last executing test programs: 1m39.362279182s ago: executing program 3 (id=183): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x100000000000a3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x7ff, 0x5a2c2) close_range(r2, r5, 0x0) 1m39.163454913s ago: executing program 3 (id=184): r0 = syz_open_dev$video(0x0, 0x37ad5285, 0x439c42) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@o_path={0x0, r2}, 0x18) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x8, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x88, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000100)=':') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='pagemap\x00') pread64(r5, &(0x7f0000001b00)=""/102400, 0x19000, 0x1000000300) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r6, 0x0, 0x0) 1m36.424382934s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) io_uring_setup(0x46ec, &(0x7f0000000000)={0x0, 0xfb80, 0x400, 0x1, 0x2ee}) r1 = io_uring_setup(0x8, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x1, 0x1a}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000c40)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000c80)={0x3c, 0xb, 0x1, '\x00', 0x9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000cc0)={0x5, 0x4, 0x2, '\x00', 0x7e9}, 0x1) 1m36.136677909s ago: executing program 3 (id=199): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x10144c2, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000c80)='\x00', 0x89901) move_mount(r1, &(0x7f0000000cc0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000d40)='\x00', 0x9801) move_mount(r2, &(0x7f0000000d80)='.\x00', 0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000e00)='./file0\x00', 0x0, 0x24000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000e40)='\x00', 0x89901) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0xfffffffffffffff9, 0x4, 0x400, 0xfffffffffffff010, 0x4, 0x8000001000000000}, 0x0, &(0x7f0000000180)={0x1f, 0xfffffffffffffffc, 0x381, 0x9, 0xc, 0x9e22, 0x334b2fb0, 0x100}, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200003c08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac0000009071648a23498aef81f6b079dd774d824fbb149a3c7800ead11202722e3486ebd9040046e300000000000000a56cf219e5b6c36a2d4d49a5ddb2a0bc08c9cc3af50cc4e7b0779affaeeecbcdbf7d1145827944402ef2782eb4f60aee5787d22a20ae580c457c00a7fe29fa9d168ae7c96a3660920df2d3276f59b51230e987b0b87ed52d027db10963b0d8609128a35216ec88918fe49c71c8ccbe21087f72f65243423eec52da31af4577e8ce0537c20ea0"], 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f0000000840)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x21}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x7}}}], 0x30}}], 0x1, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f00000008c0)={0x20, 0xd, 0x4, {0x4, 0xf, '3b'}}, &(0x7f0000000900)={0x0, 0x3, 0x52, @string={0x52, 0x3, "e333bf25e096d6e30ff5d28d80e7d95478eb9448f2ffb00e23c4ced9e4e19d773b00801f737dc4afab64d91b33dcffd6af7f4d20229deef16a465b5e3d410d3470a770b4d47200597ced37a02942ddfd"}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="20140c000000379692330500000000000000"], &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "829b"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "172c"}, &(0x7f0000000b00)={0x20, 0x83, 0x3, "392bc7"}, &(0x7f0000000b40)={0x20, 0x84, 0x4, "d0296397"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "806fb9"}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0002000000119078000000000000000001004e20001890780400000007740000fdffffffffffffff"], 0x0) syz_usb_connect$midi(0x1, 0xad, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x499, 0x103b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x1, 0x1, 0x10, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x3, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x1c, 0x6}], 0x6}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0xf5, 0x2, [{0xb, 0x40}, {0x4, 0x3}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0xb4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x6, 0xff}, @ms_header={0x7, 0x24, 0x1, 0x269c, 0x7}], [{{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x1, 0x4e, 0x0, {0x11, 0x25, 0x1, 0xd, "93d4b541ccc7126a6718f297a2"}}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x0, 0x0, 0x9d, {0x5, 0x25, 0x1, 0x1, "c2"}}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x8, 0xff, 0x1, {0xd, 0x25, 0x1, 0x9, "c3d54c03324a957485"}}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xc8, 0xab, 0xa0, {0x14, 0x25, 0x1, 0x10, "606615ab08415802b78613a0ae871344"}}}]}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x3, 0x5, 0xdd, 0x20, 0x9}, 0x19f, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1, [{0xd, &(0x7f0000000780)=@string={0xd, 0x3, "b6b99a5b29686555c99039"}}]}) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000440)=""/69, 0xe56}], 0x10000000000000b7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001180)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000011c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x8, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r8, {0xc, 0x3da48c8682330ab8}, {}, {0xffff, 0xfffa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x650}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r3, 0x84, 0x25, &(0x7f0000001040)={r9, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x7, 0xc01, 0x800}, &(0x7f0000001100)=0x90) syz_usb_connect$cdc_ecm(0x1, 0x5b, &(0x7f0000000e80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x1, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xb, {{0xa, 0x24, 0x6, 0x0, 0x0, "48f29e415a"}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0xe668, 0x0, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x3, 0xc9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1c, 0x0, 0xae}}}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0x5, 0x8, 0x2, 0xff, 0x5}, 0x44, &(0x7f0000000f40)={0x5, 0xf, 0x44, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x96, 0x4, 0x81, 0xf, 0x0, [0xff00, 0xffff, 0xff003f, 0xcf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x91, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x81, 0xf, 0xf801, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0x7f}]}, 0x1, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x402}}]}) 1m32.801975136s ago: executing program 3 (id=215): userfaultfd(0x80001) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x7, 0x400000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000300)={{0x84, @loopback, 0x4e20, 0x0, 'fo\x00', 0x20, 0x0, 0x13}, {@loopback, 0x4e24, 0x10000, 0x1, 0x3}}, 0x44) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @loopback=0x7f00ff80}, 0x10) 1m32.547804366s ago: executing program 3 (id=217): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x89, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x1, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r2, 0xfe, "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"}, &(0x7f0000000200)=0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000240)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xb2, 0x0, 0x1, 0x8, 0x7, 0x0, [{0x9, 0x5dd4, 0x1b4f35b, '\x00', 0x2002}, {0x7, 0x4, 0x400, '\x00', 0x1000}, {0x589, 0x9, 0x40, '\x00', 0xb00}, {0x3, 0xb9c, 0xdf2, '\x00', 0x200}, {0x5, 0xfffffffffffff800, 0x6, '\x00', 0x300}, {0x2, 0xf, 0x10000, '\x00', 0x200}, {0x9, 0xffffffff7fffffff, 0x4, '\x00', 0x301}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r3, &(0x7f0000000440), &(0x7f0000000480)=0xc) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) (rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x3, 0x8000) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) (async, rerun: 32) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000540)={0x1, 0x1a, &(0x7f0000000500)="441a14f671", {0xffff8000, 0x7, 0x34363248, 0x6, 0x6, 0x10001, 0xb, 0xe}}) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x1, 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000840)={&(0x7f00000006c0)=[r7], 0x1, r8, r9, 0x1c, 0x2, 0x80000000, 0x9, {0x4, 0x1, 0x1, 0x1, 0x9, 0xe05, 0xf002, 0x7, 0x3, 0xff, 0xd, 0x80000000, 0xa, 0xc, "6e366c77f48e880417f9b8d0ee0a6e248a534d07089eae96896dbce9bc79534d"}}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000008c0)={0x10000000, 0x10000, 0xc}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r0}, 0x8) write$P9_RRENAME(r10, &(0x7f0000000940)={0x7, 0x15, 0x2}, 0x7) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000000980)=""/100, &(0x7f0000000a00)=0x64) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000a40)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000a80)={r11}) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x70}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xdd7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20010}, 0x40880) fanotify_mark(r10, 0x400, 0x1000, r10, &(0x7f0000000cc0)='./file0\x00') (async, rerun: 32) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000e80)={&(0x7f0000000d00), 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc4, 0x1, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "403304b238c76a0ef911938e29062aa7b47139491973ee2c5b3c546ebddc55c8bc3c142b21482dcb7acda62e22467f27f075940d2fe23c85d29419fc56adc410339430d33f711c91dca590e0db926eeda174c99ada24351b16310ef9a442d75d4303a32550dd6776ef336060634a2bc7f247a49d4fd82ee4a75585"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x40000) (rerun: 32) r12 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x1000004, 0x10, r10, 0x20000000) syz_ublk_add_dev(r10, r12, 0x0, 0x0, &(0x7f0000000f00)={0x2e, 0x22, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x133d, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000ec0)=@new_dev={0x3, 0x866}}}, &(0x7f0000000f80)) 1m32.015126455s ago: executing program 32 (id=217): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x89, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x1, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r2, 0xfe, "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"}, &(0x7f0000000200)=0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000240)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xb2, 0x0, 0x1, 0x8, 0x7, 0x0, [{0x9, 0x5dd4, 0x1b4f35b, '\x00', 0x2002}, {0x7, 0x4, 0x400, '\x00', 0x1000}, {0x589, 0x9, 0x40, '\x00', 0xb00}, {0x3, 0xb9c, 0xdf2, '\x00', 0x200}, {0x5, 0xfffffffffffff800, 0x6, '\x00', 0x300}, {0x2, 0xf, 0x10000, '\x00', 0x200}, {0x9, 0xffffffff7fffffff, 0x4, '\x00', 0x301}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r3, &(0x7f0000000440), &(0x7f0000000480)=0xc) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) (rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x3, 0x8000) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) (async, rerun: 32) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000540)={0x1, 0x1a, &(0x7f0000000500)="441a14f671", {0xffff8000, 0x7, 0x34363248, 0x6, 0x6, 0x10001, 0xb, 0xe}}) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x1, 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000840)={&(0x7f00000006c0)=[r7], 0x1, r8, r9, 0x1c, 0x2, 0x80000000, 0x9, {0x4, 0x1, 0x1, 0x1, 0x9, 0xe05, 0xf002, 0x7, 0x3, 0xff, 0xd, 0x80000000, 0xa, 0xc, "6e366c77f48e880417f9b8d0ee0a6e248a534d07089eae96896dbce9bc79534d"}}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000008c0)={0x10000000, 0x10000, 0xc}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r0}, 0x8) write$P9_RRENAME(r10, &(0x7f0000000940)={0x7, 0x15, 0x2}, 0x7) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000000980)=""/100, &(0x7f0000000a00)=0x64) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000a40)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000a80)={r11}) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x70}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xdd7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20010}, 0x40880) fanotify_mark(r10, 0x400, 0x1000, r10, &(0x7f0000000cc0)='./file0\x00') (async, rerun: 32) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000e80)={&(0x7f0000000d00), 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc4, 0x1, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "403304b238c76a0ef911938e29062aa7b47139491973ee2c5b3c546ebddc55c8bc3c142b21482dcb7acda62e22467f27f075940d2fe23c85d29419fc56adc410339430d33f711c91dca590e0db926eeda174c99ada24351b16310ef9a442d75d4303a32550dd6776ef336060634a2bc7f247a49d4fd82ee4a75585"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x40000) (rerun: 32) r12 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x1000004, 0x10, r10, 0x20000000) syz_ublk_add_dev(r10, r12, 0x0, 0x0, &(0x7f0000000f00)={0x2e, 0x22, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x133d, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000ec0)=@new_dev={0x3, 0x866}}}, &(0x7f0000000f80)) 4.692101354s ago: executing program 5 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfc, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}]}, 0x30}}, 0x0) 4.443622583s ago: executing program 5 (id=721): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80001009, 0x4, 0x0, 'queue0\x00', 0xffff7ffc}) write$sndseq(r1, &(0x7f0000000200)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000340)={0x0, 0xe, 0x1, 'queue0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) io_uring_setup(0x6e39, &(0x7f0000000400)={0x0, 0xfa69, 0x2, 0x3, 0x2b3}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000000)={0x1, 0x7145, 0x3}) syz_usb_connect(0x5, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0xda, 0x1a, 0x56, 0x8, 0x7fd, 0x4, 0xd4a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3, 0xb0, 0x5, "", [{{0x9, 0x4, 0xd8, 0x0, 0x0, 0xff, 0xe9, 0xa2, 0xd3}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000008000540000014000500200100000000000000000300000000001c00090008000000d6ad1f5372718e387999f7cca666da5ae83e7efdf7889f90c83794de9585235f1ae592945089e408bf215b33854ca9a459179b5f5f48ffe37c8402486722808619d80c191249ec8fe12af8f45d63c8fcc3300e36458bfcd442c14fc2fe455d91d0108f5312340ddb03af2e5cfc9de909", @ANYRESHEX=r2], 0x4c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2040, 0x0) 4.045948614s ago: executing program 4 (id=729): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x2, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0xfd, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 3.844177286s ago: executing program 1 (id=734): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ftruncate(0xffffffffffffffff, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000100)=0x7e, 0x6) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x80010, 0xffffffffffffffff, 0x1000) add_key(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000700)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44) fsopen(&(0x7f0000000780)='9p\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x16, 0x91, 