last executing test programs: 21.565737302s ago: executing program 2 (id=2496): syz_emit_ethernet(0x7e, &(0x7f0000000140)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x8, 0x3a3, {0x15, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x1c, 0x8, 0x33, 0x8, @empty, @remote, {[@rr={0x7, 0xb, 0x63, [@private=0xa010100, @private=0xa010101]}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0x1, [0x1, 0x1c5a, 0x1, 0x3]}, @end, @generic={0x7, 0x9, "eef8a10556823e"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x4, [{@remote, 0x5}, {@remote, 0x7}]}]}}}}}}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) 20.620035046s ago: executing program 2 (id=2498): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x40, 0x9}, {0x28, 0x1, 0x50, 0xfffff038}, {0x6, 0xfd, 0x0, 0x57c}]}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)=[0x0, 0x0], &(0x7f00000000c0), 0x0, 0xd4, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a80), 0x0, 0x0, 0x77, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'tunl0\x00', 0x0}) r5 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r7, 0x1}}, 0x18) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x0, 0x0, 0x9, 0x3, 0x10000, 0x2, 0xaa, 0xfa13, 0xffffffff}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r8) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r9, 0x80e85411, &(0x7f0000000400)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 12.979863662s ago: executing program 0 (id=2507): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0x0, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e10500070686dd00008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x894) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000040}, 0x800) 11.90913329s ago: executing program 1 (id=2508): syz_usb_connect$uac2(0x5, 0x83, 0x0, 0x0) prctl$PR_SCHED_CORE(0x35, 0x4, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100182e5e74033073004fb35000000010902120001000040400904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20000000) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x76, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x0, 0xa, 0x3}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x150}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x68000000}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0xfd}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0xf09f}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x100}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x6}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x2}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x95}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x52}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x81}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0xc0}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0xc4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x7}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0x0, 0x3, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0x0, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0xd, 0x1, 0x40, 0x40, 0x4, 0xf1, 0xb, 0x68, 0x5, 0x2, 0x0, 0xc0, 0x8, 0x3}, 0xe) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, r7, 0x0, 0x46) (async) move_mount(r7, 0x0, r7, 0x0, 0x46) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) (async) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008"], 0xc4}, 0x1, 0x1000000}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 10.042353852s ago: executing program 0 (id=2509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xffffffa7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x3c}}, 0x4000) 9.399521695s ago: executing program 3 (id=2510): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000040)='}^\x00', 0x200200, &(0x7f0000000080)={@align=0x6, {0x5000, 0x3, 0x0, 0x1a05}}, 0x100, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xf2}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfd}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000005, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x20008, 0x7, 0x7, 0x17, 0x1, 0x7, 0x7fff, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x403, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x800007, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x100, 0x8080d, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x8, 0xb, 0x6, 0x45, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xffffffff, 0x48c93690, 0x43, 0x103], [0xbab, 0xa, 0x4, 0x200005, 0xfffffffe, 0x4, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x2, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x80001c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x20009, 0xbb33, 0x80000000, 0xb, 0x5, 0x100093a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x6, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x7, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xffffff5c, 0xffff3441, 0xfff]}, 0x45c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ac58000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.399033421s ago: executing program 2 (id=2511): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x3, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000380)='s#', 0x34000, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x4}, 0x1c) (fail_nth: 14) 8.458581653s ago: executing program 3 (id=2512): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001b00), 0x0, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000200)="da61bbd092c13c21c3153344c5e1b6517519f2a445348483ccb75be45d9dd82119c794a5874801c2c819a9c733a74572f79693981454a7db0a9d26f43f41fb3913ed3fec1d896f6afa09f5c5a2869eccea0e132e8903af3361a55f75b39cf4e8a46a25896bc4d6b10ec5f53ab147b9157f2625ba56a1319e13fac54511443881df786b4909ad08f9187ad14101cbcde1ade8255685487e3da6955095aceb88564d410bbd0c6a5167a3631848df53a5747dbcfed84fcfe85f733bfc44017234adf46e6abe72a482f038fa431226f2b17beb334cd6bdfac16ec795c30d452cbc5237c508087f6a4c925a774af231d8f5dd310a7b037609815ecbac5695a0099b17ebafa821c86da7d98883462533c1660cf889ef940e471ceb1fd6c100aeced92e620c8cd55c89e82413f49732060956afef3e915c3072f7a02a9191ffa5a98d25099d5e64ad436127f7f99fdc3e463702fc223c62dc12b2d18dd5edb9d6a6c539475e960a501dd32ea82abcdbb2a624c5845d0ec9e778335161e13d92f25dc8c4acca68eb49cc6004808edc7dea324e9408e9e35081c2ad41dca44299ebcacbbe7b3507c10745fd54d5360da22f41e0fcee4b2fed71bd03ef0b1d43c6f37b98471f9ac281b02475017531d02b373061f2f2fa4231b4f80fa3321cc13befbed0617729c8e28a3ea165b3b3621b711296f00bf547dbadb9b01ebfe673a09be247d32977e628e02713b789ec0cbaac886b7e4e5fcde68b7a935279fcbc7b156350c653a3d250fd92e9b5b1c1a616f83505ad7f9338e6a3a4c7ebd9a1ad557c6757dad148cd77ee5e148871b8b1f171d8261d7d0fcf4a6d73f1aeb044311fd42cee1263b8f3cf23193475e6c11ab29b8cf83b533a02db3fd5a19fe5040e19798ac83e8d18039512e93afc6b0aa8703938cfc05a3f637c3ff0a86ba1a7821bbee66c628147d500daf12ca74bd169e4208a97b6cd8e6390c4b6785ffa34abc13e242a856613d59ab1476e11b50157f40dad91176e45551823e1c388fb3b76e16f6fb2416b5d434cdfbdf1281e035dc307bda07d499c804d2b097b47fb03480f06f968e43117b25346ff215482d72e53f44156c48f285036f7c98687f285310e2ce0355fecb81e3f8b0d6bcc4dbc0fe26dc6de3bfa9f7a8f4bbe00b14a75cfeb42b4873d72889bb750f03722632393de2d714489e54c4b43806fbddf35c74d51fa0cf012cc263197b8154d7931f66a65e03b38e69b534d02164004544ba7c1c98074bb5a47df105f6527fab4947d371522d03ab77d1f7533070989648efc094e19c75ed95db9a410bfa0189f644183c061f6e96884beaab2138cc2ba7d388b3f8be5c3df146499b4ae97e42189b6105d6763eaaee274ddbc12e599cff3f2934a52d6723de2d6309ee583e64417d7b86114be04ba2b4eaec50e8cfececc609d498ed27c1bb2515d8893285d517e08a57850e7f55630600423104aef2c71c69e21ce8c89765f51a9015a6dcafcb8c2b1693f8ed328592fead2389bb19ee80ef8fea13d275665c38204ceec24b464ad9040fed9a49332ba644971010ef608d6c32fc075456d01cb742c6a942647cc4281fad9668b3e719a0dbc124b67c676ed727fc831018c8a6ea44a9400f5b616f1bebafe86213bee80c5b3032d13d35641d3b37c79ab0bff4a9663921b92fa1d3fee7b2640e4dce82c031183b14fc9e4966058ed50084c20788dcdcc4701a97b98eb26cc8321171a1640d9895037ca2598d089e82fa177c7e509efa54de204da9b62cd832196cd7d4553708f8dee87eb99f2764780208502014f88b63b3449a03645bdd4258949aa16e1223e0c87588629c9e49d7b6c5b6a05fbb66b7f5ca42ec9bbaccf60a4f7bcb56acde21ef6c5372fa421d9f1cf3e869d7bca8f2ac3cfa246d2ffbb42bb71f2e611ad0d4a341fb8adbc973967bed6aae40eaa48925591ce3629b870173ad59551016cf5f01c18ccfe51addb0fc577f68fd998c97e17b48285d0e045a76dfc2c05feef0995b1402be5dd016e86c394c3893816a33a5077f6ea1f0125c00390574b8d17d34ffbc8c16a90e8881652b10219c4bb27d12a81c04efb41932536a4a06e7ba40ed09c4d513c616c9a88de69f62a75a5008304cb485cadf25923e71e963d1910f92eb27001e4e97c94e1faf38621561211a82d53c96f59546c30e9a544acb4621479f5b2822b76d1a398059ead44cb90b9232d110e96873147872a4fcf48c10d9c044f4f97c1140d82419d87cded544f50c9620d9def90b8e0ddacfb8d34628a568ef990303f9060d2375d6ec2506ea4d66b9bb2285e250d7f2ebdee36af081ef538bfc7576c58f845f98e9a263f525cd9bfedd5db7e68903cae371fa6e16212337a1cffc37b84721d6dfdd3bfaf0accdc2e4916eebc25dbdb131af64e27d3aa17b230584dba19e0766b2e045bcc77f7acf996c80a42656a4e1355c44b0fd5d7068e97a16f32cec47395b2c11244b910a40487b23e10f660f2bcc3cce9bcdd79d314575a0c1b10296c042ee6692da0ab2c8c29cfafef5f10bd78bde3208933dac3607111e92ac746a4757d0a1ed17a80aa1623714a6d524355c4af1fb4ed1d54e0f1ed52a9de1f6f61e9fff235d938675b7f0929ebfa8f972f190e1bcc205de3dd3e514ea68f65d8390163aefcddbd19c58bd899c776fc64865c810785a473adb05ec321dcf242c288eb8a28f43266749e51dded9012192758e9f14a4f910c357bcf8524047fa041820cedbdbd22abf13df749be46967a40b4d9def0b9d05c1816114e01c4ab545f4299e9c4db5cd21c3c6d43fe8f77738af8b140c4565d386de8c81263c75bf04079148a4b5325a79f551e431a263f12146ce091dec71033c2a55645b3971c1165e7b650875622d281b3238b4e452c1c35ea6f948632f64473fa2754ea3a40d8e7271029c0fde5455aabeee23160e56b5b6cdb191d7899758851466374aeabd9eccb332da6492a931ed8e5bc35ae56d179924808962f4eea31960df00a0ed57623792a0d943c22336e8b0a921abe00e4d20923a6a75ab03fd292bb3d5ac53d47a0fc8cfa2e4c50352dd0de6fd2b863248a4ab23a5a71b63f0378eda174afa4209b69f670bf38a3e15dfededc22139538801e2e077af21fac027f36877afdd6f74d781247a14128753383b1c3765fe9b8d38e00882074e37bc754fc349b6be770b884864b6604a8ba122cd59dede22fec2ceeb134312db637da19711e0795abb230816ab3518dd1dc0ff1ef6d336fbdf8ed7901ac9faf29ccea34e47cd9085e0c93a01874f053a9eef06d91f05e2d9faa27fa7cd475cfd2bc4ce9438f51632faadff11f9c2b6131a91a8cd8f9a285a50ccca88f00176227a467323040c951be803e7dc12f71c3cff916bebfdca0f96de6349c360d2e1e6ffdf7cffc1c7b4486478848872dc579d431eae8b62c87c717809c64ababaf1c69a5151ebe3019b0d8d2857349a57033a91d9a8281178c6e3e3c4fb478113ddf9587be9b4f2c83b2796e728182dc0457b038728e57cf4ef0fa3a7ea9f91acd45b5d5269147d3a069a2ac41bf18297c52db57191931eac4ae840fc9a175d19bf810de35e2b2f9a16d82706e38db6ff153d9a774d16330649d10eb6609605b6d22eae9f2203ff131dec41d3a8663c587fb8246095778e30b517ce90444e0ddca4d8c16d7b87ff4b7ba1edf243c85c8289a7672126a2d5db690764316bf83fd633c95f44f70d28b91be970af382f917573935a9588bbe7e85f56df46aad124861680743f43e12a917e0d2550e44c6f60a1364caa8e5b12e7d61b0e1b36361a5a65eee5d82314b2bdb33a0044bd09251f5dab0877dfadaf3df6f825165ce7cdfd4be1ddbb3a8738c2562e561b579c10d4e60130412c92d69ea83964c7795282937b59782cb2dcbb2958c379a360aa328661d7be2a50401198b038d2cf6f4fa739a3292ded007baa69969ce2078c01234093fd96edc13bed50d37a5028f9d4056621100dc27ab59de2d3a945d637951019c96971d6da4e4b6501a9798ac3b0f833a6b77499a058b134ff2c2346d8b9047e173079e43ac566dd7e6a74bced670b7f6ded2518b838834f36243a6c48073d48b3518a4e53ede05fb4eb68484f42f98c681051fdd3c079887e40201958322029c0b56f8b0852e71d7b68bf9508a183bc6ddd0b0b3eb750292ac0c8fd3d2008d07d70709ea5a2aeeb0803f6caddbd0a9b41d7e18baad3aa3459df0c0cf27fdeda2a4b7339972841385934819feec86ef2bbd5d0ad40fe5a9ae70ca1f94fec3eda20be6826b815a5379ac0cd3ffe2b65245cfc2900064351aca63d613a03f996aa644502d61511e4714d7a51dd5f0d250149fc7980a2c40428786a51784127944ae124a726a7f7aa8ce287513065d931e47526bbeafb577841ff3c7d957c5648cd616c39063ccf050c1d3018bd6e35d2c40f2513d80f5a6f7da59571684a946620bd0854723efb3edd2034daab025dbe1f7751f0bc5252f0fe4c06cf10be7bab69348c70f76552012e903cd07467560ec4f28222db1307ae52cf596b035d65340d63c4fe21ae0492c9308f0224f56d064c99ccc577abce6bbac478b32efa6f228e2e9c6d6a3782cc099b3925a6ee1705f55aae7ac72ac1c9cf457e8565dc4e29103908706f0853d630b5e527e83f5a4694c916968b3b7ac36861ab058a49134ab2cf656408bdb57148a4db53be11c1f6e28c42004d5d5dd44a9f9395a9797fe20b027a4d96137962ac51ed21cadad3bb1fa469516a03631103405c3ac1da985f93cc23411c3b0cf0387ad20bdcd5138ffbf69f593981d7289b990f47a4be817676c19602e503fcab42f805ce7b3c400a8740bacadf27dcde1286760b123022678778e938cb0a9db802a7c58182c1a6bf4220a92611502696f04ab373b92d7bd415f57c666da079e51ccd3406487a68d4a1ea88edb66a3153c8ed6afb4a3c32b5c99e241b29558c2e20a63cc0f261e3eb8a9e808a413aa10b3a49bb427dd90e30c6aaca39831a01df3527f5138e17500a96fd3403bf16588cf1018ee25518383ab41549b53c3dea55db6c5875e34753ae9c9aa0e10eec67f9db27a0d8463df0ac212e0f8ba765ae863d7f11338461e872add0e3278e947e1449b903e671b709adebde0c80197fa89abbc41d9c38fd3fbcac9fe533475f8cb9a675ec0c0fd67bcdf440f9657e5b76486615eadc96b1d382c0633b16a5a9081523ad498e1f92d09afbbbe7d172d6d259b0a9e7a660eb6216ecae34d4342282efb73f155b0dd91a7420ae59bf62e05522a4306370d1eef04fd34b094465b81ff79ab24e9c50ecd09981aa4efb1cb1991e73fdc805fda7fa422d2b9ed06d7c467a6a27655d7f6e0d5d20171f77ff933bcf9b671a2fb9d3e7c33348dd954c9ac8649e9e930860e35b6d6e5bfb65b1b3a921cd7003b3e7c22e84c470dab1510aa9952a441f77604269d1dd29081b1891a86185044d57b66d33e606cfa8c6a6693f6dcbbc04770fc29af8aba651422fe26aaeda3ee0ec15dc0d9e67026497cb844300fc56d9a7e54c37f28c1203fdf10cd0d56e71d9aa2dd1cd5e4a364136c2cc3fc0d809bb84460693ee954ab0d13a2f0bb46710df1458e35de03f551d41e4d5f7d5aa1ce4a971094b05d31fff410f4112bb5a893af2202159166ab00793413a08f0bbb378182f63656701794dee58526352ef9080b9c890f767da4c652e12f98fbb94fa08ea46200f71cb165459dafb2459222fb8f82f262d5f7dd94d20d8162a3c1a5eead35d25a80db8b", 0x1000}, {&(0x7f0000001200)="5c67fe531c2a4db72d9c7fd57e749b1cff317720f387b5de01a77e822f88c0406dd28da3b570501e9542df4706db34945c99cd2ab4046cb30c49e0a90d1093be0b8387495c0cf929e6fdd21f5efaa0058786f6bb0592146045e06b1b3b0b7a0d5a5da1e7d54dcbcef38fac48d3cf302da58f6abfd1f4a1fd81e8dee7c59c1e8ac71427d3ff94d3ff62e7931bf78623f65a843557d6af740db529139be4be526c18d60a3a9c7b91d96b0c5f795c84336a09bfab93", 0xb4}, {&(0x7f00000012c0)="ac8abef4d57542575feb7827f06a6800eda02e635da3c9fe39750779700291e905c993be323c21dd7f4e54340657ca069c5a846fc2fffea987c5deadb98378ab6c1399a4e0dd798a0112d38de6c8dcfbcb24d658", 0x54}, {&(0x7f0000001340)="414f355be0aa7706ef5c853635997a6d2666369019b6fd73e78f5ea6c9503b", 0x1f}, {&(0x7f0000001380)="05d579301a0b4847fe6a15e1b8fe5a2ec81993849c560009f1887d1437e6645c6b91cd70328c93085e9dd3b8de1455bc4019a2cebb40d090822d2db229e6208ab7f4b04628cdc4d0f590ad7fd95481ba482ca8ba04a67007d1c0494be25206851dbdf0e2944704d02812724d810ba8211c0571d945e571d1cd8f1084c12d3a0ab149e6d0a737f9e59deb3420999b634338161692b0ad0b", 0x97}], 0x5) 8.397009041s ago: executing program 0 (id=2513): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113620000000000bf2000000000000007000000180000003d03"], 0x0}, 0x94) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000000000000000080000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003"], 0xc0}, 0x240008c4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x41}) 7.455670523s ago: executing program 2 (id=2514): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_helper', 0x0, 0x198) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x2, 0x1) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x8) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfffa, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x48812) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0xc, "e61a6db37d87b1bc5d171fa8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000003c0)={0x40, 0x8, 0x28, "15331c2a5c2c8d38f63acaf955045b0f632fd5d1793b1de11d0d05dc02dd82d278654b19893574ae"}, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)={0x20, 0x3f, 0x1f, "98b1540f30b256f11ea0bb61cd99390435d5bc757c8dd492a4e61d8491a04c"}, 0x0, 0x0, 0x0, 0x0}) 7.097335049s ago: executing program 4 (id=2515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000000)="bad34fd8c520fb0b2e9383ded455", 0xe, 0x28041, &(0x7f0000000380)={0x11, 0xf5, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendto$packet(r8, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x20040810, &(0x7f0000000240)={0x11, 0x1a, r7, 0x1, 0x5, 0x6, @random='\x00\x00\x00\x00\x007'}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 6.650492676s ago: executing program 3 (id=2516): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.383600538s ago: executing program 1 (id=2517): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xb8, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x5, 0x0, @multicast2}}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 6.27954798s ago: executing program 1 (id=2518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 6.205238284s ago: executing program 3 (id=2519): r0 = socket(0x2b, 0x2, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040), 0x4) (async) fchdir(0xffffffffffffffff) (async) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000200)={0x10000003, 0x1, 0x1, 0x9, 0xfffffff9, 0x0, 0x40, 0x921, 0x2, 0x4, 0xffeffffb, 0x0, 0xffffff04, 0x7}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xb, 0x0, 0x0, @SEQ_NOTEON=@note=0x53}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000840)={0x103, 0x17, 0x1, {0xfa, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, 0xffffffffffffffd2) (async) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000980)=[@in6={0xa, 0x4e21, 0x1800, @remote, 0x7fffffff}, @in6={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x1ff}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x1}], 0x80) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r5, 0x3, {0x2, 0x0, 0x4}}, 0x18) (async) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18) (async) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r5, 0x1, {0x2, 0xf0}}, 0x18) (async) openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x130b, &(0x7f0000000380)={0x0, 0x3894, 0x20, 0x4}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="870d0400639e0700200012800e0001006970366772657461700000000c000280060011004e1c00001400030069703667726574617030000000000000"], 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0ff}, 0x4008084) syz_pidfd_open(0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c0000000000000000000000000000000000000000000000000000000000000100ffffffffffffff000000000000000000000000000000000000000000000000000a00000000000000000000008040000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa0000000000000000000000000600000004010000010400"/180], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 6.144719119s ago: executing program 1 (id=2520): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a3b350837e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630931a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ae93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78cc6891de78e00c50ca840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000a9c29ddfb03e6437000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000029c0)=""/4096) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x74) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000140)=0x3fffd, 0x5d) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = io_uring_setup(0x1cf4, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.911681441s ago: executing program 3 (id=2521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.887723397s ago: executing program 0 (id=2522): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1000, 0x2, 0xffffffff, 0xde, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x3}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1000, 0x2, 0xffffffff, 0xde, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 4.728523774s ago: executing program 0 (id=2523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r1, &(0x7f0000000000)=""/47, 0x2f) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) getdents64(r1, 0x0, 0xffffffff00000018) 4.527529876s ago: executing program 0 (id=2524): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r0, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0xcf8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r3, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x810, &(0x7f0000001040)={0x11, 0x0, r7}, 0x14) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xffffffff}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r9 = dup3(r8, r4, 0x0) recvmmsg$unix(r9, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x4, r3, 0x1}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="00445552e82f647e2b3a64c0491b", 0xe, 0x4000800, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 4.055858031s ago: executing program 1 (id=2525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000007c0)={&(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x0, 0xdededede}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) r11 = socket(0x10, 0x803, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r13}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r14 = syz_genetlink_get_family_id$team(&(0x7f0000000680), r11) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000800)={'syztnl0\x00', r13, 0x7, 0x7800, 0x7a, 0x8dc, {{0x6, 0x4, 0x2, 0x38, 0x18, 0x68, 0x0, 0x3, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@noop, @end]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000001180)={0x29c, r14, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r13}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffd4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r13}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.801588008s ago: executing program 4 (id=2526): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001b00), 0x0, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="5c67fe531c2a4db72d9c7fd57e749b1cff317720f387b5de01a77e822f88c0406dd28da3b570501e9542df4706db34945c99cd2ab4046cb30c49e0a90d1093be0b8387495c0cf929e6fdd21f5efaa0058786f6bb0592146045e06b1b3b0b7a0d5a5da1e7d54dcbcef38fac48d3cf302da58f6abfd1f4a1fd81e8dee7c59c1e8ac71427d3ff94d3ff62e7931bf78623f65a843557d6af740db529139be4be526c18d60a3a9c7b91d96b0c5f795c84336a09bfab93", 0xb4}, {&(0x7f00000012c0)="ac8abef4d57542575feb7827f06a6800eda02e635da3c9fe39750779700291e905c993be323c21dd7f4e54340657ca069c5a846fc2fffea987c5deadb98378ab6c1399a4e0dd798a0112d38de6c8dcfbcb24d658", 0x54}, {&(0x7f0000001340)="414f355be0aa7706ef5c853635997a6d2666369019b6fd73e78f5ea6c9503b", 0x1f}, {&(0x7f0000001380)="05d579301a0b4847fe6a15e1b8fe5a2ec81993849c560009f1887d1437e6645c6b91cd70328c93085e9dd3b8de1455bc4019a2cebb40d090822d2db229e6208ab7f4b04628cdc4d0f590ad7fd95481ba482ca8ba04a67007d1c0494be25206851dbdf0e2944704d02812724d810ba8211c0571d945e571d1cd8f1084c12d3a0ab149e6d0a737f9e59deb3420999b634338161692b0ad0b", 0x97}], 0x5) 1.82520533s ago: executing program 4 (id=2527): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@dellink={0xc4, 0x11, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x4440b, 0x60}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'rose0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'nicvf0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_VFINFO_LIST={0x64, 0x16, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x2, 0x2, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x7f}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7139dac4, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0xe40c, 0x7ff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0xe461}}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x8014) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x2, @sdr={0x34343452, 0x4}}) 1.710604086s ago: executing program 4 (id=2528): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, r0, 0x2) syz_io_uring_setup(0x9a, &(0x7f0000000400)={0x0, 0x79b0, 0x2, 0x1, 0x40024e}, 0x0, 0x0, &(0x7f0000000000)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, &(0x7f0000000280), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) 1.579882737s ago: executing program 4 (id=2529): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.525060461s ago: executing program 4 (id=2530): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x99, 0x6, 0x80, 0x1, 0x4e, 0x9, 0x61, 0xff, 0x7, 0xff, 0x8, 0xa, 0x1, 0x9}, 0xe) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000041000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r12, 0x4068aea3, &(0x7f0000000240)) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x21) r14 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000a40)={[0xa, 0x9, 0xb, 0x0, 0x10000000000000, 0x8000040000000001, 0xb3, 0x8, 0x2f, 0x7, 0xffb, 0x2, 0x7, 0x1ff, 0x8e4, 0xb286], 0xeeee0000, 0x20244}) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r9, 0x0, r10}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0xa, 0x0, 0x0, r10}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, 0x8c, 0x3, 0x5}) r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r15) exit(0xfffffffffffffffd) 377.632103ms ago: executing program 2 (id=2531): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback={0x6000000000000000}}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3b}}}, @rthdrdstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) 355.283684ms ago: executing program 1 (id=2532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) r7 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 283.836689ms ago: executing program 3 (id=2533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) (async) set_mempolicy(0x1, 0x0, 0x3) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f0000000000)) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 2 (id=2534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0x8}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xb, 0x4, 0xb, 0xb, 0xa, 0x4, 0xa, 0x1, 0x10, 0x5, 0x8, 0x10, 0xe, 0x2, 0xc, 0xa], 0x0, [0x9, 0x4, 0x4d9, 0x881d, 0x8, 0x40, 0x8000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xaff, 0x3, 0x7, 0xafc6], [0x9, 0x0, 0xa135, 0x2, 0x4, 0x75f4, 0x7fff, 0x5, 0x80, 0x2, 0x5, 0xff61, 0x8, 0x1, 0x6, 0x81]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) kernel console output (not intermixed with test programs): .890939][T13359] RBP: 00007fdc05108090 R08: 0000000000000000 R09: 0000000000000000 [ 612.890952][T13359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.890964][T13359] R13: 00007fdc04416038 R14: 00007fdc04415fa0 R15: 00007fdc0453fa48 [ 612.890997][T13359] [ 613.226051][T13370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.273316][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'. [ 613.498010][T13385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.518467][T13385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.531099][T13385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.541954][T13385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.646962][ T8889] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 613.805326][ T8889] usb 1-1: Using ep0 maxpacket: 16 [ 613.814302][ T8889] usb 1-1: config index 0 descriptor too short (expected 1068, got 27) [ 613.840642][ T8889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 613.863509][ T8889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 613.878014][ T8889] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 613.888631][ T8889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.896852][ T8889] usb 1-1: Product: syz [ 613.901375][ T8889] usb 1-1: Manufacturer: syz [ 613.906531][ T8889] usb 1-1: SerialNumber: syz [ 613.920160][ T8889] usb 1-1: config 0 descriptor?? [ 614.022698][T13395] FAULT_INJECTION: forcing a failure. [ 614.022698][T13395] name failslab, interval 1, probability 0, space 0, times 0 [ 614.092794][T13395] CPU: 0 UID: 0 PID: 13395 Comm: syz.3.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.092829][T13395] Tainted: [L]=SOFTLOCKUP [ 614.092838][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.092851][T13395] Call Trace: [ 614.092860][T13395] [ 614.092869][T13395] dump_stack_lvl+0xe8/0x150 [ 614.092899][T13395] should_fail_ex+0x412/0x560 [ 614.092929][T13395] should_failslab+0xa8/0x100 [ 614.092952][T13395] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 614.092981][T13395] ? __alloc_skb+0x186/0x7d0 [ 614.093009][T13395] ? __alloc_skb+0x1d0/0x7d0 [ 614.093034][T13395] ? __local_bh_enable_ip+0xd0/0x130 [ 614.093060][T13395] __alloc_skb+0x1d0/0x7d0 [ 614.093088][T13395] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 614.093121][T13395] netlink_sendmsg+0x5d4/0xb40 [ 614.093153][T13395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.093188][T13395] ? aa_sock_msg_perm+0xf1/0x1b0 [ 614.093220][T13395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.093251][T13395] ____sys_sendmsg+0x972/0x9f0 [ 614.093271][T13395] ? __might_fault+0xaf/0x130 [ 614.093313][T13395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.093343][T13395] ? import_iovec+0x73/0xa0 [ 614.093372][T13395] ___sys_sendmsg+0x2a5/0x360 [ 614.093392][T13395] ? __lock_acquire+0x6b5/0x2cf0 [ 614.093418][T13395] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.093473][T13395] ? __fget_files+0x2a/0x420 [ 614.093499][T13395] ? __fget_files+0x3a0/0x420 [ 614.093533][T13395] __x64_sys_sendmsg+0x1bd/0x2a0 [ 614.093557][T13395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.093589][T13395] ? __pfx_ksys_write+0x10/0x10 [ 614.093627][T13395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.093651][T13395] do_syscall_64+0x174/0x580 [ 614.093673][T13395] ? trace_irq_disable+0x3b/0x140 [ 614.093703][T13395] ? clear_bhb_loop+0x40/0x90 [ 614.093729][T13395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.093749][T13395] RIP: 0033:0x7f8770b9ce59 [ 614.093769][T13395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.093787][T13395] RSP: 002b:00007f8771a3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.093810][T13395] RAX: ffffffffffffffda RBX: 00007f8770e15fa0 RCX: 00007f8770b9ce59 [ 614.093825][T13395] RDX: 00000000000040c0 RSI: 0000200000000240 RDI: 0000000000000003 [ 614.093838][T13395] RBP: 00007f8771a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 614.093852][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.093864][T13395] R13: 00007f8770e16038 R14: 00007f8770e15fa0 R15: 00007f8770f3fa48 [ 614.093897][T13395] [ 614.384740][ T29] audit: type=1326 audit(1780757648.589:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.4.2196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 614.504157][ T29] audit: type=1326 audit(1780757648.589:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.4.2196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 614.529144][ T29] audit: type=1326 audit(1780757648.589:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.4.2196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 614.572547][ T29] audit: type=1326 audit(1780757648.589:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.4.2196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 614.599766][ T29] audit: type=1326 audit(1780757648.589:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.4.2196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 614.625195][ T29] audit: type=1326 audit(1780757648.589:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.4.2196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 614.665264][T13400] IPVS: Scheduler module ip_vs_ not found [ 614.705141][ T29] audit: type=1326 audit(1780757648.929:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.4.2196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 614.765118][ T5772] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 614.772781][ T29] audit: type=1326 audit(1780757648.929:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.4.2196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 614.804867][ T8892] usb 1-1: USB disconnect, device number 16 [ 614.858769][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 614.897441][ T5772] usb 5-1: device descriptor read/64, error -71 [ 615.020385][T13416] input: syz1 as /devices/virtual/input/input45 [ 615.044423][T13416] input: failed to attach handler leds to device input45, error: -6 [ 615.113878][T13421] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 615.169260][T13420] libceph: resolve ' [ 615.169260][T13420] -&fYǝa2i [ 615.169260][T13420] .?&*&' (ret=-3): failed [ 615.178603][ T5772] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 615.346501][ T5772] usb 5-1: device descriptor read/64, error -71 [ 615.477541][ T5772] usb usb5-port1: attempt power cycle [ 615.825697][ T5772] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 615.859711][ T5772] usb 5-1: device descriptor read/8, error -71 [ 615.892974][T13440] geneve2: entered allmulticast mode [ 615.910347][ T6052] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 615.933459][ T6052] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 615.961778][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'. [ 615.971842][ T6052] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 615.984022][ T6052] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 616.125307][ T5772] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 616.155910][ T5772] usb 5-1: device descriptor read/8, error -71 [ 616.246026][T13451] syzkaller0: entered promiscuous mode [ 616.260061][T13451] syzkaller0: entered allmulticast mode [ 616.266274][ T8897] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 616.274120][ T5772] usb usb5-port1: unable to enumerate USB device [ 616.305461][T13451] tipc: Enabled bearer , priority 0 [ 616.320170][T13450] tipc: Resetting bearer [ 616.393409][T13450] tipc: Disabling bearer [ 616.452868][ T8897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 616.471333][ T8897] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 616.516802][ T8897] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 616.543451][ T8897] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 616.588636][ T8897] usb 4-1: language id specifier not provided by device, defaulting to English [ 616.622348][ T8897] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 616.653343][ T8897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.667866][ T8897] usb 4-1: Product: @ [ 616.698443][ T8897] usb 4-1: SerialNumber: syz [ 617.193450][T13464] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2211'. [ 617.493680][T13464] dummy0 (unregistering): left allmulticast mode [ 618.269390][T13479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2223'. [ 618.279026][T13480] binder: 13477:13480 ioctl c008aeba 200000001880 returned -22 [ 618.302288][ T8897] usb 4-1: USB disconnect, device number 3 [ 618.307381][T13480] binder: 13477:13480 ioctl c0306201 2000000004c0 returned -22 [ 618.350032][T13483] binder: BINDER_SET_CONTEXT_MGR already set [ 618.382220][T13483] binder: 13477:13483 ioctl 4018620d 200000000100 returned -16 [ 618.482496][T13489] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2226'. [ 618.492690][T13489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2226'. [ 618.658279][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2229'. [ 618.864896][T13512] fuse: Unknown parameter 'rpoomtFF}L000' [ 618.906848][ T5772] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 619.077318][ T5772] usb 5-1: config 0 has no interfaces? [ 619.084434][ T5772] usb 5-1: config 0 has no interfaces? [ 619.092818][ T5772] usb 5-1: config 0 has no interfaces? [ 619.104807][ T5772] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 619.130692][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.166500][ T5772] usb 5-1: config 0 descriptor?? [ 619.207038][T13524] sg_read: process 1266 (syz.0.2237) changed security contexts after opening file descriptor, this is not allowed. [ 619.516749][ T5772] usb 5-1: USB disconnect, device number 11 [ 619.699078][T13539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2243'. [ 619.735577][T13541] FAULT_INJECTION: forcing a failure. [ 619.735577][T13541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.769839][T13541] CPU: 0 UID: 0 PID: 13541 Comm: syz.2.2244 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.769876][T13541] Tainted: [L]=SOFTLOCKUP [ 619.769884][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 619.769896][T13541] Call Trace: [ 619.769905][T13541] [ 619.769915][T13541] dump_stack_lvl+0xe8/0x150 [ 619.769946][T13541] should_fail_ex+0x412/0x560 [ 619.769976][T13541] _copy_from_user+0x2d/0xb0 [ 619.770004][T13541] ___sys_sendmsg+0x1c6/0x360 [ 619.770026][T13541] ? __lock_acquire+0x6b5/0x2cf0 [ 619.770054][T13541] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.770112][T13541] ? __fget_files+0x2a/0x420 [ 619.770139][T13541] ? __fget_files+0x3a0/0x420 [ 619.770174][T13541] __x64_sys_sendmsg+0x1bd/0x2a0 [ 619.770200][T13541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.770240][T13541] ? __pfx_ksys_write+0x10/0x10 [ 619.770280][T13541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.770303][T13541] do_syscall_64+0x174/0x580 [ 619.770326][T13541] ? trace_irq_disable+0x3b/0x140 [ 619.770357][T13541] ? clear_bhb_loop+0x40/0x90 [ 619.770383][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.770404][T13541] RIP: 0033:0x7faf14d9ce59 [ 619.770424][T13541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.770442][T13541] RSP: 002b:00007faf15b74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.770464][T13541] RAX: ffffffffffffffda RBX: 00007faf15015fa0 RCX: 00007faf14d9ce59 [ 619.770479][T13541] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 619.770492][T13541] RBP: 00007faf15b74090 R08: 0000000000000000 R09: 0000000000000000 [ 619.770504][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.770516][T13541] R13: 00007faf15016038 R14: 00007faf15015fa0 R15: 00007faf1513fa48 [ 619.770549][T13541] [ 620.497646][ T5763] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 620.516041][ T5772] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 620.687268][ T5763] usb 2-1: unable to get BOS descriptor or descriptor too short [ 620.705265][ T5772] usb 1-1: Using ep0 maxpacket: 32 [ 620.705960][ T5763] usb 2-1: not running at top speed; connect to a high speed hub [ 620.720534][ T5772] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.738016][ T5763] usb 2-1: config 251 has too many interfaces: 105, using maximum allowed: 32 [ 620.748538][ T5763] usb 2-1: config 251 has an invalid descriptor of length 30, skipping remainder of the config [ 620.760069][ T5772] usb 1-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 620.769475][ T5763] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 105 [ 620.787095][ T5763] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 620.799037][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.808568][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.819381][ T5763] usb 2-1: Product: syz [ 620.819393][ T5772] usb 1-1: Product: syz [ 620.819413][ T5772] usb 1-1: Manufacturer: syz [ 620.834798][ T5763] usb 2-1: Manufacturer: syz [ 620.842051][ T5763] usb 2-1: SerialNumber: syz [ 620.847915][ T5772] usb 1-1: SerialNumber: syz [ 620.945210][ T8897] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 621.068516][T13549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.085178][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.086498][ T8897] usb 4-1: device descriptor read/64, error -71 [ 621.097061][T13549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.116492][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.143073][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.165696][ T5763] usb 2-1: USB disconnect, device number 122 [ 621.199948][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.213737][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.223610][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.256639][ T5772] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 621.274305][ T5772] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 621.340260][ T5772] usb 1-1: USB disconnect, device number 17 [ 621.375312][ T8897] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 621.407702][ T9410] udevd[9410]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.518160][ T8897] usb 4-1: device descriptor read/64, error -71 [ 621.632848][T13573] FAULT_INJECTION: forcing a failure. [ 621.632848][T13573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.646505][ T8897] usb usb4-port1: attempt power cycle [ 621.655574][T13573] CPU: 1 UID: 0 PID: 13573 Comm: syz.2.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.655609][T13573] Tainted: [L]=SOFTLOCKUP [ 621.655617][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 621.655629][T13573] Call Trace: [ 621.655647][T13573] [ 621.655656][T13573] dump_stack_lvl+0xe8/0x150 [ 621.655688][T13573] should_fail_ex+0x412/0x560 [ 621.655718][T13573] _copy_from_user+0x2d/0xb0 [ 621.655746][T13573] __copy_msghdr+0x3c5/0x5b0 [ 621.655772][T13573] ___sys_sendmsg+0x213/0x360 [ 621.655792][T13573] ? __lock_acquire+0x6b5/0x2cf0 [ 621.655820][T13573] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.655877][T13573] ? __fget_files+0x2a/0x420 [ 621.655902][T13573] ? __fget_files+0x3a0/0x420 [ 621.655938][T13573] __x64_sys_sendmsg+0x1bd/0x2a0 [ 621.655961][T13573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.655993][T13573] ? __pfx_ksys_write+0x10/0x10 [ 621.656031][T13573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.656055][T13573] do_syscall_64+0x174/0x580 [ 621.656077][T13573] ? trace_irq_disable+0x3b/0x140 [ 621.656106][T13573] ? clear_bhb_loop+0x40/0x90 [ 621.656133][T13573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.656153][T13573] RIP: 0033:0x7faf14d9ce59 [ 621.656173][T13573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.656192][T13573] RSP: 002b:00007faf15b74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.656216][T13573] RAX: ffffffffffffffda RBX: 00007faf15015fa0 RCX: 00007faf14d9ce59 [ 621.656232][T13573] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 621.656245][T13573] RBP: 00007faf15b74090 R08: 0000000000000000 R09: 0000000000000000 [ 621.656258][T13573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.656275][T13573] R13: 00007faf15016038 R14: 00007faf15015fa0 R15: 00007faf1513fa48 [ 621.656308][T13573] [ 622.155124][ T8897] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 622.176412][ T8897] usb 4-1: device descriptor read/8, error -71 [ 622.206638][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 622.217321][T13591] openvswitch: netlink: Invalid VLAN frame [ 622.226742][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'. [ 622.279798][T13587] vimc link validate: Scaler:src:16x16 (0x33424752, 9, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 622.445157][ T8897] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 622.465881][ T8897] usb 4-1: device descriptor read/8, error -71 [ 622.515473][ T5762] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 622.575765][ T8897] usb usb4-port1: unable to enumerate USB device [ 622.597302][T13599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.676902][ T5762] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 622.692893][ T5762] usb 5-1: config 0 has no interface number 0 [ 622.703910][ T5762] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.724792][ T5762] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.745425][ T5762] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.775574][ T5762] usb 5-1: config 0 interface 1 has no altsetting 0 [ 622.784277][ T5762] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 622.805136][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.827894][ T5762] usb 5-1: config 0 descriptor?? [ 623.056479][T13605] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 623.067511][T13605] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 623.189481][ T5762] usbhid 5-1:0.1: can't add hid device: -71 [ 623.201303][ T5762] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 623.240376][ T5762] usb 5-1: USB disconnect, device number 12 [ 623.440015][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.463194][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.521027][T13618] FAULT_INJECTION: forcing a failure. [ 623.521027][T13618] name failslab, interval 1, probability 0, space 0, times 0 [ 623.546646][T13618] CPU: 0 UID: 0 PID: 13618 Comm: syz.1.2270 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.546684][T13618] Tainted: [L]=SOFTLOCKUP [ 623.546693][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 623.546706][T13618] Call Trace: [ 623.546714][T13618] [ 623.546724][T13618] dump_stack_lvl+0xe8/0x150 [ 623.546753][T13618] should_fail_ex+0x412/0x560 [ 623.546782][T13618] should_failslab+0xa8/0x100 [ 623.546811][T13618] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 623.546841][T13618] ? __alloc_skb+0x186/0x7d0 [ 623.546870][T13618] ? __alloc_skb+0x1d0/0x7d0 [ 623.546894][T13618] ? __local_bh_enable_ip+0xd0/0x130 [ 623.546921][T13618] __alloc_skb+0x1d0/0x7d0 [ 623.546951][T13618] ? process_measurement+0x451/0x1c80 [ 623.547042][T13618] alloc_skb_with_frags+0xc8/0x760 [ 623.547068][T13618] ? __lock_acquire+0x6b5/0x2cf0 [ 623.547094][T13618] sock_alloc_send_pskb+0x878/0x990 [ 623.547124][T13618] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 623.547154][T13618] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 623.547176][T13618] ? dev_get_by_index+0x22/0x2e0 [ 623.547218][T13618] ? dev_get_by_index+0x22/0x2e0 [ 623.547242][T13618] packet_sendmsg+0x315a/0x4fb0 [ 623.547288][T13618] ? unwind_next_frame+0xa6/0x2550 [ 623.547325][T13618] ? __pfx_packet_sendmsg+0x10/0x10 [ 623.547345][T13618] ? aa_sk_perm+0x6d5/0x900 [ 623.547393][T13618] ? __pfx_aa_sk_perm+0x10/0x10 [ 623.547414][T13618] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 623.547477][T13618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 623.547503][T13618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 623.547529][T13618] ____sys_sendmsg+0x972/0x9f0 [ 623.547554][T13618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.547578][T13618] ? import_iovec+0x73/0xa0 [ 623.547602][T13618] ___sys_sendmsg+0x2a5/0x360 [ 623.547617][T13618] ? __lock_acquire+0x6b5/0x2cf0 [ 623.547639][T13618] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.547683][T13618] ? __fget_files+0x2a/0x420 [ 623.547703][T13618] ? __fget_files+0x3a0/0x420 [ 623.547731][T13618] __x64_sys_sendmsg+0x1bd/0x2a0 [ 623.547750][T13618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 623.547774][T13618] ? __pfx_ksys_write+0x10/0x10 [ 623.547805][T13618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.547824][T13618] do_syscall_64+0x174/0x580 [ 623.547841][T13618] ? trace_irq_disable+0x3b/0x140 [ 623.547866][T13618] ? clear_bhb_loop+0x40/0x90 [ 623.547892][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.547911][T13618] RIP: 0033:0x7fdc0419ce59 [ 623.547928][T13618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.547943][T13618] RSP: 002b:00007fdc05108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.547962][T13618] RAX: ffffffffffffffda RBX: 00007fdc04415fa0 RCX: 00007fdc0419ce59 [ 623.547975][T13618] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 623.547986][T13618] RBP: 00007fdc05108090 R08: 0000000000000000 R09: 0000000000000000 [ 623.547996][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.548006][T13618] R13: 00007fdc04416038 R14: 00007fdc04415fa0 R15: 00007fdc0453fa48 [ 623.548032][T13618] [ 624.251127][T13621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2269'. [ 624.411808][T13626] [U] [ 624.414833][T13626] [U] [ 624.417522][T13626] [U] [ 624.420205][T13626] [U] [ 624.483889][T13626] [U] [ 624.486621][T13626] [U] [ 624.489316][T13626] [U] [ 624.492431][T13626] [U] [ 624.523839][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.531121][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.540253][T13626] [U] [ 624.543005][T13626] [U] [ 624.545730][T13626] [U] [ 624.548434][T13626] [U] [ 624.597275][ T29] audit: type=1326 audit(1780757658.829:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.0.2273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6cd99ce59 code=0x0 [ 624.621646][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 624.668586][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 624.715482][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 624.762373][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 624.839293][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 624.886269][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 624.933196][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 624.980121][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 625.022572][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 625.247723][T13639] FAULT_INJECTION: forcing a failure. [ 625.247723][T13639] name failslab, interval 1, probability 0, space 0, times 0 [ 625.293617][T13639] CPU: 0 UID: 0 PID: 13639 Comm: syz.1.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.293644][T13639] Tainted: [L]=SOFTLOCKUP [ 625.293649][T13639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.293657][T13639] Call Trace: [ 625.293662][T13639] [ 625.293669][T13639] dump_stack_lvl+0xe8/0x150 [ 625.293692][T13639] should_fail_ex+0x412/0x560 [ 625.293715][T13639] should_failslab+0xa8/0x100 [ 625.293729][T13639] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 625.293748][T13639] ? __alloc_skb+0x186/0x7d0 [ 625.293766][T13639] ? __alloc_skb+0x1d0/0x7d0 [ 625.293782][T13639] ? __local_bh_enable_ip+0xd0/0x130 [ 625.293798][T13639] __alloc_skb+0x1d0/0x7d0 [ 625.293819][T13639] netlink_sendmsg+0x5d4/0xb40 [ 625.293838][T13639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.293859][T13639] ? aa_sock_msg_perm+0xf1/0x1b0 [ 625.293879][T13639] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.293898][T13639] ____sys_sendmsg+0x972/0x9f0 [ 625.293912][T13639] ? __might_fault+0xaf/0x130 [ 625.293932][T13639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.293949][T13639] ? import_iovec+0x73/0xa0 [ 625.293967][T13639] ___sys_sendmsg+0x2a5/0x360 [ 625.293979][T13639] ? __lock_acquire+0x6b5/0x2cf0 [ 625.293999][T13639] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.294048][T13639] ? __fget_files+0x2a/0x420 [ 625.294065][T13639] ? __fget_files+0x3a0/0x420 [ 625.294086][T13639] __x64_sys_sendmsg+0x1bd/0x2a0 [ 625.294100][T13639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.294118][T13639] ? __pfx_ksys_write+0x10/0x10 [ 625.294141][T13639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.294155][T13639] do_syscall_64+0x174/0x580 [ 625.294169][T13639] ? trace_irq_disable+0x3b/0x140 [ 625.294195][T13639] ? clear_bhb_loop+0x40/0x90 [ 625.294210][T13639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.294223][T13639] RIP: 0033:0x7fdc0419ce59 [ 625.294237][T13639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.294248][T13639] RSP: 002b:00007fdc05108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.294263][T13639] RAX: ffffffffffffffda RBX: 00007fdc04415fa0 RCX: 00007fdc0419ce59 [ 625.294273][T13639] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 625.294281][T13639] RBP: 00007fdc05108090 R08: 0000000000000000 R09: 0000000000000000 [ 625.294289][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.294297][T13639] R13: 00007fdc04416038 R14: 00007fdc04415fa0 R15: 00007fdc0453fa48 [ 625.294315][T13639] [ 625.546476][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 625.593438][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 625.640364][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 625.687370][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 625.757931][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 625.860177][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 625.872793][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.895471][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.895752][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 625.952264][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 625.999160][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 626.046072][T13626] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 626.128661][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 626.169127][T13626] [U] [ 626.171014][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 626.171881][T13626] [U] [ 626.183626][T13626] [U] [ 626.186321][T13626] [U] [ 626.229427][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.262360][T13626] [U] [ 626.265081][T13626] [U] [ 626.267785][T13626] [U] [ 626.270484][T13626] [U] [ 626.330603][T13626] [U] [ 626.333323][T13626] [U] [ 626.336031][T13626] [U] [ 626.338738][T13626] [U] [ 626.349843][ T10] usb 4-1: config 0 descriptor?? [ 626.447821][T13626] [U] [ 626.450584][T13626] [U] [ 626.453308][T13626] [U] [ 626.456026][T13626] [U] [ 626.556131][T13626] [U] [ 626.558893][T13626] [U] [ 626.561622][T13626] [U] [ 626.564343][T13626] [U] [ 626.621859][T13626] [U] [ 626.624612][T13626] [U] [ 626.627335][T13626] [U] [ 626.630049][T13626] [U] [ 626.672262][T13626] [U] [ 626.675046][T13626] [U] [ 626.677773][T13626] [U] [ 626.680467][T13626] [U] [ 626.728291][T13626] [U] [ 626.731034][T13626] [U] [ 626.733741][T13626] [U] [ 626.736436][T13626] [U] [ 626.785370][T13626] [U] [ 626.788313][T13626] [U] [ 626.791033][T13626] [U] [ 626.793727][T13626] [U] [ 626.841282][T13626] [U] [ 626.844043][T13626] [U] [ 626.846782][T13626] [U] [ 626.849501][T13626] [U] [ 626.908311][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.003B/input/input46 [ 626.951472][T13626] [U] [ 626.954222][T13626] [U] [ 626.956915][T13626] [U] [ 626.959600][T13626] [U] [ 627.025561][T13626] [U] [ 627.028325][T13626] [U] [ 627.031048][T13626] [U] [ 627.033790][T13626] [U] [ 627.094626][T13626] [U] [ 627.097389][T13626] [U] [ 627.100110][T13626] [U] [ 627.102813][T13626] [U] [ 627.142385][T13626] [U] [ 627.145144][T13626] [U] [ 627.147867][T13626] [U] [ 627.150588][T13626] [U] [ 627.197121][T13626] [U] [ 627.199877][T13626] [U] [ 627.202604][T13626] [U] [ 627.205330][T13626] [U] [ 627.219462][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.003B/input/input47 [ 627.262898][T13626] [U] [ 627.265659][T13626] [U] [ 627.268370][T13626] [U] [ 627.271067][T13626] [U] [ 627.314434][T13626] [U] [ 627.317197][T13626] [U] [ 627.319926][T13626] [U] [ 627.322654][T13626] [U] [ 627.359825][ T10] kye 0003:0458:5013.003B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 627.368263][T13626] [U] [ 627.374755][T13626] [U] [ 627.377479][T13626] [U] [ 627.380189][T13626] [U] [ 627.443532][T13626] [U] [ 627.446305][T13626] [U] [ 627.449041][T13626] [U] [ 627.451752][T13626] [U] [ 627.457981][T13661] FAULT_INJECTION: forcing a failure. [ 627.457981][T13661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.486160][T13661] CPU: 1 UID: 0 PID: 13661 Comm: syz.1.2281 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.486198][T13661] Tainted: [L]=SOFTLOCKUP [ 627.486206][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 627.486218][T13661] Call Trace: [ 627.486227][T13661] [ 627.486237][T13661] dump_stack_lvl+0xe8/0x150 [ 627.486268][T13661] should_fail_ex+0x412/0x560 [ 627.486299][T13661] _copy_from_iter+0x3b0/0x1670 [ 627.486334][T13661] ? __pfx__copy_from_iter+0x10/0x10 [ 627.486368][T13661] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 627.486397][T13661] skb_copy_datagram_from_iter+0xf5/0x710 [ 627.486424][T13661] ? dev_get_by_index+0x22/0x2e0 [ 627.486447][T13661] ? skb_put+0x11b/0x210 [ 627.486480][T13661] packet_sendmsg+0x35b1/0x4fb0 [ 627.486536][T13661] ? unwind_next_frame+0xa6/0x2550 [ 627.486584][T13661] ? __pfx_packet_sendmsg+0x10/0x10 [ 627.486621][T13661] ? aa_sk_perm+0x6d5/0x900 [ 627.486659][T13661] ? __pfx_aa_sk_perm+0x10/0x10 [ 627.486685][T13661] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 627.486723][T13661] ? aa_sock_msg_perm+0xf1/0x1b0 [ 627.486754][T13661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.486786][T13661] ____sys_sendmsg+0x972/0x9f0 [ 