last executing test programs: 13m50.297260854s ago: executing program 0 (id=420): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0100fefffffffedbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x40) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000940)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r5}}, 0x18) r6 = syz_open_dev$I2C(&(0x7f00000005c0), 0xa, 0x20c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x104) ioctl(r7, 0x40104d00, &(0x7f0000000a00)="00000200000000000000020001") ioctl$I2C_PEC(r6, 0x708, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xc0, 0x2, 0x0, 0x7, 0x9}) write(r3, &(0x7f0000001400)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write$qrtrtun(r3, &(0x7f0000000180)="ce444082475a52c3428b9ffe01bcb1bf05198f1115a82d36d7d2bd9d41fbc8b0288309318dfa47cae5ddcbac3a5ca49025a1b885e0cf315c12e9734bebf312ccd347ed79bac2c333c139ed3b33d181fa732458fecffe1ae614c513d98aa440d5b0a9ec292db3c275a83b7a544755979f788d29d8bf41d05662eb8c35427643e468531e4f", 0x84) 13m44.248893916s ago: executing program 0 (id=427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7f) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, 0x0) ioctl$UBLK_U_CMD_SET_PARAMS(r7, 0xc0207508, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000000100)) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x59, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000200)=@raw=[@generic={0xb7}, @generic={0xb7, 0x4, 0x0, 0x0, 0xfffffffc}, @generic={0xb7, 0x5}, @exit], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) 13m43.215733091s ago: executing program 0 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x23, &(0x7f00000003c0)="fc65cf09864c123db16e0184d964", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m39.698285966s ago: executing program 0 (id=436): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = semget$private(0x0, 0xb, 0x19f) semop(r1, &(0x7f00000000c0)=[{0x0, 0x7, 0x1800}, {0x1, 0x1}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x2, 0x6, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x3, 0x8, 0x1800}], 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='[\\\x00', 0x42803, &(0x7f00000000c0)={@_ha_fsid={[0x6, 0x551]}, {0x7, 0x1ff, 0x0, 0xeb}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x5}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x2, 0x2, 0x80, "1c9c60e3530fafabeacff87de77ba392e75735870c5a7e113adb1904afd88014", 0x50565559}) 13m36.828449548s ago: executing program 0 (id=441): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x13c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48978, 0x13}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}, @IFLA_PORT_SELF={0x108, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x104, 0x2, '\x00\x81\xea\x15;4\xe6m\x95(\xdd\xab\x8e@P0*\x98K\x04%\x87e/d3N\x96\xa2~\x02\xe3\x87fI\xcaL8_w\b\x00\x00\x00\x00\x00\x00\x00\v\x8a\x8bv\x82\xce\xc3\xc2\xb0\xf0\x1dJ\xa4nP\xc5\x16\xbeJ(\xac\xf8\xb3\xd2\x01\x82#\x94\x1e\xec)\x93\x9eJ\xd9S\v\xfd&\x89\x16\xc7\xe2g\x9d$W\xb1\"Tp1F\x9b\x85\x0fP\x18\xd8\xa0\xd2\x97\x19\xe05kL:\x0e|\xd4ML\xefP\x98;\xacY\xd9L+\xf0\xc9\xa6RK\xb2x\b\xf1\x03e\r\'\x1a\x12\xc2~\x8f\x88\xd7\x96\tz\x8b3\xf8\x19\xe5\x8a,r\xb2(}\xa8Zm\x11\xf0\xbc\xe0\xbef\x8d w\xda\xcc7.\x84\xec\x047\x88w\x06#\xd8\xa2\xd9\xa4\a\xb9\xbd\x02\xe9-\x97X\xbd\a\xea\xbd\xd8\x0e\xe8\x0f\xed\xe3-\x9a:l\xe5\'\xa1U\"\x04oy\xcc\x1c\x94\xf3l\xc4\x99^\x1c\xeeM,\xee*\xaeI\x15\x82E\x12\'O^\xbe\xee\xb4\x10\xf8:\xb4:\xb3N\x8a'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0x2, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xa, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x200009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x0, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xc, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x282, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0xffffffff, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000a000000000095000000000000009ed926"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd3e}, 0x94) 13m35.377028925s ago: executing program 0 (id=447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x0, r3}, 0x18) r8 = dup3(r5, r3, 0x80000) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* mm'], 0x9) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) r13 = openat(r12, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020001"], 0x30002) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r6, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000480)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x5b}, @exit, @cb_func={0x18, 0x3}], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x2d, &(0x7f0000000540)=""/45, 0x41000, 0x11, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x80000001, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, r7, r8, r9, r10, r13, r14, 0x1], &(0x7f00000007c0)=[{0x0, 0x3, 0xb, 0x1}, {0x1, 0x2, 0x6, 0xb}, {0x0, 0x2, 0xf, 0x8}], 0x10, 0x7}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup=r16, r16, 0x2f, 0x203c, 0x4}, 0x20) r17 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88400, 0x91) r18 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) mount_setattr(r17, &(0x7f0000000140)='./file0\x00', 0x8800, &(0x7f0000000240)={0x10000d, 0x1000f9, 0x140000, {r18}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r15, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m20.039787089s ago: executing program 32 (id=447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x0, r3}, 0x18) r8 = dup3(r5, r3, 0x80000) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* mm'], 0x9) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) r13 = openat(r12, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020001"], 0x30002) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r6, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000480)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x5b}, @exit, @cb_func={0x18, 0x3}], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x2d, &(0x7f0000000540)=""/45, 0x41000, 0x11, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x80000001, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, r7, r8, r9, r10, r13, r14, 0x1], &(0x7f00000007c0)=[{0x0, 0x3, 0xb, 0x1}, {0x1, 0x2, 0x6, 0xb}, {0x0, 0x2, 0xf, 0x8}], 0x10, 0x7}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup=r16, r16, 0x2f, 0x203c, 0x4}, 0x20) r17 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88400, 0x91) r18 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) mount_setattr(r17, &(0x7f0000000140)='./file0\x00', 0x8800, &(0x7f0000000240)={0x10000d, 0x1000f9, 0x140000, {r18}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r15, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m52.810292736s ago: executing program 1 (id=1078): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', 0x0, 0x0, 0x0, &(0x7f0000000400)='\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x88, 0xffffffe9, 0x8, 0x7, 0x8, r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002abd7000000000", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="448f5638dd0000001000010428bd700000010000000000000da362915c3715de1d609d85a7af38182b09c256c154a018618b4d54c4e9013b", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='md0\n', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='1.0\n\x00', 0x4) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) 10m48.757217238s ago: executing program 1 (id=1085): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2, 0x1}, 0x10) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000400)={0x0, 0x5, 0xe9, 0x0, 0x5}) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x9, 0x40) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcc2df251200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000800a400020000001c00810005000100f1"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 10m46.105826506s ago: executing program 1 (id=1093): acct(&(0x7f0000000100)='./file0\x00') 10m45.337612616s ago: executing program 1 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000003300)={0x18, 0x2c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ldst={0x3, 0x2, 0x4, 0xa, 0x2, 0xffffffffffffff96, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000002200)=""/4096, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, r5, 0x8, &(0x7f0000003200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000003240)={0x1, 0xb, 0x2, 0x8}, 0x10, 0x0, r5, 0x2, &(0x7f0000003280)=[r5, r5, r6, r3], &(0x7f00000032c0)=[{0x5, 0x3, 0xb, 0xc}, {0x0, 0x4, 0x4, 0x9}], 0x10, 0x4}, 0x94) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r12 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r12, r11, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x80100, 0x3, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x800, 0x3, 0xef}}], 0x1, 0x0, 0x0) 10m44.618240731s ago: executing program 1 (id=1101): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) readv(r1, &(0x7f00000008c0)=[{&(0x7f00000016c0)=""/237, 0xed}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000580)=""/49, 0x31}, {&(0x7f00000005c0)=""/238, 0xee}], 0x6) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) write(r0, &(0x7f00000001c0)="306663353a313232373a6d6cc53ff2a6db3da7ff06ace4bd44a6b64c66", 0x1d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x8, 0x7, 0xb158, 0x20108, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000040000000000000000389307cfa70165573e4ff3010000850001006d00000018110000a3fb6907df17d9947f5a42ece67692653edc2a18cda15994af242a4f542383c25f232134acfac65e88bd8607e131dec7e5b5cf0fb883ec14fedb6772fe0206693b38127dd4264f81e1acac649dee29dac1fa677a97d806560c59ea01e69fe4608f2eccc252bee9df7218613150b101f0", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) select(0xfffffffffffffe37, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) 10m41.621712311s ago: executing program 1 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0100fefffffffedbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x40) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000940)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r5}}, 0x18) r6 = syz_open_dev$I2C(&(0x7f00000005c0), 0xa, 0x20c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x104) ioctl(r7, 0x40104d00, &(0x7f0000000a00)="00000200000000000000020001") ioctl$I2C_PEC(r6, 0x708, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xc0, 0x2, 0x0, 0x7, 0x9}) write(r3, &(0x7f0000001400)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write$qrtrtun(r3, &(0x7f0000000180)="ce444082475a52c3428b9ffe01bcb1bf05198f1115a82d36d7d2bd9d41fbc8b0288309318dfa47cae5ddcbac3a5ca49025a1b885e0cf315c12e9734bebf312ccd347ed79bac2c333c139ed3b33d181fa732458fecffe1ae614c513d98aa440d5b0a9ec292db3c275a83b7a544755979f788d29d8bf41d05662eb8c35427643e468531e4f", 0x84) 10m25.508124986s ago: executing program 33 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0100fefffffffedbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x40) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000940)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r5}}, 0x18) r6 = syz_open_dev$I2C(&(0x7f00000005c0), 0xa, 0x20c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x104) ioctl(r7, 0x40104d00, &(0x7f0000000a00)="00000200000000000000020001") ioctl$I2C_PEC(r6, 0x708, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xc0, 0x2, 0x0, 0x7, 0x9}) write(r3, &(0x7f0000001400)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write$qrtrtun(r3, &(0x7f0000000180)="ce444082475a52c3428b9ffe01bcb1bf05198f1115a82d36d7d2bd9d41fbc8b0288309318dfa47cae5ddcbac3a5ca49025a1b885e0cf315c12e9734bebf312ccd347ed79bac2c333c139ed3b33d181fa732458fecffe1ae614c513d98aa440d5b0a9ec292db3c275a83b7a544755979f788d29d8bf41d05662eb8c35427643e468531e4f", 0x84) 31.469925709s ago: executing program 3 (id=3644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) setresuid(0x0, 0xee00, 0x0) r5 = msgget$private(0x0, 0x3ac) msgrcv(r5, 0x0, 0x0, 0x2, 0x2000) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0xee01, 0x0, 0x0, 0x40, 0x8}, 0x0, 0x0, 0x100, 0xfffffffffffffff2, 0xd3ae, 0x9e, 0x1, 0x90f0, 0x3, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 29.978480216s ago: executing program 3 (id=3655): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x8000007fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000200)) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000004480)={0xc3, "12023329fd5e73be3825260ccfd23a084746f36247521ed87830c9f7468f0f037bbe7a1e2e1ad15793bace2d5b520e2f1d7240033f4db5e1d9b936d27d4d0002cbb58987457ec993399461b57858e32f604dcae6293494446a822d7021b5703e12251060c79b1f707f4154dbd717fb21209a121a38b9bf463ceb95e1c9a3cde838a8b46e5025ef8969109b7bab76afc5dfb68076619b56d26923d102ef086dbfa2c0d524accdd504f56fa95bceaa5adc46be8733541f1ad0f90fe5614e40c0399423a6"}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 29.417215193s ago: executing program 3 (id=3659): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880), 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfa, @local, 0x6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f00000001c0)=[{r0, 0xc022}, {r0, 0x1ac}], 0x2, 0x3) 28.934240482s ago: executing program 3 (id=3663): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e"], &(0x7f0000000600)={0x0, 0x0, 0x5, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x2020, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$key(0xf, 0x3, 0x2) 26.76905981s ago: executing program 3 (id=3673): r0 = socket$key(0xf, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8, 0x6, 0x0, 0x5, 0x6, 0x0, 0x5, 0x2}, &(0x7f0000000080)={0x8, 0x2, 0x100000000, 0x6, 0x1ff, 0x4, 0x4000000000, 0x9}, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0x400, 0xffffffff, 0xffffffff], [0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x9, 0xffffffff}, {}, {0x0, 0xffffffff}, {0x0, 0xffffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027"], 0x48) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x30, r0, 0xce106000) syz_open_dev$sndctrl(&(0x7f0000000080), 0x4, 0x141080) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "21fe38166e49c844bd6f941a6c951d7dd3ede8cc764ddc342f1b93bffd00667e", "5fc65f5d0095326218f5f5df00a9733bb11ab0f84255a8545082356fda631a9e", "efd79d2fa6953bef49a4c3eab67611b4c08c57bbe89f06d87c9929df83891f0c", "d1bd017bfb504ff3040129369da85272115d30ce88b0869d5d6d01c96b0e6656", "688a89cbc5b5694604b14f2dca21c9d9c24852f7a0e282af621c958cfa58e28d", "1b5305f1a8700b70f275ac4f", 0x6, 0x5, 0x4, 0x3, 0x80000001}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r5, 0x8ec6, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x1000, 0x5, 0x7, 0x2, 0x4, 0x9, 0x7, r5}, &(0x7f0000000100)=0x20) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRESOCT=r0], 0x0) 26.074308369s ago: executing program 4 (id=3678): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x8000007fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000200)) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000004480)={0xc3, "12023329fd5e73be3825260ccfd23a084746f36247521ed87830c9f7468f0f037bbe7a1e2e1ad15793bace2d5b520e2f1d7240033f4db5e1d9b936d27d4d0002cbb58987457ec993399461b57858e32f604dcae6293494446a822d7021b5703e12251060c79b1f707f4154dbd717fb21209a121a38b9bf463ceb95e1c9a3cde838a8b46e5025ef8969109b7bab76afc5dfb68076619b56d26923d102ef086dbfa2c0d524accdd504f56fa95bceaa5adc46be8733541f1ad0f90fe5614e40c0399423a6"}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 26.010770836s ago: executing program 2 (id=3679): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2, 0x4}, 0x1c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x3, 0xc, 0x9, 0x3, 0x1, 0xe, 0x8, 0x18, 0x7, 0x7f, 0x3, 0x3e}, 0xe) close(0x3) fsetxattr$security_evm(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 25.78871004s ago: executing program 4 (id=3680): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4000002}, [@alu={0x4, 0x1, 0x5, 0x760cda05bcf95fa0, 0x2, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000003000083fa75d5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff0100"/27], 0xfffffffffffffebe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000800000000000006000000850000002f000000850000002a0000009500000000000000cea136a343771c0c0b5a998541413b5708a9d8cb9e452d968c407953cd525813edc1baefd3e8607b5bbbbab70caddfc5e3e7b6d05991d69260263cdd69de70bd999c008f173ac53ee557fed2c94d3c32c69906deb30bc1ed92d0e3165f79a9c40e05c7d6e5321757c0eee43ded07642885f50c44"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000001280)=@req={0x0, 0x2, 0x6, 0x10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe8, 0x8, &(0x7f00000006c0)="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", &(0x7f0000000180)=""/8, 0x320e, 0x0, 0x0, 0xfffffd6f, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/45, 0xfdef}, {0x0}], 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fchdir(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) flistxattr(r7, 0x0, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x7ff}) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x120}}, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x24, 0x73e9}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x2008, r0}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000014c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 25.580497366s ago: executing program 2 (id=3681): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, 0x0, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 25.272002057s ago: executing program 2 (id=3682): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e"], &(0x7f0000000600)={0x0, 0x0, 0x5, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x210c00, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x2020, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$key(0xf, 0x3, 0x2) 25.265277779s ago: executing program 4 (id=3683): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x0) 24.950251919s ago: executing program 4 (id=3684): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './myconfig\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000280)='./myconfig\x00', 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r4, 0x25, 0x0, @void}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xde280000, 0x0, 0x0, 0x0, 0x0, 0x0) 24.949938843s ago: executing program 2 (id=3685): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) setresuid(0x0, 0xee00, 0x0) r5 = msgget$private(0x0, 0x3ac) msgrcv(r5, 0x0, 0x0, 0x2, 0x2000) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0xee01, 0x0, 0x0, 0x40, 0x8}, 0x0, 0x0, 0x100, 0xfffffffffffffff2, 0xd3ae, 0x9e, 0x1, 0x90f0, 0x3, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r7, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004004}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 24.872101396s ago: executing program 3 (id=3686): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) prlimit64(r0, 0x2, &(0x7f0000000100)={0x1, 0x46f7}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xfff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x9e, &(0x7f0000000180)}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(0xffffffffffffffff, r7) ioprio_set$uid(0x3, r7, 0x2007) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) clock_getres(0x9, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r8, r8, 0x0, 0x100000000000000) 24.738835237s ago: executing program 4 (id=3687): capset(0x0, 0x0) r0 = mq_open(&(0x7f0000000080)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1d\xe5\xe3\xf0\x06o(w\xb7\xf1\xb6\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0\t\x00\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xfc\xeb.