last executing test programs: 3m10.273893402s ago: executing program 0 (id=38): syz_emit_vhci(0x0, 0xf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040efd0187200000ff000000c56eac556d71"], 0x100) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e1301"], 0x16) 3m9.20807601s ago: executing program 0 (id=42): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4d, 0x0, 0x4}, {0x6}]}) 3m8.716969374s ago: executing program 0 (id=46): prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) 3m8.492269074s ago: executing program 2 (id=48): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3m8.29309217s ago: executing program 0 (id=50): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 3m7.834581383s ago: executing program 2 (id=52): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="5d1f"}, @NL80211_ATTR_IE={0x1d, 0x2a, [@random={0x3b}, @rann={0x7e, 0x15, {{0x1, 0x6f}, 0xfe, 0x32, @device_a, 0xff, 0x80, 0x12000}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c804) 3m7.68179398s ago: executing program 0 (id=55): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) 3m7.415154453s ago: executing program 2 (id=56): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/240) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) 3m7.114842544s ago: executing program 0 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m6.34283636s ago: executing program 2 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) 3m6.161393868s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000008000000010000000100000de3"], &(0x7f0000001b00)=""/3, 0x3c, 0x3, 0x1, 0x5}, 0x28) 3m5.942233798s ago: executing program 2 (id=66): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) read(r0, &(0x7f0000000240)=""/155, 0x9b) 2m52.226006933s ago: executing program 32 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m50.717974469s ago: executing program 33 (id=66): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) read(r0, &(0x7f0000000240)=""/155, 0x9b) 1m7.887019375s ago: executing program 1 (id=341): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000380)="68000000300005050100a0a90000000000000000540001805000018009000100676174650000000040000280180002000000000000000000000000fdff000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x10004004, 0x0, 0x0) write(r1, 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 1m1.508017166s ago: executing program 1 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000f00)={0x2, 0x0, 0x16, 0x19, 0xcc, &(0x7f0000000b00)="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"}) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r4 = dup(r3) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r5, &(0x7f0000000180), 0x0, 0x6, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) 59.098046193s ago: executing program 4 (id=353): ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x0, 0x4, 0x4, 0x4, 0x1000, {0x77359400}, {0x3, 0x0, 0x31, 0x0, 0x1, 0x3, "9789010a"}, 0xfffffd81, 0x3, {}, 0xe}) 59.05674875s ago: executing program 1 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000008000000010000000100000de3"], &(0x7f0000001b00)=""/3, 0x3c, 0x3, 0x1, 0x5}, 0x28) 58.448684254s ago: executing program 3 (id=357): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x2000, 0x9000004, 0x81, 0xffffffff}) r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r0, &(0x7f0000001a40), 0x0) 57.94007703s ago: executing program 3 (id=358): write(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x2c4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 57.696068905s ago: executing program 1 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$pokeuser(0x6, r0, 0x400000000000, 0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) sendmsg$tipc(r4, 0x0, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@name, 0x10) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xbc6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000011c0)={{}, {}, [{0x2, 0x4}], {0x4, 0x4}}, 0x2c, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) r6 = getegid() fchown(r5, 0xffffffffffffffff, r6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060102"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x201, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x844) 56.543993077s ago: executing program 1 (id=360): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000380)="68000000300005050100a0a90000000000000000540001805000018009000100676174650000000040000280180002000000000000000000000000fdff000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x10004004, 0x0, 0x0) write(r1, 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 56.312119043s ago: executing program 4 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) r5 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r5, 0x80007) finit_module(r5, 0x0, 0x7) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x12e3d, 0x0, 0x0, 0x4280}, 0x30, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000000c0)={0x2, {{0xa, 0x4e22, 0x9, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x2, @mcast2, 0x400}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x68}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 54.795614924s ago: executing program 4 (id=362): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 47.751094466s ago: executing program 4 (id=363): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0) writev(r0, &(0x7f0000002700)=[{&(0x7f0000000140)="1551f02b82f73ccfc7c431617753f5732f765c", 0x13}, {0x0}, {0x0}, {&(0x7f00000014c0)="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", 0x1000}], 0x4) 43.987863781s ago: executing program 3 (id=364): r0 = syz_io_uring_setup(0x38c0, &(0x7f00000005c0)={0x0, 0x800fffb, 0x3000, 0x0, 0xc5}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r0}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000340)) 42.905317783s ago: executing program 1 (id=365): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000000340)="1125", 0x2, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x3, r1, 0x0, &(0x7f0000000300)="c5", 0x1, 0xaf1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000780)={0x28, 0x2, r1, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f00000006c0)="689f", 0x2, 0x388}) 34.892540135s ago: executing program 4 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000f00)={0x2, 0x0, 0x16, 0x19, 0xcc, &(0x7f0000000b00)="beff36e6158ead3c1b83b0103a9974faeae4c309c080f50a889040d6f6ef4c9ce7e01677b04cf3740f9857bdaf7503448367fde0e5f3d1ccbf26d41783ad875ea405fcb1134a208526d31322f0d64abf366e4c96dba61ec33c8be0385dc908224a834942a8eae5a74b067d327b45ecf03e8c8f10c7f3ee9a8913ce8d49a65d7b4db0e15ad8fd4badac0d51c1d5cad0534d371a53d769c3bfb9d98a5054a9229b26d22e8e8153f48daa839ff1c99d1b52960ab4f448d5f785a2eab46f64080333fc240a4405c5792d97b069985c6bb8a2e0969a376cb8674ef0dc7f2734c8d0585f0a67b3a865289ba924b005ea818886dad344c63d2aa16808fb05be3218ecbee305b11936e58cd74cbd2d69264d6b8a55d3b8bd59cf413b780ad4ec6d54bff9b765a91f64729e837cab6cf2046097b19631f77aba44f7d1fd1a6ccaf42e856f9dda07d67356569f1161690e4ce55957c427b52b7187c3dcf9504f80ea108ee036bd99ec692e34e914799bafc9c6d07b65bac60b9e7b7b3b5bfe7649d6d91dd9743dfa439699af1b4e5b7349dded152fc386c4da5cf9b94e7ff592fc409ea7cd32ec3bfd2ac360685086ae58e249a247e747dc899a1e590eb1a5a625995b0c24773056448d825b2a8a1fa8a0a5dc9b568d6f682d62ebffe85fd1db7d2d62eab28dbd74c8d47f3a1d60a875e1430981797bf265fcb6fedf5129e7cb40a65c723d47a675386ab9fba3e34e03284799b7e248b8397a32b6a0c1f389fe41352ae93abe0b8daaa6fb1609539af9a9675c7aed584c81cbbdc2e0531c0aff84f350ff1a0dec901cb4ab2bd5a2c134f4fca3d33e0f238edb8c3a7faf77f59ab670b4551757fb0dcab91ec4df5faa6089195f0a79c4f9c65a6d5e38bc7a544f929e1663b85c7c32765792f08bd3b2bc25bfda1ea140711ee03667666e412273f6f6644cba35c038d7257c7fe021931883d38a5dde3b7e8317a448869df431bf0c22eb6becca3189857380c6a4152fd7226a864b4ab006411d377b1ce53e59adf1460258e9066eca412aae99acf5b092b148feb537eaa7114b32973ff4f7ebf8ca8b65a5a84ba980e650aa8c89d4c8d995ddc1af0847fb9bbe0d613e9d8d97be68304acdb30753fc3e3face438715d215bacedccc9d15942fa630e4a07e5d3c22d7238b4daf8bfff2a31e65d8978cc0fe9067bd6d9ed52b3cd46561433d0a880660ce961b643c03dc5c01911cb6da45ec104db3eaaea0fb8679afb5a3cea3497ceded859c2df6d182acc0ce1b568e74754f336c7f9e954f6ecbb4f63eea5407db0534549bb7c474892368d0678d0ab30bfdc4fbb10e1eaeba95fe958793071130393616a939bd46bec45d9329a1690e188d2f266d1a7903c2800efbb21a28b78aefc885fbf88ab49d7b7e7966a41b1a28ade5c321c70ca49263be4fc19a187add34fefcbe8"}) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r4 = dup(r3) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r5, &(0x7f0000000180), 0x0, 0x6, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) 30.849964639s ago: executing program 3 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000008000000010000000100000de3"], &(0x7f0000001b00)=""/3, 0x3c, 0x3, 0x1, 0x5}, 0x28) 21.562052549s ago: executing program 34 (id=365): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000000340)="1125", 0x2, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x3, r1, 0x0, &(0x7f0000000300)="c5", 0x1, 0xaf1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000780)={0x28, 0x2, r1, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f00000006c0)="689f", 0x2, 0x388}) 20.601967234s ago: executing program 3 (id=369): ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@overlay={0x0, 0x4, 0x4, 0x4, 0x1000, {0x77359400}, {0x3, 0x0, 0x31, 0x0, 0x1, 0x3, "9789010a"}, 0xfffffd81, 0x3, {}, 0xe}) 20.564444061s ago: executing program 4 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) r5 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r5, 0x80007) finit_module(r5, 0x0, 0x7) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x12e3d, 0x0, 0x0, 0x4280}, 0x30, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000000c0)={0x2, {{0xa, 0x4e22, 0x9, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x2, @mcast2, 0x400}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x68}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 15.480479524s ago: executing program 3 (id=371): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 5.00702351s ago: executing program 35 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) r5 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r5, 0x80007) finit_module(r5, 0x0, 0x7) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x12e3d, 0x0, 0x0, 0x4280}, 0x30, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000000c0)={0x2, {{0xa, 0x4e22, 0x9, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x2, @mcast2, 0x400}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x68}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 0s ago: executing program 36 (id=371): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 74.509536][ T5578] cgroup: Unknown subsys name 'net' [ 74.731059][ T5578] cgroup: Unknown subsys name 'cpuset' [ 74.795279][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.402433][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.978817][ T4907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.008478][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.012438][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.013317][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.039942][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.051371][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.052981][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.058398][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.060144][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.067877][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.069162][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.069838][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.070974][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.075581][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.114087][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.118518][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.182598][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.182723][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.200387][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.212069][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.214237][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.217051][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.217339][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.218382][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.226256][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.186388][ T4907] Bluetooth: hci2: command tx timeout [ 81.344826][ T4907] Bluetooth: hci4: command tx timeout [ 81.344836][ T60] Bluetooth: hci1: command tx timeout [ 81.425454][ T60] Bluetooth: hci0: command tx timeout [ 81.425570][ T60] Bluetooth: hci3: command tx timeout [ 81.760459][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.760608][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.760882][ T5590] bridge_slave_0: entered allmulticast mode [ 81.786558][ T5590] bridge_slave_0: entered promiscuous mode [ 81.882747][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.882874][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.883479][ T5590] bridge_slave_1: entered allmulticast mode [ 81.910130][ T5590] bridge_slave_1: entered promiscuous mode [ 81.951006][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.951133][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.951293][ T5592] bridge_slave_0: entered allmulticast mode [ 81.953002][ T5592] bridge_slave_0: entered promiscuous mode [ 81.992062][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.992179][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.992323][ T5594] bridge_slave_0: entered allmulticast mode [ 81.993800][ T5594] bridge_slave_0: entered promiscuous mode [ 