last executing test programs: 5m11.368864532s ago: executing program 2 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0xea, 0x4) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c064", 0x14}], 0x1}}], 0x1, 0x0) wait4(0x0, 0x0, 0x1000000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) write(r1, &(0x7f0000000180)='0', 0x1) 5m11.163151689s ago: executing program 2 (id=307): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000) writev(r2, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0xffffff7d}], 0x1) 5m7.548778412s ago: executing program 2 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x4000840) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) io_setup(0x239f, &(0x7f0000000380)) 5m2.343611471s ago: executing program 2 (id=330): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) 4m57.364847299s ago: executing program 2 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x3, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4m53.864101757s ago: executing program 2 (id=344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, 0x0, 0x0) 4m37.836569039s ago: executing program 32 (id=344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, 0x0, 0x0) 24.541257412s ago: executing program 1 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) close(0x3) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 20.873722501s ago: executing program 1 (id=794): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x1015, r2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 20.763280904s ago: executing program 1 (id=796): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001c00)=[{0x0}], 0x1, 0x6, 0x4) pipe2$9p(&(0x7f00000000c0)={0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xfffffffffffffffb) 14.205526508s ago: executing program 5 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x3, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, 0x0, 0x0}, 0x20) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 12.592599711s ago: executing program 5 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) io_uring_enter(r2, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 12.350208628s ago: executing program 1 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 12.284758221s ago: executing program 4 (id=814): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10010, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlink(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000ac0)=""/157, 0x9d) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x54569dba}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003900)=""/135, 0x87}, {0x0}, {0x0}], 0x5}, 0x8004}], 0x4, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000180)={0x1, 0x200, 0xb, 0x41a, 0x2, 0x1}) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}], 0x10}, 0x12001) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8910, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000280)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002"]) 12.079289043s ago: executing program 1 (id=815): r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="5ce5f722afde7c1d564116cfdc3876cba258ffe95384551a7d54788d7e4f7a6d17f45eb393996e49971a183420ce2be1a6a6385e7ff9b00e9aa2c12e883d3dd3e64e9f305e3fbabd3da08364d14ae3da53009fb2a744d95edfb309e4eb979d5239bbae94ab63d70d00f49df4c763920ab0503466605e1fca2f5a753d1e024a0102cdf645249abeedaf00ee4f4b8accdcb57c1faaea57b28407db60593d5033e8303bb193b6630f5bd972e7c452b1154f7fc20079eeb1831417459c961b329b9e2ec1dc16285e1a5ddddcb919ed5ffbf9cb114610c1444c7702eaba6312a6bc852185980ca26d4003cac3f68741df5558d7a617442a0bbc02f36bd6236394b062699d0f7b74b8ef55f15a8c182138546b92cd4e7e06b46f0578f8a21c3d2aa4c521751bc211f852d9df55ea1edabbf95d90b9894ea685cfb7879b68ee5ff3690c5b49a6c987d50599b7cbca7a26a0be2bad008f1d5219c406c32af4c53bf600c4fdee16bf60c0a31238d9ccf549f1997b4fd501d4ab8c9cb0f9082312abfc64ea8a516fffed538c4f61c5f73bc12ebdf60e47f95264ae74dcafc4bca9b41e79272ca821558919051bf4265e23072557ed13f5b58aabd8e5704c010e8b4341f611db9a9d192bb0c4ed07853a2dd8380d0a18b795e9967ce67e71142045edfa787e8a5dd9471516b7badfe684e1bf334df849a0c548c46d847a2164ee4e8f41e186560750cd3f4250be48595a9e5cd05e28f1b6c87d03cf03022378a51fcaf450dcc6432b69ad389ac4fc57bb7325d1e5594a4adf393d93f8d538a12212e2c0188aebbe1eb52a84b2b5b3d823868736cddc3245b9d4861f87d10769f5c942f4a31b11a5233ffbcf371b48d9f9d1fdb1c2a31dfdd86a43b6db2067b0674a45c45eb070ad89946e19d633ca123c43e1d7dd0a90c3afeef99e6127f222f48079fe01a444ae7757911e6cb27c33288ef498f8cd28cc5bc99a6378e5cefd0a49bba57891a9c28960ed82e5e665e9f6d5efd54ca6620f01fd784a7bf4487dc35930233a0fd80efdb9835469967e60636bd0b9d62efba907c3", 0x2f4}], 0x1}, 0x4040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000090) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) 10.243624437s ago: executing program 4 (id=817): syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') symlinkat(&(0x7f0000001900)='./file0\x00', r0, &(0x7f0000001940)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000001640)}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc02000000000000000000000000000100000000000000000000ffff000000004e23080000ff0700"/92], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'rr\x00', 0xc, 0x5, 0x63}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4623, 0x3, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0xffff) writev(r4, &(0x7f0000000080), 0x0) 9.139425332s ago: executing program 5 (id=819): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r2, &(0x7f0000000fc0)=[{&(0x7f00000004c0)=""/84}, {&(0x7f0000000700)=""/251}, {&(0x7f0000000800)=""/159}, {&(0x7f0000000f80)=""/52}], 0x1000000000000398) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008"], 0x1c}}, 0x4000) 8.264477176s ago: executing program 0 (id=820): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.0754476s ago: executing program 0 (id=822): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000209000040240434550001000000010902190001"], 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 6.670026736s ago: executing program 3 (id=823): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001c00)=[{0x0}], 0x1, 0x6, 0x4) pipe2$9p(&(0x7f00000000c0)={0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0xfffffffffffffffb) 6.463904057s ago: executing program 1 (id=824): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.513393331s ago: executing program 33 (id=824): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.046512712s ago: executing program 3 (id=826): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000a40)='./file0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.879580925s ago: executing program 0 (id=827): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000"], &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cgrp2/p1\x00', 0x1ff) 4.812308497s ago: executing program 3 (id=828): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r3) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x308, 0x0, 0x1}, 0x18, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3e, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) landlock_restrict_self(r4, 0x0) fcntl$setownex(r2, 0xf, 0x0) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40015) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) 4.649023607s ago: executing program 0 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) io_uring_enter(r2, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 4.577712894s ago: executing program 5 (id=830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) close(0x3) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.427233129s ago: executing program 0 (id=831): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xff01, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r5 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000005c0)={0x80000000, 0x0, &(0x7f00000003c0)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f00000001c0)={{r7, r6, 0x1, [0x0, 0xf7df]}, {r7, r8, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) openat$ocfs2_control(0xffffff9c, 0x0, 0x210902, 0x0) getresgid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000400)={0x1, 0x0, 0x80, 0x2ff, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) 3.405723573s ago: executing program 3 (id=832): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.480110682s ago: executing program 3 (id=833): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 1.41400804s ago: executing program 5 (id=834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1.285512575s ago: executing program 4 (id=835): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @my=0x0}, 0x10) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000000)=0x20) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48}) 983.517134ms ago: executing program 0 (id=836): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10401, 0x4, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) syz_io_uring_setup(0x8b2, &(0x7f0000000100)={0x0, 0x2453, 0x8204, 0x1, 0x21}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048875}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast1}}]}, 0x110) close(0x3) msgctl$MSG_STAT(0x0, 0xb, 0x0) recvfrom$inet(r4, &(0x7f0000000240)=""/153, 0x99, 0x62, &(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 975.185332ms ago: executing program 3 (id=837): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, &(0x7f0000000500)={0x28, 0x32, 0x0, r6, &(0x7f00000004c0)="f72528c4f31e98743aea973c356c755cd4bb74", 0x1, 0x8, 0x1, 0x0, {0x0, 0x0, r2, 0xfffffffffffffffd}}, 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x3, 0x0, 0x2, 0x8}, 0x3}) r8 = openat$dlm_control(0xffffff9c, &(0x7f0000000380), 0x8000, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x1010, r8, 0x5) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r9, &(0x7f0000000000)=[{0x1f, 0x0, 0x8, 0xfd, @time={0x9, 0xc04}, {0x0, 0xb4}, {}, @result}], 0x1c) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000080)={r11, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x1, 0x10019, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c5f83f1886fb50e076a3aa47b8b01c3e296834cc07fac507844c13922811fe7002dc8aada05a7c0bda02f7ff87fdc11bc403000000000000000000006667c388", "ee221bd6914010cf943aaaf1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000003a40)={r10, 0x101, {0x0, 0x0, 0x0, 0x3fb6df8, 0x0, 0x0, 0x12, 0x1b, 0x1d, "14b0a3405210b2b18881540f0829c47c33238f3372f569965415971b9613254914877c4fde66f95a856c84c8392421036a1026b017c4e93f34d1edeb43657a3d", "1e55492143b883d7f8ade81849086e75897e6ba4262eadf30d89383af2b2810690eb44cfc13db936621a14d790b72b19bcbbcc00595c581802034e551be84d2e", "596a2d2340630e8957f7e970a2e298704e0bc3cad6c218aafc16f17969cb929c", [0x4, 0x20000]}}) r12 = socket$alg(0x26, 0x5, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$alg(r12, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000340)="cb820fae6dcd3292ead00300000000000090c200ada97aaed8f83a5b3f34ce6bf4", 0x21) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x3, 0x4, 0x4}) 849.399744ms ago: executing program 5 (id=838): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x9, 0x2000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000002204000000000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x3519d7f4cc363fbd, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000034c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x200, 0x9, 0x2}}], 0x38, 0x24040010}], 0x1, 0x14) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x80000000) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r4 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) 604.814356ms ago: executing program 4 (id=839): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000"], &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cgrp2/p1\x00', 0x1ff) 497.781418ms ago: executing program 4 (id=840): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000300)={0x0}, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000080)="0adf", 0x2) 0s ago: executing program 4 (id=841): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r3) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x308, 0x0, 0x1}, 0x18, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3e, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) landlock_restrict_self(r4, 0x0) fcntl$setownex(r2, 0xf, 0x0) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40015) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) kernel console output (not intermixed with test programs): 36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.117361][ T36] usb 3-1: config 0 descriptor?? [ 183.628500][ T36] usbhid 3-1:0.0: can't add hid device: -71 [ 183.628652][ T36] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.447065][ T5697] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.482223][ T36] usb 3-1: USB disconnect, device number 6 [ 184.632169][ T5697] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.634333][ T5697] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.634371][ T5697] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.634412][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.721376][ T6261] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 185.739304][ T5697] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.067964][ T6278] FAULT_INJECTION: forcing a failure. [ 186.067964][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 186.068008][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.068034][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.068048][ T6278] Call Trace: [ 186.068058][ T6278] [ 186.068068][ T6278] dump_stack_lvl+0xe8/0x150 [ 186.068120][ T6278] should_fail_ex+0x46b/0x600 [ 186.068160][ T6278] should_failslab+0xa8/0x100 [ 186.068186][ T6278] __kmalloc_cache_noprof+0xa1/0x680 [ 186.068221][ T6278] ? resv_map_alloc+0x51/0x2e0 [ 186.068250][ T6278] ? resv_map_alloc+0x51/0x2e0 [ 186.068302][ T6278] resv_map_alloc+0x51/0x2e0 [ 186.068336][ T6278] hugetlbfs_get_inode+0x5f/0x660 [ 186.068371][ T6278] hugetlb_file_setup+0x21d/0x630 [ 186.068401][ T6278] ksys_mmap_pgoff+0x1ec/0x720 [ 186.068433][ T6278] ? __x64_sys_mmap+0x7f/0x140 [ 186.068463][ T6278] do_syscall_64+0x166/0x520 [ 186.068488][ T6278] ? trace_irq_disable+0x3b/0x140 [ 186.068519][ T6278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.068543][ T6278] ? clear_bhb_loop+0x70/0xc0 [ 186.068572][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.068595][ T6278] RIP: 0033:0x7ffbc1afe159 [ 186.068616][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.068635][ T6278] RSP: 002b:00007ffbbfd56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 186.068661][ T6278] RAX: ffffffffffffffda RBX: 00007ffbc1d85fa0 RCX: 00007ffbc1afe159 [ 186.068678][ T6278] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 186.068694][ T6278] RBP: 00007ffbc1b9506b R08: ffffffffffffffff R09: 0000000000000000 [ 186.068710][ T6278] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 186.068724][ T6278] R13: 00007ffbc1d86038 R14: 00007ffbc1d85fa0 R15: 00007fff27500168 [ 186.068751][ T6278] [ 186.653174][ T5697] usb 4-1: USB disconnect, device number 5 [ 188.817477][ T5697] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.972629][ T5697] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 188.987632][ T5697] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.987674][ T5697] usb 4-1: config 0 interface 0 has no altsetting 0 [ 188.987714][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.105500][ T5697] usb 4-1: config 0 descriptor?? [ 189.994956][ T5697] usbhid 4-1:0.0: can't add hid device: -71 [ 189.995107][ T5697] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 190.039767][ T5697] usb 4-1: USB disconnect, device number 6 [ 194.305765][ T5717] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 194.436406][ T36] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 