\xa0\xc8w\xc5\xa90\x996\xde.\"\xb1\xf5\xe5c\xe4+O\x89r\x008\x1e\xd5\x05\x10iL\xf5y\x92\bZ\'\xb83\xa2\xd8|\x1d\xa6\x13[D\v\x1czi7\xf3p \x12\x02e\xe3\xc2`\x17\xff+\xa4<\bL\x97\x17z\xf3#m\xff\xb1\xc5U\xbaN&\xbe\x06\x81X\x10 \x9d\n\x87\xdd\x8cH9\xf0\xe1\r=\xf1c\xb6\xe6\xa4>KZ\xefs\b*\xea\xe8\xa64\xe8u\x01,\x1a\x05) \xf6\xab;', 0x6e93ebbbcc0884f2, 0x1ec, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syncfs(0xffffffffffffffff) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) read$FUSE(r1, &(0x7f0000002040)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) unshare(0x22020600) setsockopt$inet6_int(0xffffffffffffffff, 0x3a, 0x4b, 0x0, 0x0) syncfs(r0) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r5, 0x1, 0x0, &(0x7f0000000200)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r8, 0x0, 0x19, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) 24.49022878s ago: executing program 2 (id=3688): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) setresuid(0x0, 0xee00, 0x0) r5 = msgget$private(0x0, 0x3ac) msgrcv(r5, 0x0, 0x0, 0x2, 0x2000) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0xee01, 0x0, 0x0, 0x40, 0x8}, 0x0, 0x0, 0x100, 0xfffffffffffffff2, 0xd3ae, 0x9e, 0x1, 0x90f0, 0x3, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r6, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21.513152932s ago: executing program 4 (id=3689): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdir(0x0, 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 19.505993935s ago: executing program 2 (id=3690): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, 0x0, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 492.036448ms ago: executing program 34 (id=3690): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, 0x0, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 184.005015ms ago: executing program 35 (id=3686): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) prlimit64(r0, 0x2, &(0x7f0000000100)={0x1, 0x46f7}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xfff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x9e, &(0x7f0000000180)}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(0xffffffffffffffff, r7) ioprio_set$uid(0x3, r7, 0x2007) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) clock_getres(0x9, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r8, r8, 0x0, 0x100000000000000) 0s ago: executing program 36 (id=3689): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdir(0x0, 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) kernel console output (not intermixed with test programs): t promiscuous mode [ 852.354620][T11443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.435868][T11443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.711857][T11443] team0 (unregistering): Port device team_slave_1 removed [ 853.781450][T11443] team0 (unregistering): Port device team_slave_0 removed [ 854.529928][T13682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.529942][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.529963][T13682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.600340][T13682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.600354][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.600375][T13682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.735877][ T1709] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 855.745623][T13682] hsr_slave_0: entered promiscuous mode [ 855.768897][T13682] hsr_slave_1: entered promiscuous mode [ 855.769537][T13682] debugfs: 'hsr0' already exists in 'hsr' [ 855.769555][T13682] Cannot create hsr debugfs directory [ 855.885815][ T1709] usb 4-1: Using ep0 maxpacket: 8 [ 855.886502][ T1709] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 855.891725][ T1709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.891744][ T1709] usb 4-1: Product: syz [ 855.891755][ T1709] usb 4-1: Manufacturer: syz [ 855.891766][ T1709] usb 4-1: SerialNumber: syz [ 856.055932][ T1709] usb 4-1: config 0 descriptor?? [ 856.270993][ T1709] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 856.954734][ T1709] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 856.995124][ T1709] usb 4-1: USB disconnect, device number 46 [ 862.728654][ T5316] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 862.875845][ T5316] usb 4-1: Using ep0 maxpacket: 8 [ 862.877988][ T5316] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 862.903730][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.903751][ T5316] usb 4-1: Product: syz [ 862.903762][ T5316] usb 4-1: Manufacturer: syz [ 862.903774][ T5316] usb 4-1: SerialNumber: syz [ 862.934380][ T5316] usb 4-1: config 0 descriptor?? [ 863.171520][ T5316] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 863.415342][ T5316] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 863.447665][ T5316] usb 4-1: USB disconnect, device number 47 [ 867.008127][T14170] FAULT_INJECTION: forcing a failure. [ 867.008127][T14170] name failslab, interval 1, probability 0, space 0, times 0 [ 867.008161][T14170] CPU: 0 UID: 0 PID: 14170 Comm: syz.2.2673 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 867.008184][T14170] Tainted: [L]=SOFTLOCKUP [ 867.008190][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.008203][T14170] Call Trace: [ 867.008209][T14170] [ 867.008218][T14170] dump_stack_lvl+0xe8/0x150 [ 867.008248][T14170] should_fail_ex+0x46b/0x600 [ 867.008280][T14170] should_failslab+0xa8/0x100 [ 867.008301][T14170] __kmalloc_cache_noprof+0xa0/0x6b0 [ 867.008318][T14170] ? xa_load+0x1db/0x210 [ 867.008405][T14170] ? __io_uring_add_tctx_node+0x186/0x630 [ 867.008422][T14170] ? __io_uring_add_tctx_node+0x186/0x630 [ 867.008446][T14170] __io_uring_add_tctx_node+0x186/0x630 [ 867.008470][T14170] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 867.008487][T14170] ? __fget_files+0x2a/0x420 [ 867.008511][T14170] ? __fget_files+0x2a/0x420 [ 867.008533][T14170] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 867.008554][T14170] __se_sys_io_uring_enter+0x18c9/0x1bb0 [ 867.008578][T14170] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 867.008610][T14170] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 867.008629][T14170] ? fput+0xa0/0xd0 [ 867.008647][T14170] ? ksys_write+0x248/0x270 [ 867.008671][T14170] ? __pfx_ksys_write+0x10/0x10 [ 867.008698][T14170] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 867.008718][T14170] do_syscall_64+0x166/0x520 [ 867.008739][T14170] ? trace_irq_disable+0x3b/0x140 [ 867.008756][T14170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.008773][T14170] ? clear_bhb_loop+0x70/0xc0 [ 867.008794][T14170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.008812][T14170] RIP: 0033:0x7f9b0ff9e0d9 [ 867.008828][T14170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.008842][T14170] RSP: 002b:00007f9b0e1b3fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 867.008859][T14170] RAX: ffffffffffffffda RBX: 00002000000004c0 RCX: 00007f9b0ff9e0d9 [ 867.008871][T14170] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 867.008881][T14170] RBP: 0000200000000480 R08: 0000000000000000 R09: 0000000000000008 [ 867.008891][T14170] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 867.008901][T14170] R13: 00007f9b10226218 R14: 00007f9b10226180 R15: 00007ffe82621da8 [ 867.008925][T14170] [ 868.606881][T14200] binder: 14199:14200 ioctl c0306201 0 returned -14 [ 868.908911][ T5316] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 869.056705][ T5316] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 869.059510][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 869.059531][ T5316] usb 5-1: Product: syz [ 869.059542][ T5316] usb 5-1: SerialNumber: syz [ 869.144066][ T5316] usb 5-1: config 0 descriptor?? [ 869.386885][T13584] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 869.654467][T13584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.670907][T13584] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 870.232277][ T5316] usb 5-1: USB disconnect, device number 51 [ 870.253527][T13584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.277618][T13584] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 870.447297][T13584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.550876][T13584] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 870.620697][T13584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 875.371337][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.371389][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.905871][ T1709] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 876.056692][ T1709] usb 5-1: Using ep0 maxpacket: 8 [ 876.057358][ T1709] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 876.063192][ T1709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.063210][ T1709] usb 5-1: Product: syz [ 876.063222][ T1709] usb 5-1: Manufacturer: syz [ 876.063233][ T1709] usb 5-1: SerialNumber: syz [ 876.139365][ T1709] usb 5-1: config 0 descriptor?? [ 876.343163][ T1709] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 877.024402][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 877.069751][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 877.078955][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 877.104440][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 877.153773][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 877.263619][ T1709] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 877.303635][T13682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 877.510377][T13682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 877.543818][ T1709] usb 5-1: USB disconnect, device number 52 [ 882.214082][T13682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 882.227142][T13682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.401435][ T5606] Bluetooth: hci0: command tx timeout [ 882.459483][T14296] overlayfs: missing 'workdir' [ 882.507260][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2714'. [ 882.514548][T14297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 884.469991][T14300] FAULT_INJECTION: forcing a failure. [ 884.469991][T14300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.470023][T14300] CPU: 0 UID: 0 PID: 14300 Comm: syz.2.2718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.470047][T14300] Tainted: [L]=SOFTLOCKUP [ 884.470053][T14300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.470064][T14300] Call Trace: [ 884.470071][T14300] [ 884.470079][T14300] dump_stack_lvl+0xe8/0x150 [ 884.470111][T14300] should_fail_ex+0x46b/0x600 [ 884.470141][T14300] core_sys_select+0x8c0/0xb40 [ 884.470160][T14300] ? get_pid_task+0x20/0x1f0 [ 884.470194][T14300] ? __pfx_core_sys_select+0x10/0x10 [ 884.470229][T14300] ? __pfx_set_user_sigmask+0x10/0x10 [ 884.470249][T14300] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 884.470272][T14300] __se_sys_pselect6+0x267/0x320 [ 884.470295][T14300] ? __pfx___se_sys_pselect6+0x10/0x10 [ 884.470313][T14300] ? __pfx_ksys_write+0x10/0x10 [ 884.470339][T14300] ? __x64_sys_pselect6+0x21/0xf0 [ 884.470359][T14300] do_syscall_64+0x166/0x520 [ 884.470379][T14300] ? trace_irq_disable+0x3b/0x140 [ 884.470403][T14300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.470420][T14300] ? clear_bhb_loop+0x70/0xc0 [ 884.470440][T14300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.470456][T14300] RIP: 0033:0x7f9b0ff9e0d9 [ 884.470471][T14300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.470485][T14300] RSP: 002b:00007f9b0e1d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 884.470502][T14300] RAX: ffffffffffffffda RBX: 00007f9b10226090 RCX: 00007f9b0ff9e0d9 [ 884.470514][T14300] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 884.470525][T14300] RBP: 00007f9b0e1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 884.470536][T14300] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 884.470549][T14300] R13: 00007f9b10226128 R14: 00007f9b10226090 R15: 00007ffe82621da8 [ 884.470574][T14300] [ 884.609458][ T5594] Bluetooth: hci0: command tx timeout [ 885.027768][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 885.083566][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 885.121958][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 885.149568][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 885.153271][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 886.527158][ T5316] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 886.646317][ T5606] Bluetooth: hci0: command tx timeout [ 886.684571][ T5316] usb 5-1: Using ep0 maxpacket: 8 [ 886.686021][ T5316] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 886.744146][ T5316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 886.744168][ T5316] usb 5-1: Product: syz [ 886.744179][ T5316] usb 5-1: Manufacturer: syz [ 886.744190][ T5316] usb 5-1: SerialNumber: syz [ 886.782328][ T5316] usb 5-1: config 0 descriptor?? [ 886.817896][ T5316] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 887.040817][T14333] FAULT_INJECTION: forcing a failure. [ 887.040817][T14333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.040891][T14333] CPU: 0 UID: 0 PID: 14333 Comm: syz.4.2727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 887.040914][T14333] Tainted: [L]=SOFTLOCKUP [ 887.040920][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 887.040930][T14333] Call Trace: [ 887.040936][T14333] [ 887.040943][T14333] dump_stack_lvl+0xe8/0x150 [ 887.040971][T14333] should_fail_ex+0x46b/0x600 [ 887.041004][T14333] _copy_to_user+0x31/0xb0 [ 887.041023][T14333] simple_read_from_buffer+0xe1/0x170 [ 887.041049][T14333] proc_fail_nth_read+0x1be/0x230 [ 887.041076][T14333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.041103][T14333] ? rw_verify_area+0x250/0x4d0 [ 887.041127][T14333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.041150][T14333] vfs_read+0x219/0xa90 [ 887.041179][T14333] ? __pfx_vfs_read+0x10/0x10 [ 887.041203][T14333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 887.041227][T14333] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 887.041248][T14333] ? mutex_lock_nested+0x152/0x1d0 [ 887.041263][T14333] ? fdget_pos+0x252/0x320 [ 887.041290][T14333] ksys_read+0x156/0x270 [ 887.041314][T14333] ? __pfx_ksys_read+0x10/0x10 [ 887.041345][T14333] do_syscall_64+0x166/0x520 [ 887.041366][T14333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.041383][T14333] ? clear_bhb_loop+0x70/0xc0 [ 887.041403][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.041419][T14333] RIP: 0033:0x7f2c7811e90e [ 887.041434][T14333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 887.041449][T14333] RSP: 002b:00007f2c763b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 887.041466][T14333] RAX: ffffffffffffffda RBX: 00007f2c763b66c0 RCX: 00007f2c7811e90e [ 887.041478][T14333] RDX: 000000000000000f