627.486818][T13661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.486849][T13661] ? import_iovec+0x73/0xa0 [ 627.486878][T13661] ___sys_sendmsg+0x2a5/0x360 [ 627.486898][T13661] ? __lock_acquire+0x6b5/0x2cf0 [ 627.486926][T13661] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.486981][T13661] ? __fget_files+0x2a/0x420 [ 627.487006][T13661] ? __fget_files+0x3a0/0x420 [ 627.487042][T13661] __x64_sys_sendmsg+0x1bd/0x2a0 [ 627.487066][T13661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.487097][T13661] ? __pfx_ksys_write+0x10/0x10 [ 627.487134][T13661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.487158][T13661] do_syscall_64+0x174/0x580 [ 627.487180][T13661] ? trace_irq_disable+0x3b/0x140 [ 627.487210][T13661] ? clear_bhb_loop+0x40/0x90 [ 627.487235][T13661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.487256][T13661] RIP: 0033:0x7fdc0419ce59 [ 627.487276][T13661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.487295][T13661] RSP: 002b:00007fdc05108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.487319][T13661] RAX: ffffffffffffffda RBX: 00007fdc04415fa0 RCX: 00007fdc0419ce59 [ 627.487335][T13661] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 627.487348][T13661] RBP: 00007fdc05108090 R08: 0000000000000000 R09: 0000000000000000 [ 627.487361][T13661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.487373][T13661] R13: 00007fdc04416038 R14: 00007fdc04415fa0 R15: 00007fdc0453fa48 [ 627.487407][T13661] [ 628.024240][T13626] [U] [ 628.027009][T13626] [U] [ 628.029731][T13626] [U] [ 628.032450][T13626] [U] [ 628.255108][ T10] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 628.271685][T13626] [U] [ 628.286088][T13664] netlink: 'syz.4.2282': attribute type 17 has an invalid length. [ 628.334879][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2282'. [ 628.393243][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2282'. [ 628.444115][T13673] sctp: [Deprecated]: syz.2.2287 (pid 13673) Use of int in maxseg socket option. [ 628.444115][T13673] Use struct sctp_assoc_value instead [ 628.712089][T13664] gretap0: entered promiscuous mode [ 628.803317][T13664] gretap0: left promiscuous mode [ 628.867980][T13677] tipc: Enabled bearer , priority 10 [ 629.063135][ T5762] usb 4-1: USB disconnect, device number 8 [ 629.163466][T13693] FAULT_INJECTION: forcing a failure. [ 629.163466][T13693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.222108][T13693] CPU: 0 UID: 0 PID: 13693 Comm: syz.0.2293 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.222145][T13693] Tainted: [L]=SOFTLOCKUP [ 629.222154][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 629.222167][T13693] Call Trace: [ 629.222176][T13693] [ 629.222186][T13693] dump_stack_lvl+0xe8/0x150 [ 629.222218][T13693] should_fail_ex+0x412/0x560 [ 629.222248][T13693] _copy_from_iter+0x3b0/0x1670 [ 629.222285][T13693] ? __pfx__copy_from_iter+0x10/0x10 [ 629.222319][T13693] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 629.222345][T13693] skb_copy_datagram_from_iter+0xf5/0x710 [ 629.222370][T13693] ? dev_get_by_index+0x22/0x2e0 [ 629.222394][T13693] ? skb_put+0x11b/0x210 [ 629.222428][T13693] packet_sendmsg+0x35b1/0x4fb0 [ 629.222482][T13693] ? unwind_next_frame+0xa6/0x2550 [ 629.222529][T13693] ? __pfx_packet_sendmsg+0x10/0x10 [ 629.222553][T13693] ? aa_sk_perm+0x6d5/0x900 [ 629.222590][T13693] ? __pfx_aa_sk_perm+0x10/0x10 [ 629.222615][T13693] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 629.222662][T13693] ? aa_sock_msg_perm+0xf1/0x1b0 [ 629.222693][T13693] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.222724][T13693] ____sys_sendmsg+0x972/0x9f0 [ 629.222755][T13693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.222785][T13693] ? import_iovec+0x73/0xa0 [ 629.222813][T13693] ___sys_sendmsg+0x2a5/0x360 [ 629.222833][T13693] ? __lock_acquire+0x6b5/0x2cf0 [ 629.222860][T13693] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.222917][T13693] ? __fget_files+0x2a/0x420 [ 629.222942][T13693] ? __fget_files+0x3a0/0x420 [ 629.222978][T13693] __x64_sys_sendmsg+0x1bd/0x2a0 [ 629.223002][T13693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.223034][T13693] ? __pfx_ksys_write+0x10/0x10 [ 629.223072][T13693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.223096][T13693] do_syscall_64+0x174/0x580 [ 629.223118][T13693] ? trace_irq_disable+0x3b/0x140 [ 629.223149][T13693] ? clear_bhb_loop+0x40/0x90 [ 629.223173][T13693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.223194][T13693] RIP: 0033:0x7fd6cd99ce59 [ 629.223216][T13693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.223235][T13693] RSP: 002b:00007fd6ce812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.223260][T13693] RAX: ffffffffffffffda RBX: 00007fd6cdc15fa0 RCX: 00007fd6cd99ce59 [ 629.223277][T13693] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 629.223289][T13693] RBP: 00007fd6ce812090 R08: 0000000000000000 R09: 0000000000000000 [ 629.223303][T13693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.223316][T13693] R13: 00007fd6cdc16038 R14: 00007fd6cdc15fa0 R15: 00007fd6cdd3fa48 [ 629.223349][T13693] [ 629.572444][T13699] ip6tnl0: Caught tx_queue_len zero misconfig [ 629.707318][T13664] netlink: 'syz.4.2282': attribute type 15 has an invalid length. [ 629.727809][T13705] fuse: Unknown parameter '000000000000000000030x0000000000000005' [ 629.736612][T13664] netlink: 'syz.4.2282': attribute type 7 has an invalid length. [ 629.744378][T13664] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2282'. [ 630.021898][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 630.097007][ T5762] tipc: Node number set to 2293951571 [ 630.104193][T13714] syzkaller0: entered promiscuous mode [ 630.121831][T13714] syzkaller0: entered allmulticast mode [ 630.138044][T13708] tipc: Enabled bearer , priority 0 [ 630.164611][T13707] tipc: Resetting bearer [ 630.201307][T13707] tipc: Disabling bearer [ 630.270798][T13727] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2303'. [ 630.442371][T13729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.456035][T13729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.525160][ T8897] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 630.685397][ T8897] usb 1-1: Using ep0 maxpacket: 8 [ 630.713326][ T8897] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 630.760594][ T8897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 630.778287][T13738] FAULT_INJECTION: forcing a failure. [ 630.778287][T13738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.797516][ T8897] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 630.800825][T13738] CPU: 0 UID: 0 PID: 13738 Comm: syz.4.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.800857][T13738] Tainted: [L]=SOFTLOCKUP [ 630.800864][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 630.800876][T13738] Call Trace: [ 630.800883][T13738] [ 630.800892][T13738] dump_stack_lvl+0xe8/0x150 [ 630.800920][T13738] should_fail_ex+0x412/0x560 [ 630.800952][T13738] _copy_to_user+0x31/0xb0 [ 630.800978][T13738] simple_read_from_buffer+0xe1/0x170 [ 630.801008][T13738] proc_fail_nth_read+0x1bb/0x230 [ 630.801035][T13738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.801063][T13738] ? rw_verify_area+0x2a6/0x4d0 [ 630.801090][T13738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.801125][T13738] vfs_read+0x20c/0xa70 [ 630.801156][T13738] ? __pfx___mutex_lock+0x10/0x10 [ 630.801180][T13738] ? __pfx_vfs_read+0x10/0x10 [ 630.801208][T13738] ? __fget_files+0x2a/0x420 [ 630.801235][T13738] ? __fget_files+0x3a0/0x420 [ 630.801257][T13738] ? __fget_files+0x2a/0x420 [ 630.801289][T13738] ksys_read+0x150/0x270 [ 630.801317][T13738] ? __pfx_ksys_read+0x10/0x10 [ 630.801352][T13738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.801373][T13738] do_syscall_64+0x174/0x580 [ 630.801392][T13738] ? trace_irq_disable+0x3b/0x140 [ 630.801420][T13738] ? clear_bhb_loop+0x40/0x90 [ 630.801444][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.801463][T13738] RIP: 0033:0x7f44a3b5d68e [ 630.801482][T13738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 630.801498][T13738] RSP: 002b:00007f44a4a19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 630.801540][T13738] RAX: ffffffffffffffda RBX: 00007f44a4a1a6c0 RCX: 00007f44a3b5d68e [ 630.801555][T13738] RDX: 000000000000000f RSI: 00007f44a4a1a0a0 RDI: 0000000000000004 [ 630.801567][T13738] RBP: 00007f44a4a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 630.801578][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.801590][T13738] R13: 00007f44a3e16038 R14: 00007f44a3e15fa0 R15: 00007f44a3f3fa48 [ 630.801620][T13738] [ 631.045334][ T8897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.053691][ T8897] usb 1-1: Product: syz [ 631.058428][ T8897] usb 1-1: Manufacturer: syz [ 631.063079][ T8897] usb 1-1: SerialNumber: syz [ 631.087854][T13746] bridge0: port 3(macvlan0) entered blocking state [ 631.118332][T13746] bridge0: port 3(macvlan0) entered disabled state [ 631.138248][T13746] macvlan0: entered allmulticast mode [ 631.150236][ T8897] usb 1-1: config 0 descriptor?? [ 631.156104][T13749] FAULT_INJECTION: forcing a failure. [ 631.156104][T13749] name failslab, interval 1, probability 0, space 0, times 0 [ 631.166225][T13746] bridge0: entered allmulticast mode [ 631.189397][ T8897] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 631.196422][T13749] CPU: 0 UID: 0 PID: 13749 Comm: syz.4.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.196456][T13749] Tainted: [L]=SOFTLOCKUP [ 631.196464][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.196477][T13749] Call Trace: [ 631.196485][T13749] [ 631.196495][T13749] dump_stack_lvl+0xe8/0x150 [ 631.196541][T13749] should_fail_ex+0x412/0x560 [ 631.196571][T13749] should_failslab+0xa8/0x100 [ 631.196595][T13749] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 631.196625][T13749] ? __alloc_skb+0x186/0x7d0 [ 631.196654][T13749] ? __alloc_skb+0x1d0/0x7d0 [ 631.196680][T13749] ? __local_bh_enable_ip+0xd0/0x130 [ 631.196707][T13749] __alloc_skb+0x1d0/0x7d0 [ 631.196741][T13749] netlink_sendmsg+0x5d4/0xb40 [ 631.196773][T13749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.196808][T13749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.196842][T13749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.196874][T13749] ____sys_sendmsg+0x972/0x9f0 [ 631.196895][T13749] ? __might_fault+0xaf/0x130 [ 631.196929][T13749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.196959][T13749] ? import_iovec+0x73/0xa0 [ 631.196989][T13749] ___sys_sendmsg+0x2a5/0x360 [ 631.197010][T13749] ? __lock_acquire+0x6b5/0x2cf0 [ 631.197038][T13749] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.197096][T13749] ? __fget_files+0x2a/0x420 [ 631.197121][T13749] ? __fget_files+0x3a0/0x420 [ 631.197157][T13749] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.197181][T13749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.197213][T13749] ? __pfx_ksys_write+0x10/0x10 [ 631.197252][T13749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.197276][T13749] do_syscall_64+0x174/0x580 [ 631.197299][T13749] ? trace_irq_disable+0x3b/0x140 [ 631.197329][T13749] ? clear_bhb_loop+0x40/0x90 [ 631.197356][T13749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.197377][T13749] RIP: 0033:0x7f44a3b9ce59 [ 631.197398][T13749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.197415][T13749] RSP: 002b:00007f44a4a1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.197443][T13749] RAX: ffffffffffffffda RBX: 00007f44a3e15fa0 RCX: 00007f44a3b9ce59 [ 631.197459][T13749] RDX: 0000000000008090 RSI: 0000200000000100 RDI: 0000000000000003 [ 631.197472][T13749] RBP: 00007f44a4a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 631.197485][T13749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.197498][T13749] R13: 00007f44a3e16038 R14: 00007f44a3e15fa0 R15: 00007f44a3f3fa48 [ 631.197540][T13749] [ 631.201026][T13746] bridge0: entered promiscuous mode [ 631.452470][T13763] FAULT_INJECTION: forcing a failure. [ 631.452470][T13763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.480165][ T8897] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 631.501787][T13763] CPU: 1 UID: 0 PID: 13763 Comm: syz.2.2316 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.501824][T13763] Tainted: [L]=SOFTLOCKUP [ 631.501832][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.501845][T13763] Call Trace: [ 631.501855][T13763] [ 631.501865][T13763] dump_stack_lvl+0xe8/0x150 [ 631.501900][T13763] should_fail_ex+0x412/0x560 [ 631.501933][T13763] _copy_from_user+0x2d/0xb0 [ 631.501960][T13763] kstrtouint_from_user+0xd6/0x180 [ 631.502047][T13763] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 631.502087][T13763] proc_fail_nth_write+0x8e/0x210 [ 631.502118][T13763] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 631.502152][T13763] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 631.502182][T13763] vfs_write+0x29a/0xb90 [ 631.502224][T13763] ? __pfx_vfs_write+0x10/0x10 [ 631.502256][T13763] ? __fget_files+0x2a/0x420 [ 631.502287][T13763] ? __fget_files+0x3a0/0x420 [ 631.502313][T13763] ? __fget_files+0x2a/0x420 [ 631.502348][T13763] ksys_write+0x150/0x270 [ 631.502381][T13763] ? __pfx_ksys_write+0x10/0x10 [ 631.502420][T13763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.502445][T13763] do_syscall_64+0x174/0x580 [ 631.502468][T13763] ? trace_irq_disable+0x3b/0x140 [ 631.502500][T13763] ? clear_bhb_loop+0x40/0x90 [ 631.502527][T13763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.502548][T13763] RIP: 0033:0x7faf14d5d68e [ 631.502578][T13763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 631.502597][T13763] RSP: 002b:00007faf15b73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 631.502622][T13763] RAX: ffffffffffffffda RBX: 00007faf15b746c0 RCX: 00007faf14d5d68e [ 631.502638][T13763] RDX: 0000000000000001 RSI: 00007faf15b740a0 RDI: 0000000000000004 [ 631.502652][T13763] RBP: 00007faf15b74090 R08: 0000000000000000 R09: 0000000000000000 [ 631.502665][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.502678][T13763] R13: 00007faf15016038 R14: 00007faf15015fa0 R15: 00007faf1513fa48 [ 631.502712][T13763] [ 631.504335][ T8897] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 631.729802][T13746] macvlan0: left allmulticast mode [ 631.738656][T13746] bridge0: left allmulticast mode [ 631.756213][ T8897] usb 1-1: USB disconnect, device number 18 [ 631.810005][ T5772] bridge0: left promiscuous mode [ 631.852978][T13767] random: crng reseeded on system resumption [ 631.971988][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'. [ 632.103598][T13776] loop5: detected capacity change from 0 to 6 [ 632.126230][T13776] Dev loop5: unable to read RDB block 6 [ 632.142146][T13776] loop5: unable to read partition table [ 632.143823][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 632.162791][T13776] loop5: partition table beyond EOD, truncated [ 632.173598][T13776] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 632.192577][T13779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'. [ 632.356988][T13784] fuse: Bad value for 'fd' [ 632.384118][T13786] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 632.392175][T13789] loop5: detected capacity change from 0 to 6 [ 632.404616][T13789] Dev loop5: unable to read RDB block 6 [ 632.410989][T13789] loop5: unable to read partition table [ 632.421523][T13789] loop5: partition table beyond EOD, truncated [ 632.429367][T13789] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 632.735128][ T5762] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 632.766280][T13807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.776164][T13807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.805644][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 632.845164][ T809] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 632.907452][ T5762] usb 1-1: unable to get BOS descriptor or descriptor too short [ 632.916501][ T5762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.926674][ T5762] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 632.935966][ T10] usb 4-1: device descriptor read/64, error -71 [ 632.942333][ T5762] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 632.956131][ T5762] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 632.965219][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.973209][ T5762] usb 1-1: Product: syz [ 632.977752][ T5762] usb 1-1: Manufacturer: syz [ 632.982588][ T5762] usb 1-1: SerialNumber: syz [ 633.009174][ T809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 633.018453][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.026723][ T809] usb 2-1: Product: syz [ 633.030958][ T809] usb 2-1: Manufacturer: syz [ 633.035626][ T809] usb 2-1: SerialNumber: syz [ 633.042488][ T809] usb 2-1: config 0 descriptor?? [ 633.195200][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 633.215622][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2330'. [ 633.252948][ T5762] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 633.262064][ T809] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 633.271689][ T5762] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 633.279216][ T5762] usb 1-1: 1:1 : unsupported format bits 0x33820006 [ 633.286081][ T5762] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 633.300718][ T5762] usb 1-1: unit 2 not found! [ 633.305466][ T5762] usb 1-1: unit 0 not found! [ 633.355106][ T10] usb 4-1: device descriptor read/64, error -71 [ 633.415321][ T5762] usb 1-1: USB disconnect, device number 19 [ 633.486141][ T10] usb usb4-port1: attempt power cycle [ 633.487294][ T8897] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 633.542503][ T9454] udevd[9454]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.581646][ T809] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 633.637556][ T809] usb 2-1: USB disconnect, device number 123 [ 633.655430][ T8897] usb 5-1: device descriptor read/64, error -71 [ 633.673513][T13819] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2339'. [ 633.836045][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 633.875850][ T10] usb 4-1: device descriptor read/8, error -71 [ 633.883094][T13824] loop5: detected capacity change from 0 to 6 [ 633.891736][T13824] Dev loop5: unable to read RDB block 6 [ 633.898433][T13824] loop5: unable to read partition table [ 633.904519][T13824] loop5: partition table beyond EOD, truncated [ 633.914254][T13824] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 633.924348][ T8897] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 634.005156][ T809] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 