194.488217][ T5717] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.510232][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.510265][ T5717] usb 2-1: Product: syz [ 194.510281][ T5717] usb 2-1: Manufacturer: syz [ 194.510297][ T5717] usb 2-1: SerialNumber: syz [ 194.541261][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.541344][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.554548][ T5717] usb 2-1: config 0 descriptor?? [ 194.588127][ T36] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 194.591243][ T36] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.591279][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.591317][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.648110][ T36] usb 4-1: config 0 descriptor?? [ 194.762979][ T4906] Bluetooth: hci1: command 0x0406 tx timeout [ 195.072280][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 195.072424][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 195.091850][ T36] usb 4-1: USB disconnect, device number 7 [ 195.154222][ T5717] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.358567][ T5717] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 196.511854][ T31] usb 2-1: USB disconnect, device number 10 [ 199.809326][ T36] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 200.718769][ T36] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.113950][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.113982][ T36] usb 1-1: Product: syz [ 201.113997][ T36] usb 1-1: Manufacturer: syz [ 201.114012][ T36] usb 1-1: SerialNumber: syz [ 201.147195][ T36] usb 1-1: config 0 descriptor?? [ 202.452012][ T36] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.665591][ T36] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 202.687882][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 202.747332][ T5717] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 204.750028][ T5717] usb 2-1: not running at top speed; connect to a high speed hub [ 204.750060][ T5717] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.791293][ T5717] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 204.791351][ T5717] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 204.798318][ T5826] usb 1-1: USB disconnect, device number 9 [ 204.800086][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.800114][ T5717] usb 2-1: Product: syz [ 204.800129][ T5717] usb 2-1: Manufacturer: syz [ 204.800144][ T5717] usb 2-1: SerialNumber: syz [ 205.017833][ T6446] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 208.642164][ T5717] cdc_ncm 2-1:1.0: bind() failure [ 208.715674][ T5717] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 208.715730][ T5717] cdc_ncm 2-1:1.1: bind() failure [ 208.829714][ T5717] usb 2-1: USB disconnect, device number 11 [ 209.132061][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 209.347036][ T6497] Bluetooth: MGMT ver 1.23 [ 211.018050][ T5717] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 211.268289][ T5826] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 211.288329][ T5717] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 211.764233][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.779650][ T5717] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 211.779678][ T5717] usb 2-1: Product: syz [ 211.779692][ T5717] usb 2-1: Manufacturer: syz [ 211.779706][ T5717] usb 2-1: SerialNumber: syz [ 211.794391][ T5717] usb 2-1: config 0 descriptor?? [ 212.753992][ T5717] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 212.755939][ T5717] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 212.756029][ T5717] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 212.796767][ T5717] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 212.799598][ T5717] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 212.801401][ T5717] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 212.806132][ T5717] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 212.809020][ T5717] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 212.814610][ T5717] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 212.995590][ T5826] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.195553][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.195584][ T5826] usb 3-1: Product: syz [ 213.195601][ T5826] usb 3-1: Manufacturer: syz [ 213.195616][ T5826] usb 3-1: SerialNumber: syz [ 213.212590][ T5717] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 213.318958][ T5826] usb 3-1: config 0 descriptor?? [ 213.352887][ T5717] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 213.416491][ T5717] usb 2-1: USB disconnect, device number 12 [ 213.424807][ T6515] process 'syz.3.229' launched './file0' with NULL argv: empty string added [ 213.713215][ T5717] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 213.717080][ T5826] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 213.717183][ T5826] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 213.737528][ T5826] usb 3-1: USB disconnect, device number 7 [ 217.417266][ T5717] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 217.479736][ T5717] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 217.599263][ T6554] Zero length message leads to an empty skb [ 218.901768][ T5717] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 218.918373][ T5717] keyspan 2-1:0.0: device disconnected [ 219.256991][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 219.476501][ T5826] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 219.517846][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 219.638298][ T5826] usb 1-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 219.649013][ T5826] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.649047][ T5826] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.649072][ T5826] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.649105][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.680855][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.688757][ T5826] usb 1-1: config 0 descriptor?? [ 219.706015][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.706043][ T10] usb 5-1: Product: syz [ 219.706057][ T10] usb 5-1: Manufacturer: syz [ 219.706071][ T10] usb 5-1: SerialNumber: syz [ 219.821126][ T10] usb 5-1: config 0 descriptor?? [ 219.826358][ T5826] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 219.826384][ T5826] usbhid 1-1:0.0: can't add hid device: -22 [ 219.826582][ T5826] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 220.007046][ T5826] usb 1-1: USB disconnect, device number 10 [ 220.129870][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.347770][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 223.301846][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 223.549078][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 225.919172][ T5824] usb 5-1: USB disconnect, device number 7 [ 230.664456][ T37] audit: type=1326 audit(1790792799.505:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.721655][ T37] audit: type=1326 audit(1790792799.505:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.759706][ T37] audit: type=1326 audit(1790792799.604:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.807065][ T37] audit: type=1326 audit(1790792799.644:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.807127][ T37] audit: type=1326 audit(1790792799.644:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.911562][ T37] audit: type=1326 audit(1790792799.743:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.911631][ T37] audit: type=1326 audit(1790792799.753:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.911682][ T37] audit: type=1326 audit(1790792799.753:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.917191][ T37] audit: type=1326 audit(1790792799.753:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 230.917250][ T37] audit: type=1326 audit(1790792799.753:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6623 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e632e159 code=0x7ffc0000 [ 235.418671][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 235.764547][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 236.983521][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 237.002771][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.002799][ T10] usb 2-1: Product: syz [ 237.002813][ T10] usb 2-1: Manufacturer: syz [ 237.002827][ T10] usb 2-1: SerialNumber: syz [ 237.049759][ T10] usb 2-1: config 0 descriptor?? [ 237.286462][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.402612][ T6667] team0: Port device team_slave_0 removed [ 238.729531][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 239.059782][ T5781] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 239.488217][ T5781] usb 3-1: Using ep0 maxpacket: 8 [ 240.386909][ T10] usb 2-1: USB disconnect, device number 13 [ 240.580467][ T5781] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.582322][ T5781] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.611105][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.611138][ T5781] usb 3-1: Product: syz [ 240.611154][ T5781] usb 3-1: Manufacturer: syz [ 240.611169][ T5781] usb 3-1: SerialNumber: syz [ 240.658479][ T5781] usb 3-1: config 0 descriptor?? [ 240.883570][ T6715] FAULT_INJECTION: forcing a failure. [ 240.883570][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 240.883611][ T6715] CPU: 1 UID: 0 PID: 6715 Comm: syz.4.282 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.883639][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.883651][ T6715] Call Trace: [ 240.883660][ T6715] [ 240.883670][ T6715] dump_stack_lvl+0xe8/0x150 [ 240.883709][ T6715] should_fail_ex+0x46b/0x600 [ 240.883745][ T6715] should_failslab+0xa8/0x100 [ 240.883772][ T6715] __kmalloc_cache_noprof+0xa1/0x680 [ 240.883803][ T6715] ? resv_map_alloc+0x51/0x2e0 [ 240.883831][ T6715] ? resv_map_alloc+0x51/0x2e0 [ 240.883869][ T6715] resv_map_alloc+0x51/0x2e0 [ 240.883902][ T6715] hugetlbfs_get_inode+0x5f/0x660 [ 240.883933][ T6715] hugetlb_file_setup+0x21d/0x630 [ 240.883963][ T6715] ksys_mmap_pgoff+0x1ec/0x720 [ 240.883993][ T6715] ? __x64_sys_mmap+0x7f/0x140 [ 240.884023][ T6715] do_syscall_64+0x166/0x520 [ 240.884046][ T6715] ? trace_irq_disable+0x3b/0x140 [ 240.884076][ T6715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.884099][ T6715] ? clear_bhb_loop+0x70/0xc0 [ 240.884128][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.884151][ T6715] RIP: 0033:0x7febedf8e159 [ 240.884173][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.884191][ T6715] RSP: 002b:00007febec1e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 240.884215][ T6715] RAX: ffffffffffffffda RBX: 00007febee215fa0 RCX: 00007febedf8e159 [ 240.884237][ T6715] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 240.884252][ T6715] RBP: 00007febee02506b R08: ffffffffffffffff R09: 0000000000000000 [ 240.884266][ T6715] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 240.884279][ T6715] R13: 00007febee216038 R14: 00007febee215fa0 R15: 00007ffd3fcbbe68 [ 240.884313][ T6715] [ 242.595121][ T5781] usb 3-1: USB disconnect, device number 8 [ 243.673947][ T6726] input: syz0 as /devices/virtual/input/input8 [ 243.945942][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 244.320156][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 244.824994][ T6763] trusted_key: syz.1.295 sent an empty control message without MSG_MORE. [ 245.277444][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 245.478478][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 245.502977][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.503010][ T9] usb 5-1: Product: syz [ 245.503026][ T9] usb 5-1: Manufacturer: syz [ 245.503041][ T9] usb 5-1: SerialNumber: syz [ 245.534505][ T9] usb 5-1: config 0 descriptor?? [ 245.675188][ T36] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 246.550249][ T36] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.554244][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.554274][ T36] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.602204][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.602234][ T36] usb 2-1: SerialNumber: syz [ 246.649262][ T9] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 246.649382][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 246.921837][ T36] usb 2-1: 0:2 : does not exist [ 247.039610][ T36] usb 2-1: USB disconnect, device number 14 [ 247.193812][ T6661] udevd[6661]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.605262][ T36] usb 5-1: USB disconnect, device number 8 [ 249.751616][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 256.671467][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.673260][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.458201][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 258.470118][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.476595][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.476635][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.476679][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.542008][ T6861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.181355][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.582621][ T6897] failed to create ptp aux_worker -4 [ 265.401658][ T10] usb 3-1: USB disconnect, device number 9 [ 268.015228][ T5824] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 268.259238][ T6936] ptp ptp0: new virtual clock ptp1 [ 268.259267][ T6936] ptp ptp0: guarantee physical clock free running [ 268.330311][ T5824] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.351953][ T5824] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.351991][ T5824] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.352033][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.590842][ T5824] usb 2-1: can't set config #27, error -71 [ 270.631583][ T5824] usb 2-1: USB disconnect, device number 15 [ 273.634815][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 273.634850][ T6962] block nbd0: Unsupported socket: should be TCP or UNIX. [ 277.247689][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 277.408477][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.410070][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.410105][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.410148][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.421842][ T6979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.452758][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.541500][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 279.693874][ T9] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 279.703682][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.703717][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 279.703755][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.726212][ T9] usb 1-1: config 0 descriptor?? [ 280.059601][ T10] usb 4-1: USB disconnect, device number 8 [ 280.349478][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 280.349616][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 280.494312][ T9] usb 1-1: USB disconnect, device number 11 [ 281.914574][ T7019] ptp ptp0: guarantee physical clock free running [ 282.590196][ T5724] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 283.119307][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 283.270998][ T31] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.277460][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.387802][ T31] usb 1-1: config 0 descriptor?? [ 284.046342][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.076218][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.077587][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.079105][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.080274][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.802035][ T31] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 284.802695][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 284.966368][ T7043] netlink: 'syz.4.386': attribute type 10 has an invalid length. [ 285.003408][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.295932][ T31] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 285.295966][ T31] [drm] Initialized udl on minor 1 [ 285.847656][ T7043] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.156925][ T31] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.167967][ T31] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 286.256626][ T5595] Bluetooth: hci5: command tx timeout [ 286.274575][ T31] usb 1-1: USB disconnect, device number 12 [ 288.298931][ T5595] Bluetooth: hci5: command tx timeout [ 288.418860][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 288.720109][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 288.721740][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.721782][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.721820][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.728029][ T9] usb 2-1: config 0 descriptor?? [ 288.798953][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.012513][ T7069] ptp ptp0: guarantee physical clock free running [ 290.009316][ T31] usb 1-1: device descriptor read/all, error -71 [ 290.117002][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 290.117133][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 290.253479][ T9] usb 2-1: USB disconnect, device number 16 [ 290.742442][ T7091] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 290.769273][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.772677][ T7091] bond0: (slave team0): Enslaving as an active interface with an up link [ 290.795072][ T5595] Bluetooth: hci5: command tx timeout [ 292.113622][ T7103] ptp ptp0: guarantee physical clock free running [ 292.872245][ T5595] Bluetooth: hci5: command tx timeout [ 293.320494][ T5690] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 293.325552][ T36] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 293.350674][ T2239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.470541][ T5690] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.472309][ T5690] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 293.472345][ T5690] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 293.472389][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.519260][ T36] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 293.526432][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.526465][ T36] usb 4-1: Product: syz [ 293.526484][ T36] usb 4-1: Manufacturer: syz [ 293.526502][ T36] usb 4-1: SerialNumber: syz [ 293.604875][ T36] usb 4-1: config 0 descriptor?? [ 293.618072][ T7110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.645964][ T5690] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.719783][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 294.642798][ T36] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 294.643816][ T31] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 294.656437][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.656475][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.656575][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.902488][ T31] usb 5-1: config 0 descriptor?? [ 295.195992][ T5690] usb 2-1: USB disconnect, device number 17 [ 295.219228][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 295.386109][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 295.390163][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.421545][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 295.421761][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 295.438787][ T9] usb 1-1: config 0 descriptor?? [ 295.595566][ T31] usb 5-1: USB disconnect, device number 10 [ 295.853622][ T2239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.873962][ T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 295.874482][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 296.047523][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 296.048130][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 296.065799][ T36] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 296.178360][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 296.178388][ T9] [drm] Initialized udl on minor 1 [ 296.183002][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 296.183457][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 297.244237][ T36] usb 4-1: USB disconnect, device number 9 [ 297.465787][ T7141] ptp ptp0: guarantee physical clock free running [ 298.536863][ T5826] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 298.578178][ T9] usb 1-1: USB disconnect, device number 15 [ 298.825283][ T7149] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 300.402177][ T2239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.548449][ T7149] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 300.592408][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.592570][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.592779][ T7032] bridge_slave_0: entered allmulticast mode [ 300.614797][ T7032] bridge_slave_0: entered promiscuous mode [ 300.618585][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.618711][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.618895][ T7032] bridge_slave_1: entered allmulticast mode [ 300.630860][ T7032] bridge_slave_1: entered promiscuous mode [ 300.810931][ T5690] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 300.879355][ T5826] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 301.434046][ T5690] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.435909][ T5690] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.435944][ T5690] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.435983][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.450108][ T5826] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 301.451594][ T5826] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.451623][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.451655][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.646866][ T5826] usb 5-1: config 0 descriptor?? [ 301.713901][ T7153] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.745192][ T5690] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.910948][ T2239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.092462][ T5826] usbhid 5-1:0.0: can't add hid device: -71 [ 302.092544][ T5826] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 302.189391][ T5826] usb 5-1: USB disconnect, device number 11 [ 302.309254][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 303.768560][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 303.788980][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.789001][ T9] usb 4-1: Product: syz [ 303.789010][ T9] usb 4-1: Manufacturer: syz [ 303.789019][ T9] usb 4-1: SerialNumber: syz [ 303.822756][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.871431][ T9] usb 4-1: config 0 descriptor?? [ 303.915749][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.098146][ T5690] usb 2-1: USB disconnect, device number 18 [ 304.123784][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 304.369268][ T998] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 304.521038][ T998] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 304.522664][ T998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.692515][ T998] usb 1-1: config 0 descriptor?? [ 304.695535][ T7032] team0: Port device team_slave_0 added [ 304.869982][ T7032] team0: Port device team_slave_1 added [ 305.191246][ T998] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 305.191816][ T998] [drm:udl_init] *ERROR* Selecting channel failed [ 305.550071][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.550092][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.550121][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.602997][ T998] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 305.603027][ T998] [drm] Initialized udl on minor 1 [ 305.662154][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.662175][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.662204][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.722502][ T998] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 305.723066][ T998] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 305.781278][ T998] usb 1-1: USB disconnect, device number 16 [ 305.798714][ T31] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.016044][ T31] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 306.506788][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 308.509735][ T5697] usb 4-1: USB disconnect, device number 10 [ 308.671868][ T7200] ptp ptp0: guarantee physical clock free running [ 309.624048][ T7032] hsr_slave_0: entered promiscuous mode [ 309.641160][ T7032] hsr_slave_1: entered promiscuous mode [ 309.674115][ T7032] debugfs: 'hsr0' already exists in 'hsr' [ 309.674148][ T7032] Cannot create hsr debugfs directory [ 310.179116][ T5690] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 310.334394][ T5690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.335853][ T5690] usb 2-1: not running at top speed; connect to a high speed hub [ 310.335912][ T5690] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.338899][ T5690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 310.373611][ T5690] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 310.401696][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.401730][ T5690] usb 2-1: Product: syz [ 310.401746][ T5690] usb 2-1: Manufacturer: syz [ 310.401763][ T5690] usb 2-1: SerialNumber: syz [ 310.468053][ T7204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 310.519307][ T5697] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 310.670054][ T5697] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 310.671902][ T5697] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.672182][ T5697] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.672223][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.763237][ T5697] usb 4-1: config 0 descriptor?? [ 310.781596][ T5690] cdc_ncm 2-1:1.0: bind() failure [ 310.832121][ T5690] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 310.832268][ T5690] cdc_ncm 2-1:1.1: bind() failure [ 310.944592][ T5690] usb 2-1: USB disconnect, device number 19 [ 311.193403][ T5697] usbhid 4-1:0.0: can't add hid device: -71 [ 311.193553][ T5697] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 311.265950][ T5697] usb 4-1: USB disconnect, device number 11 [ 311.395504][ T2239] bridge_slave_1: left allmulticast mode [ 311.408131][ T2239] bridge_slave_1: left promiscuous mode [ 311.454423][ T2239] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.840954][ T2239] bridge_slave_0: left allmulticast mode [ 311.840995][ T2239] bridge_slave_0: left promiscuous mode [ 311.841276][ T2239] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.049092][ T5690] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 312.204255][ T5690] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 312.237416][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.282980][ T5690] usb 5-1: config 0 descriptor?? [ 312.834462][ T5690] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 312.835164][ T5690] [drm:udl_init] *ERROR* Selecting channel failed [ 314.320641][ T5690] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 314.320673][ T5690] [drm] Initialized udl on minor 1 [ 314.356110][ T5690] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 314.642958][ T5690] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 314.700544][ T5690] usb 5-1: USB disconnect, device number 12 [ 314.777932][ T7233] ptp ptp0: guarantee physical clock free running [ 317.409433][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 317.620033][ T2239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.711109][ T2239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.764304][ T2239] bond0 (unregistering): Released all slaves [ 317.985204][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.985287][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.630328][ T7268] ptp ptp0: guarantee physical clock free running [ 327.514551][ T7296] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 327.888584][ T5690] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 328.003356][ T5252] 8021q: adding VLAN 0 to HW filter on device eth1 [ 328.076369][ T5690] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 328.094312][ T5690] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.094350][ T5690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 328.094385][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.135952][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.229381][ T7296] bond0: (slave team0): Enslaving as an active interface with an up link [ 328.234415][ T5690] usb 5-1: config 0 descriptor?? [ 330.549138][ T5690] usbhid 5-1:0.0: can't add hid device: -71 [ 330.549277][ T5690] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 330.673519][ T5690] usb 5-1: USB disconnect, device number 13 [ 331.017628][ T7032] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.035203][ T7323] FAULT_INJECTION: forcing a failure. [ 331.035203][ T7323] name failslab, interval 1, probability 0, space 0, times 0 [ 331.035241][ T7323] CPU: 1 UID: 0 PID: 7323 Comm: syz.1.466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.035266][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 331.035279][ T7323] Call Trace: [ 331.035288][ T7323] [ 331.035297][ T7323] dump_stack_lvl+0xe8/0x150 [ 331.035338][ T7323] should_fail_ex+0x46b/0x600 [ 331.035381][ T7323] should_failslab+0xa8/0x100 [ 331.035407][ T7323] __kmalloc_cache_noprof+0xa1/0x680 [ 331.035439][ T7323] ? nd_alloc_stack+0x7d/0xf0 [ 331.035461][ T7323] ? nd_alloc_stack+0x7d/0xf0 [ 331.035495][ T7323] nd_alloc_stack+0x7d/0xf0 [ 331.035522][ T7323] pick_link+0xdb2/0xfe0 [ 331.035558][ T7323] step_into_slowpath+0x58a/0x820 [ 331.035587][ T7323] ? __pfx_step_into_slowpath+0x10/0x10 [ 331.035622][ T7323] link_path_walk+0xd5e/0x1910 [ 331.035667][ T7323] path_lookupat+0xe4/0x8c0 [ 331.035711][ T7323] filename_lookup+0x265/0x5d0 [ 331.035743][ T7323] ? __pfx_filename_lookup+0x10/0x10 [ 331.035806][ T7323] ? strncpy_from_user+0x150/0x2c0 [ 331.035842][ T7323] ? do_getname+0x151/0x250 [ 331.035867][ T7323] user_path_at+0x40/0x160 [ 331.035898][ T7323] __se_sys_mount+0x2dc/0x420 [ 331.035930][ T7323] ? __pfx___se_sys_mount+0x10/0x10 [ 331.035962][ T7323] ? __x64_sys_mount+0x20/0xc0 [ 331.035990][ T7323] do_syscall_64+0x166/0x520 [ 331.036013][ T7323] ? trace_irq_disable+0x3b/0x140 [ 331.036044][ T7323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.036067][ T7323] ? clear_bhb_loop+0x70/0xc0 [ 331.036095][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.036118][ T7323] RIP: 0033:0x7f7657e5e159 [ 331.036140][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.036158][ T7323] RSP: 002b:00007f76560b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.036185][ T7323] RAX: ffffffffffffffda RBX: 00007f76580e5fa0 RCX: 00007f7657e5e159 [ 331.036202][ T7323] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 331.036217][ T7323] RBP: 00007f7657ef506b R08: 0000200000000200 R09: 0000000000000000 [ 331.036232][ T7323] R10: 0000000000100422 R11: 0000000000000246 R12: 0000000000000000 [ 331.036246][ T7323] R13: 00007f76580e6038 R14: 00007f76580e5fa0 R15: 00007ffc850876d8 [ 331.036283][ T7323] [ 331.188728][ T7327] ptp ptp0: guarantee physical clock free running [ 332.025548][ T7032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.027161][ T7032] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 332.286300][ T7032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.208116][ T5697] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 334.371187][ T5697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.388995][ T5697] usb 5-1: not running at top speed; connect to a high speed hub [ 334.389040][ T5697] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.394147][ T5697] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 334.394200][ T5697] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 334.414143][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.414171][ T5697] usb 5-1: Product: syz [ 334.414184][ T5697] usb 5-1: Manufacturer: syz [ 334.414197][ T5697] usb 5-1: SerialNumber: syz [ 334.495361][ T7340] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 334.537808][ T7032] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.657153][ T7032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.761654][ T5697] cdc_ncm 5-1:1.0: bind() failure [ 334.780381][ T7355] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 334.809065][ T5697] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 334.809121][ T5697] cdc_ncm 5-1:1.1: bind() failure [ 334.831910][ T5595] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 334.894843][ T5697] usb 5-1: USB disconnect, device number 14 [ 334.969448][ T7032] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.743401][ T7032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.150774][ T7376] ptp ptp0: guarantee physical clock free running [ 339.451910][ T2239] hsr_slave_0: left promiscuous mode [ 340.494745][ T2239] hsr_slave_1: left promiscuous mode [ 340.496339][ T2239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.496444][ T2239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.551494][ T2239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.551527][ T2239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.259120][ T2239] veth1_macvtap: left promiscuous mode [ 342.259427][ T2239] veth0_macvtap: left promiscuous mode [ 342.259758][ T2239] veth1_vlan: left promiscuous mode [ 342.260157][ T2239] veth0_vlan: left promiscuous mode [ 343.062171][ T4906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.144377][ T4906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.146576][ T4906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.159259][ T4906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.161240][ T4906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.862779][ T2239] team0 (unregistering): Port device team_slave_1 removed [ 343.900041][ T2239] team0 (unregistering): Port device team_slave_0 removed [ 344.371970][ T5252] 8021q: adding VLAN 0 to HW filter on device eth2 [ 344.843002][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.855929][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.328114][ T4906] Bluetooth: hci2: command tx timeout [ 345.387667][ T998] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 345.541332][ T998] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.542673][ T998] usb 4-1: not running at top speed; connect to a high speed hub [ 345.542760][ T998] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.572398][ T998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 345.572479][ T998] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 345.576764][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.576794][ T998] usb 4-1: Product: syz [ 345.576810][ T998] usb 4-1: Manufacturer: syz [ 345.576827][ T998] usb 4-1: SerialNumber: syz [ 345.669401][ T7416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 346.029168][ T998] cdc_ncm 4-1:1.0: bind() failure [ 346.099534][ T998] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 346.099593][ T998] cdc_ncm 4-1:1.1: bind() failure [ 346.155004][ T998] usb 4-1: USB disconnect, device number 12 [ 346.256043][ T7437] ptp ptp0: guarantee physical clock free running [ 347.407503][ T4906] Bluetooth: hci2: command tx timeout [ 347.446185][ T7441] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 347.716607][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 347.716631][ T37] audit: type=1800 audit(1790792916.464:47): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.482" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 349.526400][ T4906] Bluetooth: hci2: command tx timeout [ 352.500345][ T5595] Bluetooth: hci2: command tx timeout [ 354.701173][ T5252] 8021q: adding VLAN 0 to HW filter on device eth3 [ 359.724154][ T7514] ptp ptp0: guarantee physical clock free running [ 363.514214][ T5252] 8021q: adding VLAN 0 to HW filter on device eth4 [ 364.136606][ T7548] ptp ptp0: guarantee physical clock free running [ 365.170468][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.170716][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.170931][ T7397] bridge_slave_0: entered allmulticast mode [ 365.205993][ T7397] bridge_slave_0: entered promiscuous mode [ 365.303302][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.308683][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.355681][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.355836][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.356064][ T7397] bridge_slave_1: entered allmulticast mode [ 365.369206][ T7397] bridge_slave_1: entered promiscuous mode [ 365.768632][ T1148] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 365.940498][ T1148] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 365.942299][ T1148] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.942333][ T1148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 365.942372][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.000992][ T1148] usb 5-1: config 0 descriptor?? [ 367.272793][ T1148] usbhid 5-1:0.0: can't add hid device: -71 [ 367.272928][ T1148] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 367.964457][ T1148] usb 5-1: USB disconnect, device number 15 [ 368.222478][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.274009][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.732651][ T7397] team0: Port device team_slave_0 added [ 370.892229][ T7397] team0: Port device team_slave_1 added [ 371.620849][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.620864][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.620879][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.652956][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.652969][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.652985][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.496977][ T7601] ptp ptp0: guarantee physical clock free running [ 374.782641][ T2239] bridge_slave_1: left allmulticast mode [ 374.782678][ T2239] bridge_slave_1: left promiscuous mode [ 374.782992][ T2239] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.452569][ T2239] bridge_slave_0: left allmulticast mode [ 376.452609][ T2239] bridge_slave_0: left promiscuous mode [ 376.452919][ T2239] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.457959][ T2239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.526678][ T2239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.572355][ T2239] bond0 (unregistering): Released all slaves [ 378.604454][ T7642] vlan2: entered allmulticast mode [ 378.604473][ T7642] veth0_vlan: entered allmulticast mode [ 378.734732][ T7397] hsr_slave_0: entered promiscuous mode [ 378.743484][ T7397] hsr_slave_1: entered promiscuous mode [ 378.744724][ T7397] debugfs: 'hsr0' already exists in 'hsr' [ 378.744749][ T7397] Cannot create hsr debugfs directory [ 379.798353][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.798435][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.231828][ T7648] device-mapper: ioctl: name not supplied when creating device [ 380.430607][ T7656] netlink: 88 bytes leftover after parsing attributes in process `syz.0.541'. [ 380.468880][ T7658] ptp ptp0: guarantee physical clock free running [ 381.480217][ T5252] 8021q: adding VLAN 0 to HW filter on device eth5 [ 382.108431][ T2239] hsr_slave_0: left promiscuous mode [ 382.509226][ T2239] hsr_slave_1: left promiscuous mode [ 384.516156][ T2239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.670330][ T7679] FAULT_INJECTION: forcing a failure. [ 384.670330][ T7679] name failslab, interval 1, probability 0, space 0, times 0 [ 384.670369][ T7679] CPU: 1 UID: 0 PID: 7679 Comm: syz.1.545 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.670400][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 384.670413][ T7679] Call Trace: [ 384.670485][ T7679] [ 384.670540][ T7679] dump_stack_lvl+0xe8/0x150 [ 384.670722][ T7679] should_fail_ex+0x46b/0x600 [ 384.670805][ T7679] ? sock_alloc_inode+0x2c/0x1a0 [ 384.671008][ T7679] should_failslab+0xa8/0x100 [ 384.671064][ T7679] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 384.671116][ T7679] ? sock_alloc_inode+0x2c/0x1a0 [ 384.671154][ T7679] ? __pfx_sock_alloc_inode+0x10/0x10 [ 384.671194][ T7679] sock_alloc_inode+0x2c/0x1a0 [ 384.671227][ T7679] ? __pfx_sock_alloc_inode+0x10/0x10 [ 384.671257][ T7679] alloc_inode+0x6a/0x1b0 [ 384.671291][ T7679] __sock_create+0x12d/0x9d0 [ 384.671355][ T7679] __sys_socket+0xd6/0x1b0 [ 384.671393][ T7679] __x64_sys_socket+0x7a/0x90 [ 384.671429][ T7679] do_syscall_64+0x166/0x520 [ 384.671524][ T7679] ? trace_irq_disable+0x3b/0x140 [ 384.671582][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.671625][ T7679] ? clear_bhb_loop+0x70/0xc0 [ 384.671655][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.671677][ T7679] RIP: 0033:0x7f7657e5e159 [ 384.671707][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.671726][ T7679] RSP: 002b:00007f76560b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 384.671759][ T7679] RAX: ffffffffffffffda RBX: 00007f76580e5fa0 RCX: 00007f7657e5e159 [ 384.671777][ T7679] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000002 [ 384.671791][ T7679] RBP: 00007f7657ef506b R08: 0000000000000000 R09: 0000000000000000 [ 384.671805][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.671818][ T7679] R13: 00007f76580e6038 R14: 00007f76580e5fa0 R15: 00007ffc850876d8 [ 384.671856][ T7679] [ 384.672076][ T7679] socket: no more sockets [ 384.896799][ T7684] device-mapper: ioctl: name not supplied when creating device [ 384.931991][ T2239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.709195][ T7700] ptp ptp0: guarantee physical clock free running [ 387.745551][ T2239] team0 (unregistering): Port device team_slave_1 removed [ 387.789313][ T2239] team0 (unregistering): Port device team_slave_0 removed [ 387.969801][ T7696] vlan2: entered allmulticast mode [ 387.969826][ T7696] veth0_vlan: entered allmulticast mode [ 389.147370][ T1148] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 389.345947][ T1148] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 389.347552][ T1148] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.347613][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.563211][ T1148] as10x_usb: device has been detected [ 390.583335][ T1148] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 390.659549][ T7728] device-mapper: ioctl: name not supplied when creating device [ 391.346193][ T7739] ptp ptp0: guarantee physical clock free running [ 392.825464][ T7741] vlan2: entered allmulticast mode [ 392.825490][ T7741] veth0_vlan: entered allmulticast mode [ 392.937683][ T1148] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 396.323718][ T1148] as10x_usb: error during firmware upload part1 [ 396.645706][ T1148] Registered device Abilis Systems DVB-Titan [ 397.220644][ T1148] usb 5-1: USB disconnect, device number 16 [ 397.309345][ T1148] Unregistered device Abilis Systems DVB-Titan [ 397.312599][ T1148] as10x_usb: device has been disconnected [ 397.681695][ T7783] device-mapper: ioctl: name not supplied when creating device [ 397.764855][ T5826] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 397.996829][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 398.012534][ T5826] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 398.024736][ T5826] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 398.024777][ T5826] usb 2-1: config 0 has no interface number 0 [ 398.024833][ T5826] usb 2-1: config 0 interface 12 has no altsetting 0 [ 398.060035][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.060066][ T5826] usb 2-1: Product: syz [ 398.060082][ T5826] usb 2-1: Manufacturer: syz [ 398.060098][ T5826] usb 2-1: SerialNumber: syz [ 398.096623][ T5826] usb 2-1: config 0 descriptor?? [ 400.440511][ T5826] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 400.440719][ T5826] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 400.440782][ T5826] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 400.441108][ T5826] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 400.576532][ T5826] usb 2-1: USB disconnect, device number 20 [ 400.969157][ T7717] udevd[7717]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 401.048764][ T7814] device-mapper: table: 248:1: mirror: Invalid number of mirrors (-EINVAL) [ 401.048877][ T7814] device-mapper: ioctl: error adding target to table [ 401.096949][ T7811] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:2": -EINTR [ 401.743942][ T7827] device-mapper: ioctl: name not supplied when creating device [ 402.455959][ T7397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 405.725151][ T7397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.103303][ T7850] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 406.103303][ T7850] program syz.1.587 not setting count and/or reply_len properly [ 406.414706][ T5826] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 406.584714][ T5826] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 406.593084][ T5826] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.593123][ T5826] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.593163][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.659360][ T5826] usb 1-1: config 0 descriptor?? [ 406.682981][ T4906] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.698084][ T4906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.702372][ T4906] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.720366][ T4906] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.750607][ T4906] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.284212][ T5826] usbhid 1-1:0.0: can't add hid device: -71 [ 408.284350][ T5826] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 408.571030][ T5826] usb 1-1: USB disconnect, device number 17 [ 410.204000][ T4906] Bluetooth: hci5: command tx timeout [ 410.697007][ T7911] FAULT_INJECTION: forcing a failure. [ 410.697007][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 410.697051][ T7911] CPU: 1 UID: 0 PID: 7911 Comm: syz.3.599 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 410.697080][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 410.697094][ T7911] Call Trace: [ 410.697103][ T7911] [ 410.697114][ T7911] dump_stack_lvl+0xe8/0x150 [ 410.697162][ T7911] should_fail_ex+0x46b/0x600 [ 410.697210][ T7911] should_failslab+0xa8/0x100 [ 410.697238][ T7911] __kmalloc_cache_noprof+0xa1/0x680 [ 410.697274][ T7911] ? resv_map_alloc+0x51/0x2e0 [ 410.697306][ T7911] ? resv_map_alloc+0x51/0x2e0 [ 410.697345][ T7911] resv_map_alloc+0x51/0x2e0 [ 410.697381][ T7911] hugetlbfs_get_inode+0x5f/0x660 [ 410.697448][ T7911] hugetlb_file_setup+0x21d/0x630 [ 410.697478][ T7911] ksys_mmap_pgoff+0x1ec/0x720 [ 410.697510][ T7911] ? __x64_sys_mmap+0x7f/0x140 [ 410.697574][ T7911] do_syscall_64+0x166/0x520 [ 410.697602][ T7911] ? trace_irq_disable+0x3b/0x140 [ 410.697636][ T7911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.697661][ T7911] ? clear_bhb_loop+0x70/0xc0 [ 