last executing test programs: 4.073521905s ago: executing program 0 (id=397): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb9) 3.076125405s ago: executing program 2 (id=408): r0 = socket$rxrpc(0x21, 0x2, 0xa) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000037c0)='espintcp', 0x8) sendmsg$inet(r0, &(0x7f00000013c0)={0x0, 0x16, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x0) 3.075017977s ago: executing program 3 (id=409): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="3751f02b82f73ccfc7c43161c4ff26fa3893119fd147a1576d9456136ab5f15493", 0x21}, {&(0x7f0000000200)="d3e8a24fba584651e415a77c020235", 0xf}], 0x2) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000280)=0x7) 2.792237757s ago: executing program 2 (id=411): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x3, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="281db9", 0x3}], 0x1) 2.729216953s ago: executing program 3 (id=412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r2}, 0xc) 2.606935308s ago: executing program 4 (id=415): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffff8]}, 0x8, 0x80000) r1 = syz_io_uring_setup(0xf0b, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20003, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) 2.599653938s ago: executing program 2 (id=416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000800850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 2.477398475s ago: executing program 1 (id=417): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 2.426370268s ago: executing program 3 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4c850) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000140000000000000000000300000a2c000000030a050000000000000000000a0000070900010073797a31000000000900030073797a310000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) close(0x3) 2.186460408s ago: executing program 4 (id=419): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000005b40), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000005c80)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000005cc0)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000005d00)=ANY=[@ANYBLOB="000086dd050056000800542b000060ec970001"], 0xfdef) 2.153207935s ago: executing program 0 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000740)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000780)={0x1, 0x0, [{0x485, 0x0, 0x809}]}) 2.052432552s ago: executing program 2 (id=421): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xee00, 0xee01, 0x0) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x300127) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) 1.952251628s ago: executing program 3 (id=422): setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)="060000000100060000071a8001", 0xd) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ptrace(0x10, r0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) 1.872715222s ago: executing program 2 (id=423): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x80002001}) 1.829567348s ago: executing program 0 (id=424): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x40, 0x0, &(0x7f0000000180)="d8188619000000004284860188a86a4e08005a63", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.568355806s ago: executing program 3 (id=425): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000440)={0x0, 0xa0f3, 0x2, 0x0, 0x42}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_complete(r1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='fdinfo/3\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/196, 0xc4}], 0x1, 0xf, 0xfffffbff) 1.498803104s ago: executing program 1 (id=426): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e22, 0x0, 0x0, 0x8, 0xa, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x628a}, {0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x200000}}, 0xe4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) 1.345727656s ago: executing program 1 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x7fffffff, 0xb41, 0x5, 0xff, 0x5, "388d673f088b000000020000000000001af800"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0xb8) 1.255051699s ago: executing program 1 (id=428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0xce22, @empty}, 0x10) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff8100ce22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.124467335s ago: executing program 4 (id=429): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000a00)=""/257, 0x101}], 0x1, 0x3, 0x3) 975.604762ms ago: executing program 4 (id=430): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @loopback}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000340)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 899.809834ms ago: executing program 1 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e186de2c6759e1a3bae6f8fc0cc7a1f4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1ae540c42a3ea619a1009ad03d2edc0a62424b7db8a4f01c075093512020dde67bc937927fd6083e57ec95593e99aa063acf6fb866c0732aaae9b9265ca1b64f87919221ff7f54a58e004b0db78bfd36ab4d957657a43e806dcfadb041ab3dcb7b1ca8b871f0ba9bd955d4baeae1afff84b054ee1a58b0b2154de8b240afd2355d08037d4200d479ee79da8d7576d678ecfc9cb39b84d47b7", 0xfc) read$FUSE(r0, &(0x7f00000077c0)={0x2020}, 0x2020) 885.849471ms ago: executing program 2 (id=432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x7, @private0, 0xd399}], 0x1c) recvmmsg(r0, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 753.33865ms ago: executing program 4 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='7', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) 638.011258ms ago: executing program 1 (id=434): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1451c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/4096, 0x20001b80}, {&(0x7f0000001440)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 629.868652ms ago: executing program 0 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x60, r2, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x5}}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x20, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x7f, 0x62, @broadcast, 0x1, @value, 0x8, 0x10001}}, @void, @val={0x84, 0x2, {0x8}}, @void}}}}]}, 0x60}}, 0x0) 466.790475ms ago: executing program 4 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 264.077101ms ago: executing program 0 (id=436): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x6}, {0xa, 0x4e22, 0x4f6, @private1}, r1, 0x4}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000780)={0x7, 0x8, 0xfa00, {r1, 0xc61}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 126.615033ms ago: executing program 3 (id=437): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x1, 0x0, [{0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 0s ago: executing program 0 (id=438): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='e'], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x4, 0xfffffffd}) statx(r0, 0x0, 0x1000, 0x800, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 75.492349][ T5595] cgroup: Unknown subsys name 'net' [ 75.714552][ T5595] cgroup: Unknown subsys name 'cpuset' [ 75.759963][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.365718][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.892021][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.903204][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.942506][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.971011][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.982159][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.983082][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.003550][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.003587][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.007258][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.007928][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.014640][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.015712][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.016539][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.016847][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.017869][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.018093][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.021150][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.022227][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.048674][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.060378][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.236469][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.243621][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.259402][ T4923] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.264878][ T4923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.265539][ T4923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.329339][ T5606] rdma_rxe: Failed to create IPv6 UDP tunnel [ 81.332273][ T5605] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 81.332286][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.338759][ T5607] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 81.341441][ T5609] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 81.384328][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.401776][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.146730][ T5608] infiniband rxe0: set active [ 82.150557][ T5608] infiniband rxe0: added rxe_eth0 [ 82.205197][ T5339] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.231440][ T61] Bluetooth: hci1: command tx timeout [ 82.231446][ T4923] Bluetooth: hci0: command tx timeout [ 82.284284][ T5608] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 82.284321][ T5608] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 82.284357][ T5608] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 82.308529][ T4923] Bluetooth: hci2: command tx timeout [ 82.308537][ T5615] Bluetooth: hci4: command tx timeout [ 82.308747][ T61] Bluetooth: hci3: command tx timeout [ 82.309725][ T5339] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.465465][ T5608] RDS/IB: rxe0: added [ 82.466894][ T5608] smc: adding ib device rxe0 with port count 1 [ 82.467054][ T5608] smc: ib device rxe0 port 1 has no pnetid [ 82.504313][ T1228] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.541282][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.929702][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.437891][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.626583][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.626726][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.627052][ T5609] bridge_slave_0: entered allmulticast mode [ 83.635074][ T5609] bridge_slave_0: entered promiscuous mode [ 83.698682][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.698805][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.698999][ T5609] bridge_slave_1: entered allmulticast mode [ 83.701728][ T5609] bridge_slave_1: entered promiscuous mode [ 