0x0, @empty}}}}}, 0x0) 3.356448619s ago: executing program 1 (id=739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000100), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x7fffffffffffffff, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) unshare(0x40070480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0x800, 0x7) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000f1401002abd7000000000000c00450072646d615fff6d00"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000440)='source', &(0x7f0000000480)='c:,:\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000500), 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) close_range(r3, r3, 0x0) syz_80211_inject_frame(&(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYBLOB="30340800080211000001ffffff05ffff505050505050030484adca0001002d1a2000046f000000000000000500060005000000000402000000c0"], 0x3a) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='numa_maps\x00') read$FUSE(r5, &(0x7f0000000780)={0x2020}, 0x2020) 2.878424753s ago: executing program 5 (id=743): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000080)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f00000001c0)={0x0}) 2.748134301s ago: executing program 5 (id=745): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x1, r2}, 0xc) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000200)=0xb, 0x4) 2.673945785s ago: executing program 5 (id=746): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x4000830b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000200)={0xa, 0x4e20, 0xffffff16, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.415781714s ago: executing program 4 (id=751): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000006c0)=0x0) io_submit(r1, 0x200001a6, &(0x7f0000000700)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000007c0)={{0x100, 0x2}, 'syz1\x00', 0x2d}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 2.291110575s ago: executing program 4 (id=754): r0 = syz_open_dev$video4linux(&(0x7f00000005c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x5, 0x8, 0x201d, 0x1, 0xb, 0x7, 0x1, 0x7}}) 2.290933675s ago: executing program 0 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 2.268767711s ago: executing program 4 (id=757): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0xa, 0xfffffffffffffff7, 0xfffffffc, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x54}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000540)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000580)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000005c0)=0xa0000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000600)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000640)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) openat$binderfs_log(0xffffff9c, &(0x7f0000000740)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000940)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.204209033s ago: executing program 0 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000044c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000004740)={'team_slave_0\x00', @remote}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000047c0)={'team_slave_0\x00', @broadcast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004500)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000004540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000004580)={0x0, 0x0, &(0x7f00000045c0)={&(0x7f0000004600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004680)={&(0x7f00000046c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x65dfdb01, {0x0, 0x0, 0x0, r5, {0x5, 0xc}, {0xa, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x2c000000}, 0x4041080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@arena={0x21, 0x0, 0x0, 0x28, 0x60400, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000002140)="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", 0x2000, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004200)=ANY=[@ANYBLOB="25000000dc1de0203b7c2c909311d0daffffff09000000000000002f70726f632f73656c66"], 0x0, 0x0, &(0x7f0000004240)={0x90, 0xfffffffffffffffe, 0x5c65, {0x2, 0x1, 0x40, 0x6, 0x6, 0x6, {0x2, 0x0, 0x3, 0x2, 0x2, 0x1000, 0x6, 0x2, 0x3, 0x2000, 0x8a4, r8, r9, 0x9, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r6, 0x80000507, r8, 0x0) r10 = memfd_secret(0x0) r11 = syz_open_dev$cec(&(0x7f0000004340), 0xffffffffffffffff, 0xc8520) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000004380)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r11, 0xc0386105, &(0x7f0000004400)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000004440)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) removexattr(0x0, &(0x7f0000004300)=@random={'security.'}) futimesat(r10, 0x0, 0x0) 1.991855713s ago: executing program 0 (id=760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @link_local}) sendmsg$kcm(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000940)="d6474821af3cee364788c071", 0xc}], 0x1}, 0x40000) write$tun(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.871000279s ago: executing program 1 (id=762): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x1ef}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.789524332s ago: executing program 1 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x4890) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000840)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.737936274s ago: executing program 5 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) madvise(&(0x7f00008df000/0x4000)=nil, 0x4000, 0x65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x40) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c4, 0x1, 0x13, r4, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000580), &(0x7f00000005c0)=0x101, 0x0) 1.736154718s ago: executing program 4 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 1.6623105s ago: executing program 0 (id=766): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_create(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000"], 0x5c}}, 0x0) r3 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="1c00"/12, 0xc, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0x0) 1.431441932s ago: executing program 1 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000380)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008854}, 0x8000080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x83, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f0000000180)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd0ffff00000000) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0xfffdfffffffffffd, 0x109303) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000540)={0x1f, 0x0, 0x0}) 1.383861572s ago: executing program 4 (id=768): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='environ\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.111473153s ago: executing program 1 (id=769): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x15, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.060314865s ago: executing program 2 (id=770): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @win={{0xd, 0x4, 0x8, 0x5}, 0x2, 0x1000000, 0x0, 0xc3, 0x0, 0x1}}) 933.346092ms ago: executing program 2 (id=771): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='net/atm/devices\x00', 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/4096, 0x1000) 828.845963ms ago: executing program 0 (id=772): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x143102) writev(r0, &(0x7f0000000300), 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000440)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000480)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'sed\x00', 0x35, 0x81, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x2, 0x1cb, 0x32d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000e80)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 716.118191ms ago: executing program 2 (id=773): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x1ef}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 682.322282ms ago: executing program 0 (id=774): mq_notify(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0xd, 0x0, 0x6, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x2, 0x1, 0x3, 0x4, 0x4}) 506.201825ms ago: executing program 2 (id=775): r0 = epoll_create(0x3) r1 = openat(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) sendto(r4, 0x0, 0x0, 0xbf30ccbe47c3e0ec, &(0x7f0000000580)=@ll={0x11, 0xc, 0x0, 0x1, 0x6, 0x6, @random="31d861384527"}, 0x80) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000700)={{0x7f, 0x7}, {0x0, 0x1}, 0x3f1, 0x2, 0x7}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x8001) socket$inet6(0xa, 0x3, 0xff) 104.179499ms ago: executing program 2 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2b4}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800) 0s ago: executing program 2 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000840)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): should_fail_ex+0x3eb/0x540 [ 157.548160][ T7281] should_failslab+0xa8/0x100 [ 157.548188][ T7281] __kvmalloc_node_noprof+0x171/0x820 [ 157.548216][ T7281] ? nf_hook_entries_grow+0x287/0x740 [ 157.548234][ T7281] ? nf_hook_entries_grow+0x287/0x740 [ 157.548252][ T7281] ? __pfx___mutex_lock+0x10/0x10 [ 157.548278][ T7281] nf_hook_entries_grow+0x287/0x740 [ 157.548310][ T7281] __nf_register_net_hook+0x26f/0x940 [ 157.548342][ T7281] nf_register_net_hook+0xb2/0x190 [ 157.548364][ T7281] nf_register_net_hooks+0x44/0x1b0 [ 157.548386][ T7281] nf_defrag_ipv6_enable+0x87/0x120 [ 157.548415][ T7281] nf_ct_netns_do_get+0x1e7/0x5c0 [ 157.548437][ T7281] ? nft_payload_init+0x21e/0x380 [ 157.548464][ T7281] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 157.548487][ T7281] ? nft_parse_register_load+0x315/0x3a0 [ 157.548512][ T7281] ? nf_ct_netns_get+0xe9/0x320 [ 157.548536][ T7281] nf_tables_newrule+0x179e/0x28a0 [ 157.548575][ T7281] ? __pfx_nf_tables_newrule+0x10/0x10 [ 157.548596][ T7281] ? lock_acquire+0x115/0x350 [ 157.548618][ T7281] ? nfnl_pernet+0x23/0x240 [ 157.548651][ T7281] ? __nla_parse+0x40/0x60 [ 157.548680][ T7281] nfnetlink_rcv+0x1288/0x28c0 [ 157.548737][ T7281] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 157.548784][ T7281] ? lock_acquire+0x115/0x350 [ 157.548808][ T7281] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.548822][ T7281] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.548839][ T7281] netlink_unicast+0x8ef/0xa80 [ 157.548862][ T7281] netlink_sendmsg+0x7f0/0xb20 [ 157.548879][ T7281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.548895][ T7281] ? aa_sock_msg_perm+0x144/0x210 [ 157.548908][ T7281] ? apparmor_socket_sendmsg+0x18b/0x360 [ 157.548924][ T7281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.548938][ T7281] sock_sendmsg_nosec+0x14e/0x190 [ 157.548953][ T7281] ____sys_sendmsg+0x54e/0x850 [ 157.548968][ T7281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.548984][ T7281] ? import_iovec+0x73/0xa0 [ 157.548999][ T7281] ___sys_sendmsg+0x2a5/0x360 [ 157.549009][ T7281] ? __lock_acquire+0x747/0x2de0 [ 157.549024][ T7281] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.549056][ T7281] ? __fget_files+0x3a2/0x420 [ 157.549067][ T7281] ? __fget_files+0x2a/0x420 [ 157.549085][ T7281] __x64_sys_sendmsg+0x1b1/0x290 [ 157.549097][ T7281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.549121][ T7281] do_syscall_64+0x166/0x520 [ 157.549140][ T7281] ? trace_irq_disable+0x3b/0x140 [ 157.549163][ T7281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.549182][ T7281] ? clear_bhb_loop+0x70/0xc0 [ 157.549204][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.549219][ T7281] RIP: 0033:0x7f257079f559 [ 157.549236][ T7281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.549251][ T7281] RSP: 002b:00007f257170e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.549272][ T7281] RAX: ffffffffffffffda RBX: 00007f2570a25fa0 RCX: 00007f257079f559 [ 157.549281][ T7281] RDX: 0000000024000840 RSI: 0000200000000180 RDI: 0000000000000003 [ 157.549287][ T7281] RBP: 00007f257170e090 R08: 0000000000000000 R09: 0000000000000000 [ 157.549294][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.549300][ T7281] R13: 00007f2570a26038 R14: 00007f2570a25fa0 R15: 00007f2570b4fa48 [ 157.549320][ T7281] [ 158.166229][ T7289] ip6tnl1: entered promiscuous mode [ 158.229807][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.393'. [ 158.265832][ T7290] netlink: del zone limit has 4 unknown bytes [ 158.642725][ T7276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.667440][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.389'. [ 158.675539][ T7276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 159.019610][ T5631] usb 5-1: USB disconnect, device number 16 [ 159.680416][ T7309] loop7: detected capacity change from 0 to 7 [ 159.844405][ T5631] hid_parser_main: 23 callbacks suppressed [ 159.844422][ T5631] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 159.992537][ T7309] Dev loop7: unable to read RDB block 7 [ 159.992575][ T7309] loop7: unable to read partition table [ 159.992697][ T7309] loop7: partition table beyond EOD, truncated [ 159.995125][ T5631] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.032862][ T7309] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 160.063830][ T5695] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 160.121460][ T5695] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 160.291684][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.291797][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 160.291815][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.291851][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 160.291861][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.291902][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 160.291912][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.291946][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 160.291956][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.291989][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 160.291998][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.292031][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 160.369426][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 160.467305][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.467353][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 160.467367][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.467399][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 160.467409][ C1] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.467438][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 160.467447][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 160.467476][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 160.472634][ T5000] ldm_validate_partition_table(): Disk read failed. [ 160.553098][ T5000] Dev loop7: unable to read RDB block 0 [ 160.586463][ T5000] loop7: unable to read partition table [ 160.586665][ T5000] loop7: partition table beyond EOD, truncated [ 163.009403][ T5697] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 163.149477][ T5697] usb 5-1: device descriptor read/64, error -71 [ 163.359976][ T5695] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.381851][ T5695] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.389430][ T5697] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 163.529988][ T5697] usb 5-1: device descriptor read/64, error -71 [ 163.643146][ T5697] usb usb5-port1: attempt power cycle [ 163.979530][ T5697] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 163.999977][ T5697] usb 5-1: device descriptor read/8, error -71 [ 164.252893][ T5697] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 164.280820][ T5697] usb 5-1: device descriptor read/8, error -71 [ 164.391997][ T5697] usb usb5-port1: unable to enumerate USB device [ 164.500330][ T7377] FAULT_INJECTION: forcing a failure. [ 164.500330][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 164.500893][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.1.