RSI: 00007f2c763b60a0 RDI: 0000000000000005 [ 887.041489][T14333] RBP: 00007f2c763b6090 R08: 0000000000000000 R09: 0000000000000000 [ 887.041499][T14333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.041509][T14333] R13: 00007f2c783e6038 R14: 00007f2c783e5fa0 R15: 00007fffbd37bbc8 [ 887.041533][T14333] [ 887.285861][ T5606] Bluetooth: hci5: command tx timeout [ 887.325996][ T5316] gspca_sn9c2028: read1 error -110 [ 887.326317][ T5316] gspca_sn9c2028: read1 error -32 [ 887.327264][ T5316] gspca_sn9c2028: read1 error -32 [ 887.327327][ T5316] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32 [ 887.447839][ T5316] usb 5-1: USB disconnect, device number 53 [ 888.145888][T14351] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 888.146091][T14351] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 888.148506][T14351] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 888.148647][T14351] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 888.149205][T14351] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 888.149307][T14351] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 888.149780][T14351] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 888.149865][T14351] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 888.149880][T14351] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 888.254269][ T5606] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 888.547580][ T5316] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 888.698977][ T5316] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 888.700087][ T5316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.701683][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 888.701701][ T5316] usb 4-1: Product: syz [ 888.701712][ T5316] usb 4-1: Manufacturer: syz [ 888.727765][ T5606] Bluetooth: hci0: command tx timeout [ 889.012404][ T1709] usb 4-1: USB disconnect, device number 48 [ 889.370322][ T5606] Bluetooth: hci5: command tx timeout [ 889.517270][T14270] wlan0 speed is unknown, defaulting to 1000 [ 890.083495][ T5694] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 890.236536][ T5694] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 890.239240][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 890.239260][ T5694] usb 5-1: Product: syz [ 890.239280][ T5694] usb 5-1: SerialNumber: syz [ 890.275669][ T5694] usb 5-1: config 0 descriptor?? [ 891.085393][ T5694] usb 5-1: USB disconnect, device number 54 [ 891.493609][ T5606] Bluetooth: hci5: command tx timeout [ 891.628946][T14399] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 891.629167][T14399] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 891.629947][T14399] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 891.630092][T14399] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 891.630660][T14399] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 891.630757][T14399] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 891.631253][T14399] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 891.631345][T14399] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 891.631360][T14399] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 891.730858][ T5606] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 892.065855][ T6761] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 892.216414][ T6761] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 892.217491][ T6761] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.219081][ T6761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 892.219099][ T6761] usb 4-1: Product: syz [ 892.219110][ T6761] usb 4-1: Manufacturer: syz [ 892.612906][ T5316] usb 4-1: USB disconnect, device number 49 [ 892.753804][T14313] wlan0 speed is unknown, defaulting to 1000 [ 893.534066][ T5606] Bluetooth: hci5: command tx timeout [ 894.131350][T14440] FAULT_INJECTION: forcing a failure. [ 894.131350][T14440] name failslab, interval 1, probability 0, space 0, times 0 [ 894.131378][T14440] CPU: 0 UID: 0 PID: 14440 Comm: syz.2.2768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 894.131401][T14440] Tainted: [L]=SOFTLOCKUP [ 894.131407][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 894.131417][T14440] Call Trace: [ 894.131423][T14440] [ 894.131430][T14440] dump_stack_lvl+0xe8/0x150 [ 894.131458][T14440] should_fail_ex+0x46b/0x600 [ 894.131488][T14440] should_failslab+0xa8/0x100 [ 894.131510][T14440] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 894.131538][T14440] ? alloc_inode+0xb8/0x1b0 [ 894.131555][T14440] ? alloc_inode+0xb8/0x1b0 [ 894.131578][T14440] alloc_inode+0xb8/0x1b0 [ 894.131597][T14440] path_from_stashed+0x205/0x580 [ 894.131627][T14440] open_namespace+0x9a/0x1c0 [ 894.131650][T14440] ? __pfx_open_namespace+0x10/0x10 [ 894.131679][T14440] pidfd_ioctl+0x2885/0x3280 [ 894.131702][T14440] ? __pfx_pidfd_ioctl+0x10/0x10 [ 894.131728][T14440] ? __fget_files+0x2a/0x420 [ 894.131748][T14440] ? __fget_files+0x3a8/0x420 [ 894.131768][T14440] ? __fget_files+0x2a/0x420 [ 894.131790][T14440] ? bpf_lsm_file_ioctl+0x9/0x20 [ 894.131816][T14440] ? __pfx_pidfd_ioctl+0x10/0x10 [ 894.131836][T14440] __se_sys_ioctl+0xff/0x170 [ 894.131853][T14440] do_syscall_64+0x166/0x520 [ 894.131886][T14440] ? trace_irq_disable+0x3b/0x140 [ 894.131903][T14440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.131919][T14440] ? clear_bhb_loop+0x70/0xc0 [ 894.131939][T14440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.131955][T14440] RIP: 0033:0x7f9b0ff9e0d9 [ 894.131970][T14440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.131984][T14440] RSP: 002b:00007f9b0e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 894.132001][T14440] RAX: ffffffffffffffda RBX: 00007f9b10225fa0 RCX: 00007f9b0ff9e0d9 [ 894.132013][T14440] RDX: 0000000000000000 RSI: 000000000000ff01 RDI: 0000000000000003 [ 894.132024][T14440] RBP: 00007f9b0e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 894.132034][T14440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.132044][T14440] R13: 00007f9b10226038 R14: 00007f9b10225fa0 R15: 00007ffe82621da8 [ 894.132068][T14440] [ 895.219411][ T5694] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 895.373316][ T5694] usb 4-1: unable to get BOS descriptor or descriptor too short [ 895.373828][ T5694] usb 4-1: not running at top speed; connect to a high speed hub [ 895.373855][ T5694] usb 4-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 895.374983][ T5694] usb 4-1: config 4 has an invalid interface number: 106 but max is 0 [ 895.375001][ T5694] usb 4-1: config 4 has no interface number 0 [ 895.375024][ T5694] usb 4-1: config 4 interface 106 has no altsetting 0 [ 895.380069][ T5694] usb 4-1: language id specifier not provided by device, defaulting to English [ 895.439646][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.439666][ T5694] usb 4-1: Product: syz [ 895.439677][ T5694] usb 4-1: Manufacturer: 朎㢶ޞ㪷舊⢴㠶羞櫳᾽ [ 895.439690][ T5694] usb 4-1: SerialNumber: syz [ 895.651426][ T5316] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 895.723272][T14450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.769457][T14450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.858385][ T5316] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 895.859390][ T5694] uvcvideo 4-1:4.106: Found UVC 0.00 device syz (0408:4033) [ 895.859411][ T5694] uvcvideo 4-1:4.106: Forcing UVC version to 1.0a [ 895.859459][ T5694] uvcvideo 4-1:4.106: No valid video chain found. [ 895.902224][ T5316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.902250][ T5316] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 895.902283][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.973305][ T5694] usb 4-1: USB disconnect, device number 50 [ 896.058749][ T5316] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 896.151931][ T3331] bridge_slave_1: left allmulticast mode [ 896.151959][ T3331] bridge_slave_1: left promiscuous mode [ 896.152146][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.154610][ T3331] bridge_slave_0: left allmulticast mode [ 896.154633][ T3331] bridge_slave_0: left promiscuous mode [ 896.231629][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.429500][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.432681][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.434983][ T3331] bond0 (unregistering): Released all slaves [ 896.496718][T14451] slcan: can't register candev [ 896.890280][ T3331] hsr_slave_0: left promiscuous mode [ 896.898738][ T3331] hsr_slave_1: left promiscuous mode [ 896.899733][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.930503][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.948447][T14468] FAULT_INJECTION: forcing a failure. [ 896.948447][T14468] name failslab, interval 1, probability 0, space 0, times 0 [ 896.948477][T14468] CPU: 0 UID: 0 PID: 14468 Comm: syz.2.2775 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 896.948500][T14468] Tainted: [L]=SOFTLOCKUP [ 896.948506][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 896.948515][T14468] Call Trace: [ 896.948522][T14468] [ 896.948528][T14468] dump_stack_lvl+0xe8/0x150 [ 896.948565][T14468] should_fail_ex+0x46b/0x600 [ 896.948598][T14468] should_failslab+0xa8/0x100 [ 896.948625][T14468] kmem_cache_alloc_noprof+0xa4/0x660 [ 896.948652][T14468] ? alloc_empty_file+0x5b/0x1d0 [ 896.948677][T14468] ? alloc_empty_file+0x5b/0x1d0 [ 896.948699][T14468] alloc_empty_file+0x5b/0x1d0 [ 896.948718][T14468] path_openat+0xa2/0x1d60 [ 896.948742][T14468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.948773][T14468] do_file_open+0x23e/0x4a0 [ 896.948801][T14468] ? __pfx_do_file_open+0x10/0x10 [ 896.948842][T14468] ? alloc_fd+0x654/0x6d0 [ 896.948869][T14468] do_sys_openat2+0x115/0x200 [ 896.948890][T14468] ? __pfx_do_sys_openat2+0x10/0x10 [ 896.948909][T14468] ? ksys_write+0x248/0x270 [ 896.948933][T14468] ? __pfx_ksys_write+0x10/0x10 [ 896.948959][T14468] __x64_sys_openat+0x138/0x170 [ 896.948981][T14468] do_syscall_64+0x166/0x520 [ 896.949002][T14468] ? trace_irq_disable+0x3b/0x140 [ 896.949019][T14468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.949035][T14468] ? clear_bhb_loop+0x70/0xc0 [ 896.949055][T14468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.949071][T14468] RIP: 0033:0x7f9b0ff5e90e [ 896.949086][T14468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 896.949100][T14468] RSP: 002b:00007f9b0e1b3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 896.949117][T14468] RAX: ffffffffffffffda RBX: 00007f9b0e1b46c0 RCX: 00007f9b0ff5e90e [ 896.949129][T14468] RDX: 0000000000000002 RSI: 00007f9b0e1b3c00 RDI: ffffffffffffff9c [ 896.949140][T14468] RBP: 00007f9b0e1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 896.949150][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.949160][T14468] R13: 00007f9b10226218 R14: 00007f9b10226180 R15: 00007ffe82621da8 [ 896.949184][T14468] [ 897.715790][ T5316] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 897.868837][ T5316] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 897.870084][ T5316] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.870110][ T5316] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 897.870140][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.983376][ T3331] team0 (unregistering): Port device team_slave_1 removed [ 898.071085][ T5316] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 898.152959][ T3331] team0 (unregistering): Port device team_slave_0 removed [ 898.397606][ T5694] usb 3-1: USB disconnect, device number 18 [ 898.460013][ T5694] idmouse 3-1:1.0: disconnected [ 898.586263][ T5316] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 898.737343][ T5316] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 898.738422][ T5316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.738443][ T5316] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 898.738473][ T5316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.983849][T14270] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.983939][T14270] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.010846][T14270] bridge_slave_0: entered allmulticast mode [ 899.034952][T14270] bridge_slave_0: entered promiscuous mode [ 899.075380][T14270] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.075496][T14270] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.075649][T14270] bridge_slave_1: entered allmulticast mode [ 899.124025][T14270] bridge_slave_1: entered promiscuous mode [ 899.322660][ T5316] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 899.507747][T14270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.561579][T14270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.040127][T14270] team0: Port device team_slave_0 added [ 900.302671][T14270] team0: Port device team_slave_1 added [ 900.681393][ T1709] usb 5-1: USB disconnect, device number 55 [ 901.264639][T14270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.264654][T14270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.264676][T14270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.315160][T14313] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.315297][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.315538][T14313] bridge_slave_0: entered allmulticast mode [ 901.339977][T14313] bridge_slave_0: entered promiscuous mode [ 901.557948][T14270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.557961][T14270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.557983][T14270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.608437][ T5721] usb 4-1: USB disconnect, device number 51 [ 901.615568][ T1709] idmouse 5-1:1.0: disconnected [ 901.742597][ T5721] idmouse 4-1:1.0: disconnected [ 901.881111][T14523] bridge0: port 3(vxlan0) entered blocking state [ 901.881255][T14523] bridge0: port 3(vxlan0) entered disabled state [ 901.881418][T14523] vxlan0: entered allmulticast mode [ 901.911709][T14523] vxlan0: entered promiscuous mode [ 902.031321][T14313] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.031409][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.031528][T14313] bridge_slave_1: entered allmulticast mode [ 902.033428][T14313] bridge_slave_1: entered promiscuous mode [ 902.613519][T14540] binder: 14539:14540 ioctl c0306201 0 returned -14 [ 903.679131][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 903.829898][T14313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.947653][T14313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.992751][T14270] hsr_slave_0: entered promiscuous mode [ 904.002500][T14270] hsr_slave_1: entered promiscuous mode [ 904.017526][T14270] debugfs: 'hsr0' already exists in 'hsr' [ 904.017548][T14270] Cannot create hsr debugfs directory [ 904.737134][T14313] team0: Port device team_slave_0 added [ 904.811763][T14585] Bluetooth: MGMT ver 1.23 [ 904.811792][T14585] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 905.041676][T14313] team0: Port device team_slave_1 added [ 905.456249][T14602] FAULT_INJECTION: forcing a failure. [ 905.456249][T14602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.456280][T14602] CPU: 0 UID: 0 PID: 14602 Comm: syz.4.2823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 905.456313][T14602] Tainted: [L]=SOFTLOCKUP [ 905.456322][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.456336][T14602] Call Trace: [ 905.456345][T14602] [ 905.456355][T14602] dump_stack_lvl+0xe8/0x150 [ 905.456392][T14602] should_fail_ex+0x46b/0x600 [ 905.456432][T14602] _copy_from_user+0x2d/0xb0 [ 905.456457][T14602] vmci_host_unlocked_ioctl+0x71c/0x2850 [ 905.456488][T14602] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 905.456539][T14602] ? kasan_quarantine_put+0xbb/0x1f0 [ 905.456571][T14602] ? tomoyo_path_number_perm+0x219/0x5f0 [ 905.456597][T14602] ? tomoyo_path_number_perm+0x219/0x5f0 [ 905.456623][T14602] ? do_vfs_ioctl+0x1184/0x1550 [ 905.456641][T14602] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 905.456665][T14602] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 905.456686][T14602] ? hook_file_ioctl+0x1f5/0x610 [ 905.456716][T14602] ? __asan_memset+0x22/0x50 [ 905.456744][T14602] ? smack_file_ioctl+0x265/0x370 [ 905.456768][T14602] ? __pfx_smack_file_ioctl+0x10/0x10 [ 905.456798][T14602] ? __fget_files+0x2a/0x420 [ 905.456826][T14602] ? __fget_files+0x3a8/0x420 [ 905.456845][T14602] ? __fget_files+0x2a/0x420 [ 905.456868][T14602] ? bpf_lsm_file_ioctl+0x9/0x20 [ 905.456894][T14602] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 905.456917][T14602] __se_sys_ioctl+0xff/0x170 [ 905.456934][T14602] do_syscall_64+0x166/0x520 [ 905.456954][T14602] ? trace_irq_disable+0x3b/0x140 [ 905.456971][T14602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.456988][T14602] ? clear_bhb_loop+0x70/0xc0 [ 905.457008][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.457023][T14602] RIP: 0033:0x7f2c7815e0d9 [ 905.457038][T14602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.457052][T14602] RSP: 002b:00007f2c763b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.457070][T14602] RAX: ffffffffffffffda RBX: 00007f2c783e5fa0 RCX: 00007f2c7815e0d9 [ 905.457082][T14602] RDX: 0000000000000000 RSI: 00000000000007ac RDI: 0000000000000003 [ 