregistered device Abilis Systems DVB-Titan [ 79.017023][ T5687] as10x_usb: device has been disconnected [ 79.368719][ T5872] can0: slcan on pts0. [ 79.471709][ T5752] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.475782][ T5872] can0 (unregistered): slcan off pts0. [ 79.584727][ T5876] comedi comedi1: dt2814: I/O base address or length out of range [ 79.641622][ T5752] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.642885][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.642913][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.642934][ T5752] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.643073][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.706271][ T5752] usb 3-1: config 0 descriptor?? [ 79.910255][ T5883] kvm: user requested TSC rate below hardware speed [ 80.120262][ T5894] FAULT_INJECTION: forcing a failure. [ 80.120262][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 80.120305][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 80.120328][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.120341][ T5894] Call Trace: [ 80.120349][ T5894] [ 80.120358][ T5894] dump_stack_lvl+0xe8/0x150 [ 80.120390][ T5894] should_fail_ex+0x3eb/0x540 [ 80.120414][ T5894] ? alloc_slab_obj_exts+0x5c/0x180 [ 80.120440][ T5894] should_failslab+0xa8/0x100 [ 80.120462][ T5894] ? alloc_slab_obj_exts+0x5c/0x180 [ 80.120485][ T5894] __kmalloc_flags_noprof+0x123/0x790 [ 80.120516][ T5894] ? alloc_slab_obj_exts+0x5c/0x180 [ 80.120547][ T5894] alloc_slab_obj_exts+0x5c/0x180 [ 80.120574][ T5894] __memcg_slab_post_alloc_hook+0x60b/0xd90 [ 80.120618][ T5894] ? __inet_hash_connect+0x162c/0x2590 [ 80.120642][ T5894] kmem_cache_alloc_noprof+0x362/0x600 [ 80.120668][ T5894] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.120690][ T5894] ? __inet_hash_connect+0x162c/0x2590 [ 80.120710][ T5894] ? kmem_cache_alloc_noprof+0x151/0x600 [ 80.120736][ T5894] ? __inet_hash_connect+0x162c/0x2590 [ 80.120765][ T5894] __inet_hash_connect+0x162c/0x2590 [ 80.120801][ T5894] ? __inet_hash_connect+0x5ce/0x2590 [ 80.120839][ T5894] ? __pfx___inet_hash_connect+0x10/0x10 [ 80.120861][ T5894] ? sk_setup_caps+0x94f/0xbc0 [ 80.120882][ T5894] ? inet6_ehashfn+0x2f/0x3b0 [ 80.120919][ T5894] ? inet6_hash_connect+0xeb/0x170 [ 80.120949][ T5894] tcp_v6_connect+0x1231/0x1cf0 [ 80.120973][ T5894] ? kasan_save_track+0x3e/0x80 [ 80.121000][ T5894] ? __kasan_kmalloc+0x93/0xb0 [ 80.121033][ T5894] ? __pfx_tcp_v6_connect+0x10/0x10 [ 80.121076][ T5894] __inet_stream_connect+0x28c/0xf50 [ 80.121118][ T5894] ? __pfx___inet_stream_connect+0x10/0x10 [ 80.121144][ T5894] ? __kasan_kmalloc+0x93/0xb0 [ 80.121164][ T5894] ? __kmalloc_cache_noprof+0x31c/0x600 [ 80.121192][ T5894] ? __kmalloc_cache_noprof+0x148/0x600 [ 80.121218][ T5894] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 80.121253][ T5894] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 80.121287][ T5894] tcp_sendmsg_locked+0x4d3d/0x5640 [ 80.121323][ T5894] ? look_up_lock_class+0x57/0x110 [ 80.121353][ T5894] ? register_lock_class+0x31/0x2e0 [ 80.121385][ T5894] ? __lock_acquire+0x747/0x2de0 [ 80.121427][ T5894] ? __pfx_futex_wake_mark+0x10/0x10 [ 80.121463][ T5894] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 80.121499][ T5894] ? tcp_sendmsg+0x21/0x50 [ 80.121529][ T5894] ? __local_bh_enable_ip+0xd6/0x140 [ 80.121556][ T5894] tcp_sendmsg+0x2f/0x50 [ 80.121583][ T5894] ? __pfx_inet6_sendmsg+0x10/0x10 [ 80.121606][ T5894] sock_sendmsg_nosec+0x90/0x180 [ 80.121636][ T5894] __sys_sendto+0x408/0x5a0 [ 80.121661][ T5894] ? __pfx___sys_sendto+0x10/0x10 [ 80.121703][ T5894] ? __pfx___se_sys_futex+0x10/0x10 [ 80.121726][ T5894] ? __pfx_ksys_write+0x10/0x10 [ 80.121758][ T5894] __x64_sys_sendto+0xde/0x100 [ 80.121783][ T5894] do_syscall_64+0x166/0x520 [ 80.121802][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.121829][ T5894] ? clear_bhb_loop+0x70/0xc0 [ 80.121853][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.121873][ T5894] RIP: 0033:0x7fc4e939e159 [ 80.121891][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.121907][ T5894] RSP: 002b:00007fc4ea1a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 80.121928][ T5894] RAX: ffffffffffffffda RBX: 00007fc4e9625fa0 RCX: 00007fc4e939e159 [ 80.121943][ T5894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 80.121955][ T5894] RBP: 00007fc4e943506b R08: 00002000000001c0 R09: 000000000000001c [ 80.121968][ T5894] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 80.121980][ T5894] R13: 00007fc4e9626038 R14: 00007fc4e9625fa0 R15: 00007ffe98fdb508 [ 80.122011][ T5894] [ 80.188579][ T5752] usbhid 3-1:0.0: can't add hid device: -71 [ 80.188674][ T5752] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 80.295238][ T5752] usb 3-1: USB disconnect, device number 2 [ 80.616595][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.34'. [ 