last executing test programs: 1m16.762114992s ago: executing program 4 (id=332): socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xfdef) syz_emit_ethernet(0x0, 0x0, 0x0) 1m16.289086944s ago: executing program 4 (id=334): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x34}, 0x94) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0xf, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x2c}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x1, 0xffffffff, 0x801, 0x6, 0xee}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x6, 0x9, 0x4, 0x9e21, 0x0, 0x101}, &(0x7f0000000280), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004) r6 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x9, 0x0, 0xd, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r2, r3, 0x34, 0x4010, 0xffffffffffffffff, @void, @value=r2, @void, @void, r7}, 0x20) r8 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000640000004300000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000400), 0xfffffffe, r11}, 0x38) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000000000)={0xf0f044, 0x802}) 1m15.060686935s ago: executing program 4 (id=336): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000009c882, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = dup(r1) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201004d000000405308460100000000000109022400010000e80b090400fd01030000000921fd7ffc0122ea00090581030002050000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f00007c2000/0x3000)=nil, 0x3000) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x400002) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x20100) ioctl$VT_OPENQRY(r4, 0x5600, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000240)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "5af8bcdcf02f"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x68}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x803d, 0xffffffffffffffff, 0xa9458000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000001080)=ANY=[@ANYBLOB="8285eebb9f13f2e357bf2e7921099c79335c8712ad1df099e327cc9ae5c9b816fc5774beac5600d392ca8054eb2badfcc7d30ec911d2f971b114a0cc869219ead3b0c094c05e76d112cec6b22a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) 1m10.761491768s ago: executing program 4 (id=353): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000490000000000000008000f0001000000", 0x24) (fail_nth: 4) 1m9.829574505s ago: executing program 4 (id=357): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x2fc, r0, 0x22, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_IE={0xe2, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x80, 0x0, @device_b, 0x4, @value=@device_b, 0x7ff, 0x5, @device_b, 0x9}}, @cf={0x4, 0x6, {0x9, 0xb5, 0x5, 0xb07e}}, @random={0xfa, 0x99, "1bb2cf90160cb097176d48005acaa2e886c20e10624632ef50d71d340781e6ef3a9912a1def18c018bce57c547423315cb9d392d8007e7d448a4c378813f3c76c11f66ff84a86b652de53ae11c87fa9ba48e69d9482f6678e48c5ca47c7b0bc8f6a92c4caa84d4f77000b1fa9a6348f1b2d2827777f5f83a2f83da4530c53e9946bf70e5128fe0a4bd365649165369093db4322c97be712618"}, @link_id={0x65, 0x12, {@random="4c80c2b00361", @device_b, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xb, 0x2a, [@supported_rates={0x1, 0x5, [{0x9}, {0x16, 0x1}, {0xc}, {0x6c}, {0x1, 0x1}]}]}, @NL80211_ATTR_IE={0x1aa, 0x2a, [@random_vendor={0xdd, 0x81, "5ec0de59e56c7c4a3818dc2fa9db43ebce68e08c2379cb4bdd3137caf96ac4c17ba78d12a451ee4919f692e35af4860518895f6525fed6f487367a597fe49367407f41ae114054dbd126faaa8ce77780da4095a82aacd5f7393a568509deccedb599a040c1b848a870ec6cbfd41644b5823fd02231822fbea0be288d3b8d8731e0"}, @channel_switch={0x25, 0x3, {0x0, 0x1d9, 0xa2}}, @preq={0x82, 0x8e, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x95, 0xfa, 0x3, @device_a, 0x9, @value=@device_b, 0xe, 0x6e, 0xa, [{{0x1, 0x0, 0x1}, @device_a, 0x40}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @device_a, 0x3}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{0x1}, @device_b, 0xd}, {{}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0x388}]}}, @cf={0x4, 0x6, {0x4, 0x4, 0x0, 0x5}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x6}}, @perr={0x84, 0x7b, {0x4, 0x7, [{{0x0, 0x1}, @device_a, 0x200, @value=@device_b, 0x16}, {{0x0, 0x1}, @device_a, 0x97, @value=@device_b, 0x17}, {{}, @device_a, 0x80000000, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0x5}, {{0x0, 0x1}, @device_b, 0x8000, @value, 0x2e}, {{0x0, 0x1}, @device_b, 0x11c, @value=@device_b, 0x36}, {{}, @device_a, 0x601, @void, 0x2}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4004}, 0x4040091) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x24, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x14014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000480)=0x3fd, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x2, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4095}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 59.450169982s ago: executing program 4 (id=379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8d, r1, 0x4}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000816000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r6, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x3f9, 0x20, 0x70bd2a, 0x25dfdbff, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x240c0044) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x2, 0x0, 0x8, 0x7, 0x7, 0x401, 0xffffffff, 0x1000000000000000}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket(0xa, 0x1, 0x0) connect$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r8, 0x80083313, &(0x7f0000000040)) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 55.328118629s ago: executing program 2 (id=393): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802feffff7f5050505050505f"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 45.788936405s ago: executing program 2 (id=394): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1f, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x1, 0x4, r0, &(0x7f0000000040)="1d", 0xfdef, 0x801}]) (fail_nth: 7) 45.467550528s ago: executing program 1 (id=395): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x3b08c1) socket$kcm(0x2, 0x200000000000001, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000002, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="24005a8020000180140003000000000000000000000020000100000004000200040001"], 0x40}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r4}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 42.641428039s ago: executing program 32 (id=379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8d, r1, 0x4}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000816000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r6, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x3f9, 0x20, 0x70bd2a, 0x25dfdbff, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x240c0044) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x2, 0x0, 0x8, 0x7, 0x7, 0x401, 0xffffffff, 0x1000000000000000}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket(0xa, 0x1, 0x0) connect$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r8, 0x80083313, &(0x7f0000000040)) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 42.217516479s ago: executing program 2 (id=399): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(0xffffffffffffffff) r2 = socket(0x1e, 0x2, 0x0) dup3(r1, r2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0xbf, 0x0, 0x6, {0x44, 0x21}, 0x14, 0x1}) 42.02108317s ago: executing program 1 (id=401): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r1, 0xffffffffffffffff, 0x34, 0x4010, 0xffffffffffffffff, @void, @value=r1}, 0x20) 41.976006486s ago: executing program 3 (id=402): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x180940, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 41.788384928s ago: executing program 3 (id=403): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r1, 0x73}}, 0x48) (fail_nth: 1) 41.439167887s ago: executing program 3 (id=404): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) 41.373042658s ago: executing program 1 (id=405): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) (fail_nth: 6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) 40.602738865s ago: executing program 0 (id=406): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x58) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000180)={0x1, @sliced={0x1ff, [0x4, 0x4, 0xff, 0x4, 0xffff, 0x9, 0x7, 0x62, 0x6, 0x6, 0x0, 0x0, 0xf, 0xfa, 0xff, 0x8, 0x0, 0xac, 0x7f, 0x90, 0x7, 0x62, 0x8, 0x6, 0x1, 0xfff, 0x9, 0xd, 0x9, 0x3, 0x80, 0x7, 0x4, 0x1, 0x6, 0xff, 0x8, 0x5, 0x1, 0x2, 0x400, 0x0, 0xfffb, 0x5, 0xa, 0x7, 0x22, 0x100]}}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000480)="05000000", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x3, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x61) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x0, [[0x14, 0xffffffff, 0xffffffff, 0x3, 0x7, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x1b, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf423e, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x49, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0xa44}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x1c8a1, 0xc000, 0x8, 0xc2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f00000002c0)={0x8}) 40.521057006s ago: executing program 1 (id=407): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c05010000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2, 0x500}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, &(0x7f0000000000)=0x2) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x78) 40.220811125s ago: executing program 3 (id=408): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3b}, 0x0) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040010) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000403a"], 0x1c) (async) fsmount(r2, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8080000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000000000000000001000000010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200000000000000000fffffffffffffffffeffffff00"/112], 0xb8}}, 0x4004) (async, rerun: 32) sendmsg$nl_xfrm(r8, 0x0, 0x987a3a9f32358a4c) (rerun: 32) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0xa2) ftruncate(r9, 0x2007ffb) (async) sendfile(r9, r9, 0x0, 0x1000000201005) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xb, &(0x7f0000000380)=0xffffffff, 0x4) 40.218064731s ago: executing program 2 (id=409): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x0, 0x400, 0x0, 0x3d1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x4, 0x1fff, 0x7d8485a2, 0x0, 0x9, "6005a405f7dced38323e0058367fb23603a736"}) 38.942021147s ago: executing program 0 (id=410): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x3b08c1) socket$kcm(0x2, 0x200000000000001, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000002, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="24005a8020000180140003000000000000000000000020000100000004000200040001"], 0x40}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r4}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 37.736884787s ago: executing program 2 (id=411): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 36.795325173s ago: executing program 0 (id=412): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x180940, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 36.656750786s ago: executing program 0 (id=413): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x48004) 36.410832263s ago: executing program 1 (id=414): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r1, 0xffffffffffffffff, 0x34, 0x4010, 0xffffffffffffffff, @void, @value=r1}, 0x20) 36.117555379s ago: executing program 3 (id=415): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x7, 0x10000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) waitid$P_PIDFD(0x3, r1, 0x0, 0x1, 0x0) 36.115595607s ago: executing program 0 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x840) 35.930933092s ago: executing program 2 (id=417): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x2a30, &(0x7f00000003c0)={0x0, 0x36ef, 0x8000, 0x0, 0x3d5}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x10, 0x3, 0x200003ca, 0x0, r2}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x42) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x0, 0x2}) write$sequencer(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="940100000000001081", @ANYRES8=r8], 0x10) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000071100a00000000000f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = socket(0x8000000010, 0x2, 0x0) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r10, &(0x7f00000002c0)="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", 0xfc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x111, 0x3}}, 0x20) writev(r0, &(0x7f0000000640)=[{&(0x7f00000006c0)='.', 0x1}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000600)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0xc) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 35.749958092s ago: executing program 1 (id=418): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) 35.568985127s ago: executing program 3 (id=419): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c05010000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000400)={0x0, [[0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfff9ffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, &(0x7f0000000000)=0x2) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x78) 35.560916474s ago: executing program 0 (id=420): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0x38) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003040d94a49a9dc3110850f4f6394600000004032050", @ANYRESHEX=0x0]}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef967f079}, 0x4020800) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202"], 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000140)=0xfe, 0x4) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) read$FUSE(r5, &(0x7f0000001580)={0x2020}, 0x2020) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@local}) 0s ago: executing program 33 (id=420): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0x38) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003040d94a49a9dc3110850f4f6394600000004032050", @ANYRESHEX=0x0]}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef967f079}, 0x4020800) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705810240000007050202"], 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000140)=0xfe, 0x4) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) read$FUSE(r5, &(0x7f0000001580)={0x2020}, 0x2020) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@local}) kernel console output (not intermixed with test programs): 5 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.0.135" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecf19e159 code=0x7ffc0000 [ 99.120842][ T31] audit: type=1326 audit(1789867622.804:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.0.135" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecf19e159 code=0x7ffc0000 [ 99.229342][ T31] audit: type=1326 audit(1789867622.914:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.0.135" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faecf19e159 code=0x7ffc0000 [ 99.229838][ T31] audit: type=1326 audit(1789867622.914:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.0.135" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecf19e159 code=0x7ffc0000 [ 99.229888][ T31] audit: type=1326 audit(1789867622.914:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.0.135" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecf19e159 code=0x7ffc0000 [ 99.305776][ T31] audit: type=1326 audit(1789867622.974:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.0.135" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faecf19e159 code=0x7ffc0000 [ 99.965299][ T6155] ip_tables: iptables: counters copy to user