410.697691][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.697714][ T7911] RIP: 0033:0x7f14e632e159 [ 410.697737][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.697755][ T7911] RSP: 002b:00007f14e4586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 410.697781][ T7911] RAX: ffffffffffffffda RBX: 00007f14e65b5fa0 RCX: 00007f14e632e159 [ 410.697798][ T7911] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 410.697814][ T7911] RBP: 00007f14e63c506b R08: ffffffffffffffff R09: 0000000000000000 [ 410.697830][ T7911] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000000 [ 410.697845][ T7911] R13: 00007f14e65b6038 R14: 00007f14e65b5fa0 R15: 00007fff53f5ed98 [ 410.697882][ T7911] [ 411.005397][ T7915] FAULT_INJECTION: forcing a failure. [ 411.005397][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 411.005442][ T7915] CPU: 1 UID: 0 PID: 7915 Comm: syz.3.599 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.005480][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 411.005493][ T7915] Call Trace: [ 411.005503][ T7915] [ 411.005513][ T7915] dump_stack_lvl+0xe8/0x150 [ 411.005556][ T7915] should_fail_ex+0x46b/0x600 [ 411.005597][ T7915] should_failslab+0xa8/0x100 [ 411.005623][ T7915] __kmalloc_noprof+0xfb/0x790 [ 411.005657][ T7915] ? __memcg_list_lru_alloc+0x211/0x830 [ 411.005715][ T7915] ? __memcg_list_lru_alloc+0x211/0x830 [ 411.005748][ T7915] __memcg_list_lru_alloc+0x211/0x830 [ 411.005771][ T7915] ? xa_load+0x60/0x210 [ 411.005862][ T7915] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 411.005885][ T7915] ? xa_load+0x60/0x210 [ 411.005933][ T7915] __memcg_slab_post_alloc_hook+0x407/0xde0 [ 411.005971][ T7915] ? __memcg_slab_post_alloc_hook+0x24b/0xde0 [ 411.006017][ T7915] ? aio_alloc_inode+0x2a/0x80 [ 411.006071][ T7915] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 411.006103][ T7915] ? aio_alloc_inode+0x2a/0x80 [ 411.006134][ T7915] ? aio_alloc_inode+0x2a/0x80 [ 411.006190][ T7915] ? __pfx_aio_alloc_inode+0x10/0x10 [ 411.006221][ T7915] aio_alloc_inode+0x2a/0x80 [ 411.006253][ T7915] alloc_inode+0x6a/0x1b0 [ 411.006281][ T7915] alloc_anon_inode+0x1e/0x340 [ 411.006313][ T7915] aio_setup_ring+0x104/0xe20 [ 411.006347][ T7915] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 411.006381][ T7915] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 411.006421][ T7915] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 411.006464][ T7915] ? __pfx_aio_setup_ring+0x10/0x10 [ 411.006511][ T7915] ioctx_alloc+0x323/0x840 [ 411.006542][ T7915] ? __might_fault+0xaf/0x130 [ 411.006579][ T7915] __se_sys_io_setup+0x7b/0x1d0 [ 411.006612][ T7915] do_syscall_64+0x166/0x520 [ 411.006636][ T7915] ? trace_irq_disable+0x3b/0x140 [ 411.006668][ T7915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.006692][ T7915] ? clear_bhb_loop+0x70/0xc0 [ 411.006721][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.006745][ T7915] RIP: 0033:0x7f14e632e159 [ 411.006768][ T7915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.006787][ T7915] RSP: 002b:00007f14e4565028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 411.006814][ T7915] RAX: ffffffffffffffda RBX: 00007f14e65b6090 RCX: 00007f14e632e159 [ 411.006832][ T7915] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 411.006846][ T7915] RBP: 00007f14e63c506b R08: 0000000000000000 R09: 0000000000000000 [ 411.006861][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.006874][ T7915] R13: 00007f14e65b6128 R14: 00007f14e65b6090 R15: 00007fff53f5ed98 [ 411.006912][ T7915] [ 412.617700][ T4906] Bluetooth: hci5: command tx timeout [ 413.363142][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.253686][ T4906] Bluetooth: hci5: command tx timeout [ 417.329010][ T4906] Bluetooth: hci5: command tx timeout [ 417.896118][ T7995] FAULT_INJECTION: forcing a failure. [ 417.896118][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 417.896158][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.1.615 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 417.896185][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.896199][ T7995] Call Trace: [ 417.896208][ T7995] [ 417.896218][ T7995] dump_stack_lvl+0xe8/0x150 [ 417.896261][ T7995] should_fail_ex+0x46b/0x600 [ 417.896310][ T7995] should_failslab+0xa8/0x100 [ 417.896334][ T7995] ? do_getname+0x2e/0x250 [ 417.896357][ T7995] kmem_cache_alloc_noprof+0x9e/0x690 [ 417.896389][ T7995] ? do_getname+0x2e/0x250 [ 417.896418][ T7995] do_getname+0x2e/0x250 [ 417.896442][ T7995] ? getname_flags+0x11/0x20 [ 417.896467][ T7995] do_sys_openat2+0xcc/0x200 [ 417.896515][ T7995] ? __se_sys_futex+0x3a8/0x450 [ 417.896558][ T7995] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.896588][ T7995] ? rcu_is_watching+0x16/0xb0 [ 417.896646][ T7995] __x64_sys_openat+0x138/0x170 [ 417.896675][ T7995] do_syscall_64+0x166/0x520 [ 417.896700][ T7995] ? trace_irq_disable+0x3b/0x140 [ 417.896732][ T7995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.896764][ T7995] ? clear_bhb_loop+0x70/0xc0 [ 417.896793][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.896816][ T7995] RIP: 0033:0x7f7657e5e159 [ 417.896839][ T7995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.896857][ T7995] RSP: 002b:00007f76560b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.896884][ T7995] RAX: ffffffffffffffda RBX: 00007f76580e5fa0 RCX: 00007f7657e5e159 [ 417.896912][ T7995] RDX: 0000000000000c03 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 417.896928][ T7995] RBP: 00007f7657ef506b R08: 0000000000000000 R09: 0000000000000000 [ 417.896943][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.896956][ T7995] R13: 00007f76580e6038 R14: 00007f76580e5fa0 R15: 00007ffc850876d8 [ 417.896993][ T7995] [ 418.141789][ T7996] FAULT_INJECTION: forcing a failure. [ 418.141789][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 418.141830][ T7996] CPU: 0 UID: 0 PID: 7996 Comm: syz.1.615 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 418.141861][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 418.141874][ T7996] Call Trace: [ 418.141883][ T7996] [ 418.141893][ T7996] dump_stack_lvl+0xe8/0x150 [ 418.141935][ T7996] should_fail_ex+0x46b/0x600 [ 418.141975][ T7996] should_failslab+0xa8/0x100 [ 418.142000][ T7996] ? security_inode_alloc+0x39/0x310 [ 418.142073][ T7996] kmem_cache_alloc_noprof+0x9e/0x690 [ 418.142106][ T7996] ? security_inode_alloc+0x39/0x310 [ 418.142140][ T7996] security_inode_alloc+0x39/0x310 [ 418.142168][ T7996] inode_init_always_gfp+0x983/0xd40 [ 418.142202][ T7996] ? __pfx_aio_alloc_inode+0x10/0x10 [ 418.142235][ T7996] alloc_inode+0x82/0x1b0 [ 418.142261][ T7996] alloc_anon_inode+0x1e/0x340 [ 418.142293][ T7996] aio_setup_ring+0x104/0xe20 [ 418.142326][ T7996] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 418.142361][ T7996] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 418.142411][ T7996] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 418.142447][ T7996] ? __pfx_aio_setup_ring+0x10/0x10 [ 418.142495][ T7996] ioctx_alloc+0x323/0x840 [ 418.142526][ T7996] ? __might_fault+0xaf/0x130 [ 418.142563][ T7996] __se_sys_io_setup+0x7b/0x1d0 [ 418.142595][ T7996] do_syscall_64+0x166/0x520 [ 418.142621][ T7996] ? trace_irq_disable+0x3b/0x140 [ 418.142652][ T7996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.142676][ T7996] ? clear_bhb_loop+0x70/0xc0 [ 418.142705][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.142729][ T7996] RIP: 0033:0x7f7657e5e159 [ 418.142751][ T7996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.142769][ T7996] RSP: 002b:00007f7656095028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 418.142795][ T7996] RAX: ffffffffffffffda RBX: 00007f76580e6090 RCX: 00007f7657e5e159 [ 418.142812][ T7996] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 418.142827][ T7996] RBP: 00007f7657ef506b R08: 0000000000000000 R09: 0000000000000000 [ 418.142842][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.142856][ T7996] R13: 00007f76580e6128 R14: 00007f76580e6090 R15: 00007ffc850876d8 [ 418.142893][ T7996] [ 418.845445][ T7997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.605578][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.294438][ T5690] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 426.458658][ T5690] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.461029][ T5690] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 426.461057][ T5690] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 426.461097][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.476143][ T5826] usb 5-1: USB disconnect, device number 17 [ 428.827244][ T8075] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 428.828062][ T8075] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 430.752777][ T998] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 430.902767][ T998] usb 5-1: Using ep0 maxpacket: 32 [ 430.914515][ T998] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 430.916847][ T998] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 430.916872][ T998] usb 5-1: config 0 has no interface number 0 [ 430.916925][ T998] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 430.916949][ T998] usb 5-1: config 0 interface 196 has no altsetting 0 [ 430.921896][ T998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.921919][ T998] usb 5-1: Product: syz [ 430.921933][ T998] usb 5-1: Manufacturer: syz [ 430.921947][ T998] usb 5-1: SerialNumber: syz [ 430.948300][ T998] usb 5-1: config 0 descriptor?? [ 430.955944][ T8079] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 432.536321][ T998] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 432.536667][ T998] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 432.573230][ T998] usb 5-1: USB disconnect, device number 18 [ 435.002586][ T5690] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 435.106868][ T8117] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 435.107128][ T8117] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 436.496996][ T5690] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 436.497066][ T5690] usb 4-1: too many configurations: 15, using maximum allowed: 8 [ 436.616673][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.616706][ T5690] usb 4-1: Product: syz [ 436.616722][ T5690] usb 4-1: Manufacturer: syz [ 436.616737][ T5690] usb 4-1: SerialNumber: syz [ 436.707089][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.731223][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.731446][ T7857] bridge_slave_0: entered allmulticast mode [ 436.760847][ T7857] bridge_slave_0: entered promiscuous mode [ 436.913474][ T3282] bridge_slave_1: left allmulticast mode [ 436.913598][ T3282] bridge_slave_1: left promiscuous mode [ 436.920450][ T3282] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.061764][ T5690] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 437.061898][ T5690] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 437.088617][ T5690] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 437.088687][ T5690] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 437.166092][ T3282] bridge_slave_0: left allmulticast mode [ 437.166133][ T3282] bridge_slave_0: left promiscuous mode [ 437.166409][ T3282] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.186979][ T5690] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 437.270627][ T5690] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 439.301146][ T5697] usb 4-1: USB disconnect, device number 13 [ 439.788048][ T3282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.054519][ T3282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.143220][ T3282] bond0 (unregistering): Released all slaves [ 440.195284][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.195437][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.195648][ T7857] bridge_slave_1: entered allmulticast mode [ 440.212185][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 440.226173][ T7857] bridge_slave_1: entered promiscuous mode [ 440.226598][ T8155] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 440.347600][ T8156] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 440.397777][ T9] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 440.399912][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.399948][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 440.399984][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.423533][ T8141] bridge_slave_0: left allmulticast mode [ 440.423569][ T8141] bridge_slave_0: left promiscuous mode [ 440.424031][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.486100][ T9] usb 5-1: config 0 descriptor?? [ 440.631901][ T8155] netlink: 72 bytes leftover after parsing attributes in process `syz.3.662'. [ 440.752835][ T8141] bridge_slave_1: left allmulticast mode [ 440.752872][ T8141] bridge_slave_1: left promiscuous mode [ 440.753320][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.789568][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.789649][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.812998][ T8161] FAULT_INJECTION: forcing a failure. [ 440.812998][ T8161] name failslab, interval 1, probability 0, space 0, times 0 [ 440.813033][ T8161] CPU: 1 UID: 0 PID: 8161 Comm: syz.0.656 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.813058][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 440.813072][ T8161] Call Trace: [ 440.813081][ T8161] [ 440.813091][ T8161] dump_stack_lvl+0xe8/0x150 [ 440.813127][ T8161] should_fail_ex+0x46b/0x600 [ 440.813171][ T8161] should_failslab+0xa8/0x100 [ 440.813193][ T8161] ? security_inode_alloc+0x39/0x310 [ 440.813218][ T8161] kmem_cache_alloc_noprof+0x9e/0x690 [ 440.813250][ T8161] ? security_inode_alloc+0x39/0x310 [ 440.813281][ T8161] security_inode_alloc+0x39/0x310 [ 440.813306][ T8161] inode_init_always_gfp+0x983/0xd40 [ 440.813334][ T8161] ? __pfx_aio_alloc_inode+0x10/0x10 [ 440.813361][ T8161] alloc_inode+0x82/0x1b0 [ 440.813385][ T8161] alloc_anon_inode+0x1e/0x340 [ 440.813416][ T8161] aio_setup_ring+0x104/0xe20 [ 440.813446][ T8161] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 440.813475][ T8161] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 440.813512][ T8161] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 440.813542][ T8161] ? __pfx_aio_setup_ring+0x10/0x10 [ 440.813587][ T8161] ioctx_alloc+0x323/0x840 [ 440.813614][ T8161] ? __might_fault+0xaf/0x130 [ 440.813644][ T8161] __se_sys_io_setup+0x7b/0x1d0 [ 440.813672][ T8161] do_syscall_64+0x166/0x520 [ 440.813694][ T8161] ? trace_irq_disable+0x3b/0x140 [ 440.813724][ T8161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.813748][ T8161] ? clear_bhb_loop+0x70/0xc0 [ 440.813774][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.813794][ T8161] RIP: 0033:0x7ffbc1afe159 [ 440.813814][ T8161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.813831][ T8161] RSP: 002b:00007ffbbfd14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 440.813855][ T8161] RAX: ffffffffffffffda RBX: 00007ffbc1d86180 RCX: 00007ffbc1afe159 [ 440.813870][ T8161] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 440.813885][ T8161] RBP: 00007ffbc1b9506b R08: 0000000000000000 R09: 0000000000000000 [ 440.813900][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.813913][ T8161] R13: 00007ffbc1d86218 R14: 00007ffbc1d86180 R15: 00007fff27500168 [ 440.813947][ T8161] [ 441.052136][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 441.052286][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 441.100839][ T9] usb 5-1: USB disconnect, device number 19 [ 441.304178][ T8141] bond0: (slave bond_slave_0): Releasing backup interface [ 441.382750][ T8141] bond0: (slave bond_slave_1): Releasing backup interface [ 441.511542][ T8141] team0: Port device team_slave_0 removed [ 441.591565][ T8141] team0: Port device