905.457092][T14602] RBP: 00007f2c763b6090 R08: 0000000000000000 R09: 0000000000000000 [ 905.457102][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.457112][T14602] R13: 00007f2c783e6038 R14: 00007f2c783e5fa0 R15: 00007fffbd37bbc8 [ 905.457136][T14602] [ 907.035882][ T5721] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 907.186070][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 907.186795][ T5721] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 907.190313][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.190331][ T5721] usb 4-1: Product: syz [ 907.190343][ T5721] usb 4-1: Manufacturer: syz [ 907.190354][ T5721] usb 4-1: SerialNumber: syz [ 907.242969][ T5721] usb 4-1: config 0 descriptor?? [ 907.457803][ T5721] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 908.158817][ T5721] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 908.207701][ T5721] usb 4-1: USB disconnect, device number 52 [ 908.394648][T14313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.394662][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.394682][T14313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.499296][T14313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.499309][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.499330][T14313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.479821][T14313] hsr_slave_0: entered promiscuous mode [ 909.501786][T14313] hsr_slave_1: entered promiscuous mode [ 909.514604][T14313] debugfs: 'hsr0' already exists in 'hsr' [ 909.514626][T14313] Cannot create hsr debugfs directory [ 910.062856][T14680] binder: 14679:14680 ioctl c0306201 0 returned -14 [ 910.345802][ T5721] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 910.508831][ T5721] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 910.516685][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 910.516707][ T5721] usb 4-1: Product: syz [ 910.516718][ T5721] usb 4-1: SerialNumber: syz [ 910.683935][ T5721] usb 4-1: config 0 descriptor?? [ 911.529758][ T5721] usb 4-1: USB disconnect, device number 53 [ 912.136717][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10 [ 912.295933][ T5721] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 912.347090][ T1709] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 912.449611][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 912.450289][ T5721] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 912.454901][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.454920][ T5721] usb 4-1: Product: syz [ 912.454930][ T5721] usb 4-1: Manufacturer: syz [ 912.454941][ T5721] usb 4-1: SerialNumber: syz [ 912.503751][ T5721] usb 4-1: config 0 descriptor?? [ 912.512601][ T1709] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 912.532354][ T1709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.532403][ T1709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.532421][ T1709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 912.532439][ T1709] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.591050][ T1709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.591071][ T1709] usb 5-1: Product: syz [ 912.591083][ T1709] usb 5-1: Manufacturer: syz [ 912.591094][ T1709] usb 5-1: SerialNumber: syz [ 912.706048][ T5721] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 912.863997][ T1709] usb 5-1: USB disconnect, device number 56 [ 913.337330][ T5721] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 913.369740][ T5721] usb 4-1: USB disconnect, device number 54 [ 916.588494][ T3331] bridge_slave_1: left allmulticast mode [ 916.588524][ T3331] bridge_slave_1: left promiscuous mode [ 916.588739][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.632826][T14797] FAULT_INJECTION: forcing a failure. [ 916.632826][T14797] name failslab, interval 1, probability 0, space 0, times 0 [ 916.632855][T14797] CPU: 0 UID: 0 PID: 14797 Comm: syz.2.2908 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 916.632878][T14797] Tainted: [L]=SOFTLOCKUP [ 916.632885][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.632895][T14797] Call Trace: [ 916.632901][T14797] [ 916.632909][T14797] dump_stack_lvl+0xe8/0x150 [ 916.632940][T14797] should_fail_ex+0x46b/0x600 [ 916.632968][T14797] should_failslab+0xa8/0x100 [ 916.632989][T14797] kmem_cache_alloc_noprof+0xa4/0x660 [ 916.633015][T14797] ? posix_lock_inode+0x238/0x3e80 [ 916.633036][T14797] ? posix_lock_inode+0x238/0x3e80 [ 916.633062][T14797] posix_lock_inode+0x238/0x3e80 [ 916.633082][T14797] ? smk_tskacc+0x2fb/0x370 [ 916.633116][T14797] ? __pfx_posix_lock_inode+0x10/0x10 [ 916.633138][T14797] ? __rt_spin_lock_init+0x3e/0x50 [ 916.633168][T14797] fcntl_setlk+0x9a6/0x1070 [ 916.633191][T14797] ? get_pid_task+0x20/0x1f0 [ 916.633226][T14797] ? __pfx_fcntl_setlk+0x10/0x10 [ 916.633261][T14797] do_fcntl+0x981/0x19e0 [ 916.633288][T14797] ? smack_file_fcntl+0x27c/0x320 [ 916.633311][T14797] ? __pfx_do_fcntl+0x10/0x10 [ 916.633334][T14797] ? __pfx_smack_file_fcntl+0x10/0x10 [ 916.633364][T14797] ? __fget_files+0x2a/0x420 [ 916.633389][T14797] ? bpf_lsm_file_fcntl+0x9/0x20 [ 916.633415][T14797] __se_sys_fcntl+0xcb/0x160 [ 916.633440][T14797] do_syscall_64+0x166/0x520 [ 916.633461][T14797] ? trace_irq_disable+0x3b/0x140 [ 916.633478][T14797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.633494][T14797] ? clear_bhb_loop+0x70/0xc0 [ 916.633513][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.633529][T14797] RIP: 0033:0x7f9b0ff9e0d9 [ 916.633544][T14797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.633558][T14797] RSP: 002b:00007f9b0e1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 916.633579][T14797] RAX: ffffffffffffffda RBX: 00007f9b10226090 RCX: 00007f9b0ff9e0d9 [ 916.633591][T14797] RDX: 00002000000000c0 RSI: 0000000000000006 RDI: 0000000000000003 [ 916.633602][T14797] RBP: 00007f9b0e1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 916.633612][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.633622][T14797] R13: 00007f9b10226128 R14: 00007f9b10226090 R15: 00007ffe82621da8 [ 916.633646][T14797] [ 916.776658][ T3331] bridge_slave_0: left allmulticast mode [ 916.776685][ T3331] bridge_slave_0: left promiscuous mode [ 916.776893][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.384010][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.423101][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.452088][ T3331] bond0 (unregistering): Released all slaves [ 917.509116][ T5721] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 917.688463][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 917.689093][ T5721] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 917.690169][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 917.690190][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 917.700979][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.700999][ T5721] usb 4-1: Product: syz [ 917.701011][ T5721] usb 4-1: Manufacturer: syz [ 917.701022][ T5721] usb 4-1: SerialNumber: syz [ 917.788360][ T5721] usb 4-1: config 0 descriptor?? [ 917.818041][ T5721] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 917.818085][ T5721] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 918.535421][ T5721] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 918.631152][ T5721] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 918.631538][ T5721] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 918.631551][ T5721] em28xx 4-1:0.0: No AC97 audio processor [ 918.742569][ T5721] usb 4-1: USB disconnect, device number 55 [ 918.768313][ T5721] em28xx 4-1:0.0: Disconnecting em28xx [ 919.010011][ T3331] hsr_slave_0: left promiscuous mode [ 919.027402][ T3331] hsr_slave_1: left promiscuous mode [ 919.028260][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.051252][T14824] netlink: 'syz.4.2922': attribute type 4 has an invalid length. [ 919.078008][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.944367][ T5721] em28xx: Freeing device [ 920.186184][T14840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 920.186401][T14840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 920.187206][T14840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 920.187332][T14840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 920.187894][T14840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 920.187996][T14840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 920.188455][T14840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 920.188540][T14840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 920.188562][T14840] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 920.307648][ T5606] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 920.498377][ T3331] team0 (unregistering): Port device team_slave_1 removed [ 920.552644][ T3331] team0 (unregistering): Port device team_slave_0 removed [ 920.575792][ T6761] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 920.732490][ T6761] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 920.733597][ T6761] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.735209][ T6761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 920.735227][ T6761] usb 4-1: Product: syz [ 920.735239][ T6761] usb 4-1: Manufacturer: syz [ 921.059357][ T6761] usb 4-1: USB disconnect, device number 56 [ 922.601413][T14880] FAULT_INJECTION: forcing a failure. [ 922.601413][T14880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.601444][T14880] CPU: 0 UID: 0 PID: 14880 Comm: syz.2.2946 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 922.601472][T14880] Tainted: [L]=SOFTLOCKUP [ 922.601479][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 922.601489][T14880] Call Trace: [ 922.601496][T14880] [ 922.601503][T14880] dump_stack_lvl+0xe8/0x150 [ 922.601534][T14880] should_fail_ex+0x46b/0x600 [ 922.601563][T14880] _copy_from_iter+0x1d3/0x1660 [ 922.601594][T14880] ? proc_sys_call_handler+0x3d1/0x830 [ 922.601613][T14880] ? proc_sys_call_handler+0x3d1/0x830 [ 922.601629][T14880] ? __pfx__copy_from_iter+0x10/0x10 [ 922.601653][T14880] ? proc_sys_call_handler+0x3d1/0x830 [ 922.601669][T14880] ? __kvmalloc_node_noprof+0x5e6/0x8a0 [ 922.601690][T14880] ? proc_sys_call_handler+0x3d1/0x830 [ 922.601705][T14880] ? proc_sys_call_handler+0x3d1/0x830 [ 922.601727][T14880] proc_sys_call_handler+0x425/0x830 [ 922.601748][T14880] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 922.601773][T14880] do_iter_readv_writev+0x624/0x8d0 [ 922.601801][T14880] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 922.601837][T14880] vfs_writev+0x34c/0x990 [ 922.601857][T14880] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.601885][T14880] ? __pfx_vfs_writev+0x10/0x10 [ 922.601914][T14880] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 922.601940][T14880] ? mutex_lock_nested+0x152/0x1d0 [ 922.601955][T14880] ? fdget_pos+0x252/0x320 [ 922.601982][T14880] do_writev+0x15a/0x2e0 [ 922.602001][T14880] ? __pfx_do_writev+0x10/0x10 [ 922.602027][T14880] do_syscall_64+0x166/0x520 [ 922.602048][T14880] ? trace_irq_disable+0x3b/0x140 [ 922.602064][T14880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.602080][T14880] ? clear_bhb_loop+0x70/0xc0 [ 922.602104][T14880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.602120][T14880] RIP: 0033:0x7f9b0ff9e0d9 [ 922.602135][T14880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.602150][T14880] RSP: 002b:00007f9b0e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 922.602167][T14880] RAX: ffffffffffffffda RBX: 00007f9b10225fa0 RCX: 00007f9b0ff9e0d9 [ 922.602179][T14880] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 922.602189][T14880] RBP: 00007f9b0e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 922.602199][T14880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.602209][T14880] R13: 00007f9b10226038 R14: 00007f9b10225fa0 R15: 00007ffe82621da8 [ 922.602241][T14880] [ 925.433683][T14926] wlan0 speed is unknown, defaulting to 1000 [ 934.638178][T15021] FAULT_INJECTION: forcing a failure. [ 934.638178][T15021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.638207][T15021] CPU: 0 UID: 0 PID: 15021 Comm: syz.4.2998 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 934.638230][T15021] Tainted: [L]=SOFTLOCKUP [ 934.638236][T15021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.638246][T15021] Call Trace: [ 934.638252][T15021] [ 934.638260][T15021] dump_stack_lvl+0xe8/0x150 [ 934.638289][T15021] should_fail_ex+0x46b/0x600 [ 934.638318][T15021] _copy_to_user+0x31/0xb0 [ 934.638337][T15021] simple_read_from_buffer+0xe1/0x170 [ 934.638363][T15021] proc_fail_nth_read+0x1be/0x230 [ 934.638391][T15021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.638418][T15021] ? rw_verify_area+0x250/0x4d0 [ 934.638442][T15021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.638465][T15021] vfs_read+0x219/0xa90 [ 934.638494][T15021] ? __pfx_vfs_read+0x10/0x10 [ 934.638518][T15021] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 934.638542][T15021] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 934.638563][T15021] ? mutex_lock_nested+0x152/0x1d0 [ 934.638578][T15021] ? fdget_pos+0x252/0x320 [ 934.638605][T15021] ksys_read+0x156/0x270 [ 934.638629][T15021] ? __pfx_ksys_read+0x10/0x10 [ 934.638660][T15021] do_syscall_64+0x166/0x520 [ 934.638681][T15021] ? trace_irq_disable+0x3b/0x140 [ 934.638699][T15021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.638715][T15021] ? clear_bhb_loop+0x70/0xc0 [ 934.638735][T15021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.638751][T15021] RIP: 0033:0x7f2c7811e90e [ 934.638766][T15021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 934.638780][T15021] RSP: 002b:00007f2c763b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 934.638797][T15021] RAX: ffffffffffffffda RBX: 00007f2c763b66c0 RCX: 00007f2c7811e90e [ 934.638809][T15021] RDX: 000000000000000f RSI: 00007f2c763b60a0 RDI: 000000000000000a [ 934.638820][T15021] RBP: 00007f2c763b6090 R08: 0000000000000000 R09: 0000000000000000 [ 934.638830][T15021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.638839][T15021] R13: 00007f2c783e6038 R14: 00007f2c783e5fa0 R15: 00007fffbd37bbc8 [ 934.638864][T15021] [ 934.718252][ T6761] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 934.966912][ T6761] usb 4-1: Using ep0 maxpacket: 8 [ 934.970504][ T6761] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 934.973826][ T6761] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 934.973844][ T6761] usb 4-1: config 0 has no interface number 0 [ 934.973875][ T6761] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 934.973892][ T6761] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 934.973910][ T6761] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 934.973929][ T6761] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 934.973946][ T6761] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 934.973975][ T6761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.137178][ T6761] usb 4-1: config 0 descriptor?? [ 935.180824][ T6761] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 935.927259][ T6761] usb 4-1: USB disconnect, device number 57 [ 935.953902][ T6761] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 936.600997][T15049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3005'. [ 936.663336][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3005'. [ 936.807793][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.807844][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.547683][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 937.593785][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 937.630811][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 937.652276][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 937.653116][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 939.848301][ T5594] Bluetooth: hci1: command tx timeout [ 941.930789][ T5594] Bluetooth: hci1: command tx timeout [ 942.430161][T14313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 942.552076][T14313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.575027][T14313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 942.761187][T14313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 942.831118][T15064] wlan0 speed is unknown, defaulting to 1000 [ 944.006535][ T5594] Bluetooth: hci1: command tx timeout [ 944.933651][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.979879][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.999835][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 945.002034][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 945.005345][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 946.086250][ T5606] Bluetooth: hci1: command tx timeout [ 950.228408][ T5606] Bluetooth: hci0: command tx timeout [ 951.532755][T15267] binder: 15265:15267 ioctl c0306201 0 returned -14 [ 951.875968][ T6761] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 952.039413][ T6761] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 952.057545][ T6761] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 952.057565][ T6761] usb 4-1: Product: syz [ 952.057576][ T6761] usb 4-1: SerialNumber: syz [ 952.094960][ T6761] usb 4-1: config 0 descriptor?? [ 