failed while replacing table [ 100.231978][ T31] audit: type=1326 audit(1789867623.914:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.232027][ T31] audit: type=1326 audit(1789867623.914:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.232791][ T31] audit: type=1326 audit(1789867623.914:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.232831][ T31] audit: type=1326 audit(1789867623.914:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.234366][ T31] audit: type=1326 audit(1789867623.914:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.234407][ T31] audit: type=1326 audit(1789867623.924:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.234442][ T31] audit: type=1326 audit(1789867623.924:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.303846][ T31] audit: type=1326 audit(1789867623.964:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.303895][ T31] audit: type=1326 audit(1789867623.964:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 100.303930][ T31] audit: type=1326 audit(1789867623.964:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4e7939e159 code=0x7ffc0000 [ 101.699013][ T6184] FAULT_INJECTION: forcing a failure. [ 101.699013][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 101.699044][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.3.145 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.699069][ T6184] Tainted: [L]=SOFTLOCKUP [ 101.699075][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.699086][ T6184] Call Trace: [ 101.699093][ T6184] [ 101.699100][ T6184] dump_stack_lvl+0xe8/0x150 [ 101.699131][ T6184] should_fail_ex+0x410/0x560 [ 101.699155][ T6184] ? __alloc_skb+0x1db/0x7a0 [ 101.699177][ T6184] should_failslab+0xa8/0x100 [ 101.699201][ T6184] ? __alloc_skb+0x1db/0x7a0 [ 101.699220][ T6184] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 101.699247][ T6184] ? __alloc_skb+0x18d/0x7a0 [ 101.699269][ T6184] ? __alloc_skb+0x1db/0x7a0 [ 101.699295][ T6184] __alloc_skb+0x1db/0x7a0 [ 101.699321][ T6184] netlink_sendmsg+0x5d4/0xb40 [ 101.699348][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.699373][ T6184] ? apparmor_socket_sendmsg+0x98/0x360 [ 101.699395][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.699422][ T6184] sock_sendmsg_nosec+0x13a/0x180 [ 101.699444][ T6184] ____sys_sendmsg+0x54e/0x850 [ 101.699473][ T6184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.699508][ T6184] ? import_iovec+0x73/0xa0 [ 101.699535][ T6184] ___sys_sendmsg+0x2a5/0x360 [ 101.699558][ T6184] ? __lock_acquire+0x747/0x2de0 [ 101.699581][ T6184] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.699637][ T6184] ? __fget_files+0x2a/0x420 [ 101.699661][ T6184] ? __fget_files+0x3a2/0x420 [ 101.699694][ T6184] __x64_sys_sendmsg+0x1b1/0x290 [ 101.699721][ T6184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.699766][ T6184] do_syscall_64+0x166/0x520 [ 101.699788][ T6184] ? trace_irq_disable+0x3b/0x140 [ 101.699805][ T6184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.699824][ T6184] ? clear_bhb_loop+0x70/0xc0 [ 101.699846][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.699864][ T6184] RIP: 0033:0x7f4e7939e159 [ 101.699881][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.699894][ T6184] RSP: 002b:00007f4e7a187028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.699913][ T6184] RAX: ffffffffffffffda RBX: 00007f4e79625fa0 RCX: 00007f4e7939e159 [ 101.699926][ T6184] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000006 [ 101.699937][ T6184] RBP: 00007f4e7a187090 R08: 0000000000000000 R09: 0000000000000000 [ 101.699948][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.699959][ T6184] R13: 00007f4e79626038 R14: 00007f4e79625fa0 R15: 00007f4e7974fa48 [ 101.699986][ T6184] [ 101.987400][ T6188] ipvlan2: entered promiscuous mode [ 101.991621][ T6188] team0: Device ipvlan2 failed to register rx_handler [ 102.123794][ T943] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.161877][ T6190] netlink: 68 bytes leftover after parsing attributes in process `syz.3.149'. [ 102.162260][ T6190] support for the xor transformation has been removed. [ 102.188639][ T6190] Invalid logical block size (30659) [ 102.283794][ T943] usb 2-1: Using ep0 maxpacket: 8 [ 102.284896][ T943] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 102.296808][ T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.296830][ T943] usb 2-1: Product: syz [ 102.296842][ T943] usb 2-1: Manufacturer: syz [ 102.296854][ T943] usb 2-1: SerialNumber: syz [ 102.323361][ T943] usb 2-1: config 0 descriptor?? [ 102.379927][ T6198] netlink: 72 bytes leftover after parsing attributes in process `syz.0.150'. [ 102.557591][ T943] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.785357][ T943] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 102.795626][ T943] usb 2-1: USB disconnect, device number 4 [ 102.873765][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.035065][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 103.041194][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 103.042217][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.042241][ T10] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 103.042260][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.082147][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.082171][ T10] usb 4-1: Product: syz [ 103.082184][ T10] usb 4-1: Manufacturer: syz [ 103.082197][ T10] usb 4-1: SerialNumber: syz [ 103.112096][ T10] usb 4-1: config 0 descriptor?? [ 103.540247][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.548643][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.580395][ T10] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 103.580425][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 103.614385][ T10] usb 4-1: USB disconnect, device number 7 [ 103.903894][ T943] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.037995][ T943] usb 2-1: device descriptor read/64, error -71 [ 104.285891][ T943] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.423825][ T943] usb 2-1: device descriptor read/64, error -71 [ 104.550687][ T943] usb usb2-port1: attempt power cycle [ 104.682906][ T6226] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 104.894932][ T943] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.915723][ T943] usb 2-1: device descriptor read/8, error -71 [ 105.074416][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 105.154754][ T943] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.177238][ T943] usb 2-1: device descriptor read/8, error -71 [ 105.246283][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 105.247259][ T9] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 105.247280][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.247290][ T9] usb 4-1: config 0 has no interfaces? [ 105.247305][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.249045][ T9] usb 4-1: config 0 descriptor?? [ 105.284258][ T943] usb usb2-port1: unable to enumerate USB device [ 106.442744][ T6257] ipvlan2: entered promiscuous mode [ 106.445056][ T6257] team0: Device ipvlan2 failed to register rx_handler [ 106.657742][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 106.730476][ T6275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.172'. [ 106.903829][ T5706] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.054225][ T5706] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.055102][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.057031][ T5706] usb 1-1: config 0 descriptor?? [ 107.262379][ T5706] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 107.264322][ T5706] [drm:udl_init] *ERROR* Selecting channel failed [ 107.290121][ T5706] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 107.290145][ T5706] [drm] Initialized udl on minor 1 [ 107.292132][ T5706] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.292524][ T5706] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 107.298423][ T5706] usb 1-1: USB disconnect, device number 5 [ 107.307806][ T943] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 107.615017][ T6286] syzkaller0: entered promiscuous mode [ 107.615031][ T6286] syzkaller0: entered allmulticast mode [ 107.620419][ T6286] tipc: Started in network mode [ 107.620449][ T6286] tipc: Node identity 8e799a1df03d, cluster identity 4711 [ 107.620684][ T6286] tipc: Enabled bearer , priority 0 [ 107.668789][ T6286] tipc: Resetting bearer [ 107.688398][ T5706] usb 4-1: USB disconnect, device number 8 [ 107.702495][ T6286] tipc: Disabling bearer [ 108.165149][ T6308] sctp: [Deprecated]: syz.2.184 (pid 6308) Use of int in max_burst socket option. [ 108.165149][ T6308] Use struct sctp_assoc_value instead [ 108.376572][ T6311] FAULT_INJECTION: forcing a failure. [ 108.376572][ T6311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.376618][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.0.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.376645][ T6311] Tainted: [L]=SOFTLOCKUP [ 108.376652][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.376661][ T6311] Call Trace: [ 108.376668][ T6311] [ 108.376675][ T6311] dump_stack_lvl+0xe8/0x150 [ 108.376706][ T6311] should_fail_ex+0x410/0x560 [ 108.376739][ T6311] strncpy_from_user+0x36/0x2c0 [ 108.376764][ T6311] do_getname+0x77/0x250 [ 108.376789][ T6311] do_sys_openat2+0xcc/0x200 [ 108.376813][ T6311] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.376834][ T6311] ? exc_page_fault+0x6a/0xc0 [ 108.376859][ T6311] ? do_user_addr_fault+0xc4c/0x1340 [ 108.376879][ T6311] __x64_sys_openat+0x138/0x170 [ 108.376904][ T6311] do_syscall_64+0x166/0x520 [ 108.376925][ T6311] ? trace_irq_disable+0x3b/0x140 [ 108.376941][ T6311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.376958][ T6311] ? clear_bhb_loop+0x70/0xc0 [ 108.376978][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.376995][ T6311] RIP: 0033:0x7faecf15e98e [ 108.377010][ T6311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.377022][ T6311] RSP: 002b:00007faed0001b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.377040][ T6311] RAX: ffffffffffffffda RBX: 00007faed00026c0 RCX: 00007faecf15e98e [ 108.377051][ T6311] RDX: 000000000004cf00 RSI: 00007faed0001c00 RDI: ffffffffffffff9c [ 108.377062][ T6311] RBP: 00007faed0001c00 R08: 0000000000000000 R09: 0000000000000000 [ 108.377071][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 108.377082][ T6311] R13: 00007faecf426218 R14: 00007faecf426180 R15: 00007faecf54fa48 [ 108.377107][ T6311] [ 108.597453][ T6321] netlink: 72 bytes leftover after parsing attributes in process `syz.2.186'. [ 108.839587][ T6325] syzkaller0: entered promiscuous mode [ 108.839601][ T6325] syzkaller0: entered allmulticast mode [ 110.250518][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.250757][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.423821][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.555902][ T30] usb 1-1: device descriptor read/64, error -71 [ 110.794700][ T30] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.853773][ T943] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.924951][ T30] usb 1-1: device descriptor read/64, error -71 [ 111.004941][ T943] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 111.017554][ T943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.017569][ T943] usb 3-1: Product: syz [ 111.017577][ T943] usb 3-1: Manufacturer: syz [ 111.017584][ T943] usb 3-1: SerialNumber: syz [ 111.021048][ T943] usb 3-1: config 0 descriptor?? [ 111.028073][ T943] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 111.034165][ T30] usb usb1-port1: attempt power cycle [ 111.353757][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 111.374075][ T30] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.394595][ T30] usb 1-1: device descriptor read/8, error -71 [ 111.437762][ T943] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 111.486203][ T25] usb 5-1: device descriptor read/64, error -71 [ 111.633845][ T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.655528][ T30] usb 1-1: device descriptor read/8, error -71 [ 111.723858][ T25] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 111.768362][ T30] usb usb1-port1: unable to enumerate USB device [ 111.855726][ T25] usb 5-1: device descriptor read/64, error -71 [ 111.869875][ T6389] FAULT_INJECTION: forcing a failure. [ 111.869875][ T6389] name failslab, interval 1, probability 0, space 0, times 0 [ 111.869906][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.3.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.869929][ T6389] Tainted: [L]=SOFTLOCKUP [ 111.869935][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.869945][ T6389] Call Trace: [ 111.869952][ T6389] [ 111.869959][ T6389] dump_stack_lvl+0xe8/0x150 [ 111.869989][ T6389] should_fail_ex+0x410/0x560 [ 111.870014][ T6389] should_failslab+0xa8/0x100 [ 111.870036][ T6389] ? skb_clone+0x212/0x3a0 [ 111.870060][ T6389] kmem_cache_alloc_noprof+0xa1/0x600 [ 111.870089][ T6389] ? skb_clone+0x212/0x3a0 [ 111.870119][ T6389] skb_clone+0x212/0x3a0 [ 111.870145][ T6389] __netlink_deliver_tap+0x413/0x860 [ 111.870182][ T6389] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.870209][ T6389] netlink_deliver_tap+0x19c/0x1b0 [ 111.870234][ T6389] netlink_unicast+0x781/0x940 [ 111.870266][ T6389] netlink_sendmsg+0x813/0xb40 [ 111.870290][ T6389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.870314][ T6389] ? apparmor_socket_sendmsg+0x18b/0x360 [ 111.870335][ T6389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.870350][ T6389] sock_sendmsg_nosec+0x13a/0x180 [ 111.870369][ T6389] ____sys_sendmsg+0x54e/0x850 [ 111.870404][ T6389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.870435][ T6389] ? import_iovec+0x73/0xa0 [ 111.870460][ T6389] ___sys_sendmsg+0x2a5/0x360 [ 111.870483][ T6389] ? __lock_acquire+0x747/0x2de0 [ 111.870505][ T6389] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.870560][ T6389] ? __fget_files+0x2a/0x420 [ 111.870583][ T6389] ? __fget_files+0x3a2/0x420 [ 111.870615][ T6389] __x64_sys_sendmsg+0x1b1/0x290 [ 111.870641][ T6389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.870684][ T6389] do_syscall_64+0x166/0x520 [ 111.870705][ T6389] ? trace_irq_disable+0x3b/0x140 [ 111.870722][ T6389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.870740][ T6389] ? clear_bhb_loop+0x70/0xc0 [ 111.870764][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.870781][ T6389] RIP: 0033:0x7f4e7939e159 [ 111.870798][ T6389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.870811][ T6389] RSP: 002b:00007f4e7a187028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.870830][ T6389] RAX: ffffffffffffffda RBX: 00007f4e79625fa0 RCX: 00007f4e7939e159 [ 111.870843][ T6389] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 111.870853][ T6389] RBP: 00007f4e7a187090 R08: 0000000000000000 R09: 0000000000000000 [ 111.870864][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.870874][ T6389] R13: 00007f4e79626038 R14: 00007f4e79625fa0 R15: 00007f4e7974fa48 [ 111.870902][ T6389] [ 111.965781][ T25] usb usb5-port1: attempt power cycle [ 112.318004][ T25] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 112.374592][ T25] usb 5-1: device descriptor read/8, error -71 [ 112.614070][ T25] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 112.665049][ T25] usb 5-1: device descriptor read/8, error -71 [ 112.775738][ T25] usb usb5-port1: unable to enumerate USB device [ 112.855814][ T10] usb 3-1: USB disconnect, device number 4 [ 112.903877][ T5686] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 112.923814][ T30] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.073791][ T5686] usb 2-1: Using ep0 maxpacket: 32 [ 113.074505][ T30] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 113.074510][ T5686] usb 2-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 113.076324][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.076366][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.076385][ T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.076404][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.076430][ T5686] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 113.076439][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.076446][ T5686] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 113.080075][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.080097][ T5686] usb 2-1: Product: syz [ 113.080110][ T5686] usb 2-1: Manufacturer: syz [ 113.080123][ T5686] usb 2-1: SerialNumber: syz [ 113.350808][ T6414] FAULT_INJECTION: forcing a failure. [ 113.350808][ T6414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.350843][ T6414] CPU: 1 UID: 0 PID: 6414 Comm: syz.0.