82.023393][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.023517][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.024053][ T5593] bridge_slave_0: entered allmulticast mode [ 82.027114][ T5593] bridge_slave_0: entered promiscuous mode [ 82.032620][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.032819][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.032969][ T5592] bridge_slave_1: entered allmulticast mode [ 82.041185][ T5592] bridge_slave_1: entered promiscuous mode [ 82.088865][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.089019][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.089179][ T5594] bridge_slave_1: entered allmulticast mode [ 82.091099][ T5594] bridge_slave_1: entered promiscuous mode [ 82.092240][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.092332][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.092432][ T5593] bridge_slave_1: entered allmulticast mode [ 82.093845][ T5593] bridge_slave_1: entered promiscuous mode [ 82.120680][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.120800][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.121329][ T5589] bridge_slave_0: entered allmulticast mode [ 82.126752][ T5589] bridge_slave_0: entered promiscuous mode [ 82.164597][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.208647][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.208744][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.208845][ T5589] bridge_slave_1: entered allmulticast mode [ 82.211161][ T5589] bridge_slave_1: entered promiscuous mode [ 82.219546][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.259668][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.291768][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.297558][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.302142][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.340527][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.342557][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.366281][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.368570][ T5590] team0: Port device team_slave_0 added [ 82.415879][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.417549][ T5590] team0: Port device team_slave_1 added [ 82.451528][ T5592] team0: Port device team_slave_0 added [ 82.481349][ T5594] team0: Port device team_slave_0 added [ 82.483348][ T5593] team0: Port device team_slave_0 added [ 82.486527][ T5592] team0: Port device team_slave_1 added [ 82.521780][ T5594] team0: Port device team_slave_1 added [ 82.523883][ T5593] team0: Port device team_slave_1 added [ 82.543170][ T5589] team0: Port device team_slave_0 added [ 82.544438][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.544456][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.544470][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.623102][ T5589] team0: Port device team_slave_1 added [ 82.624112][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.624124][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.624140][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.677398][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.677413][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.677431][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.711817][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.711835][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.711859][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.715567][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.715584][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.715609][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.725075][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.725093][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.725117][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.874542][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.874560][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.874574][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.877094][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.877110][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.877135][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.879164][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.879192][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.879216][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.921137][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.921154][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.921179][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.026576][ T5590] hsr_slave_0: entered promiscuous mode [ 83.028214][ T5590] hsr_slave_1: entered promiscuous mode [ 83.087188][ T5592] hsr_slave_0: entered promiscuous mode [ 83.088044][ T5592] hsr_slave_1: entered promiscuous mode [ 83.088643][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 83.088725][ T5592] Cannot create hsr debugfs directory [ 83.142308][ T5594] hsr_slave_0: entered promiscuous mode [ 83.143037][ T5594] hsr_slave_1: entered promiscuous mode [ 83.143532][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 83.143552][ T5594] Cannot create hsr debugfs directory [ 83.170784][ T5593] hsr_slave_0: entered promiscuous mode [ 83.171535][ T5593] hsr_slave_1: entered promiscuous mode [ 83.173585][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 83.173603][ T5593] Cannot create hsr debugfs directory [ 83.264876][ T4907] Bluetooth: hci2: command tx timeout [ 83.425035][ T4907] Bluetooth: hci1: command tx timeout [ 83.425070][ T4907] Bluetooth: hci4: command tx timeout [ 83.504878][ T60] Bluetooth: hci3: command tx timeout [ 83.504914][ T60] Bluetooth: hci0: command tx timeout [ 83.810768][ T5589] hsr_slave_0: entered promiscuous mode [ 83.811560][ T5589] hsr_slave_1: entered promiscuous mode [ 83.812057][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 83.812080][ T5589] Cannot create hsr debugfs directory [ 84.467157][ T5590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.517265][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.532782][ T5590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.568816][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.573230][ T5590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.611598][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.633661][ T5590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.670089][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.821880][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.849441][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.855955][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.890392][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.894151][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.918718][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.941862][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.978855][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.095062][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.142560][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.153582][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.179353][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.182679][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.209155][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.241093][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.271516][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.345549][ T4907] Bluetooth: hci2: command tx timeout [ 85.396256][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.429179][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.441940][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.469110][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.473662][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.504897][ T4907] Bluetooth: hci4: command tx timeout [ 85.504958][ T4907] Bluetooth: hci1: command tx timeout [ 85.528538][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.550768][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.584853][ T4907] Bluetooth: hci0: command tx timeout [ 85.584887][ T4907] Bluetooth: hci3: command tx timeout [ 85.589596][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.657320][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.748672][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.777785][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.784334][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.838552][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.851845][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.877830][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.892061][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.893550][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.930850][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.973116][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.973368][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.004570][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.032755][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.036594][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.132271][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.169713][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.172038][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.172164][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.241346][ T1409] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.241505][ T1409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.308504][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.369482][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.382409][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.382616][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.483765][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.486694][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.611277][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.698657][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.707776][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.742479][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.781271][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.782051][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.931141][ T36] cfg80211: failed to load regulatory.db [ 87.061541][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.120271][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.120539][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.191940][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.192075][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.425540][ T60] Bluetooth: hci2: command tx timeout [ 87.588248][ T60] Bluetooth: hci1: command tx timeout [ 87.588284][ T60] Bluetooth: hci4: command tx timeout [ 87.640454][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.664888][ T60] Bluetooth: hci3: command tx timeout [ 87.664905][ T4907] Bluetooth: hci0: command tx timeout [ 88.210943][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.258759][ T5590] veth0_vlan: entered promiscuous mode [ 88.383001][ T5590] veth1_vlan: entered promiscuous mode [ 88.429768][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.611324][ T5594] veth0_vlan: entered promiscuous mode [ 88.672536][ T5590] veth0_macvtap: entered promiscuous mode [ 88.689426][ T5594] veth1_vlan: entered promiscuous mode [ 88.730382][ T5590] veth1_macvtap: entered promiscuous mode [ 88.785283][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.833464][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.871315][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.892521][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.951040][ T5594] veth0_macvtap: entered promiscuous mode [ 88.992265][ T5594] veth1_macvtap: entered promiscuous mode [ 89.348388][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.457341][ T5589] veth0_vlan: entered promiscuous mode [ 89.463351][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.547177][ T5589] veth1_vlan: entered promiscuous mode [ 89.548580][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.548606][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.590887][ T5592] veth0_vlan: entered promiscuous mode [ 89.701502][ T5593] veth0_vlan: entered promiscuous mode [ 89.755855][ T5592] veth1_vlan: entered promiscuous mode [ 89.802669][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.802688][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.942433][ T5593] veth1_vlan: entered promiscuous mode [ 90.121785][ T5589] veth0_macvtap: entered promiscuous mode [ 90.138557][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.138579][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.216218][ T5589] veth1_macvtap: entered promiscuous mode [ 90.333554][ T5590] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.504574][ T5592] veth0_macvtap: entered promiscuous mode [ 90.552024][ T5592] veth1_macvtap: entered promiscuous mode [ 90.552147][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.552160][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.589280][ T5593] veth0_macvtap: entered promiscuous mode [ 90.599527][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.638960][ T5593] veth1_macvtap: entered promiscuous mode [ 90.650288][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.776906][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.826349][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.904560][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.927811][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.876080][ T5797] Zero length message leads to an empty skb [ 92.031711][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.031735][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.562159][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.562179][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.875190][ T1409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.875212][ T1409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.994774][ T37] audit: type=1326 audit(1789934664.613:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5813 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1da136e159 code=0x0 [ 93.970385][ T37] audit: type=1326 audit(1789934665.583:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5813 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1da136e159 code=0x0 [ 94.077217][ T1510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.211709][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.211733][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.327674][ T10] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 94.345622][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.345643][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.377475][ T162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.405471][ T162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.405866][ T162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809626][ T5826] fido_id[5826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.517736][ T1512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.517863][ T1512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.591097][ T123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.691021][ T151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.727561][ T1393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.728019][ T1393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.728617][ T1393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.728989][ T1393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729200][ T1393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729366][ T1393] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729507][ T1393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729889][ T1393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.730049][ T1393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.730632][ T1393] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.730930][ T1393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.731314][ T1393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.731574][ T1393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.732114][ T1393] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.503538][ T5851] FAULT_INJECTION: forcing a failure. [ 96.503538][ T5851] name fail_futex, interval 1, probability 0, space 0, times 1 [ 96.503598][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.503623][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.503664][ T5851] Call Trace: [ 96.503673][ T5851] [ 96.503682][ T5851] dump_stack_lvl+0xe8/0x150 [ 96.503725][ T5851] should_fail_ex+0x46b/0x600 [ 96.503754][ T5851] get_futex_key+0x1b4/0x1580 [ 96.503795][ T5851] ? __pfx_get_futex_key+0x10/0x10 [ 96.503825][ T5851] ? update_se+0x90/0xef0 [ 96.503856][ T5851] futex_wait_setup+0x4a/0x590 [ 96.503889][ T5851] ? __futex_wait+0xe1/0x410 [ 96.503916][ T5851] __futex_wait+0x161/0x410 [ 96.503943][ T5851] ? __pfx___futex_wait+0x10/0x10 [ 96.503969][ T5851] ? __pfx_futex_wake_mark+0x10/0x10 [ 96.503997][ T5851] ? try_to_wake_up+0x84b/0x1430 [ 96.504031][ T5851] futex_wait+0x121/0x390 [ 96.504056][ T5851] ? __pfx_futex_wait+0x10/0x10 [ 96.504098][ T5851] do_futex+0x3e7/0x4e0 [ 96.504115][ T5851] ? __asan_memcpy+0x40/0x70 [ 96.504151][ T5851] ? __pfx_do_futex+0x10/0x10 [ 96.504170][ T5851] ? lock_acquire+0x115/0x350 [ 96.504200][ T5851] __se_sys_futex+0x3a8/0x450 [ 96.504226][ T5851] ? __pfx___se_sys_futex+0x10/0x10 [ 96.504246][ T5851] ? rcu_is_watching+0x16/0xb0 [ 96.504279][ T5851] ? __x64_sys_futex+0x21/0xf0 [ 96.504302][ T5851] do_syscall_64+0x166/0x520 [ 96.504330][ T5851] ? trace_irq_disable+0x3b/0x140 [ 96.504355][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.504375][ T5851] ? clear_bhb_loop+0x70/0xc0 [ 96.504400][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.504420][ T5851] RIP: 0033:0x7f93aaa1e159 [ 96.504446][ T5851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.504463][ T5851] RSP: 002b:00007f93a8c760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.504489][ T5851] RAX: ffffffffffffffda RBX: 00007f93aaca5fa8 RCX: 00007f93aaa1e159 [ 96.504504][ T5851] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f93aaca5fa8 [ 96.504518][ T5851] RBP: 00007f93aaca5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 96.504530][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.504542][ T5851] R13: 00007f93aaca6038 R14: 00007ffdb09f9e50 R15: 00007ffdb09f9f38 [ 96.504573][ T5851] [ 97.152375][ T4907] block nbd1: Receive control failed (result -107) [ 97.177016][ T5854] nbd1: detected capacity change from 0 to 8589934592 [ 97.580393][ T5854] block nbd1: shutting down sockets [ 99.144174][ T5875] 9p: Bad value for 'wfdno' [ 99.405609][ T5877] FAULT_INJECTION: forcing a failure. [ 99.405609][ T5877] name failslab, interval 1, probability 0, space 0, times 1 [ 99.405649][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 99.405673][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.405686][ T5877] Call Trace: [ 99.405694][ T5877] [ 99.405703][ T5877] dump_stack_lvl+0xe8/0x150 [ 99.405742][ T5877] should_fail_ex+0x46b/0x600 [ 99.405774][ T5877] should_failslab+0xa8/0x100 [ 99.405807][ T5877] __kmalloc_noprof+0xfb/0x790 [ 99.405835][ T5877] ? lock_acquire+0x115/0x350 [ 99.405867][ T5877] ? sk_prot_alloc+0xe7/0x210 [ 99.405886][ T5877] ? sk_prot_alloc+0xe7/0x210 [ 99.405911][ T5877] sk_prot_alloc+0xe7/0x210 [ 99.405929][ T5877] ? sk_alloc+0x27/0x390 [ 99.405950][ T5877] sk_alloc+0x3a/0x390 [ 99.405973][ T5877] can_create+0x1ca/0x5f0 [ 99.406006][ T5877] __sock_create+0x4b3/0x9d0 [ 99.406041][ T5877] __sys_socket+0xd6/0x1b0 [ 99.406072][ T5877] __x64_sys_socket+0x7a/0x90 [ 99.406098][ T5877] do_syscall_64+0x166/0x520 [ 99.406127][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.406147][ T5877] ? clear_bhb_loop+0x70/0xc0 [ 99.406174][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.406194][ T5877] RIP: 0033:0x7f6876afe159 [ 99.406213][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.406228][ T5877] RSP: 002b:00007f6874d56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 99.406250][ T5877] RAX: ffffffffffffffda RBX: 00007f6876d85fa0 RCX: 00007f6876afe159 [ 99.406265][ T5877] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 000000000000001d [ 99.406277][ T5877] RBP: 00007f6876b9506b R08: 0000000000000000 R09: 0000000000000000 [ 99.406289][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.406302][ T5877] R13: 00007f6876d86038 R14: 00007f6876d85fa0 R15: 00007ffe968ee848 [ 99.406333][ T5877] [ 100.356125][ T5894] FAULT_INJECTION: forcing a failure. [ 100.356125][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 100.356162][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.356185][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.356196][ T5894] Call Trace: [ 100.356204][ T5894] [ 100.356212][ T5894] dump_stack_lvl+0xe8/0x150 [ 100.356247][ T5894] should_fail_ex+0x46b/0x600 [ 100.356278][ T5894] should_failslab+0xa8/0x100 [ 100.356311][ T5894] __kmalloc_noprof+0xfb/0x790 [ 100.356336][ T5894] ? tomoyo_encode+0x2ad/0x570 [ 100.356359][ T5894] ? tomoyo_encode+0x2ad/0x570 [ 100.356388][ T5894] tomoyo_encode+0x2ad/0x570 [ 100.356418][ T5894] tomoyo_realpath_from_path+0x5fa/0x640 [ 100.356457][ T5894] tomoyo_check_open_permission+0x229/0x470 [ 100.356479][ T5894] ? tomoyo_check_open_permission+0x1d3/0x470 [ 100.356501][ T5894] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 100.356526][ T5894] ? __asan_memset+0x22/0x50 [ 100.356553][ T5894] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.356603][ T5894] ? mnt_get_write_access+0x66/0x2d0 [ 100.356628][ T5894] ? tomoyo_file_open+0x167/0x220 [ 100.356657][ T5894] security_file_open+0xa9/0x240 [ 100.356690][ T5894] do_dentry_open+0x4be/0x1420 [ 100.356726][ T5894] vfs_open+0x3b/0x350 [ 100.356747][ T5894] ? path_openat+0x142d/0x1d60 [ 100.356778][ T5894] path_openat+0x1448/0x1d60 [ 100.356819][ T5894] do_file_open+0x23e/0x4a0 [ 100.356846][ T5894] ? __pfx_do_file_open+0x10/0x10 [ 100.356891][ T5894] ? alloc_fd+0x654/0x6d0 [ 100.356919][ T5894] do_sys_openat2+0x115/0x200 [ 100.356950][ T5894] ? __se_sys_futex+0x3a8/0x450 [ 100.356971][ T5894] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.357006][ T5894] ? rcu_is_watching+0x16/0xb0 [ 100.357042][ T5894] __x64_sys_openat+0x138/0x170 [ 100.357076][ T5894] do_syscall_64+0x166/0x520 [ 100.357109][ T5894] ? trace_irq_disable+0x3b/0x140 [ 100.357133][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.357155][ T5894] ? clear_bhb_loop+0x70/0xc0 [ 100.357181][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.357201][ T5894] RIP: 0033:0x7f1da136e159 [ 100.357222][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.357239][ T5894] RSP: 002b:00007f1d9f5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.357264][ T5894] RAX: ffffffffffffffda RBX: 00007f1da15f5fa0 RCX: 00007f1da136e159 [ 100.357281][ T5894] RDX: 0000000000000002 RSI: 00002000000030c0 RDI: ffffffffffffff9c [ 100.357293][ T5894] RBP: 00007f1da140506b R08: 0000000000000000 R09: 0000000000000000 [ 100.357305][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.357317][ T5894] R13: 00007f1da15f6038 R14: 00007f1da15f5fa0 R15: 00007ffc03d48538 [ 100.357348][ T5894] [ 100.357386][ T5894] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.334693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.354710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.364713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.374780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.384708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.394739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.404708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.414716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.424717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.434705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.147615][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.556501][ T36] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 102.608322][ T36] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 102.608363][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.608385][ T36] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.608424][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.841717][ T5890] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.872450][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.37'. [ 102.891025][ T5903] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 103.229555][ T36] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 103.457825][ T5909] FAULT_INJECTION: forcing a failure. [ 103.457825][ T5909] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.457893][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.457926][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.457938][ T5909] Call Trace: [ 103.457947][ T5909] [ 103.457956][ T5909] dump_stack_lvl+0xe8/0x150 [ 103.457990][ T5909] should_fail_ex+0x46b/0x600 [ 103.458021][ T5909] _copy_to_user+0x31/0xb0 [ 103.458053][ T5909] __x64_sys_clock_adjtime+0x276/0x340 [ 103.458079][ T5909] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 103.458116][ T5909] ? rcu_is_watching+0x16/0xb0 [ 103.458159][ T5909] do_syscall_64+0x166/0x520 [ 103.458188][ T5909] ? trace_irq_disable+0x3b/0x140 [ 103.458211][ T5909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.458231][ T5909] ? clear_bhb_loop+0x70/0xc0 [ 103.458260][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.458280][ T5909] RIP: 0033:0x7f93aaa1e159 [ 103.458300][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.458317][ T5909] RSP: 002b:00007f93a8c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 103.458340][ T5909] RAX: ffffffffffffffda RBX: 00007f93aaca5fa0 RCX: 00007f93aaa1e159 [ 103.458355][ T5909] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 103.458369][ T5909] RBP: 00007f93aaab506b R08: 0000000000000000 R09: 0000000000000000 [ 103.458382][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.458392][ T5909] R13: 00007f93aaca6038 R14: 00007f93aaca5fa0 R15: 00007ffdb09f9f38 [ 103.458421][ T5909] [ 103.577704][ T36] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 104.061030][ T36] usb 5-1: USB disconnect, device number 2 [ 104.553882][ T36] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 104.581591][ T36] cyberjack 5-1:1.0: device disconnected [ 104.727855][ T5928] FAULT_INJECTION: forcing a failure. [ 104.727855][ T5928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.727892][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.4.49 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 104.727915][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.727928][ T5928] Call Trace: [ 104.727935][ T5928] [ 104.727943][ T5928] dump_stack_lvl+0xe8/0x150 [ 104.727978][ T5928] should_fail_ex+0x46b/0x600 [ 104.728010][ T5928] _copy_to_user+0x31/0xb0 [ 104.728040][ T5928] bpf_verifier_vlog+0x496/0x900 [ 104.728074][ T5928] btf_verifier_log+0x11d/0x1a0 [ 104.728101][ T5928] ? __pfx_btf_verifier_log+0x10/0x10 [ 104.728126][ T5928] ? btf_func_proto_log+0x63e/0x840 [ 104.728155][ T5928] __btf_verifier_log_type+0x45d/0x6a0 [ 104.728188][ T5928] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 104.728215][ T5928] ? __pfx_sort+0x10/0x10 [ 104.728239][ T5928] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 104.728268][ T5928] btf_func_proto_check_meta+0xc7/0x160 [ 104.728296][ T5928] btf_parse_type_sec+0x3cf/0x2360 [ 104.728329][ T5928] ? btf_parse_hdr+0x1da/0x810 [ 104.728357][ T5928] ? btf_parse_hdr+0x5f2/0x810 [ 104.728381][ T5928] ? btf_parse_str_sec+0x244/0x2f0 [ 104.728410][ T5928] btf_new_fd+0x487/0xc10 [ 104.728444][ T5928] __sys_bpf+0xd2e/0xd90 [ 104.728480][ T5928] ? __pfx___sys_bpf+0x10/0x10 [ 104.728510][ T5928] ? do_futex+0x3e7/0x4e0 [ 104.728555][ T5928] ? rcu_is_watching+0x16/0xb0 [ 104.728588][ T5928] __x64_sys_bpf+0xba/0xd0 [ 104.728616][ T5928] do_syscall_64+0x166/0x520 [ 104.728645][ T5928] ? trace_irq_disable+0x3b/0x140 [ 104.728669][ T5928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.728686][ T5928] ? clear_bhb_loop+0x70/0xc0 [ 104.728708][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.728727][ T5928] RIP: 0033:0x7fd0194de159 [ 104.728747][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.728762][ T5928] RSP: 002b:00007fd017736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.728784][ T5928] RAX: ffffffffffffffda RBX: 00007fd019765fa0 RCX: 00007fd0194de159 [ 104.728797][ T5928] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 104.728809][ T5928] RBP: 00007fd01957506b R08: 0000000000000000 R09: 0000000000000000 [ 104.728821][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.728833][ T5928] R13: 00007fd019766038 R14: 00007fd019765fa0 R15: 00007ffcfa4d3278 [ 104.728872][ T5928] [ 104.844567][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'. [ 105.007380][ T60] Bluetooth: hci1: command 0x2016 tx timeout [ 105.047803][ T5934] Could not find key with description: [syœ6ñ˜*óÙ+fs_cip] [ 105.047826][ T5934] process_request_key_err: No key [ 105.047835][ T5934] Could not find valid key in user session keyring for sig specified in mount option: [syœ6ñ˜*óÙ+fs_cip] [ 105.047847][ T5934] One or more global auth toks could not properly register; rc = [-2] [ 105.047899][ T5934] Error validating options; rc = [-2] [ 105.362406][ T5942] capability: warning: `syz.0.55' uses deprecated v2 capabilities in a way that may be insecure [ 106.477297][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'. [ 106.632266][ T5952] syzkaller0: entered promiscuous mode [ 106.632294][ T5952] syzkaller0: entered allmulticast mode [ 107.029240][ T60] Bluetooth: hci1: command 0x2016 tx timeout [ 107.128453][ T4907] block nbd1: Receive control failed (result -107) [ 107.235072][ T5977] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 107.389310][ T5975] nbd1: detected capacity change from 0 to 8589934592 [ 107.444599][ T58] block nbd1: Dead connection, failed to find a fallback [ 107.444628][ T58] block nbd1: shutting down sockets [ 107.451172][ T58] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.456285][ T58] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.488742][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.488774][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.488912][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.488936][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.489057][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.489080][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.489296][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.489319][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.489464][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.489487][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.489630][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.489653][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.489770][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.489792][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.489833][ T5800] ldm_validate_partition_table(): Disk read failed. [ 107.489922][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.489945][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.490061][ T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 107.490083][ T98] Buffer I/O error on dev nbd1, logical block 0, async page read [ 107.511648][ T5800] Dev nbd1: unable to read RDB block 0 [ 107.520127][ T5800] nbd1: unable to read partition table [ 107.573900][ T5800] ldm_validate_partition_table(): Disk read failed. [ 107.575759][ T5800] Dev nbd1: unable to read RDB block 0 [ 107.589582][ T5800] nbd1: unable to read partition table [ 120.781763][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.815830][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.833577][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.834702][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.835344][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.472500][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.493916][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.495556][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.505127][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.516369][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.921739][ T4907] Bluetooth: hci5: command tx timeout [ 124.154941][ T6078] syz.4.92 (6078) used greatest stack depth: 19304 bytes left [ 124.580724][ T4907] Bluetooth: hci6: command tx timeout [ 125.572616][ T4907] Bluetooth: hci5: command tx timeout [ 126.511072][ T3018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.643700][ T4907] Bluetooth: hci6: command tx timeout [ 127.314659][ T3018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.435549][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'. [ 127.450521][ T5700] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.599568][ T4907] Bluetooth: hci5: command tx timeout [ 127.689565][ T5700] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 127.692696][ T5700] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 127.692728][ T5700] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.692757][ T5700] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 127.692795][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.823263][ T6125] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.866194][ T5700] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 127.898483][ T3018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.092361][ T5700] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 128.324301][ T5700] usb 4-1: USB disconnect, device number 2 [ 128.406328][ T5700] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 128.437367][ T5700] cyberjack 4-1:1.0: device disconnected [ 128.712451][ T4907] Bluetooth: hci6: command tx timeout [ 128.735468][ T3018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.665788][ T4907] Bluetooth: hci5: command tx timeout [ 130.656008][ T6159] FAULT_INJECTION: forcing a failure. [ 130.656008][ T6159] name failslab, interval 1, probability 0, space 0, times 0 [ 130.656060][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.656084][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.656097][ T6159] Call Trace: [ 130.656105][ T6159] [ 130.656114][ T6159] dump_stack_lvl+0xe8/0x150 [ 130.656158][ T6159] should_fail_ex+0x46b/0x600 [ 130.656191][ T6159] should_failslab+0xa8/0x100 [ 130.656224][ T6159] __kmalloc_noprof+0xfb/0x790 [ 130.656249][ T6159] ? vb2_core_create_bufs+0x46f/0xe20 [ 130.656272][ T6159] ? vb2_core_create_bufs+0x46f/0xe20 [ 130.656297][ T6159] ? vb2_core_create_bufs+0x405/0xe20 [ 130.656332][ T6159] vb2_core_create_bufs+0x46f/0xe20 [ 130.656367][ T6159] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 130.656398][ T6159] ? vb2_set_flags_and_caps+0x2ee/0x5c0 [ 130.656432][ T6159] vb2_create_bufs+0x59c/0xa90 [ 130.656465][ T6159] ? __pfx_vb2_create_bufs+0x10/0x10 [ 130.656491][ T6159] ? v4l_sanitize_format+0x5d6/0xa00 [ 130.656521][ T6159] v4l_create_bufs+0x175/0x290 [ 130.656544][ T6159] __video_do_ioctl+0x8b2/0xc70 [ 130.656578][ T6159] ? __pfx___video_do_ioctl+0x10/0x10 [ 130.656616][ T6159] video_usercopy+0x860/0x1430 [ 130.656647][ T6159] ? __pfx___video_do_ioctl+0x10/0x10 [ 130.656677][ T6159] ? __pfx_video_usercopy+0x10/0x10 [ 130.656700][ T6159] ? smack_file_ioctl+0x2c4/0x370 [ 130.656738][ T6159] ? __fget_files+0x2a/0x420 [ 130.656760][ T6159] ? __fget_files+0x3a8/0x420 [ 130.656784][ T6159] v4l2_ioctl+0x190/0x1e0 [ 130.656810][ T6159] ? __pfx_v4l2_ioctl+0x10/0x10 [ 130.656833][ T6159] __se_sys_ioctl+0xff/0x170 [ 130.656860][ T6159] do_syscall_64+0x166/0x520 [ 130.656889][ T6159] ? trace_irq_disable+0x3b/0x140 [ 130.656918][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.656939][ T6159] ? clear_bhb_loop+0x70/0xc0 [ 130.656963][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.656984][ T6159] RIP: 0033:0x7f93aaa1e159 [ 130.657012][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.657030][ T6159] RSP: 002b:00007f93a8c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.657058][ T6159] RAX: ffffffffffffffda RBX: 00007f93aaca5fa0 RCX: 00007f93aaa1e159 [ 130.657074][ T6159] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 130.657089][ T6159] RBP: 00007f93aaab506b R08: 0000000000000000 R09: 0000000000000000 [ 130.657102][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.657115][ T6159] R13: 00007f93aaca6038 R14: 00007f93aaca5fa0 R15: 00007ffdb09f9f38 [ 130.657146][ T6159] [ 130.778817][ T4907] Bluetooth: hci6: command tx timeout [ 131.237303][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.237428][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.237610][ T6047] bridge_slave_0: entered allmulticast mode [ 131.267814][ T6047] bridge_slave_0: entered promiscuous mode [ 131.384097][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.384304][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.384506][ T6047] bridge_slave_1: entered allmulticast mode [ 131.394771][ T6047] bridge_slave_1: entered promiscuous mode [ 131.422199][ T5723] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.603624][ T5723] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 131.606316][ T5723] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 131.606349][ T5723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.606370][ T5723] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.606407][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.642453][ T6169] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.658485][ T5723] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 131.696385][ T3018] bridge_slave_1: left allmulticast mode [ 131.696498][ T3018] bridge_slave_1: left promiscuous mode [ 131.716889][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.751373][ T5723] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 131.965134][ T6169] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 132.155044][ T5723] usb 5-1: USB disconnect, device number 3 [ 132.176824][ T5723] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 132.179220][ T5723] cyberjack 5-1:1.0: device disconnected [ 132.214093][ T3018] bridge_slave_0: left allmulticast mode [ 132.214127][ T3018] bridge_slave_0: left promiscuous mode [ 132.214351][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.498293][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.498368][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.793247][ T6198] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.502523][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.562571][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.586103][ T3018] bond0 (unregistering): Released all slaves [ 135.681229][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.236029][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.534116][ T4907] Bluetooth: hci2: command 0x2016 tx timeout [ 140.203246][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.203375][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.203556][ T6056] bridge_slave_0: entered allmulticast mode [ 140.295995][ T6056] bridge_slave_0: entered promiscuous mode [ 140.352355][ T5878] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.527198][ T5878] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 140.550773][ T5878] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 140.550807][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.550829][ T5878] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 140.550869][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.565524][ T60] Bluetooth: hci2: command 0x2016 tx timeout [ 140.644052][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.644174][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.644368][ T6056] bridge_slave_1: entered allmulticast mode [ 140.698386][ T6231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.732581][ T6056] bridge_slave_1: entered promiscuous mode [ 140.772126][ T6047] team0: Port device team_slave_0 added [ 140.829145][ T5878] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 141.040860][ T5878] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 141.045815][ T6047] team0: Port device team_slave_1 added [ 141.112082][ T5878] usb 5-1: USB disconnect, device number 4 [ 141.566632][ T5878] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 141.664771][ T5878] cyberjack 5-1:1.0: device disconnected [ 141.808576][ T6056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.536130][ T6246] mmap: syz.1.143 (6246) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.992222][ T6056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.038277][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.038296][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.038322][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.309661][ T4907] Bluetooth: hci4: command 0x2016 tx timeout [ 145.317251][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.317268][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.317292][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.431730][ T6056] team0: Port device team_slave_0 added [ 146.651733][ T3018] hsr_slave_0: left promiscuous mode [ 147.685974][ T4907] Bluetooth: hci4: command 0x2016 tx timeout [ 147.705551][ T3018] hsr_slave_1: left promiscuous mode [ 