952.246375][ T5606] Bluetooth: hci0: command tx timeout [ 952.903557][ T6761] usb 4-1: USB disconnect, device number 58 [ 953.279067][T15298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.642791][T15064] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.642893][T15064] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.643042][T15064] bridge_slave_0: entered allmulticast mode [ 953.698154][T15064] bridge_slave_0: entered promiscuous mode [ 953.717649][T15064] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.717734][T15064] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.717886][T15064] bridge_slave_1: entered allmulticast mode [ 953.770715][T15064] bridge_slave_1: entered promiscuous mode [ 954.326216][ T5606] Bluetooth: hci0: command tx timeout [ 954.720957][T15064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.866354][T15064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.991056][ T3331] bridge_slave_1: left allmulticast mode [ 954.991082][ T3331] bridge_slave_1: left promiscuous mode [ 954.991256][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.078010][ T3331] bridge_slave_0: left allmulticast mode [ 955.078037][ T3331] bridge_slave_0: left promiscuous mode [ 955.078251][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.108462][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.220409][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.270041][ T3331] bond0 (unregistering): Released all slaves [ 956.406144][ T5606] Bluetooth: hci0: command tx timeout [ 956.601704][T15064] team0: Port device team_slave_0 added [ 956.627449][T15064] team0: Port device team_slave_1 added [ 956.845779][ T1709] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 956.941798][T15064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.941812][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.941832][T15064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.995957][ T1709] usb 4-1: Using ep0 maxpacket: 8 [ 956.997501][ T1709] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 957.000728][ T1709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.000747][ T1709] usb 4-1: Product: syz [ 957.000759][ T1709] usb 4-1: Manufacturer: syz [ 957.000770][ T1709] usb 4-1: SerialNumber: syz [ 957.110832][ T1709] usb 4-1: config 0 descriptor?? [ 957.310024][ T3331] hsr_slave_0: left promiscuous mode [ 957.312899][ T1709] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 957.339193][ T3331] hsr_slave_1: left promiscuous mode [ 957.340459][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.344969][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.151754][ T1709] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 958.185013][ T1709] usb 4-1: USB disconnect, device number 59 [ 958.892344][ T3331] team0 (unregistering): Port device team_slave_1 removed [ 959.020449][ T3331] team0 (unregistering): Port device team_slave_0 removed [ 959.221862][T15395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 959.222092][T15395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 959.222962][T15395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 959.223084][T15395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 959.223644][T15395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 959.223751][T15395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 959.224211][T15395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 959.224308][T15395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 959.224324][T15395] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 959.327099][ T5606] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 959.595918][ T1709] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 959.746561][ T1709] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 959.747653][ T1709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.749270][ T1709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 959.749288][ T1709] usb 4-1: Product: syz [ 959.749299][ T1709] usb 4-1: Manufacturer: syz [ 960.101032][ T1709] usb 4-1: USB disconnect, device number 60 [ 960.188887][T15203] wlan0 speed is unknown, defaulting to 1000 [ 960.208178][T15064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.208191][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.208213][T15064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.952308][T15064] hsr_slave_0: entered promiscuous mode [ 960.981345][T15064] hsr_slave_1: entered promiscuous mode [ 961.069459][T15064] debugfs: 'hsr0' already exists in 'hsr' [ 961.069481][T15064] Cannot create hsr debugfs directory [ 965.300090][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 965.668845][ T6761] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 965.815869][ T6761] usb 4-1: Using ep0 maxpacket: 8 [ 965.819976][ T6761] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 965.823233][ T6761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.823252][ T6761] usb 4-1: Product: syz [ 965.823264][ T6761] usb 4-1: Manufacturer: syz [ 965.823275][ T6761] usb 4-1: SerialNumber: syz [ 965.909927][ T6761] usb 4-1: config 0 descriptor?? [ 966.125330][ T6761] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 966.988521][ T6761] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 967.023261][ T6761] usb 4-1: USB disconnect, device number 61 [ 968.782658][T15549] binder: 15547:15549 ioctl c0306201 0 returned -14 [ 969.260195][ T1709] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 969.413259][ T1709] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 969.452537][ T1709] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 969.452559][ T1709] usb 4-1: Product: syz [ 969.452571][ T1709] usb 4-1: SerialNumber: syz [ 969.503407][ T1709] usb 4-1: config 0 descriptor?? [ 969.990683][ T1709] usb 4-1: USB disconnect, device number 62 [ 971.240461][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10 [ 971.395517][T15599] Bluetooth: MGMT ver 1.23 [ 971.395545][T15599] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 972.341720][T15203] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.341804][T15203] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.368553][T15203] bridge_slave_0: entered allmulticast mode [ 972.387662][T15203] bridge_slave_0: entered promiscuous mode [ 972.439016][T15203] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.439159][T15203] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.439313][T15203] bridge_slave_1: entered allmulticast mode [ 972.470693][T15203] bridge_slave_1: entered promiscuous mode [ 973.781922][T15203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.821353][T15203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.082503][T15203] team0: Port device team_slave_0 added [ 974.113904][T15203] team0: Port device team_slave_1 added [ 974.771427][T15673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.771833][T15673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.915380][T15677] FAULT_INJECTION: forcing a failure. [ 974.915380][T15677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.915411][T15677] CPU: 0 UID: 0 PID: 15677 Comm: syz.4.3230 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 974.915434][T15677] Tainted: [L]=SOFTLOCKUP [ 974.915440][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.915451][T15677] Call Trace: [ 974.915457][T15677] [ 974.915464][T15677] dump_stack_lvl+0xe8/0x150 [ 974.915493][T15677] should_fail_ex+0x46b/0x600 [ 974.915523][T15677] _copy_from_iter+0x1d3/0x1660 [ 974.915552][T15677] ? rcu_is_watching+0x16/0xb0 [ 974.915575][T15677] ? trace_kmem_cache_alloc+0x29/0xe0 [ 974.915604][T15677] ? __pfx__copy_from_iter+0x10/0x10 [ 974.915627][T15677] ? __alloc_skb+0x27a/0x7a0 [ 974.915657][T15677] ? __alloc_skb+0x27a/0x7a0 [ 974.915690][T15677] ? netlink_sendmsg+0x650/0xb40 [ 974.915711][T15677] ? skb_put+0x112/0x210 [ 974.915738][T15677] netlink_sendmsg+0x6c0/0xb40 [ 974.915763][T15677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.915783][T15677] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 974.915804][T15677] ? __kernel_text_address+0xd/0x30 [ 974.915819][T15677] ? unwind_get_return_address+0x4d/0x90 [ 974.915839][T15677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.915857][T15677] sock_sendmsg_nosec+0x13a/0x180 [ 974.915882][T15677] ____sys_sendmsg+0x565/0x870 [ 974.915898][T15677] ? __might_fault+0xaf/0x130 [ 974.915919][T15677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.915942][T15677] ? import_iovec+0x73/0xa0 [ 974.915961][T15677] ___sys_sendmsg+0x2a5/0x360 [ 974.915977][T15677] ? __lock_acquire+0x683/0x2ce0 [ 974.915998][T15677] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.916040][T15677] ? __fget_files+0x2a/0x420 [ 974.916060][T15677] ? __fget_files+0x3a8/0x420 [ 974.916088][T15677] __x64_sys_sendmsg+0x1b7/0x290 [ 974.916107][T15677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.916139][T15677] do_syscall_64+0x166/0x520 [ 974.916160][T15677] ? trace_irq_disable+0x3b/0x140 [ 974.916177][T15677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.916193][T15677] ? clear_bhb_loop+0x70/0xc0 [ 974.916213][T15677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.916229][T15677] RIP: 0033:0x7f2c7815e0d9 [ 974.916245][T15677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.916259][T15677] RSP: 002b:00007f2c76395028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.916277][T15677] RAX: ffffffffffffffda RBX: 00007f2c783e6090 RCX: 00007f2c7815e0d9 [ 974.916289][T15677] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 974.916299][T15677] RBP: 00007f2c76395090 R08: 0000000000000000 R09: 0000000000000000 [ 974.916309][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.916318][T15677] R13: 00007f2c783e6128 R14: 00007f2c783e6090 R15: 00007fffbd37bbc8 [ 974.916342][T15677] [ 975.072782][ T6759] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 975.295786][ T6759] usb 3-1: device descriptor read/64, error -71 [ 975.535885][ T6759] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 975.665830][ T6759] usb 3-1: device descriptor read/64, error -71 [ 975.776365][ T6759] usb usb3-port1: attempt power cycle [ 976.116020][ T6759] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 976.142145][ T6759] usb 3-1: device descriptor read/8, error -71 [ 976.258729][T15676] batman_adv: batadv0: Adding interface: veth0 [ 976.258743][T15676] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.258767][T15676] batman_adv: batadv0: Interface activated: veth0 [ 976.265315][T15203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.265329][T15203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.265349][T15203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.399279][T15203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.399295][T15203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.399317][T15203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.505749][ T6759] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 976.526516][ T6759] usb 3-1: device descriptor read/8, error -71 [ 976.636367][ T6759] usb usb3-port1: unable to enumerate USB device [ 977.334885][T15700] wlan0 speed is unknown, defaulting to 1000 [ 978.297886][T15203] hsr_slave_0: entered promiscuous mode [ 979.048877][T15203] hsr_slave_1: entered promiscuous mode [ 979.049704][T15203] debugfs: 'hsr0' already exists in 'hsr' [ 979.049724][T15203] Cannot create hsr debugfs directory [ 980.671769][T15729] binder: 15723:15729 ioctl c0306201 0 returned -14 [ 981.952066][ T3331] bridge_slave_1: left allmulticast mode [ 981.952102][ T3331] bridge_slave_1: left promiscuous mode [ 981.952300][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.014439][ T3331] bridge_slave_0: left allmulticast mode [ 982.014468][ T3331] bridge_slave_0: left promiscuous mode [ 982.014671][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.035974][ T6759] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 982.189022][ T6759] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 982.190019][ T6759] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.194459][ T6759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.194478][ T6759] usb 4-1: Product: syz [ 982.194489][ T6759] usb 4-1: Manufacturer: syz [ 982.194500][ T6759] usb 4-1: SerialNumber: syz [ 982.512803][ T6759] usb 4-1: selecting invalid altsetting 1 [ 982.512868][ T6759] speedtch 4-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 982.512949][ T6759] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -22! [ 982.512993][ T6759] speedtch 4-1:1.0: probe with driver speedtch failed with error -22 [ 982.727234][T15757] FAULT_INJECTION: forcing a failure. [ 982.727234][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 982.727266][T15757] CPU: 0 UID: 0 PID: 15757 Comm: syz.3.3256 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 982.727290][T15757] Tainted: [L]=SOFTLOCKUP [ 982.727298][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 982.727309][T15757] Call Trace: [ 982.727315][T15757] [ 982.727322][T15757] dump_stack_lvl+0xe8/0x150 [ 982.727353][T15757] should_fail_ex+0x46b/0x600 [ 982.727383][T15757] should_failslab+0xa8/0x100 [ 982.727409][T15757] __kmalloc_noprof+0xfe/0x780 [ 982.727427][T15757] ? smk_write_net4addr+0x173/0xb80 [ 982.727451][T15757] ? smk_write_net4addr+0x173/0xb80 [ 982.727481][T15757] ? _copy_from_user+0x94/0xb0 [ 982.727501][T15757] smk_write_net4addr+0x173/0xb80 [ 982.727526][T15757] ? irqentry_exit+0x218/0x910 [ 982.727549][T15757] ? __pfx_smk_write_net4addr+0x10/0x10 [ 982.727575][T15757] ? __pfx_smk_write_net4addr+0x10/0x10 [ 982.727600][T15757] ? __pfx_smk_write_net4addr+0x10/0x10 [ 982.727624][T15757] ? vfs_write+0x284/0xbb0 [ 982.727650][T15757] ? __pfx_smk_write_net4addr+0x10/0x10 [ 982.727673][T15757] vfs_write+0x29f/0xbb0 [ 982.727702][T15757] ? __pfx_vfs_write+0x10/0x10 [ 982.727726][T15757] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 982.727750][T15757] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 982.727771][T15757] ? mutex_lock_nested+0x152/0x1d0 [ 982.727786][T15757] ? fdget_pos+0x252/0x320 [ 982.727814][T15757] ksys_write+0x156/0x270 [ 982.727838][T15757] ? __pfx_ksys_write+0x10/0x10 [ 982.727870][T15757] do_syscall_64+0x166/0x520 [ 982.727891][T15757] ? trace_irq_disable+0x3b/0x140 [ 982.727908][T15757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.727925][T15757] ? clear_bhb_loop+0x70/0xc0 [ 982.727945][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.727962][T15757] RIP: 0033:0x7f648c9ce0d9 [ 982.727977][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.727992][T15757] RSP: 002b:00007f648ac26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 982.728009][T15757] RAX: ffffffffffffffda RBX: 00007f648cc55fa0 RCX: 00007f648c9ce0d9 [ 982.728021][T15757] RDX: 0000000000000057 RSI: 0000200000000140 RDI: 0000000000000003 [ 982.728032][T15757] RBP: 00007f648ac26090 R08: 0000000000000000 R09: 0000000000000000 [ 982.728042][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.728052][T15757] R13: 00007f648cc56038 R14: 00007f648cc55fa0 R15: 00007fffc170be18 [ 982.728078][T15757] [ 983.269059][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.322264][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.396607][ T6759] usb 4-1: selecting invalid altsetting 1 [ 983.396625][ T6759] speedtch 4-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 983.397320][ T6759] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -22! [ 983.397365][ T6759] speedtch 4-1:1.1: probe with driver speedtch failed with error -22 [ 983.456065][ T6759] usb 4-1: USB disconnect, device number 63 [ 983.482024][ T3331] bond0 (unregistering): Released all slaves [ 984.515780][ T3331] hsr_slave_0: left promiscuous mode [ 984.518053][ T3331] hsr_slave_1: left promiscuous mode [ 984.518926][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.526638][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.687682][ T6759] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 985.772181][ T3331] team0 (unregistering): Port device team_slave_1 removed [ 985.819792][ T3331] team0 (unregistering): Port device team_slave_0 removed [ 985.838688][ T6759] usb 3-1: Using ep0 maxpacket: 8 [ 985.839407][ T6759] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 985.840380][ T6759] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 985.840399][ T6759] usb 3-1: config 0 has no interface number 0 [ 985.840430][ T6759] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 985.840447][ T6759] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 985.840466][ T6759] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 985.840486][ T6759] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 985.840502][ T6759] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 985.840533][ T6759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.972621][ T6759] usb 3-1: config 0 descriptor?? [ 986.045878][ T6759] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 986.193462][T15818] FAULT_INJECTION: forcing a failure. [ 986.193462][T15818] name failslab, interval 1, probability 0, space 0, times 0 [ 986.193492][T15818] CPU: 0 UID: 0 PID: 15818 Comm: syz.2.3282 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 