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.350876][ T6414] Tainted: [L]=SOFTLOCKUP [ 113.350883][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.350893][ T6414] Call Trace: [ 113.350898][ T6414] [ 113.350903][ T6414] dump_stack_lvl+0xe8/0x150 [ 113.350922][ T6414] should_fail_ex+0x410/0x560 [ 113.350937][ T6414] _copy_to_user+0x31/0xb0 [ 113.350951][ T6414] keyctl_get_security+0x18d/0x2a0 [ 113.350970][ T6414] ? __pfx_keyctl_get_security+0x10/0x10 [ 113.351000][ T6414] __se_sys_keyctl+0x220/0x9d0 [ 113.351022][ T6414] ? __pfx___se_sys_keyctl+0x10/0x10 [ 113.351039][ T6414] ? __mutex_unlock_slowpath+0x731/0x900 [ 113.351057][ T6414] ? __fget_files+0x2a/0x420 [ 113.351071][ T6414] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.351083][ T6414] ? __fget_files+0x3a2/0x420 [ 113.351099][ T6414] ? fput+0xa0/0xd0 [ 113.351113][ T6414] ? ksys_write+0x242/0x270 [ 113.351142][ T6414] ? __pfx_ksys_write+0x10/0x10 [ 113.351173][ T6414] ? __x64_sys_keyctl+0x20/0xc0 [ 113.351194][ T6414] do_syscall_64+0x166/0x520 [ 113.351208][ T6414] ? trace_irq_disable+0x3b/0x140 [ 113.351218][ T6414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.351228][ T6414] ? clear_bhb_loop+0x70/0xc0 [ 113.351239][ T6414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.351249][ T6414] RIP: 0033:0x7faecf19e159 [ 113.351259][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.351273][ T6414] RSP: 002b:00007faed0044028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 113.351299][ T6414] RAX: ffffffffffffffda RBX: 00007faecf425fa0 RCX: 00007faecf19e159 [ 113.351313][ T6414] RDX: fffffffffffffffd RSI: 000000000c9f5e3c RDI: 0000000000000011 [ 113.351324][ T6414] RBP: 00007faed0044090 R08: 0000000000000001 R09: 0000000000000000 [ 113.351335][ T6414] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 113.351346][ T6414] R13: 00007faecf426038 R14: 00007faecf425fa0 R15: 00007faecf54fa48 [ 113.351363][ T6414] [ 113.366981][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.666730][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.682954][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.683023][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.713527][ T10] usb 3-1: config 0 descriptor?? [ 113.935991][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 113.936090][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 113.960450][ T10] usb 3-1: USB disconnect, device number 5 [ 114.019056][ T5686] apple-mfi-fastcharge 2-1: USB disconnect, device number 9 [ 114.131203][ T30] [drm] Initialized gud 1.0.0 for 4-1:1.0 on minor 1 [ 114.403978][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.463806][ T5706] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.554120][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 114.558701][ T25] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 114.560425][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.560470][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.567551][ T25] usb 3-1: config 0 descriptor?? [ 114.581253][ T25] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.600210][ T25] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.613810][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 114.627788][ T5706] usb 5-1: New USB device found, idVendor=1723, idProduct=000a, bcdDevice=ad.d0 [ 114.629112][ T5706] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 17 [ 114.629134][ T5706] usb 5-1: config 7 has no interface number 0 [ 114.629500][ T5706] usb 5-1: too many endpoints for config 7 interface 3 altsetting 1: 142, using maximum allowed: 30 [ 114.629530][ T5706] usb 5-1: config 7 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 114.629552][ T5706] usb 5-1: config 7 interface 3 has no altsetting 0 [ 114.641882][ T5706] usb 5-1: New USB device strings: Mfr=230, Product=2, SerialNumber=3 [ 114.641904][ T5706] usb 5-1: Product: syz [ 114.641917][ T5706] usb 5-1: Manufacturer: syz [ 114.641929][ T5706] usb 5-1: SerialNumber: syz [ 114.728796][ T6425] pimreg: tun_chr_ioctl cmd 1074025681 [ 114.731747][ T6425] netlink: 52 bytes leftover after parsing attributes in process `syz.1.221'. [ 114.792400][ T25] usb 3-1: USB disconnect, device number 6 [ 114.804267][ T25] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 115.100702][ T5706] usb 5-1: USB disconnect, device number 10 [ 115.250014][ T30] Console: switching to colour frame buffer device 128x48 [ 115.266295][ T30] gud 4-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 115.272326][ T30] usb 4-1: USB disconnect, device number 9 [ 115.312771][ T30] Console: switching to colour VGA+ 80x25 [ 115.565900][ T6448] FAULT_INJECTION: forcing a failure. [ 115.565900][ T6448] name failslab, interval 1, probability 0, space 0, times 0 [ 115.565946][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.2.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.565970][ T6448] Tainted: [L]=SOFTLOCKUP [ 115.565976][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.565986][ T6448] Call Trace: [ 115.565993][ T6448] [ 115.566002][ T6448] dump_stack_lvl+0xe8/0x150 [ 115.566039][ T6448] should_fail_ex+0x410/0x560 [ 115.566065][ T6448] should_failslab+0xa8/0x100 [ 115.566096][ T6448] ? skb_clone+0x212/0x3a0 [ 115.566120][ T6448] kmem_cache_alloc_noprof+0xa1/0x600 [ 115.566147][ T6448] ? skb_clone+0x212/0x3a0 [ 115.566176][ T6448] skb_clone+0x212/0x3a0 [ 115.566201][ T6448] __netlink_deliver_tap+0x413/0x860 [ 115.566237][ T6448] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.566262][ T6448] netlink_deliver_tap+0x19c/0x1b0 [ 115.566289][ T6448] netlink_unicast+0x781/0x940 [ 115.566324][ T6448] netlink_sendmsg+0x813/0xb40 [ 115.566350][ T6448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.566376][ T6448] ? apparmor_socket_sendmsg+0x98/0x360 [ 115.566399][ T6448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.566415][ T6448] sock_sendmsg_nosec+0x13a/0x180 [ 115.566436][ T6448] ____sys_sendmsg+0x54e/0x850 [ 115.566465][ T6448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.566498][ T6448] ? import_iovec+0x73/0xa0 [ 115.566524][ T6448] ___sys_sendmsg+0x2a5/0x360 [ 115.566545][ T6448] ? __lock_acquire+0x747/0x2de0 [ 115.566566][ T6448] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.566621][ T6448] ? __fget_files+0x2a/0x420 [ 115.566643][ T6448] ? __fget_files+0x3a2/0x420 [ 115.566675][ T6448] __x64_sys_sendmsg+0x1b1/0x290 [ 115.566703][ T6448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.566745][ T6448] do_syscall_64+0x166/0x520 [ 115.566767][ T6448] ? trace_irq_disable+0x3b/0x140 [ 115.566784][ T6448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.566802][ T6448] ? clear_bhb_loop+0x70/0xc0 [ 115.566824][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.566843][ T6448] RIP: 0033:0x7f014639e159 [ 115.566867][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.566879][ T6448] RSP: 002b:00007f014723b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.566900][ T6448] RAX: ffffffffffffffda RBX: 00007f0146625fa0 RCX: 00007f014639e159 [ 115.566914][ T6448] RDX: 0000000000028050 RSI: 0000200000000200 RDI: 0000000000000003 [ 115.566925][ T6448] RBP: 00007f014723b090 R08: 0000000000000000 R09: 0000000000000000 [ 115.566935][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.566946][ T6448] R13: 00007f0146626038 R14: 00007f0146625fa0 R15: 00007f014674fa48 [ 115.566974][ T6448] [ 115.888132][ T5621] Bluetooth: hci1: link tx timeout [ 115.888215][ T5621] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.908184][ T5621] Bluetooth: Unexpected continuation frame (len 4) [ 115.929727][ T6453] FAULT_INJECTION: forcing a failure. [ 115.929727][ T6453] name failslab, interval 1, probability 0, space 0, times 0 [ 115.929759][ T6453] CPU: 1 UID: 0 PID: 6453 Comm: syz.4.232 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.929785][ T6453] Tainted: [L]=SOFTLOCKUP [ 115.929792][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.929803][ T6453] Call Trace: [ 115.929810][ T6453] [ 115.929818][ T6453] dump_stack_lvl+0xe8/0x150 [ 115.929851][ T6453] should_fail_ex+0x410/0x560 [ 115.929878][ T6453] should_failslab+0xa8/0x100 [ 115.929902][ T6453] ? skb_clone+0x212/0x3a0 [ 115.929929][ T6453] kmem_cache_alloc_noprof+0xa1/0x600 [ 115.929961][ T6453] ? skb_clone+0x212/0x3a0 [ 115.929992][ T6453] skb_clone+0x212/0x3a0 [ 115.930019][ T6453] __netlink_deliver_tap+0x413/0x860 [ 115.930053][ T6453] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.930080][ T6453] netlink_deliver_tap+0x19c/0x1b0 [ 115.930106][ T6453] netlink_unicast+0x781/0x940 [ 115.930141][ T6453] netlink_sendmsg+0x813/0xb40 [ 115.930168][ T6453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.930194][ T6453] ? apparmor_socket_sendmsg+0x18b/0x360 [ 115.930216][ T6453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.930231][ T6453] sock_sendmsg_nosec+0x13a/0x180 [ 115.930252][ T6453] ____sys_sendmsg+0x54e/0x850 [ 115.930280][ T6453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.930312][ T6453] ? import_iovec+0x73/0xa0 [ 115.930338][ T6453] ___sys_sendmsg+0x2a5/0x360 [ 115.930359][ T6453] ? __lock_acquire+0x747/0x2de0 [ 115.930381][ T6453] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.930434][ T6453] ? __fget_files+0x2a/0x420 [ 115.930456][ T6453] ? __fget_files+0x3a2/0x420 [ 115.930487][ T6453] __x64_sys_sendmsg+0x1b1/0x290 [ 115.930511][ T6453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.930560][ T6453] do_syscall_64+0x166/0x520 [ 115.930584][ T6453] ? trace_irq_disable+0x3b/0x140 [ 115.930601][ T6453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.930618][ T6453] ? clear_bhb_loop+0x70/0xc0 [ 115.930639][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.930658][ T6453] RIP: 0033:0x7f38abd9e159 [ 115.930677][ T6453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.930692][ T6453] RSP: 002b:00007f38acca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.930712][ T6453] RAX: ffffffffffffffda RBX: 00007f38ac025fa0 RCX: 00007f38abd9e159 [ 115.930725][ T6453] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 115.930737][ T6453] RBP: 00007f38acca7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.930748][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.930759][ T6453] R13: 00007f38ac026038 R14: 00007f38ac025fa0 R15: 00007f38ac14fa48 [ 115.930787][ T6453] [ 115.933818][ T5686] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 116.073385][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 116.118463][ T5686] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 116.141174][ T5686] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 116.141217][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 116.141240][ T5686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 116.141277][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.228478][ T5686] usb 2-1: config 0 descriptor?? [ 116.238196][ T6446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.325002][ T5706] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.331737][ T1151] IPVS: starting estimator thread 0... [ 116.413887][ T6461] IPVS: using max 39 ests per chain, 93600 per kthread [ 116.474758][ T5706] usb 5-1: Using ep0 maxpacket: 32 [ 116.476233][ T5706] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 116.480936][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.480958][ T5706] usb 5-1: Product: syz [ 116.480971][ T5706] usb 5-1: Manufacturer: syz [ 116.480983][ T5706] usb 5-1: SerialNumber: syz [ 116.488213][ T5706] usb 5-1: config 0 descriptor?? [ 116.499730][ T5706] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 116.500103][ T5706] dvb-usb: bulk message failed: -22 (4/0) [ 116.500118][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 116.500233][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 116.506825][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 116.550708][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.552838][ T5706] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 116.552891][ T5706] usb 5-1: media controller created [ 116.631404][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.675776][ T5686] dragonrise 0003:0079:0011.0001: ignoring exceeding usage max [ 116.685057][ T5686] dragonrise 0003:0079:0011.0001: unknown main item tag 0x4 [ 116.718749][ T5706] usb 5-1: selecting invalid altsetting 3 [ 116.718769][ T5706] ttusb2: set interface to alts=3 failed [ 116.735750][ T5686] dragonrise 0003:0079:0011.0001: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0 [ 116.788112][ T6458] dvb-usb: bulk message failed: -22 (7/0) [ 116.788131][ T6458] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 116.788184][ T6458] ttusb2: i2c transfer failed. [ 116.838350][ T6480] FAULT_INJECTION: forcing a failure. [ 116.838350][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 116.838380][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.2.240 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.838402][ T6480] Tainted: [L]=SOFTLOCKUP [ 116.838409][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.838418][ T6480] Call Trace: [ 116.838425][ T6480] [ 116.838433][ T6480] dump_stack_lvl+0xe8/0x150 [ 116.838462][ T6480] should_fail_ex+0x410/0x560 [ 116.838489][ T6480] should_failslab+0xa8/0x100 [ 116.838511][ T6480] ? skb_clone+0x212/0x3a0 [ 116.838536][ T6480] kmem_cache_alloc_noprof+0xa1/0x600 [ 116.838566][ T6480] ? skb_clone+0x212/0x3a0 [ 116.838595][ T6480] skb_clone+0x212/0x3a0 [ 116.838623][ T6480] __netlink_deliver_tap+0x413/0x860 [ 116.838658][ T6480] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.838690][ T6480] netlink_deliver_tap+0x19c/0x1b0 [ 116.838717][ T6480] netlink_unicast+0x781/0x940 [ 116.838751][ T6480] netlink_sendmsg+0x813/0xb40 [ 116.838776][ T6480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.838799][ T6480] ? apparmor_socket_sendmsg+0x98/0x360 [ 116.838822][ T6480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.838838][ T6480] sock_sendmsg_nosec+0x13a/0x180 [ 116.838859][ T6480] ____sys_sendmsg+0x54e/0x850 [ 116.838902][ T6480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.838931][ T6480] ? import_iovec+0x73/0xa0 [ 116.838962][ T6480] ___sys_sendmsg+0x2a5/0x360 [ 116.838984][ T6480] ? __lock_acquire+0x747/0x2de0 [ 116.839005][ T6480] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.839057][ T6480] ? __fget_files+0x2a/0x420 [ 116.839079][ T6480] ? __fget_files+0x3a2/0x420 [ 116.839109][ T6480] __x64_sys_sendmsg+0x1b1/0x290 [ 116.839135][ T6480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.839176][ T6480] do_syscall_64+0x166/0x520 [ 116.839195][ T6480] ? trace_irq_disable+0x3b/0x140 [ 116.839212][ T6480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.839233][ T6480] ? clear_bhb_loop+0x70/0xc0 [ 116.839255][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.839273][ T6480] RIP: 0033:0x7f014639e159 [ 116.839290][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.839302][ T6480] RSP: 002b:00007f014723b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.839321][ T6480] RAX: ffffffffffffffda RBX: 00007f0146625fa0 RCX: 00007f014639e159 [ 116.839334][ T6480] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 116.839343][ T6480] RBP: 00007f014723b090 R08: 0000000000000000 R09: 0000000000000000 [ 116.839353][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.839362][ T6480] R13: 00007f0146626038 R14: 00007f0146625fa0 R15: 00007f014674fa48 [ 116.839389][ T6480] [ 116.883119][ T6446] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 116.904756][ T5706] DVB: Unable to find symbol tda10086_attach() [ 116.904771][ T5706] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 116.909455][ T5706] dvb-usb: bulk message failed: -22 (4/0) [ 116.909472][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 116.909584][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 116.909595][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 116.909655][ T5706] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 116.940222][ T5706] usb 5-1: USB disconnect, device number 11 [ 117.051739][ T6484] netlink: 'syz.1.228': attribute type 10 has an invalid length. [ 117.051758][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.228'. [ 117.210732][ T6446] bond2: option mode: invalid value (7) [ 117.212387][ T5706] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 117.231551][ T6446] bond2 (unregistering): Released all slaves [ 117.298681][ T6487] openvswitch: netlink: Message has 179 unknown bytes. [ 117.353781][ T943] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.490537][ T6492] FAULT_INJECTION: forcing a failure. [ 117.490537][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 117.490569][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.0.