80.996047][ T30] audit: type=1800 audit(1790182446.513:6): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 81.460846][ T30] audit: type=1800 audit(1790182446.973:7): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 81.560193][ T5687] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.716423][ T5687] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 81.721443][ T5687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.721490][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.809685][ T5687] as10x_usb: device has been detected [ 81.818971][ T5687] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 81.925231][ T5687] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 81.987790][ T5687] as10x_usb: error during firmware upload part1 [ 81.988429][ T5687] Registered device Abilis Systems DVB-Titan [ 82.343384][ T5940] FAULT_INJECTION: forcing a failure. [ 82.343384][ T5940] name failslab, interval 1, probability 0, space 0, times 0 [ 82.343416][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.1.44 Not tainted syzkaller #0 PREEMPT(full) [ 82.343438][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.343452][ T5940] Call Trace: [ 82.343460][ T5940] [ 82.343468][ T5940] dump_stack_lvl+0xe8/0x150 [ 82.343499][ T5940] should_fail_ex+0x3eb/0x540 [ 82.343531][ T5940] ? alloc_slab_obj_exts+0x5c/0x180 [ 82.343558][ T5940] should_failslab+0xa8/0x100 [ 82.343580][ T5940] ? alloc_slab_obj_exts+0x5c/0x180 [ 82.343603][ T5940] __kmalloc_flags_noprof+0x123/0x790 [ 82.343634][ T5940] ? alloc_slab_obj_exts+0x5c/0x180 [ 82.343665][ T5940] alloc_slab_obj_exts+0x5c/0x180 [ 82.343692][ T5940] __memcg_slab_post_alloc_hook+0x60b/0xd90 [ 82.343737][ T5940] ? __inet_hash_connect+0x162c/0x2590 [ 82.343761][ T5940] kmem_cache_alloc_noprof+0x362/0x600 [ 82.343786][ T5940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 82.343808][ T5940] ? __inet_hash_connect+0x162c/0x2590 [ 82.343829][ T5940] ? kmem_cache_alloc_noprof+0x151/0x600 [ 82.343854][ T5940] ? __inet_hash_connect+0x162c/0x2590 [ 82.343882][ T5940] __inet_hash_connect+0x162c/0x2590 [ 82.343919][ T5940] ? __inet_hash_connect+0x5ce/0x2590 [ 82.343947][ T5940] ? __pfx___inet_hash_connect+0x10/0x10 [ 82.343968][ T5940] ? sk_setup_caps+0x94f/0xbc0 [ 82.343988][ T5940] ? inet6_ehashfn+0x2f/0x3b0 [ 82.344015][ T5940] ? inet6_hash_connect+0xeb/0x170 [ 82.344059][ T5940] tcp_v6_connect+0x1231/0x1cf0 [ 82.344084][ T5940] ? kasan_save_track+0x3e/0x80 [ 82.344112][ T5940] ? __kasan_kmalloc+0x93/0xb0 [ 82.344144][ T5940] ? __pfx_tcp_v6_connect+0x10/0x10 [ 82.344181][ T5940] __inet_stream_connect+0x28c/0xf50 [ 82.344222][ T5940] ? __pfx___inet_stream_connect+0x10/0x10 [ 82.344248][ T5940] ? __kasan_kmalloc+0x93/0xb0 [ 82.344268][ T5940] ? __kmalloc_cache_noprof+0x31c/0x600 [ 82.344296][ T5940] ? __kmalloc_cache_noprof+0x148/0x600 [ 82.344321][ T5940] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 82.344357][ T5940] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 82.344391][ T5940] tcp_sendmsg_locked+0x4d3d/0x5640 [ 82.344428][ T5940] ? look_up_lock_class+0x57/0x110 [ 82.344458][ T5940] ? register_lock_class+0x31/0x2e0 [ 82.344490][ T5940] ? __lock_acquire+0x747/0x2de0 [ 82.344538][ T5940] ? __pfx_futex_wake_mark+0x10/0x10 [ 82.344576][ T5940] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 82.344615][ T5940] ? tcp_sendmsg+0x21/0x50 [ 82.344645][ T5940] ? __local_bh_enable_ip+0xd6/0x140 [ 82.344672][ T5940] tcp_sendmsg+0x2f/0x50 [ 82.344700][ T5940] ? __pfx_inet6_sendmsg+0x10/0x10 [ 82.344723][ T5940] sock_sendmsg_nosec+0x90/0x180 [ 82.344758][ T5940] __sys_sendto+0x408/0x5a0 [ 82.344784][ T5940] ? __pfx___sys_sendto+0x10/0x10 [ 82.344829][ T5940] ? rcu_is_watching+0x16/0xb0 [ 82.344856][ T5940] __x64_sys_sendto+0xde/0x100 [ 82.344879][ T5940] do_syscall_64+0x166/0x520 [ 82.344896][ T5940] ? trace_irq_disable+0x3b/0x140 [ 82.344923][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.344943][ T5940] ? clear_bhb_loop+0x70/0xc0 [ 82.344967][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.344986][ T5940] RIP: 0033:0x7f37c319e159 [ 82.345004][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.345020][ T5940] RSP: 002b:00007f37c412b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 82.345040][ T5940] RAX: ffffffffffffffda RBX: 00007f37c3425fa0 RCX: 00007f37c319e159 [ 82.345054][ T5940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 82.345065][ T5940] RBP: 00007f37c323506b R08: 00002000000001c0 R09: 000000000000001c [ 82.345078][ T5940] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 82.345090][ T5940] R13: 00007f37c3426038 R14: 00007f37c3425fa0 R15: 00007ffc5dc4baa8 [ 82.345121][ T5940] [ 82.997288][ T5947] kvm: user requested TSC rate below hardware speed [ 82.998641][ T5950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.46'. [ 