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.500909][ T7377] Tainted: [L]=SOFTLOCKUP [ 164.500913][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 164.500920][ T7377] Call Trace: [ 164.500925][ T7377] [ 164.500930][ T7377] dump_stack_lvl+0xe8/0x150 [ 164.500952][ T7377] should_fail_ex+0x3eb/0x540 [ 164.500967][ T7377] should_failslab+0xa8/0x100 [ 164.500984][ T7377] __kvmalloc_node_noprof+0x171/0x820 [ 164.501000][ T7377] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 164.501011][ T7377] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 164.501026][ T7377] __rhashtable_init_noprof+0x5fa/0xbd0 [ 164.501039][ T7377] __rhltable_init_noprof+0x26/0x70 [ 164.501052][ T7377] nf_tables_newtable+0x6a7/0x1990 [ 164.501077][ T7377] nfnetlink_rcv+0x1288/0x28c0 [ 164.501108][ T7377] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 164.501144][ T7377] ? skb_clone+0x246/0x3a0 [ 164.501163][ T7377] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.501178][ T7377] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.501194][ T7377] netlink_unicast+0x8ef/0xa80 [ 164.501215][ T7377] netlink_sendmsg+0x7f0/0xb20 [ 164.501233][ T7377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.501248][ T7377] ? aa_sock_msg_perm+0x144/0x210 [ 164.501261][ T7377] ? apparmor_socket_sendmsg+0x98/0x360 [ 164.501277][ T7377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.501293][ T7377] sock_sendmsg_nosec+0x14e/0x190 [ 164.501308][ T7377] ____sys_sendmsg+0x54e/0x850 [ 164.501322][ T7377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.501337][ T7377] ? import_iovec+0x73/0xa0 [ 164.501351][ T7377] ___sys_sendmsg+0x2a5/0x360 [ 164.501360][ T7377] ? __lock_acquire+0x747/0x2de0 [ 164.501377][ T7377] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.501406][ T7377] ? __fget_files+0x3a2/0x420 [ 164.501418][ T7377] ? __fget_files+0x2a/0x420 [ 164.501434][ T7377] __x64_sys_sendmsg+0x1b1/0x290 [ 164.501447][ T7377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.501470][ T7377] do_syscall_64+0x166/0x520 [ 164.501482][ T7377] ? trace_irq_disable+0x3b/0x140 [ 164.501496][ T7377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.501507][ T7377] ? clear_bhb_loop+0x70/0xc0 [ 164.501520][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.501530][ T7377] RIP: 0033:0x7f5987f9f559 [ 164.501540][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.501549][ T7377] RSP: 002b:00007f5988ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.501561][ T7377] RAX: ffffffffffffffda RBX: 00007f5988225fa0 RCX: 00007f5987f9f559 [ 164.501568][ T7377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 164.501574][ T7377] RBP: 00007f5988ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 164.501580][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.501586][ T7377] R13: 00007f5988226038 R14: 00007f5988225fa0 R15: 00007f598834fa48 [ 164.501603][ T7377] [ 165.509933][ T7389] bridge_slave_0: left allmulticast mode [ 165.509950][ T7389] bridge_slave_0: left promiscuous mode [ 165.510089][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.573438][ T7389] bridge_slave_1: left allmulticast mode [ 165.573456][ T7389] bridge_slave_1: left promiscuous mode [ 165.573586][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.641509][ T7389] bond0: (slave bond_slave_0): Releasing backup interface [ 165.672694][ T7389] bond0: (slave bond_slave_1): Releasing backup interface [ 165.696638][ T7389] team0: Port device team_slave_0 removed [ 165.715468][ T7389] team0: Port device team_slave_1 removed [ 165.715715][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.725189][ T5697] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 165.746796][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.771700][ T7389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.909440][ T5697] usb 6-1: Using ep0 maxpacket: 8 [ 165.915251][ T5697] usb 6-1: unable to get BOS descriptor or descriptor too short [ 165.915282][ T5697] usb 6-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 165.917644][ T7395] loop6: detected capacity change from 0 to 8 [ 165.943960][ T5697] usb 6-1: config 4 interface 0 has no altsetting 0 [ 165.987280][ T5697] usb 6-1: string descriptor 0 read error: -22 [ 165.987343][ T5697] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 166.023401][ T5697] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 166.040305][ T5697] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 166.041279][ T5697] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 166.041325][ T5697] usb 6-1: media controller created [ 166.091962][ T7395] loop6: detected capacity change from 8 to 7 [ 166.100692][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.119518][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.140277][ T7396] loop6: detected capacity change from 7 to 0 [ 166.171426][ C0] blk_print_req_error: 80 callbacks suppressed [ 166.171440][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.171492][ C0] buffer_io_error: 80 callbacks suppressed [ 166.171498][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.172378][ T7395] ldm_validate_partition_table(): Disk read failed. [ 166.172407][ T7395] Dev loop6: unable to read RDB block 0 [ 166.172435][ T7395] loop6: unable to read partition table [ 166.172623][ T7395] loop6: partition table beyond EOD, truncated [ 166.172639][ T7395] loop_reread_partitions: partition scan of loop6 (ÛuêƒG Ÿ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð [ 166.172639][ T7395] å’ HID v0.00 Device [syz1] on syz0 [ 168.639637][ T9] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 168.639653][ T9] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 168.721326][ T7427] bridge0: entered allmulticast mode [ 168.798245][ T5697] logitech-djreceiver 0003:046D:C52B.0010: hiddev0,hidraw1: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.5-1/input0 [ 168.798351][ T5697] logitech-djreceiver 0003:046D:C52B.0010: logi_dj_recv_send_report: unable to find dj report [ 168.811883][ T5695] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 168.822357][ T5697] logitech-djreceiver 0003:046D:C52B.0010: logi_dj_recv_switch_to_dj_mode error:-19 [ 168.884883][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.888994][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.981746][ C0] logitech-djreceiver 0003:046D:C52B.0010: Short DJ report bad size (1) [ 168.999292][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 169.003416][ T5695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.003467][ T5695] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 169.005692][ T5695] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 169.005707][ T5695] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 169.005717][ T5695] usb 1-1: config 14 has no interface number 0 [ 169.005725][ T5695] usb 1-1: config 14 has no interface number 1 [ 169.005758][ T5695] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 169.005770][ T5695] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 169.005783][ T5695] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 169.005814][ T5695] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 169.005827][ T5695] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 169.005840][ T5695] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.005853][ T5695] usb 1-1: config 14 interface 57 has no altsetting 0 [ 169.005861][ T5695] usb 1-1: config 14 interface 228 has no altsetting 0 [ 169.150935][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.150965][ T5695] usb 1-1: Product: syz [ 169.150985][ T5695] usb 1-1: Manufacturer: syz [ 169.151001][ T5695] usb 1-1: SerialNumber: syz [ 169.191212][ T5704] usb 2-1: USB disconnect, device number 21 [ 169.218745][ T44] usb 6-1: USB disconnect, device number 9 [ 169.551229][ T7429] fido_id[7429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 169.659132][ T5695] legousbtower 1-1:14.57: interrupt endpoints not found [ 169.840213][ T7435] FAULT_INJECTION: forcing a failure. [ 169.840213][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 169.840236][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.5.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.840251][ T7435] Tainted: [L]=SOFTLOCKUP [ 169.840255][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 169.840262][ T7435] Call Trace: [ 169.840266][ T7435] [ 169.840271][ T7435] dump_stack_lvl+0xe8/0x150 [ 169.840293][ T7435] should_fail_ex+0x3eb/0x540 [ 169.840310][ T7435] should_failslab+0xa8/0x100 [ 169.840328][ T7435] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 169.840342][ T7435] ? kobject_set_name_vargs+0x61/0x110 [ 169.840356][ T7435] ? kobject_set_name_vargs+0x61/0x110 [ 169.840373][ T7435] kstrdup+0x42/0x100 [ 169.840385][ T7435] kobject_set_name_vargs+0x61/0x110 [ 169.840401][ T7435] dev_set_name+0xe2/0x140 [ 169.840415][ T7435] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 169.840432][ T7435] ? rcu_is_watching+0x16/0xb0 [ 169.840456][ T7435] ? __pfx_dev_set_name+0x10/0x10 [ 169.840468][ T7435] ? wiphy_new_nm+0x625/0x1ae0 [ 169.840481][ T7435] ? __kmalloc_noprof+0x387/0x710 [ 169.840498][ T7435] wiphy_new_nm+0x710/0x1ae0 [ 169.840508][ T7435] ? ieee80211_alloc_hw_nm+0x903/0x1f00 [ 169.840524][ T7435] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 169.840538][ T7435] ieee80211_alloc_hw_nm+0x3f3/0x1f00 [ 169.840553][ T7435] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 169.840570][ T7435] mac80211_hwsim_new_radio+0x1f6/0x5990 [ 169.840595][ T7435] ? rcu_is_watching+0x16/0xb0 [ 169.840609][ T7435] ? trace_kmalloc+0x2a/0xf0 [ 169.840622][ T7435] ? __kmalloc_node_track_caller_noprof+0x4cd/0x720 [ 169.840637][ T7435] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 169.840650][ T7435] ? kstrndup+0xbd/0x160 [ 169.840663][ T7435] ? kstrndup+0xbd/0x160 [ 169.840674][ T7435] hwsim_new_radio_nl+0xd8b/0xf90 [ 169.840697][ T7435] genl_family_rcv_msg_doit+0x233/0x340 [ 169.840712][ T7435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.840729][ T7435] ? bpf_lsm_capable+0x9/0x20 [ 169.840738][ T7435] ? security_capable+0x7e/0x2c0 [ 169.840757][ T7435] genl_rcv_msg+0x614/0x7a0 [ 169.840771][ T7435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.840781][ T7435] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 169.840797][ T7435] ? __asan_memcpy+0x40/0x70 [ 169.840812][ T7435] netlink_rcv_skb+0x226/0x4a0 [ 169.840826][ T7435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.840838][ T7435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.840859][ T7435] ? down_read+0x2b9/0x320 [ 169.840874][ T7435] genl_rcv+0x28/0x40 [ 169.840884][ T7435] netlink_unicast+0x8ef/0xa80 [ 169.840906][ T7435] netlink_sendmsg+0x7f0/0xb20 [ 169.840923][ T7435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.840942][ T7435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.840956][ T7435] ? sock_sendmsg_nosec+0x13c/0x190 [ 169.840972][ T7435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.840985][ T7435] sock_sendmsg_nosec+0x14e/0x190 [ 169.840999][ T7435] ____sys_sendmsg+0x54e/0x850 [ 169.841013][ T7435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.841029][ T7435] ? import_iovec+0x73/0xa0 [ 169.841043][ T7435] ___sys_sendmsg+0x2a5/0x360 [ 169.841053][ T7435] ? __lock_acquire+0x747/0x2de0 [ 169.841069][ T7435] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.841099][ T7435] ? __fget_files+0x3a2/0x420 [ 169.841111][ T7435] ? __fget_files+0x2a/0x420 [ 169.841127][ T7435] __x64_sys_sendmsg+0x1b1/0x290 [ 169.841139][ T7435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.841162][ T7435] do_syscall_64+0x166/0x520 [ 169.841173][ T7435] ? trace_irq_disable+0x3b/0x140 [ 169.841187][ T7435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.841197][ T7435] ? clear_bhb_loop+0x70/0xc0 [ 169.841210][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.841220][ T7435] RIP: 0033:0x7f726bf9f559 [ 169.841231][ T7435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.841239][ T7435] RSP: 002b:00007f726cdb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.841251][ T7435] RAX: ffffffffffffffda RBX: 00007f726c225fa0 RCX: 00007f726bf9f559 [ 169.841258][ T7435] RDX: 0000000000000084 RSI: 0000200000001500 RDI: 0000000000000003 [ 169.841265][ T7435] RBP: 00007f726cdb8090 R08: 0000000000000000 R09: 0000000000000000 [ 169.841271][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.841277][ T7435] R13: 00007f726c226038 R14: 00007f726c225fa0 R15: 00007f726c34fa48 [ 169.841293][ T7435] [ 170.379305][ T5695] legousbtower 1-1:14.228: get version request failed: -71 [ 170.379491][ T5695] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 170.386878][ T5695] usb 1-1: USB disconnect, device number 16 [ 170.548452][ T7444] SET target dimension over the limit! [ 170.572775][ T7447] batman_adv: batadv0: Interface deactivated: syz_tun [ 170.572802][ T7447] batman_adv: batadv0: Removing interface: syz_tun [ 170.608967][ T7447] bridge_slave_0: left allmulticast mode [ 170.608985][ T7447] bridge_slave_0: left promiscuous mode [ 170.609107][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.651571][ T7447] bridge_slave_1: left allmulticast mode [ 170.651590][ T7447] bridge_slave_1: left promiscuous mode [ 170.655575][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.679074][ T7447] vlan2: left promiscuous mode [ 170.679088][ T7447] geneve0: left promiscuous mode [ 170.735149][ T7447] bond0: (slave bond_slave_0): Releasing backup interface [ 170.788760][ T7447] bond0: (slave bond_slave_1): Releasing backup interface [ 170.853342][ T7447] team0: Port device team_slave_0 removed [ 170.886886][ T7447] team0: Port device team_slave_1 removed [ 170.898192][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.898218][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.921998][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.922014][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.928588][ T7447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.109551][ T5704] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 171.213244][ T7458] FAULT_INJECTION: forcing a failure. [ 171.213244][ T7458] name failslab, interval 1, probability 0, space 0, times 0 [ 171.213266][ T7458] CPU: 1 UID: 0 PID: 7458 Comm: syz.0.