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.490593][ T6492] Tainted: [L]=SOFTLOCKUP [ 117.490600][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.490610][ T6492] Call Trace: [ 117.490617][ T6492] [ 117.490625][ T6492] dump_stack_lvl+0xe8/0x150 [ 117.490656][ T6492] should_fail_ex+0x410/0x560 [ 117.490686][ T6492] should_failslab+0xa8/0x100 [ 117.490709][ T6492] ? skb_clone+0x212/0x3a0 [ 117.490734][ T6492] kmem_cache_alloc_noprof+0xa1/0x600 [ 117.490763][ T6492] ? skb_clone+0x212/0x3a0 [ 117.490794][ T6492] skb_clone+0x212/0x3a0 [ 117.490821][ T6492] __netlink_deliver_tap+0x413/0x860 [ 117.490860][ T6492] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.490888][ T6492] netlink_deliver_tap+0x19c/0x1b0 [ 117.490917][ T6492] netlink_unicast+0x781/0x940 [ 117.490960][ T6492] netlink_sendmsg+0x813/0xb40 [ 117.490987][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.491013][ T6492] ? apparmor_socket_sendmsg+0x98/0x360 [ 117.491036][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.491052][ T6492] sock_sendmsg_nosec+0x13a/0x180 [ 117.491074][ T6492] ____sys_sendmsg+0x54e/0x850 [ 117.491103][ T6492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.491136][ T6492] ? import_iovec+0x73/0xa0 [ 117.491162][ T6492] ___sys_sendmsg+0x2a5/0x360 [ 117.491186][ T6492] ? __lock_acquire+0x747/0x2de0 [ 117.491209][ T6492] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.491267][ T6492] ? __fget_files+0x2a/0x420 [ 117.491290][ T6492] ? __fget_files+0x3a2/0x420 [ 117.491324][ T6492] __x64_sys_sendmsg+0x1b1/0x290 [ 117.491351][ T6492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.491396][ T6492] do_syscall_64+0x166/0x520 [ 117.491418][ T6492] ? trace_irq_disable+0x3b/0x140 [ 117.491436][ T6492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.491454][ T6492] ? clear_bhb_loop+0x70/0xc0 [ 117.491477][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.491495][ T6492] RIP: 0033:0x7faecf19e159 [ 117.491512][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.491526][ T6492] RSP: 002b:00007faed0044028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.491545][ T6492] RAX: ffffffffffffffda RBX: 00007faecf425fa0 RCX: 00007faecf19e159 [ 117.491558][ T6492] RDX: 0000000000048004 RSI: 0000200000000280 RDI: 0000000000000005 [ 117.491570][ T6492] RBP: 00007faed0044090 R08: 0000000000000000 R09: 0000000000000000 [ 117.491581][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.491592][ T6492] R13: 00007faecf426038 R14: 00007faecf425fa0 R15: 00007faecf54fa48 [ 117.491621][ T6492] [ 117.509396][ T943] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 117.511529][ T943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.511556][ T943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.511589][ T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.520191][ T943] usb 4-1: config 0 descriptor?? [ 117.534826][ T6493] FAULT_INJECTION: forcing a failure. [ 117.534826][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 117.534857][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.4.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.534881][ T6493] Tainted: [L]=SOFTLOCKUP [ 117.534888][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.534898][ T6493] Call Trace: [ 117.534905][ T6493] [ 117.534913][ T6493] dump_stack_lvl+0xe8/0x150 [ 117.534952][ T6493] should_fail_ex+0x410/0x560 [ 117.534976][ T6493] ? alloc_slab_obj_exts+0x5c/0x180 [ 117.535002][ T6493] should_failslab+0xa8/0x100 [ 117.535025][ T6493] ? alloc_slab_obj_exts+0x5c/0x180 [ 117.535048][ T6493] __kmalloc_flags_noprof+0x128/0x7a0 [ 117.535070][ T6493] ? alloc_slab_obj_exts+0x5c/0x180 [ 117.535102][ T6493] alloc_slab_obj_exts+0x5c/0x180 [ 117.535130][ T6493] __memcg_slab_post_alloc_hook+0x60b/0xd90 [ 117.535165][ T6493] __kvmalloc_node_noprof+0x5f1/0x820 [ 117.535187][ T6493] ? __kvmalloc_node_noprof+0x345/0x820 [ 117.535205][ T6493] ? traverse+0xf1/0x620 [ 117.535223][ T6493] ? traverse+0xf1/0x620 [ 117.535248][ T6493] traverse+0xf1/0x620 [ 117.535266][ T6493] ? aa_file_perm+0x18b/0x15f0 [ 117.535294][ T6493] ? aa_file_perm+0x4ed/0x15f0 [ 117.535322][ T6493] seq_read_iter+0xb6a/0xca0 [ 117.535357][ T6493] seq_read+0x367/0x480 [ 117.535374][ T6493] ? kstrtoull+0x137/0x1d0 [ 117.535409][ T6493] ? __pfx_seq_read+0x10/0x10 [ 117.535436][ T6493] ? common_file_perm+0x20e/0x2b0 [ 117.535465][ T6493] ? __pfx_seq_read+0x10/0x10 [ 117.535482][ T6493] proc_reg_read+0x1e9/0x2e0 [ 117.535507][ T6493] vfs_readv+0x57c/0x850 [ 117.535530][ T6493] ? __pfx_proc_reg_read+0x10/0x10 [ 117.535553][ T6493] ? __pfx_vfs_readv+0x10/0x10 [ 117.535587][ T6493] ? __fget_files+0x2a/0x420 [ 117.535615][ T6493] ? __fget_files+0x3a2/0x420 [ 117.535638][ T6493] ? __fget_files+0x2a/0x420 [ 117.535670][ T6493] __x64_sys_preadv+0x19c/0x2b0 [ 117.535691][ T6493] ? __pfx___x64_sys_preadv+0x10/0x10 [ 117.535720][ T6493] do_syscall_64+0x166/0x520 [ 117.535743][ T6493] ? trace_irq_disable+0x3b/0x140 [ 117.535760][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.535779][ T6493] ? clear_bhb_loop+0x70/0xc0 [ 117.535801][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.535819][ T6493] RIP: 0033:0x7f38abd9e159 [ 117.535836][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.535850][ T6493] RSP: 002b:00007f38acca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 117.535869][ T6493] RAX: ffffffffffffffda RBX: 00007f38ac025fa0 RCX: 00007f38abd9e159 [ 117.535882][ T6493] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003 [ 117.535894][ T6493] RBP: 00007f38acca7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.535905][ T6493] R10: 00000000ffffffbf R11: 0000000000000246 R12: 0000000000000001 [ 117.535916][ T6493] R13: 00007f38ac026038 R14: 00007f38ac025fa0 R15: 00007f38ac14fa48 [ 117.535953][ T6493] [ 117.781633][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 117.946394][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 118.067661][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 118.379166][ T6497] FAULT_INJECTION: forcing a failure. [ 118.379166][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 118.379199][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz.0.246 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.379224][ T6497] Tainted: [L]=SOFTLOCKUP [ 118.379230][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.379240][ T6497] Call Trace: [ 118.379248][ T6497] [ 118.379255][ T6497] dump_stack_lvl+0xe8/0x150 [ 118.379286][ T6497] should_fail_ex+0x410/0x560 [ 118.379312][ T6497] should_failslab+0xa8/0x100 [ 118.379333][ T6497] ? skb_clone+0x212/0x3a0 [ 118.379358][ T6497] kmem_cache_alloc_noprof+0xa1/0x600 [ 118.379388][ T6497] ? skb_clone+0x212/0x3a0 [ 118.379419][ T6497] skb_clone+0x212/0x3a0 [ 118.379447][ T6497] __netlink_deliver_tap+0x413/0x860 [ 118.379486][ T6497] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.379514][ T6497] netlink_deliver_tap+0x19c/0x1b0 [ 118.379543][ T6497] netlink_unicast+0x781/0x940 [ 118.379578][ T6497] netlink_sendmsg+0x813/0xb40 [ 118.379604][ T6497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.379629][ T6497] ? apparmor_socket_sendmsg+0x98/0x360 [ 118.379652][ T6497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.379668][ T6497] sock_sendmsg_nosec+0x13a/0x180 [ 118.379690][ T6497] ____sys_sendmsg+0x54e/0x850 [ 118.379719][ T6497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.379752][ T6497] ? import_iovec+0x73/0xa0 [ 118.379779][ T6497] ___sys_sendmsg+0x2a5/0x360 [ 118.379802][ T6497] ? __lock_acquire+0x747/0x2de0 [ 118.379825][ T6497] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.379889][ T6497] ? __fget_files+0x2a/0x420 [ 118.379913][ T6497] ? __fget_files+0x3a2/0x420 [ 118.379946][ T6497] __x64_sys_sendmsg+0x1b1/0x290 [ 118.379974][ T6497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.380020][ T6497] do_syscall_64+0x166/0x520 [ 118.380041][ T6497] ? trace_irq_disable+0x3b/0x140 [ 118.380062][ T6497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.380081][ T6497] ? clear_bhb_loop+0x70/0xc0 [ 118.380103][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.380122][ T6497] RIP: 0033:0x7faecf19e159 [ 118.380140][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.380155][ T6497] RSP: 002b:00007faed0002028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.380175][ T6497] RAX: ffffffffffffffda RBX: 00007faecf426180 RCX: 00007faecf19e159 [ 118.380189][ T6497] RDX: 00000000040080c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 118.380201][ T6497] RBP: 00007faed0002090 R08: 0000000000000000 R09: 0000000000000000 [ 118.380212][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.380223][ T6497] R13: 00007faecf426218 R14: 00007faecf426180 R15: 00007faecf54fa48 [ 118.380253][ T6497] [ 118.726998][ T943] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.727037][ T943] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.727064][ T943] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.727090][ T943] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.727115][ T943] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.727139][ T943] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.727162][ T943] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.857236][ T943] cp2112 0003:10C4:EA90.0002: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 118.896422][ T6484] dummy0: entered promiscuous mode [ 118.911191][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.911606][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.961268][ T943] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 119.287477][ T30] usb 2-1: USB disconnect, device number 10 [ 119.403856][ T6485] cp2112 0003:10C4:EA90.0002: Error starting transaction: -38 [ 119.531219][ T943] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 119.578011][ T943] usb 4-1: USB disconnect, device number 10 [ 119.652983][ T6503] fido_id[6503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 119.975145][ T6507] loop5: detected capacity change from 0 to 7 [ 120.083090][ T6516] FAULT_INJECTION: forcing a failure. [ 120.083090][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 120.083122][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.1.251 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.083147][ T6516] Tainted: [L]=SOFTLOCKUP [ 120.083153][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.083164][ T6516] Call Trace: [ 120.083172][ T6516] [ 120.083179][ T6516] dump_stack_lvl+0xe8/0x150 [ 120.083210][ T6516] should_fail_ex+0x410/0x560 [ 120.083237][ T6516] should_failslab+0xa8/0x100 [ 120.083261][ T6516] __kmalloc_noprof+0xfe/0x720 [ 120.083279][ T6516] ? aa_label_asxprint+0x70/0x130 [ 120.083297][ T6516] ? aa_label_asxprint+0x70/0x130 [ 120.083325][ T6516] aa_label_asxprint+0x70/0x130 [ 120.083346][ T6516] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 120.083373][ T6516] audit_log_subj_ctx+0x11b/0x530 [ 120.083401][ T6516] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 120.083433][ T6516] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 120.083459][ T6516] audit_log_task_context+0x94/0xe0 [ 120.083484][ T6516] ? __pfx_audit_log_task_context+0x10/0x10 [ 120.083510][ T6516] ? audit_log_start+0x7fe/0xa10 [ 120.083539][ T6516] audit_log_task+0x19b/0x3d0 [ 120.083564][ T6516] ? __pfx_audit_log_task+0x10/0x10 [ 120.083597][ T6516] audit_seccomp+0x85/0x190 [ 120.083630][ T6516] __seccomp_filter+0xd14/0x1de0 [ 120.083659][ T6516] ? __pfx___seccomp_filter+0x10/0x10 [ 120.083677][ T6516] ? __mutex_unlock_slowpath+0x731/0x900 [ 120.083703][ T6516] ? __fget_files+0x2a/0x420 [ 120.083728][ T6516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.083752][ T6516] ? __fget_files+0x3a2/0x420 [ 120.083781][ T6516] ? fput+0xa0/0xd0 [ 120.083808][ T6516] ? __pfx_ksys_write+0x10/0x10 [ 120.083838][ T6516] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 120.083864][ T6516] do_syscall_64+0x11f/0x520 [ 120.083885][ T6516] ? trace_irq_disable+0x3b/0x140 [ 120.083903][ T6516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.083921][ T6516] ? clear_bhb_loop+0x70/0xc0 [ 120.083943][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.083962][ T6516] RIP: 0033:0x7fefa799e159 [ 120.083978][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.083993][ T6516] RSP: 002b:00007fefa88a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 120.084013][ T6516] RAX: ffffffffffffffda RBX: 00007fefa7c25fa0 RCX: 00007fefa799e159 [ 120.084026][ T6516] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 120.084037][ T6516] RBP: 00007fefa88a2090 R08: 0000000000000000 R09: 0000000000000000 [ 120.084047][ T6516] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 120.084058][ T6516] R13: 00007fefa7c26038 R14: 00007fefa7c25fa0 R15: 00007fefa7d4fa48 [ 120.084087][ T6516] [ 120.303265][ T6516] audit_panic: 716 callbacks suppressed [ 120.303281][ T6516] audit: error in audit_log_subj_ctx [ 120.395264][ T31] audit: type=1326 audit(1789867643.764:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa799e159 code=0x7ffc0000 [ 120.395312][ T31] audit: type=1326 audit(1789867643.764:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa799e159 code=0x7ffc0000 [ 120.395348][ T31] audit: type=1326 audit(1789867643.764:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefa795e98e code=0x7ffc0000 [ 120.395385][ T31] audit: type=1326 audit(1789867643.764:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefa795e98e code=0x7ffc0000 [ 120.544528][ T31] audit: type=1326 audit(1789867643.764:957): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fefa799e159 code=0x7ffc0000 [ 120.610816][ T31] audit: type=1326 audit(1789867644.294:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fefa795e98e code=0x7ffc0000 [ 120.610864][ T31] audit: type=1326 audit(1789867644.294:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefa795e98e code=0x7ffc0000 [ 120.610902][ T31] audit: type=1326 audit(1789867644.294:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fefa795e98e code=0x7ffc0000 [ 120.610939][ T31] audit: type=1326 audit(1789867644.294:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.1.251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa799e159 code=0x7ffc0000 [ 121.242504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 122.513762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.982542][ T6540] FAULT_INJECTION: forcing a failure. [ 122.982542][ T6540] name failslab, interval 1, probability 0, space 0, times 0 [ 122.982574][ T6540] CPU: 1 UID: 0 PID: 6540 Comm: syz.0.