83.164334][ T5962] Zero length message leads to an empty skb [ 83.380177][ T5687] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.531741][ T5687] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.533736][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.533758][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.533769][ T5687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.533791][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.536899][ T5687] usb 4-1: config 0 descriptor?? [ 83.677718][ T43] usb 3-1: USB disconnect, device number 3 [ 83.699443][ T43] Unregistered device Abilis Systems DVB-Titan [ 83.701657][ T43] as10x_usb: device has been disconnected [ 83.946484][ T5687] usbhid 4-1:0.0: can't add hid device: -71 [ 83.946579][ T5687] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 83.951799][ T5687] usb 4-1: USB disconnect, device number 2 [ 84.523917][ T30] audit: type=1800 audit(1790182450.043:8): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.55" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 84.570682][ T5973] can0: slcan on pts0. [ 84.665021][ T5968] can0 (unregistered): slcan off pts0. [ 85.280080][ T5752] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.352253][ T5998] can0: slcan on pts0. [ 85.433621][ T5752] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.434941][ T5752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.434969][ T5752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.434990][ T5752] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.435028][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.471999][ T5997] can0 (unregistered): slcan off pts0. [ 85.488137][ T5752] usb 1-1: config 0 descriptor?? [ 85.625573][ T6006] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 85.626442][ T6006] rust_binder: 6004:6006 no such ref 0 [ 85.661289][ T6006] syz.1.71 (6006) used greatest stack depth: 19248 bytes left [ 85.787889][ T30] audit: type=1800 audit(1790182451.303:9): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.76" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 85.937777][ T5752] usbhid 1-1:0.0: can't add hid device: -71 [ 85.937874][ T5752] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.966846][ T5752] usb 1-1: USB disconnect, device number 3 [ 86.162927][ T6026] can0: slcan on pts0. [ 86.242408][ T6025] can0 (unregistered): slcan off pts0. [ 86.552499][ T6040] rust_binder: 6039:6040 no such ref 0 [ 86.579464][ T30] audit: type=1800 audit(1790182452.093:10): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.88" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 86.737130][ T10] cfg80211: failed to load regulatory.db [ 86.786670][ T6051] can0: slcan on pts0. [ 86.894560][ T6051] can0 (unregistered): slcan off pts0. [ 87.090301][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.200112][ T5687] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.241571][ T10] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 87.242670][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.242716][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.306227][ T6078] rust_binder: 6076:6078 no such ref 0 [ 87.308199][ T10] as10x_usb: device has been detected [ 87.309047][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 87.332977][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 87.345160][ T10] as10x_usb: error during firmware upload part1 [ 87.345729][ T10] Registered device Abilis Systems DVB-Titan [ 87.360994][ T5687] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.362083][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.362110][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.362130][ T5687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.362167][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.422455][ T30] audit: type=1800 audit(1790182452.933:11): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.101" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 87.450401][ T5687] usb 4-1: config 0 descriptor?? [ 87.901135][ T5687] usbhid 4-1:0.0: can't add hid device: -71 [ 87.901226][ T5687] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 87.914662][ T6064] infiniband syz1: set down [ 87.914682][ T6064] infiniband syz1: added syz_tun [ 87.917916][ T5687] usb 4-1: USB disconnect, device number 3 [ 87.958670][ T5701] infiniband syz1: ib_query_port failed (-19) [ 87.963127][ T6064] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 87.986716][ T6064] infiniband syz1: Couldn't open port 1 [ 87.987007][ T6064] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 87.987038][ T6064] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 87.987075][ T6064] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 88.119015][ T6064] RDS/IB: syz1: added [ 88.119356][ T6064] smc: adding ib