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.213280][ T7458] Tainted: [L]=SOFTLOCKUP [ 171.213284][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.213290][ T7458] Call Trace: [ 171.213294][ T7458] [ 171.213299][ T7458] dump_stack_lvl+0xe8/0x150 [ 171.213321][ T7458] should_fail_ex+0x3eb/0x540 [ 171.213337][ T7458] should_failslab+0xa8/0x100 [ 171.213354][ T7458] __kmalloc_cache_noprof+0x9e/0x600 [ 171.213367][ T7458] ? __raw_spin_lock_init+0x45/0x100 [ 171.213377][ T7458] ? ovs_flow_cmd_new+0x317/0xea0 [ 171.213386][ T7458] ? ovs_flow_cmd_new+0x317/0xea0 [ 171.213400][ T7458] ovs_flow_cmd_new+0x317/0xea0 [ 171.213412][ T7458] ? __kasan_kmalloc+0x93/0xb0 [ 171.213427][ T7458] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 171.213464][ T7458] ? __kmalloc_noprof+0x387/0x710 [ 171.213480][ T7458] ? __nla_parse+0x40/0x60 [ 171.213496][ T7458] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 171.213509][ T7458] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 171.213524][ T7458] genl_family_rcv_msg_doit+0x233/0x340 [ 171.213538][ T7458] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 171.213556][ T7458] ? bpf_lsm_capable+0x9/0x20 [ 171.213565][ T7458] ? security_capable+0x7e/0x2c0 [ 171.213584][ T7458] genl_rcv_msg+0x614/0x7a0 [ 171.213598][ T7458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.213608][ T7458] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 171.213620][ T7458] ? __asan_memcpy+0x40/0x70 [ 171.213636][ T7458] netlink_rcv_skb+0x226/0x4a0 [ 171.213650][ T7458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.213662][ T7458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.213683][ T7458] ? down_read+0x2b9/0x320 [ 171.213698][ T7458] genl_rcv+0x28/0x40 [ 171.213707][ T7458] netlink_unicast+0x8ef/0xa80 [ 171.213732][ T7458] netlink_sendmsg+0x7f0/0xb20 [ 171.213749][ T7458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.213764][ T7458] ? aa_sock_msg_perm+0x144/0x210 [ 171.213777][ T7458] ? apparmor_socket_sendmsg+0x98/0x360 [ 171.213793][ T7458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.213806][ T7458] sock_sendmsg_nosec+0x14e/0x190 [ 171.213821][ T7458] ____sys_sendmsg+0x54e/0x850 [ 171.213834][ T7458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.213850][ T7458] ? import_iovec+0x73/0xa0 [ 171.213865][ T7458] ___sys_sendmsg+0x2a5/0x360 [ 171.213874][ T7458] ? __lock_acquire+0x747/0x2de0 [ 171.213890][ T7458] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.213938][ T7458] ? __fget_files+0x3a2/0x420 [ 171.213960][ T7458] ? __fget_files+0x2a/0x420 [ 171.213995][ T7458] __x64_sys_sendmsg+0x1b1/0x290 [ 171.214008][ T7458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.214030][ T7458] do_syscall_64+0x166/0x520 [ 171.214041][ T7458] ? trace_irq_disable+0x3b/0x140 [ 171.214055][ T7458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.214065][ T7458] ? clear_bhb_loop+0x70/0xc0 [ 171.214077][ T7458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.214087][ T7458] RIP: 0033:0x7fd60f79f559 [ 171.214098][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.214107][ T7458] RSP: 002b:00007fd6106ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.214118][ T7458] RAX: ffffffffffffffda RBX: 00007fd60fa25fa0 RCX: 00007fd60f79f559 [ 171.214126][ T7458] RDX: 0000000004008094 RSI: 0000200000000000 RDI: 0000000000000003 [ 171.214132][ T7458] RBP: 00007fd6106ed090 R08: 0000000000000000 R09: 0000000000000000 [ 171.214138][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.214144][ T7458] R13: 00007fd60fa26038 R14: 00007fd60fa25fa0 R15: 00007fd60fb4fa48 [ 171.214161][ T7458] [ 171.429107][ T5704] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 171.608658][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.608689][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.608709][ T5704] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.608748][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.664257][ T5704] usb 6-1: config 0 descriptor?? [ 172.049497][ T44] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.126053][ T5704] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 172.150072][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 172.180029][ T24] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.200111][ T44] usb 3-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 172.225924][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.225949][ T44] usb 3-1: Product: syz [ 172.225963][ T44] usb 3-1: Manufacturer: syz [ 172.225976][ T44] usb 3-1: SerialNumber: syz [ 172.274992][ T44] usb 3-1: config 0 descriptor?? [ 172.317938][ T5704] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 172.506396][ T7470] fido_id[7470]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.705560][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.717935][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.908359][ T44] usb 3-1: Firmware version (0.0) predates our first public release. [ 172.908384][ T44] usb 3-1: Please update to version 0.2 or newer [ 173.079256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 173.231463][ T44] usb 3-1: USB disconnect, device number 17 [ 173.421546][ C0] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -1 [ 173.440712][ T5695] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 173.601401][ T5695] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 173.608646][ T5695] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 173.608664][ T5695] usb 1-1: config 0 has no interface number 0 [ 173.608687][ T5695] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.662467][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.662500][ T5695] usb 1-1: Product: syz [ 173.662507][ T5695] usb 1-1: Manufacturer: syz [ 173.662515][ T5695] usb 1-1: SerialNumber: syz [ 173.690692][ T5695] usb 1-1: config 0 descriptor?? [ 173.723971][ T5695] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1 [ 173.825960][ T29] audit: type=1326 audit(1793249157.164:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.826159][ T29] audit: type=1326 audit(1793249157.164:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.827302][ T29] audit: type=1326 audit(1793249157.164:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.827452][ T29] audit: type=1326 audit(1793249157.164:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.827586][ T29] audit: type=1326 audit(1793249157.164:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.828230][ T29] audit: type=1326 audit(1793249157.164:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.879203][ T29] audit: type=1326 audit(1793249157.214:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.903716][ T29] audit: type=1326 audit(1793249157.214:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.903747][ T29] audit: type=1326 audit(1793249157.224:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 173.928301][ T29] audit: type=1326 audit(1793249157.264:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5987f9f559 code=0x7ffc0000 [ 174.244940][ T24] usb 6-1: USB disconnect, device number 10 [ 174.380455][ T5704] usb 1-1: USB disconnect, device number 17 [ 174.393090][ T5704] yurex 1-1:0.50: USB YUREX #1 now disconnected [ 174.403353][ T7498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.676634][ T7511] kAFS: unparsable volume name [ 174.770141][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 174.809383][ T5682] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 174.967232][ T5682] usb 5-1: not running at top speed; connect to a high speed hub [ 174.967269][ T5682] usb 5-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 174.973619][ T5682] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 4 [ 174.973651][ T5682] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 175.014710][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.014728][ T5682] usb 5-1: Product: syz [ 175.014736][ T5682] usb 5-1: Manufacturer: syz [ 175.014743][ T5682] usb 5-1: SerialNumber: syz [ 175.294241][ T5682] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 175.513535][ T7528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.462'. [ 175.513557][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 175.687085][ T5682] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 175.772794][ T5682] usb 5-1: USB disconnect, device number 21 [ 175.950864][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.202183][ T7550] syzkaller0: entered promiscuous mode [ 176.202198][ T7550] syzkaller0: entered allmulticast mode [ 176.209057][ T7549] tipc: Started in network mode [ 176.209085][ T7549] tipc: Node identity d6897a6bf243, cluster identity 4711 [ 176.246524][ T7549] tipc: Enabled bearer , priority 0 [ 176.262440][ T7550] tipc: Resetting bearer [ 176.281385][ T7554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.388742][ T7559] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 176.497219][ T7561] FAULT_INJECTION: forcing a failure. [ 176.497219][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 176.497241][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.0.467 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.497256][ T7561] Tainted: [L]=SOFTLOCKUP [ 176.497260][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.497266][ T7561] Call Trace: [ 176.497270][ T7561] [ 176.497276][ T7561] dump_stack_lvl+0xe8/0x150 [ 176.497296][ T7561] should_fail_ex+0x3eb/0x540 [ 176.497311][ T7561] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 176.497325][ T7561] should_failslab+0xa8/0x100 [ 176.497342][ T7561] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 176.497353][ T7561] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 176.497366][ T7561] ? alloc_inode+0x6a/0x1b0 [ 176.497376][ T7561] ? alloc_inode+0x6a/0x1b0 [ 176.497389][ T7561] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 176.497400][ T7561] alloc_inode+0x6a/0x1b0 [ 176.497412][ T7561] new_inode+0x1f/0x170 [ 176.497425][ T7561] __debugfs_create_file+0xb8/0x400 [ 176.497439][ T7561] debugfs_create_file_full+0x3f/0x60 [ 176.497453][ T7561] ref_tracker_dir_debugfs+0x197/0x360 [ 176.497467][ T7561] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 176.497501][ T7561] ? __kvmalloc_node_noprof+0x52a/0x820 [ 176.497515][ T7561] ? __kvmalloc_node_noprof+0x340/0x820 [ 176.497530][ T7561] ? __raw_spin_lock_init+0x45/0x100 [ 176.497542][ T7561] alloc_netdev_mqs+0x275/0x1240 [ 176.497556][ T7561] ? __pfx_snprintf+0x10/0x10 [ 176.497570][ T7561] ? __pfx_geneve_setup+0x10/0x10 [ 176.497586][ T7561] rtnl_create_link+0x321/0xd70 [ 176.497604][ T7561] rtnl_newlink_create+0x258/0x7b0 [ 176.497629][ T7561] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 176.497652][ T7561] ? __pfx___mutex_lock+0x10/0x10 [ 176.497682][ T7561] ? ns_capable+0x84/0xe0 [ 176.497707][ T7561] rtnl_newlink+0x167a/0x1c30 [ 176.497727][ T7561] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.497736][ T7561] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 176.497750][ T7561] ? netlink_deliver_tap+0x19c/0x1b0 [ 176.497762][ T7561] ? netlink_unicast+0x8c1/0xa80 [ 176.497773][ T7561] ? netlink_sendmsg+0x7f0/0xb20 [ 176.497785][ T7561] ? sock_sendmsg_nosec+0x14e/0x190 [ 176.497798][ T7561] ? ____sys_sendmsg+0x54e/0x850 [ 176.497807][ T7561] ? ___sys_sendmsg+0x2a5/0x360 [ 176.497816][ T7561] ? __x64_sys_sendmsg+0x1b1/0x290 [ 176.497825][ T7561] ? do_syscall_64+0x166/0x520 [ 176.497836][ T7561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.497867][ T7561] ? kasan_quarantine_put+0xbb/0x1f0 [ 176.497879][ T7561] ? lockdep_hardirqs_on+0x7b/0x110 [ 176.497892][ T7561] ? nlmon_xmit+0xb0/0x100 [ 176.497903][ T7561] ? kmem_cache_free+0x182/0x650 [ 176.497920][ T7561] ? __lock_acquire+0x747/0x2de0 [ 176.497937][ T7561] ? __pfx_hook_capable+0x10/0x10 [ 176.497947][ T7561] ? __dev_queue_xmit+0x29b/0x3920 [ 176.497961][ T7561] ? __pfx_hook_capable+0x10/0x10 [ 176.497971][ T7561] ? lockdep_hardirqs_on+0x7b/0x110 [ 176.497998][ T7561] ? __pfx_rtnl_newlink+0x10/0x10 [ 176.498008][ T7561] rtnetlink_rcv_msg+0x802/0xc00 [ 176.498020][ T7561] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 176.498029][ T7561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.498041][ T7561] ? __copy_skb_header+0xa3/0x4a0 [ 176.498053][ T7561] ? __asan_memcpy+0x40/0x70 [ 176.498069][ T7561] netlink_rcv_skb+0x226/0x4a0 [ 176.498083][ T7561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.498094][ T7561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.498115][ T7561] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.498128][ T7561] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.498145][ T7561] netlink_unicast+0x8ef/0xa80 [ 176.498167][ T7561] netlink_sendmsg+0x7f0/0xb20 [ 176.498184][ T7561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.498200][ T7561] ? aa_sock_msg_perm+0x144/0x210 [ 176.498213][ T7561] ? apparmor_socket_sendmsg+0x98/0x360 [ 176.498228][ T7561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.498241][ T7561] sock_sendmsg_nosec+0x14e/0x190 [ 176.498257][ T7561] ____sys_sendmsg+0x54e/0x850 [ 176.498281][ T7561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.498309][ T7561] ? import_iovec+0x73/0xa0 [ 176.498333][ T7561] ___sys_sendmsg+0x2a5/0x360 [ 176.498343][ T7561] ? __lock_acquire+0x747/0x2de0 [ 176.498358][ T7561] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.498389][ T7561] ? __fget_files+0x3a2/0x420 [ 176.498401][ T7561] ? __fget_files+0x2a/0x420 [ 176.498418][ T7561] __x64_sys_sendmsg+0x1b1/0x290 [ 176.498430][ T7561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.498453][ T7561] do_syscall_64+0x166/0x520 [ 176.498463][ T7561] ? trace_irq_disable+0x3b/0x140 [ 176.498477][ T7561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.498487][ T7561] ? clear_bhb_loop+0x70/0xc0 [ 176.498506][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.498516][ T7561] RIP: 0033:0x7fd60f79f559 [ 176.498527][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.498536][ T7561] RSP: 002b:00007fd6106cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.498547][ T7561] RAX: ffffffffffffffda RBX: 00007fd60fa26090 RCX: 00007fd60f79f559 [ 176.498555][ T7561] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 176.498561][ T7561] RBP: 00007fd6106cc090 R08: 0000000000000000 R09: 0000000000000000 [ 176.498567][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.498573][ T7561] R13: 00007fd60fa26128 R14: 00007fd60fa26090 R15: 00007fd60fb4fa48 [ 176.498590][ T7561] [ 176.498595][ T7561] debugfs: out of free dentries, can not create file 'netdev@ffff888053394720' [ 176.561123][ T5682] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 176.733322][ T5682] usb 6-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 176.733982][ T5682] usb 6-1: config 0 has no interfaces? [ 176.752996][ T5682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.753020][ T5682] usb 6-1: Product: syz [ 176.753033][ T5682] usb 6-1: Manufacturer: syz [ 176.753045][ T5682] usb 6-1: SerialNumber: syz [ 176.781633][ T5682] usb 6-1: config 0 descriptor?? [ 177.077119][ T7561] bond1: (slave geneve2): making interface the new active one [ 177.123619][ T7561] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.191844][ T7564] batman_adv: batadv0: Adding interface: ipvlan2 [ 177.191861][ T7564] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.192660][ T7564] batman_adv: batadv0: Interface activated: ipvlan2 [ 177.249919][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 177.326187][ T5704] tipc: Node number set to 617249387 [ 177.400628][ T24] usb 5-1: New USB device found: idVendor=0421, idProduct=1234, bcdDevice=1.00 [ 177.402242][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.402300][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.429507][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.430192][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.430232][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.430265][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.477771][ T5704] usb 6-1: USB disconnect, device number 11 [ 177.495680][ T7547] tipc: Resetting bearer [ 177.507285][ T24] cdc_phonet 5-1:1.0: probe with driver cdc_phonet failed with error -22 [ 177.549903][ T7547] tipc: Disabling bearer [ 177.555021][ T5695] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 177.579476][ T5682] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 177.581933][ T5695] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.700334][ T7577] fido_id[7577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.739301][ T5682] usb 1-1: Using ep0 maxpacket: 8 [ 177.741321][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.741359][ T5682] usb 1-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 177.742289][ T5682] usb 1-1: config 4 interface 0 has no altsetting 0 [ 177.748095][ T5682] usb 1-1: string descriptor 0 read error: -22 [ 177.748179][ T5682] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 177.798198][ T5682] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 177.811375][ T5682] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 177.811588][ T5682] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 177.811612][ T5682] usb 1-1: media controller created [ 177.854707][ T5682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.896952][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.897271][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.266865][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 178.339830][ T7590] ip6tnl1: left promiscuous mode [ 178.360831][ T7590] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 178.780816][ T7599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.780859][ T7599] FAULT_INJECTION: forcing a failure. [ 178.780859][ T7599] name failslab, interval 1, probability 0, space 0, times 0 [ 178.780883][ T7599] CPU: 1 UID: 0 PID: 7599 Comm: syz.1.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.780908][ T7599] Tainted: [L]=SOFTLOCKUP [ 178.780914][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 178.780925][ T7599] Call Trace: [ 178.780932][ T7599] [ 178.780940][ T7599] dump_stack_lvl+0xe8/0x150 [ 178.780973][ T7599] should_fail_ex+0x3eb/0x540 [ 178.780999][ T7599] ? __alloc_skb+0x1db/0x7a0 [ 178.781025][ T7599] should_failslab+0xa8/0x100 [ 178.781053][ T7599] ? __alloc_skb+0x1db/0x7a0 [ 178.781077][ T7599] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 178.781098][ T7599] ? __alloc_skb+0x18d/0x7a0 [ 178.781123][ T7599] ? __alloc_skb+0x1db/0x7a0 [ 178.781154][ T7599] __alloc_skb+0x1db/0x7a0 [ 178.781184][ T7599] mgmt_send_event+0x46/0x190 [ 178.781207][ T7599] mgmt_suspending+0x98/0xe0 [ 178.781229][ T7599] ? __pfx_mgmt_suspending+0x10/0x10 [ 178.781248][ T7599] ? lockdep_hardirqs_on+0x7b/0x110 [ 178.781268][ T7599] ? enable_work+0x1fd/0x230 [ 178.781288][ T7599] ? hci_suspend_dev+0x2f8/0x530 [ 178.781315][ T7599] hci_suspend_dev+0x358/0x530 [ 178.781341][ T7599] ? __pfx_hci_suspend_dev+0x10/0x10 [ 178.781362][ T7599] ? rcu_barrier+0x523/0x610 [ 178.781389][ T7599] hci_suspend_notifier+0xf2/0x2f0 [ 178.781412][ T7599] notifier_call_chain+0x1a5/0x3d0 [ 178.781442][ T7599] blocking_notifier_call_chain_robust+0x85/0x100 [ 178.781469][ T7599] pm_notifier_call_chain_robust+0x2c/0x60 [ 178.781495][ T7599] snapshot_open+0x19c/0x290 [ 178.781520][ T7599] ? __pfx_snapshot_open+0x10/0x10 [ 178.781536][ T7599] misc_open+0x2d5/0x350 [ 178.781550][ T7599] chrdev_open+0x4d9/0x600 [ 178.781567][ T7599] ? __pfx_chrdev_open+0x10/0x10 [ 178.781581][ T7599] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 178.781597][ T7599] ? devcgroup_check_permission+0x31/0x8f0 [ 178.781612][ T7599] ? __pfx_chrdev_open+0x10/0x10 [ 178.781627][ T7599] do_dentry_open+0x80e/0x1360 [ 178.781643][ T7599] vfs_open_consume+0x4a/0x350 [ 178.781652][ T7599] ? path_openat+0x16e1/0x20f0 [ 178.781667][ T7599] path_openat+0x16fc/0x20f0 [ 178.781691][ T7599] do_file_open+0x23e/0x4a0 [ 178.781708][ T7599] ? __pfx_do_file_open+0x10/0x10 [ 178.781739][ T7599] ? _raw_spin_unlock+0x28/0x50 [ 178.781754][ T7599] ? alloc_fd+0x6af/0x760 [ 178.781772][ T7599] do_sys_openat2+0x115/0x200 [ 178.781784][ T7599] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.781795][ T7599] ? ksys_write+0x242/0x270 [ 178.781809][ T7599] ? __pfx_ksys_write+0x10/0x10 [ 178.781824][ T7599] __x64_sys_openat+0x138/0x170 [ 178.781837][ T7599] do_syscall_64+0x166/0x520 [ 178.781853][ T7599] ? trace_irq_disable+0x3b/0x140 [ 178.781867][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.781877][ T7599] ? clear_bhb_loop+0x70/0xc0 [ 178.781890][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.781900][ T7599] RIP: 0033:0x7f5987f9f559 [ 178.781911][ T7599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.781920][ T7599] RSP: 002b:00007f5988ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.781931][ T7599] RAX: ffffffffffffffda RBX: 00007f5988225fa0 RCX: 00007f5987f9f559 [ 178.781939][ T7599] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 178.781946][ T7599] RBP: 00007f5988ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 178.781967][ T7599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.781973][ T7599] R13: 00007f5988226038 R14: 00007f5988225fa0 R15: 00007f598834fa48 [ 178.781990][ T7599] [ 178.900084][ T7599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.900690][ T7599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.900828][ T7599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.900909][ T7599] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.944992][ T7599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.945101][ T7599] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 178.993233][ T7599] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 179.182409][ T5695] usb 5-1: USB disconnect, device number 22 [ 179.269332][ T5682] usb 1-1: USB disconnect, device number 18 [ 179.750640][ T7617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.779496][ T5695] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 179.929746][ T5695] usb 6-1: Using ep0 maxpacket: 16 [ 179.931150][ T5695] usb 6-1: New USB device found: idVendor=1038, idProduct=12b6, bcdDevice=0.00 [ 179.932417][ T5695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 179.932457][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.953145][ T5695] usb 6-1: config 0 descriptor?? [ 180.279391][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 180.367986][ T5695] hid-steelseries-arctis 0003:1038:12B6.0014: unknown main item tag 0x0 [ 180.368022][ T5695] hid-steelseries-arctis 0003:1038:12B6.0014: unknown main item tag 0x6 [ 180.368090][ T5695] hid-steelseries-arctis 0003:1038:12B6.0014: unknown main item tag 0x0 [ 180.368220][ T5695] hid-steelseries-arctis 0003:1038:12B6.0014: unknown main item tag 0x0 [ 180.368247][ T5695] hid-steelseries-arctis 0003:1038:12B6.0014: unknown main item tag 0x0 [ 180.368273][ T5695] hid-steelseries-arctis 0003:1038:12B6.0014: unknown main item tag 0x5 [ 180.384167][ T5695] hid-steelseries-arctis 0003:1038:12B6.0014: hidraw0: USB HID v0.c4 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 180.439390][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 180.440123][ T9] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 180.441931][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.441960][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.441981][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.442021][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.449058][ T9] usb 5-1: config 0 descriptor?? [ 180.572884][ T5704] usb 6-1: USB disconnect, device number 12 [ 180.839910][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.919409][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.919463][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.946677][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input17 [ 180.965688][ T9] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 180.999436][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.999526][ T5638] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.089454][ T5704] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 181.103766][ T7638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.489'. [ 181.105684][ T7638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.489'. [ 181.252517][ T5704] usb 1-1: New USB device found: idVendor=046d, idProduct=0990, bcdDevice=0.40 [ 181.257029][ T5704] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 181.257063][ T5704] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 181.268574][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.268588][ T5704] usb 1-1: Product: syz [ 181.268595][ T5704] usb 1-1: Manufacturer: syz [ 181.268602][ T5704] usb 1-1: SerialNumber: syz [ 181.344749][ T7647] netlink: 'syz.5.492': attribute type 1 has an invalid length. [ 181.511821][ T5704] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 181.512287][ T5704] usb 1-1: unit 6 not found! [ 181.620479][ T5704] usb 1-1: USB disconnect, device number 19 [ 181.663948][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.695124][ T7652] usb usb8: usbfs: process 7652 (syz.1.494) did not claim interface 0 before use [ 181.859632][ T5682] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 181.883324][ T24] usb 5-1: USB disconnect, device number 23 [ 182.009546][ T5682] usb 3-1: Using ep0 maxpacket: 8 [ 182.012432][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.012478][ T5682] usb 3-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 182.014424][ T5682] usb 3-1: config 4 interface 0 has no altsetting 0 [ 182.020041][ T5682] usb 3-1: string descriptor 0 read error: -22 [ 182.020133][ T5682] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 182.067252][ T5682] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 182.087614][ T5682] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.087941][ T5682] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 182.087985][ T5682] usb 3-1: media controller created [ 182.130380][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 182.152058][ T5682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.281968][ T9] usb 2-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 182.284168][ T9] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 182.284193][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.284212][ T9] usb 2-1: config 0 has no interface number 0 [ 182.284251][ T9] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 182.284276][ T9] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 182.284300][ T9] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.286394][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.286416][ T9] usb 2-1: Product: syz [ 182.286430][ T9] usb 2-1: Manufacturer: syz [ 182.286444][ T9] usb 2-1: SerialNumber: syz [ 182.289148][ T9] usb 2-1: config 0 descriptor?? [ 182.699902][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 182.795823][ T7675] syz.5.501 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=1000 [ 182.795865][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.5.501 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.795892][ T7675] Tainted: [L]=SOFTLOCKUP [ 182.795899][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.795911][ T7675] Call Trace: [ 182.795918][ T7675] [ 182.795927][ T7675] dump_stack_lvl+0xe8/0x150 [ 182.795964][ T7675] dump_header+0xd3/0x4b0 [ 182.795995][ T7675] oom_kill_process+0x3ab/0x9e0 [ 182.796047][ T7675] out_of_memory+0xfb1/0x13b0 [ 182.796071][ T7675] ? try_charge_memcg+0xc0d/0x15e0 [ 182.796111][ T7675] ? __pfx_out_of_memory+0x10/0x10 [ 182.796133][ T7675] ? do_raw_spin_unlock+0xf5/0x200 [ 182.796166][ T7675] try_charge_memcg+0xcc3/0x15e0 [ 182.796208][ T7675] ? __pfx_try_charge_memcg+0x10/0x10 [ 182.796222][ T7675] ? lock_acquire+0x115/0x350 [ 182.796246][ T7675] ? charge_memcg+0x47/0x310 [ 182.796268][ T7675] charge_memcg+0x1dd/0x310 [ 182.796298][ T7675] __mem_cgroup_charge+0x25/0x80 [ 182.796324][ T7675] filemap_add_folio+0x140/0x4e0 [ 182.796355][ T7675] __filemap_get_folio_mpol+0x4fa/0xff0 [ 182.796391][ T7675] kvm_gmem_get_folio+0xb3/0x260 [ 182.796408][ T7675] kvm_gmem_get_pfn+0x1b1/0x650 [ 182.796425][ T7675] kvm_mmu_faultin_pfn+0x95d/0x1600 [ 182.796464][ T7675] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 182.796491][ T7675] ? __kvm_memslots+0x127/0x210 [ 182.796517][ T7675] kvm_tdp_page_fault+0x292/0x3a0 [ 182.796531][ T7675] kvm_mmu_do_page_fault+0x31d/0x640 [ 182.796549][ T7675] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 182.796573][ T7675] ? kvm_gmem_is_private_gfn+0xef/0x180 [ 182.796597][ T7675] kvm_arch_vcpu_pre_fault_memory+0x445/0x6c0 [ 182.796635][ T7675] kvm_vcpu_pre_fault_memory+0x26f/0x4e0 [ 182.796663][ T7675] ? kvm_vcpu_pre_fault_memory+0x184/0x4e0 [ 182.796679][ T7675] kvm_vcpu_ioctl+0x8a6/0xfd0 [ 182.796695][ T7675] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.796706][ T7675] ? do_futex+0x3e7/0x4e0 [ 182.796734][ T7675] ? __fget_files+0x2a/0x420 [ 182.796772][ T7675] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.796799][ T7675] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.796818][ T7675] __se_sys_ioctl+0xfc/0x170 [ 182.796835][ T7675] do_syscall_64+0x166/0x520 [ 182.796847][ T7675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.796858][ T7675] ? clear_bhb_loop+0x70/0xc0 [ 182.796874][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.796892][ T7675] RIP: 0033:0x7f726bf9f559 [ 182.796911][ T7675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.796927][ T7675] RSP: 002b:00007f726cdb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.796947][ T7675] RAX: ffffffffffffffda RBX: 00007f726c225fa0 RCX: 00007f726bf9f559 [ 182.796963][ T7675] RDX: 0000200000000680 RSI: 00000000c040aed5 RDI: 000000000000000c [ 182.796976][ T7675] RBP: 00007f726c036b20 R08: 0000000000000000 R09: 0000000000000000 [ 182.796988][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.797000][ T7675] R13: 00007f726c226038 R14: 00007f726c225fa0 R15: 00007f726c34fa48 [ 182.797025][ T7675] [ 182.797111][ T7675] memory: usage 976kB, limit 976kB, failcnt 71 [ 182.797125][ T7675] memory+swap: usage 976kB, limit 9007199254740988kB, failcnt 0 [ 182.797138][ T7675] kmem: usage 376kB, limit 9007199254740988kB, failcnt 0 [ 182.797151][ T7675] Memory cgroup stats for /syz5/test: [ 182.797305][ T7675] cache 614400 [ 182.797311][ T7675] rss 0 [ 182.797315][ T7675] rss_huge 0 [ 182.797318][ T7675] shmem 0 [ 182.797321][ T7675] mapped_file 0 [ 182.797342][ T7675] dirty 0 [ 182.797346][ T7675] writeback 0 [ 182.797350][ T7675] workingset_refault_anon 0 [ 182.797357][ T7675] workingset_refault_file 0 [ 182.797364][ T7675] swap 0 [ 182.797371][ T7675] swapcached 0 [ 182.797377][ T7675] pgpgin 150 [ 182.797383][ T7675] pgpgout 0 [ 182.797390][ T7675] pgfault 4 [ 182.797397][ T7675] pgmajfault 0 [ 182.797403][ T7675] inactive_anon 0 [ 182.797410][ T7675] active_anon 0 [ 182.797417][ T7675] inactive_file 0 [ 182.797424][ T7675] active_file 0 [ 182.797430][ T7675] unevictable 614400 [ 182.797437][ T7675] hierarchical_memory_limit 999424 [ 182.797444][ T7675] hierarchical_memsw_limit 9223372036854771712 [ 182.797449][ T7675] total_cache 614400 [ 182.797453][ T7675] total_rss 0 [ 182.797456][ T7675] total_rss_huge 0 [ 182.797460][ T7675] total_shmem 0 [ 182.797479][ T7675] total_mapped_file 0 [ 182.797483][ T7675] total_dirty 0 [ 182.797487][ T7675] total_writeback 0 [ 182.797490][ T7675] total_workingset_refault_anon 0 [ 182.797494][ T7675] total_workingset_refault_file 0 [ 182.797498][ T7675] total_swap 0 [ 182.797502][ T7675] total_swapcached 0 [ 182.797507][ T7675] total_pgpgin 150 [ 182.797514][ T7675] total_pgpgout 0 [ 182.797520][ T7675] total_pgfault 4 [ 182.797527][ T7675] total_pgmajfault 0 [ 182.797533][ T7675] total_inactive_anon 0 [ 182.797541][ T7675] total_active_anon 0 [ 182.797548][ T7675] total_inactive_file 0 [ 182.797555][ T7675] total_active_file 0 [ 182.797561][ T7675] total_unevictable 614400 [ 182.797569][ T7675] anon_cost 0 [ 182.797575][ T7675] file_cost 0 [ 182.797582][ T7675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.501,pid=7674,uid=0 [ 182.799522][ T7675] Memory cgroup out of memory: Killed process 7674 (syz.5.501) total-vm:102412kB, anon-rss:1460kB, file-rss:23252kB, shmem-rss:11480kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 182.861809][ T24] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 182.863173][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.863213][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.871688][ T24] usb 5-1: config 0 descriptor?? [ 183.081813][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.081866][ T5638] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.099085][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 183.099180][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.145482][ T24] usb 5-1: USB disconnect, device number 24 [ 183.255089][ T5682] zl10353_read_register: readreg error (reg=127, ret==0) [ 183.403907][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.651071][ T5704] usb 2-1: USB disconnect, device number 22 [ 183.690352][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 183.755709][ T7694] FAULT_INJECTION: forcing a failure. [ 183.755709][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 183.755740][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.0.509 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.755766][ T7694] Tainted: [L]=SOFTLOCKUP [ 183.755773][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 183.755784][ T7694] Call Trace: [ 183.755792][ T7694] [ 183.755800][ T7694] dump_stack_lvl+0xe8/0x150 [ 183.755834][ T7694] should_fail_ex+0x3eb/0x540 [ 183.755862][ T7694] should_failslab+0xa8/0x100 [ 183.755888][ T7694] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 183.755910][ T7694] kmem_cache_alloc_noprof+0x9c/0x600 [ 183.755931][ T7694] ? __kvmalloc_node_noprof+0x340/0x820 [ 183.755973][ T7694] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 183.755992][ T7694] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 183.756020][ T7694] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 183.756053][ T7694] mmu_topup_memory_caches+0x21/0x1a0 [ 183.756078][ T7694] kvm_mmu_load+0x9d/0x21e0 [ 183.756103][ T7694] ? kvm_msr_allowed+0x9a/0x490 [ 183.756125][ T7694] ? kvm_msr_allowed+0x9a/0x490 [ 183.756146][ T7694] ? kvm_msr_allowed+0x9a/0x490 [ 183.756167][ T7694] ? kvm_msr_allowed+0x3f4/0x490 [ 183.756187][ T7694] ? kvm_msr_allowed+0x9a/0x490 [ 183.756209][ T7694] ? kvm_apic_has_interrupt+0x740/0x770 [ 183.756248][ T7694] vcpu_run+0x4f5b/0x7a90 [ 183.756346][ T7694] ? __pfx_vcpu_run+0x10/0x10 [ 183.756367][ T7694] ? lock_acquire+0x115/0x350 [ 183.756396][ T7694] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 183.756423][ T7694] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 183.756452][ T7694] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 183.756482][ T7694] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 183.756506][ T7694] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 183.756535][ T7694] kvm_vcpu_ioctl+0xa61/0xfd0 [ 183.756564][ T7694] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.756607][ T7694] ? __fget_files+0x2a/0x420 [ 183.756632][ T7694] ? __fget_files+0x2a/0x420 [ 183.756654][ T7694] ? __fget_files+0x2a/0x420 [ 183.756680][ T7694] ? bpf_lsm_file_ioctl+0x9/0x20 [ 183.756706][ T7694] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.756729][ T7694] __se_sys_ioctl+0xfc/0x170 [ 183.756759][ T7694] do_syscall_64+0x166/0x520 [ 183.756779][ T7694] ? trace_irq_disable+0x3b/0x140 [ 183.756804][ T7694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.756824][ T7694] ? clear_bhb_loop+0x70/0xc0 [ 183.756847][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.756866][ T7694] RIP: 0033:0x7fd60f79f559 [ 183.756883][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.756900][ T7694] RSP: 002b:00007fd6106ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.756920][ T7694] RAX: ffffffffffffffda RBX: 00007fd60fa25fa0 RCX: 00007fd60f79f559 [ 183.756935][ T7694] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 183.756947][ T7694] RBP: 00007fd6106ed090 R08: 0000000000000000 R09: 0000000000000000 [ 183.756959][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.756970][ T7694] R13: 00007fd60fa26038 R14: 00007fd60fa25fa0 R15: 00007fd60fb4fa48 [ 183.757003][ T7694] [ 183.831522][ T5682] usb 3-1: USB disconnect, device number 18 [ 183.850555][ T24] usb 5-1: New USB device found: idVendor=04d8, idProduct=f002, bcdDevice=0.00 [ 183.851615][ T24] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.851643][ T24] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.851668][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.851699][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.869869][ T24] usb 5-1: config 0 descriptor?? [ 183.923596][ T7697] bridge0: port 1(gretap0) entered disabled state [ 184.339025][ T7697] vxlan0: left promiscuous mode [ 184.339076][ T7697] vxlan0: left allmulticast mode [ 184.371281][ T24] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf3 found [ 184.371306][ T24] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf4 found [ 184.405617][ T7697] ip6tnl2: left promiscuous mode [ 184.407473][ T7702] FAULT_INJECTION: forcing a failure. [ 184.407473][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 184.407492][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: syz.2.511 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.407508][ T7702] Tainted: [L]=SOFTLOCKUP [ 184.407512][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.407519][ T7702] Call Trace: [ 184.407523][ T7702] [ 184.407528][ T7702] dump_stack_lvl+0xe8/0x150 [ 184.407550][ T7702] should_fail_ex+0x3eb/0x540 [ 184.407566][ T7702] should_failslab+0xa8/0x100 [ 184.407582][ T7702] ? security_inode_alloc+0x39/0x310 [ 184.407593][ T7702] kmem_cache_alloc_noprof+0x9c/0x600 [ 184.407607][ T7702] ? security_inode_alloc+0x39/0x310 [ 184.407620][ T7702] security_inode_alloc+0x39/0x310 [ 184.407632][ T7702] inode_init_always_gfp+0x97e/0xd30 [ 184.407647][ T7702] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 184.407661][ T7702] alloc_inode+0x82/0x1b0 [ 184.407672][ T7702] new_inode+0x1f/0x170 [ 184.407686][ T7702] __debugfs_create_file+0xb8/0x400 [ 184.407700][ T7702] debugfs_create_file_full+0x3f/0x60 [ 184.407714][ T7702] ref_tracker_dir_debugfs+0x197/0x360 [ 184.407731][ T7702] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 184.407777][ T7702] ? __kvmalloc_node_noprof+0x52a/0x820 [ 184.407802][ T7702] ? __kvmalloc_node_noprof+0x340/0x820 [ 184.407828][ T7702] ? __raw_spin_lock_init+0x45/0x100 [ 184.407843][ T7702] alloc_netdev_mqs+0x275/0x1240 [ 184.407856][ T7702] ? __pfx_snprintf+0x10/0x10 [ 184.407871][ T7702] ? __pfx_geneve_setup+0x10/0x10 [ 184.407888][ T7702] rtnl_create_link+0x321/0xd70 [ 184.407911][ T7702] rtnl_newlink_create+0x258/0x7b0 [ 184.407927][ T7702] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 184.407940][ T7702] ? __pfx___mutex_lock+0x10/0x10 [ 184.407958][ T7702] ? ns_capable+0x84/0xe0 [ 184.407974][ T7702] rtnl_newlink+0x167a/0x1c30 [ 184.407993][ T7702] ? __pfx_rtnl_newlink+0x10/0x10 [ 184.408002][ T7702] ? __lock_acquire+0x747/0x2de0 [ 184.408032][ T7702] ? __lock_acquire+0x747/0x2de0 [ 184.408060][ T7702] ? __lock_acquire+0x747/0x2de0 [ 184.408095][ T7702] ? lock_acquire+0x115/0x350 [ 184.408123][ T7702] ? lock_acquire+0x115/0x350 [ 184.408150][ T7702] ? __lock_acquire+0x747/0x2de0 [ 184.408164][ T7702] ? is_bpf_text_address+0x292/0x2b0 [ 184.408176][ T7702] ? __pfx_hook_capable+0x10/0x10 [ 184.408188][ T7702] ? kernel_text_address+0xa5/0xe0 [ 184.408202][ T7702] ? __pfx_hook_capable+0x10/0x10 [ 184.408211][ T7702] ? unwind_get_return_address+0x4d/0x90 [ 184.408241][ T7702] ? __pfx_rtnl_newlink+0x10/0x10 [ 184.408250][ T7702] rtnetlink_rcv_msg+0x802/0xc00 [ 184.408262][ T7702] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 184.408271][ T7702] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.408282][ T7702] ? __lock_acquire+0x747/0x2de0 [ 184.408301][ T7702] netlink_rcv_skb+0x226/0x4a0 [ 184.408316][ T7702] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.408327][ T7702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.408348][ T7702] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.408361][ T7702] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.408378][ T7702] netlink_unicast+0x8ef/0xa80 [ 184.408400][ T7702] netlink_sendmsg+0x7f0/0xb20 [ 184.408420][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.408435][ T7702] ? aa_sock_msg_perm+0x144/0x210 [ 184.408448][ T7702] ? apparmor_socket_sendmsg+0x98/0x360 [ 184.408463][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.408476][ T7702] sock_sendmsg_nosec+0x14e/0x190 [ 184.408491][ T7702] ____sys_sendmsg+0x54e/0x850 [ 184.408505][ T7702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.408521][ T7702] ? import_iovec+0x73/0xa0 [ 184.408535][ T7702] ___sys_sendmsg+0x2a5/0x360 [ 184.408544][ T7702] ? __lock_acquire+0x747/0x2de0 [ 184.408559][ T7702] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.408590][ T7702] ? __fget_files+0x3a2/0x420 [ 184.408602][ T7702] ? __fget_files+0x2a/0x420 [ 184.408619][ T7702] __x64_sys_sendmsg+0x1b1/0x290 [ 184.408631][ T7702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.408654][ T7702] do_syscall_64+0x166/0x520 [ 184.408665][ T7702] ? trace_irq_disable+0x3b/0x140 [ 184.408679][ T7702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.408689][ T7702] ? clear_bhb_loop+0x70/0xc0 [ 184.408702][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.408712][ T7702] RIP: 0033:0x7f257079f559 [ 184.408723][ T7702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.408732][ T7702] RSP: 002b:00007f257170e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.408743][ T7702] RAX: ffffffffffffffda RBX: 00007f2570a25fa0 RCX: 00007f257079f559 [ 184.408750][ T7702] RDX: 0000000002000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 184.408757][ T7702] RBP: 00007f257170e090 R08: 0000000000000000 R09: 0000000000000000 [ 184.408763][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.408769][ T7702] R13: 00007f2570a26038 R14: 00007f2570a25fa0 R15: 00007f2570b4fa48 [ 184.408786][ T7702] [ 184.430762][ T7702] debugfs: out of free dentries, can not create file 'netdev@ffff888077c58720' [ 184.461815][ T6139] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 31488 - 0 [ 184.461847][ T6139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.461915][ T6139] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 31488 - 0 [ 184.461936][ T6139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.461968][ T6139] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 31488 - 0 [ 184.461990][ T6139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.499622][ T6139] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 31488 - 0 [ 184.499678][ T6139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.572000][ T7672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.579017][ T7672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.674824][ T5704] usb 5-1: USB disconnect, device number 25 [ 185.059520][ T5682] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 185.138976][ T7722] FAULT_INJECTION: forcing a failure. [ 185.138976][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 185.138999][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.1.518 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.139013][ T7722] Tainted: [L]=SOFTLOCKUP [ 