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.982598][ T6540] Tainted: [L]=SOFTLOCKUP [ 122.982605][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.982616][ T6540] Call Trace: [ 122.982623][ T6540] [ 122.982631][ T6540] dump_stack_lvl+0xe8/0x150 [ 122.982663][ T6540] should_fail_ex+0x410/0x560 [ 122.982687][ T6540] ? __alloc_skb+0x1db/0x7a0 [ 122.982709][ T6540] should_failslab+0xa8/0x100 [ 122.982732][ T6540] ? __alloc_skb+0x1db/0x7a0 [ 122.982751][ T6540] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 122.982788][ T6540] ? __alloc_skb+0x18d/0x7a0 [ 122.982809][ T6540] ? __alloc_skb+0x1db/0x7a0 [ 122.982837][ T6540] __alloc_skb+0x1db/0x7a0 [ 122.982862][ T6540] alloc_skb_with_frags+0xc6/0x760 [ 122.982888][ T6540] ? lock_acquire+0x115/0x350 [ 122.982912][ T6540] sock_alloc_send_pskb+0x878/0x990 [ 122.982956][ T6540] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 122.982986][ T6540] ? ipv6_dev_get_saddr+0x159/0xbb0 [ 122.983016][ T6540] ? ipv6_dev_get_saddr+0x699/0xbb0 [ 122.983045][ T6540] __ip6_append_data+0x2de9/0x40c0 [ 122.983066][ T6540] ? __lock_acquire+0x747/0x2de0 [ 122.983101][ T6540] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 122.983136][ T6540] ? ip6_mtu+0x7d/0x4a0 [ 122.983161][ T6540] ? __pfx___ip6_append_data+0x10/0x10 [ 122.983184][ T6540] ? __pfx_ip6_mtu+0x10/0x10 [ 122.983202][ T6540] ? ip6_setup_cork+0x631/0xfb0 [ 122.983224][ T6540] ? ip6_append_data+0x1a6/0x270 [ 122.983248][ T6540] ip6_append_data+0x108/0x270 [ 122.983272][ T6540] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 122.983294][ T6540] udpv6_sendmsg+0xca2/0x2610 [ 122.983333][ T6540] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 122.983354][ T6540] ? udp_lib_get_port+0x177b/0x1c60 [ 122.983398][ T6540] ? inet_send_prepare+0x1b4/0x260 [ 122.983422][ T6540] ? lockdep_hardirqs_on+0x7b/0x110 [ 122.983444][ T6540] ? inet_send_prepare+0x1b4/0x260 [ 122.983461][ T6540] ? __local_bh_enable_ip+0xd6/0x140 [ 122.983485][ T6540] ? inet_send_prepare+0x1b4/0x260 [ 122.983506][ T6540] ? inet6_sendmsg+0xe4/0x120 [ 122.983525][ T6540] ? __pfx_inet6_sendmsg+0x10/0x10 [ 122.983551][ T6540] sock_sendmsg_nosec+0x90/0x180 [ 122.983572][ T6540] ____sys_sendmsg+0x54e/0x850 [ 122.983603][ T6540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.983637][ T6540] ? import_iovec+0x73/0xa0 [ 122.983664][ T6540] ___sys_sendmsg+0x2a5/0x360 [ 122.983686][ T6540] ? __lock_acquire+0x747/0x2de0 [ 122.983709][ T6540] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.983772][ T6540] ? __fget_files+0x2a/0x420 [ 122.983797][ T6540] ? __fget_files+0x3a2/0x420 [ 122.983831][ T6540] __x64_sys_sendmsg+0x1b1/0x290 [ 122.983858][ T6540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.983903][ T6540] do_syscall_64+0x166/0x520 [ 122.983925][ T6540] ? trace_irq_disable+0x3b/0x140 [ 122.983943][ T6540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.983962][ T6540] ? clear_bhb_loop+0x70/0xc0 [ 122.983984][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.984003][ T6540] RIP: 0033:0x7faecf19e159 [ 122.984020][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.984035][ T6540] RSP: 002b:00007faed0044028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.984056][ T6540] RAX: ffffffffffffffda RBX: 00007faecf425fa0 RCX: 00007faecf19e159 [ 122.984069][ T6540] RDX: 000000000000ff00 RSI: 0000200000000100 RDI: 0000000000000003 [ 122.984081][ T6540] RBP: 00007faed0044090 R08: 0000000000000000 R09: 0000000000000000 [ 122.984092][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.984103][ T6540] R13: 00007faecf426038 R14: 00007faecf425fa0 R15: 00007faecf54fa48 [ 122.984134][ T6540] [ 123.204087][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.711875][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 123.805232][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.879977][ T9] usb 4-1: config 0 descriptor?? [ 123.921208][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 123.958529][ T6549] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 123.958549][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 125.312998][ T6555] ip_tables: iptables: counters copy to user failed while replacing table [ 126.095292][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.117046][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.623795][ T943] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.657059][ T6557] netlink: 348 bytes leftover after parsing attributes in process `syz.3.257'. [ 127.155403][ T943] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.155454][ T943] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 127.156446][ T943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.156466][ T943] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.156506][ T943] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 127.156539][ T943] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 127.156572][ T943] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.156595][ T943] usb 1-1: config 1 interface 1 has no altsetting 0 [ 127.322630][ T943] usb 1-1: string descriptor 0 read error: -22 [ 127.322762][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.247961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 128.266589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 128.327698][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 128.357533][ T9] usb 4-1: USB disconnect, device number 11 [ 128.569084][ T943] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 128.681407][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.854080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 130.362157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 130.832451][ T6589] FAULT_INJECTION: forcing a failure. [ 130.832451][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 130.832489][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.2.271 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.832514][ T6589] Tainted: [L]=SOFTLOCKUP [ 130.832521][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.832533][ T6589] Call Trace: [ 130.832540][ T6589] [ 130.832548][ T6589] dump_stack_lvl+0xe8/0x150 [ 130.832580][ T6589] should_fail_ex+0x410/0x560 [ 130.832606][ T6589] should_failslab+0xa8/0x100 [ 130.832631][ T6589] __kmalloc_noprof+0xfe/0x720 [ 130.832649][ T6589] ? timer_init_key+0x161/0x2c0 [ 130.832666][ T6589] ? pfkey_spdadd+0x89b/0x1aa0 [ 130.832691][ T6589] ? pfkey_spdadd+0x89b/0x1aa0 [ 130.832722][ T6589] pfkey_spdadd+0x89b/0x1aa0 [ 130.832760][ T6589] ? __pfx_pfkey_spdadd+0x10/0x10 [ 130.832799][ T6589] pfkey_sendmsg+0xceb/0x11d0 [ 130.832837][ T6589] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 130.832883][ T6589] ? aa_sock_msg_perm+0x144/0x210 [ 130.832911][ T6589] ? apparmor_socket_sendmsg+0x98/0x360 [ 130.832934][ T6589] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 130.832958][ T6589] sock_sendmsg_nosec+0x13a/0x180 [ 130.832979][ T6589] ____sys_sendmsg+0x54e/0x850 [ 130.833010][ T6589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.833043][ T6589] ? import_iovec+0x73/0xa0 [ 130.833070][ T6589] ___sys_sendmsg+0x2a5/0x360 [ 130.833093][ T6589] ? __lock_acquire+0x747/0x2de0 [ 130.833116][ T6589] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.833183][ T6589] ? __fget_files+0x2a/0x420 [ 130.833207][ T6589] ? __fget_files+0x3a2/0x420 [ 130.833241][ T6589] __x64_sys_sendmsg+0x1b1/0x290 [ 130.833268][ T6589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.833313][ T6589] do_syscall_64+0x166/0x520 [ 130.833335][ T6589] ? trace_irq_disable+0x3b/0x140 [ 130.833353][ T6589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.833372][ T6589] ? clear_bhb_loop+0x70/0xc0 [ 130.833393][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.833412][ T6589] RIP: 0033:0x7f014639e159 [ 130.833429][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.833445][ T6589] RSP: 002b:00007f014723b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.833465][ T6589] RAX: ffffffffffffffda RBX: 00007f0146625fa0 RCX: 00007f014639e159 [ 130.833478][ T6589] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 130.833490][ T6589] RBP: 00007f014723b090 R08: 0000000000000000 R09: 0000000000000000 [ 130.833501][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.833512][ T6589] R13: 00007f0146626038 R14: 00007f0146625fa0 R15: 00007f014674fa48 [ 130.833542][ T6589] [ 131.824317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.233852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.368226][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.368283][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.386766][ T6594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.583157][ T6600] syzkaller0: entered promiscuous mode [ 134.583179][ T6600] syzkaller0: entered allmulticast mode [ 134.700314][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 134.700378][ T6605] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 134.853220][ T5706] usb 1-1: USB disconnect, device number 10 [ 135.209725][ T6613] FAULT_INJECTION: forcing a failure. [ 135.209725][ T6613] name failslab, interval 1, probability 0, space 0, times 0 [ 135.209757][ T6613] CPU: 1 UID: 0 PID: 6613 Comm: syz.4.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.209782][ T6613] Tainted: [L]=SOFTLOCKUP [ 135.209789][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.209800][ T6613] Call Trace: [ 135.209807][ T6613] [ 135.209815][ T6613] dump_stack_lvl+0xe8/0x150 [ 135.209845][ T6613] should_fail_ex+0x410/0x560 [ 135.209870][ T6613] should_failslab+0xa8/0x100 [ 135.209894][ T6613] __kmalloc_node_noprof+0x100/0x720 [ 135.209912][ T6613] ? __get_vm_area_node+0x200/0x2f0 [ 135.209936][ T6613] ? __get_vm_area_node+0x283/0x2f0 [ 135.209958][ T6613] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 135.209983][ T6613] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 135.210017][ T6613] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 135.210047][ T6613] ? percpu_ref_get_many+0x19/0x140 [ 135.210071][ T6613] ? percpu_ref_get_many+0x19/0x140 [ 135.210099][ T6613] ? __memcg_slab_post_alloc_hook+0x487/0xd90 [ 135.210127][ T6613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.210152][ T6613] ? dup_task_struct+0x52/0xa00 [ 135.210173][ T6613] ? trace_kmem_cache_alloc+0x29/0xe0 [ 135.210200][ T6613] ? memcpy_and_pad+0x48/0x80 [ 135.210228][ T6613] __vmalloc_node_noprof+0xc2/0x100 [ 135.210255][ T6613] ? copy_process+0x820/0x43e0 [ 135.210275][ T6613] ? copy_process+0x820/0x43e0 [ 135.210300][ T6613] dup_task_struct+0x2c6/0xa00 [ 135.210329][ T6613] copy_process+0x820/0x43e0 [ 135.210364][ T6613] ? kstrtouint+0x6e/0xe0 [ 135.210384][ T6613] ? lock_acquire+0x115/0x350 [ 135.210402][ T6613] ? get_pid_task+0x20/0x1f0 [ 135.210427][ T6613] ? __pfx_copy_process+0x10/0x10 [ 135.210451][ T6613] ? get_pid_task+0x20/0x1f0 [ 135.210466][ T6613] ? get_pid_task+0x20/0x1f0 [ 135.210491][ T6613] kernel_clone+0x2d7/0x940 [ 135.210520][ T6613] ? __pfx_kernel_clone+0x10/0x10 [ 135.210562][ T6613] __x64_sys_clone+0x1b6/0x230 [ 135.210589][ T6613] ? __pfx___x64_sys_clone+0x10/0x10 [ 135.210627][ T6613] ? __pfx_ksys_write+0x10/0x10 [ 135.210670][ T6613] do_syscall_64+0x166/0x520 [ 135.210692][ T6613] ? trace_irq_disable+0x3b/0x140 [ 135.210710][ T6613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.210728][ T6613] ? clear_bhb_loop+0x70/0xc0 [ 135.210750][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.210768][ T6613] RIP: 0033:0x7f38abd9e159 [ 135.210785][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.210800][ T6613] RSP: 002b:00007f38acca6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 135.210821][ T6613] RAX: ffffffffffffffda RBX: 00007f38ac025fa0 RCX: 00007f38abd9e159 [ 135.210834][ T6613] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 135.210846][ T6613] RBP: 00007f38acca7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.210857][ T6613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 135.210868][ T6613] R13: 00007f38ac026038 R14: 00007f38ac025fa0 R15: 00007f38ac14fa48 [ 135.210892][ T6613] [ 135.255083][ T6613] syz.4.279: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.255150][ T6613] CPU: 1 UID: 0 PID: 6613 Comm: syz.4.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.255175][ T6613] Tainted: [L]=SOFTLOCKUP [ 135.255182][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.255192][ T6613] Call Trace: [ 135.255199][ T6613] [ 135.255207][ T6613] dump_stack_lvl+0xe8/0x150 [ 135.255237][ T6613] warn_alloc+0x24d/0x270 [ 135.255262][ T6613] ? __pfx_warn_alloc+0x10/0x10 [ 135.255285][ T6613] ? __kmalloc_node_noprof+0x4d7/0x720 [ 135.255301][ T6613] ? __get_vm_area_node+0x200/0x2f0 [ 135.255324][ T6613] ? __get_vm_area_node+0x283/0x2f0 [ 135.255347][ T6613] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 135.255372][ T6613] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 135.255405][ T6613] __vmalloc_node_range_noprof+0x969/0x1540 [ 135.255438][ T6613] ? percpu_ref_get_many+0x19/0x140 [ 135.255467][ T6613] ? __memcg_slab_post_alloc_hook+0x487/0xd90 [ 135.255496][ T6613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.255523][ T6613] ? dup_task_struct+0x52/0xa00 [ 135.255544][ T6613] ? trace_kmem_cache_alloc+0x29/0xe0 [ 135.255572][ T6613] ? memcpy_and_pad+0x48/0x80 [ 135.255602][ T6613] __vmalloc_node_noprof+0xc2/0x100 [ 135.255635][ T6613] ? copy_process+0x820/0x43e0 [ 135.255656][ T6613] ? copy_process+0x820/0x43e0 [ 135.255680][ T6613] dup_task_struct+0x2c6/0xa00 [ 135.255709][ T6613] copy_process+0x820/0x43e0 [ 135.255745][ T6613] ? kstrtouint+0x6e/0xe0 [ 135.255765][ T6613] ? lock_acquire+0x115/0x350 [ 135.255784][ T6613] ? get_pid_task+0x20/0x1f0 [ 135.255805][ T6613] ? __pfx_copy_process+0x10/0x10 [ 135.255829][ T6613] ? get_pid_task+0x20/0x1f0 [ 135.255845][ T6613] ? get_pid_task+0x20/0x1f0 [ 135.255869][ T6613] kernel_clone+0x2d7/0x940 [ 135.255899][ T6613] ? __pfx_kernel_clone+0x10/0x10 [ 135.255941][ T6613] __x64_sys_clone+0x1b6/0x230 [ 135.255969][ T6613] ? __pfx___x64_sys_clone+0x10/0x10 [ 135.256009][ T6613] ? __pfx_ksys_write+0x10/0x10 [ 135.256046][ T6613] do_syscall_64+0x166/0x520 [ 135.256068][ T6613] ? trace_irq_disable+0x3b/0x140 [ 135.256090][ T6613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.256108][ T6613] ? clear_bhb_loop+0x70/0xc0 [ 135.256130][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.256148][ T6613] RIP: 0033:0x7f38abd9e159 [ 135.256165][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.256181][ T6613] RSP: 002b:00007f38acca6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 135.256200][ T6613] RAX: ffffffffffffffda RBX: 00007f38ac025fa0 RCX: 00007f38abd9e159 [ 135.256213][ T6613] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 135.256224][ T6613] RBP: 00007f38acca7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.256235][ T6613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 135.256246][ T6613] R13: 00007f38ac026038 R14: 00007f38ac025fa0 R15: 00007f38ac14fa48 [ 135.256276][ T6613] [ 135.256310][ T6613] Mem-Info: [ 135.256318][ T6613] active_anon:6488 inactive_anon:0 isolated_anon:0 [ 135.256318][ T6613] active_file:391 inactive_file:54157 isolated_file:0 [ 135.256318][ T6613] unevictable:0 dirty:410 writeback:0 [ 135.256318][ T6613] slab_reclaimable:10326 slab_unreclaimable:98697 [ 135.256318][ T6613] mapped:30446 shmem:792 pagetables:1296 [ 135.256318][ T6613] sec_pagetables:0 bounce:0 [ 135.256318][ T6613] kernel_misc_reclaimable:0 [ 135.256318][ T6613] free:1307022 free_pcp:12522 free_cma:0 [ 135.256364][ T6613] Node 0 active_anon:25952kB inactive_anon:0kB active_file:1564kB inactive_file:216428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121784kB dirty:1640kB writeback:0kB shmem:3168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12388kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 135.256414][ T6613] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 135.256461][ T6613] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.256513][ T6613] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 135.256546][ T6613] Node 0 DMA32 free:1262360kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25952kB inactive_anon:0kB active_file:1564kB