634.084388][ T8897] usb 5-1: device descriptor read/64, error -71 [ 634.125105][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 634.158212][ T10] usb 4-1: device descriptor read/8, error -71 [ 634.188833][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 634.197790][ T8897] usb usb5-port1: attempt power cycle [ 634.206849][ T809] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 634.227123][ T809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 634.241508][ T809] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 634.290078][ T10] usb usb4-port1: unable to enumerate USB device [ 634.311536][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.327244][ T809] usb 2-1: Product: syz [ 634.331458][ T809] usb 2-1: Manufacturer: syz [ 634.337092][ T809] usb 2-1: SerialNumber: syz [ 634.345122][ T5762] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 634.354038][ T809] usb 2-1: config 0 descriptor?? [ 634.362771][ T809] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 634.510561][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.524199][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.536317][ T5762] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 634.555213][ T5762] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 634.555262][ T8897] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 634.565078][ T5762] usb 1-1: Manufacturer: syz [ 634.581965][ T809] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 634.593217][ T5762] usb 1-1: config 0 descriptor?? [ 634.604852][ T809] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 634.606937][ T8897] usb 5-1: device descriptor read/8, error -71 [ 634.787629][ T809] usb 2-1: USB disconnect, device number 124 [ 634.895784][ T8897] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 634.916066][ T8897] usb 5-1: device descriptor read/8, error -71 [ 635.025278][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.037401][ T8897] usb usb5-port1: unable to enumerate USB device [ 635.055780][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.083705][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.095904][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.154901][ T5762] usbhid 1-1:0.0: can't add hid device: -71 [ 635.177956][ T5762] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 635.196577][ T5762] usb 1-1: USB disconnect, device number 20 [ 635.374832][T13852] FAULT_INJECTION: forcing a failure. [ 635.374832][T13852] name failslab, interval 1, probability 0, space 0, times 0 [ 635.405113][T13852] CPU: 1 UID: 0 PID: 13852 Comm: syz.2.2350 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.405149][T13852] Tainted: [L]=SOFTLOCKUP [ 635.405158][T13852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.405170][T13852] Call Trace: [ 635.405180][T13852] [ 635.405189][T13852] dump_stack_lvl+0xe8/0x150 [ 635.405236][T13852] should_fail_ex+0x412/0x560 [ 635.405266][T13852] should_failslab+0xa8/0x100 [ 635.405292][T13852] __kmalloc_cache_noprof+0x88/0x660 [ 635.405323][T13852] ? ip6_setup_cork+0x60f/0xf30 [ 635.405448][T13852] ? __lock_acquire+0x6b5/0x2cf0 [ 635.405478][T13852] ip6_setup_cork+0x60f/0xf30 [ 635.405519][T13852] ip6_make_skb+0x1c8/0x320 [ 635.405540][T13852] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 635.405632][T13852] ? __pfx_ip6_make_skb+0x10/0x10 [ 635.405651][T13852] ? ip6_dst_hoplimit+0x65/0x3e0 [ 635.405694][T13852] ? ip6_dst_hoplimit+0x65/0x3e0 [ 635.405718][T13852] ? ip6_dst_hoplimit+0x65/0x3e0 [ 635.405751][T13852] udpv6_sendmsg+0x1db8/0x25c0 [ 635.405840][T13852] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 635.405868][T13852] ? udp_lib_get_port+0x177a/0x1c60 [ 635.405971][T13852] ? ip6_datagram_release_cb+0x7c/0x550 [ 635.406040][T13852] ? inet_send_prepare+0x1b9/0x270 [ 635.406085][T13852] ? inet_send_prepare+0x1b9/0x270 [ 635.406113][T13852] ? inet_send_prepare+0x1b9/0x270 [ 635.406134][T13852] ? __local_bh_enable_ip+0xd0/0x130 [ 635.406159][T13852] ? inet_send_prepare+0x1b9/0x270 [ 635.406189][T13852] ? inet6_sendmsg+0xe4/0x120 [ 635.406227][T13852] ____sys_sendmsg+0x5c7/0x9f0 [ 635.406260][T13852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.406292][T13852] ? import_iovec+0x73/0xa0 [ 635.406323][T13852] ___sys_sendmsg+0x2a5/0x360 [ 635.406345][T13852] ? __lock_acquire+0x6b5/0x2cf0 [ 635.406373][T13852] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.406434][T13852] ? __fget_files+0x2a/0x420 [ 635.406460][T13852] ? __fget_files+0x3a0/0x420 [ 635.406498][T13852] __x64_sys_sendmsg+0x1bd/0x2a0 [ 635.406525][T13852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.406558][T13852] ? __pfx_ksys_write+0x10/0x10 [ 635.406598][T13852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.406623][T13852] do_syscall_64+0x174/0x580 [ 635.406646][T13852] ? trace_irq_disable+0x3b/0x140 [ 635.406678][T13852] ? clear_bhb_loop+0x40/0x90 [ 635.406705][T13852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.406727][T13852] RIP: 0033:0x7faf14d9ce59 [ 635.406749][T13852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.406768][T13852] RSP: 002b:00007faf15b74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.406794][T13852] RAX: ffffffffffffffda RBX: 00007faf15015fa0 RCX: 00007faf14d9ce59 [ 635.406811][T13852] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 635.406826][T13852] RBP: 00007faf15b74090 R08: 0000000000000000 R09: 0000000000000000 [ 635.406842][T13852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.406855][T13852] R13: 00007faf15016038 R14: 00007faf15015fa0 R15: 00007faf1513fa48 [ 635.406891][T13852] [ 635.805582][T13857] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2352'. [ 635.871882][T13863] loop5: detected capacity change from 0 to 6 [ 635.888038][T13863] Dev loop5: unable to read RDB block 6 [ 635.925908][T13863] loop5: unable to read partition table [ 635.950088][T13863] loop5: partition table beyond EOD, truncated [ 635.978122][T13863] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 636.325234][T13875] netlink: 'syz.3.2359': attribute type 5 has an invalid length. [ 636.340939][T13875] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2359'. [ 636.471606][T13882] loop5: detected capacity change from 0 to 6 [ 636.515567][T13882] Dev loop5: unable to read RDB block 6 [ 636.541514][T13882] loop5: unable to read partition table [ 636.565797][T13882] loop5: partition table beyond EOD, truncated [ 636.584131][T13882] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 636.782183][T13875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.797746][T13875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.837198][ T5762] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 636.896251][T13875] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 636.975097][ T5762] usb 5-1: device descriptor read/64, error -71 [ 636.999365][ T3303] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.023948][ T3303] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.053801][ T3303] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.166997][T13903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.195688][T13903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.213040][ T3303] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.217940][ T5762] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 637.251568][ T3303] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.280469][ T3303] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.304307][ T3303] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.316262][ T3303] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.357110][ T5762] usb 5-1: device descriptor read/64, error -71 [ 637.475353][ T5762] usb usb5-port1: attempt power cycle [ 637.587392][T13925] loop5: detected capacity change from 0 to 6 [ 637.596517][T13925] Dev loop5: unable to read RDB block 6 [ 637.602271][T13925] loop5: unable to read partition table [ 637.609945][T13925] loop5: partition table beyond EOD, truncated [ 637.617044][T13925] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 637.691822][T13927] syzkaller0: entered promiscuous mode [ 637.699387][T13927] syzkaller0: entered allmulticast mode [ 637.750279][T13927] tipc: Enabled bearer , priority 0 [ 637.764774][T13926] tipc: Resetting bearer [ 637.775506][ T24] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 637.824867][ T5762] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 637.837588][T13926] tipc: Disabling bearer [ 637.857447][ T5762] usb 5-1: device descriptor read/8, error -71 [ 637.869959][T13933] 8021q: VLANs not supported on wg1 [ 637.949303][ T24] usb 2-1: config 5 has an invalid interface number: 183 but max is 0 [ 637.965019][ T24] usb 2-1: config 5 has no interface number 0 [ 637.981031][ T24] usb 2-1: config 5 interface 183 has no altsetting 0 [ 637.999052][ T24] usb 2-1: New USB device found, idVendor=06bd, idProduct=0404, bcdDevice=6e.6a [ 638.015039][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.029235][ T24] usb 2-1: Product: syz [ 638.037235][ T24] usb 2-1: Manufacturer: syz [ 638.041498][T13939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.041894][ T24] usb 2-1: SerialNumber: syz [ 638.051204][T13937] tipc: Enabled bearer , priority 0 [ 638.063367][T13939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.085486][T13898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 638.107891][T13936] tipc: Disabling bearer [ 638.115462][ T5762] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 638.135851][ T5762] usb 5-1: device descriptor read/8, error -71 [ 638.235117][T13898] usb 4-1: Using ep0 maxpacket: 32 [ 638.244357][T13898] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.253253][ T5762] usb usb5-port1: unable to enumerate USB device [ 638.259870][T13898] usb 4-1: config 0 has no interface number 0 [ 638.271496][T13898] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 638.282818][T13898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.291161][T13898] usb 4-1: Product: syz [ 638.298703][ T29] audit: type=1326 audit(1780757672.529:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf14d9ce59 code=0x0 [ 638.298895][T13898] usb 4-1: Manufacturer: syz [ 638.327549][T13898] usb 4-1: SerialNumber: syz [ 638.335341][T13898] usb 4-1: config 0 descriptor?? [ 638.343808][T13898] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 638.357733][T13898] usb 4-1: selecting invalid altsetting 1 [ 638.365685][T13898] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 638.378532][T13898] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 638.387115][T13944] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 638.392789][T13898] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 638.399958][T13944] block device autoloading is deprecated and will be removed. [ 638.408599][T13898] usb 4-1: media controller created [ 638.441579][T13898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 638.495523][ T8896] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 638.645352][ T8896] usb 1-1: Using ep0 maxpacket: 16 [ 638.655425][ T8896] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 638.664954][ T8896] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 638.673824][ T8896] usb 1-1: Manufacturer: syz [ 638.679479][ T8896] usb 1-1: SerialNumber: syz [ 638.694473][ T8896] usb 1-1: config 0 descriptor?? [ 638.704608][ T8896] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 638.716159][ T8896] usb 1-1: Detected SIO [ 638.723879][ T8896] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 638.911581][ T8896] usb 1-1: USB disconnect, device number 21 [ 638.932936][ T8896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 638.952295][ T8896] ftdi_sio 1-1:0.0: device disconnected [ 638.985748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.996198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.013811][T13946] kvm: emulating exchange as write [ 639.545872][T13898] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 639.559333][T13898] zl10353_read_register: readreg error (reg=127, ret==-110) [ 639.575673][T13932] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 639.616680][T13898] usb 4-1: USB disconnect, device number 13 [ 640.333196][T13962] loop5: detected capacity change from 0 to 6 [ 640.349771][ T24] gspca_main: spca500-2.14.0 probing 06bd:0404 [ 640.370907][T13962] Dev loop5: unable to read RDB block 6 [ 640.382281][ T24] usb 2-1: USB disconnect, device number 125 [ 640.393835][T13962] loop5: unable to read partition table [ 640.415221][T13962] loop5: partition table beyond EOD, truncated [ 640.456318][T13962] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 640.670978][ T29] audit: type=1326 audit(1780757674.899:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.4.2388" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 640.749067][T13972] syzkaller0: entered promiscuous mode [ 640.754721][ T29] audit: type=1326 audit(1780757674.899:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.4.2388" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 640.784085][T13972] syzkaller0: entered allmulticast mode [ 640.796268][ T29] audit: type=1326 audit(1780757674.899:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.4.2388" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 640.821126][ T29] audit: type=1326 audit(1780757674.899:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.4.2388" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 640.848041][ T29] audit: type=1326 audit(1780757674.899:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.4.2388" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a3b9ce59 code=0x7ffc0000 [ 640.892392][T13977] tipc: Enabled bearer , priority 0 [ 640.958255][T13971] tipc: Resetting bearer [ 641.016665][T13971] tipc: Disabling bearer [ 641.047572][T13979] tipc: Enabled bearer , priority 0 [ 641.141876][T13978] tipc: Disabling bearer [ 641.229595][T13992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.241197][T13992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.302469][T13986] bond2: entered promiscuous mode [ 641.485640][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 641.645539][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 641.655487][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 641.664785][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.677272][ T24] usb 1-1: Product: syz [ 641.681865][ T24] usb 1-1: Manufacturer: syz [ 641.686859][ T24] usb 1-1: SerialNumber: syz [ 641.695247][ T24] usb 1-1: config 0 descriptor?? [ 641.709993][ T24] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 641.862497][T14011] loop5: detected capacity change from 0 to 6 [ 641.879900][T14011] Dev loop5: unable to read RDB block 6 [ 641.889278][T14011] loop5: unable to read partition table [ 641.899185][T14011] loop5: partition table beyond EOD, truncated [ 641.909099][T14011] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 641.935794][ T24] pwc: send_video_command error -71 [ 641.954916][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 641.977221][ T24] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 642.014366][ T24] usb 1-1: USB disconnect, device number 22 [ 642.265222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.267833][T14020] syzkaller0: entered promiscuous mode [ 642.275430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.287350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.287714][T14020] syzkaller0: entered allmulticast mode [ 642.361960][T14020] tipc: Enabled bearer , priority 0 [ 642.394059][T14019] tipc: Resetting bearer [ 642.452648][T14019] tipc: Disabling bearer [ 642.623306][T14032] netlink: set zone limit has 4 unknown bytes [ 642.645091][ T8886] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 642.709798][T14036] FAULT_INJECTION: forcing a failure. [ 642.709798][T14036] name failslab, interval 1, probability 0, space 0, times 0 [ 642.735716][T14036] CPU: 1 UID: 0 PID: 14036 Comm: syz.1.