147.706901][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.707044][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.030682][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.038574][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.171147][ T5713] kernel write not supported for file bpf-prog (pid: 5713 comm: kworker/0:4) [ 148.280139][ T3018] veth1_macvtap: left promiscuous mode [ 148.282026][ T3018] veth0_macvtap: left promiscuous mode [ 148.282343][ T3018] veth1_vlan: left promiscuous mode [ 148.282710][ T3018] veth0_vlan: left promiscuous mode [ 150.182424][ T60] Bluetooth: hci4: unexpected event for opcode 0x204e [ 151.297751][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 151.336770][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 151.574397][ T6056] team0: Port device team_slave_1 added [ 151.576976][ T6287] FAULT_INJECTION: forcing a failure. [ 151.576976][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 151.577015][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.3.159 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.577039][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.577051][ T6287] Call Trace: [ 151.577060][ T6287] [ 151.577069][ T6287] dump_stack_lvl+0xe8/0x150 [ 151.577104][ T6287] should_fail_ex+0x46b/0x600 [ 151.577136][ T6287] should_failslab+0xa8/0x100 [ 151.577167][ T6287] ? fib_table_insert+0x49a/0x1b10 [ 151.577195][ T6287] kmem_cache_alloc_noprof+0x9e/0x690 [ 151.577222][ T6287] ? fib_table_insert+0x49a/0x1b10 [ 151.577256][ T6287] fib_table_insert+0x49a/0x1b10 [ 151.577286][ T6287] ? lock_acquire+0x115/0x350 [ 151.577312][ T6287] ? fib_magic+0x143/0x530 [ 151.577334][ T6287] ? fib_new_table+0x14b/0x3f0 [ 151.577359][ T6287] fib_magic+0x43b/0x530 [ 151.577406][ T6287] ? __pfx_fib_magic+0x10/0x10 [ 151.577440][ T6287] ? lock_acquire+0x115/0x350 [ 151.577475][ T6287] ? addr_event+0x83/0x470 [ 151.577504][ T6287] fib_add_ifaddr+0x139/0x5d0 [ 151.577526][ T6287] ? __pfx_inetaddr_event+0x10/0x10 [ 151.577554][ T6287] fib_inetaddr_event+0x12e/0x190 [ 151.577581][ T6287] notifier_call_chain+0x1a5/0x3d0 [ 151.577610][ T6287] blocking_notifier_call_chain+0x6a/0x90 [ 151.577639][ T6287] __inet_insert_ifa+0x9ef/0xbc0 [ 151.577657][ T6287] ? blocking_notifier_call_chain+0x74/0x90 [ 151.577694][ T6287] ? __pfx___inet_insert_ifa+0x10/0x10 [ 151.577728][ T6287] devinet_ioctl+0x1649/0x1c50 [ 151.577770][ T6287] ? __pfx_devinet_ioctl+0x10/0x10 [ 151.577803][ T6287] ? get_user_ifreq+0x12b/0x180 [ 151.577829][ T6287] inet_ioctl+0x42a/0x560 [ 151.577855][ T6287] ? __pfx_inet_ioctl+0x10/0x10 [ 151.577899][ T6287] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.577932][ T6287] sock_do_ioctl+0x101/0x320 [ 151.577960][ T6287] ? __pfx_sock_do_ioctl+0x10/0x10 [ 151.577983][ T6287] ? hook_file_ioctl+0x1f5/0x610 [ 151.578006][ T6287] ? __asan_memset+0x22/0x50 [ 151.578028][ T6287] ? smack_file_ioctl+0x265/0x370 [ 151.578057][ T6287] sock_ioctl+0x57d/0x7f0 [ 151.578084][ T6287] ? __pfx_sock_ioctl+0x10/0x10 [ 151.578109][ T6287] ? __fget_files+0x2a/0x420 [ 151.578129][ T6287] ? __fget_files+0x3a8/0x420 [ 151.578148][ T6287] ? __fget_files+0x2a/0x420 [ 151.578172][ T6287] ? bpf_lsm_file_ioctl+0x9/0x20 [ 151.578195][ T6287] ? __pfx_sock_ioctl+0x10/0x10 [ 151.578219][ T6287] __se_sys_ioctl+0xff/0x170 [ 151.578248][ T6287] do_syscall_64+0x166/0x520 [ 151.578276][ T6287] ? trace_irq_disable+0x3b/0x140 [ 151.578301][ T6287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.578321][ T6287] ? clear_bhb_loop+0x70/0xc0 [ 151.578346][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.578367][ T6287] RIP: 0033:0x7f93aaa1e159 [ 151.578386][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.578403][ T6287] RSP: 002b:00007f93a8c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.578425][ T6287] RAX: ffffffffffffffda RBX: 00007f93aaca5fa0 RCX: 00007f93aaa1e159 [ 151.578440][ T6287] RDX: 0000200000000040 RSI: 000000000000891c RDI: 0000000000000004 [ 151.578460][ T6287] RBP: 00007f93aaab506b R08: 0000000000000000 R09: 0000000000000000 [ 151.578472][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.578483][ T6287] R13: 00007f93aaca6038 R14: 00007f93aaca5fa0 R15: 00007ffdb09f9f38 [ 151.578514][ T6287] [ 152.272863][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.272882][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.272905][ T6056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.355536][ T6047] hsr_slave_0: entered promiscuous mode [ 152.363874][ T6047] hsr_slave_1: entered promiscuous mode [ 152.374591][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.374611][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.374636][ T6056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.196793][ T6056] hsr_slave_0: entered promiscuous mode [ 155.203007][ T6056] hsr_slave_1: entered promiscuous mode [ 155.203583][ T6056] debugfs: 'hsr0' already exists in 'hsr' [ 155.203604][ T6056] Cannot create hsr debugfs directory [ 155.270881][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 161.567864][ T3018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.756555][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.043761][ T6376] 9p: Bad value for 'wfdno' [ 164.689463][ T3018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.784874][ T3018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.925769][ T6407] 9p: Bad value for 'wfdno' [ 167.952599][ T6047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.139048][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.218511][ T6047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.427517][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.508414][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.574613][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 168.662248][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 168.673801][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 168.712365][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.712400][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.712439][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.778809][ T9] usb 5-1: config 0 descriptor?? [ 168.957332][ T3018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.013886][ T6047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.063634][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.065222][ T6422] netlink: 48 bytes leftover after parsing attributes in process `syz.1.196'. [ 169.240977][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.272573][ T6047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.316015][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.324601][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 169.324630][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 170.634198][ T9] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 170.635716][ T9] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -5 [ 171.198519][ T6056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.225474][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.231250][ T6056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.297706][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.365759][ T6056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.410925][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.490280][ T6056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.660005][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.619904][ T3018] bridge_slave_1: left allmulticast mode [ 172.619940][ T3018] bridge_slave_1: left promiscuous mode [ 172.620193][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.819313][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 172.819342][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.819365][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.819377][ T60] Workqueue: hci2 hci_rx_work [ 172.819407][ T60] Call Trace: [ 172.819415][ T60] [ 172.819425][ T60] dump_stack_lvl+0xe8/0x150 [ 172.819457][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 172.819484][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 172.819512][ T60] ? rt_spin_unlock+0x165/0x200 [ 172.819540][ T60] kobject_add_internal+0x62c/0xce0 [ 172.819570][ T60] kobject_add+0x163/0x240 [ 172.819590][ T60] ? rt_spin_unlock+0x159/0x200 [ 172.819621][ T60] ? __pfx_kobject_add+0x10/0x10 [ 172.819650][ T60] ? get_device_parent+0x370/0x3a0 [ 172.819681][ T60] device_add+0x3fa/0xb80 [ 172.819721][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 172.819749][ T60] le_conn_complete_evt+0xfe3/0x16d0 [ 172.819785][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 172.819816][ T60] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.819846][ T60] ? rt_mutex_slowunlock+0x219/0x460 [ 172.819871][ T60] ? skb_pull_data+0xf0/0x200 [ 172.819901][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 172.819936][ T60] hci_event_packet+0x67a/0xf10 [ 172.819960][ T60] ? reacquire_held_locks+0x117/0x1a0 [ 172.819994][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 172.820019][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 172.820042][ T60] ? rt_spin_unlock+0x159/0x200 [ 172.820076][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 172.820108][ T60] hci_rx_work+0x3ee/0x1020 [ 172.820139][ T60] ? process_scheduled_works+0x97a/0x1630 [ 172.820167][ T60] process_scheduled_works+0xc3d/0x1630 [ 172.820228][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.820261][ T60] ? assign_work+0x3cf/0x5d0 [ 172.820294][ T60] worker_thread+0xa47/0xfb0 [ 172.820349][ T60] kthread+0x38b/0x470 [ 172.820370][ T60] ? __pfx_worker_thread+0x10/0x10 [ 172.820395][ T60] ? __pfx_kthread+0x10/0x10 [ 172.820417][ T60] ret_from_fork+0x514/0xb70 [ 172.820441][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 172.820462][ T60] ? __switch_to+0xc89/0x1420 [ 172.820492][ T60] ? __pfx_kthread+0x10/0x10 [ 172.820515][ T60] ret_from_fork_asm+0x1a/0x30 [ 172.820552][ T60] [ 172.820608][ T60] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 172.820648][ T60] Bluetooth: hci2: failed to register connection device [ 173.116894][ T3018] bridge_slave_0: left allmulticast mode [ 173.116932][ T3018] bridge_slave_0: left promiscuous mode [ 173.117201][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.250719][ T9] usb 5-1: USB disconnect, device number 5 [ 173.301515][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 176.167283][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.425747][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.110171][ T5700] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 177.280680][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 177.282009][ T5700] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 177.286626][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.286658][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.286697][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.345516][ T5700] usb 4-1: config 0 descriptor?? [ 177.544919][ T3018] bond0 (unregistering): Released all slaves [ 177.567910][ T6483] netlink: 48 bytes leftover after parsing attributes in process `syz.4.205'. [ 177.583699][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 178.056103][ T5700] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 178.056221][ T5700] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 178.185965][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.203132][ T5700] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 178.403327][ T5700] ft260 0003:0403:6030.0003: failed to retrieve system status [ 178.403677][ T5700] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -32 [ 178.565524][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.120448][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.120600][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.324169][ T6528] FAULT_INJECTION: forcing a failure. [ 179.324169][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.324213][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.4.217 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.324237][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.324248][ T6528] Call Trace: [ 179.324256][ T6528] [ 179.324264][ T6528] dump_stack_lvl+0xe8/0x150 [ 179.324299][ T6528] should_fail_ex+0x46b/0x600 [ 179.324331][ T6528] _copy_to_user+0x31/0xb0 [ 179.324362][ T6528] bpf_verifier_vlog+0x496/0x900 [ 179.324398][ T6528] __btf_verifier_log+0xe2/0x140 [ 179.324425][ T6528] ? __pfx___btf_verifier_log+0x10/0x10 [ 179.324458][ T6528] __btf_verifier_log_type+0x4fd/0x6a0 [ 179.324491][ T6528] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 179.324521][ T6528] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 179.324549][ T6528] btf_enum_check_meta+0x219/0xdc0 [ 179.324578][ T6528] ? __btf_verifier_log+0xe2/0x140 [ 179.324604][ T6528] btf_parse_type_sec+0x3cf/0x2360 [ 179.324638][ T6528] ? btf_parse_hdr+0x1da/0x810 [ 179.324664][ T6528] ? btf_parse_hdr+0x5f2/0x810 [ 179.324687][ T6528] ? btf_parse_str_sec+0x244/0x2f0 [ 179.324716][ T6528] btf_new_fd+0x487/0xc10 [ 179.324750][ T6528] __sys_bpf+0xd2e/0xd90 [ 179.324786][ T6528] ? __pfx___sys_bpf+0x10/0x10 [ 179.324811][ T6528] ? __lock_acquire+0x747/0x2de0 [ 179.324840][ T6528] ? do_futex+0x3e7/0x4e0 [ 179.324887][ T6528] ? rcu_is_watching+0x16/0xb0 [ 179.324921][ T6528] __x64_sys_bpf+0xba/0xd0 [ 179.324949][ T6528] do_syscall_64+0x166/0x520 [ 179.324981][ T6528] ? trace_irq_disable+0x3b/0x140 [ 179.325006][ T6528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.325027][ T6528] ? clear_bhb_loop+0x70/0xc0 [ 179.325052][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.325072][ T6528] RIP: 0033:0x7fd0194de159 [ 179.325092][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.325110][ T6528] RSP: 002b:00007fd017736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.325133][ T6528] RAX: ffffffffffffffda RBX: 00007fd019765fa0 RCX: 00007fd0194de159 [ 179.325147][ T6528] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 179.325159][ T6528] RBP: 00007fd01957506b R08: 0000000000000000 R09: 0000000000000000 [ 179.325172][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.325184][ T6528] R13: 00007fd019766038 R14: 00007fd019765fa0 R15: 00007ffcfa4d3278 [ 179.325225][ T6528] [ 179.417749][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.417878][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.578924][ T60] Bluetooth: hci2: command 0x2016 tx timeout [ 179.864898][ T6056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.403848][ T1000] usb 4-1: USB disconnect, device number 3 [ 180.856240][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 181.140317][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.185954][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.192147][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.215984][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.238392][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.081708][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.165816][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.167314][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.190278][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.211572][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.394735][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 182.396986][ T6550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.223'. [ 183.394834][ T5596] Bluetooth: hci1: command tx timeout [ 183.606648][ T3018] hsr_slave_0: left promiscuous mode [ 183.661535][ T3018] hsr_slave_1: left promiscuous mode [ 183.662784][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.662809][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.447031][ T5596] Bluetooth: hci3: command tx timeout [ 184.568868][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.568899][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.879454][ T5596] Bluetooth: hci1: command tx timeout [ 186.129144][ T3018] veth1_macvtap: left promiscuous mode [ 186.129235][ T3018] veth0_macvtap: left promiscuous mode [ 186.129452][ T3018] veth1_vlan: left promiscuous mode [ 186.129606][ T3018] veth0_vlan: left promiscuous mode [ 186.690692][ T60] Bluetooth: hci3: command tx timeout [ 186.857033][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.234'. [ 187.942029][ T60] Bluetooth: hci1: command tx timeout [ 189.516611][ T60] Bluetooth: hci3: command tx timeout [ 190.018041][ T60] Bluetooth: hci1: command tx timeout [ 190.527280][ T6637] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13 [ 190.720268][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 190.776191][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 191.542698][ T60] Bluetooth: hci3: command tx timeout [ 191.564908][ T6616] netlink: 48 bytes leftover after parsing attributes in process `syz.4.234'. [ 191.566909][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 191.993132][ T6667] syzkaller0: entered promiscuous mode [ 191.993151][ T6667] syzkaller0: entered allmulticast mode [ 191.994943][ T6664] netlink: 53 bytes leftover after parsing attributes in process `syz.4.247'. [ 192.758275][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 192.918472][ T6684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.255'. [ 193.220795][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.220861][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.804640][ T6716] syzkaller0: entered promiscuous mode [ 193.804668][ T6716] syzkaller0: entered allmulticast mode [ 193.831341][ T6702] netlink: 53 bytes leftover after parsing attributes in process `syz.4.262'. [ 194.561511][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 196.708863][ T6768] syzkaller0: entered promiscuous mode [ 196.708891][ T6768] syzkaller0: entered allmulticast mode [ 196.727426][ T6766] netlink: 53 bytes leftover after parsing attributes in process `syz.1.275'. [ 198.601649][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.289'. [ 198.639975][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 199.102455][ T6814] usb usb8: usbfs: process 6814 (syz.1.288) did not claim interface 0 before use [ 199.258547][ T1000] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.306896][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.307398][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.307584][ T6553] bridge_slave_0: entered allmulticast mode [ 199.332748][ T6553] bridge_slave_0: entered promiscuous mode [ 199.359449][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.359582][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.359830][ T6553] bridge_slave_1: entered allmulticast mode [ 199.363218][ T6553] bridge_slave_1: entered promiscuous mode [ 199.438918][ T1000] usb 5-1: Using ep0 maxpacket: 16 [ 199.439698][ T1000] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 199.446061][ T1000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.446079][ T1000] usb 5-1: Product: syz [ 199.446087][ T1000] usb 5-1: Manufacturer: syz [ 199.446094][ T1000] usb 5-1: SerialNumber: syz [ 199.593599][ T1000] usb 5-1: config 0 descriptor?? [ 199.615167][ T1000] hub 5-1:0.0: bad descriptor, ignoring hub [ 199.615213][ T1000] hub 5-1:0.0: probe with driver hub failed with error -5 [ 201.858295][ T5609] Bluetooth: hci4: command 0x2016 tx timeout [ 201.858339][ T5609] Bluetooth: hci2: command 0x2016 tx timeout [ 201.858372][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 202.284465][ T1000] usb 5-1: USB disconnect, device number 6 [ 202.554372][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.578103][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.578229][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.578424][ T6558] bridge_slave_0: entered allmulticast mode [ 202.612654][ T6558] bridge_slave_0: entered promiscuous mode [ 202.684261][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.173247][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.173426][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.173628][ T6558] bridge_slave_1: entered allmulticast mode [ 203.214186][ T6558] bridge_slave_1: entered promiscuous mode [ 203.372912][ T6852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.298'. [ 203.386769][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 203.589729][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 203.767679][ T6553] team0: Port device team_slave_0 added [ 203.805398][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.487131][ T6553] team0: Port device team_slave_1 added [ 204.810016][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.058514][ T6868] FAULT_INJECTION: forcing a failure. [ 206.058514][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.058554][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.1.294 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.058577][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.058589][ T6868] Call Trace: [ 206.058596][ T6868] [ 206.058605][ T6868] dump_stack_lvl+0xe8/0x150 [ 206.058638][ T6868] should_fail_ex+0x46b/0x600 [ 206.058686][ T6868] _copy_from_user+0x2d/0xb0 [ 206.058714][ T6868] __sys_bpf+0x2e7/0xd90 [ 206.058749][ T6868] ? __pfx___sys_bpf+0x10/0x10 [ 206.058779][ T6868] ? do_futex+0x3e7/0x4e0 [ 206.058822][ T6868] ? rcu_is_watching+0x16/0xb0 [ 206.058855][ T6868] __x64_sys_bpf+0xba/0xd0 [ 206.058883][ T6868] do_syscall_64+0x166/0x520 [ 206.058911][ T6868] ? trace_irq_disable+0x3b/0x140 [ 206.058934][ T6868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.058952][ T6868] ? clear_bhb_loop+0x70/0xc0 [ 206.058974][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.058993][ T6868] RIP: 0033:0x7f0e83b7e159 [ 206.059011][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.059027][ T6868] RSP: 002b:00007f0e81dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.059048][ T6868] RAX: ffffffffffffffda RBX: 00007f0e83e05fa0 RCX: 00007f0e83b7e159 [ 206.059062][ T6868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 206.059074][ T6868] RBP: 00007f0e83c1506b R08: 0000000000000000 R09: 0000000000000000 [ 206.059084][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.059096][ T6868] R13: 00007f0e83e06038 R14: 00007f0e83e05fa0 R15: 00007fffd5e8b5c8 [ 206.059126][ T6868] [ 206.099815][ T6866] usb usb8: usbfs: process 6866 (syz.4.300) did not claim interface 0 before use [ 207.481397][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.481415][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.481437][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.580862][ T6558] team0: Port device team_slave_0 added [ 207.652420][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.652437][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.652462][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.766691][ T6558] team0: Port device team_slave_1 added [ 209.029599][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.029617][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.029650][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.078572][ T6553] hsr_slave_0: entered promiscuous mode [ 209.081546][ T6553] hsr_slave_1: entered promiscuous mode [ 209.089974][ T6553] debugfs: 'hsr0' already exists in 'hsr' [ 209.090001][ T6553] Cannot create hsr debugfs directory [ 209.350005][ T6891] usb usb8: usbfs: process 6891 (syz.1.309) did not claim interface 0 before use [ 210.364230][ T6893] FAULT_INJECTION: forcing a failure. [ 210.364230][ T6893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.364266][ T6893] CPU: 1 UID: 0 PID: 6893 Comm: syz.3.310 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.364290][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.364302][ T6893] Call Trace: [ 210.364310][ T6893] [ 210.364318][ T6893] dump_stack_lvl+0xe8/0x150 [ 210.364353][ T6893] should_fail_ex+0x46b/0x600 [ 210.364386][ T6893] _copy_from_user+0x2d/0xb0 [ 210.364415][ T6893] __sys_bpf+0x2e7/0xd90 [ 210.364452][ T6893] ? __pfx___sys_bpf+0x10/0x10 [ 210.364482][ T6893] ? do_futex+0x3e7/0x4e0 [ 210.364529][ T6893] ? rcu_is_watching+0x16/0xb0 [ 210.364564][ T6893] __x64_sys_bpf+0xba/0xd0 [ 210.364591][ T6893] do_syscall_64+0x166/0x520 [ 210.364619][ T6893] ? trace_irq_disable+0x3b/0x140 [ 210.364645][ T6893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.364665][ T6893] ? clear_bhb_loop+0x70/0xc0 [ 210.364691][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.364708][ T6893] RIP: 0033:0x7f93aaa1e159 [ 210.364726][ T6893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.364742][ T6893] RSP: 002b:00007f93a8c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.364763][ T6893] RAX: ffffffffffffffda RBX: 00007f93aaca5fa0 RCX: 00007f93aaa1e159 [ 210.364776][ T6893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 210.364788][ T6893] RBP: 00007f93aaab506b R08: 0000000000000000 R09: 0000000000000000 [ 210.364799][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.364810][ T6893] R13: 00007f93aaca6038 R14: 00007f93aaca5fa0 R15: 00007ffdb09f9f38 [ 210.364838][ T6893] [ 211.169386][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.169399][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.169426][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.609000][ T6558] hsr_slave_0: entered promiscuous mode [ 212.610306][ T6558] hsr_slave_1: entered promiscuous mode [ 212.630125][ T6558] debugfs: 'hsr0' already exists in 'hsr' [ 212.630145][ T6558] Cannot create hsr debugfs directory [ 214.598595][ T6928] usb usb8: usbfs: process 6928 (syz.1.319) did not claim interface 0 before use [ 214.729744][ T6931] FAULT_INJECTION: forcing a failure. [ 214.729744][ T6931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.729783][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.4.320 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.729805][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.729817][ T6931] Call Trace: [ 214.729825][ T6931] [ 214.729834][ T6931] dump_stack_lvl+0xe8/0x150 [ 214.729868][ T6931] should_fail_ex+0x46b/0x600 [ 214.729900][ T6931] _copy_from_user+0x2d/0xb0 [ 214.729930][ T6931] __sys_bpf+0x2e7/0xd90 [ 214.729965][ T6931] ? __pfx___sys_bpf+0x10/0x10 [ 214.729999][ T6931] ? do_futex+0x3e7/0x4e0 [ 214.730046][ T6931] ? rcu_is_watching+0x16/0xb0 [ 214.730081][ T6931] __x64_sys_bpf+0xba/0xd0 [ 214.730109][ T6931] do_syscall_64+0x166/0x520 [ 214.730138][ T6931] ? trace_irq_disable+0x3b/0x140 [ 214.730163][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.730183][ T6931] ? clear_bhb_loop+0x70/0xc0 [ 214.730214][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.730234][ T6931] RIP: 0033:0x7fd0194de159 [ 214.730254][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.730269][ T6931] RSP: 002b:00007fd017736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.730292][ T6931] RAX: ffffffffffffffda RBX: 00007fd019765fa0 RCX: 00007fd0194de159 [ 214.730307][ T6931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 214.730319][ T6931] RBP: 00007fd01957506b R08: 0000000000000000 R09: 0000000000000000 [ 214.730333][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.730346][ T6931] R13: 00007fd019766038 R14: 00007fd019765fa0 R15: 00007ffcfa4d3278 [ 214.730379][ T6931] [ 218.036037][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 218.531287][ T6963] usb usb8: usbfs: process 6963 (syz.4.329) did not claim interface 0 before use [ 219.240841][ T6968] FAULT_INJECTION: forcing a failure. [ 219.240841][ T6968] name fail_futex, interval 1, probability 0, space 0, times 0 [ 219.240877][ T6968] CPU: 1 UID: 0 PID: 6968 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.240900][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.240917][ T6968] Call Trace: [ 219.240925][ T6968] [ 