device syz1 with port count 1 [ 88.119454][ T6064] smc: ib device syz1 port 1 has no pnetid [ 88.151203][ T6064] smc: removing ib device syz1 [ 88.223317][ T6064] smbdirect: ib_dev[syz1] removed [ 88.477384][ T6064] rdma_rxe: rxe_newlink: failed to add syz_tun [ 88.709191][ T6114] can0: slcan on pts0. [ 88.806874][ T6114] can0 (unregistered): slcan off pts0. [ 88.948214][ T6124] rust_binder: 6123:6124 no such ref 0 [ 88.990805][ T30] audit: type=1800 audit(1790182454.503:12): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.112" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 89.216653][ T30] audit: type=1800 audit(1790182454.733:13): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.116" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 89.540853][ T6145] can0: slcan on pts0. [ 89.580979][ T6145] can0 (unregistered): slcan off pts0. [ 89.735830][ T6151] rust_binder: 6149:6151 no such ref 0 [ 89.863147][ T30] audit: type=1800 audit(1790182455.383:14): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.123" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 90.008206][ T30] audit: type=1800 audit(1790182455.523:15): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.126" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 90.139746][ T6146] infiniband syz1: set down [ 90.139767][ T6146] infiniband syz1: added syz_tun [ 90.150033][ T5760] infiniband syz1: ib_query_port failed (-19) [ 90.181966][ T6146] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.182005][ T6146] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.182044][ T6146] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.269820][ T6168] can0: slcan on pts0. [ 90.275519][ T6146] RDS/IB: syz1: added [ 90.275570][ T6146] smc: adding ib device syz1 with port count 1 [ 90.275587][ T6146] smc: ib device syz1 port 1 has no pnetid [ 90.290226][ T6146] smc: removing ib device syz1 [ 90.325414][ T6146] smbdirect: ib_dev[syz1] removed [ 90.343154][ T6168] can0 (unregistered): slcan off pts0. [ 90.720274][ T6146] rdma_rxe: rxe_newlink: failed to add syz_tun [ 90.826618][ T6179] rust_binder: 6178:6179 no such ref 0 [ 90.892206][ T30] audit: type=1800 audit(1790182456.413:16): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.136" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 90.953677][ T30] audit: type=1800 audit(1790182456.473:17): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 91.169012][ T6192] can0: slcan on pts0. [ 91.222176][ T6192] can0 (unregistered): slcan off pts0. [ 91.378615][ T6201] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 91.378631][ T6201] rust_binder: Read failure Err(EFAULT) in pid:82 [ 91.768146][ T6218] can0: slcan on pts0. [ 91.855889][ T6218] can0 (unregistered): slcan off pts0. [ 91.933605][ T6224] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 91.933623][ T6224] rust_binder: Read failure Err(EFAULT) in pid:108 [ 92.592189][ T6245] netlink: 284 bytes leftover after parsing attributes in process `syz.2.164'. [ 92.681853][ T6255] rust_binder: 6254:6255 no such ref 0 [ 92.681889][ T6255] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.681899][ T6255] rust_binder: Read failure Err(EFAULT) in pid:123 [ 92.682642][ T6255] rust_binder: 6254:6255 no such ref 0 [ 92.683189][ T6255] rust_binder: 6254:6255 no such ref 0 [ 93.524740][ T6279] rust_binder: 6278:6279 no such ref 0 [ 93.524776][ T6279] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.524786][ T6279] rust_binder: Read failure Err(EFAULT) in pid:130 [ 93.525532][ T6279] rust_binder: 6278:6279 no such ref 0 [ 93.526095][ T6279] rust_binder: 6278:6279 no such ref 0 [ 93.635345][ T5760] usb 2-1: USB disconnect, device number 3 [ 93.665864][ T5760] Unregistered device Abilis Systems DVB-Titan [ 93.670667][ T5760] as10x_usb: device has been disconnected [ 94.469484][ T6295] infiniband syz1: set down [ 94.470321][ T5752] infiniband syz1: ib_query_port failed (-19) [ 94.470374][ T6295] infiniband syz1: added syz_tun [ 94.516410][ T6295] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 94.516442][ T6295] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 94.516476][ T6295] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 94.603006][ T6334] rust_binder: 6333:6334 no such ref 0 [ 94.603043][ T6334] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.603054][ T6334] rust_binder: Read failure Err(EFAULT) in pid:134 [ 94.606834][ T6334] rust_binder: 6333:6334 no such ref 0 [ 94.607997][ T6334] rust_binder: 6333:6334 no such ref 0 [ 94.646523][ T6295] RDS/IB: syz1: added [ 94.646575][ T6295] smc: adding ib device syz1 with port count 1 [ 94.646593][ T6295] smc: ib device syz1 port 1 has no pnetid [ 94.667898][ T6295] smc: removing ib device syz1 [ 94.676687][ T5760] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.739472][ T6295] smbdirect: ib_dev[syz1] removed [ 94.821821][ T5760] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 94.823112][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.823157][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.897318][ T5760] as10x_usb: device has been detected [ 94.898074][ T5760] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 94.936787][ T5760] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 94.972182][ T5760] as10x_usb: error during firmware upload part1 [ 94.974136][ T5760] Registered device Abilis Systems DVB-Titan [ 95.209159][ T6295] rdma_rxe: rxe_newlink: failed to add syz_tun [ 95.528563][ T6349] netlink: 284 bytes leftover after parsing attributes in process `syz.0.195'. [ 95.852656][ T6365] rust_binder: 6364:6365 no such ref 0 [ 95.852691][ T6365] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.852701][ T6365] rust_binder: Read failure Err(EFAULT) in pid:146 [ 95.853331][ T6365] rust_binder: 6364:6365 no such ref 0 [ 96.770077][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.852106][ T6404] rust_binder: 6403:6404 no such ref 0 [ 96.852132][ T6404] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 96.852138][ T6404] rust_binder: Read failure Err(EFAULT) in pid:143 [ 96.852727][ T6404] rust_binder: 6403:6404 no such ref 0 [ 96.923080][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.924362][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.924386][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.924425][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.928246][ T10] usb 2-1: config 0 descriptor?? [ 96.984132][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 97.380600][ T5760] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.530132][ T5760] usb 1-1: Using ep0 maxpacket: 8 [ 97.534140][ T5760] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.535436][ T5760] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.535482][ T5760] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.535503][ T5760] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.535549][ T5760] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.535578][ T5760] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.535616][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.761321][ T5760] usb 1-1: usb_control_msg returned -32 [ 97.761392][ T5760] usbtmc 1-1:16.0: can't read capabilities [ 98.705297][ T6434] rust_binder: 6433:6434 no such ref 0 [ 98.705323][ T6434] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 98.705329][ T6434] rust_binder: Read failure Err(EFAULT) in pid:174 [ 98.705924][ T6434] rust_binder: 6433:6434 no such ref 0 [ 99.483701][ T5715] usb 2-1: USB disconnect, device number 4 [ 100.237864][ T5752] usb 1-1: USB disconnect, device number 4 [ 100.385371][ T6468] rust_binder: 6467:6468 no such ref 0 [ 100.385406][ T6468] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 100.385415][ T6468] rust_binder: Read failure Err(EFAULT) in pid:93 [ 100.386204][ T6468] rust_binder: 6467:6468 no such ref 0 [ 100.560335][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.711333][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.712306][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.712331][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.712367][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.716446][ T10] usb 3-1: config 0 descriptor?? [ 100.767918][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 100.779438][ T5701] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.934136][ T5701] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 100.935301][ T5701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.935322][ T5701] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.935370][ T5701] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.937653][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.937682][ T5701] usb 2-1: Product: syz [ 100.937700][ T5701] usb 2-1: Manufacturer: syz [ 100.937714][ T5701] usb 2-1: SerialNumber: syz [ 101.241524][ T5752] usb 4-1: USB disconnect, device number 4 [ 101.271484][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.283482][ T5752] Unregistered device Abilis Systems DVB-Titan [ 101.288502][ T5752] as10x_usb: device has been disconnected [ 101.430115][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 101.432734][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.433876][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.433893][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.433904][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.433942][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.436088][ T10] usb 1-1: config 0 descriptor?? [ 101.645291][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.646093][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.732469][ T6498] rust_binder: 6497:6498 no such ref 0 [ 101.732493][ T6498] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 101.732499][ T6498] rust_binder: Read failure Err(EFAULT) in pid:152 [ 101.733044][ T6498] rust_binder: 6497:6498 no such ref 0 [ 101.852665][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 101.852779][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.866098][ T10] usb 1-1: USB disconnect, device number 5 [ 102.478395][ T5701] usb 2-1: 0:2 : does not exist [ 102.479218][ T5701] usb 2-1: unit 0 not found! [ 102.550873][ T5752] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.552219][ T5701] usb 2-1: USB disconnect, device number 5 [ 102.700945][ T5752] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 102.702436][ T5752] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.702484][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.734618][ T5752] as10x_usb: device has been detected [ 102.735380][ T5752] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 102.768199][ T5752] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 102.782694][ T5752] as10x_usb: error during firmware upload part1 [ 102.786571][ T5752] Registered device Abilis Systems DVB-Titan [ 103.315919][ T62] usb 3-1: USB disconnect, device number 4 [ 103.500572][ T6533] rust_binder: 6532:6533 no such ref 0 [ 103.500606][ T6533] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 103.500615][ T6533] rust_binder: Read failure Err(EFAULT) in pid:176 [ 103.501254][ T6533] rust_binder: 6532:6533 no such ref 0 [ 104.051802][ T62] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.200714][ T62] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 104.202223][ T62] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.202237][ T62] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 104.202268][ T62] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.204052][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.204065][ T62] usb 1-1: Product: syz [ 104.204073][ T62] usb 1-1: Manufacturer: syz [ 104.204080][ T62] usb 1-1: SerialNumber: syz [ 104.330163][ T5687] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.491336][ T5687] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.492471][ T5687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.492496][ T5687] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.492528][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.495238][ T5687] usb 3-1: config 0 descriptor?? [ 104.499817][ T5687] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 104.990043][ T6562] rust_binder: 6561:6562 no such ref 0 [ 104.990077][ T6562] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 104.990086][ T6562] rust_binder: Read failure Err(EFAULT) in pid:115 [ 104.996054][ T6562] rust_binder: 6561:6562 no such ref 0 [ 104.996658][ T6562] rust_binder: 6561:6562 no such ref 0 [ 105.759295][ T62] usb 1-1: 0:2 : does not exist [ 105.759378][ T62] usb 1-1: unit 0 not found! [ 105.825224][ T62] usb 1-1: USB disconnect, device number 6 [ 105.895989][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.077746][ T6587] rust_binder: 6586:6587 no such ref 0 [ 106.077781][ T6587] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 106.077791][ T6587] rust_binder: Read failure Err(EFAULT) in pid:135 [ 106.078307][ T6587] rust_binder: 6586:6587 no such ref 0 [ 106.078823][ T6587] rust_binder: 6586:6587 no such ref 0 [ 106.396392][ T6600] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 107.057884][ T5687] usb 3-1: USB disconnect, device number 5 [ 107.121590][ T6613] rust_binder: 6612:6613 no such ref 0 [ 107.121640][ T6613] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 107.121647][ T6613] rust_binder: Read failure Err(EFAULT) in pid:208 [ 107.122342][ T6613] rust_binder: 6612:6613 no such ref 0 [ 107.122856][ T6613] rust_binder: 6612:6613 no such ref 0 [ 107.151845][ T5701] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.315458][ T5701] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 107.329374][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.339738][ T5701] usb 2-1: Product: syz [ 107.339758][ T5701] usb 2-1: Manufacturer: syz [ 107.339772][ T5701] usb 2-1: SerialNumber: syz [ 107.365903][ T5701] ums-karma 2-1:1.0: USB Mass Storage device detected [ 107.379908][ T5701] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 107.379908][ T5701] Please send a copy of this message to and [ 107.540126][ T5752] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.564819][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 107.565107][ T6609] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 107.601705][ T5701] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 107.673197][ T62] usb 2-1: USB disconnect, device number 6 [ 107.700832][ T5752] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 