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.735752][T14036] Tainted: [L]=SOFTLOCKUP [ 642.735760][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.735771][T14036] Call Trace: [ 642.735780][T14036] [ 642.735789][T14036] dump_stack_lvl+0xe8/0x150 [ 642.735820][T14036] should_fail_ex+0x412/0x560 [ 642.735848][T14036] should_failslab+0xa8/0x100 [ 642.735871][T14036] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 642.735901][T14036] ? __alloc_skb+0x186/0x7d0 [ 642.735930][T14036] ? __alloc_skb+0x1d0/0x7d0 [ 642.735956][T14036] ? __local_bh_enable_ip+0xd0/0x130 [ 642.735983][T14036] __alloc_skb+0x1d0/0x7d0 [ 642.736011][T14036] ? __might_fault+0xaf/0x130 [ 642.736041][T14036] alloc_skb_with_frags+0xc8/0x760 [ 642.736086][T14036] sock_alloc_send_pskb+0x878/0x990 [ 642.736127][T14036] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 642.736168][T14036] tun_get_user+0x5df/0x43e0 [ 642.736299][T14036] ? aa_file_perm+0x192/0x15e0 [ 642.736325][T14036] ? aa_file_perm+0x50e/0x15e0 [ 642.736346][T14036] ? __pfx_tun_get_user+0x10/0x10 [ 642.736370][T14036] ? __lock_acquire+0x6b5/0x2cf0 [ 642.736397][T14036] ? kstrtoull+0x12f/0x1d0 [ 642.736436][T14036] ? ref_tracker_alloc+0x35c/0x4c0 [ 642.736464][T14036] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 642.736490][T14036] ? tun_get+0x1c/0x2f0 [ 642.736511][T14036] ? tun_get+0x1c/0x2f0 [ 642.736538][T14036] ? tun_get+0x1c/0x2f0 [ 642.736557][T14036] ? tun_get+0x1c/0x2f0 [ 642.736583][T14036] tun_chr_write_iter+0x113/0x200 [ 642.736646][T14036] vfs_write+0x61d/0xb90 [ 642.736684][T14036] ? __pfx_vfs_write+0x10/0x10 [ 642.736728][T14036] ? __fget_files+0x2a/0x420 [ 642.736761][T14036] ksys_write+0x150/0x270 [ 642.736793][T14036] ? __pfx_ksys_write+0x10/0x10 [ 642.736831][T14036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.736856][T14036] do_syscall_64+0x174/0x580 [ 642.736878][T14036] ? trace_irq_disable+0x3b/0x140 [ 642.736908][T14036] ? clear_bhb_loop+0x40/0x90 [ 642.736934][T14036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.736955][T14036] RIP: 0033:0x7fdc0419ce59 [ 642.736976][T14036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.736994][T14036] RSP: 002b:00007fdc05108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 642.737017][T14036] RAX: ffffffffffffffda RBX: 00007fdc04415fa0 RCX: 00007fdc0419ce59 [ 642.737033][T14036] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 642.737046][T14036] RBP: 00007fdc05108090 R08: 0000000000000000 R09: 0000000000000000 [ 642.737058][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.737071][T14036] R13: 00007fdc04416038 R14: 00007fdc04415fa0 R15: 00007fdc0453fa48 [ 642.737103][T14036] [ 643.125169][ T8886] usb 5-1: Using ep0 maxpacket: 32 [ 643.132459][ T8886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 643.142860][ T8886] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7 [ 643.160834][ T8886] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.176892][ T8886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.184928][ T8886] usb 5-1: Product: syz [ 643.189201][ T8886] usb 5-1: Manufacturer: syz [ 643.193818][ T8886] usb 5-1: SerialNumber: syz [ 643.217052][T14043] FAULT_INJECTION: forcing a failure. [ 643.217052][T14043] name failslab, interval 1, probability 0, space 0, times 0 [ 643.247216][T14043] CPU: 0 UID: 0 PID: 14043 Comm: syz.0.2414 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.247257][T14043] Tainted: [L]=SOFTLOCKUP [ 643.247264][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 643.247277][T14043] Call Trace: [ 643.247285][T14043] [ 643.247295][T14043] dump_stack_lvl+0xe8/0x150 [ 643.247325][T14043] should_fail_ex+0x412/0x560 [ 643.247354][T14043] should_failslab+0xa8/0x100 [ 643.247379][T14043] __kmalloc_cache_noprof+0x88/0x660 [ 643.247410][T14043] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 643.247511][T14043] ? __genradix_ptr+0x1e1/0x220 [ 643.247542][T14043] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 643.247576][T14043] sctp_association_new+0x15d3/0x25e0 [ 643.247671][T14043] sctp_connect_new_asoc+0x2e4/0x6b0 [ 643.247740][T14043] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 643.247774][T14043] ? __local_bh_enable_ip+0xd0/0x130 [ 643.247795][T14043] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 643.247826][T14043] ? security_sctp_bind_connect+0x7e/0x2c0 [ 643.247882][T14043] sctp_sendmsg+0x1576/0x2c50 [ 643.247932][T14043] ? __pfx_sctp_sendmsg+0x10/0x10 [ 643.247963][T14043] ? aa_sk_perm+0x6d5/0x900 [ 643.247991][T14043] ? __might_fault+0xaf/0x130 [ 643.248025][T14043] ? __pfx_aa_sk_perm+0x10/0x10 [ 643.248058][T14043] ? sock_rps_record_flow+0x19/0x350 [ 643.248081][T14043] ? __pfx_inet_sendmsg+0x10/0x10 [ 643.248106][T14043] ? inet_sendmsg+0x2f4/0x370 [ 643.248129][T14043] ? __pfx_inet_sendmsg+0x10/0x10 [ 643.248154][T14043] __sys_sendto+0x5de/0x710 [ 643.248213][T14043] ? __pfx___sys_sendto+0x10/0x10 [ 643.248239][T14043] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 643.248277][T14043] ? __fget_files+0x3a0/0x420 [ 643.248312][T14043] ? ksys_write+0x242/0x270 [ 643.248343][T14043] ? __pfx_ksys_write+0x10/0x10 [ 643.248377][T14043] __x64_sys_sendto+0xde/0x100 [ 643.248405][T14043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.248429][T14043] do_syscall_64+0x174/0x580 [ 643.248450][T14043] ? trace_irq_disable+0x3b/0x140 [ 643.248479][T14043] ? clear_bhb_loop+0x40/0x90 [ 643.248504][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.248525][T14043] RIP: 0033:0x7fd6cd99ce59 [ 643.248545][T14043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.248562][T14043] RSP: 002b:00007fd6ce812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 643.248585][T14043] RAX: ffffffffffffffda RBX: 00007fd6cdc15fa0 RCX: 00007fd6cd99ce59 [ 643.248599][T14043] RDX: 0000000000034000 RSI: 0000200000000380 RDI: 0000000000000003 [ 643.248611][T14043] RBP: 00007fd6ce812090 R08: 0000200000000300 R09: 000000000000001c [ 643.248623][T14043] R10: 0000000004000854 R11: 0000000000000246 R12: 0000000000000001 [ 643.248636][T14043] R13: 00007fd6cdc16038 R14: 00007fd6cdc15fa0 R15: 00007fd6cdd3fa48 [ 643.248664][T14043] [ 643.688064][ T8886] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 643.780180][ T8886] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 643.966276][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 643.977967][ T8886] usb 5-1: USB disconnect, device number 21 [ 644.035380][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 644.078099][ T9629] udevd[9629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.094851][T14058] fuse: Bad value for 'rootmode' [ 644.166267][ T24] usb 4-1: device descriptor read/64, error -71 [ 644.416177][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 644.464814][T14066] fuse: Bad value for 'user_id' [ 644.474643][T14066] fuse: Bad value for 'user_id' [ 644.556019][ T24] usb 4-1: device descriptor read/64, error -71 [ 644.677175][ T24] usb usb4-port1: attempt power cycle [ 644.714778][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 644.732612][T14077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2425'. [ 645.035096][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 645.049131][T14085] loop5: detected capacity change from 0 to 6 [ 645.074548][T14085] Dev loop5: unable to read RDB block 6 [ 645.075918][ T24] usb 4-1: device descriptor read/8, error -71 [ 645.094716][T14085] loop5: unable to read partition table [ 645.113894][T14085] loop5: partition table beyond EOD, truncated [ 645.131551][T14085] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 645.142395][T14087] FAULT_INJECTION: forcing a failure. [ 645.142395][T14087] name failslab, interval 1, probability 0, space 0, times 0 [ 645.210885][T14087] CPU: 0 UID: 0 PID: 14087 Comm: syz.2.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.210909][T14087] Tainted: [L]=SOFTLOCKUP [ 645.210914][T14087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.210922][T14087] Call Trace: [ 645.210928][T14087] [ 645.210940][T14087] dump_stack_lvl+0xe8/0x150 [ 645.210960][T14087] should_fail_ex+0x412/0x560 [ 645.210979][T14087] should_failslab+0xa8/0x100 [ 645.211000][T14087] __kmalloc_cache_noprof+0x88/0x660 [ 645.211030][T14087] ? sctp_stream_init_ext+0x57/0x180 [ 645.211068][T14087] sctp_stream_init_ext+0x57/0x180 [ 645.211098][T14087] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 645.211122][T14087] ? __asan_memcpy+0x40/0x70 [ 645.211156][T14087] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 645.211194][T14087] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 645.211220][T14087] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 645.211238][T14087] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 645.211255][T14087] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 645.211271][T14087] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 645.211285][T14087] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 645.211302][T14087] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 645.211320][T14087] ? security_sctp_bind_connect+0x7e/0x2c0 [ 645.211338][T14087] sctp_sendmsg+0x1b85/0x2c50 [ 645.211363][T14087] ? __pfx_sctp_sendmsg+0x10/0x10 [ 645.211380][T14087] ? aa_sk_perm+0x6d5/0x900 [ 645.211396][T14087] ? __might_fault+0xaf/0x130 [ 645.211416][T14087] ? __pfx_aa_sk_perm+0x10/0x10 [ 645.211438][T14087] ? sock_rps_record_flow+0x19/0x350 [ 645.211453][T14087] ? __pfx_inet_sendmsg+0x10/0x10 [ 645.211467][T14087] ? inet_sendmsg+0x2f4/0x370 [ 645.211481][T14087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.211497][T14087] ? __pfx_inet_sendmsg+0x10/0x10 [ 645.211511][T14087] __sys_sendto+0x5de/0x710 [ 645.211532][T14087] ? __pfx___sys_sendto+0x10/0x10 [ 645.211548][T14087] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 645.211569][T14087] ? __fget_files+0x3a0/0x420 [ 645.211591][T14087] ? ksys_write+0x242/0x270 [ 645.211611][T14087] ? __pfx_ksys_write+0x10/0x10 [ 645.211631][T14087] __x64_sys_sendto+0xde/0x100 [ 645.211650][T14087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.211664][T14087] do_syscall_64+0x174/0x580 [ 645.211676][T14087] ? trace_irq_disable+0x3b/0x140 [ 645.211695][T14087] ? clear_bhb_loop+0x40/0x90 [ 645.211710][T14087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.211723][T14087] RIP: 0033:0x7faf14d9ce59 [ 645.211736][T14087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.211748][T14087] RSP: 002b:00007faf15b74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 645.211763][T14087] RAX: ffffffffffffffda RBX: 00007faf15015fa0 RCX: 00007faf14d9ce59 [ 645.211773][T14087] RDX: 0000000000034000 RSI: 0000200000000380 RDI: 0000000000000003 [ 645.211781][T14087] RBP: 00007faf15b74090 R08: 0000200000000300 R09: 000000000000001c [ 645.211790][T14087] R10: 0000000004000854 R11: 0000000000000246 R12: 0000000000000001 [ 645.211798][T14087] R13: 00007faf15016038 R14: 00007faf15015fa0 R15: 00007faf1513fa48 [ 645.211817][T14087] [ 645.751673][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 645.805486][ T24] usb 4-1: device descriptor read/8, error -71 [ 645.945338][ T24] usb usb4-port1: unable to enumerate USB device [ 646.726838][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 646.786867][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 646.838127][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 646.907447][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 646.928978][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 646.954910][ T24] usb 5-1: config 7 has an invalid interface number: 139 but max is 0 [ 646.978307][ T24] usb 5-1: config 7 has no interface number 0 [ 646.990913][ T24] usb 5-1: config 7 interface 139 has no altsetting 0 [ 647.019003][ T24] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=4f.3c [ 647.044706][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.063063][ T24] usb 5-1: Product: syz [ 647.070942][ T24] usb 5-1: Manufacturer: syz [ 647.083769][ T24] usb 5-1: SerialNumber: syz [ 647.084081][T14120] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2439'. [ 647.263202][T14115] team0: entered promiscuous mode [ 647.279261][T14115] team0: entered allmulticast mode [ 647.307858][T14115] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.362062][T14095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.386443][T14095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.402856][ T24] mct_u232 5-1:7.139: MCT U232 converter detected [ 647.413880][T14116] team1: entered promiscuous mode [ 647.421070][T14116] team1: entered allmulticast mode [ 647.422420][ T24] mct_u232 ttyUSB0: expected endpoint missing [ 647.427473][T14116] 8021q: adding VLAN 0 to HW filter on device team1 [ 647.465204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.473722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.482273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.485093][T13897] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 647.492306][ T24] usb 5-1: USB disconnect, device number 22 [ 647.521275][ T24] mct_u232 5-1:7.139: device disconnected [ 647.670229][T13897] usb 4-1: Using ep0 maxpacket: 8 [ 647.688538][T13897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 647.706014][T13897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 647.727841][T13897] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 647.743272][T13897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.761769][T13897] usb 4-1: Product: syz [ 647.771911][T13897] usb 4-1: Manufacturer: syz [ 647.778327][T13897] usb 4-1: SerialNumber: syz [ 647.807987][T13897] usb 4-1: config 0 descriptor?? [ 647.835181][T13897] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 648.078998][T13897] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 648.134688][T13897] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 648.325443][T13898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 648.352060][T13898] usb 4-1: USB disconnect, device number 18 [ 648.545073][T13897] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 648.705114][T13897] usb 5-1: device descriptor read/64, error -71 [ 648.987060][T13897] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 648.996082][T14165] bond6: entered allmulticast mode [ 649.013214][T14165] vti0: entered allmulticast mode [ 649.053924][T14165] loop5: detected capacity change from 0 to 7 [ 649.075909][T13898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 649.090118][T14165] Dev loop5: unable to read RDB block 7 [ 649.109026][T14167] xt_nfacct: accounting object `syz1' does not exist [ 649.116790][T14165] loop5: AHDI p1 [ 649.135629][T14165] loop5: partition table partially beyond EOD, truncated [ 649.145238][T13897] usb 5-1: device descriptor read/64, error -71 [ 649.202769][T14165] bond6: left allmulticast mode [ 649.220774][T14165] vti0: left allmulticast mode [ 649.267212][T13897] usb usb5-port1: attempt power cycle [ 649.305754][ T3303] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 649.521411][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 649.534120][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.557936][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.607359][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.616238][T13897] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 649.652509][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.678182][T13897] usb 5-1: device descriptor read/8, error -71 [ 649.696969][T14180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2457'. [ 649.945665][T13897] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 649.986872][T13897] usb 5-1: device descriptor read/8, error -71 [ 650.046074][T14185] loop5: detected capacity change from 0 to 6 [ 650.058968][T14185] Dev loop5: unable to read RDB block 6 [ 650.074270][T14185] loop5: unable to read partition table [ 650.084169][T14185] loop5: partition table beyond EOD, truncated [ 650.099619][T14185] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 650.116907][T13897] usb usb5-port1: unable to enumerate USB device [ 650.358555][ T6052] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 650.383320][ T6052] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 650.755074][T13897] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 650.868155][T14207] bridge0: port 3(veth0_to_bridge) entered blocking state [ 650.900957][T14207] bridge0: port 3(veth0_to_bridge) entered disabled state [ 650.927976][T13897] usb 2-1: not running at top speed; connect to a high speed hub [ 650.939285][T14207] veth0_to_bridge: entered allmulticast mode [ 650.949484][T13897] usb 2-1: config 2 has an invalid interface number: 225 but max is 0 [ 650.966441][T13897] usb 2-1: config 2 has no interface number 0 [ 650.974767][T14207] veth0_to_bridge: entered promiscuous mode [ 650.992335][T13897] usb 2-1: config 2 interface 225 altsetting 16 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 650.993067][T14207] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.027899][T14207] bridge0: port 3(veth0_to_bridge) entered blocking state [ 651.035471][T14207] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 651.044071][T13897] usb 2-1: config 2 interface 225 altsetting 16 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 651.061374][T13897] usb 2-1: config 2 interface 225 altsetting 16 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 651.066319][ T8891] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 651.103889][T13897] usb 2-1: config 2 interface 225 altsetting 16 endpoint 0xD has invalid maxpacket 17126, setting to 64 [ 651.128045][T13897] usb 2-1: config 2 interface 225 altsetting 16 has a duplicate endpoint with address 0x8F, skipping [ 651.152313][T13897] usb 2-1: config 2 interface 225 altsetting 16 endpoint 0xE has invalid wMaxPacketSize 0 [ 651.176253][T13897] usb 2-1: config 2 interface 225 altsetting 16 has a duplicate endpoint with address 0x4, skipping [ 651.202131][T13897] usb 2-1: config 2 interface 225 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 651.217658][T13897] usb 2-1: config 2 interface 225 altsetting 16 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 651.217700][T13897] usb 2-1: config 2 interface 225 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 651.217729][T13897] usb 2-1: config 2 interface 225 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 651.217814][T13897] usb 2-1: config 2 interface 225 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 651.218039][T13897] usb 2-1: config 2 interface 225 has no altsetting 0 [ 651.375245][T14216] loop5: detected capacity change from 0 to 6 [ 651.397219][T14216] Dev loop5: unable to read RDB block 6 [ 651.403040][T14216] loop5: unable to read partition table [ 651.409962][T14216] loop5: partition table beyond EOD, truncated [ 651.420120][T14216] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 651.482728][T14219] sctp: [Deprecated]: syz.3.2470 (pid 14219) Use of int in max_burst socket option deprecated. [ 651.482728][T14219] Use struct sctp_assoc_value instead [ 651.942175][T14245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.965829][T14245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.248936][ T8891] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 652.411390][ T8891] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 652.436738][ T8891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.467002][ T8891] usb 1-1: Product: syz [ 652.479795][ T8891] usb 1-1: Manufacturer: syz [ 652.502735][ T8891] usb 1-1: SerialNumber: syz [ 652.517517][ T29] audit: type=1326 audit(1780757686.749:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14243 comm="syz.2.2477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf14d9ce59 code=0x0 [ 652.550760][ T8891] usb 1-1: config 0 descriptor?? [ 652.828467][ T24] usb 1-1: USB disconnect, device number 23 [ 652.835196][T13898] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 653.018311][T13898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 653.033000][T13898] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 653.041148][T14258] binder: 14257:14258 ioctl c018620c 200000000000 returned -22 [ 653.054551][T13898] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 653.097480][T13898] usb 4-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 653.140055][T13898] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 653.187931][T13898] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 653.205023][T13898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.216642][T13898] usb 4-1: Product: syz [ 653.225231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.226501][T13898] usb 4-1: Manufacturer: syz [ 653.233760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.246625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.255025][T13898] usb 4-1: SerialNumber: syz [ 653.414722][T14264] loop5: detected capacity change from 0 to 6 [ 653.424540][T14264] Dev loop5: unable to read RDB block 6 [ 653.430595][T14264] loop5: unable to read partition table [ 653.436946][T14264] loop5: partition table beyond EOD, truncated [ 653.443163][T14264] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 653.527862][T13898] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 653.588557][T13897] usb 2-1: string descriptor 0 read error: -71 [ 