83.800869][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.896418][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.896532][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.896820][ T5605] bridge_slave_0: entered allmulticast mode [ 83.924275][ T5605] bridge_slave_0: entered promiscuous mode [ 83.941103][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.941349][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.941462][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.941606][ T5606] bridge_slave_0: entered allmulticast mode [ 83.944194][ T5606] bridge_slave_0: entered promiscuous mode [ 83.946917][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.947047][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.947193][ T5607] bridge_slave_0: entered allmulticast mode [ 83.952956][ T5607] bridge_slave_0: entered promiscuous mode [ 84.001675][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.001799][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.002054][ T5605] bridge_slave_1: entered allmulticast mode [ 84.005423][ T5605] bridge_slave_1: entered promiscuous mode [ 84.031814][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.032238][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.032349][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.032836][ T5606] bridge_slave_1: entered allmulticast mode [ 84.047769][ T5606] bridge_slave_1: entered promiscuous mode [ 84.051765][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.051880][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.052037][ T5607] bridge_slave_1: entered allmulticast mode [ 84.055949][ T5607] bridge_slave_1: entered promiscuous mode [ 84.224977][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.238221][ T5609] team0: Port device team_slave_0 added [ 84.249713][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.252551][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.255143][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.257152][ T5609] team0: Port device team_slave_1 added [ 84.260519][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.263617][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.309564][ T61] Bluetooth: hci0: command tx timeout [ 84.318665][ T61] Bluetooth: hci1: command tx timeout [ 84.363040][ T5608] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.389924][ T61] Bluetooth: hci4: command tx timeout [ 84.389973][ T61] Bluetooth: hci2: command tx timeout [ 84.390056][ T5615] Bluetooth: hci3: command tx timeout [ 84.461817][ T5605] team0: Port device team_slave_0 added [ 84.464352][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.464369][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.464394][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.472995][ T5606] team0: Port device team_slave_0 added [ 84.476822][ T5607] team0: Port device team_slave_0 added [ 84.481407][ T5605] team0: Port device team_slave_1 added [ 84.482450][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.482463][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.482488][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.487854][ T5606] team0: Port device team_slave_1 added [ 84.493386][ T5607] team0: Port device team_slave_1 added [ 84.654516][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.654534][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.654558][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.660622][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.660662][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.660686][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.662767][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.662781][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.662805][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.665916][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.665929][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.665954][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.687352][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.687369][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.687408][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.689735][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.689750][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.689775][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.771753][ T5609] hsr_slave_0: entered promiscuous mode [ 84.773843][ T5609] hsr_slave_1: entered promiscuous mode [ 85.404454][ T5605] hsr_slave_0: entered promiscuous mode [ 85.405185][ T5605] hsr_slave_1: entered promiscuous mode [ 85.405821][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 85.405846][ T5605] Cannot create hsr debugfs directory [ 85.432855][ T5607] hsr_slave_0: entered promiscuous mode [ 85.433653][ T5607] hsr_slave_1: entered promiscuous mode [ 85.434145][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 85.434163][ T5607] Cannot create hsr debugfs directory [ 85.457684][ T5606] hsr_slave_0: entered promiscuous mode [ 85.459560][ T5606] hsr_slave_1: entered promiscuous mode [ 85.461331][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 85.461350][ T5606] Cannot create hsr debugfs directory [ 86.214967][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.262960][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.293231][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.324847][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.336845][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.361980][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.390092][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.398690][ T4923] Bluetooth: hci0: command tx timeout [ 86.398856][ T5615] Bluetooth: hci1: command tx timeout [ 86.422149][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.469678][ T4923] Bluetooth: hci4: command tx timeout [ 86.469771][ T5615] Bluetooth: hci3: command tx timeout [ 86.479120][ T5615] Bluetooth: hci2: command tx timeout [ 86.583212][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.583330][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.583462][ T5608] bridge_slave_0: entered allmulticast mode [ 86.585101][ T5608] bridge_slave_0: entered promiscuous mode [ 86.595419][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.595550][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.595743][ T5608] bridge_slave_1: entered allmulticast mode [ 86.601440][ T5608] bridge_slave_1: entered promiscuous mode [ 86.666016][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.695160][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.725017][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.751103][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.770893][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.771205][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.811996][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.842784][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.842896][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.884621][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.939911][ T5608] team0: Port device team_slave_0 added [ 86.950594][ T5608] team0: Port device team_slave_1 added [ 87.028670][ T946] cfg80211: failed to load regulatory.db [ 87.078125][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.078143][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.078163][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.116317][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.116335][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.116360][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.249389][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.272772][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.288140][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.314949][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.335738][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.382377][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.405904][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.435263][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.504272][ T5608] hsr_slave_0: entered promiscuous mode [ 87.505211][ T5608] hsr_slave_1: entered promiscuous mode [ 87.505721][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 87.505739][ T5608] Cannot create hsr debugfs directory [ 87.662897][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.691302][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.708616][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.752023][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.767391][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.791935][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.810454][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.852739][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.974038][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.200051][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.257888][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.258031][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.284510][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.324892][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.325033][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.346306][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.381552][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.385693][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.420062][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.428161][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.462878][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.469748][ T5615] Bluetooth: hci1: command tx timeout [ 88.469778][ T4923] Bluetooth: hci0: command tx timeout [ 88.492444][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.531269][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.549623][ T4923] Bluetooth: hci2: command tx timeout [ 88.549659][ T4923] Bluetooth: hci3: command tx timeout [ 88.549680][ T4923] Bluetooth: hci4: command tx timeout [ 88.581630][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.610775][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.647891][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.650005][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.694515][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.694612][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.744910][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.801639][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.801764][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.811758][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.856840][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.857046][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.990858][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.046760][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.046908][ T1413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.169836][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.169969][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.283263][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.413699][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.504272][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.508158][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.553958][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.554064][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.043501][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.635450][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.960959][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.964706][ T5607] veth0_vlan: entered promiscuous mode [ 91.018072][ T5607] veth1_vlan: entered promiscuous mode [ 91.042190][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.247102][ T5609] veth0_vlan: entered promiscuous mode [ 91.260769][ T5606] veth0_vlan: entered promiscuous mode [ 91.264450][ T5607] veth0_macvtap: entered promiscuous mode [ 91.272727][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.294015][ T5607] veth1_macvtap: entered promiscuous mode [ 91.301215][ T5609] veth1_vlan: entered promiscuous mode [ 91.345736][ T5606] veth1_vlan: entered promiscuous mode [ 91.369419][ T5605] veth0_vlan: entered promiscuous mode [ 91.400623][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.423641][ T5605] veth1_vlan: entered promiscuous mode [ 91.427530][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.500011][ T5609] veth0_macvtap: entered promiscuous mode [ 91.529515][ T5606] veth0_macvtap: entered promiscuous mode [ 91.565220][ T5609] veth1_macvtap: entered promiscuous mode [ 91.568276][ T5608] veth0_vlan: entered promiscuous mode [ 91.662554][ T5606] veth1_macvtap: entered promiscuous mode [ 91.774201][ T5608] veth1_vlan: entered promiscuous mode [ 91.847070][ T5605] veth0_macvtap: entered promiscuous mode [ 91.901580][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.951030][ T5339] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.953240][ T5605] veth1_macvtap: entered promiscuous mode [ 92.082669][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.106056][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.177482][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.187075][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.187102][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.347832][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.431396][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.431418][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.473105][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.491390][ T5608] veth0_macvtap: entered promiscuous mode [ 92.742165][ T5608] veth1_macvtap: entered promiscuous mode [ 93.174716][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.174738][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.296395][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.337487][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.337507][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.628844][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.635601][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.635628][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.740241][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.740263][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.752886][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.861903][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.861926][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.301702][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.301724][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.738081][ T1413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.738103][ T1413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.753104][ T1216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.753742][ T1216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.753925][ T1216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.850118][ T1216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.851626][ T1216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.852336][ T1216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.852532][ T1216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.852713][ T1216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.853126][ T1216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289364][ T5856] bridge0: port 3(vlan2) entered blocking state [ 95.293546][ T5856] bridge0: port 3(vlan2) entered disabled state [ 95.293767][ T5856] vlan2: entered allmulticast mode [ 95.293791][ T5856] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 95.342485][ T5856] vlan2: entered promiscuous mode [ 95.342520][ T5856] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 95.357623][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.357644][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.400157][ T1026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.509473][ T1026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.739111][ T1026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.739636][ T1026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.774280][ T5867] FAULT_INJECTION: forcing a failure. [ 95.774280][ T5867] name failslab, interval 1, probability 0, space 0, times 1 [ 95.774341][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz.1.11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.774366][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.774386][ T5867] Call Trace: [ 95.774394][ T5867] [ 95.774403][ T5867] dump_stack_lvl+0xe8/0x150 [ 95.774447][ T5867] should_fail_ex+0x447/0x5e0 [ 95.774479][ T5867] should_failslab+0xa8/0x100 [ 95.774502][ T5867] ? do_getname+0x2e/0x250 [ 95.774527][ T5867] kmem_cache_alloc_noprof+0x99/0x680 [ 95.774570][ T5867] ? do_getname+0x2e/0x250 [ 95.774602][ T5867] do_getname+0x2e/0x250 [ 95.774625][ T5867] ? __getname_maybe_null+0x6a/0x210 [ 95.774652][ T5867] __getname_maybe_null+0x7e/0x210 [ 95.774679][ T5867] vfs_fstatat+0x5d/0x170 [ 95.774702][ T5867] __se_sys_newfstatat+0x118/0x3a0 [ 95.774727][ T5867] ? __pfx___se_sys_newfstatat+0x10/0x10 [ 95.774757][ T5867] ? do_futex+0x3e7/0x4e0 [ 95.774787][ T5867] ? __pfx_do_futex+0x10/0x10 [ 95.774828][ T5867] ? rcu_is_watching+0x16/0xb0 [ 95.774860][ T5867] do_syscall_64+0x166/0x520 [ 95.774884][ T5867] ? trace_irq_disable+0x3b/0x140 [ 95.774904][ T5867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.774924][ T5867] ? clear_bhb_loop+0x70/0xc0 [ 95.774948][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.774967][ T5867] RIP: 0033:0x7f424fbefb19 [ 95.774998][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.775013][ T5867] RSP: 002b:00007f424de46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 95.775037][ T5867] RAX: ffffffffffffffda RBX: 00007f424fe75fa0 RCX: 00007f424fbefb19 [ 95.775053][ T5867] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 95.775067][ T5867] RBP: 00007f424fc87b70 R08: 0000000000000000 R09: 0000000000000000 [ 95.775080][ T5867] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 95.775093][ T5867] R13: 00007f424fe76038 R14: 00007f424fe75fa0 R15: 00007ffd2c86a078 [ 95.775123][ T5867] [ 95.879229][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.918891][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.919353][ T1413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.921961][ T1413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.922003][ T1413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.922037][ T1413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.922071][ T1413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.842606][ T5876] FAULT_INJECTION: forcing a failure. [ 96.842606][ T5876] name failslab, interval 1, probability 0, space 0, times 0 [ 96.842641][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.842666][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.842678][ T5876] Call Trace: [ 96.842686][ T5876] [ 96.842695][ T5876] dump_stack_lvl+0xe8/0x150 [ 96.842737][ T5876] should_fail_ex+0x447/0x5e0 [ 96.842770][ T5876] should_failslab+0xa8/0x100 [ 96.842798][ T5876] __kmalloc_cache_noprof+0x9c/0x670 [ 96.842819][ T5876] ? percpu_ref_init+0xc5/0x350 [ 96.842838][ T5876] ? percpu_ref_init+0xc5/0x350 [ 96.842865][ T5876] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 96.842887][ T5876] percpu_ref_init+0xc5/0x350 [ 96.842906][ T5876] ? __pfx_free_ioctx_users+0x10/0x10 [ 96.842932][ T5876] ioctx_alloc+0x24d/0x840 [ 96.842952][ T5876] ? __might_fault+0xaf/0x130 [ 96.842999][ T5876] __se_sys_io_setup+0x7b/0x1d0 [ 96.843023][ T5876] do_syscall_64+0x166/0x520 [ 96.843047][ T5876] ? trace_irq_disable+0x3b/0x140 [ 96.843068][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.843089][ T5876] ? clear_bhb_loop+0x70/0xc0 [ 96.843112][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.843131][ T5876] RIP: 0033:0x7fdb3148fb19 [ 96.843150][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.843167][ T5876] RSP: 002b:00007fdb2f6de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 96.843189][ T5876] RAX: ffffffffffffffda RBX: 00007fdb31715fa0 RCX: 00007fdb3148fb19 [ 96.843204][ T5876] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 96.843216][ T5876] RBP: 00007fdb31527b70 R08: 0000000000000000 R09: 0000000000000000 [ 96.843228][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.843239][ T5876] R13: 00007fdb31716038 R14: 00007fdb31715fa0 R15: 00007fff84469ea8 [ 96.843272][ T5876] [ 96.910240][ T1213] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.271692][ T5884] capability: warning: `syz.2.17' uses deprecated v2 capabilities in a way that may be insecure [ 97.471088][ T1213] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 97.523888][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.523924][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.523945][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.523987][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.664587][ T5892] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 97.744571][ T1213] usb 1-1: config 0 descriptor?? [ 98.581345][ T1213] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.581388][ T1213] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.581415][ T1213] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.581441][ T1213] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.581467][ T1213] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.581493][ T1213] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.862933][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.185540][ T1213] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.268767][ T5626] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.470565][ T5626] usb 4-1: Using ep0 maxpacket: 8 [ 99.486120][ T5626] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.486182][ T5626] usb 4-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40 [ 99.531309][ T5626] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 7 [ 99.597068][ T5626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.597115][ T5626] usb 4-1: Product: syz [ 99.597130][ T5626] usb 4-1: Manufacturer: syz [ 99.597145][ T5626] usb 4-1: SerialNumber: syz [ 99.612044][ T1213] usb 1-1: USB disconnect, device number 2 [ 100.094807][ T5934] FAULT_INJECTION: forcing a failure. [ 100.094807][ T5934] name failslab, interval 1, probability 0, space 0, times 0 [ 100.094843][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.094866][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.094879][ T5934] Call Trace: [ 100.094887][ T5934] [ 100.094896][ T5934] dump_stack_lvl+0xe8/0x150 [ 100.094941][ T5934] should_fail_ex+0x447/0x5e0 [ 100.094975][ T5934] should_failslab+0xa8/0x100 [ 100.095004][ T5934] __kmalloc_cache_noprof+0x9c/0x670 [ 100.095027][ T5934] ? ufs_init_fs_context+0x54/0x2a0 [ 100.095061][ T5934] ? ufs_init_fs_context+0x54/0x2a0 [ 100.095098][ T5934] ufs_init_fs_context+0x54/0x2a0 [ 100.095133][ T5934] alloc_fs_context+0x99e/0xd00 [ 100.095167][ T5934] __se_sys_fsopen+0x118/0x370 [ 100.095195][ T5934] do_syscall_64+0x166/0x520 [ 100.095217][ T5934] ? trace_irq_disable+0x3b/0x140 [ 100.095250][ T5934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.095272][ T5934] ? clear_bhb_loop+0x70/0xc0 [ 100.095299][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.095321][ T5934] RIP: 0033:0x7f424fbefb19 [ 100.095342][ T5934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.095358][ T5934] RSP: 002b:00007f424de46028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 100.095379][ T5934] RAX: ffffffffffffffda RBX: 00007f424fe75fa0 RCX: 00007f424fbefb19 [ 100.095395][ T5934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 100.095410][ T5934] RBP: 00007f424fc87b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.095424][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.095438][ T5934] R13: 00007f424fe76038 R14: 00007f424fe75fa0 R15: 00007ffd2c86a078 [ 100.095470][ T5934] [ 100.520685][ T5940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.38'. [ 100.603874][ T5941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.38'. [ 100.632308][ T5937] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 100.698925][ T48] IPVS: starting estimator thread 0... [ 100.818607][ T5943] IPVS: using max 9 ests per chain, 21600 per kthread [ 100.955422][ T5626] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.972897][ T5626] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 101.219261][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 101.364577][ T5626] usb 4-1: USB disconnect, device number 2 [ 101.594143][ T5959] batadv_slave_0: entered promiscuous mode [ 101.644406][ T5957] batadv_slave_0: left promiscuous mode [ 101.925579][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.237717][ T5626] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.417500][ T5626] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 102.439472][ T5626] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.439541][ T5626] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.439585][ T5626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.498823][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 102.685477][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 102.685516][ T9] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 102.692059][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.692115][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.692137][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 102.692179][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.906699][ T9] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 103.282668][ T5626] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -71 [ 103.293356][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 103.307646][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 103.307738][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 103.315406][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 103.383700][ T5965] syz.2.49 (5965) used greatest stack depth: 18088 bytes left [ 103.436711][ T5626] usb 4-1: USB disconnect, device number 3 [ 103.521600][ T9] usb 1-1: USB disconnect, device number 3 [ 103.640781][ T5984] Zero length message leads to an empty skb [ 103.795297][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 103.842506][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 103.885030][ T5987] netlink: 'syz.4.57': attribute type 2 has an invalid length. [ 103.906411][ T9] keyspan 1-1:1.0: device disconnected [ 104.315774][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 105.221153][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.380025][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 105.380844][ T9] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.387656][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 105.387709][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.387737][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.387762][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.387786][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 105.391601][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 105.391654][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.391682][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.391707][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.391731][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 105.402325][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 105.402381][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.402408][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.402433][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.402457][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 105.568498][ T9] usb 3-1: string descriptor 0 read error: -22 [ 105.568637][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.918666][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 106.104167][ T9] usb 3-1: USB disconnect, device number 2 [ 107.353471][ T5626] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.548545][ T5626] usb 3-1: Using ep0 maxpacket: 32 [ 107.609177][ T5626] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.609237][ T5626] usb 3-1: New USB device found: idVendor=041e, idProduct=3263, bcdDevice=0.40 [ 107.610815][ T5626] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 107.617334][ T5626] usb 3-1: can't read configurations, error -71 [ 108.212372][ T6097] FAULT_INJECTION: forcing a failure. [ 108.212372][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 108.212407][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.4.103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.212432][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.212444][ T6097] Call Trace: [ 108.212452][ T6097] [ 108.212460][ T6097] dump_stack_lvl+0xe8/0x150 [ 108.212503][ T6097] should_fail_ex+0x447/0x5e0 [ 108.212539][ T6097] ? alloc_slab_obj_exts+0x5c/0x180 [ 108.212571][ T6097] should_failslab+0xa8/0x100 [ 108.212598][ T6097] ? alloc_slab_obj_exts+0x5c/0x180 [ 108.212627][ T6097] __kmalloc_flags_noprof+0x123/0x800 [ 108.212653][ T6097] ? alloc_slab_obj_exts+0x5c/0x180 [ 108.212699][ T6097] alloc_slab_obj_exts+0x5c/0x180 [ 108.212733][ T6097] __memcg_slab_post_alloc_hook+0x63d/0xe00 [ 108.212779][ T6097] ? __d_alloc+0x37/0x830 [ 108.212811][ T6097] kmem_cache_alloc_lru_noprof+0x417/0x680 [ 108.212839][ T6097] ? __d_lookup+0x66/0x790 [ 108.212856][ T6097] ? __d_alloc+0x37/0x830 [ 108.212882][ T6097] ? __d_alloc+0x37/0x830 [ 108.212918][ T6097] __d_alloc+0x37/0x830 [ 108.212954][ T6097] d_alloc+0x4b/0x190 [ 108.212981][ T6097] ? lookup_one_qstr_excl+0xc4/0x360 [ 108.213016][ T6097] lookup_one_qstr_excl+0xd8/0x360 [ 108.213053][ T6097] start_creating_noperm+0x80/0xb0 [ 108.213085][ T6097] do_mq_open+0x25f/0x7b0 [ 108.213123][ T6097] ? __pfx_do_mq_open+0x10/0x10 [ 108.213151][ T6097] ? __pfx_do_futex+0x10/0x10 [ 108.213177][ T6097] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 108.213216][ T6097] __x64_sys_mq_open+0x185/0x1e0 [ 108.213244][ T6097] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 108.213287][ T6097] do_syscall_64+0x166/0x520 [ 108.213308][ T6097] ? trace_irq_disable+0x3b/0x140 [ 108.213329][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.213350][ T6097] ? clear_bhb_loop+0x70/0xc0 [ 108.213374][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.213395][ T6097] RIP: 0033:0x7efeed4afb19 [ 108.213415][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.213432][ T6097] RSP: 002b:00007efeeb706028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 108.213454][ T6097] RAX: ffffffffffffffda RBX: 00007efeed735fa0 RCX: 00007efeed4afb19 [ 108.213469][ T6097] RDX: 0000000000000009 RSI: 0000000000000040 RDI: 0000200000000600 [ 108.213483][ T6097] RBP: 00007efeed547b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.213496][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.213509][ T6097] R13: 00007efeed736038 R14: 00007efeed735fa0 R15: 00007ffdfdc9afd8 [ 108.213543][ T6097] [ 108.629920][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.679669][ T6060] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.733423][ T6104] FAULT_INJECTION: forcing a failure. [ 108.733423][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 108.733457][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.4.106 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.733481][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.733493][ T6104] Call Trace: [ 108.733501][ T6104] [ 108.733510][ T6104] dump_stack_lvl+0xe8/0x150 [ 108.733549][ T6104] should_fail_ex+0x447/0x5e0 [ 108.733579][ T6104] ? sock_alloc_inode+0x2c/0x1a0 [ 108.733616][ T6104] should_failslab+0xa8/0x100 [ 108.733644][ T6104] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 108.733680][ T6104] ? sock_alloc_inode+0x2c/0x1a0 [ 108.733712][ T6104] ? __pfx_sock_alloc_inode+0x10/0x10 [ 108.733737][ T6104] sock_alloc_inode+0x2c/0x1a0 [ 108.733763][ T6104] ? __pfx_sock_alloc_inode+0x10/0x10 [ 108.733787][ T6104] alloc_inode+0x6a/0x1b0 [ 108.733817][ T6104] __sock_create+0x127/0xac0 [ 108.733853][ T6104] __sys_socketpair+0x127/0x5e0 [ 108.733891][ T6104] __x64_sys_socketpair+0x9b/0xb0 [ 108.733922][ T6104] do_syscall_64+0x166/0x520 [ 108.733945][ T6104] ? trace_irq_disable+0x3b/0x140 [ 108.733967][ T6104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.733988][ T6104] ? clear_bhb_loop+0x70/0xc0 [ 108.734013][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.734034][ T6104] RIP: 0033:0x7efeed4afb19 [ 108.734052][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.734070][ T6104] RSP: 002b:00007efeeb706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 108.734091][ T6104] RAX: ffffffffffffffda RBX: 00007efeed735fa0 RCX: 00007efeed4afb19 [ 108.734106][ T6104] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 108.734118][ T6104] RBP: 00007efeed547b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.734131][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.734143][ T6104] R13: 00007efeed736038 R14: 00007efeed735fa0 R15: 00007ffdfdc9afd8 [ 108.734176][ T6104] [ 108.734185][ T6104] socket: no more sockets [ 109.306023][ T6119] Bluetooth: MGMT ver 1.23 [ 110.321810][ T6155] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.069148][ T6172] mac80211_hwsim hwsim7 syzkaller1: entered promiscuous mode [ 111.069179][ T6172] mac80211_hwsim hwsim7 syzkaller1: entered allmulticast mode [ 111.309803][ T6179] sctp: [Deprecated]: syz.0.134 (pid 6179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.309803][ T6179] Use struct sctp_sack_info instead [ 111.377672][ T6185] sctp: [Deprecated]: syz.0.134 (pid 6185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.377672][ T6185] Use struct sctp_sack_info instead [ 111.977040][ T6202] tun0: tun_chr_ioctl cmd 1074025677 [ 111.977173][ T6202] tun0: linktype set to 778 [ 111.980208][ T6202] tun0: tun_chr_ioctl cmd 1074025681 [ 112.143839][ T6209] lo: entered allmulticast mode [ 112.164463][ T6205] lo: left allmulticast mode [ 112.628561][ T5626] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.704004][ T6238] FAULT_INJECTION: forcing a failure. [ 112.704004][ T6238] name failslab, interval 1, probability 0, space 0, times 0 [ 112.704038][ T6238] CPU: 1 UID: 0 PID: 6238 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.704063][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.704075][ T6238] Call Trace: [ 112.704083][ T6238] [ 112.704092][ T6238] dump_stack_lvl+0xe8/0x150 [ 112.704133][ T6238] should_fail_ex+0x447/0x5e0 [ 112.704173][ T6238] should_failslab+0xa8/0x100 [ 112.704198][ T6238] ? key_alloc+0x30e/0xfe0 [ 112.704219][ T6238] kmem_cache_alloc_noprof+0x99/0x680 [ 112.704253][ T6238] ? key_alloc+0x30e/0xfe0 [ 112.704279][ T6238] key_alloc+0x30e/0xfe0 [ 112.704313][ T6238] keyring_alloc+0x45/0xb0 [ 112.704347][ T6238] lookup_user_key+0x50d/0x12c0 [ 112.704387][ T6238] ? __pfx_lookup_user_key+0x10/0x10 [ 112.704417][ T6238] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 112.704458][ T6238] ? strncpy_from_user+0x150/0x2c0 [ 112.704485][ T6238] __se_sys_add_key+0x315/0x420 [ 112.704511][ T6238] ? __pfx___se_sys_add_key+0x10/0x10 [ 112.704541][ T6238] ? __x64_sys_add_key+0x20/0xc0 [ 112.704567][ T6238] do_syscall_64+0x166/0x520 [ 112.704589][ T6238] ? trace_irq_disable+0x3b/0x140 [ 112.704608][ T6238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.704627][ T6238] ? clear_bhb_loop+0x70/0xc0 [ 112.704651][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.704673][ T6238] RIP: 0033:0x7f6265a2fb19 [ 112.704691][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.704708][ T6238] RSP: 002b:00007f6263c7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 112.704729][ T6238] RAX: ffffffffffffffda RBX: 00007f6265cb5fa0 RCX: 00007f6265a2fb19 [ 112.704744][ T6238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500 [ 112.704757][ T6238] RBP: 00007f6265ac7b70 R08: ffffffffffffffff R09: 0000000000000000 [ 112.704771][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.704784][ T6238] R13: 00007f6265cb6038 R14: 00007f6265cb5fa0 R15: 00007ffedcdf3f08 [ 112.704817][ T6238] [ 112.948660][ T5626] usb 5-1: Using ep0 maxpacket: 32 [ 112.949473][ T5626] usb 5-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 112.952256][ T5626] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.952281][ T5626] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.952303][ T5626] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.956534][ T5626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.956557][ T5626] usb 5-1: Product: syz [ 112.956569][ T5626] usb 5-1: Manufacturer: syz [ 112.956581][ T5626] usb 5-1: SerialNumber: syz [ 113.034316][ T5626] usb 5-1: config 0 descriptor?? [ 113.148603][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.287721][ T6254] FAULT_INJECTION: forcing a failure. [ 113.287721][ T6254] name failslab, interval 1, probability 0, space 0, times 0 [ 113.287756][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.287779][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.287790][ T6254] Call Trace: [ 113.287797][ T6254] [ 113.287805][ T6254] dump_stack_lvl+0xe8/0x150 [ 113.287847][ T6254] should_fail_ex+0x447/0x5e0 [ 113.287880][ T6254] should_failslab+0xa8/0x100 [ 113.287908][ T6254] __kmalloc_cache_noprof+0x9c/0x670 [ 113.287930][ T6254] ? alloc_fs_context+0x9b2/0xd00 [ 113.287951][ T6254] ? __se_sys_fsopen+0x19f/0x370 [ 113.287973][ T6254] ? __se_sys_fsopen+0x19f/0x370 [ 113.288005][ T6254] __se_sys_fsopen+0x19f/0x370 [ 113.288032][ T6254] do_syscall_64+0x166/0x520 [ 113.288056][ T6254] ? trace_irq_disable+0x3b/0x140 [ 113.288076][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.288097][ T6254] ? clear_bhb_loop+0x70/0xc0 [ 113.288136][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.288156][ T6254] RIP: 0033:0x7f424fbefb19 [ 113.288177][ T6254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.288196][ T6254] RSP: 002b:00007f424de46028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 113.288218][ T6254] RAX: ffffffffffffffda RBX: 00007f424fe75fa0 RCX: 00007f424fbefb19 [ 113.288235][ T6254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 113.288249][ T6254] RBP: 00007f424fc87b70 R08: 0000000000000000 R09: 0000000000000000 [ 113.288263][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.288274][ T6254] R13: 00007f424fe76038 R14: 00007f424fe75fa0 R15: 00007ffd2c86a078 [ 113.288302][ T6254] [ 113.309310][ T9] usb 4-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 113.310768][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.358558][ T5969] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.499991][ T5626] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 113.541432][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.541461][ T9] usb 4-1: Product: syz [ 113.541475][ T9] usb 4-1: Manufacturer: syz [ 113.541489][ T9] usb 4-1: SerialNumber: syz [ 113.568498][ T946] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.590983][ T9] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 113.591859][ T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 113.603659][ T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 113.603747][ T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 113.603827][ T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 113.603895][ T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 113.603976][ T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 113.604055][ T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 113.621885][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 113.668691][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 113.669491][ T5969] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 113.670913][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.670942][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 113.670978][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.748219][ T5969] usb 1-1: config 0 descriptor?? [ 113.904961][ T946] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 113.926168][ T946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.927027][ T6249] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 113.929579][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.954697][ T946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 113.954732][ T946] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 113.954776][ T946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.006982][ T5969] hub 1-1:0.0: USB hub found [ 114.105232][ T10] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 114.125250][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.125365][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.125393][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 114.149232][ T5626] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 114.167526][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.167554][ T10] usb 2-1: Product: syz [ 114.167567][ T10] usb 2-1: Manufacturer: syz [ 114.167582][ T10] usb 2-1: SerialNumber: syz [ 114.202942][ T5626] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 114.280316][ T5969] hub 1-1:0.0: 1 port detected [ 114.375136][ T5626] usb 5-1: USB disconnect, device number 2 [ 114.612483][ T10] cdc_ncm 2-1:1.0: skipping garbage [ 114.615520][ T30] usb 4-1: USB disconnect, device number 4 [ 114.702485][ T30] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 114.723806][ T30] keyspan 4-1:1.0: device disconnected [ 114.790516][ T6256] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 114.937280][ T946] cxacru 3-1:1.0: send of cm 0x84 failed (-71) [ 114.937390][ T946] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 114.938328][ T946] cxacru 3-1:1.0: send of cm 0x88 failed (-71) [ 114.961858][ T946] ATM dev 0: poll status: error -71 [ 114.961977][ T946] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 114.962015][ T946] ATM dev 0: usbatm_submit_urb: urb 0xffff888034c03800 submission failed (-8)! [ 114.965503][ T946] ATM dev 0: usbatm_submit_urb: urb 0xffff888034c03500 submission failed (-8)! [ 114.965534][ T946] ATM dev 0: usbatm_submit_urb: urb 0xffff888034c03100 submission failed (-8)! [ 114.965556][ T946] ATM dev 0: usbatm_submit_urb: urb 0xffff888034c03b00 submission failed (-8)! [ 115.039640][ T946] usb 3-1: USB disconnect, device number 5 [ 115.459916][ T1228] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 115.463547][ T6256] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 115.679269][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 115.688971][ T10] cdc_ncm 2-1:1.0: bind() failure [ 115.715624][ T10] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 115.716411][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 115.717921][ T10] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 115.761476][ T10] usb 2-1: USB disconnect, device number 2 [ 116.046304][ T6281] FAULT_INJECTION: forcing a failure. [ 116.046304][ T6281] name failslab, interval 1, probability 0, space 0, times 0 [ 116.046349][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.4.177 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 116.046365][ T6281] Tainted: [L]=SOFTLOCKUP [ 116.046370][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.046380][ T6281] Call Trace: [ 116.046385][ T6281] [ 116.046391][ T6281] dump_stack_lvl+0xe8/0x150 [ 116.046423][ T6281] should_fail_ex+0x447/0x5e0 [ 116.046440][ T6281] should_failslab+0xa8/0x100 [ 116.046455][ T6281] __kmalloc_cache_noprof+0x9c/0x670 [ 116.046467][ T6281] ? sctp_endpoint_new+0xe1/0xa70 [ 116.046480][ T6281] ? sctp_endpoint_new+0xe1/0xa70 [ 116.046497][ T6281] sctp_endpoint_new+0xe1/0xa70 [ 116.046515][ T6281] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 116.046529][ T6281] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.046548][ T6281] sctp_init_sock+0x94e/0x1380 [ 116.046562][ T6281] ? sock_init_data_uid+0x6ad/0x8f0 [ 116.046579][ T6281] inet_create+0xd2c/0x1000 [ 116.046590][ T6281] ? inet_create+0x9d/0x1000 [ 116.046603][ T6281] __sock_create+0x4b5/0xac0 [ 116.046623][ T6281] __sys_socket+0xd6/0x1b0 [ 116.046639][ T6281] __x64_sys_socket+0x7a/0x90 [ 116.046663][ T6281] do_syscall_64+0x166/0x520 [ 116.046675][ T6281] ? trace_irq_disable+0x3b/0x140 [ 116.046688][ T6281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.046700][ T6281] ? clear_bhb_loop+0x70/0xc0 [ 116.046714][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.046725][ T6281] RIP: 0033:0x7efeed4afb19 [ 116.046742][ T6281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.046752][ T6281] RSP: 002b:00007efeeb706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 116.046766][ T6281] RAX: ffffffffffffffda RBX: 00007efeed735fa0 RCX: 00007efeed4afb19 [ 116.046774][ T6281] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 116.046787][ T6281] RBP: 00007efeed547b70 R08: 0000000000000000 R09: 0000000000000000 [ 116.046794][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.046804][ T6281] R13: 00007efeed736038 R14: 00007efeed735fa0 R15: 00007ffdfdc9afd8 [ 116.046825][ T6281] [ 116.359238][ T9] usb 1-1: USB disconnect, device number 4 [ 117.280249][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 117.300943][ T6313] process 'syz.3.193' launched './file0' with NULL argv: empty string added [ 117.301720][ T6310] netlink: 72 bytes leftover after parsing attributes in process `syz.1.190'. [ 117.504247][ T6319] tap0: tun_chr_ioctl cmd 1074025675 [ 117.504272][ T6319] tap0: persist enabled [ 117.504742][ T6319] tap0: tun_chr_ioctl cmd 1074025675 [ 117.504760][ T6319] tap0: persist enabled [ 117.946974][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 118.608496][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.768533][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 118.769419][ T30] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 118.802949][ T30] usb 2-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 118.803002][ T30] usb 2-1: config 65 interface 0 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.803029][ T30] usb 2-1: config 65 interface 0 has no altsetting 0 [ 118.807358][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.807387][ T30] usb 2-1: Product: syz [ 118.807401][ T30] usb 2-1: Manufacturer: syz [ 118.807416][ T30] usb 2-1: SerialNumber: syz [ 119.202920][ T30] cdc_ether 2-1:65.0: probe with driver cdc_ether failed with error -22 [ 119.227555][ T30] usb 2-1: USB disconnect, device number 3 [ 119.357020][ T6396] FAULT_INJECTION: forcing a failure. [ 119.357020][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 119.357067][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.0.225 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 119.357097][ T6396] Tainted: [L]=SOFTLOCKUP [ 119.357104][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.357116][ T6396] Call Trace: [ 119.357124][ T6396] [ 119.357133][ T6396] dump_stack_lvl+0xe8/0x150 [ 119.357176][ T6396] should_fail_ex+0x447/0x5e0 [ 119.357208][ T6396] should_failslab+0xa8/0x100 [ 119.357235][ T6396] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 119.357259][ T6396] ? copy_array+0x63/0xf0 [ 119.357280][ T6396] ? copy_array+0x63/0xf0 [ 119.357304][ T6396] ? copy_array+0x63/0xf0 [ 119.357326][ T6396] krealloc_node_align_noprof+0x19a/0x390 [ 119.357373][ T6396] copy_array+0x63/0xf0 [ 119.357398][ T6396] bpf_copy_verifier_state+0xad/0x1300 [ 119.357421][ T6396] ? push_stack+0x7e/0x380 [ 119.357443][ T6396] ? push_stack+0x7e/0x380 [ 119.357472][ T6396] push_stack+0x1b9/0x380 [ 119.357500][ T6396] do_check_insn+0x6681/0xb800 [ 119.357534][ T6396] ? __pfx_do_check_insn+0x10/0x10 [ 119.357549][ T6396] ? krealloc_node_align_noprof+0x235/0x390 [ 119.357576][ T6396] ? bpf_push_jmp_history+0x4d3/0xb00 [ 119.357610][ T6396] do_check_common+0x557a/0x7590 [ 119.357630][ T6396] ? add_expr+0x563/0x6e0 [ 119.357704][ T6396] ? __pfx_do_check_common+0x10/0x10 [ 119.357737][ T6396] ? mark_fastcall_patterns+0x10e1/0x1140 [ 119.357787][ T6396] do_check_main+0x95/0x1f0 [ 119.357820][ T6396] bpf_check+0x3034/0x34e0 [ 119.357860][ T6396] ? ktime_get_with_offset+0x93/0x2d0 [ 119.357882][ T6396] ? ktime_get_with_offset+0x93/0x2d0 [ 119.357904][ T6396] ? __pfx_bpf_check+0x10/0x10 [ 119.357944][ T6396] ? bpf_obj_name_cpy+0x194/0x1e0 [ 119.357986][ T6396] bpf_prog_load+0x14da/0x1c60 [ 119.358023][ T6396] ? __pfx_bpf_prog_load+0x10/0x10 [ 119.358065][ T6396] __sys_bpf+0xd86/0xe00 [ 119.358093][ T6396] ? __pfx___sys_bpf+0x10/0x10 [ 119.358116][ T6396] ? do_futex+0x458/0x4e0 [ 119.358162][ T6396] ? rcu_is_watching+0x16/0xb0 [ 119.358187][ T6396] __x64_sys_bpf+0xba/0xd0 [ 119.358208][ T6396] do_syscall_64+0x166/0x520 [ 119.358228][ T6396] ? trace_irq_disable+0x3b/0x140 [ 119.358246][ T6396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.358263][ T6396] ? clear_bhb_loop+0x70/0xc0 [ 119.358286][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.358302][ T6396] RIP: 0033:0x7ff9844efb19 [ 119.358321][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.358336][ T6396] RSP: 002b:00007ff98273e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.358355][ T6396] RAX: ffffffffffffffda RBX: 00007ff984775fa0 RCX: 00007ff9844efb19 [ 119.358369][ T6396] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 119.358380][ T6396] RBP: 00007ff984587b70 R08: 0000000000000000 R09: 0000000000000000 [ 119.358391][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.358401][ T6396] R13: 00007ff984776038 R14: 00007ff984775fa0 R15: 00007ffc325c5e98 [ 119.358428][ T6396] [ 120.567228][ T6421] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.284223][ T6463] FAULT_INJECTION: forcing a failure. [ 121.284223][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 121.284260][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.2.248 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 121.284290][ T6463] Tainted: [L]=SOFTLOCKUP [ 121.284298][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.284310][ T6463] Call Trace: [ 121.284318][ T6463] [ 121.284327][ T6463] dump_stack_lvl+0xe8/0x150 [ 121.284368][ T6463] should_fail_ex+0x447/0x5e0 [ 121.284400][ T6463] should_failslab+0xa8/0x100 [ 121.284425][ T6463] ? alloc_empty_file+0x5b/0x1d0 [ 121.284453][ T6463] kmem_cache_alloc_noprof+0x99/0x680 [ 121.284488][ T6463] ? alloc_empty_file+0x5b/0x1d0 [ 121.284521][ T6463] alloc_empty_file+0x5b/0x1d0 [ 121.284550][ T6463] alloc_file_pseudo+0x110/0x1e0 [ 121.284581][ T6463] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 121.284619][ T6463] sock_alloc_file+0xb8/0x2f0 [ 121.284643][ T6463] ? __sys_socket+0x12b/0x1b0 [ 121.284674][ T6463] __sys_socket+0x13f/0x1b0 [ 121.284706][ T6463] __x64_sys_socket+0x7a/0x90 [ 121.284736][ T6463] do_syscall_64+0x166/0x520 [ 121.284759][ T6463] ? trace_irq_disable+0x3b/0x140 [ 121.284781][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.284802][ T6463] ? clear_bhb_loop+0x70/0xc0 [ 121.284828][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.284849][ T6463] RIP: 0033:0x7f6265a2fb19 [ 121.284868][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.284893][ T6463] RSP: 002b:00007f6263c7dfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 121.284916][ T6463] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6265a2fb19 [ 121.284931][ T6463] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 121.284943][ T6463] RBP: 00007f6265ac7b70 R08: 0000000000000000 R09: 0000000000000000 [ 121.284957][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.284972][ T6463] R13: 00007f6265cb6038 R14: 00007f6265cb5fa0 R15: 00007ffedcdf3f08 [ 121.285005][ T6463] [ 122.313190][ T6491] netlink: 64 bytes leftover after parsing attributes in process `syz.2.259'. [ 123.765608][ T6526] input: syz0 as /devices/virtual/input/input5 [ 124.812652][ T6531] device-mapper: ioctl: device has been removed from the dev hash table. [ 125.418555][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.589195][ T30] usb 2-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 125.593273][ T30] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 125.593291][ T30] usb 2-1: Product: syz [ 125.593299][ T30] usb 2-1: SerialNumber: syz [ 125.626070][ T30] usb 2-1: config 0 descriptor?? [ 125.897201][ T30] hso 2-1:0.0: Failed to find BULK eps [ 126.102038][ T9] usb 2-1: USB disconnect, device number 4 [ 126.174643][ T6577] FAULT_INJECTION: forcing a failure. [ 126.174643][ T6577] name fail_futex, interval 1, probability 0, space 0, times 1 [ 126.174680][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.3.295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 126.174707][ T6577] Tainted: [L]=SOFTLOCKUP [ 126.174713][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.174725][ T6577] Call Trace: [ 126.174732][ T6577] [ 126.174741][ T6577] dump_stack_lvl+0xe8/0x150 [ 126.174778][ T6577] should_fail_ex+0x447/0x5e0 [ 126.174814][ T6577] get_futex_key+0x1ab/0x1410 [ 126.174839][ T6577] ? _copy_from_user+0x4c/0xb0 [ 126.174871][ T6577] ? __lock_acquire+0x747/0x2de0 [ 126.174901][ T6577] ? __pfx_get_futex_key+0x10/0x10 [ 126.174931][ T6577] futex_wake+0x119/0x600 [ 126.174964][ T6577] ? __pfx_futex_wake+0x10/0x10 [ 126.174992][ T6577] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.175028][ T6577] do_futex+0x458/0x4e0 [ 126.175059][ T6577] ? __pfx_do_futex+0x10/0x10 [ 126.175084][ T6577] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 126.175121][ T6577] __se_sys_futex+0x3a8/0x450 [ 126.175152][ T6577] ? ksys_write+0x248/0x270 [ 126.175171][ T6577] ? __pfx___se_sys_futex+0x10/0x10 [ 126.175198][ T6577] ? __pfx_ksys_write+0x10/0x10 [ 126.175223][ T6577] ? __x64_sys_futex+0x21/0xf0 [ 126.175253][ T6577] do_syscall_64+0x166/0x520 [ 126.175276][ T6577] ? trace_irq_disable+0x3b/0x140 [ 126.175298][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.175319][ T6577] ? clear_bhb_loop+0x70/0xc0 [ 126.175344][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.175364][ T6577] RIP: 0033:0x7fdb3148fb19 [ 126.175383][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.175401][ T6577] RSP: 002b:00007fdb2f6de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.175423][ T6577] RAX: ffffffffffffffda RBX: 00007fdb31715fa8 RCX: 00007fdb3148fb19 [ 126.175438][ T6577] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdb31715fac [ 126.175452][ T6577] RBP: 00007fdb31715fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 126.175466][ T6577] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 126.175479][ T6577] R13: 00007fdb31716038 R14: 00007fff84469dc0 R15: 00007fff84469ea8 [ 126.175521][ T6577] [ 126.213573][ T6579] FAULT_INJECTION: forcing a failure. [ 126.213573][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 126.213610][ T6579] CPU: 1 UID: 0 PID: 6579 Comm: syz.0.293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 126.213641][ T6579] Tainted: [L]=SOFTLOCKUP [ 126.213649][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.213660][ T6579] Call Trace: [ 126.213668][ T6579] [ 126.213676][ T6579] dump_stack_lvl+0xe8/0x150 [ 126.213716][ T6579] should_fail_ex+0x447/0x5e0 [ 126.213749][ T6579] should_failslab+0xa8/0x100 [ 126.213775][ T6579] ? security_file_alloc+0x34/0x310 [ 126.213804][ T6579] kmem_cache_alloc_noprof+0x99/0x680 [ 126.213835][ T6579] ? rcu_is_watching+0x16/0xb0 [ 126.213859][ T6579] ? security_file_alloc+0x34/0x310 [ 126.213886][ T6579] ? alloc_empty_file+0x5b/0x1d0 [ 126.213916][ T6579] security_file_alloc+0x34/0x310 [ 126.213945][ T6579] init_file+0x96/0x2d0 [ 126.213973][ T6579] alloc_empty_file+0x74/0x1d0 [ 126.213998][ T6579] alloc_file_pseudo+0x110/0x1e0 [ 126.214035][ T6579] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 126.214066][ T6579] ? alloc_anon_inode+0x194/0x330 [ 126.214101][ T6579] aio_setup_ring+0x1eb/0xe20 [ 126.214124][ T6579] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 126.214164][ T6579] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 126.214194][ T6579] ? __pfx_aio_setup_ring+0x10/0x10 [ 126.214227][ T6579] ioctx_alloc+0x323/0x840 [ 126.214247][ T6579] ? __might_fault+0xaf/0x130 [ 126.214282][ T6579] __se_sys_io_setup+0x7b/0x1d0 [ 126.214302][ T6579] do_syscall_64+0x166/0x520 [ 126.214324][ T6579] ? trace_irq_disable+0x3b/0x140 [ 126.214346][ T6579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.214367][ T6579] ? clear_bhb_loop+0x70/0xc0 [ 126.214392][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.214412][ T6579] RIP: 0033:0x7ff9844efb19 [ 126.214430][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.214447][ T6579] RSP: 002b:00007ff98273e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 126.214467][ T6579] RAX: ffffffffffffffda RBX: 00007ff984775fa0 RCX: 00007ff9844efb19 [ 126.214482][ T6579] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 126.214495][ T6579] RBP: 00007ff984587b70 R08: 0000000000000000 R09: 0000000000000000 [ 126.214508][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.214520][ T6579] R13: 00007ff984776038 R14: 00007ff984775fa0 R15: 00007ffc325c5e98 [ 126.214552][ T6579] [ 126.788751][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.951313][ T30] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 126.952579][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.952610][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.952625][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.952649][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.969063][ T30] usb 5-1: config 0 descriptor?? [ 127.014579][ T1228] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.168510][ T1228] usb 1-1: Using ep0 maxpacket: 32 [ 127.169255][ T1228] usb 1-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 127.170943][ T1228] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 127.170993][ T1228] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 127.171610][ T1228] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 127.171636][ T1228] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 127.171658][ T1228] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.174899][ T1228] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 127.174924][ T1228] usb 1-1: Product: syz [ 127.174938][ T1228] usb 1-1: Manufacturer: syz [ 127.174952][ T1228] usb 1-1: SerialNumber: syz [ 127.290263][ T1228] usb 1-1: config 0 descriptor?? [ 127.315933][ T1228] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 127.333064][ T1228] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 127.577815][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.577869][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.577897][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.577924][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.577949][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.577975][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 127.653411][ T5626] usb 1-1: USB disconnect, device number 5 [ 127.653464][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 127.706912][ T6609] FAULT_INJECTION: forcing a failure. [ 127.706912][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 127.706953][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.1.305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 127.706982][ T6609] Tainted: [L]=SOFTLOCKUP [ 127.706988][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.707000][ T6609] Call Trace: [ 127.707008][ T6609] [ 127.707017][ T6609] dump_stack_lvl+0xe8/0x150 [ 127.707060][ T6609] should_fail_ex+0x447/0x5e0 [ 127.707093][ T6609] should_failslab+0xa8/0x100 [ 127.707119][ T6609] ? vm_area_dup+0x28/0x750 [ 127.707138][ T6609] kmem_cache_alloc_noprof+0x99/0x680 [ 127.707172][ T6609] ? vm_area_dup+0x28/0x750 [ 127.707192][ T6609] ? vma_merge_new_range+0x598/0x730 [ 127.707220][ T6609] vm_area_dup+0x28/0x750 [ 127.707238][ T6609] ? copy_vma+0x6c3/0xbb0 [ 127.707266][ T6609] copy_vma+0x6d5/0xbb0 [ 127.707298][ T6609] ? __pfx_copy_vma+0x10/0x10 [ 127.707328][ T6609] ? __mas_set_range+0x11a/0x3a0 [ 127.707369][ T6609] ? rcu_is_watching+0x16/0xb0 [ 127.707394][ T6609] ? percpu_counter_add_batch+0xec/0x1d0 [ 127.707429][ T6609] move_vma+0xbaf/0x1ce0 [ 127.707472][ T6609] ? __pfx_move_vma+0x10/0x10 [ 127.707517][ T6609] ? arch_get_unmapped_area_topdown+0x269/0xc50 [ 127.707548][ T6609] ? mtree_load+0x12a/0x780 [ 127.707584][ T6609] ? mtree_load+0x12a/0x780 [ 127.707612][ T6609] ? __futex_wait+0x3c9/0x480 [ 127.707652][ T6609] ? cap_mmap_addr+0xaa/0xf0 [ 127.707682][ T6609] ? bpf_lsm_mmap_addr+0x9/0x50 [ 127.707702][ T6609] ? security_mmap_addr+0x71/0x240 [ 127.707739][ T6609] mremap_to+0x851/0x950 [ 127.707765][ T6609] ? may_expand_vm+0x24d/0x390 [ 127.707803][ T6609] ? check_prep_vma+0xa4c/0xcc0 [ 127.707826][ T6609] ? __pfx_mremap_to+0x10/0x10 [ 127.707860][ T6609] ? __pfx_check_prep_vma+0x10/0x10 [ 127.707894][ T6609] __se_sys_mremap+0xeb1/0x1260 [ 127.707928][ T6609] ? do_futex+0x3e7/0x4e0 [ 127.707968][ T6609] ? __pfx___se_sys_mremap+0x10/0x10 [ 127.707996][ T6609] ? __se_sys_futex+0x3a8/0x450 [ 127.708041][ T6609] ? __x64_sys_mremap+0x20/0xc0 [ 127.708067][ T6609] do_syscall_64+0x166/0x520 [ 127.708091][ T6609] ? trace_irq_disable+0x3b/0x140 [ 127.708115][ T6609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.708137][ T6609] ? clear_bhb_loop+0x70/0xc0 [ 127.708159][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.708179][ T6609] RIP: 0033:0x7f424fbefb19 [ 127.708199][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.708217][ T6609] RSP: 002b:00007f424de46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 127.708239][ T6609] RAX: ffffffffffffffda RBX: 00007f424fe75fa0 RCX: 00007f424fbefb19 [ 127.708256][ T6609] RDX: 0000000000600000 RSI: 0000000000009000 RDI: 0000200000000000 [ 127.708270][ T6609] RBP: 00007f424fc87b70 R08: 0000200000a00000 R09: 0000000000000000 [ 127.708285][ T6609] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 127.708298][ T6609] R13: 00007f424fe76038 R14: 00007f424fe75fa0 R15: 00007ffd2c86a078 [ 127.708333][ T6609] [ 127.710168][ T5626] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 127.832240][ T30] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 127.902950][ T6592] ldusb: No device or device unplugged -19 [ 127.985924][ T30] usb 5-1: USB disconnect, device number 3 [ 128.286565][ T6611] fido_id[6611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 128.410104][ T6623] veth1_to_hsr: entered allmulticast mode [ 128.412082][ T6623] veth1_to_hsr: left allmulticast mode [ 128.708766][ T1228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.858444][ T1228] usb 2-1: Using ep0 maxpacket: 8 [ 128.859349][ T1228] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.860604][ T1228] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 128.860649][ T1228] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.860669][ T1228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.860689][ T1228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.860710][ T1228] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.860743][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.683058][ T6655] FAULT_INJECTION: forcing a failure. [ 129.683058][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 129.683101][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.4.324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 129.683133][ T6655] Tainted: [L]=SOFTLOCKUP [ 129.683140][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.683153][ T6655] Call Trace: [ 129.683162][ T6655] [ 129.683172][ T6655] dump_stack_lvl+0xe8/0x150 [ 129.683214][ T6655] should_fail_ex+0x447/0x5e0 [ 129.683249][ T6655] should_failslab+0xa8/0x100 [ 129.683277][ T6655] __kmalloc_noprof+0xf6/0x790 [ 129.683300][ T6655] ? __memcg_list_lru_alloc+0x211/0x830 [ 129.683333][ T6655] ? __memcg_list_lru_alloc+0x211/0x830 [ 129.683364][ T6655] __memcg_list_lru_alloc+0x211/0x830 [ 129.683394][ T6655] ? xa_load+0x60/0x210 [ 129.683423][ T6655] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 129.683465][ T6655] zswap_store+0x7a4/0x2200 [ 129.683498][ T6655] ? zswap_store+0x53d/0x2200 [ 129.683528][ T6655] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 129.683556][ T6655] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 129.683585][ T6655] ? reacquire_held_locks+0x117/0x1a0 [ 129.683608][ T6655] ? __pfx_zswap_store+0x10/0x10 [ 129.683643][ T6655] ? rt_spin_unlock+0x159/0x200 [ 129.683678][ T6655] ? rt_spin_unlock+0x165/0x200 [ 129.683712][ T6655] swap_writeout+0x9a3/0x1550 [ 129.683748][ T6655] ? try_to_unmap_flush_dirty+0x96/0x100 [ 129.683784][ T6655] shrink_folio_list+0x3080/0x4bd0 [ 129.683846][ T6655] ? __pfx_shrink_folio_list+0x10/0x10 [ 129.683920][ T6655] ? __lock_acquire+0x747/0x2de0 [ 129.683979][ T6655] reclaim_folio_list+0x100/0x430 [ 129.684025][ T6655] ? __pfx_reclaim_folio_list+0x10/0x10 [ 129.684059][ T6655] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 129.684095][ T6655] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 129.684133][ T6655] reclaim_pages+0x452/0x530 [ 129.684161][ T6655] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 129.684199][ T6655] ? __pfx_reclaim_pages+0x10/0x10 [ 129.684231][ T6655] ? madvise_cold_or_pageout_pte_range+0x1719/0x1990 [ 129.684264][ T6655] madvise_cold_or_pageout_pte_range+0x173e/0x1990 [ 129.684313][ T6655] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 129.684348][ T6655] ? do_raw_spin_lock+0x12b/0x2f0 [ 129.684394][ T6655] walk_pgd_range+0xf90/0x1c30 [ 129.684464][ T6655] ? __pfx_walk_pgd_range+0x10/0x10 [ 129.684493][ T6655] ? do_raw_spin_lock+0x12b/0x2f0 [ 129.684528][ T6655] __walk_page_range+0x16d/0x730 [ 129.684561][ T6655] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 129.684588][ T6655] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 129.684623][ T6655] walk_page_range_vma_unsafe+0x309/0x410 [ 129.684658][ T6655] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 129.684685][ T6655] ? rt_spin_unlock+0x159/0x200 [ 129.684719][ T6655] ? rt_spin_unlock+0x165/0x200 [ 129.684753][ T6655] ? walk_page_range_vma+0x6b/0x90 [ 129.684784][ T6655] madvise_vma_behavior+0x29fc/0x4880 [ 129.684820][ T6655] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 129.684850][ T6655] ? do_raw_spin_lock+0x12b/0x2f0 [ 129.684886][ T6655] ? rcu_is_watching+0x16/0xb0 [ 129.684911][ T6655] ? trace_hrtimer_start+0x82/0x200 [ 129.684946][ T6655] ? hrtimer_start_range_ns_common+0x7fc/0xb70 [ 129.684989][ T6655] ? finish_task_switch+0x40e/0xc60 [ 129.685017][ T6655] ? lockdep_hardirqs_on+0x7b/0x110 [ 129.685043][ T6655] ? rcu_is_watching+0x16/0xb0 [ 129.685067][ T6655] ? trace_sched_exit_tp+0x3a/0x130 [ 129.685101][ T6655] ? __lock_acquire+0x747/0x2de0 [ 129.685156][ T6655] ? mas_prev_slot+0xb79/0xc00 [ 129.685198][ T6655] ? find_vma_prev+0x123/0x1b0 [ 129.685231][ T6655] ? __pfx_find_vma_prev+0x10/0x10 [ 129.685269][ T6655] ? __lock_acquire+0x747/0x2de0 [ 129.685308][ T6655] madvise_walk_vmas+0x57d/0xb70 [ 129.685353][ T6655] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 129.685383][ T6655] ? blk_start_plug+0x6e/0x1b0 [ 129.685415][ T6655] madvise_do_behavior+0x385/0x540 [ 129.685447][ T6655] ? __pfx_madvise_do_behavior+0x10/0x10 [ 129.685470][ T6655] ? down_read+0x151/0x200 [ 129.685516][ T6655] do_madvise+0x26f/0x330 [ 129.685549][ T6655] ? __pfx_do_madvise+0x10/0x10 [ 129.685585][ T6655] ? rcu_is_watching+0x16/0xb0 [ 129.685618][ T6655] __x64_sys_madvise+0xa6/0xc0 [ 129.685645][ T6655] do_syscall_64+0x166/0x520 [ 129.685668][ T6655] ? trace_irq_disable+0x3b/0x140 [ 129.685690][ T6655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.685712][ T6655] ? clear_bhb_loop+0x70/0xc0 [ 129.685738][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.685759][ T6655] RIP: 0033:0x7efeed4afb19 [ 129.685779][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.685797][ T6655] RSP: 002b:00007efeeb706028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 129.685820][ T6655] RAX: ffffffffffffffda RBX: 00007efeed735fa0 RCX: 00007efeed4afb19 [ 129.685836][ T6655] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 129.685850][ T6655] RBP: 00007efeed547b70 R08: 0000000000000000 R09: 0000000000000000 [ 129.685864][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.685877][ T6655] R13: 00007efeed736038 R14: 00007efeed735fa0 R15: 00007ffdfdc9afd8 [ 129.685913][ T6655] [ 129.983990][ T6659] usbtmc 2-1:16.0: simple control status returned ad [ 130.165488][ T946] usb 2-1: USB disconnect, device number 5 [ 131.460283][ T35] audit: type=1326 audit(1793833749.757:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.460331][ T35] audit: type=1326 audit(1793833749.767:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.473351][ T35] audit: type=1326 audit(1793833749.777:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.473401][ T35] audit: type=1326 audit(1793833749.777:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.473526][ T35] audit: type=1326 audit(1793833749.777:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.474222][ T35] audit: type=1326 audit(1793833749.777:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.474261][ T35] audit: type=1326 audit(1793833749.777:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.474298][ T35] audit: type=1326 audit(1793833749.777:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.484821][ T35] audit: type=1326 audit(1793833749.787:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.484869][ T35] audit: type=1326 audit(1793833749.787:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3148fb19 code=0x7ffc0000 [ 131.545732][ T6713] input: syz0 as /devices/virtual/input/input6 [ 131.545924][ T6713] input: failed to attach handler leds to device input6, error: -6 [ 132.026853][ T6723] ======================================================= [ 132.026853][ T6723] WARNING: The mand mount option has been deprecated and [ 132.026853][ T6723] and is ignored by this kernel. Remove the mand [ 132.026853][ T6723] option from the mount to silence this warning. [ 132.026853][ T6723] ======================================================= [ 132.126290][ T946] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.302218][ T946] usb 2-1: Using ep0 maxpacket: 8 [ 132.304117][ T946] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.305184][ T946] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 132.305237][ T946] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 132.305259][ T946] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.305272][ T946] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 132.305286][ T946] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 132.305298][ T946] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.305320][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.575221][ T946] usb 2-1: usb_control_msg returned -32 [ 132.575271][ T946] usbtmc 2-1:16.0: can't read capabilities [ 132.853972][ T6741] netlink: 'syz.0.362': attribute type 11 has an invalid length. [ 132.868728][ T4923] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.057648][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.057742][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.416767][ T6758] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 134.526711][ T6783] jffs2: notice: (6783) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.973912][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.999306][ T1228] usb 2-1: USB disconnect, device number 6 [ 135.138500][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 135.140255][ T43] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 135.144551][ T43] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 135.144606][ T43] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 135.144634][ T43] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.144661][ T43] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 135.183006][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.183035][ T43] usb 1-1: Product: syz [ 135.183048][ T43] usb 1-1: Manufacturer: syz [ 135.183063][ T43] usb 1-1: SerialNumber: syz [ 135.377970][ T6807] Illegal XDP return value 4294965632 on prog (id 45) dev syz_tun, expect packet loss! [ 135.394752][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 135.709995][ T43] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input7 [ 136.028504][ T43] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 136.028527][ T43] (id 0x00) [ 136.053791][ T6831] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.123238][ T6831] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.147155][ T6833] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 136.298558][ T43] rc_core: IR keymap rc-imon-pad not found [ 136.298581][ T43] Registered IR keymap rc-empty [ 136.299022][ T43] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 136.299044][ T43] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 136.400807][ T43] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 136.476041][ T43] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input8 [ 136.730212][ T43] imon 1-1:155.0: iMON device (15c2:ffdc) on usb<1:6> initialized [ 136.833590][ T43] usb 1-1: USB disconnect, device number 6 [ 137.715519][ T35] kauditd_printk_skb: 3 callbacks suppressed [ 137.715540][ T35] audit: type=1400 audit(1793833755.967:15): lsm=SMACK fn=smack_task_setscheduler action=denied subject="w" object="_" requested=w pid=6877 comm="syz.1.398" opid=6877 ocomm="syz.1.398" [ 138.612045][ T6911] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 139.460283][ T6931] syzkaller1: entered promiscuous mode [ 139.460312][ T6931] syzkaller1: entered allmulticast mode                                                                                                                                                                                                                                                                                           [ 141.507931][ T1230] ret_from_fork_asm+0x1a/0x30 [ 141.512800][ T1230] [ 141.515850][ T1230] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.523150][ T1230] CPU: 1 UID: 0 PID: 1230 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 141.534800][ T1230] Tainted: [L]=SOFTLOCKUP [ 141.539145][ T1230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.549216][ T1230] Workqueue: iou_exit io_ring_exit_work [ 141.554794][ T1230] Call Trace: [ 141.558088][ T1230] [ 141.561037][ T1230] vpanic+0x26f/0x710 [ 141.565052][ T1230] panic+0xc5/0xd0 [ 141.568790][ T1230] ? __pfx_panic+0x10/0x10 [ 141.573244][ T1230] ? ret_from_fork_asm+0x1a/0x30 [ 141.578215][ T1230] __warn+0x315/0x4c0 [ 141.582223][ T1230] ? io_sq_thread_stop+0x17e/0x1a0 [ 141.587381][ T1230] ? io_sq_thread_stop+0x17e/0x1a0 [ 141.592514][ T1230] __report_bug+0x276/0x570 [ 141.597058][ T1230] ? io_sq_thread_stop+0x17e/0x1a0 [ 141.602215][ T1230] ? __pfx___report_bug+0x10/0x10 [ 141.607262][ T1230] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.613189][ T1230] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 141.618513][ T1230] ? io_sq_thread_stop+0x17e/0x1a0 [ 141.623657][ T1230] report_bug+0x16b/0x220 [ 141.628012][ T1230] ? io_sq_thread_stop+0x17e/0x1a0 [ 141.633182][ T1230] ? io_sq_thread_stop+0x180/0x1a0 [ 141.638320][ T1230] handle_bug+0x9c/0x200 [ 141.642596][ T1230] exc_invalid_op+0x1a/0x50 [ 141.647139][ T1230] asm_exc_invalid_op+0x1a/0x20 [ 141.652015][ T1230] RIP: 0010:io_sq_thread_stop+0x17e/0x1a0 [ 141.657769][ T1230] Code: c6 05 b6 84 e9 0b 01 48 c7 c7 e0 d9 ea 8b be 26 00 00 00 48 c7 c2 20 da ea 8b e8 ed 8e cd fc e9 4f ff ff ff e8 73 62 f2 fc 90 <0f> 0b 90 e9 e1 fe ff ff e8 65 62 f2 fc 90 0f 0b 90 e9 6e ff ff ff [ 141.677392][ T1230] RSP: 0018:ffffc90005987890 EFLAGS: 00010293 [ 141.683475][ T1230] RAX: ffffffff84d5761d RBX: ffff8880276bbc00 RCX: ffff888027309f40 [ 141.691454][ T1230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.699437][ T1230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.707426][ T1230] R10: dffffc0000000000 R11: ffffed1004ed77ab R12: 0000000000000001 [ 141.715413][ T1230] R13: 0000000000000000 R14: ffff8880276bbd50 R15: dffffc0000000000 [ 141.723416][ T1230] ? io_sq_thread_stop+0x17d/0x1a0 [ 141.728563][ T1230] io_put_sq_data+0x8a/0x150 [ 141.733166][ T1230] io_sq_thread_finish+0x1fd/0x240 [ 141.738292][ T1230] io_ring_ctx_free+0x2d/0x5e0 [ 141.743081][ T1230] io_ring_exit_work+0x5b1/0x640 [ 141.748050][ T1230] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.753122][ T1230] ? __pfx_io_ring_exit_work+0x10/0x10 [ 141.758607][ T1230] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 141.763965][ T1230] ? rcu_is_watching+0x16/0xb0 [ 141.768846][ T1230] ? process_scheduled_works+0x97a/0x1630 [ 141.774602][ T1230] process_scheduled_works+0xc3d/0x1630 [ 141.780217][ T1230] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.786234][ T1230] ? assign_work+0x3cf/0x5d0 [ 141.790864][ T1230] worker_thread+0xa47/0xfb0 [ 141.795487][ T1230] ? __kthread_parkme+0x71/0x1f0 [ 141.800515][ T1230] kthread+0x38b/0x470 [ 141.804619][ T1230] ? __pfx_worker_thread+0x10/0x10 [ 141.809760][ T1230] ? __pfx_kthread+0x10/0x10 [ 141.814390][ T1230] ret_from_fork+0x514/0xb70 [ 141.819017][ T1230] ? __pfx_ret_from_fork+0x10/0x10 [ 141.824158][ T1230] ? __switch_to+0xc78/0x1410 [ 141.829013][ T1230] ? __pfx_kthread+0x10/0x10 [ 141.833635][ T1230] ret_from_fork_asm+0x1a/0x30 [ 141.838452][ T1230] [ 141.841830][ T1230] Kernel Offset: disabled [ 141.846161][ T1230] Rebooting in 86400 seconds..