219.240934][ T6968] dump_stack_lvl+0xe8/0x150 [ 219.240970][ T6968] should_fail_ex+0x46b/0x600 [ 219.241006][ T6968] get_futex_key+0x1b4/0x1580 [ 219.241033][ T6968] ? __fget_files+0x2a/0x420 [ 219.241060][ T6968] ? fput+0xa0/0xd0 [ 219.241091][ T6968] ? __pfx_get_futex_key+0x10/0x10 [ 219.241131][ T6968] futex_wake+0x119/0x600 [ 219.241160][ T6968] ? __pfx_futex_wake+0x10/0x10 [ 219.241181][ T6968] ? __sys_bpf+0xbfc/0xd90 [ 219.241216][ T6968] ? __pfx___sys_bpf+0x10/0x10 [ 219.241246][ T6968] do_futex+0x458/0x4e0 [ 219.241271][ T6968] ? __pfx_do_futex+0x10/0x10 [ 219.241296][ T6968] __se_sys_futex+0x3a8/0x450 [ 219.241322][ T6968] ? __pfx___se_sys_futex+0x10/0x10 [ 219.241340][ T6968] ? rcu_is_watching+0x16/0xb0 [ 219.241375][ T6968] ? __x64_sys_futex+0x21/0xf0 [ 219.241398][ T6968] do_syscall_64+0x166/0x520 [ 219.241426][ T6968] ? trace_irq_disable+0x3b/0x140 [ 219.241451][ T6968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.241472][ T6968] ? clear_bhb_loop+0x70/0xc0 [ 219.241496][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.241517][ T6968] RIP: 0033:0x7fd0194de159 [ 219.241536][ T6968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.241551][ T6968] RSP: 002b:00007fd0177360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.241573][ T6968] RAX: ffffffffffffffda RBX: 00007fd019765fa8 RCX: 00007fd0194de159 [ 219.241588][ T6968] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd019765fac [ 219.241602][ T6968] RBP: 00007fd019765fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 219.241616][ T6968] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 219.241630][ T6968] R13: 00007fd019766038 R14: 00007ffcfa4d3190 R15: 00007ffcfa4d3278 [ 219.241662][ T6968] [ 224.015722][ T3018] bridge_slave_1: left allmulticast mode [ 224.015746][ T3018] bridge_slave_1: left promiscuous mode [ 224.015921][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.095190][ T7012] usb usb8: usbfs: process 7012 (syz.1.339) did not claim interface 0 before use [ 224.938519][ T7014] FAULT_INJECTION: forcing a failure. [ 224.938519][ T7014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.938557][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.4.340 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.938580][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.938592][ T7014] Call Trace: [ 224.938601][ T7014] [ 224.938610][ T7014] dump_stack_lvl+0xe8/0x150 [ 224.938645][ T7014] should_fail_ex+0x46b/0x600 [ 224.938678][ T7014] _copy_from_user+0x2d/0xb0 [ 224.938708][ T7014] __sys_bpf+0x2e7/0xd90 [ 224.938745][ T7014] ? __pfx___sys_bpf+0x10/0x10 [ 224.938775][ T7014] ? do_futex+0x3e7/0x4e0 [ 224.938823][ T7014] ? rcu_is_watching+0x16/0xb0 [ 224.938858][ T7014] __x64_sys_bpf+0xba/0xd0 [ 224.938887][ T7014] do_syscall_64+0x166/0x520 [ 224.938915][ T7014] ? trace_irq_disable+0x3b/0x140 [ 224.938940][ T7014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.938961][ T7014] ? clear_bhb_loop+0x70/0xc0 [ 224.938986][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.939006][ T7014] RIP: 0033:0x7fd0194de159 [ 224.939025][ T7014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.939041][ T7014] RSP: 002b:00007fd017736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.939063][ T7014] RAX: ffffffffffffffda RBX: 00007fd019765fa0 RCX: 00007fd0194de159 [ 224.939077][ T7014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 224.939090][ T7014] RBP: 00007fd01957506b R08: 0000000000000000 R09: 0000000000000000 [ 224.939102][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.939114][ T7014] R13: 00007fd019766038 R14: 00007fd019765fa0 R15: 00007ffcfa4d3278 [ 224.939146][ T7014] [ 225.316750][ T3018] bridge_slave_0: left allmulticast mode [ 225.316783][ T3018] bridge_slave_0: left promiscuous mode [ 225.316950][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.547474][ T5878] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 226.641848][ T3018] bridge_slave_1: left allmulticast mode [ 226.641883][ T3018] bridge_slave_1: left promiscuous mode [ 226.642115][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.702746][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 226.703591][ T5878] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 226.727724][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.727753][ T5878] usb 2-1: Product: syz [ 226.727767][ T5878] usb 2-1: Manufacturer: syz [ 226.727781][ T5878] usb 2-1: SerialNumber: syz [ 226.846015][ T5878] usb 2-1: config 0 descriptor?? [ 226.866600][ T3018] bridge_slave_0: left allmulticast mode [ 226.866638][ T3018] bridge_slave_0: left promiscuous mode [ 226.867900][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.929228][ T5878] hub 2-1:0.0: bad descriptor, ignoring hub [ 226.929272][ T5878] hub 2-1:0.0: probe with driver hub failed with error -5 [ 227.065727][ T7018] capability: warning: `syz.1.341' uses 32-bit capabilities (legacy support in use) [ 229.321628][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.400849][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.422050][ T3018] bond0 (unregistering): Released all slaves [ 230.011712][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.140213][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.225128][ T3018] bond0 (unregistering): Released all slaves [ 230.516017][ T7051] usb usb8: usbfs: process 7051 (syz.4.349) did not claim interface 0 before use [ 231.403123][ T2267] usb 2-1: USB disconnect, device number 2 [ 234.939920][ T7079] FAULT_INJECTION: forcing a failure. [ 234.939920][ T7079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.939962][ T7079] CPU: 1 UID: 0 PID: 7079 Comm: syz.1.354 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.939995][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.940008][ T7079] Call Trace: [ 234.940017][ T7079] [ 234.940026][ T7079] dump_stack_lvl+0xe8/0x150 [ 234.940063][ T7079] should_fail_ex+0x46b/0x600 [ 234.940095][ T7079] _copy_from_user+0x2d/0xb0 [ 234.940125][ T7079] __sys_bpf+0x2e7/0xd90 [ 234.940162][ T7079] ? __pfx___sys_bpf+0x10/0x10 [ 234.940193][ T7079] ? do_futex+0x3e7/0x4e0 [ 234.940240][ T7079] ? rcu_is_watching+0x16/0xb0 [ 234.940275][ T7079] __x64_sys_bpf+0xba/0xd0 [ 234.940304][ T7079] do_syscall_64+0x166/0x520 [ 234.940333][ T7079] ? trace_irq_disable+0x3b/0x140 [ 234.940357][ T7079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.940378][ T7079] ? clear_bhb_loop+0x70/0xc0 [ 234.940403][ T7079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.940423][ T7079] RIP: 0033:0x7f0e83b7e159 [ 234.940442][ T7079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.940459][ T7079] RSP: 002b:00007f0e81dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.940481][ T7079] RAX: ffffffffffffffda RBX: 00007f0e83e05fa0 RCX: 00007f0e83b7e159 [ 234.940495][ T7079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 234.940507][ T7079] RBP: 00007f0e83c1506b R08: 0000000000000000 R09: 0000000000000000 [ 234.940520][ T7079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.940531][ T7079] R13: 00007f0e83e06038 R14: 00007f0e83e05fa0 R15: 00007fffd5e8b5c8 [ 234.940562][ T7079] [ 235.378593][ T3018] hsr_slave_0: left promiscuous mode [ 235.406506][ T3018] hsr_slave_1: left promiscuous mode [ 235.407703][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.454464][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.539000][ T7087] usb usb8: usbfs: process 7087 (syz.1.359) did not claim interface 0 before use [ 237.923053][ T5722] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 238.154442][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 238.155422][ T5722] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 238.162201][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.162230][ T5722] usb 2-1: Product: syz [ 238.162245][ T5722] usb 2-1: Manufacturer: syz [ 238.162362][ T5722] usb 2-1: SerialNumber: syz [ 238.278107][ T5722] usb 2-1: config 0 descriptor?? [ 238.344191][ T5722] hub 2-1:0.0: bad descriptor, ignoring hub [ 238.344701][ T5722] hub 2-1:0.0: probe with driver hub failed with error -5 [ 238.864108][ T3018] hsr_slave_0: left promiscuous mode [ 239.014051][ T3018] hsr_slave_1: left promiscuous mode [ 239.018854][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.057865][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.545467][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.578503][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.579810][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.581034][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.590351][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.834435][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 240.923758][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 241.784682][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 241.924556][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 242.259060][ T4907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.290861][ T4907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.299339][ T4907] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.317073][ T4907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.318511][ T4907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.683442][ T5596] Bluetooth: hci5: command tx timeout [ 243.868792][ T7102] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 244.899623][ T5596] Bluetooth: hci6: command tx timeout [ 244.899972][ T5596] Bluetooth: hci5: command tx timeout [ 248.119183][ T4907] Bluetooth: hci5: command tx timeout [ 248.119223][ T4907] Bluetooth: hci6: command tx timeout [ 250.899554][ T5596] Bluetooth: hci6: command tx timeout [ 250.899601][ T5596] Bluetooth: hci5: command tx timeout [ 252.952937][ T4907] Bluetooth: hci6: command tx timeout [ 254.915297][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.915366][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.959514][ T5722] usb 2-1: USB disconnect, device number 3 [ 265.002541][ T7144] FAULT_INJECTION: forcing a failure. [ 265.002541][ T7144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.002578][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.3.367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 265.002599][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.002610][ T7144] Call Trace: [ 265.002618][ T7144] [ 265.002625][ T7144] dump_stack_lvl+0xe8/0x150 [ 265.002657][ T7144] should_fail_ex+0x46b/0x600 [ 265.002687][ T7144] _copy_from_user+0x2d/0xb0 [ 265.002714][ T7144] __sys_bpf+0x2e7/0xd90 [ 265.002758][ T7144] ? __pfx___sys_bpf+0x10/0x10 [ 265.002790][ T7144] ? do_futex+0x3e7/0x4e0 [ 265.002833][ T7144] ? rcu_is_watching+0x16/0xb0 [ 265.002867][ T7144] __x64_sys_bpf+0xba/0xd0 [ 265.002894][ T7144] do_syscall_64+0x166/0x520 [ 265.002922][ T7144] ? trace_irq_disable+0x3b/0x140 [ 265.002946][ T7144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.002966][ T7144] ? clear_bhb_loop+0x70/0xc0 [ 265.002989][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.003009][ T7144] RIP: 0033:0x7f93aaa1e159 [ 265.003026][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.003042][ T7144] RSP: 002b:00007f93a8c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.003067][ T7144] RAX: ffffffffffffffda RBX: 00007f93aaca5fa0 RCX: 00007f93aaa1e159 [ 265.003080][ T7144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 265.003092][ T7144] RBP: 00007f93aaab506b R08: 0000000000000000 R09: 0000000000000000 [ 265.003102][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.003113][ T7144] R13: 00007f93aaca6038 R14: 00007f93aaca5fa0 R15: 00007ffdb09f9f38 [ 265.003139][ T7144] [ 278.090992][ T5596] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.130188][ T5596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.132559][ T5596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.155905][ T5596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.156629][ T5596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.060021][ T5596] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 288.104077][ T5596] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 288.106323][ T5596] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 288.107604][ T5596] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 288.136892][ T5596] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 293.031931][ T4907] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 293.069841][ T4907] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 293.073949][ T4907] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 293.091746][ T4907] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 293.111524][ T4907] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 301.511773][ T4907] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 301.555682][ T4907] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 301.557119][ T4907] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 301.559230][ T4907] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 301.560035][ T4907] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 303.014076][ T5596] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 303.054441][ T5596] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 303.058994][ T5596] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 303.101507][ T5596] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 303.102544][ T5596] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 333.548774][ T60] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 333.558415][ T60] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 333.562617][ T60] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 333.563668][ T60] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 333.564339][ T60] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 337.894148][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.894222][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.933280][ T4907] Bluetooth: hci7: command tx timeout [ 337.933507][ T4907] Bluetooth: hci8: command tx timeout [ 337.933656][ T4907] Bluetooth: hci9: command tx timeout [ 337.933794][ T4907] Bluetooth: hci10: command tx timeout [ 337.933927][ T4907] Bluetooth: hci11: command tx timeout [ 337.934048][ T4907] Bluetooth: hci3: command 0x0406 tx timeout [ 337.934092][ T4907] Bluetooth: hci12: command tx timeout [ 349.113325][ T4907] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 349.154451][ T4907] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 349.167730][ T4907] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 349.172114][ T4907] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 349.172905][ T4907] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 355.191555][ T5600] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 355.223920][ T5600] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 355.255473][ T5600] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 355.261024][ T5600] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 355.277533][ T5600] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 442.880732][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 442.887719][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16/3:b..l P2997/2:b..l [ 442.896602][ C0] rcu: (detected by 0, t=10502 jiffies, g=22885, q=4752 ncpus=2) [ 442.904423][ C0] task:kworker/u8:16 state:R running task stack:19264 pid:2997 tgid:2997 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 442.918007][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 442.924356][ C0] Call Trace: [ 442.927646][ C0] [ 442.930591][ C0] __schedule+0x16d9/0x5700 [ 442.935123][ C0] ? unwind_next_frame+0x8f/0x2550 [ 442.940234][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 442.945169][ C0] ? __kmalloc_noprof+0x41d/0x790 [ 442.950189][ C0] ? cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 442.956592][ C0] ? cfg80211_inform_bss_data+0x263/0x3cc0 [ 442.962382][ C0] ? cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 442.968628][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 442.974329][ C0] ? worker_thread+0xa47/0xfb0 [ 442.979174][ C0] ? kthread+0x38b/0x470 [ 442.983416][ C0] ? ret_from_fork+0x514/0xb70 [ 442.988167][ C0] ? __pfx___schedule+0x10/0x10 [ 442.993064][ C0] preempt_schedule_irq+0x4b/0x90 [ 442.998077][ C0] irqentry_exit+0x14f/0x910 [ 443.002653][ C0] ? trace_irq_disable+0x3b/0x140 [ 443.007756][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 443.013785][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x80 [ 443.020448][ C0] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 98 e4 de 10 65 48 8b 15 98 e4 de 10 <89> d7 81 e7 00 00 00 ff be 00 01 00 00 23 b1 fc 0b 00 00 09 f7 74 [ 443.040160][ C0] RSP: 0000:ffffc9000eb56b58 EFLAGS: 00000286 [ 443.046337][ C0] RAX: ffffffff8aa1378b RBX: 0000000000000000 RCX: ffff88803180be80 [ 443.054408][ C0] RDX: 8000000000000000 RSI: 0000000000000000 RDI: 00000000000000dd [ 443.062453][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.070491][ C0] R10: ffff8880341a72be R11: ffffed1006834e5a R12: 00000000000000dd [ 443.078440][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.086425][ C0] ? cfg80211_find_elem_match+0x2b/0x200 [ 443.092079][ C0] cfg80211_find_elem_match+0x2b/0x200 [ 443.097724][ C0] ieee802_11_parse_elems_full+0xf96/0x2de0 [ 443.103640][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 443.109020][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 443.115363][ C0] ? cfg80211_update_known_bss+0xa51/0x1430 [ 443.121247][ C0] ieee80211_inform_bss+0x163/0x10d0 [ 443.126521][ C0] ? __cfg80211_bss_update+0x12a5/0x2060 [ 443.132157][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 443.137860][ C0] ? rt_spin_lock+0x210/0x400 [ 443.142523][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 443.148241][ C0] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 443.154563][ C0] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 443.160964][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 443.167657][ C0] ? _ieee802_11_parse_elems_full+0x2c0/0x48f0 [ 443.173810][ C0] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 443.179622][ C0] cfg80211_inform_bss_data+0x263/0x3cc0 [ 443.185258][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 443.191417][ C0] ? __lock_acquire+0x747/0x2de0 [ 443.196353][ C0] ? cfg80211_defragment_element+0x3e/0x360 [ 443.202236][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 443.208290][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 443.214098][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 443.219719][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 443.225947][ C0] ? sta_info_get+0x4f/0x300 [ 443.230549][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 443.236802][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 443.242971][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 443.249214][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 443.255817][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.261625][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.267589][ C0] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 443.272872][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 443.278359][ C0] ? rt_spin_unlock+0x165/0x200 [ 443.283231][ C0] ieee80211_iface_work+0x78a/0x1010 [ 443.288509][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 443.293609][ C0] ? process_scheduled_works+0x97a/0x1630 [ 443.299332][ C0] process_scheduled_works+0xc3d/0x1630 [ 443.304881][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.310848][ C0] ? assign_work+0x3cf/0x5d0 [ 443.315422][ C0] worker_thread+0xa47/0xfb0 [ 443.320005][ C0] kthread+0x38b/0x470 [ 443.324111][ C0] ? __pfx_worker_thread+0x10/0x10 [ 443.329287][ C0] ? __pfx_kthread+0x10/0x10 [ 443.333941][ C0] ret_from_fork+0x514/0xb70 [ 443.338518][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 443.343612][ C0] ? __switch_to+0xc89/0x1420 [ 443.348282][ C0] ? __pfx_kthread+0x10/0x10 [ 443.352853][ C0] ret_from_fork_asm+0x1a/0x30 [ 443.357618][ C0] [ 443.360654][ C0] task:ktimers/0 state:D stack:24072 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 443.372710][ C0] Call Trace: [ 443.376012][ C0] [ 443.378929][ C0] __schedule+0x16d9/0x5700 [ 443.383647][ C0] ? __lock_acquire+0x747/0x2de0 [ 443.388574][ C0] ? __pfx___schedule+0x10/0x10 [ 443.393417][ C0] schedule_rtlock+0x30/0x70 [ 443.397989][ C0] rtlock_slowlock_locked+0x35c9/0x3c20 [ 443.403536][ C0] ? rtlock_slowlock_locked+0x2ab/0x3c20 [ 443.409175][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 443.415069][ C0] ? rcu_is_watching+0x16/0xb0 [ 443.419912][ C0] rt_spin_lock+0x165/0x400 [ 443.424496][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 443.429498][ C0] ? __local_bh_disable_ip+0x3d/0x420 [ 443.434969][ C0] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 443.441651][ C0] cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 443.447871][ C0] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 443.454262][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 443.461179][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 443.466816][ C0] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 443.472686][ C0] cfg80211_inform_bss_data+0x263/0x3cc0 [ 443.478300][ C0] ? ieee80211_rx_handlers+0xc862/0xc8d0 [ 443.483966][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 443.490101][ C0] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 443.495628][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 443.501434][ C0] ? lock_acquire+0x115/0x350 [ 443.506097][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 443.511484][ C0] ? __lock_acquire+0x747/0x2de0 [ 443.516430][ C0] ? __lock_acquire+0x747/0x2de0 [ 443.521362][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 443.527420][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 443.533209][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 443.538834][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 443.544975][ C0] ? rt_spin_unlock+0x159/0x200 [ 443.549805][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 443.555593][ C0] ieee80211_scan_rx+0x552/0xa40 [ 443.560515][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 443.565618][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 443.571074][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.576866][ C0] ? lock_acquire+0x115/0x350 [ 443.581532][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 443.587164][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 443.592183][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 443.597129][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 443.602688][ C0] ? skb_dequeue+0x11a/0x150 [ 443.607289][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 443.613285][ C0] tasklet_action_common+0x31c/0x600 [ 443.618569][ C0] handle_softirqs+0x1da/0x6d0 [ 443.623324][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 443.628328][ C0] run_ktimerd+0x6a/0x100 [ 443.632660][ C0] smpboot_thread_fn+0x565/0xa70 [ 443.637587][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 443.642618][ C0] kthread+0x38b/0x470 [ 443.646779][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 443.652333][ C0] ? __pfx_kthread+0x10/0x10 [ 443.656913][ C0] ret_from_fork+0x514/0xb70 [ 443.661514][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 443.667074][ C0] ? __switch_to+0xc89/0x1420 [ 443.671856][ C0] ? __pfx_kthread+0x10/0x10 [ 443.676452][ C0] ret_from_fork_asm+0x1a/0x30 [ 443.681230][ C0] [ 443.684244][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10480 jiffies! g22885 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 443.696351][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=13043 [ 443.704596][ C0] rcu: rcu_preempt kthread starved for 10561 jiffies! g22885 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 443.715626][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 443.725611][ C0] rcu: RCU grace-period kthread stack dump: [ 443.731513][ C0] task:rcu_preempt state:I stack:27784 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 443.743449][ C0] Call Trace: [ 443.746814][ C0] [ 443.749748][ C0] __schedule+0x16d9/0x5700 [ 443.754280][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 443.759403][ C0] ? __pfx___schedule+0x10/0x10 [ 443.764268][ C0] ? lock_acquire+0x115/0x350 [ 443.768995][ C0] ? schedule+0x90/0x2b0 [ 443.773249][ C0] schedule+0x164/0x2b0 [ 443.777496][ C0] schedule_timeout+0x152/0x2c0 [ 443.782352][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 443.787738][ C0] ? __pfx_process_timeout+0x10/0x10 [ 443.793035][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.798851][ C0] ? prepare_to_swait_event+0x322/0x350 [ 443.804496][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 443.809387][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 443.815289][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 443.820580][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 443.825794][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.831616][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 443.836395][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 443.841597][ C0] ? __kthread_parkme+0x71/0x1f0 [ 443.846543][ C0] ? __kthread_parkme+0x199/0x1f0 [ 443.851579][ C0] kthread+0x38b/0x470 [ 443.855649][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 443.860847][ C0] ? __pfx_kthread+0x10/0x10 [ 443.865451][ C0] ret_from_fork+0x514/0xb70 [ 443.870138][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 443.875274][ C0] ? __switch_to+0xc89/0x1420 [ 443.879990][ C0] ? __pfx_kthread+0x10/0x10 [ 443.884647][ C0] ret_from_fork_asm+0x1a/0x30 [ 443.889450][ C0] [ 443.892472][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 443.898888][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 443.908350][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.918581][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 443.924227][ C0] Code: dc 5a 02 e9 93 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 0c 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 443.944100][ C0] RSP: 0018:ffffffff8de07ca0 EFLAGS: 00000246 [ 443.950177][ C0] RAX: 000000000019ed77 RBX: ffffffff819a837c RCX: 8000000000000001 [ 443.958148][ C0] RDX: 0000000000000001 RSI: ffffffff8d86a94e RDI: ffffffff8bcc3580 [ 443.966120][ C0] RBP: ffffffff8de07d78 R08: ffff8880b8633e9b R09: 1ffff110170c67d3 [ 443.974092][ C0] R10: dffffc0000000000 R11: ffffed10170c67d4 R12: 0000000000000000 [ 443.982071][ C0] R13: 1ffffffff1bdee00 R14: 1ffffffff1bc0f9c R15: dffffc0000000000 [ 443.990053][ C0] FS: 0000000000000000(0000) GS:ffff888125bc8000(0000) knlGS:0000000000000000 [ 443.998983][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.005573][ C0] CR2: 00007f8106994daa CR3: 0000000029c0c000 CR4: 00000000003526f0 [ 444.013556][ C0] Call Trace: [ 444.016845][ C0] [ 444.019773][ C0] default_idle+0x9/0x20 [ 444.024020][ C0] default_idle_call+0x72/0xb0 [ 444.028786][ C0] do_idle+0x1cc/0x540 [ 444.032875][ C0] ? __pfx_do_idle+0x10/0x10 [ 444.037493][ C0] cpu_startup_entry+0x43/0x60 [ 444.042277][ C0] rest_init+0x378/0x3a0 [ 444.046537][ C0] ? __pfx_rest_init+0x10/0x10 [ 444.051312][ C0] ? __pfx_kernel_init+0x10/0x10 [ 444.056254][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 444.061666][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 444.066966][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 444.072364][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 444.078187][ C0] start_kernel+0x392/0x3e0 [ 444.082702][ C0] x86_64_start_reservations+0x24/0x30 [ 444.088257][ C0] x86_64_start_kernel+0x137/0x1b0 [ 444.093551][ C0] common_startup_64+0x13e/0x157 [ 444.098512][ C0]