653.595414][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 653.604668][T13898] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 653.616307][T13897] usb 2-1: New USB device found, idVendor=1199, idProduct=9006, bcdDevice=17.86 [ 653.636405][T13897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.666534][T13897] usb 2-1: can't set config #2, error -71 [ 653.682876][T13897] usb 2-1: USB disconnect, device number 126 [ 653.745090][ T8891] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 653.747569][T13898] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 653.762876][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 653.768168][T13898] usb 4-1: USB disconnect, device number 19 [ 653.803956][ T24] usb 1-1: config 247 has an invalid interface number: 53 but max is 2 [ 653.828618][ T9711] udevd[9711]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.829339][ T24] usb 1-1: config 247 has an invalid interface number: 195 but max is 2 [ 653.862343][ T24] usb 1-1: config 247 has an invalid interface number: 78 but max is 2 [ 653.874533][ T24] usb 1-1: config 247 contains an unexpected descriptor of type 0x1, skipping [ 653.890495][ T24] usb 1-1: config 247 has no interface number 0 [ 653.909164][ T24] usb 1-1: config 247 has no interface number 1 [ 653.925094][ T24] usb 1-1: config 247 has no interface number 2 [ 653.931577][ T24] usb 1-1: config 247 interface 195 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 653.946873][ T8891] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 653.955489][ T24] usb 1-1: config 247 interface 195 altsetting 15 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 653.967784][ T8891] usb 5-1: config 0 has no interface number 0 [ 653.973938][ T24] usb 1-1: config 247 interface 195 altsetting 15 has an endpoint descriptor with address 0x96, changing to 0x86 [ 653.987678][ T8891] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 653.998671][ T24] usb 1-1: config 247 interface 195 altsetting 15 has a duplicate endpoint with address 0x86, skipping [ 654.009894][ T8891] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 654.021368][ T24] usb 1-1: config 247 interface 195 altsetting 15 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 654.033314][ T8891] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 654.045247][ T8891] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 654.056414][ T24] usb 1-1: config 247 interface 195 altsetting 15 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 654.069900][ T8891] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 654.082040][ T24] usb 1-1: config 247 interface 78 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 654.093257][ T8891] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 654.107158][ T24] usb 1-1: config 247 interface 78 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 654.118102][ T8891] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 654.127267][ T24] usb 1-1: config 247 interface 78 altsetting 5 endpoint 0xC has invalid maxpacket 319, setting to 64 [ 654.138566][ T8891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.146679][ T24] usb 1-1: config 247 interface 78 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 654.159303][ T24] usb 1-1: config 247 interface 78 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 654.171516][ T8891] usb 5-1: config 0 descriptor?? [ 654.184237][ T24] usb 1-1: config 247 interface 78 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 654.196313][T14266] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 654.203688][T14266] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 654.217726][ T8891] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 654.228524][ T24] usb 1-1: config 247 interface 78 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 654.242970][ T24] usb 1-1: config 247 interface 78 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 654.256207][ T24] usb 1-1: config 247 interface 53 has no altsetting 0 [ 654.263144][ T24] usb 1-1: config 247 interface 195 has no altsetting 0 [ 654.271126][ T24] usb 1-1: config 247 interface 78 has no altsetting 0 [ 654.281923][ T24] usb 1-1: New USB device found, idVendor=1266, idProduct=1009, bcdDevice=f0.16 [ 654.305041][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.315269][ T24] usb 1-1: Product: 辕篍ꊷ뺥됨➍᪔៵吠㻈㗝㖢웻앿鍟ᮞⴓﻄꍈ댜懱芗步㩐䉎㇢튆ά瓫ﺘ᪗詽㣦횵˱卼톬つ췚ᒋ鑅繫쁌枚璊ﹾᦻ暴棘癊瞢⇥ﭲ䞾⢅﫝롙磡洯痽毺ㄦ洛购קּ섥局ᾗ줸錈造﨔﵇偅 [ 654.340295][ T24] usb 1-1: Manufacturer: 븼専 [ 654.345608][ T24] usb 1-1: SerialNumber: syz [ 654.467737][T14266] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 654.506033][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 654.532450][T14266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.558743][T14266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.588150][T14266] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 655.841194][T14284] tipc: Enabled bearer , priority 0 [ 656.105646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.114114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.122582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.199542][T14283] tipc: Disabling bearer [ 656.463740][ T24] option 1-1:247.53: GSM modem (1-port) converter detected [ 656.754001][ T24] usb 1-1: USB disconnect, device number 24 [ 656.893551][T14292] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2490'. [ 656.934377][ T24] option 1-1:247.53: device disconnected [ 657.445546][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 657.617254][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 657.643133][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 657.658252][T14299] loop5: detected capacity change from 0 to 6 [ 657.670419][T14299] Dev loop5: unable to read RDB block 6 [ 657.678208][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 657.685441][T14299] loop5: unable to read partition table [ 657.690089][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 657.704279][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.713362][ T24] usb 1-1: Product: syz [ 657.718645][ T24] usb 1-1: Manufacturer: syz [ 657.723489][ T24] usb 1-1: SerialNumber: syz [ 657.742206][T14299] loop5: partition table beyond EOD, truncated [ 657.743944][ T24] usb 1-1: config 0 descriptor?? [ 657.779592][ T24] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 657.801999][T14299] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 658.044170][ T24] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 658.115664][ T24] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 658.377824][T14301] tipc: Enabled bearer , priority 0 [ 658.438527][ T24] usb 1-1: USB disconnect, device number 25 [ 658.568274][T14304] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 658.730919][T14300] tipc: Disabling bearer [ 658.985234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.993778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.002610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.395022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 661.976850][ T8891] usb 5-1: USB disconnect, device number 27 [ 661.994571][ T8891] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 662.072573][T14317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.291131][T14320] FAULT_INJECTION: forcing a failure. [ 662.291131][T14320] name failslab, interval 1, probability 0, space 0, times 0 [ 662.475629][T14320] CPU: 0 UID: 0 PID: 14320 Comm: syz.4.2500 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.475655][T14320] Tainted: [L]=SOFTLOCKUP [ 662.475660][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.475668][T14320] Call Trace: [ 662.475673][T14320] [ 662.475679][T14320] dump_stack_lvl+0xe8/0x150 [ 662.475700][T14320] should_fail_ex+0x412/0x560 [ 662.475721][T14320] should_failslab+0xa8/0x100 [ 662.475735][T14320] __kmalloc_cache_noprof+0x88/0x660 [ 662.475755][T14320] ? sctp_datamsg_from_user+0x88/0xef0 [ 662.475772][T14320] sctp_datamsg_from_user+0x88/0xef0 [ 662.475785][T14320] ? __sk_mem_raise_allocated+0x290/0x1290 [ 662.475801][T14320] ? __genradix_ptr+0x1e1/0x220 [ 662.475821][T14320] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 662.475841][T14320] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 662.475856][T14320] ? __asan_memcpy+0x40/0x70 [ 662.475876][T14320] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 662.475901][T14320] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 662.475917][T14320] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 662.475934][T14320] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 662.475950][T14320] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 662.475965][T14320] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 662.475982][T14320] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 662.476000][T14320] ? security_sctp_bind_connect+0x7e/0x2c0 [ 662.476018][T14320] sctp_sendmsg+0x1b85/0x2c50 [ 662.476042][T14320] ? __pfx_sctp_sendmsg+0x10/0x10 [ 662.476059][T14320] ? aa_sk_perm+0x6d5/0x900 [ 662.476076][T14320] ? __might_fault+0xaf/0x130 [ 662.476096][T14320] ? __pfx_aa_sk_perm+0x10/0x10 [ 662.476115][T14320] ? sock_rps_record_flow+0x19/0x350 [ 662.476129][T14320] ? __pfx_inet_sendmsg+0x10/0x10 [ 662.476144][T14320] ? inet_sendmsg+0x2f4/0x370 [ 662.476157][T14320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.476174][T14320] ? __pfx_inet_sendmsg+0x10/0x10 [ 662.476188][T14320] __sys_sendto+0x5de/0x710 [ 662.476208][T14320] ? __pfx___sys_sendto+0x10/0x10 [ 662.476232][T14320] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 662.476255][T14320] ? __fget_files+0x3a0/0x420 [ 662.476276][T14320] ? ksys_write+0x242/0x270 [ 662.476295][T14320] ? __pfx_ksys_write+0x10/0x10 [ 662.476316][T14320] __x64_sys_sendto+0xde/0x100 [ 662.476334][T14320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.476349][T14320] do_syscall_64+0x174/0x580 [ 662.476361][T14320] ? trace_irq_disable+0x3b/0x140 [ 662.476380][T14320] ? clear_bhb_loop+0x40/0x90 [ 662.476395][T14320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.476408][T14320] RIP: 0033:0x7f44a3b9ce59 [ 662.476422][T14320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.476433][T14320] RSP: 002b:00007f44a4a1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 662.476448][T14320] RAX: ffffffffffffffda RBX: 00007f44a3e15fa0 RCX: 00007f44a3b9ce59 [ 662.476458][T14320] RDX: 0000000000034000 RSI: 0000200000000380 RDI: 0000000000000003 [ 662.476466][T14320] RBP: 00007f44a4a1a090 R08: 0000200000000300 R09: 000000000000001c [ 662.476475][T14320] R10: 0000000004000854 R11: 0000000000000246 R12: 0000000000000002 [ 662.476483][T14320] R13: 00007f44a3e16038 R14: 00007f44a3e15fa0 R15: 00007f44a3f3fa48 [ 662.476502][T14320] [ 662.905338][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 663.995555][ T8891] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 664.105196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.113651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.122096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.865207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.873705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.882158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.685237][ T8896] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 671.125002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 671.194987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 671.306841][ T8891] usb 5-1: unable to read config index 0 descriptor/start: -110 [ 671.430388][ T8896] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 671.474800][ T8891] usb 5-1: can't read configurations, error -110 [ 671.504103][ T8896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.558753][ T8896] usb 2-1: config 0 descriptor?? [ 671.639630][ T8896] gspca_main: spca505-2.14.0 probing 0733:0430 [ 671.646066][ T8891] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 671.993357][ T8891] usb 5-1: device descriptor read/64, error -32 [ 672.167187][T14357] FAULT_INJECTION: forcing a failure. [ 672.167187][T14357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.303320][T14346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2508'. [ 672.335266][ T8896] gspca_spca505: reg write: error -110 [ 672.356860][ T8891] usb usb5-port1: attempt power cycle [ 672.428610][T14357] CPU: 1 UID: 0 PID: 14357 Comm: syz.2.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.428648][T14357] Tainted: [L]=SOFTLOCKUP [ 672.428657][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 672.428669][T14357] Call Trace: [ 672.428679][T14357] [ 672.428697][T14357] dump_stack_lvl+0xe8/0x150 [ 672.428730][T14357] should_fail_ex+0x412/0x560 [ 672.428760][T14357] _copy_from_iter+0x1d3/0x1670 [ 672.428783][T14357] ? sctp_chunkify+0x5a/0x260 [ 672.428808][T14357] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 672.428847][T14357] ? __pfx__copy_from_iter+0x10/0x10 [ 672.428871][T14357] ? __asan_memcpy+0x40/0x70 [ 672.428899][T14357] ? sctp_make_datafrag_empty+0x184/0x240 [ 672.428925][T14357] ? skb_put+0x11b/0x210 [ 672.428960][T14357] sctp_user_addto_chunk+0x87/0x240 [ 672.428991][T14357] sctp_datamsg_from_user+0x748/0xef0 [ 672.429035][T14357] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 672.429061][T14357] ? __asan_memcpy+0x40/0x70 [ 672.429096][T14357] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 672.429139][T14357] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 672.429166][T14357] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 672.429194][T14357] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 672.429216][T14357] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 672.429238][T14357] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 672.429267][T14357] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 672.429297][T14357] ? security_sctp_bind_connect+0x7e/0x2c0 [ 672.429327][T14357] sctp_sendmsg+0x1b85/0x2c50 [ 672.429370][T14357] ? __pfx_sctp_sendmsg+0x10/0x10 [ 672.429400][T14357] ? aa_sk_perm+0x6d5/0x900 [ 672.429428][T14357] ? __might_fault+0xaf/0x130 [ 672.429463][T14357] ? __pfx_aa_sk_perm+0x10/0x10 [ 672.429496][T14357] ? sock_rps_record_flow+0x19/0x350 [ 672.429520][T14357] ? __pfx_inet_sendmsg+0x10/0x10 [ 672.429545][T14357] ? inet_sendmsg+0x2f4/0x370 [ 672.429567][T14357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.429599][T14357] ? __pfx_inet_sendmsg+0x10/0x10 [ 672.429624][T14357] __sys_sendto+0x5de/0x710 [ 672.429658][T14357] ? __pfx___sys_sendto+0x10/0x10 [ 672.429694][T14357] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 672.429732][T14357] ? __fget_files+0x3a0/0x420 [ 672.429770][T14357] ? ksys_write+0x242/0x270 [ 672.429803][T14357] ? __pfx_ksys_write+0x10/0x10 [ 672.429839][T14357] __x64_sys_sendto+0xde/0x100 [ 672.429870][T14357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.429894][T14357] do_syscall_64+0x174/0x580 [ 672.429916][T14357] ? trace_irq_disable+0x3b/0x140 [ 672.429947][T14357] ? clear_bhb_loop+0x40/0x90 [ 672.429973][T14357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.429996][T14357] RIP: 0033:0x7faf14d9ce59 [ 672.430016][T14357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.430034][T14357] RSP: 002b:00007faf12ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 672.430059][T14357] RAX: ffffffffffffffda RBX: 00007faf15016090 RCX: 00007faf14d9ce59 [ 672.430075][T14357] RDX: 0000000000034000 RSI: 0000200000000380 RDI: 0000000000000003 [ 672.430089][T14357] RBP: 00007faf12ff6090 R08: 0000200000000300 R09: 000000000000001c [ 672.430104][T14357] R10: 0000000004000854 R11: 0000000000000246 R12: 0000000000000002 [ 672.430118][T14357] R13: 00007faf15016128 R14: 00007faf15016090 R15: 00007faf1513fa48 [ 672.430153][T14357] [ 672.796339][ T8896] spca505 2-1:0.0: probe with driver spca505 failed with error -5 [ 673.404421][ T24] usb 2-1: USB disconnect, device number 127 [ 673.436829][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.471284][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.515946][T14370] tipc: Enabled bearer , priority 0 [ 673.537616][T14368] syzkaller0: entered promiscuous mode [ 673.544800][T14368] syzkaller0: entered allmulticast mode [ 673.625384][ T8896] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 673.755199][ T8896] usb 1-1: device descriptor read/64, error -71 [ 673.808818][T14369] tipc: Disabling bearer [ 673.995057][ T8896] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 674.135668][ T8896] usb 1-1: device descriptor read/64, error -71 [ 674.245648][ T8896] usb usb1-port1: attempt power cycle [ 674.595079][ T8896] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 674.630597][ T8896] usb 1-1: device descriptor read/8, error -71 [ 674.885321][ T8896] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 674.918469][ T8896] usb 1-1: device descriptor read/8, error -71 [ 675.035905][ T8896] usb usb1-port1: unable to enumerate USB device [ 675.753548][T14389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.025691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.034168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.042655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.467056][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 678.905428][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 679.004649][T14414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.029661][T14414] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 679.156509][T14416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 681.400473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.408941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.417381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.374740][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.401835][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.751043][ C1] sched: DL replenish lagged too much [ 688.066180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 688.716457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 688.796809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 688.946658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 693.139885][T14427] kAFS: unable to lookup cell '' [ 698.197052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.003922][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 