185.139017][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.139023][ T7722] Call Trace: [ 185.139028][ T7722] [ 185.139032][ T7722] dump_stack_lvl+0xe8/0x150 [ 185.139054][ T7722] should_fail_ex+0x3eb/0x540 [ 185.139069][ T7722] ? __alloc_skb+0x1db/0x7a0 [ 185.139084][ T7722] should_failslab+0xa8/0x100 [ 185.139101][ T7722] ? __alloc_skb+0x1db/0x7a0 [ 185.139114][ T7722] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 185.139125][ T7722] ? __alloc_skb+0x18d/0x7a0 [ 185.139140][ T7722] ? __alloc_skb+0x1db/0x7a0 [ 185.139157][ T7722] __alloc_skb+0x1db/0x7a0 [ 185.139173][ T7722] netlink_ack+0x136/0xb30 [ 185.139186][ T7722] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.139197][ T7722] ? __lock_acquire+0x747/0x2de0 [ 185.139221][ T7722] netlink_rcv_skb+0x2a4/0x4a0 [ 185.139244][ T7722] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.139263][ T7722] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.139297][ T7722] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.139320][ T7722] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.139350][ T7722] netlink_unicast+0x8ef/0xa80 [ 185.139395][ T7722] netlink_sendmsg+0x7f0/0xb20 [ 185.139426][ T7722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.139453][ T7722] ? aa_sock_msg_perm+0x144/0x210 [ 185.139476][ T7722] ? apparmor_socket_sendmsg+0x98/0x360 [ 185.139503][ T7722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.139527][ T7722] sock_sendmsg_nosec+0x14e/0x190 [ 185.139552][ T7722] ____sys_sendmsg+0x54e/0x850 [ 185.139577][ T7722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.139605][ T7722] ? import_iovec+0x73/0xa0 [ 185.139631][ T7722] ___sys_sendmsg+0x2a5/0x360 [ 185.139648][ T7722] ? __lock_acquire+0x747/0x2de0 [ 185.139675][ T7722] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.139730][ T7722] ? __fget_files+0x3a2/0x420 [ 185.139751][ T7722] ? __fget_files+0x2a/0x420 [ 185.139781][ T7722] __x64_sys_sendmsg+0x1b1/0x290 [ 185.139804][ T7722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.139842][ T7722] do_syscall_64+0x166/0x520 [ 185.139861][ T7722] ? trace_irq_disable+0x3b/0x140 [ 185.139884][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.139902][ T7722] ? clear_bhb_loop+0x70/0xc0 [ 185.139925][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.139943][ T7722] RIP: 0033:0x7f5987f9f559 [ 185.139961][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.139976][ T7722] RSP: 002b:00007f5988ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.139996][ T7722] RAX: ffffffffffffffda RBX: 00007f5988225fa0 RCX: 00007f5987f9f559 [ 185.140010][ T7722] RDX: 0000000000004040 RSI: 0000200000000480 RDI: 0000000000000003 [ 185.140022][ T7722] RBP: 00007f5988ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 185.140033][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.140044][ T7722] R13: 00007f5988226038 R14: 00007f5988225fa0 R15: 00007f598834fa48 [ 185.140074][ T7722] [ 185.159323][ T5638] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.247815][ T5682] usb 1-1: New USB device found: idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 185.319454][ T5695] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 185.337941][ T7727] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 185.337965][ T7727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.338035][ T7727] vhci_hcd vhci_hcd.0: Device attached [ 185.356808][ T7728] vhci_hcd: connection closed [ 185.358686][ T5682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.358714][ T6139] vhci_hcd vhci_hcd.4: stop threads [ 185.358716][ T5682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.358733][ T6139] vhci_hcd vhci_hcd.4: release socket [ 185.358752][ T6139] vhci_hcd vhci_hcd.4: disconnect device [ 185.434827][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 185.434852][ T5682] usb 1-1: Product: syz [ 185.434871][ T5682] usb 1-1: Manufacturer: syz [ 185.529305][ T5695] usb 6-1: Using ep0 maxpacket: 32 [ 185.530034][ T5695] usb 6-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 185.530968][ T5695] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.531009][ T5695] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.531032][ T5695] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.531051][ T5695] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.531072][ T5695] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.531102][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.628985][ T5695] usb 6-1: config 0 descriptor?? [ 185.710714][ T5704] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 185.869450][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 185.872154][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.872202][ T5704] usb 2-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 185.876918][ T5704] usb 2-1: config 4 interface 0 has no altsetting 0 [ 185.888947][ T5704] usb 2-1: string descriptor 0 read error: -22 [ 185.889053][ T5704] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 185.915621][ T5682] logitech-djreceiver 0003:046D:C52B.0017: unknown main item tag 0x6 [ 185.917039][ T5704] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 185.930516][ T5704] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.930837][ T5704] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 185.930879][ T5704] usb 2-1: media controller created [ 185.994623][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.159107][ T992] usb 1-1: USB disconnect, device number 20 [ 186.264447][ T5695] usbhid 6-1:0.0: can't add hid device: -71 [ 186.264545][ T5695] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 186.283567][ T5695] usb 6-1: USB disconnect, device number 13 [ 186.435094][ T7756] netlink: 'syz.4.529': attribute type 15 has an invalid length. [ 186.442006][ T7756] netlink: 'syz.4.529': attribute type 15 has an invalid length. [ 186.447457][ T1167] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 186.469607][ T1167] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 186.469658][ T1167] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 186.469689][ T1167] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 186.520264][ T7758] FAULT_INJECTION: forcing a failure. [ 186.520264][ T7758] name failslab, interval 1, probability 0, space 0, times 0 [ 186.520285][ T7758] CPU: 1 UID: 0 PID: 7758 Comm: syz.4.530 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.520302][ T7758] Tainted: [L]=SOFTLOCKUP [ 186.520306][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.520312][ T7758] Call Trace: [ 186.520316][ T7758] [ 186.520321][ T7758] dump_stack_lvl+0xe8/0x150 [ 186.520342][ T7758] should_fail_ex+0x3eb/0x540 [ 186.520358][ T7758] should_failslab+0xa8/0x100 [ 186.520374][ T7758] ? skb_clone+0x212/0x3a0 [ 186.520386][ T7758] kmem_cache_alloc_noprof+0x9c/0x600 [ 186.520399][ T7758] ? skb_clone+0x212/0x3a0 [ 186.520417][ T7758] skb_clone+0x212/0x3a0 [ 186.520430][ T7758] __netlink_deliver_tap+0x355/0x6e0 [ 186.520449][ T7758] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.520464][ T7758] netlink_deliver_tap+0x19c/0x1b0 [ 186.520478][ T7758] netlink_sendskb+0x68/0x140 [ 186.520492][ T7758] netlink_rcv_skb+0x2a4/0x4a0 [ 186.520505][ T7758] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 186.520520][ T7758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.520540][ T7758] ? bpf_lsm_capable+0x9/0x20 [ 186.520549][ T7758] ? security_capable+0x7e/0x2c0 [ 186.520568][ T7758] nfnetlink_rcv+0x2b9/0x28c0 [ 186.520595][ T7758] ? __dev_queue_xmit+0x29b/0x3920 [ 186.520614][ T7758] ? __local_bh_enable_ip+0xd6/0x140 [ 186.520629][ T7758] ? lockdep_hardirqs_on+0x7b/0x110 [ 186.520640][ T7758] ? __dev_queue_xmit+0x29b/0x3920 [ 186.520650][ T7758] ? __local_bh_enable_ip+0xd6/0x140 [ 186.520663][ T7758] ? __dev_queue_xmit+0x29b/0x3920 [ 186.520673][ T7758] ? __dev_queue_xmit+0x1efb/0x3920 [ 186.520687][ T7758] ? __dev_queue_xmit+0x29b/0x3920 [ 186.520702][ T7758] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 186.520719][ T7758] ? __pfx___dev_queue_xmit+0x10/0x10 [ 186.520736][ T7758] ? __copy_skb_header+0xa3/0x4a0 [ 186.520747][ T7758] ? __asan_memcpy+0x40/0x70 [ 186.520757][ T7758] ? __skb_clone+0x5c/0x760 [ 186.520770][ T7758] ? __skb_clone+0x4a2/0x760 [ 186.520784][ T7758] ? skb_clone+0x246/0x3a0 [ 186.520796][ T7758] ? __netlink_deliver_tap+0x681/0x6e0 [ 186.520809][ T7758] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.520825][ T7758] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.520838][ T7758] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.520854][ T7758] netlink_unicast+0x8ef/0xa80 [ 186.520876][ T7758] netlink_sendmsg+0x7f0/0xb20 [ 186.520893][ T7758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.520914][ T7758] ? aa_sock_msg_perm+0x144/0x210 [ 186.520927][ T7758] ? apparmor_socket_sendmsg+0x98/0x360 [ 186.520943][ T7758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.520956][ T7758] sock_sendmsg_nosec+0x14e/0x190 [ 186.520971][ T7758] ____sys_sendmsg+0x54e/0x850 [ 186.520984][ T7758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.520999][ T7758] ? import_iovec+0x73/0xa0 [ 186.521017][ T7758] ___sys_sendmsg+0x2a5/0x360 [ 186.521026][ T7758] ? __lock_acquire+0x747/0x2de0 [ 186.521042][ T7758] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.521071][ T7758] ? __fget_files+0x3a2/0x420 [ 186.521083][ T7758] ? __fget_files+0x2a/0x420 [ 186.521099][ T7758] __x64_sys_sendmsg+0x1b1/0x290 [ 186.521111][ T7758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.521133][ T7758] do_syscall_64+0x166/0x520 [ 186.521144][ T7758] ? trace_irq_disable+0x3b/0x140 [ 186.521158][ T7758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.521168][ T7758] ? clear_bhb_loop+0x70/0xc0 [ 186.521181][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.521191][ T7758] RIP: 0033:0x7f5574d9f559 [ 186.521201][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.521210][ T7758] RSP: 002b:00007f5575c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.521222][ T7758] RAX: ffffffffffffffda RBX: 00007f5575025fa0 RCX: 00007f5574d9f559 [ 186.521229][ T7758] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 186.521235][ T7758] RBP: 00007f5575c27090 R08: 0000000000000000 R09: 0000000000000000 [ 186.521241][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.521247][ T7758] R13: 00007f5575026038 R14: 00007f5575025fa0 R15: 00007f557514fa48 [ 186.521268][ T7758] [ 187.081217][ T5704] zl10353_read_register: readreg error (reg=127, ret==0) [ 187.115055][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.115293][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.331440][ T5682] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 187.489696][ T5682] usb 6-1: Invalid ep0 maxpacket: 32 [ 187.636019][ T5704] usb 2-1: USB disconnect, device number 23 [ 187.642211][ T5682] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 187.790726][ T5682] usb 6-1: Invalid ep0 maxpacket: 32 [ 187.791461][ T5682] usb usb6-port1: attempt power cycle [ 188.079372][ T5704] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 188.129434][ T5682] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 188.152070][ T5682] usb 6-1: Invalid ep0 maxpacket: 32 [ 188.232006][ T5704] usb 3-1: New USB device found: idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 188.235182][ T5704] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 188.235207][ T5704] usb 3-1: config 0 has no interface number 0 [ 188.235242][ T5704] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.242967][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.242989][ T5704] usb 3-1: Product: syz [ 188.243001][ T5704] usb 3-1: Manufacturer: syz [ 188.243012][ T5704] usb 3-1: SerialNumber: syz [ 188.255508][ T5704] usb 3-1: config 0 descriptor?? [ 188.279483][ T5682] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 188.296766][ T5704] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 188.296845][ T5704] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 188.301069][ T5682] usb 6-1: Invalid ep0 maxpacket: 32 [ 188.301528][ T5682] usb usb6-port1: unable to enumerate USB device [ 188.479384][ T9] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 188.560543][ T5704] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 188.609406][ T9] usb 1-1: device descriptor read/64, error -71 [ 188.769398][ T5695] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 188.851176][ T9] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 188.919981][ T5695] usb 5-1: device descriptor read/64, error -71 [ 188.981094][ T9] usb 1-1: device descriptor read/64, error -71 [ 189.091223][ T9] usb usb1-port1: attempt power cycle [ 189.169355][ T5695] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 189.299710][ T5695] usb 5-1: device descriptor read/64, error -71 [ 189.409892][ T5695] usb usb5-port1: attempt power cycle [ 189.429382][ T9] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 189.450008][ T9] usb 1-1: device descriptor read/8, error -71 [ 189.484166][ T7810] FAULT_INJECTION: forcing a failure. [ 189.484166][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 189.484186][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.1.