107.701994][ T5752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.702018][ T5752] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.702068][ T5752] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.704064][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.704078][ T5752] usb 1-1: Product: syz [ 107.704085][ T5752] usb 1-1: Manufacturer: syz [ 107.704092][ T5752] usb 1-1: SerialNumber: syz [ 108.300108][ T5715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.300471][ T6642] rust_binder: 6641:6642 no such ref 0 [ 108.450150][ T5715] usb 3-1: device descriptor read/64, error -71 [ 108.700791][ T5715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.840272][ T5715] usb 3-1: device descriptor read/64, error -71 [ 108.950922][ T5715] usb usb3-port1: attempt power cycle [ 109.078145][ T43] usb 4-1: USB disconnect, device number 5 [ 109.117561][ T43] Unregistered device Abilis Systems DVB-Titan [ 109.122291][ T43] as10x_usb: device has been disconnected [ 109.239818][ T5752] usb 1-1: 0:2 : does not exist [ 109.239914][ T5752] usb 1-1: unit 0 not found! [ 109.305077][ T6667] rust_binder: 6665:6667 no such ref 0 [ 109.307281][ T5752] usb 1-1: USB disconnect, device number 7 [ 109.321815][ T5715] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.343306][ T5715] usb 3-1: device descriptor read/8, error -71 [ 109.420559][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.580115][ T5715] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.601411][ T5715] usb 3-1: device descriptor read/8, error -71 [ 109.721910][ T5715] usb usb3-port1: unable to enumerate USB device [ 109.812693][ T6684] FAULT_INJECTION: forcing a failure. [ 109.812693][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 109.812725][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.0.312 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.812750][ T6684] Tainted: [L]=SOFTLOCKUP [ 109.812756][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.812772][ T6684] Call Trace: [ 109.812779][ T6684] [ 109.812787][ T6684] dump_stack_lvl+0xe8/0x150 [ 109.812815][ T6684] should_fail_ex+0x3eb/0x540 [ 109.812840][ T6684] should_failslab+0xa8/0x100 [ 109.812861][ T6684] __kmalloc_noprof+0xf9/0x710 [ 109.812885][ T6684] ? rcu_is_watching+0x16/0xb0 [ 109.812904][ T6684] ? tomoyo_realpath_from_path+0xef/0x640 [ 109.812926][ T6684] ? tomoyo_realpath_from_path+0xef/0x640 [ 109.812957][ T6684] tomoyo_realpath_from_path+0xef/0x640 [ 109.812987][ T6684] ? tomoyo_path_number_perm+0x219/0x5f0 [ 109.813014][ T6684] tomoyo_path_number_perm+0x246/0x5f0 [ 109.813036][ T6684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.813053][ T6684] ? __lock_acquire+0x747/0x2de0 [ 109.813096][ T6684] ? hook_file_ioctl+0x1f2/0x600 [ 109.813133][ T6684] ? __fget_files+0x2a/0x420 [ 109.813158][ T6684] ? __fget_files+0x2a/0x420 [ 109.813179][ T6684] ? __fget_files+0x3a2/0x420 [ 109.813199][ T6684] ? __fget_files+0x2a/0x420 [ 109.813225][ T6684] security_file_ioctl+0xc3/0x2a0 [ 109.813254][ T6684] __se_sys_ioctl+0x47/0x170 [ 109.813283][ T6684] do_syscall_64+0x166/0x520 [ 109.813300][ T6684] ? trace_irq_disable+0x3b/0x140 [ 109.813324][ T6684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.813343][ T6684] ? clear_bhb_loop+0x70/0xc0 [ 109.813365][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.813383][ T6684] RIP: 0033:0x7fc4e939e159 [ 109.813400][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.813415][ T6684] RSP: 002b:00007fc4ea1a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.813435][ T6684] RAX: ffffffffffffffda RBX: 00007fc4e9625fa0 RCX: 00007fc4e939e159 [ 109.813448][ T6684] RDX: 0000000000000000 RSI: 00000000c02063a1 RDI: 0000000000000004 [ 109.813460][ T6684] RBP: 00007fc4ea1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 109.813471][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.813482][ T6684] R13: 00007fc4e9626038 R14: 00007fc4e9625fa0 R15: 00007ffe98fdb508 [ 109.813510][ T6684] [ 109.813529][ T6684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.920869][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.111989][ T43] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 110.112941][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.112987][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.140740][ T5701] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.172640][ T43] as10x_usb: device has been detected [ 110.173382][ T43] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 110.198550][ T43] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 110.225107][ T43] as10x_usb: error during firmware upload part1 [ 110.225664][ T43] Registered device Abilis Systems DVB-Titan [ 110.304574][ T5701] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.306861][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.306907][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.309588][ T5701] usb 1-1: config 0 descriptor?? [ 110.403600][ T6697] rust_binder: 6696:6697 no such ref 0 [ 110.526808][ T5701] usbhid 1-1:0.0: can't add hid device: -71 [ 110.526884][ T5701] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.552337][ T5701] usb 1-1: USB disconnect, device number 8 [ 110.930070][ T5760] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.990073][ T5715] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.098872][ T4942] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 111.110793][ T4942] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 111.119221][ T4942] CPU: 0 UID: 0 PID: 4942 Comm: jbd2/sda1-8 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.130175][ T4942] Tainted: [L]=SOFTLOCKUP [ 111.134502][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.144565][ T4942] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 111.149777][ T4942] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 111.154927][ T5760] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 111.157637][ T5760] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.157657][ T5760] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.157692][ T5760] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.159299][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.159322][ T5760] usb 2-1: Product: syz [ 111.159334][ T5760] usb 2-1: Manufacturer: syz [ 111.159346][ T5760] usb 2-1: SerialNumber: syz [ 111.201405][ T5715] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 111.202295][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.202349][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.204796][ T5715] usb 1-1: config 0 descriptor?? [ 111.264318][ T4942] RSP: 0018:ffffc9000fb9f868 EFLAGS: 00010202 [ 111.270381][ T4942] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 111.278357][ T4942] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807db25520 [ 111.286336][ T4942] RBP: 0000000000009801 R08: ffff88807db2557f R09: 1ffff1100fb64aaf [ 111.294315][ T4942] R10: dffffc0000000000 R11: ffffed100fb64ab0 R12: dffffc0000000000 [ 111.302295][ T4942] R13: ffff88807db25500 R14: ffff88807663ea80 R15: 0000000000000008 [ 111.310264][ T4942] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 111.319200][ T4942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.325779][ T4942] CR2: 00007f803a35da08 CR3: 0000000064b28000 CR4: 00000000003526f0 [ 111.333751][ T4942] Call Trace: [ 111.337025][ T4942] [ 111.339953][ T4942] ? __pfx_journal_end_buffer_io_sync+0x10/0x10 [ 111.346208][ T4942] jbd2_journal_commit_transaction+0x2285/0x5c80 [ 111.352641][ T4942] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 111.359333][ T4942] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.364720][ T4942] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 111.370541][ T4942] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 111.376364][ T4942] ? __timer_delete_sync+0x4a7/0x520 [ 111.381666][ T4942] kjournald2+0x3bc/0x740 [ 111.386067][ T4942] ? __pfx_kjournald2+0x10/0x10 [ 111.390965][ T4942] ? __pfx_autoremove_wake_function+0x10/0x10 [ 111.397129][ T4942] ? __kthread_parkme+0x71/0x1f0 [ 111.402080][ T4942] ? __kthread_parkme+0x199/0x1f0 [ 111.407116][ T4942] kthread+0x38b/0x480 [ 111.411194][ T4942] ? __pfx_kjournald2+0x10/0x10 [ 111.416049][ T4942] ? __pfx_kthread+0x10/0x10 [ 111.420638][ T4942] ret_from_fork+0x514/0xb70 [ 111.425230][ T4942] ? __pfx_ret_from_fork+0x10/0x10 [ 111.430342][ T4942] ? __switch_to+0xc89/0x1420 [ 111.435018][ T4942] ? __pfx_kthread+0x10/0x10 [ 111.439610][ T4942] ret_from_fork_asm+0x1a/0x30 [ 111.444379][ T4942] [ 111.447388][ T4942] Modules linked in: [ 111.452389][ T4942] ---[ end trace 0000000000000000 ]--- [ 111.464423][ T4942] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 111.464452][ T4942] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 111.464467][ T4942] RSP: 0018:ffffc9000fb9f868 EFLAGS: 00010202 [ 111.464485][ T4942] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 111.464497][ T4942] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807db25520 [ 111.464509][ T4942] RBP: 0000000000009801 R08: ffff88807db2557f R09: 1ffff1100fb64aaf [ 111.464522][ T4942] R10: dffffc0000000000 R11: ffffed100fb64ab0 R12: dffffc0000000000 [ 111.464662][ T4942] R13: ffff88807db25500 R14: ffff88807663ea80 R15: 0000000000000008 [ 111.464676][ T4942] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 111.464692][ T4942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.464844][ T4942] CR2: 00007fc704db1ff8 CR3: 000000007a370000 CR4: 00000000003526f0 [ 111.464864][ T4942] Kernel panic - not syncing: Fatal exception [ 111.565166][ T4942] Kernel Offset: disabled [ 111.569498][ T4942] Rebooting in 86400 seconds..