986.193515][T15818] Tainted: [L]=SOFTLOCKUP [ 986.193521][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.193531][T15818] Call Trace: [ 986.193538][T15818] [ 986.193545][T15818] dump_stack_lvl+0xe8/0x150 [ 986.193574][T15818] should_fail_ex+0x46b/0x600 [ 986.193604][T15818] should_failslab+0xa8/0x100 [ 986.193624][T15818] kmem_cache_alloc_noprof+0xa4/0x660 [ 986.193651][T15818] ? alloc_empty_file+0x5b/0x1d0 [ 986.193669][T15818] ? alloc_empty_file+0x5b/0x1d0 [ 986.193692][T15818] alloc_empty_file+0x5b/0x1d0 [ 986.193710][T15818] path_openat+0xa2/0x1d60 [ 986.193734][T15818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.193765][T15818] do_file_open+0x23e/0x4a0 [ 986.193794][T15818] ? __pfx_do_file_open+0x10/0x10 [ 986.193835][T15818] ? alloc_fd+0x654/0x6d0 [ 986.193863][T15818] do_sys_openat2+0x115/0x200 [ 986.193883][T15818] ? __pfx_do_sys_openat2+0x10/0x10 [ 986.193903][T15818] ? ksys_write+0x248/0x270 [ 986.193927][T15818] ? __pfx_ksys_write+0x10/0x10 [ 986.193952][T15818] __x64_sys_openat+0x138/0x170 [ 986.193975][T15818] do_syscall_64+0x166/0x520 [ 986.193996][T15818] ? trace_irq_disable+0x3b/0x140 [ 986.194013][T15818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.194032][T15818] ? clear_bhb_loop+0x70/0xc0 [ 986.194061][T15818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.194077][T15818] RIP: 0033:0x7f9b0ff5e90e [ 986.194092][T15818] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 986.194105][T15818] RSP: 002b:00007f9b0e1f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 986.194122][T15818] RAX: ffffffffffffffda RBX: 00007f9b0e1f66c0 RCX: 00007f9b0ff5e90e [ 986.194135][T15818] RDX: 0000000000000002 RSI: 00007f9b0e1f5c00 RDI: ffffffffffffff9c [ 986.194146][T15818] RBP: 00007f9b0e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 986.194156][T15818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.194166][T15818] R13: 00007f9b10226038 R14: 00007f9b10225fa0 R15: 00007ffe82621da8 [ 986.194191][T15818] [ 986.326335][ T5694] usb 3-1: USB disconnect, device number 23 [ 986.472168][ T5694] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 987.412836][T15843] FAULT_INJECTION: forcing a failure. [ 987.412836][T15843] name failslab, interval 1, probability 0, space 0, times 0 [ 987.412868][T15843] CPU: 0 UID: 0 PID: 15843 Comm: syz.4.3292 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 987.412891][T15843] Tainted: [L]=SOFTLOCKUP [ 987.412896][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.412907][T15843] Call Trace: [ 987.412914][T15843] [ 987.412921][T15843] dump_stack_lvl+0xe8/0x150 [ 987.412951][T15843] should_fail_ex+0x46b/0x600 [ 987.412980][T15843] should_failslab+0xa8/0x100 [ 987.413002][T15843] __kmalloc_cache_noprof+0xa0/0x6b0 [ 987.413020][T15843] ? snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 987.413142][T15843] ? snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 987.413171][T15843] snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 987.413194][T15843] ? __lock_acquire+0x683/0x2ce0 [ 987.413217][T15843] ? lockdep_unlock+0x5c/0xd0 [ 987.413231][T15843] ? __lock_acquire+0x13e8/0x2ce0 [ 987.413259][T15843] ? do_raw_spin_lock+0x12b/0x2f0 [ 987.413284][T15843] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 987.413318][T15843] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 987.413342][T15843] ? snd_pcm_oss_set_trigger+0x2f5/0xda0 [ 987.413366][T15843] snd_pcm_oss_set_trigger+0x4ff/0xda0 [ 987.413394][T15843] snd_pcm_oss_poll+0x67d/0x900 [ 987.413419][T15843] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 987.413444][T15843] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 987.413465][T15843] __io_arm_poll_handler+0x385/0xad0 [ 987.413497][T15843] io_poll_add+0xda/0x200 [ 987.413518][T15843] ? __pfx_io_poll_add+0x10/0x10 [ 987.413539][T15843] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 987.413566][T15843] ? __fget_files+0x2a/0x420 [ 987.413597][T15843] ? __fget_files+0x2a/0x420 [ 987.413617][T15843] ? __fget_files+0x3a8/0x420 [ 987.413640][T15843] __io_issue_sqe+0x188/0x4d0 [ 987.413662][T15843] io_issue_sqe+0x16d/0x1020 [ 987.413686][T15843] io_submit_sqes+0xd26/0x2310 [ 987.413729][T15843] __se_sys_io_uring_enter+0x364/0x1bb0 [ 987.413748][T15843] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 987.413780][T15843] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 987.413800][T15843] ? fput+0xa0/0xd0 [ 987.413822][T15843] ? ksys_write+0x248/0x270 [ 987.413847][T15843] ? __pfx_ksys_write+0x10/0x10 [ 987.413882][T15843] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 987.413903][T15843] do_syscall_64+0x166/0x520 [ 987.413925][T15843] ? trace_irq_disable+0x3b/0x140 [ 987.413942][T15843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.413959][T15843] ? clear_bhb_loop+0x70/0xc0 [ 987.413980][T15843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.413997][T15843] RIP: 0033:0x7f2c7815e0d9 [ 987.414013][T15843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.414027][T15843] RSP: 002b:00007f2c763b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 987.414045][T15843] RAX: ffffffffffffffda RBX: 00007f2c783e5fa0 RCX: 00007f2c7815e0d9 [ 987.414064][T15843] RDX: 00000000fffffffd RSI: 0000000001000001 RDI: 0000000000000004 [ 987.414074][T15843] RBP: 00007f2c763b6090 R08: 0000000000000000 R09: 0000000000000000 [ 987.414085][T15843] R10: 000000000000004b R11: 0000000000000246 R12: 0000000000000001 [ 987.414094][T15843] R13: 00007f2c783e6038 R14: 00007f2c783e5fa0 R15: 00007fffbd37bbc8 [ 987.414120][T15843] [ 987.438064][T15064] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 987.890512][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 987.931415][T15064] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 988.147517][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.148657][T15064] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 988.393526][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.411336][T15064] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 988.449671][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.968500][ T6759] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 989.135998][ T6759] usb 4-1: Using ep0 maxpacket: 8 [ 989.137513][ T6759] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 989.142650][ T6759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.142670][ T6759] usb 4-1: Product: syz [ 989.142681][ T6759] usb 4-1: Manufacturer: syz [ 989.142692][ T6759] usb 4-1: SerialNumber: syz [ 989.153032][ T6759] usb 4-1: config 0 descriptor?? [ 989.413502][ T6759] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 990.223909][ T6759] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 990.241942][ T6759] usb 4-1: USB disconnect, device number 64 [ 991.839044][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 993.095878][ T6761] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 993.285828][ T6761] usb 4-1: Using ep0 maxpacket: 8 [ 993.286495][ T6761] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 993.289689][ T6761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.289709][ T6761] usb 4-1: Product: syz [ 993.289720][ T6761] usb 4-1: Manufacturer: syz [ 993.289731][ T6761] usb 4-1: SerialNumber: syz [ 993.351407][ T6761] usb 4-1: config 0 descriptor?? [ 993.565908][ T6761] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 993.813801][ T6761] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 993.851366][ T6761] usb 4-1: USB disconnect, device number 65 [ 994.552963][T15064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.005223][T15064] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.045038][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.045133][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.121613][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.121696][T11446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.209847][ T6759] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 995.387032][ T6759] usb 4-1: Using ep0 maxpacket: 8 [ 995.387714][ T6759] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 995.390991][ T6759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.391010][ T6759] usb 4-1: Product: syz [ 995.391021][ T6759] usb 4-1: Manufacturer: syz [ 995.391033][ T6759] usb 4-1: SerialNumber: syz [ 995.412682][ T6759] usb 4-1: config 0 descriptor?? [ 995.694230][ T6759] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 996.502560][ T6759] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 996.560006][ T6759] usb 4-1: USB disconnect, device number 66 [ 998.251878][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.251932][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.568492][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 998.633438][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 998.663345][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 998.664562][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 998.681015][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1000.813798][ T5606] Bluetooth: hci1: command tx timeout [ 1001.581977][T16065] fuse: blksize only supported for fuseblk [ 1002.353180][T16065] input: syz0 as /devices/virtual/input/input10 [ 1002.845248][T16065] input: failed to attach handler evdev to device input10, error: -4 [ 1002.888474][ T5594] Bluetooth: hci1: command tx timeout [ 1003.359871][T15203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1003.500198][T15203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.503680][T15203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1003.715493][T15203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.730388][T15203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1003.871978][T15203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.241457][T15203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1004.244932][T15203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.356777][T16013] wlan0 speed is unknown, defaulting to 1000 [ 1005.003069][ T5594] Bluetooth: hci1: command tx timeout [ 1005.767436][T16114] wlan0 speed is unknown, defaulting to 1000 [ 1007.534980][ T5594] Bluetooth: hci1: command tx timeout [ 1008.337689][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1008.380437][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1008.382636][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1008.408508][ T5594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1008.427523][ T5594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.330829][T15241] bridge_slave_1: left allmulticast mode [ 1009.330857][T15241] bridge_slave_1: left promiscuous mode [ 1009.331057][T15241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.446686][T15241] bridge_slave_0: left allmulticast mode [ 1009.446727][T15241] bridge_slave_0: left promiscuous mode [ 1009.446915][T15241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.726994][ T5594] Bluetooth: hci0: command tx timeout [ 1011.351927][T16189] FAULT_INJECTION: forcing a failure. [ 1011.351927][T16189] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.351957][T16189] CPU: 0 UID: 0 PID: 16189 Comm: syz.4.3423 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1011.351980][T16189] Tainted: [L]=SOFTLOCKUP [ 1011.351986][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1011.352005][T16189] Call Trace: [ 1011.352011][T16189] [ 1011.352019][T16189] dump_stack_lvl+0xe8/0x150 [ 1011.352051][T16189] should_fail_ex+0x46b/0x600 [ 1011.352082][T16189] should_failslab+0xa8/0x100 [ 1011.352105][T16189] __kmalloc_noprof+0xfe/0x780 [ 1011.352121][T16189] ? rcu_is_watching+0x16/0xb0 [ 1011.352144][T16189] ? tomoyo_realpath_from_path+0xef/0x640 [ 1011.352163][T16189] ? tomoyo_realpath_from_path+0xef/0x640 [ 1011.352186][T16189] tomoyo_realpath_from_path+0xef/0x640 [ 1011.352212][T16189] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1011.352237][T16189] tomoyo_path_number_perm+0x246/0x5f0 [ 1011.352263][T16189] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1011.352287][T16189] ? __lock_acquire+0x683/0x2ce0 [ 1011.352316][T16189] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1011.352339][T16189] ? hook_file_ioctl+0x1f5/0x610 [ 1011.352375][T16189] ? __fget_files+0x2a/0x420 [ 1011.352399][T16189] ? __fget_files+0x2a/0x420 [ 1011.352418][T16189] ? __fget_files+0x3a8/0x420 [ 1011.352438][T16189] ? __fget_files+0x2a/0x420 [ 1011.352462][T16189] security_file_ioctl+0xc3/0x2a0 [ 1011.352489][T16189] __se_sys_ioctl+0x47/0x170 [ 1011.352506][T16189] do_syscall_64+0x166/0x520 [ 1011.352527][T16189] ? trace_irq_disable+0x3b/0x140 [ 1011.352546][T16189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.352563][T16189] ? clear_bhb_loop+0x70/0xc0 [ 1011.352583][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.352599][T16189] RIP: 0033:0x7f2c7815e0d9 [ 1011.352614][T16189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.352628][T16189] RSP: 002b:00007f2c763b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1011.352646][T16189] RAX: ffffffffffffffda RBX: 00007f2c783e5fa0 RCX: 00007f2c7815e0d9 [ 1011.352658][T16189] RDX: 0000200000000080 RSI: 00000000c1007c01 RDI: 0000000000000003 [ 1011.352668][T16189] RBP: 00007f2c763b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.352679][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.352688][T16189] R13: 00007f2c783e6038 R14: 00007f2c783e5fa0 R15: 00007fffbd37bbc8 [ 1011.352713][T16189] [ 1011.352719][T16189] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1011.682233][T15241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.718028][T15241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.751258][T15241] bond0 (unregistering): Released all slaves [ 1011.803159][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1012.429517][T15241] hsr_slave_0: left promiscuous mode [ 1012.430166][T15241] hsr_slave_1: left promiscuous mode [ 1012.430979][T15241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.453975][T15241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.848896][ T5594] Bluetooth: hci0: command tx timeout [ 1014.399706][T15241] team0 (unregistering): Port device team_slave_1 removed [ 1014.521605][T15241] team0 (unregistering): Port device team_slave_0 removed [ 1014.885818][ T5594] Bluetooth: hci0: command tx timeout [ 1015.863934][T16013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.864044][T16013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.864216][T16013] bridge_slave_0: entered allmulticast mode [ 1015.905399][T16013] bridge_slave_0: entered promiscuous mode [ 1015.935159][T16013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.945812][T16013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.954681][T16013] bridge_slave_1: entered allmulticast mode [ 1015.976370][T16013] bridge_slave_1: entered promiscuous mode [ 1016.300989][T16013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.342462][T16013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.738377][T16013] team0: Port device team_slave_0 added [ 1016.843433][T16013] team0: Port device team_slave_1 added [ 1016.965837][ T5594] Bluetooth: hci0: command tx timeout [ 1017.182303][T16013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.182316][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.182344][T16013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.183184][T16126] wlan0 speed is unknown, defaulting to 1000 [ 1017.327894][T16013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.327908][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.327929][T16013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.315434][T16013] hsr_slave_0: entered promiscuous mode [ 1018.322384][T16013] hsr_slave_1: entered promiscuous mode [ 1018.344001][T16013] debugfs: 'hsr0' already exists in 'hsr' [ 1018.344024][T16013] Cannot create hsr debugfs directory [ 1018.655826][ T6761] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1018.825838][ T6761] usb 4-1: Using ep0 maxpacket: 8 [ 1018.826502][ T6761] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1018.830205][ T6761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.830223][ T6761] usb 4-1: Product: syz [ 1018.830234][ T6761] usb 4-1: Manufacturer: syz [ 1018.830245][ T6761] usb 4-1: SerialNumber: syz [ 1018.872889][ T6761] usb 4-1: config 0 descriptor?? [ 1019.164730][ T6761] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1020.010195][ T6761] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1020.227729][ T6761] usb 4-1: USB disconnect, device number 67 [ 1020.867678][T16349] binder: 16346:16349 ioctl c0306201 0 returned -14 [ 1021.165881][ T5721] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1021.318169][ T5721] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1021.320875][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1021.320894][ T5721] usb 4-1: Product: syz [ 1021.320905][ T5721] usb 4-1: SerialNumber: syz [ 1021.385468][ T5721] usb 4-1: config 0 descriptor?? [ 1021.446637][ T6761] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1021.596758][ T6761] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1021.598410][ T6761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.734450][ T6761] usb 