inactive_file:216428kB unevictable:0kB writepending:1640kB zspages:0kB present:3129332kB managed:2546956kB mlocked:0kB bounce:0kB free_pcp:50088kB local_pcp:21536kB free_cma:0kB [ 135.644008][ T6613] lowmem_reserve[]: 0 0 0 0 0 [ 135.644042][ T6613] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.644091][ T6613] lowmem_reserve[]: 0 0 0 0 0 [ 135.644124][ T6613] Node 1 Normal free:3947676kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.644176][ T6613] lowmem_reserve[]: 0 0 0 0 0 [ 135.644207][ T6613] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.644312][ T6613] Node 0 DMA32: 910*4kB (UME) 542*8kB (UME) 422*16kB (ME) 1076*32kB (UME) 433*64kB (UME) 223*128kB (UME) 119*256kB (UME) 36*512kB (UM) 14*1024kB (UME) 8*2048kB (UME) 263*4096kB (M) = 1262280kB [ 135.644456][ T6613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 135.644546][ T6613] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (UM) 5*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947676kB [ 135.644695][ T6613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.644710][ T6613] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.644724][ T6613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.644738][ T6613] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.644752][ T6613] 55336 total pagecache pages [ 135.644759][ T6613] 0 pages in swap cache [ 135.644766][ T6613] Free swap = 124996kB [ 135.644773][ T6613] Total swap = 124996kB [ 135.644779][ T6613] 2097051 pages RAM [ 135.644785][ T6613] 0 pages HighMem/MovableOnly [ 135.644792][ T6613] 428696 pages reserved [ 135.644798][ T6613] 0 pages cma reserved [ 136.993847][ T943] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.150940][ T943] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.164579][ T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.164608][ T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.164628][ T943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.164666][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.201575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 137.260635][ T943] usb 2-1: config 0 descriptor?? [ 137.873798][ T5707] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.179932][ T943] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 138.183761][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 138.235699][ T5707] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 138.262964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 138.263863][ T5707] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.263891][ T5707] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.263915][ T5707] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.263937][ T5707] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.263969][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.337751][ T5707] usb 3-1: config 0 descriptor?? [ 139.456724][ T5707] wacom 0003:056A:032C.0004: hidraw1: USB HID v0.00 Joystick [HID 056a:032c] on usb-dummy_hcd.2-1/input0 [ 139.501737][ T5707] usb 3-1: USB disconnect, device number 7 [ 139.675356][ T943] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 140.151961][ T6648] fido_id[6648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.755840][ T5706] usb 2-1: USB disconnect, device number 11 [ 141.413615][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.293'. [ 142.455262][ T6678] kvm: MONITOR instruction emulated as NOP! [ 144.268971][ T6685] FAULT_INJECTION: forcing a failure. [ 144.268971][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.269006][ T6685] CPU: 1 UID: 0 PID: 6685 Comm: syz.0.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.269030][ T6685] Tainted: [L]=SOFTLOCKUP [ 144.269037][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.269048][ T6685] Call Trace: [ 144.269055][ T6685] [ 144.269063][ T6685] dump_stack_lvl+0xe8/0x150 [ 144.269096][ T6685] should_fail_ex+0x410/0x560 [ 144.269122][ T6685] _copy_to_user+0x31/0xb0 [ 144.269149][ T6685] simple_read_from_buffer+0xe1/0x170 [ 144.269178][ T6685] proc_fail_nth_read+0x1bb/0x230 [ 144.269205][ T6685] ? common_file_perm+0x20e/0x2b0 [ 144.269231][ T6685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.269261][ T6685] ? rw_verify_area+0x24a/0x4c0 [ 144.269288][ T6685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.269315][ T6685] vfs_read+0x213/0xa80 [ 144.269346][ T6685] ? __pfx___mutex_lock+0x10/0x10 [ 144.269369][ T6685] ? __pfx_vfs_read+0x10/0x10 [ 144.269397][ T6685] ? __fget_files+0x2a/0x420 [ 144.269425][ T6685] ? __fget_files+0x3a2/0x420 [ 144.269448][ T6685] ? __fget_files+0x2a/0x420 [ 144.269480][ T6685] ksys_read+0x150/0x270 [ 144.269508][ T6685] ? __pfx_ksys_read+0x10/0x10 [ 144.269545][ T6685] do_syscall_64+0x166/0x520 [ 144.269566][ T6685] ? trace_irq_disable+0x3b/0x140 [ 144.269585][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.269604][ T6685] ? clear_bhb_loop+0x70/0xc0 [ 144.269627][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.269645][ T6685] RIP: 0033:0x7faecf15e98e [ 144.269671][ T6685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.269687][ T6685] RSP: 002b:00007faed0043fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.269706][ T6685] RAX: ffffffffffffffda RBX: 00007faed00446c0 RCX: 00007faecf15e98e [ 144.269718][ T6685] RDX: 000000000000000f RSI: 00007faed00440a0 RDI: 0000000000000004 [ 144.269728][ T6685] RBP: 00007faed0044090 R08: 0000000000000000 R09: 0000000000000000 [ 144.269740][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.269751][ T6685] R13: 00007faecf426038 R14: 00007faecf425fa0 R15: 00007faecf54fa48 [ 144.269781][ T6685] [ 144.707982][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 150.204020][ T943] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.264202][ T5706] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 150.354800][ T943] usb 3-1: Using ep0 maxpacket: 32 [ 150.356926][ T943] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.356974][ T943] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 150.361460][ T943] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 150.361484][ T943] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 150.361503][ T943] usb 3-1: config 14 has no interface number 0 [ 150.361517][ T943] usb 3-1: config 14 has no interface number 1 [ 150.361573][ T943] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 150.361594][ T943] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 150.361617][ T943] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 150.361640][ T943] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 150.361664][ T943] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 150.361687][ T943] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.361711][ T943] usb 3-1: config 14 interface 57 has no altsetting 0 [ 150.361726][ T943] usb 3-1: config 14 interface 228 has no altsetting 0 [ 150.512309][ T943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.512334][ T943] usb 3-1: Product: syz [ 150.512347][ T943] usb 3-1: Manufacturer: syz [ 150.512360][ T943] usb 3-1: SerialNumber: syz [ 150.614783][ T5706] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.616014][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.616041][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.616064][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.616116][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.616154][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.621983][ T5706] usb 4-1: config 0 descriptor?? [ 150.700247][ T5707] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.874930][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 150.877219][ T5707] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 150.880122][ T5707] usb 1-1: config 0 interface 0 altsetting 168 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 150.880180][ T5707] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.880212][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.940580][ T5707] usb 1-1: config 0 descriptor?? [ 151.048106][ T943] legousbtower 3-1:14.57: interrupt endpoints not found [ 151.261162][ T943] legousbtower 3-1:14.228: get version request failed: -71 [ 151.261374][ T943] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 151.303280][ T943] usb 3-1: USB disconnect, device number 8 [ 151.361420][ T5706] usbhid 4-1:0.0: can't add hid device: -71 [ 151.361542][ T5706] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 151.389039][ T5706] usb 4-1: USB disconnect, device number 12 [ 151.558653][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.315'. [ 151.558675][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.315'. [ 151.558691][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.315'. [ 151.806032][ T6729] input: syz0 as /devices/virtual/input/input11 [ 151.889111][ T5707] usbhid 1-1:0.0: can't add hid device: -71 [ 151.889209][ T5707] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 151.921484][ T5707] usb 1-1: USB disconnect, device number 11 [ 152.476304][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'. [ 152.799050][ T6757] sctp: [Deprecated]: syz.0.323 (pid 6757) Use of int in max_burst socket option. [ 152.799050][ T6757] Use struct sctp_assoc_value instead [ 153.913603][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 153.913621][ T31] audit: type=1326 audit(1789867677.594:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38abd9e159 code=0x7ffc0000 [ 153.953679][ T31] audit: type=1326 audit(1789867677.634:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38abd9e159 code=0x7ffc0000 [ 153.990653][ T31] audit: type=1326 audit(1789867677.654:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38abd9e159 code=0x7ffc0000 [ 153.990702][ T31] audit: type=1326 audit(1789867677.654:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38abd9e159 code=0x7ffc0000 [ 154.093965][ T5707] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.111331][ T31] audit: type=1326 audit(1789867677.794:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38abd9e159 code=0x7ffc0000 [ 154.135634][ T31] audit: type=1326 audit(1789867677.794:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38abd9dec2 code=0x7ffc0000 [ 154.152962][ T31] audit: type=1326 audit(1789867677.824:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f38abd9df57 code=0x7ffc0000 [ 154.263705][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 154.266668][ T5707] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.266714][ T5707] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 154.268437][ T5707] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 154.268458][ T5707] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 154.268491][ T5707] usb 1-1: config 14 has no interface number 0 [ 154.268507][ T5707] usb 1-1: config 14 has no interface number 1 [ 154.269042][ T5707] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 154.269067][ T5707] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 154.269090][ T5707] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 154.269113][ T5707] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 154.269137][ T5707] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 154.269159][ T5707] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.269181][ T5707] usb 1-1: config 14 interface 57 has no altsetting 0 [ 154.269195][ T5707] usb 1-1: config 14 interface 228 has no altsetting 0 [ 154.272505][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.272526][ T5707] usb 1-1: Product: syz [ 154.272539][ T5707] usb 1-1: Manufacturer: syz [ 154.272552][ T5707] usb 1-1: SerialNumber: syz [ 154.314152][ T31] audit: type=1326 audit(1789867677.974:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f38abd9e159 code=0x7ffc0000 [ 154.314202][ T31] audit: type=1326 audit(1789867677.974:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38abd9e159 code=0x7ffc0000 [ 154.314241][ T31] audit: type=1326 audit(1789867677.974:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38abd9e159 code=0x7ffc0000 [ 155.013832][ T5706] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 155.165286][ T5706] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.167774][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.167803][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.167827][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.167846][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.167884][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.254656][ T5706] usb 4-1: config 0 descriptor?? [ 155.254911][ T5707] legousbtower 1-1:14.57: interrupt endpoints not found [ 155.386595][ T5707] legousbtower 1-1:14.228: get version request failed: -71 [ 155.386797][ T5707] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 155.423459][ T5707] usb 1-1: USB disconnect, device number 12 [ 155.805315][ T5706] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 156.670299][ T5706] usb 4-1: USB disconnect, device number 13 [ 157.275653][ T6774] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 157.749088][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 157.767387][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 158.111961][ T6807] FAULT_INJECTION: forcing a failure. [ 158.111961][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 158.111995][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.3.341 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.112020][ T6807] Tainted: [L]=SOFTLOCKUP [ 158.112027][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.112038][ T6807] Call Trace: [ 158.112046][ T6807] [ 158.112054][ T6807] dump_stack_lvl+0xe8/0x150 [ 158.112086][ T6807] should_fail_ex+0x410/0x560 [ 158.112112][ T6807] should_failslab+0xa8/0x100 [ 158.112137][ T6807] __kvmalloc_node_noprof+0x176/0x820 [ 158.112162][ T6807] ? alloc_netdev_mqs+0xa9/0x12a0 [ 158.112179][ T6807] ? alloc_netdev_mqs+0xa9/0x12a0 [ 158.112203][ T6807] alloc_netdev_mqs+0xa9/0x12a0 [ 158.112218][ T6807] ? __pfx_snprintf+0x10/0x10 [ 158.112236][ T6807] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 158.112267][ T6807] rtnl_create_link+0x321/0xd70 [ 158.112300][ T6807] rtnl_newlink_create+0x258/0x7b0 [ 158.112333][ T6807] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 158.112362][ T6807] ? __pfx___mutex_lock+0x10/0x10 [ 158.112394][ T6807] ? ns_capable+0x89/0xe0 [ 158.112423][ T6807] rtnl_newlink+0x166d/0x1c30 [ 158.112460][ T6807] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.112481][ T6807] ? do_syscall_64+0x166/0x520 [ 158.112501][ T6807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.112555][ T6807] ? kasan_quarantine_put+0xbb/0x1f0 [ 158.112575][ T6807] ? lockdep_hardirqs_on+0x7b/0x110 [ 158.112600][ T6807] ? nlmon_xmit+0xb0/0x100 [ 158.112619][ T6807] ? kmem_cache_free+0x182/0x650 [ 158.112650][ T6807] ? __lock_acquire+0x747/0x2de0 [ 158.112678][ T6807] ? __local_bh_enable_ip+0xd6/0x140 [ 158.112701][ T6807] ? lockdep_hardirqs_on+0x7b/0x110 [ 158.112722][ T6807] ? __dev_queue_xmit+0x29b/0x3820 [ 158.112747][ T6807] ? __local_bh_enable_ip+0xd6/0x140 [ 158.112768][ T6807] ? __dev_queue_xmit+0x29b/0x3820 [ 158.112800][ T6807] ? lock_acquire+0x115/0x350 [ 158.112831][ T6807] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.112853][ T6807] rtnetlink_rcv_msg+0x802/0xc00 [ 158.112882][ T6807] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 158.112904][ T6807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.112924][ T6807] ? ref_tracker_free+0x689/0x830 [ 158.112950][ T6807] ? __pfx_ref_tracker_free+0x10/0x10 [ 158.112972][ T6807] ? __asan_memcpy+0x40/0x70 [ 158.112987][ T6807] ? __skb_clone+0x5c/0x6c0 [ 158.113018][ T6807] netlink_rcv_skb+0x226/0x4a0 [ 158.113047][ T6807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.113071][ T6807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.113111][ T6807] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.113138][ T6807] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.113171][ T6807] netlink_unicast+0x7bd/0x940 [ 158.113207][ T6807] netlink_sendmsg+0x813/0xb40 [ 158.113234][ T6807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.113259][ T6807] ? apparmor_socket_sendmsg+0x98/0x360 [ 158.113283][ T6807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.113306][ T6807] sock_sendmsg_nosec+0x13a/0x180 [ 158.113328][ T6807] ____sys_sendmsg+0x54e/0x850 [ 158.113358][ T6807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.113392][ T6807] ? import_iovec+0x73/0xa0 [ 158.113419][ T6807] ___sys_sendmsg+0x2a5/0x360 [ 158.113442][ T6807] ? __lock_acquire+0x747/0x2de0 [ 158.113465][ T6807] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.113524][ T6807] ? __fget_files+0x2a/0x420 [ 158.113548][ T6807] ? __fget_files+0x3a2/0x420 [ 158.113583][ T6807] __x64_sys_sendmsg+0x1b1/0x290 [ 158.113610][ T6807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.113650][ T6807] do_syscall_64+0x166/0x520 [ 158.113670][ T6807] ? trace_irq_disable+0x3b/0x140 [ 158.113688][ T6807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.113707][ T6807] ? clear_bhb_loop+0x70/0xc0 [ 158.113729][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.113748][ T6807] RIP: 0033:0x7f4e7939e159 [ 158.113765][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.113780][ T6807] RSP: 002b:00007f4e7a187028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.113800][ T6807] RAX: ffffffffffffffda RBX: 00007f4e79625fa0 RCX: 00007f4e7939e159 [ 158.113813][ T6807] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 158.113825][ T6807] RBP: 00007f4e7a187090 R08: 0000000000000000 R09: 0000000000000000 [ 158.113836][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.113847][ T6807] R13: 00007f4e79626038 R14: 00007f4e79625fa0 R15: 00007f4e7974fa48 [ 158.113878][ T6807] [ 158.294488][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 158.648637][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 158.740336][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 158.762631][ T5706] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.851067][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 158.851100][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.853495][ T6786] input: syz0 as /devices/virtual/input/input14 [ 158.924909][ T5706] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 158.927113][ T5706] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 158.927154][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.927177][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.927196][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 158.927242][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.986004][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.986029][ T9] usb 5-1: Product: syz [ 158.986041][ T9] usb 5-1: Manufacturer: syz [ 158.986054][ T9] usb 5-1: SerialNumber: syz [ 159.036969][ T5706] usb 2-1: config 0 descriptor?? [ 159.083736][ T943] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 159.229979][ T9] usb 5-1: config 0 descriptor?? [ 159.242798][ T943] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 159.257760][ T943] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 159.257785][ T943] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 159.257802][ T943] usb 4-1: config 4 has no interface number 0 [ 159.257863][ T943] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.262982][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.263004][ T943] usb 4-1: Product: syz [ 159.263017][ T943] usb 4-1: Manufacturer: syz [ 159.263029][ T943] usb 4-1: SerialNumber: syz [ 159.280684][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.280716][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 159.486639][ T5706] usbhid 2-1:0.0: can't add hid device: -32 [ 159.486762][ T5706] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 159.814240][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.837112][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.839014][ T943] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 159.926771][ T943] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 159.929792][ T943] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 159.929843][ T943] usb 4-1: media controller created [ 159.960973][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.083017][ T943] DVB: Unable to find symbol dib7000p_attach() [ 160.083034][ T943] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 160.203763][ T943] rc_core: IR keymap rc-dib0700-rc5 not found [ 160.203783][ T943] Registered IR keymap rc-empty [ 160.204221][ T943] dvb-usb: could not initialize remote control. [ 160.204231][ T943] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 160.275638][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 160.298812][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 160.363289][ T6829] FAULT_INJECTION: forcing a failure. [ 160.363289][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 160.363323][ T6829] CPU: 1 UID: 0 PID: 6829 Comm: syz.2.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.363348][ T6829] Tainted: [L]=SOFTLOCKUP [ 160.363355][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.363366][ T6829] Call Trace: [ 160.363373][ T6829] [ 160.363381][ T6829] dump_stack_lvl+0xe8/0x150 [ 160.363412][ T6829] should_fail_ex+0x410/0x560 [ 160.363436][ T6829] ? __alloc_skb+0x1db/0x7a0 [ 160.363457][ T6829] should_failslab+0xa8/0x100 [ 160.363482][ T6829] ? __alloc_skb+0x1db/0x7a0 [ 160.363501][ T6829] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 160.363529][ T6829] ? __alloc_skb+0x18d/0x7a0 [ 160.363551][ T6829] ? __alloc_skb+0x1db/0x7a0 [ 160.363576][ T6829] __alloc_skb+0x1db/0x7a0 [ 160.363601][ T6829] netlink_sendmsg+0x5d4/0xb40 [ 160.363630][ T6829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.363651][ T6829] ? apparmor_socket_sendmsg+0x98/0x360 [ 160.363673][ T6829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.363689][ T6829] sock_sendmsg_nosec+0x13a/0x180 [ 160.363711][ T6829] ____sys_sendmsg+0x54e/0x850 [ 160.363741][ T6829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.363773][ T6829] ? import_iovec+0x73/0xa0 [ 160.363799][ T6829] ___sys_sendmsg+0x2a5/0x360 [ 160.363823][ T6829] ? __lock_acquire+0x747/0x2de0 [ 160.363846][ T6829] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.363901][ T6829] ? __fget_files+0x2a/0x420 [ 160.363925][ T6829] ? __fget_files+0x3a2/0x420 [ 160.363958][ T6829] __x64_sys_sendmsg+0x1b1/0x290 [ 160.363986][ T6829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.364030][ T6829] do_syscall_64+0x166/0x520 [ 160.364052][ T6829] ? trace_irq_disable+0x3b/0x140 [ 160.364078][ T6829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.364098][ T6829] ? clear_bhb_loop+0x70/0xc0 [ 160.364120][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.364138][ T6829] RIP: 0033:0x7f014639e159 [ 160.364155][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.364170][ T6829] RSP: 002b:00007f014723b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.364190][ T6829] RAX: ffffffffffffffda RBX: 00007f0146625fa0 RCX: 00007f014639e159 [ 160.364204][ T6829] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 160.364215][ T6829] RBP: 00007f014723b090 R08: 0000000000000000 R09: 0000000000000000 [ 160.364227][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.364237][ T6829] R13: 00007f0146626038 R14: 00007f0146625fa0 R15: 00007f014674fa48 [ 160.364267][ T6829] [ 160.893440][ T6833] program syz.2.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.030905][ T5706] usb 4-1: USB disconnect, device number 14 [ 161.119342][ T5706] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 161.189017][ T943] usb 2-1: USB disconnect, device number 12 [ 161.418592][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 161.418616][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 161.637441][ T5706] usb 5-1: USB disconnect, device number 12 [ 161.640666][ T5706] em28xx 5-1:0.0: Disconnecting em28xx [ 161.858878][ T5706] em28xx: Freeing device [ 161.889382][ T150] IPVS: starting estimator thread 0... [ 161.976345][ T6848] IPVS: using max 28 ests per chain, 67200 per kthread [ 162.040882][ T6850] FAULT_INJECTION: forcing a failure. [ 162.040882][ T6850] name failslab, interval 1, probability 0, space 0, times 0 [ 162.040917][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.4.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.040942][ T6850] Tainted: [L]=SOFTLOCKUP [ 162.040948][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.040958][ T6850] Call Trace: [ 162.040966][ T6850] [ 162.040973][ T6850] dump_stack_lvl+0xe8/0x150 [ 162.041002][ T6850] should_fail_ex+0x410/0x560 [ 162.041028][ T6850] should_failslab+0xa8/0x100 [ 162.041049][ T6850] ? skb_clone+0x212/0x3a0 [ 162.041070][ T6850] kmem_cache_alloc_noprof+0xa1/0x600 [ 162.041098][ T6850] ? skb_clone+0x212/0x3a0 [ 162.041127][ T6850] skb_clone+0x212/0x3a0 [ 162.041151][ T6850] __netlink_deliver_tap+0x413/0x860 [ 162.041183][ T6850] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.041212][ T6850] netlink_deliver_tap+0x19c/0x1b0 [ 162.041237][ T6850] netlink_unicast+0x781/0x940 [ 162.041267][ T6850] netlink_sendmsg+0x813/0xb40 [ 162.041293][ T6850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.041318][ T6850] ? apparmor_socket_sendmsg+0x98/0x360 [ 162.041334][ T6850] ? lock_acquire+0x115/0x350 [ 162.041353][ T6850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.041368][ T6850] sock_sendmsg_nosec+0x13a/0x180 [ 162.041399][ T6850] sock_write_iter+0x2de/0x3e0 [ 162.041429][ T6850] ? __pfx_sock_write_iter+0x10/0x10 [ 162.041463][ T6850] ? bpf_lsm_file_permission+0x9/0x20 [ 162.041486][ T6850] ? security_file_permission+0x75/0x260 [ 162.041511][ T6850] vfs_write+0x612/0xba0 [ 162.041544][ T6850] ? __pfx_vfs_write+0x10/0x10 [ 162.041580][ T6850] ? __fget_files+0x2a/0x420 [ 162.041612][ T6850] ksys_write+0x150/0x270 [ 162.041642][ T6850] ? __pfx_ksys_write+0x10/0x10 [ 162.041675][ T6850] do_syscall_64+0x166/0x520 [ 162.041696][ T6850] ? trace_irq_disable+0x3b/0x140 [ 162.041713][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.041727][ T6850] ? clear_bhb_loop+0x70/0xc0 [ 162.041744][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.041757][ T6850] RIP: 0033:0x7f38abd9e159 [ 162.041772][ T6850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.041791][ T6850] RSP: 002b:00007f38acc65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.041808][ T6850] RAX: ffffffffffffffda RBX: 00007f38ac026180 RCX: 00007f38abd9e159 [ 162.041818][ T6850] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 162.041827][ T6850] RBP: 00007f38acc65090 R08: 0000000000000000 R09: 0000000000000000 [ 162.041835][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.041843][ T6850] R13: 00007f38ac026218 R14: 00007f38ac026180 R15: 00007f38ac14fa48 [ 162.041867][ T6850] [ 162.051632][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 163.224717][ T5706] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.413801][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 163.414726][ T5706] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 163.415882][ T5706] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 163.415909][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.415940][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.472774][ T5706] usb 2-1: config 0 descriptor?? [ 163.545409][ T5706] usbhid 2-1:0.0: can't add hid device: -22 [ 163.545501][ T5706] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 163.909007][ T5731] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.075523][ T5731] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.080431][ T5731] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 164.080490][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.080509][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 164.133899][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.133925][ T5731] usb 1-1: Product: syz [ 164.133939][ T5731] usb 1-1: Manufacturer: syz [ 164.133952][ T5731] usb 1-1: SerialNumber: syz [ 164.166007][ T5731] usb 1-1: config 0 descriptor?? [ 164.460195][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 164.670668][ T6889] netlink: zone id is out of range [ 164.670685][ T6889] netlink: zone id is out of range [ 164.670692][ T6889] netlink: zone id is out of range [ 164.670699][ T6889] netlink: zone id is out of range [ 164.670709][ T6889] netlink: zone id is out of range [ 164.670944][ T6889] netlink: zone id is out of range [ 164.671229][ T6889] netlink: zone id is out of range [ 164.671239][ T6889] netlink: zone id is out of range [ 164.671247][ T6889] netlink: zone id is out of range [ 164.671254][ T6889] netlink: zone id is out of range [ 168.303492][ T5706] usb 2-1: USB disconnect, device number 13 [ 169.545020][ T5731] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 171.100263][ T5731] usb 1-1: USB disconnect, device number 13 [ 171.291507][ T6948] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.853890][ T5731] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.923512][ T6959] program syz.3.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.003985][ T5707] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.024103][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 172.027565][ T5731] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 172.056321][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.056347][ T5731] usb 1-1: Product: syz [ 172.056360][ T5731] usb 1-1: Manufacturer: syz [ 172.056374][ T5731] usb 1-1: SerialNumber: syz [ 172.075443][ T5731] usb 1-1: config 0 descriptor?? [ 172.153873][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 172.160271][ T5707] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 172.183025][ T5707] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 172.183074][ T5707] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.183128][ T5707] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 172.183153][ T5707] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 172.229523][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.229549][ T5707] usb 3-1: Product: syz [ 172.229562][ T5707] usb 3-1: Manufacturer: syz [ 172.229575][ T5707] usb 3-1: SerialNumber: syz [ 172.313480][ T5731] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.720288][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.736736][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.743164][ T5731] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 172.795494][ T5731] usb 1-1: USB disconnect, device number 14 [ 172.821975][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 172.872956][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 173.657710][ T5707] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 173.817781][ T5707] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 173.856310][ T5707] usb 3-1: USB disconnect, device number 9 [ 174.002945][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.143299][ T6981] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.169930][ T6981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.234630][ T6981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.253798][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.301478][ T6981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.314821][ T6981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.351024][ T6981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.380420][ T6981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.380583][ T6981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.463015][ T6981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.473593][ T6981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.519456][ T6981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.534781][ T6981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.536023][ T6981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 176.560411][ T6981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 178.333803][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.335151][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.414845][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 178.493796][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.573988][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 179.860742][ C1] sched: DL replenish lagged too much [ 180.413831][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.413887][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.493897][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 180.573755][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.653746][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.493750][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.653811][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.733815][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.057643][ T7019] FAULT_INJECTION: forcing a failure. [ 189.057643][ T7019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.057681][ T7019] CPU: 1 UID: 0 PID: 7019 Comm: syz.2.