team_slave_1 removed [ 441.599536][ T8141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.599570][ T8141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.659664][ T8141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.659686][ T8141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.685217][ T8141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.685311][ T8154] netlink: 830 bytes leftover after parsing attributes in process `syz.3.662'. [ 442.177410][ T3282] hsr_slave_0: left promiscuous mode [ 442.233217][ T3282] hsr_slave_1: left promiscuous mode [ 442.236822][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.917379][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.063380][ T3282] team0 (unregistering): Port device team_slave_1 removed [ 445.125306][ T3282] team0 (unregistering): Port device team_slave_0 removed [ 445.289076][ T7857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.398060][ T8170] syzkaller0: entered promiscuous mode [ 445.398089][ T8170] syzkaller0: entered allmulticast mode [ 445.661460][ T8199] FAULT_INJECTION: forcing a failure. [ 445.661460][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 445.661502][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.3.672 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 445.661529][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.661543][ T8199] Call Trace: [ 445.661553][ T8199] [ 445.661563][ T8199] dump_stack_lvl+0xe8/0x150 [ 445.661606][ T8199] should_fail_ex+0x46b/0x600 [ 445.661646][ T8199] should_failslab+0xa8/0x100 [ 445.661673][ T8199] __kmalloc_noprof+0xfb/0x790 [ 445.661708][ T8199] ? __memcg_list_lru_alloc+0x211/0x830 [ 445.661737][ T8199] ? __memcg_list_lru_alloc+0x211/0x830 [ 445.661768][ T8199] __memcg_list_lru_alloc+0x211/0x830 [ 445.661791][ T8199] ? xa_load+0x60/0x210 [ 445.661829][ T8199] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 445.661851][ T8199] ? xa_load+0x60/0x210 [ 445.661895][ T8199] __memcg_slab_post_alloc_hook+0x407/0xde0 [ 445.661932][ T8199] ? __memcg_slab_post_alloc_hook+0x24b/0xde0 [ 445.661977][ T8199] ? aio_alloc_inode+0x2a/0x80 [ 445.662009][ T8199] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 445.662042][ T8199] ? aio_alloc_inode+0x2a/0x80 [ 445.662073][ T8199] ? aio_alloc_inode+0x2a/0x80 [ 445.662120][ T8199] ? __pfx_aio_alloc_inode+0x10/0x10 [ 445.662152][ T8199] aio_alloc_inode+0x2a/0x80 [ 445.662184][ T8199] alloc_inode+0x6a/0x1b0 [ 445.662211][ T8199] alloc_anon_inode+0x1e/0x340 [ 445.662243][ T8199] aio_setup_ring+0x104/0xe20 [ 445.662277][ T8199] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 445.662311][ T8199] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 445.662351][ T8199] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 445.662388][ T8199] ? __pfx_aio_setup_ring+0x10/0x10 [ 445.662435][ T8199] ioctx_alloc+0x323/0x840 [ 445.662466][ T8199] ? __might_fault+0xaf/0x130 [ 445.662504][ T8199] __se_sys_io_setup+0x7b/0x1d0 [ 445.662536][ T8199] do_syscall_64+0x166/0x520 [ 445.662561][ T8199] ? trace_irq_disable+0x3b/0x140 [ 445.662592][ T8199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.662621][ T8199] ? clear_bhb_loop+0x70/0xc0 [ 445.662649][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.662674][ T8199] RIP: 0033:0x7f14e632e159 [ 445.662698][ T8199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.662718][ T8199] RSP: 002b:00007f14e4565028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 445.662745][ T8199] RAX: ffffffffffffffda RBX: 00007f14e65b6090 RCX: 00007f14e632e159 [ 445.662763][ T8199] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 445.662779][ T8199] RBP: 00007f14e63c506b R08: 0000000000000000 R09: 0000000000000000 [ 445.662795][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.662809][ T8199] R13: 00007f14e65b6128 R14: 00007f14e65b6090 R15: 00007fff53f5ed98 [ 445.662848][ T8199] [ 445.983218][ T7857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.745042][ T7857] team0: Port device team_slave_0 added [ 449.842387][ T7857] team0: Port device team_slave_1 added [ 450.006150][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.006171][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.006201][ T7857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.050587][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.050607][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.050634][ T7857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.152055][ T1148] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 450.356483][ T1148] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 450.359782][ T1148] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.359821][ T1148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 450.359860][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.398451][ T1148] usb 5-1: config 0 descriptor?? [ 450.658250][ T7857] hsr_slave_0: entered promiscuous mode [ 450.669316][ T7857] hsr_slave_1: entered promiscuous mode [ 450.680028][ T7857] debugfs: 'hsr0' already exists in 'hsr' [ 450.680061][ T7857] Cannot create hsr debugfs directory [ 450.816831][ T1148] usbhid 5-1:0.0: can't add hid device: -71 [ 450.816965][ T1148] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 450.876544][ T1148] usb 5-1: USB disconnect, device number 20 [ 452.366164][ T5252] 8021q: adding VLAN 0 to HW filter on device eth5 [ 452.695891][ T8257] FAULT_INJECTION: forcing a failure. [ 452.695891][ T8257] name failslab, interval 1, probability 0, space 0, times 0 [ 452.695937][ T8257] CPU: 0 UID: 0 PID: 8257 Comm: syz.4.683 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 452.695965][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 452.695980][ T8257] Call Trace: [ 452.695990][ T8257] [ 452.696000][ T8257] dump_stack_lvl+0xe8/0x150 [ 452.696043][ T8257] should_fail_ex+0x46b/0x600 [ 452.696084][ T8257] should_failslab+0xa8/0x100 [ 452.696106][ T8257] ? security_inode_alloc+0x39/0x310 [ 452.696132][ T8257] kmem_cache_alloc_noprof+0x9e/0x690 [ 452.696178][ T8257] ? security_inode_alloc+0x39/0x310 [ 452.696212][ T8257] security_inode_alloc+0x39/0x310 [ 452.696240][ T8257] inode_init_always_gfp+0x983/0xd40 [ 452.696273][ T8257] ? __pfx_aio_alloc_inode+0x10/0x10 [ 452.696305][ T8257] alloc_inode+0x82/0x1b0 [ 452.696331][ T8257] alloc_anon_inode+0x1e/0x340 [ 452.696364][ T8257] aio_setup_ring+0x104/0xe20 [ 452.696397][ T8257] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 452.696432][ T8257] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 452.696471][ T8257] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 452.696507][ T8257] ? __pfx_aio_setup_ring+0x10/0x10 [ 452.696554][ T8257] ioctx_alloc+0x323/0x840 [ 452.696584][ T8257] ? __might_fault+0xaf/0x130 [ 452.696627][ T8257] __se_sys_io_setup+0x7b/0x1d0 [ 452.696659][ T8257] do_syscall_64+0x166/0x520 [ 452.696684][ T8257] ? trace_irq_disable+0x3b/0x140 [ 452.696717][ T8257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.696742][ T8257] ? clear_bhb_loop+0x70/0xc0 [ 452.696771][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.696795][ T8257] RIP: 0033:0x7febedf8e159 [ 452.696817][ T8257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.696838][ T8257] RSP: 002b:00007febec1c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 452.696865][ T8257] RAX: ffffffffffffffda RBX: 00007febee216090 RCX: 00007febedf8e159 [ 452.696883][ T8257] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 452.696900][ T8257] RBP: 00007febee02506b R08: 0000000000000000 R09: 0000000000000000 [ 452.696916][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.696935][ T8257] R13: 00007febee216128 R14: 00007febee216090 R15: 00007ffd3fcbbe68 [ 452.696991][ T8257] [ 460.857888][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 460.858020][ T8311] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 461.142322][ T8315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 461.554316][ T8327] FAULT_INJECTION: forcing a failure. [ 461.554316][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 461.554360][ T8327] CPU: 0 UID: 0 PID: 8327 Comm: syz.4.698 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.554387][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.554400][ T8327] Call Trace: [ 461.554410][ T8327] [ 461.554421][ T8327] dump_stack_lvl+0xe8/0x150 [ 461.554473][ T8327] should_fail_ex+0x46b/0x600 [ 461.554512][ T8327] should_failslab+0xa8/0x100 [ 461.554536][ T8327] ? security_inode_alloc+0x39/0x310 [ 461.554561][ T8327] kmem_cache_alloc_noprof+0x9e/0x690 [ 461.554595][ T8327] ? security_inode_alloc+0x39/0x310 [ 461.554628][ T8327] security_inode_alloc+0x39/0x310 [ 461.554656][ T8327] inode_init_always_gfp+0x983/0xd40 [ 461.554688][ T8327] ? __pfx_aio_alloc_inode+0x10/0x10 [ 461.554719][ T8327] alloc_inode+0x82/0x1b0 [ 461.554762][ T8327] alloc_anon_inode+0x1e/0x340 [ 461.554796][ T8327] aio_setup_ring+0x104/0xe20 [ 461.554828][ T8327] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 461.554863][ T8327] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 461.554905][ T8327] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 461.554940][ T8327] ? __pfx_aio_setup_ring+0x10/0x10 [ 461.554986][ T8327] ioctx_alloc+0x323/0x840 [ 461.555016][ T8327] ? __might_fault+0xaf/0x130 [ 461.555053][ T8327] __se_sys_io_setup+0x7b/0x1d0 [ 461.555085][ T8327] do_syscall_64+0x166/0x520 [ 461.555111][ T8327] ? trace_irq_disable+0x3b/0x140 [ 461.555143][ T8327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.555166][ T8327] ? clear_bhb_loop+0x70/0xc0 [ 461.555195][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.555218][ T8327] RIP: 0033:0x7febedf8e159 [ 461.555240][ T8327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.555260][ T8327] RSP: 002b:00007febec1c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 461.555286][ T8327] RAX: ffffffffffffffda RBX: 00007febee216090 RCX: 00007febedf8e159 [ 461.555303][ T8327] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 461.555319][ T8327] RBP: 00007febee02506b R08: 0000000000000000 R09: 0000000000000000 [ 461.555334][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.555349][ T8327] R13: 00007febee216128 R14: 00007febee216090 R15: 00007ffd3fcbbe68 [ 461.555387][ T8327] [ 465.941586][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.981370][ T5595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.997182][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.000461][ T5595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.014463][ T5595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.200896][ T4906] Bluetooth: hci2: command tx timeout [ 468.266157][ T8374] FAULT_INJECTION: forcing a failure. [ 468.266157][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 468.266201][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.266229][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 468.266244][ T8374] Call Trace: [ 468.266254][ T8374] [ 468.266264][ T8374] dump_stack_lvl+0xe8/0x150 [ 468.266307][ T8374] should_fail_ex+0x46b/0x600 [ 468.266347][ T8374] should_failslab+0xa8/0x100 [ 468.266369][ T8374] ? security_inode_alloc+0x39/0x310 [ 468.266395][ T8374] kmem_cache_alloc_noprof+0x9e/0x690 [ 468.266427][ T8374] ? security_inode_alloc+0x39/0x310 [ 468.266460][ T8374] security_inode_alloc+0x39/0x310 [ 468.266485][ T8374] inode_init_always_gfp+0x983/0xd40 [ 468.266516][ T8374] ? __pfx_aio_alloc_inode+0x10/0x10 [ 468.266547][ T8374] alloc_inode+0x82/0x1b0 [ 468.266574][ T8374] alloc_anon_inode+0x1e/0x340 [ 468.266606][ T8374] aio_setup_ring+0x104/0xe20 [ 468.266639][ T8374] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 468.266672][ T8374] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 468.266711][ T8374] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 468.266746][ T8374] ? __pfx_aio_setup_ring+0x10/0x10 [ 468.266792][ T8374] ioctx_alloc+0x323/0x840 [ 468.266822][ T8374] ? __might_fault+0xaf/0x130 [ 468.266858][ T8374] __se_sys_io_setup+0x7b/0x1d0 [ 468.266890][ T8374] do_syscall_64+0x166/0x520 [ 468.266915][ T8374] ? trace_irq_disable+0x3b/0x140 [ 468.266947][ T8374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.266981][ T8374] ? clear_bhb_loop+0x70/0xc0 [ 468.267012][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.267036][ T8374] RIP: 0033:0x7f14e632e159 [ 468.267059][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.267079][ T8374] RSP: 002b:00007f14e4565028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 468.267106][ T8374] RAX: ffffffffffffffda RBX: 00007f14e65b6090 RCX: 00007f14e632e159 [ 468.267123][ T8374] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 468.267138][ T8374] RBP: 00007f14e63c506b R08: 0000000000000000 R09: 0000000000000000 [ 468.267152][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.267166][ T8374] R13: 00007f14e65b6128 R14: 00007f14e65b6090 R15: 00007fff53f5ed98 [ 468.267205][ T8374] [ 470.683344][ T4906] Bluetooth: hci2: command tx timeout [ 470.961960][ T5697] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 471.166850][ T5697] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 471.166922][ T5697] usb 1-1: too many configurations: 15, using maximum allowed: 8 [ 471.222317][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.222354][ T5697] usb 1-1: Product: syz [ 471.222371][ T5697] usb 1-1: Manufacturer: syz [ 471.222387][ T5697] usb 1-1: SerialNumber: syz [ 473.157873][ T4906] Bluetooth: hci2: command tx timeout [ 473.281501][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 473.281579][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 473.282112][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 473.282172][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 473.325092][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 473.425282][ T5697] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 473.508934][ T5697] usb 1-1: USB disconnect, device number 18 [ 473.520740][ T7857] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 473.956570][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 475.013456][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.013619][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.013728][ T8352] bridge_slave_0: entered allmulticast mode [ 475.015350][ T8352] bridge_slave_0: entered promiscuous mode [ 475.017718][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.017849][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.018168][ T8352] bridge_slave_1: entered allmulticast mode [ 475.019816][ T8352] bridge_slave_1: entered promiscuous mode [ 475.160961][ T4906] Bluetooth: hci2: command tx timeout [ 475.176558][ T67] bridge_slave_1: left allmulticast mode [ 475.176585][ T67] bridge_slave_1: left promiscuous mode [ 475.192486][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.291853][ T67] bridge_slave_0: left allmulticast mode [ 475.291882][ T67] bridge_slave_0: left promiscuous mode [ 475.292063][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.752722][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.830787][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.896246][ T67] bond0 (unregistering): Released all slaves [ 476.014799][ T8352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.017617][ T8352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.053612][ T8352] team0: Port device team_slave_0 added [ 476.055826][ T8352] team0: Port device team_slave_1 added [ 476.107984][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.108003][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.108019][ T8352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.109480][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.109494][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.109512][ T8352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.193065][ T8352] hsr_slave_0: entered promiscuous mode [ 476.195412][ T8352] hsr_slave_1: entered promiscuous mode [ 476.196294][ T8352] debugfs: 'hsr0' already exists in 'hsr' [ 476.196318][ T8352] Cannot create hsr debugfs directory [ 476.530232][ T67] hsr_slave_0: left promiscuous mode [ 476.550224][ T67] hsr_slave_1: left promiscuous mode [ 476.551068][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.619501][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.031037][ T67] team0 (unregistering): Port device team_slave_1 removed [ 477.080746][ T67] team0 (unregistering): Port device team_slave_0 removed [ 477.614875][ T8352] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.673010][ T8352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.676310][ T8352] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.719165][ T8352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.727638][ T8352] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.783198][ T8352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.786322][ T8352] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.843381][ T8352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.074759][ T8352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.133521][ T8352] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.141871][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.142117][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.181338][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.181598][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.674346][ T8352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.981101][ T8352] veth0_vlan: entered promiscuous mode [ 478.990464][ T8352] veth1_vlan: entered promiscuous mode [ 479.036573][ T8352] veth0_macvtap: entered promiscuous mode [ 479.044020][ T8352] veth1_macvtap: entered promiscuous mode [ 479.063982][ T8352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.084876][ T8352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.413263][ T3292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.446541][ T2273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.447017][ T2273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.514998][ T2259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.857723][ T1555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.857749][ T1555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.965905][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.965932][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.138758][ T37] audit: type=1326 audit(1790793048.911:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.138926][ T37] audit: type=1326 audit(1790793048.911:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.144294][ T37] audit: type=1326 audit(1790793048.921:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.145855][ T37] audit: type=1326 audit(1790793048.921:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.147284][ T37] audit: type=1326 audit(1790793048.921:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.147356][ T37] audit: type=1326 audit(1790793048.921:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.147399][ T37] audit: type=1326 audit(1790793048.921:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.147442][ T37] audit: type=1326 audit(1790793048.921:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.147852][ T37] audit: type=1326 audit(1790793048.921:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 480.152703][ T37] audit: type=1326 audit(1790793048.921:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.5.375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 503.088461][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.088595][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.733111][ T8459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 503.937848][ T8463] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 509.092763][ T8489] FAULT_INJECTION: forcing a failure. [ 509.092763][ T8489] name failslab, interval 1, probability 0, space 0, times 0 [ 509.092805][ T8489] CPU: 1 UID: 0 PID: 8489 Comm: syz.5.720 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 509.092832][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 509.092846][ T8489] Call Trace: [ 509.092856][ T8489] [ 509.092866][ T8489] dump_stack_lvl+0xe8/0x150 [ 509.092909][ T8489] should_fail_ex+0x46b/0x600 [ 509.092950][ T8489] should_failslab+0xa8/0x100 [ 509.092976][ T8489] __kmalloc_noprof+0xfb/0x790 [ 509.093010][ T8489] ? __memcg_list_lru_alloc+0x211/0x830 [ 509.093033][ T8489] ? __memcg_list_lru_alloc+0x211/0x830 [ 509.093067][ T8489] __memcg_list_lru_alloc+0x211/0x830 [ 509.093090][ T8489] ? xa_load+0x60/0x210 [ 509.093128][ T8489] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 509.093151][ T8489] ? xa_load+0x60/0x210 [ 509.093199][ T8489] __memcg_slab_post_alloc_hook+0x407/0xde0 [ 509.093238][ T8489] ? __memcg_slab_post_alloc_hook+0x24b/0xde0 [ 509.093288][ T8489] ? aio_alloc_inode+0x2a/0x80 [ 509.093322][ T8489] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 509.093355][ T8489] ? aio_alloc_inode+0x2a/0x80 [ 509.093386][ T8489] ? aio_alloc_inode+0x2a/0x80 [ 509.093421][ T8489] ? __pfx_aio_alloc_inode+0x10/0x10 [ 509.093451][ T8489] aio_alloc_inode+0x2a/0x80 [ 509.093480][ T8489] alloc_inode+0x6a/0x1b0 [ 509.093507][ T8489] alloc_anon_inode+0x1e/0x340 [ 509.093549][ T8489] aio_setup_ring+0x104/0xe20 [ 509.093582][ T8489] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 509.093617][ T8489] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 509.093657][ T8489] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 509.093693][ T8489] ? __pfx_aio_setup_ring+0x10/0x10 [ 509.093740][ T8489] ioctx_alloc+0x323/0x840 [ 509.093771][ T8489] ? __might_fault+0xaf/0x130 [ 509.093810][ T8489] __se_sys_io_setup+0x7b/0x1d0 [ 509.093843][ T8489] do_syscall_64+0x166/0x520 [ 509.093871][ T8489] ? trace_irq_disable+0x3b/0x140 [ 509.093904][ T8489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.093928][ T8489] ? clear_bhb_loop+0x70/0xc0 [ 509.093956][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.093980][ T8489] RIP: 0033:0x7ff8b9b3e159 [ 509.094003][ T8489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.094022][ T8489] RSP: 002b:00007ff8b7d75028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 509.094050][ T8489] RAX: ffffffffffffffda RBX: 00007ff8b9dc6090 RCX: 00007ff8b9b3e159 [ 509.094068][ T8489] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 509.094084][ T8489] RBP: 00007ff8b9bd506b R08: 0000000000000000 R09: 0000000000000000 [ 509.094099][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.094113][ T8489] R13: 00007ff8b9dc6128 R14: 00007ff8b9dc6090 R15: 00007ffef01a72e8 [ 509.094152][ T8489] [ 509.153958][ T8493] FAULT_INJECTION: forcing a failure. [ 509.153958][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 509.153992][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.4.732 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 509.154027][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 509.154040][ T8493] Call Trace: [ 509.154048][ T8493] [ 509.154056][ T8493] dump_stack_lvl+0xe8/0x150 [ 509.154093][ T8493] should_fail_ex+0x46b/0x600 [ 509.154128][ T8493] should_failslab+0xa8/0x100 [ 509.154149][ T8493] ? __kernfs_new_node+0xe7/0xa70 [ 509.154193][ T8493] kmem_cache_alloc_noprof+0x9e/0x690 [ 509.154222][ T8493] ? __kernfs_new_node+0xe7/0xa70 [ 509.154256][ T8493] __kernfs_new_node+0xe7/0xa70 [ 509.154292][ T8493] ? __pfx___kernfs_new_node+0x10/0x10 [ 509.154319][ T8493] ? kernfs_root+0x1c/0x230 [ 509.154351][ T8493] ? kernfs_root+0x1c/0x230 [ 509.154376][ T8493] ? kernfs_root+0x1c/0x230 [ 509.154399][ T8493] ? kernfs_root+0x1c/0x230 [ 509.154429][ T8493] kernfs_create_dir_ns+0xfe/0x230 [ 509.154462][ T8493] sysfs_create_dir_ns+0x12f/0x2a0 [ 509.154490][ T8493] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 509.154520][ T8493] ? rt_spin_unlock+0x165/0x200 [ 509.154579][ T8493] kobject_add_internal+0x62c/0xce0 [ 509.154649][ T8493] kobject_init_and_add+0x12b/0x1a0 [ 509.154681][ T8493] ? __pfx_kobject_init_and_add+0x10/0x10 [ 509.154710][ T8493] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 509.154749][ T8493] swnode_register+0x3c2/0x590 [ 509.154849][ T8493] fwnode_create_software_node+0x194/0x1f0 [ 509.154882][ T8493] device_create_managed_software_node+0xce/0x1f0 [ 509.154922][ T8493] iommufd_test+0x38a8/0x6370 [ 509.154991][ T8493] ? __lock_acquire+0x747/0x2de0 [ 509.155033][ T8493] ? __pfx_iommufd_test+0x10/0x10 [ 509.155068][ T8493] ? tomoyo_path_number_perm+0x219/0x5f0 [ 509.155096][ T8493] ? tomoyo_path_number_perm+0x219/0x5f0 [ 509.155126][ T8493] ? lock_acquire+0x115/0x350 [ 509.155178][ T8493] iommufd_fops_ioctl+0x468/0x600 [ 509.155230][ T8493] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 509.155271][ T8493] ? __fget_files+0x2a/0x420 [ 509.155297][ T8493] ? bpf_lsm_file_ioctl+0x9/0x20 [ 509.155339][ T8493] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 509.155366][ T8493] __se_sys_ioctl+0xff/0x170 [ 509.155396][ T8493] do_syscall_64+0x166/0x520 [ 509.155417][ T8493] ? trace_irq_disable+0x3b/0x140 [ 509.155443][ T8493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.155464][ T8493] ? clear_bhb_loop+0x70/0xc0 [ 509.155489][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.155509][ T8493] RIP: 0033:0x7febedf8e159 [ 509.155531][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.155548][ T8493] RSP: 002b:00007febec1e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.155571][ T8493] RAX: ffffffffffffffda RBX: 00007febee215fa0 RCX: 00007febedf8e159 [ 509.155586][ T8493] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 509.155599][ T8493] RBP: 00007febee02506b R08: 0000000000000000 R09: 0000000000000000 [ 509.155612][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.155625][ T8493] R13: 00007febee216038 R14: 00007febee215fa0 R15: 00007ffd3fcbbe68 [ 509.155658][ T8493] [ 509.160327][ T8493] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 509.182545][ T8493] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 509.978443][ T8504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 510.282823][ T2239] IPVS: starting estimator thread 0... [ 510.590326][ T8518] IPVS: using max 8 ests per chain, 19200 per kthread [ 516.329405][ T8551] FAULT_INJECTION: forcing a failure. [ 516.329405][ T8551] name failslab, interval 1, probability 0, space 0, times 0 [ 516.329451][ T8551] CPU: 1 UID: 0 PID: 8551 Comm: syz.3.745 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 516.329479][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 516.329492][ T8551] Call Trace: [ 516.329502][ T8551] [ 516.329513][ T8551] dump_stack_lvl+0xe8/0x150 [ 516.329555][ T8551] should_fail_ex+0x46b/0x600 [ 516.329602][ T8551] should_failslab+0xa8/0x100 [ 516.329625][ T8551] ? security_inode_alloc+0x39/0x310 [ 516.329652][ T8551] kmem_cache_alloc_noprof+0x9e/0x690 [ 516.329687][ T8551] ? security_inode_alloc+0x39/0x310 [ 516.329720][ T8551] security_inode_alloc+0x39/0x310 [ 516.329750][ T8551] inode_init_always_gfp+0x983/0xd40 [ 516.329783][ T8551] ? __pfx_aio_alloc_inode+0x10/0x10 [ 516.329816][ T8551] alloc_inode+0x82/0x1b0 [ 516.329842][ T8551] alloc_anon_inode+0x1e/0x340 [ 516.329875][ T8551] aio_setup_ring+0x104/0xe20 [ 516.329909][ T8551] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 516.329944][ T8551] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 516.329992][ T8551] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 516.330028][ T8551] ? __pfx_aio_setup_ring+0x10/0x10 [ 516.330076][ T8551] ioctx_alloc+0x323/0x840 [ 516.330107][ T8551] ? __might_fault+0xaf/0x130 [ 516.330145][ T8551] __se_sys_io_setup+0x7b/0x1d0 [ 516.330177][ T8551] do_syscall_64+0x166/0x520 [ 516.330204][ T8551] ? trace_irq_disable+0x3b/0x140 [ 516.330237][ T8551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.330261][ T8551] ? clear_bhb_loop+0x70/0xc0 [ 516.330291][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.330315][ T8551] RIP: 0033:0x7f14e632e159 [ 516.330338][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.330359][ T8551] RSP: 002b:00007f14e4565028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 516.330387][ T8551] RAX: ffffffffffffffda RBX: 00007f14e65b6090 RCX: 00007f14e632e159 [ 516.330405][ T8551] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 516.330421][ T8551] RBP: 00007f14e63c506b R08: 0000000000000000 R09: 0000000000000000 [ 516.330436][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.330452][ T8551] R13: 00007f14e65b6128 R14: 00007f14e65b6090 R15: 00007fff53f5ed98 [ 516.330490][ T8551] [ 517.183097][ T8561] netlink: 830 bytes leftover after parsing attributes in process `syz.5.747'. [ 517.331100][ T8564] netlink: 72 bytes leftover after parsing attributes in process `syz.5.747'. [ 518.518046][ T8572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 518.740327][ T4906] Bluetooth: hci2: link tx timeout [ 518.740542][ T4906] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 521.175119][ T4906] Bluetooth: hci2: command 0x0406 tx timeout [ 522.115003][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 524.379466][ T8613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.028207][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.769'. [ 525.131190][ T3439] IPVS: starting estimator thread 0... [ 525.233720][ T8627] IPVS: using max 13 ests per chain, 31200 per kthread [ 530.643156][ T8659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.587083][ T5717] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 531.695400][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.783'. [ 531.743946][ T5717] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 531.756544][ T5717] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.782020][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 531.782054][ T5717] usb 5-1: Product: syz [ 531.782070][ T5717] usb 5-1: Manufacturer: syz [ 531.782086][ T5717] usb 5-1: SerialNumber: syz [ 532.220852][ T5717] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 533.937176][ T8692] input: syz1 as /devices/virtual/input/input14 [ 534.361250][ T8708] syz.0.788 uses obsolete (PF_INET,SOCK_PACKET) [ 534.402683][ T8708] syzkaller1: entered promiscuous mode [ 534.402715][ T8708] syzkaller1: entered allmulticast mode [ 535.796567][ T8714] syzkaller0: entered promiscuous mode [ 535.796600][ T8714] syzkaller0: entered allmulticast mode [ 535.841214][ T5690] usb 5-1: USB disconnect, device number 21 [ 535.975800][ T8715] netlink: 56 bytes leftover after parsing attributes in process `syz.3.790'. [ 536.004452][ T5690] usblp0: removed [ 537.829547][ T8734] FAULT_INJECTION: forcing a failure. [ 537.829547][ T8734] name failslab, interval 1, probability 0, space 0, times 0 [ 537.829592][ T8734] CPU: 1 UID: 0 PID: 8734 Comm: syz.0.793 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 537.829620][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 537.829635][ T8734] Call Trace: [ 537.829644][ T8734] [ 537.829655][ T8734] dump_stack_lvl+0xe8/0x150 [ 537.829704][ T8734] should_fail_ex+0x46b/0x600 [ 537.829748][ T8734] should_failslab+0xa8/0x100 [ 537.829773][ T8734] ? security_inode_alloc+0x39/0x310 [ 537.829801][ T8734] kmem_cache_alloc_noprof+0x9e/0x690 [ 537.829836][ T8734] ? security_inode_alloc+0x39/0x310 [ 537.829867][ T8734] security_inode_alloc+0x39/0x310 [ 537.829895][ T8734] inode_init_always_gfp+0x983/0xd40 [ 537.829929][ T8734] ? __pfx_aio_alloc_inode+0x10/0x10 [ 537.829962][ T8734] alloc_inode+0x82/0x1b0 [ 537.829989][ T8734] alloc_anon_inode+0x1e/0x340 [ 537.830026][ T8734] aio_setup_ring+0x104/0xe20 [ 537.830060][ T8734] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 537.830096][ T8734] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 537.830136][ T8734] ? pcpu_alloc_noprof+0xff5/0x18d0 [ 537.830173][ T8734] ? __pfx_aio_setup_ring+0x10/0x10 [ 537.830218][ T8734] ioctx_alloc+0x323/0x840 [ 537.830248][ T8734] ? __might_fault+0xaf/0x130 [ 537.830286][ T8734] __se_sys_io_setup+0x7b/0x1d0 [ 537.830318][ T8734] do_syscall_64+0x166/0x520 [ 537.830360][ T8734] ? trace_irq_disable+0x3b/0x140 [ 537.830395][ T8734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.830421][ T8734] ? clear_bhb_loop+0x70/0xc0 [ 537.830450][ T8734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.830475][ T8734] RIP: 0033:0x7ffbc1afe159 [ 537.830497][ T8734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.830519][ T8734] RSP: 002b:00007ffbbfd35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 537.830546][ T8734] RAX: ffffffffffffffda RBX: 00007ffbc1d86090 RCX: 00007ffbc1afe159 [ 537.830564][ T8734] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 537.830579][ T8734] RBP: 00007ffbc1b9506b R08: 0000000000000000 R09: 0000000000000000 [ 537.830594][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.830609][ T8734] R13: 00007ffbc1d86128 R14: 00007ffbc1d86090 R15: 00007fff27500168 [ 537.830648][ T8734] [ 544.053392][ T8765] netlink: 104 bytes leftover after parsing attributes in process `syz.5.801'. [ 545.986262][ T5717] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 546.137777][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 546.138799][ T5717] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 546.142473][ T5717] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 546.142519][ T5717] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 546.142565][ T5717] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 546.142594][ T5717] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 546.142619][ T5717] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 546.142648][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 546.153006][ T5717] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 546.153038][ T5717] usb 4-1: Product: syz [ 546.153052][ T5717] usb 4-1: Manufacturer: syz [ 546.153067][ T5717] usb 4-1: SerialNumber: syz [ 546.193514][ T5717] usb 4-1: config 0 descriptor?? [ 546.207779][ T5717] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 546.215508][ T5717] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 546.433783][ T8769] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 547.840100][ T8769] syz.3.807 (8769) used greatest stack depth: 18880 bytes left [ 548.061554][ T5690] usb 4-1: USB disconnect, device number 14 [ 548.150560][ T5690] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 550.190679][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.819'. [ 551.643622][ T8808] bridge_slave_0: left allmulticast mode [ 551.643662][ T8808] bridge_slave_0: left promiscuous mode [ 551.643956][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.885935][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 552.099079][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 552.100361][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 552.100403][ T9] usb 1-1: can't read configurations, error -71 [ 552.162885][ T8808] bridge_slave_1: left allmulticast mode [ 552.162924][ T8808] bridge_slave_1: left promiscuous mode [ 552.163267][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.327879][ T8808] bond0: (slave bond_slave_0): Releasing backup interface [ 552.450491][ T8808] bond0: (slave bond_slave_1): Releasing backup interface [ 553.074512][ T4906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 553.117898][ T4906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 553.135427][ T4906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 553.183822][ T4906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 553.211508][ T4906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.407245][ T8808] team0: Port device team_slave_0 removed [ 553.554778][ T8808] team0: Port device team_slave_1 removed [ 553.562736][ T8808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.562780][ T8808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.604872][ T8808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.604907][ T8808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.651300][ T8808] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 555.875823][ T998] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 555.995756][ T5595] Bluetooth: hci0: command tx timeout [ 556.025780][ T998] usb 1-1: Using ep0 maxpacket: 16 [ 556.026744][ T998] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 556.028495][ T998] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 556.028521][ T998] usb 1-1: config 0 has no interface number 0 [ 556.028573][ T998] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 556.028601][ T998] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 556.031431][ T998] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 556.031457][ T998] usb 1-1: Product: syz [ 556.031474][ T998] usb 1-1: SerialNumber: syz [ 556.205882][ T998] usb 1-1: config 0 descriptor?? [ 556.229770][ T998] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 556.234132][ T998] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 556.572531][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.589123][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.592862][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.593154][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.593426][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.593671][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.593936][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.594183][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.594422][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.594662][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 556.594912][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 557.482093][ T8861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.605869][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 557.606009][ T998] usb 1-1: USB disconnect, device number 21 [ 557.710737][ T998] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 557.744280][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 557.744304][ T37] audit: type=1326 audit(1790793126.516:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744357][ T37] audit: type=1326 audit(1790793126.516:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744403][ T37] audit: type=1326 audit(1790793126.526:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744450][ T37] audit: type=1326 audit(1790793126.526:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744494][ T37] audit: type=1326 audit(1790793126.526:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744540][ T37] audit: type=1326 audit(1790793126.526:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744586][ T37] audit: type=1326 audit(1790793126.526:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744632][ T37] audit: type=1326 audit(1790793126.526:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744680][ T37] audit: type=1326 audit(1790793126.526:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.744735][ T37] audit: type=1326 audit(1790793126.526:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8867 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8b9b3e159 code=0x7ffc0000 [ 557.895577][ T5697] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 558.038580][ T5595] Bluetooth: hci0: command tx timeout [ 558.105812][ T5697] usb 4-1: Using ep0 maxpacket: 32 [ 558.106817][ T5697] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 558.108372][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.141492][ T5697] usb 4-1: config 0 descriptor?? [ 558.206081][ T5697] as10x_usb: device has been detected [ 558.208681][ T5697] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 558.389722][ T8866] INFO: trying to register non-static key. [ 558.395613][ T8866] The code is fine but needs lockdep annotation, or maybe [ 558.402714][ T8866] you didn't initialize this object before use? [ 558.408990][ T8866] turning off the locking correctness validator. [ 558.415314][ T8866] CPU: 1 UID: 0 PID: 8866 Comm: syz.3.837 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 558.425382][ T8866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 558.435658][ T8866] Call Trace: [ 558.438951][ T8866] [ 558.441888][ T8866] dump_stack_lvl+0xe8/0x150 [ 558.446489][ T8866] assign_lock_key+0x133/0x150 [ 558.451629][ T8866] register_lock_class+0xcc/0x2e0 [ 558.456771][ T8866] __lock_acquire+0x10c/0x2de0 [ 558.461549][ T8866] ? __lock_acquire+0x747/0x2de0 [ 558.466584][ T8866] ? do_raw_spin_lock+0x12b/0x2f0 [ 558.472063][ T8866] lock_acquire+0x115/0x350 [ 558.476591][ T8866] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 558.482361][ T8866] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 558.488517][ T8866] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 558.494172][ T8866] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 558.500330][ T8866] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 558.506073][ T8866] as102_dvb_dmx_start_feed+0x70/0x290 [ 558.511598][ T8866] dmx_ts_feed_start_filtering+0x129/0x220 [ 558.517514][ T8866] dvb_dmxdev_filter_start+0x434/0x10d0 [ 558.523182][ T8866] dvb_demux_do_ioctl+0x48e/0x540 [ 558.528289][ T8866] dvb_usercopy+0x199/0x2e0 [ 558.532814][ T8866] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 558.538646][ T8866] ? __pfx_dvb_usercopy+0x10/0x10 [ 558.543773][ T8866] ? __fget_files+0x3a8/0x420 [ 558.548485][ T8866] ? __fget_files+0x2a/0x420 [ 558.553126][ T8866] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 558.558416][ T8866] dvb_demux_ioctl+0x29/0x40 [ 558.563017][ T8866] __se_sys_ioctl+0xff/0x170 [ 558.567894][ T8866] do_syscall_64+0x166/0x520 [ 558.572610][ T8866] ? trace_irq_disable+0x3b/0x140 [ 558.577750][ T8866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.583826][ T8866] ? clear_bhb_loop+0x70/0xc0 [ 558.588704][ T8866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.594618][ T8866] RIP: 0033:0x7f14e632e159 [ 558.599049][ T8866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.619176][ T8866] RSP: 002b:00007f14e4586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.627604][ T8866] RAX: ffffffffffffffda RBX: 00007f14e65b5fa0 RCX: 00007f14e632e159 [ 558.635588][ T8866] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 558.643561][ T8866] RBP: 00007f14e63c506b R08: 0000000000000000 R09: 0000000000000000 [ 558.651524][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.659700][ T8866] R13: 00007f14e65b6038 R14: 00007f14e65b5fa0 R15: 00007fff53f5ed98 [ 558.667777][ T8866] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 558.725405][ T5697] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 558.734782][ T5697] as10x_usb: error during firmware upload part1 [ 558.735122][ T5697] Registered device nBox DVB-T Dongle [ 558.790730][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.936438][ T8866] loop9: detected capacity change from 0 to 7 [ 558.937467][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.937538][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 558.937795][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.937859][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 558.938136][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.938200][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 558.938460][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.938518][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 558.938655][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.941917][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 558.946164][ T5717] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 559.017731][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 559.021591][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.021669][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 559.123365][ T8866] ldm_validate_partition_table(): Disk read failed. [ 559.124941][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.124996][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 559.125924][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.125982][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 559.130340][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.130398][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 559.131034][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.131084][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 559.131235][ T8866] Dev loop9: unable to read RDB block 0 [ 559.141806][ T8866] loop9: unable to read partition table [ 559.141940][ T8866] loop9: partition table beyond EOD, truncated [ 559.141968][ T8866] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 559.316952][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.356561][ T733] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 559.620450][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.657225][ T5717] usb 4-1: USB disconnect, device number 15 [ 560.670674][ T5717] Unregistered device nBox DVB-T Dongle [ 560.673289][ T5717] as10x_usb: device has been disconnected [ 560.770234][ T3292] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 560.770354][ T3292] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 561.126092][ T5697] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 561.560412][ T12] bond0 (unregistering): Released all slaves [ 561.576324][ T5252] 8021q: adding VLAN 0 to HW filter on device eth5 [ 561.850747][ T5252] 8021q: adding VLAN 0 to HW filter on device eth6 [ 562.106927][ T5252] 8021q: adding VLAN 0 to HW filter on device eth7 [ 562.567180][ T5252] 8021q: adding VLAN 0 to HW filter on device eth8 [ 562.835467][ T12] hsr_slave_0: left promiscuous mode [ 562.855353][ T12] hsr_slave_1: left promiscuous mode [ 562.895655][ T12] veth1_macvtap: left promiscuous mode [ 562.895711][ T12] veth0_macvtap: left promiscuous mode [ 562.895794][ T12] veth1_vlan: left promiscuous mode [ 562.895845][ T12] veth0_vlan: left promiscuous mode [ 563.662881][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.662916][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.556423][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.755275][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 564.776266][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.997526][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.226623][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.627027][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.689634][ T5252] 8021q: adding VLAN 0 to HW filter on device eth9 [ 565.906727][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.953190][ T5252] 8021q: adding VLAN 0 to HW filter on device eth10 [ 566.188393][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.244559][ T5252] 8021q: adding VLAN 0 to HW filter on device eth11 [ 566.466595][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.506323][ T5252] 8021q: adding VLAN 0 to HW filter on device eth12 [ 566.906532][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.969877][ T5252] 8021q: adding VLAN 0 to HW filter on device eth13 [ 567.187496][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.242454][ T5252] 8021q: adding VLAN 0 to HW filter on device eth14 [ 567.446597][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.529593][ T5252] 8021q: adding VLAN 0 to HW filter on device eth15 [ 567.727809][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.812871][ T5252] 8021q: adding VLAN 0 to HW filter on device eth16 [ 568.187293][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.273163][ T5252] 8021q: adding VLAN 0 to HW filter on device eth17