3-1: config 0 descriptor?? [ 1021.807839][ T6761] cp210x 3-1:0.0: cp210x converter detected [ 1022.256364][ T5721] usb 4-1: USB disconnect, device number 68 [ 1022.431635][ T6761] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1022.431658][ T6761] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1022.480098][ T6761] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1022.541163][ T6761] usb 3-1: USB disconnect, device number 24 [ 1022.604747][ T6761] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1022.605269][ T6761] cp210x 3-1:0.0: device disconnected [ 1022.832354][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1023.416498][ T5721] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1023.566086][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 1023.572507][ T5721] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1023.592935][ T5721] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1023.592955][ T5721] usb 4-1: config 0 has no interface number 0 [ 1023.592987][ T5721] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1023.593005][ T5721] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1023.593024][ T5721] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1023.593043][ T5721] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1023.593059][ T5721] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1023.593092][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.715787][ T5721] usb 4-1: config 0 descriptor?? [ 1023.809667][ T5721] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1024.024381][T16384] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1024.123856][ T6759] usb 4-1: USB disconnect, device number 69 [ 1024.154381][ T6759] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1024.894226][T16418] binder: 16417:16418 ioctl c0306201 0 returned -14 [ 1025.165809][ T6759] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1025.316507][ T6759] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1025.319329][ T6759] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1025.319348][ T6759] usb 4-1: Product: syz [ 1025.319359][ T6759] usb 4-1: SerialNumber: syz [ 1025.355775][ T6759] usb 4-1: config 0 descriptor?? [ 1026.251648][ T6759] usb 4-1: USB disconnect, device number 70 [ 1026.432959][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1029.550686][T16500] FAULT_INJECTION: forcing a failure. [ 1029.550686][T16500] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.550717][T16500] CPU: 0 UID: 0 PID: 16500 Comm: syz.4.3544 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1029.550740][T16500] Tainted: [L]=SOFTLOCKUP [ 1029.550746][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1029.550757][T16500] Call Trace: [ 1029.550763][T16500] [ 1029.550771][T16500] dump_stack_lvl+0xe8/0x150 [ 1029.550799][T16500] should_fail_ex+0x46b/0x600 [ 1029.550829][T16500] should_failslab+0xa8/0x100 [ 1029.550850][T16500] __kmalloc_noprof+0xfe/0x780 [ 1029.550867][T16500] ? trace_kmalloc+0x2a/0xf0 [ 1029.550881][T16500] ? tomoyo_encode+0x2ad/0x570 [ 1029.550898][T16500] ? tomoyo_encode+0x2ad/0x570 [ 1029.550919][T16500] tomoyo_encode+0x2ad/0x570 [ 1029.550941][T16500] tomoyo_realpath_from_path+0x5fa/0x640 [ 1029.550969][T16500] tomoyo_check_open_permission+0x229/0x470 [ 1029.550995][T16500] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1029.551019][T16500] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1029.551046][T16500] ? __asan_memset+0x22/0x50 [ 1029.551074][T16500] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1029.551112][T16500] ? mnt_get_write_access+0x66/0x2d0 [ 1029.551139][T16500] ? tomoyo_file_open+0x167/0x220 [ 1029.551170][T16500] security_file_open+0xa9/0x240 [ 1029.551196][T16500] do_dentry_open+0x4be/0x1420 [ 1029.551223][T16500] vfs_open+0x3b/0x350 [ 1029.551239][T16500] ? path_openat+0x142d/0x1d60 [ 1029.551265][T16500] path_openat+0x1448/0x1d60 [ 1029.551304][T16500] do_file_open+0x23e/0x4a0 [ 1029.551332][T16500] ? __pfx_do_file_open+0x10/0x10 [ 1029.551374][T16500] ? alloc_fd+0x654/0x6d0 [ 1029.551401][T16500] do_sys_openat2+0x115/0x200 [ 1029.551422][T16500] ? __pfx_do_sys_openat2+0x10/0x10 [ 1029.551441][T16500] ? ksys_write+0x248/0x270 [ 1029.551466][T16500] ? __pfx_ksys_write+0x10/0x10 [ 1029.551491][T16500] __x64_sys_openat+0x138/0x170 [ 1029.551513][T16500] do_syscall_64+0x166/0x520 [ 1029.551534][T16500] ? trace_irq_disable+0x3b/0x140 [ 1029.551551][T16500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.551568][T16500] ? clear_bhb_loop+0x70/0xc0 [ 1029.551587][T16500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.551603][T16500] RIP: 0033:0x7f2c7815e0d9 [ 1029.551619][T16500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.551634][T16500] RSP: 002b:00007f2c76395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1029.551651][T16500] RAX: ffffffffffffffda RBX: 00007f2c783e6090 RCX: 00007f2c7815e0d9 [ 1029.551664][T16500] RDX: 0000000000141842 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 1029.551675][T16500] RBP: 00007f2c76395090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.551686][T16500] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 1029.551696][T16500] R13: 00007f2c783e6128 R14: 00007f2c783e6090 R15: 00007fffbd37bbc8 [ 1029.551721][T16500] [ 1029.551737][T16500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1029.552707][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 1029.552721][ T38] audit: type=1800 audit(1787493282.328:730): pid=16500 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3544" name="p_chmask" dev="configfs" ino=52310 res=0 errno=0 [ 1029.974179][T16499] bridge0: port 3(vxlan0) entered blocking state [ 1029.974292][T16499] bridge0: port 3(vxlan0) entered forwarding state [ 1031.581402][T16126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.581491][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.581652][T16126] bridge_slave_0: entered allmulticast mode [ 1031.610348][T16126] bridge_slave_0: entered promiscuous mode [ 1031.697376][T16126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.697464][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.697624][T16126] bridge_slave_1: entered allmulticast mode [ 1031.702923][T16126] bridge_slave_1: entered promiscuous mode [ 1031.748373][T11446] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1031.750386][T11446] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1031.776011][ T6761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1031.877084][ T6761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1031.916203][ T6761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1031.938591][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 1031.938609][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 1034.896460][T16126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.952162][T16126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.442193][T16603] FAULT_INJECTION: forcing a failure. [ 1035.442193][T16603] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.442224][T16603] CPU: 0 UID: 0 PID: 16603 Comm: syz.4.3585 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1035.442247][T16603] Tainted: [L]=SOFTLOCKUP [ 1035.442254][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.442264][T16603] Call Trace: [ 1035.442270][T16603] [ 1035.442278][T16603] dump_stack_lvl+0xe8/0x150 [ 1035.442307][T16603] should_fail_ex+0x46b/0x600 [ 1035.442337][T16603] should_failslab+0xa8/0x100 [ 1035.442357][T16603] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1035.442375][T16603] ? __alloc_skb+0x1db/0x7a0 [ 1035.442399][T16603] ? __alloc_skb+0x1db/0x7a0 [ 1035.442428][T16603] __alloc_skb+0x1db/0x7a0 [ 1035.442452][T16603] ? __inet6_rt_notify+0xb0/0x470 [ 1035.442472][T16603] __inet6_rt_notify+0x172/0x470 [ 1035.442502][T16603] fib6_add_rt2node+0x1858/0x3940 [ 1035.442549][T16603] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 1035.442577][T16603] ? fib6_add_1+0x807/0x13e0 [ 1035.442615][T16603] fib6_add+0x9ae/0x1a20 [ 1035.442655][T16603] ? __pfx_fib6_add+0x10/0x10 [ 1035.442682][T16603] ? rcu_is_watching+0x16/0xb0 [ 1035.442703][T16603] ? __local_bh_disable_ip+0x3d/0x420 [ 1035.442725][T16603] ? ip6_route_add+0xc8/0x1d0 [ 1035.442742][T16603] ? ip6_route_add+0xc8/0x1d0 [ 1035.442755][T16603] ip6_route_add+0xf5/0x1d0 [ 1035.442772][T16603] addrconf_add_mroute+0x2d1/0x370 [ 1035.442799][T16603] ? addrconf_add_mroute+0xdc/0x370 [ 1035.442823][T16603] ? __pfx_addrconf_add_mroute+0x10/0x10 [ 1035.442866][T16603] ? ipv6_find_idev+0x10a/0x1c0 [ 1035.442898][T16603] inet6_addr_add+0x2b8/0xba0 [ 1035.442920][T16603] ? mutex_lock_nested+0x168/0x1d0 [ 1035.442941][T16603] addrconf_add_ifaddr+0x27c/0x3e0 [ 1035.442971][T16603] ? __pfx_addrconf_add_ifaddr+0x10/0x10 [ 1035.442994][T16603] ? kasan_quarantine_put+0xbb/0x1f0 [ 1035.443028][T16603] inet6_ioctl+0x14e/0x2e0 [ 1035.443120][T16603] ? __pfx_inet6_ioctl+0x10/0x10 [ 1035.443140][T16603] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1035.443168][T16603] ? do_vfs_ioctl+0x1184/0x1550 [ 1035.443186][T16603] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1035.443208][T16603] sock_do_ioctl+0x101/0x320 [ 1035.443233][T16603] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1035.443252][T16603] ? hook_file_ioctl+0x1f5/0x610 [ 1035.443275][T16603] ? __asan_memset+0x22/0x50 [ 1035.443299][T16603] ? smack_file_ioctl+0x265/0x370 [ 1035.443327][T16603] sock_ioctl+0x57d/0x7f0 [ 1035.443349][T16603] ? __pfx_sock_ioctl+0x10/0x10 [ 1035.443369][T16603] ? __fget_files+0x2a/0x420 [ 1035.443389][T16603] ? __fget_files+0x3a8/0x420 [ 1035.443410][T16603] ? __fget_files+0x2a/0x420 [ 1035.443433][T16603] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1035.443458][T16603] ? __pfx_sock_ioctl+0x10/0x10 [ 1035.443478][T16603] __se_sys_ioctl+0xff/0x170 [ 1035.443495][T16603] do_syscall_64+0x166/0x520 [ 1035.443516][T16603] ? trace_irq_disable+0x3b/0x140 [ 1035.443533][T16603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.443550][T16603] ? clear_bhb_loop+0x70/0xc0 [ 1035.443570][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.443586][T16603] RIP: 0033:0x7f2c7815e0d9 [ 1035.443601][T16603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.443615][T16603] RSP: 002b:00007f2c763b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.443632][T16603] RAX: ffffffffffffffda RBX: 00007f2c783e5fa0 RCX: 00007f2c7815e0d9 [ 1035.443649][T16603] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 1035.443660][T16603] RBP: 00007f2c763b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.443670][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.443680][T16603] R13: 00007f2c783e6038 R14: 00007f2c783e5fa0 R15: 00007fffbd37bbc8 [ 1035.443707][T16603] [ 1035.685836][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1037.890217][T15241] bridge_slave_1: left allmulticast mode [ 1037.890244][T15241] bridge_slave_1: left promiscuous mode [ 1037.890449][T15241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.918865][T15241] bridge_slave_0: left allmulticast mode [ 1037.918891][T15241] bridge_slave_0: left promiscuous mode [ 1037.919082][T15241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.043322][T15241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.081132][T15241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.114239][T15241] bond0 (unregistering): Released all slaves [ 1039.287367][T16126] team0: Port device team_slave_0 added [ 1039.378438][T16126] team0: Port device team_slave_1 added [ 1039.730421][T16126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.730435][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.730457][T16126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.741722][T11446] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.746460][T16126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.746473][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.746494][T16126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.808054][ T3290] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.808091][ T3290] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.827388][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.277217][T16126] hsr_slave_0: entered promiscuous mode [ 1040.284231][T16126] hsr_slave_1: entered promiscuous mode [ 1040.300382][T16126] debugfs: 'hsr0' already exists in 'hsr' [ 1040.300403][T16126] Cannot create hsr debugfs directory [ 1040.524610][T15241] hsr_slave_0: left promiscuous mode [ 1040.537689][T15241] hsr_slave_1: left promiscuous mode [ 1040.538560][T15241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.573262][T15241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.605770][ T1709] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1040.761958][ T1709] usb 4-1: not running at top speed; connect to a high speed hub [ 1040.761995][ T1709] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1040.764746][ T1709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.764804][ T1709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.895568][ T1709] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1041.157391][ T38] audit: type=1326 audit(1787493293.928:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.157480][ T38] audit: type=1326 audit(1787493293.928:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.166534][ T38] audit: type=1326 audit(1787493293.938:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.166576][ T38] audit: type=1326 audit(1787493293.948:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.166609][ T38] audit: type=1326 audit(1787493293.948:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.167150][ T38] audit: type=1326 audit(1787493293.948:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.167186][ T38] audit: type=1326 audit(1787493293.948:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.167219][ T38] audit: type=1326 audit(1787493293.948:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.401447][ T38] audit: type=1326 audit(1787493294.178:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.401491][ T38] audit: type=1326 audit(1787493294.178:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16691 comm="syz.3.3628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1041.406688][ T1709] gspca_spca501: reg write: error -110 [ 1041.406701][ T1709] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1041.406768][ T1709] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 1041.408008][ T1709] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 1041.564470][ T1709] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1041.576189][ T1709] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1041.576250][ T1709] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 1041.669815][ T1709] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 1041.763758][ T1709] usb 4-1: USB disconnect, device number 71 [ 1042.819452][T15241] team0 (unregistering): Port device team_slave_1 removed [ 1042.848670][T16734] netlink: 'syz.4.3642': attribute type 1 has an invalid length. [ 1042.939570][T15241] team0 (unregistering): Port device team_slave_0 removed [ 1043.691182][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1044.267134][ T5245] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1045.741948][ T5694] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1045.887123][ T5694] usb 4-1: not running at top speed; connect to a high speed hub [ 1045.887153][ T5694] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1045.888121][ T5694] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.888168][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.009500][ T5694] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1046.203620][ T38] kauditd_printk_skb: 50 callbacks suppressed [ 1046.203635][ T38] audit: type=1326 audit(1787493298.978:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.203922][ T38] audit: type=1326 audit(1787493298.978:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.277411][ T38] audit: type=1326 audit(1787493299.058:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.277663][ T38] audit: type=1326 audit(1787493299.058:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.279970][ T38] audit: type=1326 audit(1787493299.058:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.280314][ T38] audit: type=1326 audit(1787493299.058:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.280457][ T38] audit: type=1326 audit(1787493299.058:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.282727][ T38] audit: type=1326 audit(1787493299.058:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.283029][ T38] audit: type=1326 audit(1787493299.058:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f648c98e90e code=0x7ffc0000 [ 1046.283486][ T38] audit: type=1326 audit(1787493299.058:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16789 comm="syz.3.3663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c9ce0d9 code=0x7ffc0000 [ 1046.515972][ T5694] gspca_spca501: reg write: error -110 [ 1046.515986][ T5694] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1046.516050][ T5694] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 1046.643941][ T5694] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 1046.646055][ T5694] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1046.646424][ T5694] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1046.646460][ T5694] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 1046.646928][ T5694] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 1046.764968][ T5694] usb 4-1: USB disconnect, device number 72 [ 1048.135799][ T1709] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1048.286628][ T1709] usb 4-1: Using ep0 maxpacket: 16 [ 1048.287437][ T1709] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1048.288555][ T1709] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1048.288572][ T1709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1048.290593][ T1709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.290611][ T1709] usb 4-1: Product: syz [ 1048.290622][ T1709] usb 4-1: Manufacturer: syz [ 1048.290633][ T1709] usb 4-1: SerialNumber: syz [ 1048.435763][ T1709] usb 4-1: 0:2 : does not exist [ 1048.733678][ T1709] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1048.841954][T16013] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1048.873194][T16013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.026722][T16013] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1049.066856][T16013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.133927][T16013] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1049.352619][ T1709] usb 4-1: USB disconnect, device number 73 [ 1049.377918][T16013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.380910][T16013] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1049.578804][T16849] kvm: user requested TSC rate below hardware speed [ 1050.594952][T16013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1057.639681][T13008] udevd[13008]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.871213][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1071.883223][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1071.883287][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1072.831306][T16883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1072.899333][T16883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1072.900877][T16883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1072.901673][T16883] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1072.902237][T16883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1073.734030][ T5590] select_fallback_rq: 39 callbacks suppressed [ 1073.734076][ T5590] process 5849 (syz.2.14) no longer affine to cpu1 [ 1074.198175][ T5602] process 5822 (syz.3.10) no longer affine to cpu1 [ 1074.262098][ T5602] process 6185 (syz.3.119) no longer affine to cpu1 [ 1074.464000][ T5591] process 5896 (syz.4.25) no longer affine to cpu1 [ 1075.157247][ T5594] Bluetooth: hci5: command tx timeout [ 1075.479046][T16883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1075.585906][T16883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1075.591342][T16883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1075.595553][T16883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1075.682691][T16883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1075.828671][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1075.897502][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1075.903177][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1075.930750][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1075.932867][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1076.184760][T16883] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1076.261227][T16883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1076.265345][T16883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1076.298397][T16883] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1076.325113][T16883] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1076.830302][T16883] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1076.874311][T16883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1076.889851][T16883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1076.937802][T16883] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1076.995849][T16883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1077.207996][T16883] Bluetooth: hci5: command tx timeout [ 1077.896028][T16883] Bluetooth: hci1: command tx timeout [ 1078.112739][T16883] Bluetooth: hci2: command tx timeout [ 1078.566187][T16883] Bluetooth: hci6: command tx timeout [ 1079.127246][T16883] Bluetooth: hci7: command tx timeout [ 1079.285708][T16883] Bluetooth: hci5: command tx timeout [ 1079.928382][T16883] Bluetooth: hci1: command tx timeout [ 1080.172649][T16883] Bluetooth: hci2: command tx timeout [ 1080.655763][T16883] Bluetooth: hci6: command tx timeout [ 1080.938861][T16880] wlan0 speed is unknown, defaulting to 1000 [ 1081.205697][T16883] Bluetooth: hci7: command tx timeout [ 1081.260843][T16897] wlan0 speed is unknown, defaulting to 1000 [ 1081.349638][T16894] wlan0 speed is unknown, defaulting to 1000 [ 1081.365713][T16883] Bluetooth: hci5: command tx timeout [ 1081.433048][T16899] wlan0 speed is unknown, defaulting to 1000 [ 1081.872260][T16906] wlan0 speed is unknown, defaulting to 1000 [ 1082.005922][T16883] Bluetooth: hci1: command tx timeout [ 1082.246885][T16883] Bluetooth: hci2: command tx timeout [ 1082.741178][T16883] Bluetooth: hci6: command tx timeout [ 1083.285848][T16883] Bluetooth: hci7: command tx timeout [ 1083.794131][ T67] bridge_slave_1: left allmulticast mode [ 1083.794159][ T67] bridge_slave_1: left promiscuous mode [ 1083.794342][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.819479][ T67] bridge_slave_0: left allmulticast mode [ 1083.819506][ T67] bridge_slave_0: left promiscuous mode [ 1083.819709][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.085767][T16883] Bluetooth: hci1: command tx timeout [ 1084.148753][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.153485][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.181654][ T67] bond0 (unregistering): Released all slaves [ 1084.362309][T16883] Bluetooth: hci2: command tx timeout [ 1084.630553][ T67] hsr_slave_0: left promiscuous mode [ 1084.631222][ T67] hsr_slave_1: left promiscuous mode [ 1084.633664][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.634323][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.806172][T16883] Bluetooth: hci6: command tx timeout [ 1084.910949][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1084.938864][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1085.365891][T16883] Bluetooth: hci7: command tx timeout [ 1087.075339][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.075368][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.281116][T16880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.281212][T16880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.281332][T16880] bridge_slave_0: entered allmulticast mode [ 1087.283450][T16880] bridge_slave_0: entered promiscuous mode [ 1087.473270][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.473299][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.512482][T16880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.512651][T16880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.512803][T16880] bridge_slave_1: entered allmulticast mode [ 1087.514657][T16880] bridge_slave_1: entered promiscuous mode [ 1087.671662][T16897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.671756][T16897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.671871][T16897] bridge_slave_0: entered allmulticast mode [ 1087.674024][T16897] bridge_slave_0: entered promiscuous mode [ 1087.774209][T16897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.774320][T16897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.774680][T16897] bridge_slave_1: entered allmulticast mode [ 1087.801197][T16897] bridge_slave_1: entered promiscuous mode [ 1087.876461][T16880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.992517][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.992544][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.058722][T16894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.058810][T16894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.058959][T16894] bridge_slave_0: entered allmulticast mode [ 1088.061162][T16894] bridge_slave_0: entered promiscuous mode [ 1088.117912][T16880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.145934][T16894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.146019][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.146158][T16894] bridge_slave_1: entered allmulticast mode [ 1088.148388][T16894] bridge_slave_1: entered promiscuous mode [ 1088.150181][T16899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.150380][T16899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.150517][T16899] bridge_slave_0: entered allmulticast mode [ 1088.152430][T16899] bridge_slave_0: entered promiscuous mode [ 1088.299756][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.299786][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.357141][T16897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.394514][T16899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.394620][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.394760][T16899] bridge_slave_1: entered allmulticast mode [ 1088.420505][T16899] bridge_slave_1: entered promiscuous mode [ 1088.474976][T16897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.534305][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.534400][T16906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.534513][T16906] bridge_slave_0: entered allmulticast mode [ 1088.561044][T16906] bridge_slave_0: entered promiscuous mode [ 1088.602969][T16880] team0: Port device team_slave_0 added [ 1088.624542][T16894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.663468][T16906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.663563][T16906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.663902][T16906] bridge_slave_1: entered allmulticast mode [ 1088.691344][T16906] bridge_slave_1: entered promiscuous mode [ 1088.705059][T16880] team0: Port device team_slave_1 added [ 1088.751589][T16894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.778215][T16899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.830231][T13008] ------------[ cut here ]------------ [ 1088.830243][T13008] kcov->t != t [ 1088.830257][T13008] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#0: udevd/13008 [ 1088.830349][T13008] Modules linked in: [ 1088.830369][T13008] CPU: 0 UID: 0 PID: 13008 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1088.830392][T13008] Tainted: [L]=SOFTLOCKUP [ 1088.830398][T13008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1088.830408][T13008] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1088.830425][T13008] Code: 90 00 00 00 e8 a0 cc 59 00 4c 89 f7 5b 41 5e 41 5f e9 e3 a4 5f 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1088.830439][T13008] RSP: 0018:ffffc90005737d20 EFLAGS: 00010206 [ 1088.830454][T13008] RAX: c168d278de56a700 RBX: ffff88802a7a5d00 RCX: ffffffff99ac0501 [ 1088.830485][T13008] RDX: 0000000071ca7201 RSI: ffffffff8bcbc060 RDI: 00000000ffffffff [ 1088.830497][T13008] RBP: ffffc90005737e80 R08: ffffffff8b52ee52 R09: 0000000000000000 [ 1088.830509][T13008] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: 0000000000000000 [ 1088.830520][T13008] R13: ffff88802a7a5d00 R14: ffff8880259f8700 R15: ffff8880259f8708 [ 1088.830533][T13008] FS: 00007f7b480d9880(0000) GS:ffff888125bf4000(0000) knlGS:0000000000000000 [ 1088.830547][T13008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.830558][T13008] CR2: 00007f6c197f10f6 CR3: 0000000011aec000 CR4: 00000000003526f0 [ 1088.830573][T13008] Call Trace: [ 1088.830580][T13008] [ 1088.830589][T13008] do_exit+0x159/0x2360 [ 1088.830614][T13008] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1088.830640][T13008] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1088.830660][T13008] ? reacquire_held_locks+0x104/0x190 [ 1088.830683][T13008] ? __pfx_do_exit+0x10/0x10 [ 1088.830711][T13008] ? rt_spin_unlock+0x159/0x200 [ 1088.830731][T13008] ? rt_spin_unlock+0x165/0x200 [ 1088.830749][T13008] do_group_exit+0x22d/0x2f0 [ 1088.830777][T13008] __x64_sys_exit_group+0x3f/0x40 [ 1088.830803][T13008] x64_sys_call+0x18c6/0x18d0 [ 1088.830818][T13008] do_syscall_64+0x166/0x520 [ 1088.830840][T13008] ? trace_irq_disable+0x3b/0x140 [ 1088.830858][T13008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.830875][T13008] ? clear_bhb_loop+0x70/0xc0 [ 1088.830895][T13008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.830912][T13008] RIP: 0033:0x7f7b482116c5 [ 1088.830927][T13008] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1088.830940][T13008] RSP: 002b:00007ffe15b97c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1088.830957][T13008] RAX: ffffffffffffffda RBX: 0000564083cc7f20 RCX: 00007f7b482116c5 [ 1088.831004][T13008] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1088.831016][T13008] RBP: 0000564083c97910 R08: 0000000000000000 R09: 0000000000000000 [ 1088.831027][T13008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.831036][T13008] R13: 00007ffe15b97c70 R14: 0000000000000000 R15: 0000000000000000 [ 1088.831061][T13008] [ 1088.831073][T13008] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1088.831087][T13008] CPU: 0 UID: 0 PID: 13008 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1088.831109][T13008] Tainted: [L]=SOFTLOCKUP [ 1088.831115][T13008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1088.831126][T13008] Call Trace: [ 1088.831134][T13008] [ 1088.831141][T13008] vpanic+0x56d/0xa60 [ 1088.831157][T13008] ? __pfx__printk+0x10/0x10 [ 1088.831176][T13008] ? __pfx_vpanic+0x10/0x10 [ 1088.831200][T13008] ? is_bpf_text_address+0x292/0x2b0 [ 1088.831221][T13008] ? is_bpf_text_address+0x26/0x2b0 [ 1088.831248][T13008] panic+0xc5/0xd0 [ 1088.831273][T13008] ? __pfx_panic+0x10/0x10 [ 1088.831310][T13008] __warn+0x315/0x4c0 [ 1088.831324][T13008] ? kcov_task_exit+0x181/0x240 [ 1088.831342][T13008] ? kcov_task_exit+0x181/0x240 [ 1088.831358][T13008] __report_bug+0x276/0x570 [ 1088.831441][T13008] ? kcov_task_exit+0x181/0x240 [ 1088.831459][T13008] ? __pfx___report_bug+0x10/0x10 [ 1088.831488][T13008] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1088.831509][T13008] ? rt_spin_lock+0x1e2/0x400 [ 1088.831526][T13008] ? rt_spin_lock+0x1e2/0x400 [ 1088.831544][T13008] ? kcov_task_exit+0x181/0x240 [ 1088.831559][T13008] report_bug+0x16b/0x220 [ 1088.831581][T13008] ? kcov_task_exit+0x181/0x240 [ 1088.831595][T13008] ? kcov_task_exit+0x183/0x240 [ 1088.831611][T13008] handle_bug+0x9c/0x200 [ 1088.831635][T13008] exc_invalid_op+0x1a/0x50 [ 1088.831659][T13008] asm_exc_invalid_op+0x1a/0x20 [ 1088.831675][T13008] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1088.831691][T13008] Code: 90 00 00 00 e8 a0 cc 59 00 4c 89 f7 5b 41 5e 41 5f e9 e3 a4 5f 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1088.831705][T13008] RSP: 0018:ffffc90005737d20 EFLAGS: 00010206 [ 1088.831719][T13008] RAX: c168d278de56a700 RBX: ffff88802a7a5d00 RCX: ffffffff99ac0501 [ 1088.831732][T13008] RDX: 0000000071ca7201 RSI: ffffffff8bcbc060 RDI: 00000000ffffffff [ 1088.831744][T13008] RBP: ffffc90005737e80 R08: ffffffff8b52ee52 R09: 0000000000000000 [ 1088.831756][T13008] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: 0000000000000000 [ 1088.831766][T13008] R13: ffff88802a7a5d00 R14: ffff8880259f8700 R15: ffff8880259f8708 [ 1088.831784][T13008] ? rt_spin_lock+0x1e2/0x400 [ 1088.831807][T13008] do_exit+0x159/0x2360 [ 1088.831830][T13008] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1088.831852][T13008] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1088.831886][T13008] ? reacquire_held_locks+0x104/0x190 [ 1088.831906][T13008] ? __pfx_do_exit+0x10/0x10 [ 1088.831933][T13008] ? rt_spin_unlock+0x159/0x200 [ 1088.831953][T13008] ? rt_spin_unlock+0x165/0x200 [ 1088.831992][T13008] do_group_exit+0x22d/0x2f0 [ 1088.832022][T13008] __x64_sys_exit_group+0x3f/0x40 [ 1088.832047][T13008] x64_sys_call+0x18c6/0x18d0 [ 1088.832062][T13008] do_syscall_64+0x166/0x520 [ 1088.832083][T13008] ? trace_irq_disable+0x3b/0x140 [ 1088.832099][T13008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.832116][T13008] ? clear_bhb_loop+0x70/0xc0 [ 1088.832137][T13008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.832153][T13008] RIP: 0033:0x7f7b482116c5 [ 1088.832167][T13008] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1088.832181][T13008] RSP: 002b:00007ffe15b97c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1088.832197][T13008] RAX: ffffffffffffffda RBX: 0000564083cc7f20 RCX: 00007f7b482116c5 [ 1088.832210][T13008] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1088.832221][T13008] RBP: 0000564083c97910 R08: 0000000000000000 R09: 0000000000000000 [ 1088.832231][T13008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.832241][T13008] R13: 00007ffe15b97c70 R14: 0000000000000000 R15: 0000000000000000 [ 1088.832265][T13008] [ 1088.832329][T13008] Kernel Offset: disabled