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.057705][ T7019] Tainted: [L]=SOFTLOCKUP [ 189.057712][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.057723][ T7019] Call Trace: [ 189.057731][ T7019] [ 189.057740][ T7019] dump_stack_lvl+0xe8/0x150 [ 189.057772][ T7019] should_fail_ex+0x410/0x560 [ 189.057798][ T7019] copy_folio_from_iter_atomic+0x45a/0x1a30 [ 189.057842][ T7019] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 189.057881][ T7019] iomap_file_buffered_write+0x4fb/0xb90 [ 189.057915][ T7019] ? inode_set_ctime_current+0x287/0xb60 [ 189.057938][ T7019] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 189.057958][ T7019] ? inode_maybe_inc_iversion+0x18f/0x200 [ 189.058013][ T7019] ? down_read+0x2be/0x330 [ 189.058041][ T7019] blkdev_write_iter+0x50d/0x700 [ 189.058072][ T7019] aio_write+0x5d0/0x870 [ 189.058099][ T7019] ? __pfx_aio_write+0x10/0x10 [ 189.058153][ T7019] io_submit_one+0x798/0x13d0 [ 189.058179][ T7019] ? lockdep_hardirqs_on+0x7b/0x110 [ 189.058220][ T7019] ? irqentry_exit+0x218/0x910 [ 189.058247][ T7019] ? __pfx_io_submit_one+0x10/0x10 [ 189.058265][ T7019] ? lock_acquire+0x115/0x350 [ 189.058298][ T7019] ? __might_fault+0xaf/0x130 [ 189.058327][ T7019] __se_sys_io_submit+0x195/0x340 [ 189.058357][ T7019] ? __pfx___se_sys_io_submit+0x10/0x10 [ 189.058383][ T7019] ? ksys_write+0x242/0x270 [ 189.058426][ T7019] do_syscall_64+0x166/0x520 [ 189.058447][ T7019] ? trace_irq_disable+0x3b/0x140 [ 189.058465][ T7019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.058484][ T7019] ? clear_bhb_loop+0x70/0xc0 [ 189.058507][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.058525][ T7019] RIP: 0033:0x7f014639e159 [ 189.058554][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.058569][ T7019] RSP: 002b:00007f014723b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 189.058589][ T7019] RAX: ffffffffffffffda RBX: 00007f0146625fa0 RCX: 00007f014639e159 [ 189.058603][ T7019] RDX: 0000200000000440 RSI: 000000000000001f RDI: 00007f0147212000 [ 189.058614][ T7019] RBP: 00007f014723b090 R08: 0000000000000000 R09: 0000000000000000 [ 189.058626][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.058637][ T7019] R13: 00007f0146626038 R14: 00007f0146625fa0 R15: 00007f014674fa48 [ 189.058667][ T7019] [ 189.900050][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'. [ 190.496759][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.519621][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.520590][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.522074][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.523166][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.658019][ T7035] FAULT_INJECTION: forcing a failure. [ 190.658019][ T7035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.658051][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: syz.3.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.658076][ T7035] Tainted: [L]=SOFTLOCKUP [ 190.658082][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.658094][ T7035] Call Trace: [ 190.658101][ T7035] [ 190.658109][ T7035] dump_stack_lvl+0xe8/0x150 [ 190.658139][ T7035] should_fail_ex+0x410/0x560 [ 190.658165][ T7035] _copy_from_user+0x2d/0xb0 [ 190.658190][ T7035] ucma_write+0x15d/0x2f0 [ 190.658214][ T7035] ? common_file_perm+0x20e/0x2b0 [ 190.658238][ T7035] ? __pfx_ucma_write+0x10/0x10 [ 190.658262][ T7035] ? security_file_permission+0x75/0x260 [ 190.658307][ T7035] ? rw_verify_area+0x203/0x4c0 [ 190.658341][ T7035] ? __pfx_ucma_write+0x10/0x10 [ 190.658365][ T7035] vfs_write+0x296/0xba0 [ 190.658399][ T7035] ? __pfx_vfs_write+0x10/0x10 [ 190.658427][ T7035] ? __fget_files+0x2a/0x420 [ 190.658454][ T7035] ? __fget_files+0x2a/0x420 [ 190.658477][ T7035] ? __fget_files+0x3a2/0x420 [ 190.658499][ T7035] ? __fget_files+0x2a/0x420 [ 190.658537][ T7035] ksys_write+0x150/0x270 [ 190.658570][ T7035] ? __pfx_ksys_write+0x10/0x10 [ 190.658606][ T7035] do_syscall_64+0x166/0x520 [ 190.658628][ T7035] ? trace_irq_disable+0x3b/0x140 [ 190.658647][ T7035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.658666][ T7035] ? clear_bhb_loop+0x70/0xc0 [ 190.658689][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.658707][ T7035] RIP: 0033:0x7f4e7939e159 [ 190.658724][ T7035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.658739][ T7035] RSP: 002b:00007f4e7a187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.658759][ T7035] RAX: ffffffffffffffda RBX: 00007f4e79625fa0 RCX: 00007f4e7939e159 [ 190.658769][ T7035] RDX: 0000000000000048 RSI: 0000200000000480 RDI: 0000000000000003 [ 190.658780][ T7035] RBP: 00007f4e7a187090 R08: 0000000000000000 R09: 0000000000000000 [ 190.658792][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.658803][ T7035] R13: 00007f4e79626038 R14: 00007f4e79625fa0 R15: 00007f4e7974fa48 [ 190.658833][ T7035] [ 191.213546][ T7044] FAULT_INJECTION: forcing a failure. [ 191.213546][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 191.213579][ T7044] CPU: 1 UID: 0 PID: 7044 Comm: syz.1.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.213604][ T7044] Tainted: [L]=SOFTLOCKUP [ 191.213613][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.213623][ T7044] Call Trace: [ 191.213629][ T7044] [ 191.213638][ T7044] dump_stack_lvl+0xe8/0x150 [ 191.213669][ T7044] should_fail_ex+0x410/0x560 [ 191.213695][ T7044] should_failslab+0xa8/0x100 [ 191.213719][ T7044] ? skb_clone+0x212/0x3a0 [ 191.213744][ T7044] kmem_cache_alloc_noprof+0xa1/0x600 [ 191.213774][ T7044] ? skb_clone+0x212/0x3a0 [ 191.213804][ T7044] skb_clone+0x212/0x3a0 [ 191.213833][ T7044] __netlink_deliver_tap+0x413/0x860 [ 191.213870][ T7044] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.213900][ T7044] netlink_deliver_tap+0x19c/0x1b0 [ 191.213928][ T7044] netlink_sendskb+0x68/0x140 [ 191.213955][ T7044] netlink_rcv_skb+0x2a4/0x4a0 [ 191.213990][ T7044] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 191.214017][ T7044] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.214054][ T7044] ? bpf_lsm_capable+0x9/0x20 [ 191.214072][ T7044] ? security_capable+0x7e/0x2c0 [ 191.214101][ T7044] nfnetlink_rcv+0x2b9/0x28c0 [ 191.214129][ T7044] ? __dev_queue_xmit+0x29b/0x3820 [ 191.214159][ T7044] ? __local_bh_enable_ip+0xd6/0x140 [ 191.214183][ T7044] ? lockdep_hardirqs_on+0x7b/0x110 [ 191.214204][ T7044] ? __dev_queue_xmit+0x29b/0x3820 [ 191.214228][ T7044] ? __local_bh_enable_ip+0xd6/0x140 [ 191.214250][ T7044] ? __dev_queue_xmit+0x29b/0x3820 [ 191.214275][ T7044] ? __dev_queue_xmit+0x1edc/0x3820 [ 191.214299][ T7044] ? do_syscall_64+0x166/0x520 [ 191.214320][ T7044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.214350][ T7044] ? __dev_queue_xmit+0x29b/0x3820 [ 191.214376][ T7044] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.214407][ T7044] ? __pfx___dev_queue_xmit+0x10/0x10 [ 191.214441][ T7044] ? ref_tracker_free+0x689/0x830 [ 191.214467][ T7044] ? __pfx_ref_tracker_free+0x10/0x10 [ 191.214488][ T7044] ? __asan_memcpy+0x40/0x70 [ 191.214505][ T7044] ? __skb_clone+0x5c/0x6c0 [ 191.214533][ T7044] ? __skb_clone+0x449/0x6c0 [ 191.214564][ T7044] ? skb_clone+0x246/0x3a0 [ 191.214592][ T7044] ? __netlink_deliver_tap+0x811/0x860 [ 191.214618][ T7044] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.214651][ T7044] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.214677][ T7044] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.214710][ T7044] netlink_unicast+0x7bd/0x940 [ 191.214745][ T7044] netlink_sendmsg+0x813/0xb40 [ 191.214772][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.214796][ T7044] ? apparmor_socket_sendmsg+0x98/0x360 [ 191.214816][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.214831][ T7044] sock_sendmsg_nosec+0x13a/0x180 [ 191.214853][ T7044] ____sys_sendmsg+0x54e/0x850 [ 191.214882][ T7044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.214915][ T7044] ? import_iovec+0x73/0xa0 [ 191.214942][ T7044] ___sys_sendmsg+0x2a5/0x360 [ 191.214971][ T7044] ? __lock_acquire+0x747/0x2de0 [ 191.214995][ T7044] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.215053][ T7044] ? __fget_files+0x2a/0x420 [ 191.215077][ T7044] ? __fget_files+0x3a2/0x420 [ 191.215111][ T7044] __x64_sys_sendmsg+0x1b1/0x290 [ 191.215139][ T7044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.215184][ T7044] do_syscall_64+0x166/0x520 [ 191.215205][ T7044] ? trace_irq_disable+0x3b/0x140 [ 191.215223][ T7044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.215242][ T7044] ? clear_bhb_loop+0x70/0xc0 [ 191.215265][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.215284][ T7044] RIP: 0033:0x7fefa799e159 [ 191.215301][ T7044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.215316][ T7044] RSP: 002b:00007fefa88a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.215336][ T7044] RAX: ffffffffffffffda RBX: 00007fefa7c25fa0 RCX: 00007fefa799e159 [ 191.215349][ T7044] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 191.215361][ T7044] RBP: 00007fefa88a2090 R08: 0000000000000000 R09: 0000000000000000 [ 191.215372][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.215384][ T7044] R13: 00007fefa7c26038 R14: 00007fefa7c25fa0 R15: 00007fefa7d4fa48 [ 191.215413][ T7044] [ 192.354483][ T7054] net_ratelimit: 61 callbacks suppressed [ 192.354502][ T7054] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 192.653952][ T5625] Bluetooth: hci5: command tx timeout [ 194.195902][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195960][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.492303][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 194.734339][ T5625] Bluetooth: hci5: command tx timeout [ 195.640806][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.652289][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.813923][ T5625] Bluetooth: hci5: command tx timeout [ 199.064248][ T5625] Bluetooth: hci5: command tx timeout [ 257.066089][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.074214][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.975648][ T4983] udevd[4983]: worker [7037] /devices/virtual/misc/kvm is taking a long time [ 314.066452][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 318.680066][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.688342][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.727554][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.735728][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.262238][ T32] INFO: task kworker/u8:3:50 blocked for more than 144 seconds. [ 382.262265][ T32] Tainted: G L syzkaller #0 [ 382.262276][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.262284][ T32] task:kworker/u8:3 state:D stack:22376 pid:50 tgid:50 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 382.262337][ T32] Workqueue: netns cleanup_net [ 382.262374][ T32] Call Trace: [ 382.262384][ T32] [ 382.262397][ T32] __schedule+0x17db/0x58f0 [ 382.262438][ T32] ? kasan_save_stack+0x4d/0x60 [ 382.262458][ T32] ? kasan_save_stack+0x3e/0x60 [ 382.262483][ T32] ? __pfx___schedule+0x10/0x10 [ 382.262512][ T32] ? schedule+0x90/0x2b0 [ 382.262536][ T32] schedule+0x164/0x2b0 [ 382.262558][ T32] schedule_preempt_disabled+0x13/0x30 [ 382.262578][ T32] __mutex_lock+0x7c1/0x1550 [ 382.262607][ T32] ? __mutex_lock+0x5d4/0x1550 [ 382.262633][ T32] ? rtnl_net_dev_lock+0x257/0x2f0 [ 382.262656][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 382.262691][ T32] ? rtnl_net_dev_lock+0x36/0x2f0 [ 382.262715][ T32] ? rtnl_net_dev_lock+0x36/0x2f0 [ 382.262736][ T32] rtnl_net_dev_lock+0x257/0x2f0 [ 382.262761][ T32] unregister_netdevice_notifier_dev_net+0x2f/0x1a0 [ 382.262784][ T32] ? nsim_destroy+0xe4/0x800 [ 382.262806][ T32] nsim_destroy+0x105/0x800 [ 382.262832][ T32] __nsim_dev_port_del+0x14e/0x200 [ 382.262860][ T32] nsim_dev_reload_destroy+0x288/0x490 [ 382.262889][ T32] nsim_dev_reload_down+0x8a/0xc0 [ 382.262914][ T32] devlink_reload+0x1c5/0x890 [ 382.262953][ T32] ? __pfx_devlink_reload+0x10/0x10 [ 382.262990][ T32] devlink_pernet_pre_exit+0x1ff/0x420 [ 382.263016][ T32] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 382.263038][ T32] ? _raw_spin_unlock+0x28/0x50 [ 382.263057][ T32] ? iput+0xb84/0xf00 [ 382.263091][ T32] ops_undo_list+0x17d/0x8d0 [ 382.263120][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 382.263144][ T32] ? idr_destroy+0x218/0x290 [ 382.263164][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 382.263194][ T32] cleanup_net+0x572/0x810 [ 382.263219][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 382.263247][ T32] ? rcu_is_watching+0x16/0xb0 [ 382.263271][ T32] ? process_scheduled_works+0x97a/0x1630 [ 382.263297][ T32] process_scheduled_works+0xc3d/0x1630 [ 382.263352][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 382.263382][ T32] ? assign_work+0x3cf/0x5d0 [ 382.263411][ T32] worker_thread+0xa47/0xfb0 [ 382.263461][ T32] kthread+0x38b/0x480 [ 382.263481][ T32] ? __pfx_worker_thread+0x10/0x10 [ 382.263503][ T32] ? __pfx_kthread+0x10/0x10 [ 382.281536][ T32] ret_from_fork+0x514/0xb70 [ 382.281568][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 382.281588][ T32] ? __switch_to+0xc89/0x1420 [ 382.281616][ T32] ? __pfx_kthread+0x10/0x10 [ 382.281637][ T32] ret_from_fork_asm+0x1a/0x30 [ 382.281680][ T32] [ 382.281839][ T32] [ 382.281839][ T32] Showing all locks held in the system: [ 382.281848][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 382.281861][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 382.281912][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 382.281926][ T32] #0: ffff888055162140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.281988][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282051][ T32] #2: ffff88802d80c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 382.282107][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 382.282120][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282170][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282220][ T32] #2: ffff88806abd0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 382.282265][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 382.282279][ T32] #0: ffff888079e08140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282333][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282383][ T32] #2: ffff888033c89440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 382.282437][ T32] #3: ffff88802031c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 382.282493][ T32] locks held by kworker/1:0/25: 3, last CPU#1: [ 382.282505][ T32] #0: ffff888054d1ad40 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282560][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282621][ T32] #2: ffff88802d80b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 382.282677][ T32] locks held by kworker/1:1/30: 2, last CPU#1: [ 382.282690][ T32] #0: ffff8880550ffd40 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282743][ T32] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 382.282804][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 382.282817][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180