710.677772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.198469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.561695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.570183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.451795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.460235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.795825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.326989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.335454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.354373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.563538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.571998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.112665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.121155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.129566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.635879][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.662209][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.995409][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 778.042858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.466136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.474556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.482967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.398628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.003780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.048986][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.075917][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.425992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.434444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.600534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.609009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.312464][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 833.076506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.954281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.866281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.751941][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 904.614857][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 904.621847][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P57/1:b..l [ 904.630200][ C0] rcu: (detected by 0, t=10503 jiffies, g=103737, q=424361 ncpus=2) [ 904.638287][ C0] task:kworker/u8:4 state:R running task stack:21208 pid:57 tgid:57 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 904.653189][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 904.658967][ C0] Call Trace: [ 904.662273][ C0] [ 904.665228][ C0] __schedule+0x1821/0x5740 [ 904.669781][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 904.675018][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 904.679998][ C0] ? __pfx_netif_rx_internal+0x10/0x10 [ 904.685501][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 904.690470][ C0] ? __pfx___schedule+0x10/0x10 [ 904.695352][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 904.700327][ C0] preempt_schedule_irq+0x4d/0xa0 [ 904.705376][ C0] irqentry_exit+0x14f/0x8b0 [ 904.709994][ C0] ? trace_irq_disable+0x3b/0x140 [ 904.715056][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 904.721072][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 904.726400][ C0] Code: ff ff ff e8 31 cf 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 5a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 ed 91 [ 904.746037][ C0] RSP: 0018:ffffc900015e7238 EFLAGS: 00000282 [ 904.752138][ C0] RAX: c93a8463c3894800 RBX: 0000000000000000 RCX: 0000000000000046 [ 904.760129][ C0] RDX: 00000000b838d7ad RSI: ffffffff8e2171de RDI: ffffffff8c28b8e0 [ 904.768128][ C0] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 904.776139][ C0] R10: ffffc900015e7398 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 904.784139][ C0] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 904.792144][ C0] ? unwind_next_frame+0xa6/0x2550 [ 904.797292][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 904.803487][ C0] ? unwind_next_frame+0xa6/0x2550 [ 904.808635][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 904.814301][ C0] ? unwind_next_frame+0xa6/0x2550 [ 904.819441][ C0] unwind_next_frame+0xc3/0x2550 [ 904.824404][ C0] ? unwind_next_frame+0xa6/0x2550 [ 904.829551][ C0] ? unwind_next_frame+0xa6/0x2550 [ 904.834693][ C0] ? qlist_free_all+0x99/0x100 [ 904.839492][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 904.845155][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 904.851342][ C0] arch_stack_walk+0x11b/0x150 [ 904.856176][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 904.861847][ C0] stack_trace_save+0xa9/0x100 [ 904.866642][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 904.872058][ C0] save_stack+0x122/0x230 [ 904.876431][ C0] ? __pfx_save_stack+0x10/0x10 [ 904.881313][ C0] ? __free_frozen_pages+0xc1c/0xd30 [ 904.886628][ C0] ? __slab_free+0x274/0x2c0 [ 904.891252][ C0] ? qlist_free_all+0x99/0x100 [ 904.896047][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 904.901742][ C0] __reset_page_owner+0x71/0x1f0 [ 904.906715][ C0] __free_frozen_pages+0xc1c/0xd30 [ 904.911866][ C0] __slab_free+0x274/0x2c0 [ 904.916333][ C0] qlist_free_all+0x99/0x100 [ 904.920952][ C0] ? security_inode_alloc+0x39/0x310 [ 904.926275][ C0] kasan_quarantine_reduce+0x148/0x160 [ 904.931765][ C0] __kasan_slab_alloc+0x22/0x80 [ 904.936651][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 904.942137][ C0] ? security_inode_alloc+0x39/0x310 [ 904.947461][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 904.953132][ C0] security_inode_alloc+0x39/0x310 [ 904.958284][ C0] inode_init_always_gfp+0x995/0xd50 [ 904.963613][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 904.969012][ C0] alloc_inode+0x82/0x1b0 [ 904.973378][ C0] sock_create_lite+0x8b/0x510 [ 904.978182][ C0] kernel_accept+0x16c/0x480 [ 904.982800][ C0] ? __pfx_kernel_accept+0x10/0x10 [ 904.987951][ C0] rds_tcp_accept_one+0x169/0xd70 [ 904.993013][ C0] ? process_scheduled_works+0xa70/0x1860 [ 904.998766][ C0] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 905.004361][ C0] rds_tcp_accept_worker+0x1d/0x70 [ 905.009500][ C0] ? process_scheduled_works+0xa70/0x1860 [ 905.015242][ C0] process_scheduled_works+0xb5d/0x1860 [ 905.020843][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 905.026855][ C0] ? assign_work+0x3d5/0x5e0 [ 905.031477][ C0] worker_thread+0xa53/0xfc0 [ 905.036118][ C0] kthread+0x389/0x470 [ 905.040217][ C0] ? __pfx_worker_thread+0x10/0x10 [ 905.045354][ C0] ? __pfx_kthread+0x10/0x10 [ 905.049976][ C0] ret_from_fork+0x514/0xb70 [ 905.054597][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 905.059734][ C0] ? __switch_to+0xc79/0x1410 [ 905.064446][ C0] ? __pfx_kthread+0x10/0x10 [ 905.069075][ C0] ret_from_fork_asm+0x1a/0x30 [ 905.073883][ C0] [ 905.076923][ C0] rcu: rcu_preempt kthread starved for 8591 jiffies! g103737 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 905.088140][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 905.098125][ C0] rcu: RCU grace-period kthread stack dump: [ 905.104028][ C0] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 905.117571][ C0] Call Trace: [ 905.120870][ C0] [ 905.123835][ C0] __schedule+0x1821/0x5740 [ 905.128373][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 905.133368][ C0] ? __pfx___schedule+0x10/0x10 [ 905.138259][ C0] ? schedule+0x90/0x360 [ 905.142536][ C0] schedule+0x164/0x360 [ 905.146731][ C0] schedule_timeout+0x158/0x2c0 [ 905.151613][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 905.157013][ C0] ? __pfx_process_timeout+0x10/0x10 [ 905.162338][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 905.168176][ C0] ? prepare_to_swait_event+0x340/0x370 [ 905.173760][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 905.178652][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 905.184833][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 905.190142][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 905.195383][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 905.200007][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 905.205235][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 905.211080][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 905.216042][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 905.221109][ C0] kthread+0x389/0x470 [ 905.225210][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 905.230428][ C0] ? __pfx_kthread+0x10/0x10 [ 905.235049][ C0] ret_from_fork+0x514/0xb70 [ 905.239678][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 905.244812][ C0] ? __switch_to+0xc79/0x1410 [ 905.249527][ C0] ? __pfx_kthread+0x10/0x10 [ 905.254144][ C0] ret_from_fork_asm+0x1a/0x30 [ 905.258961][ C0] [ 905.261996][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 905.268429][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.278951][ C0] Tainted: [L]=SOFTLOCKUP [ 905.283294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.293973][ C0] RIP: 0010:unwind_next_frame+0x26/0x2550 [ 905.299723][ C0] Code: 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fe 48 bd 00 00 00 00 00 fc ff df 48 8d 5f 48 <48> 89 d8 48 c1 e8 03 48 89 44 24 30 80 3c 28 00 74 08 48 89 df e8 [ 905.319530][ C0] RSP: 0018:ffffc900000064d8 EFLAGS: 00000296 [ 905.325624][ C0] RAX: 0000000000000001 RBX: ffffc900000065f0 RCX: 0000000000000100 [ 905.333619][ C0] RDX: dffffc0000000000 RSI: ffffffff8ba7ae5e RDI: ffffc900000065a8 [ 905.341619][ C0] RBP: dffffc0000000000 R08: ffffc90000006670 R09: 0000000000000024 [ 905.349610][ C0] R10: ffffc900000065f8 R11: ffffffff81b0e0e0 R12: ffffffff8e692ec0 [ 905.357608][ C0] R13: 0000000000000000 R14: ffffc900000065a8 R15: ffffc900000065a8 [ 905.365600][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 905.374550][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.381162][ C0] CR2: 000020000024c030 CR3: 0000000064546000 CR4: 00000000003526f0 [ 905.389163][ C0] Call Trace: [ 905.392464][ C0] [ 905.395338][ C0] ? unwind_next_frame+0xa6/0x2550 [ 905.400482][ C0] ? cpu_startup_entry+0x43/0x60 [ 905.405443][ C0] ? rest_init+0x2de/0x300 [ 905.409949][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 905.416141][ C0] arch_stack_walk+0x11b/0x150 [ 905.420948][ C0] ? rest_init+0x2de/0x300 [ 905.425395][ C0] stack_trace_save+0xa9/0x100 [ 905.430236][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 905.435673][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 905.440650][ C0] kasan_save_track+0x3e/0x80 [ 905.445356][ C0] ? kasan_save_track+0x3e/0x80 [ 905.450237][ C0] ? kasan_save_free_info+0x46/0x50 [ 905.455461][ C0] ? __kasan_slab_free+0x5c/0x80 [ 905.460425][ C0] ? kmem_cache_free+0x182/0x650 [ 905.465391][ C0] ? br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 905.470937][ C0] ? NF_HOOK+0x64e/0x6e0 [ 905.475203][ C0] ? br_nf_post_routing+0xb66/0xfe0 [ 905.480422][ C0] ? nf_hook_slow+0xc5/0x220 [ 905.485036][ C0] ? NF_HOOK+0x23e/0x3f0 [ 905.489345][ C0] ? br_forward_finish+0xd3/0x130 [ 905.494390][ C0] ? br_nf_forward_finish+0xa5e/0xe90 [ 905.499788][ C0] ? NF_HOOK+0x64e/0x6e0 [ 905.504052][ C0] ? br_nf_forward_ip+0x7ef/0xa30 [ 905.509108][ C0] ? nf_hook_slow+0xc5/0x220 [ 905.513724][ C0] ? NF_HOOK+0x23e/0x3f0 [ 905.517984][ C0] ? __br_forward+0x397/0x540 [ 905.522679][ C0] ? br_flood+0x6ee/0xb80 [ 905.527029][ C0] ? br_handle_frame_finish+0x1521/0x1c80 [ 905.532787][ C0] ? br_nf_pre_routing_finish+0x13d7/0x1a90 [ 905.538726][ C0] ? NF_HOOK+0x64e/0x6e0 [ 905.543001][ C0] ? br_nf_pre_routing+0xed5/0x14c0 [ 905.548236][ C0] ? br_handle_frame+0x1277/0x1510 [ 905.553376][ C0] ? __netif_receive_skb_core+0x98f/0x3170 [ 905.559273][ C0] ? process_backlog+0x76d/0x1950 [ 905.564362][ C0] ? __napi_poll+0xae/0x340 [ 905.568891][ C0] ? net_rx_action+0x627/0xf70 [ 905.573682][ C0] ? handle_softirqs+0x22a/0x840 [ 905.578643][ C0] ? __irq_exit_rcu+0xca/0x220 [ 905.583427][ C0] ? irq_exit_rcu+0x9/0x30 [ 905.587869][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 905.593714][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 905.599990][ C0] ? pv_native_safe_halt+0xf/0x20 [ 905.605050][ C0] ? default_idle+0x9/0x20 [ 905.609495][ C0] ? default_idle_call+0x72/0xb0 [ 905.614459][ C0] ? do_idle+0x36a/0x5f0 [ 905.618728][ C0] ? cpu_startup_entry+0x43/0x60 [ 905.623692][ C0] ? rest_init+0x2de/0x300 [ 905.628164][ C0] ? br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 905.633653][ C0] kasan_save_free_info+0x46/0x50 [ 905.638708][ C0] __kasan_slab_free+0x5c/0x80 [ 905.643503][ C0] kmem_cache_free+0x182/0x650 [ 905.648293][ C0] ? __skb_ext_put+0x221/0x2f0 [ 905.653088][ C0] ? __skb_ext_del+0x271/0x390 [ 905.657891][ C0] br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 905.663215][ C0] ? NF_HOOK+0xa2/0x6e0 [ 905.667398][ C0] ? NF_HOOK+0xa2/0x6e0 [ 905.671579][ C0] NF_HOOK+0x64e/0x6e0 [ 905.675680][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 905.680297][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 905.686054][ C0] ? skb_pull+0xc1/0x1d0 [ 905.690334][ C0] br_nf_post_routing+0xb66/0xfe0 [ 905.695404][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 905.701155][ C0] ? lock_acquire+0x102/0x350 [ 905.705867][ C0] ? NF_HOOK+0xa2/0x3f0 [ 905.710061][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 905.715638][ C0] nf_hook_slow+0xc5/0x220 [ 905.720097][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 905.726023][ C0] NF_HOOK+0x23e/0x3f0 [ 905.730130][ C0] ? NF_HOOK+0xa2/0x3f0 [ 905.734308][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 905.738923][ C0] ? net_generic+0x1e/0x240 [ 905.743540][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 905.749473][ C0] ? net_generic+0x1e/0x240 [ 905.754003][ C0] br_forward_finish+0xd3/0x130 [ 905.758894][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 905.764820][ C0] br_nf_forward_finish+0xa5e/0xe90 [ 905.770062][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 905.775814][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 905.781313][ C0] ? NF_HOOK+0xa2/0x6e0 [ 905.785587][ C0] ? NF_HOOK+0xa2/0x6e0 [ 905.789786][ C0] NF_HOOK+0x64e/0x6e0 [ 905.793906][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 905.798552][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 905.804309][ C0] ? net_generic+0x1e/0x240 [ 905.808849][ C0] br_nf_forward_ip+0x7ef/0xa30 [ 905.813732][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 905.819480][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 905.824618][ C0] nf_hook_slow+0xc5/0x220 [ 905.829063][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 905.834551][ C0] NF_HOOK+0x23e/0x3f0 [ 905.838648][ C0] ? NF_HOOK+0xa2/0x3f0 [ 905.842858][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 905.847475][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 905.852960][ C0] ? __skb_clone+0x483/0x7a0 [ 905.857570][ C0] ? br_handle_vlan+0x61/0x530 [ 905.862443][ C0] __br_forward+0x397/0x540 [ 905.866967][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 905.872456][ C0] br_flood+0x6ee/0xb80 [ 905.876651][ C0] br_handle_frame_finish+0x1521/0x1c80 [ 905.882236][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 905.888155][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 905.893472][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.898709][ C0] ? nf_hook_slow+0x176/0x220 [ 905.903417][ C0] br_nf_pre_routing_finish+0x13d7/0x1a90 [ 905.909192][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 905.915289][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 905.921212][ C0] ? NF_HOOK+0xa2/0x6e0 [ 905.925390][ C0] ? NF_HOOK+0xa2/0x6e0 [ 905.929564][ C0] NF_HOOK+0x64e/0x6e0 [ 905.933651][ C0] ? net_generic+0x1e/0x240 [ 905.938189][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 905.942802][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 905.948895][ C0] ? setup_pre_routing+0x4f1/0x6f0 [ 905.954031][ C0] br_nf_pre_routing+0xed5/0x14c0 [ 905.959074][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 905.965181][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 905.970663][ C0] br_handle_frame+0x1277/0x1510 [ 905.975633][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 905.980947][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 905.986866][ C0] ? packet_rcv+0x175/0x1730 [ 905.991498][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 905.996807][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 906.002471][ C0] ? NF_HOOK+0x336/0x3c0 [ 906.006751][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 906.012294][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 906.018310][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 906.023283][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 906.029377][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 906.034434][ C0] ? NF_HOOK+0x336/0x3c0 [ 906.038711][ C0] ? process_backlog+0x3eb/0x1950 [ 906.043775][ C0] ? lock_acquire+0x106/0x350 [ 906.048565][ C0] ? process_backlog+0x3eb/0x1950 [ 906.053630][ C0] ? process_backlog+0x3eb/0x1950 [ 906.058684][ C0] ? process_backlog+0x3eb/0x1950 [ 906.063736][ C0] ? process_backlog+0x3eb/0x1950 [ 906.068796][ C0] process_backlog+0x76d/0x1950 [ 906.073697][ C0] __napi_poll+0xae/0x340 [ 906.078054][ C0] ? skb_defer_free_flush+0x233/0x260 [ 906.083456][ C0] net_rx_action+0x627/0xf70 [ 906.088094][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 906.093264][ C0] handle_softirqs+0x22a/0x840 [ 906.098065][ C0] ? __irq_exit_rcu+0xca/0x220 [ 906.102900][ C0] __irq_exit_rcu+0xca/0x220 [ 906.107515][ C0] irq_exit_rcu+0x9/0x30 [ 906.111786][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 906.117457][ C0] [ 906.120408][ C0] [ 906.123356][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 906.129450][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 906.135105][ C0] Code: bb 7e 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f1 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 906.154741][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 906.160845][ C0] RAX: 0000000000bd90e1 RBX: ffffffff819a845a RCX: 0000000080000001 [ 906.168844][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa4cfe RDI: ffffffff8c28b8e0 [ 906.176837][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 906.184832][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 906.192828][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 906.200825][ C0] ? do_idle+0x36a/0x5f0 [ 906.205106][ C0] default_idle+0x9/0x20 [ 906.209464][ C0] default_idle_call+0x72/0xb0 [ 906.214254][ C0] do_idle+0x36a/0x5f0 [ 906.218356][ C0] ? __pfx_do_idle+0x10/0x10 [ 906.222981][ C0] cpu_startup_entry+0x43/0x60 [ 906.227778][ C0] rest_init+0x2de/0x300 [ 906.232052][ C0] start_kernel+0x38a/0x3e0 [ 906.236715][ C0] x86_64_start_reservations+0x24/0x30 [ 906.242238][ C0] x86_64_start_kernel+0x143/0x1c0 [ 906.247396][ C0] common_startup_64+0x13e/0x147 [ 906.252384][ C0] [ 907.294313][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 907.326492][ T1316] ieee802154 phy1 wpan1: encryption failed: -22