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.484201][ T7810] Tainted: [L]=SOFTLOCKUP [ 189.484205][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.484211][ T7810] Call Trace: [ 189.484215][ T7810] [ 189.484220][ T7810] dump_stack_lvl+0xe8/0x150 [ 189.484241][ T7810] should_fail_ex+0x3eb/0x540 [ 189.484256][ T7810] should_failslab+0xa8/0x100 [ 189.484273][ T7810] __kmalloc_noprof+0xf9/0x710 [ 189.484288][ T7810] ? tomoyo_encode+0x2ad/0x570 [ 189.484298][ T7810] ? tomoyo_encode+0x2ad/0x570 [ 189.484312][ T7810] tomoyo_encode+0x2ad/0x570 [ 189.484325][ T7810] tomoyo_realpath_from_path+0x5fa/0x640 [ 189.484341][ T7810] ? tomoyo_path_number_perm+0x219/0x5f0 [ 189.484355][ T7810] tomoyo_path_number_perm+0x246/0x5f0 [ 189.484371][ T7810] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.484384][ T7810] ? __lock_acquire+0x747/0x2de0 [ 189.484416][ T7810] ? __fget_files+0x2a/0x420 [ 189.484430][ T7810] ? __fget_files+0x2a/0x420 [ 189.484442][ T7810] ? __fget_files+0x2a/0x420 [ 189.484455][ T7810] security_file_ioctl+0xc3/0x2a0 [ 189.484470][ T7810] __se_sys_ioctl+0x47/0x170 [ 189.484486][ T7810] do_syscall_64+0x166/0x520 [ 189.484498][ T7810] ? trace_irq_disable+0x3b/0x140 [ 189.484512][ T7810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.484522][ T7810] ? clear_bhb_loop+0x70/0xc0 [ 189.484538][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.484555][ T7810] RIP: 0033:0x7f5987f9f559 [ 189.484571][ T7810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.484586][ T7810] RSP: 002b:00007f5988ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.484613][ T7810] RAX: ffffffffffffffda RBX: 00007f5988225fa0 RCX: 00007f5987f9f559 [ 189.484627][ T7810] RDX: 0000000000000000 RSI: 00000000c00455d0 RDI: 0000000000000003 [ 189.484638][ T7810] RBP: 00007f5988ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 189.484646][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.484652][ T7810] R13: 00007f5988226038 R14: 00007f5988225fa0 R15: 00007f598834fa48 [ 189.484669][ T7810] [ 189.484696][ T7810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.759309][ T9] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 189.781386][ T9] usb 1-1: device descriptor read/8, error -71 [ 189.839606][ T5695] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 189.861004][ T5695] usb 5-1: device descriptor read/8, error -71 [ 189.889686][ T9] usb usb1-port1: unable to enumerate USB device [ 189.893265][ T7812] tipc: Enabling of bearer rejected, failed to enable media [ 190.099551][ T5695] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 190.134802][ T5695] usb 5-1: device descriptor read/8, error -71 [ 190.188562][ T7817] bond2: entered allmulticast mode [ 190.188941][ T7817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.240951][ T5695] usb usb5-port1: unable to enumerate USB device [ 190.409344][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 190.569487][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 190.576494][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.576540][ T9] usb 2-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 190.595612][ T9] usb 2-1: config 4 interface 0 has no altsetting 0 [ 190.610180][ T9] usb 2-1: string descriptor 0 read error: -22 [ 190.610268][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 190.633728][ T9] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 190.650731][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.651056][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 190.651107][ T9] usb 2-1: media controller created [ 190.687028][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.784959][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.788502][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.788528][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.818748][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.818776][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.867941][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.867970][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.887510][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.896589][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.932359][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'. [ 190.942350][ T5704] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 190.945467][ T5704] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 191.004073][ T5704] usb 3-1: USB disconnect, device number 19 [ 191.004945][ T5704] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 191.732554][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 191.891357][ T1167] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 31488 - 0 [ 191.891390][ T1167] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.891424][ T1167] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 31488 - 0 [ 191.891447][ T1167] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.891479][ T1167] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 31488 - 0 [ 191.891502][ T1167] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.891541][ T1167] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 31488 - 0 [ 191.891564][ T1167] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.333913][ T7863] FAULT_INJECTION: forcing a failure. [ 192.333913][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 192.333945][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.2.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.333971][ T7863] Tainted: [L]=SOFTLOCKUP [ 192.333978][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.333995][ T7863] Call Trace: [ 192.334003][ T7863] [ 192.334011][ T7863] dump_stack_lvl+0xe8/0x150 [ 192.334045][ T7863] should_fail_ex+0x3eb/0x540 [ 192.334070][ T7863] ? __alloc_skb+0x1db/0x7a0 [ 192.334095][ T7863] should_failslab+0xa8/0x100 [ 192.334122][ T7863] ? __alloc_skb+0x1db/0x7a0 [ 192.334145][ T7863] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 192.334167][ T7863] ? __alloc_skb+0x18d/0x7a0 [ 192.334192][ T7863] ? __alloc_skb+0x1db/0x7a0 [ 192.334224][ T7863] __alloc_skb+0x1db/0x7a0 [ 192.334254][ T7863] netlink_ack+0x136/0xb30 [ 192.334284][ T7863] ? __kmalloc_cache_noprof+0x148/0x600 [ 192.334304][ T7863] ? nfnetlink_rcv+0x1021/0x28c0 [ 192.334335][ T7863] nfnetlink_rcv+0x260c/0x28c0 [ 192.334391][ T7863] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 192.334462][ T7863] ? lock_acquire+0x115/0x350 [ 192.334493][ T7863] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.334518][ T7863] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.334547][ T7863] netlink_unicast+0x8ef/0xa80 [ 192.334587][ T7863] netlink_sendmsg+0x7f0/0xb20 [ 192.334617][ T7863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.334645][ T7863] ? aa_sock_msg_perm+0x144/0x210 [ 192.334671][ T7863] ? apparmor_socket_sendmsg+0x98/0x360 [ 192.334697][ T7863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.334721][ T7863] sock_sendmsg_nosec+0x14e/0x190 [ 192.334748][ T7863] ____sys_sendmsg+0x54e/0x850 [ 192.334773][ T7863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.334801][ T7863] ? import_iovec+0x73/0xa0 [ 192.334826][ T7863] ___sys_sendmsg+0x2a5/0x360 [ 192.334843][ T7863] ? __lock_acquire+0x747/0x2de0 [ 192.334870][ T7863] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.334925][ T7863] ? __fget_files+0x3a2/0x420 [ 192.334945][ T7863] ? __fget_files+0x2a/0x420 [ 192.334976][ T7863] __x64_sys_sendmsg+0x1b1/0x290 [ 192.335004][ T7863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.335044][ T7863] do_syscall_64+0x166/0x520 [ 192.335064][ T7863] ? trace_irq_disable+0x3b/0x140 [ 192.335089][ T7863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.335108][ T7863] ? clear_bhb_loop+0x70/0xc0 [ 192.335130][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.335149][ T7863] RIP: 0033:0x7f257079f559 [ 192.335167][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.335182][ T7863] RSP: 002b:00007f257170e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.335202][ T7863] RAX: ffffffffffffffda RBX: 00007f2570a25fa0 RCX: 00007f257079f559 [ 192.335215][ T7863] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 192.335226][ T7863] RBP: 00007f257170e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.335238][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.335249][ T7863] R13: 00007f2570a26038 R14: 00007f2570a25fa0 R15: 00007f2570b4fa48 [ 192.335280][ T7863] [ 192.664437][ T9] usb 2-1: USB disconnect, device number 24 [ 192.805411][ T7872] kAFS: unparsable volume name [ 192.826878][ T7878] kAFS: unparsable volume name [ 192.854942][ T7878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.910408][ T5704] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 193.076239][ T5704] usb 5-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 193.083230][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 193.083254][ T5704] usb 5-1: Product: syz [ 193.083270][ T5704] usb 5-1: SerialNumber: syz [ 193.088977][ T5704] usb 5-1: config 0 descriptor?? [ 193.311266][ T5704] hso 5-1:0.0: Failed to find BULK eps [ 193.731982][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 193.732001][ T29] audit: type=1326 audit(1793249177.074:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.5.574" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f726bf9f559 code=0x0 [ 193.739405][ T5704] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 193.769353][ T24] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 193.889373][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 193.890065][ T5704] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.892803][ T5704] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 193.892848][ T5704] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.892868][ T5704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.892891][ T5704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.892908][ T5704] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.892930][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.944386][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 193.944455][ T24] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 193.946036][ T24] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x82 is Bulk; changing to Interrupt [ 193.946062][ T24] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x3 is Bulk; changing to Interrupt [ 193.946082][ T24] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.946129][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 193.950817][ T24] usb 1-1: string descriptor 0 read error: -22 [ 193.950963][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.961689][ T7897] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.961835][ T7897] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 193.965553][ T24] usb 1-1: No union descriptors [ 194.100795][ T5704] usb 3-1: usb_control_msg returned -32 [ 194.100834][ T5704] usbtmc 3-1:16.0: can't read capabilities [ 194.295521][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.295578][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.385432][ T992] usb 1-1: USB disconnect, device number 25 [ 194.733221][ T7943] syzkaller0: entered promiscuous mode [ 194.733242][ T7943] syzkaller0: entered allmulticast mode [ 194.736094][ T7943] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 194.807041][ T7948] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 195.070416][ T992] usb 3-1: USB disconnect, device number 20 [ 195.176931][ T7964] dummy0: entered promiscuous mode [ 195.638936][ T992] usb 5-1: USB disconnect, device number 30 [ 195.899385][ T5704] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 196.051571][ T5704] usb 2-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 196.053046][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.053112][ T5704] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 196.058354][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.058368][ T5704] usb 2-1: Product: syz [ 196.058376][ T5704] usb 2-1: Manufacturer: syz [ 196.058383][ T5704] usb 2-1: SerialNumber: syz [ 196.573088][ C1] usb 2-1: received EP1 urb->status = -2 [ 196.573137][ T5704] usb 2-1: unable to init card! (ret=-110) [ 196.573486][ T5704] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 196.643097][ T8025] netlink: 'syz.0.629': attribute type 2 has an invalid length. [ 196.750248][ T5704] usb 2-1: USB disconnect, device number 25 [ 197.943546][ T8063] netlink: 'syz.0.643': attribute type 29 has an invalid length. [ 197.947926][ T8063] netlink: 'syz.0.643': attribute type 29 has an invalid length. [ 198.064806][ T8065] input: syz1 as /devices/virtual/input/input19 [ 198.299565][ T5704] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 198.381449][ T8069] __nla_validate_parse: 150 callbacks suppressed [ 198.381471][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 198.450224][ T5704] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 198.450267][ T5704] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 198.451422][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.451467][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.451498][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.452624][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.452667][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.452691][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.453809][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.455382][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.455409][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.456896][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.456940][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.456963][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.458085][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.458129][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.458154][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.500709][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.500767][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.500792][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.544605][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.544654][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.544678][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.584507][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.584558][ T5704] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.584584][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.672317][ T5704] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 198.672344][ T5704] usb 1-1: Product: syz [ 198.672357][ T5704] usb 1-1: Manufacturer: syz [ 198.672372][ T5704] usb 1-1: SerialNumber: syz [ 198.736261][ T5704] usb 1-1: config 0 descriptor?? [ 198.745185][ T5704] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 198.974119][ T5704] usb 1-1: USB disconnect, device number 26 [ 198.983388][ T5704] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 199.023030][ T8067] netlink: 2 bytes leftover after parsing attributes in process `syz.0.645'. [ 199.169632][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 199.326896][ T9] usb 5-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 199.327766][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.327794][ T9] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 199.327805][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 199.327828][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.402797][ T9] cxacru 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 199.420363][ T992] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 199.577220][ T992] usb 2-1: not running at top speed; connect to a high speed hub [ 199.577258][ T992] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 199.607080][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.607105][ T992] usb 2-1: Product: syz [ 199.607119][ T992] usb 2-1: Manufacturer: syz [ 199.607132][ T992] usb 2-1: SerialNumber: syz [ 199.635217][ T992] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 199.661912][ T992] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 199.673164][ T992] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 199.693245][ T992] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 199.705729][ T992] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 199.726441][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.654'. [ 199.882938][ T992] usb 2-1: USB disconnect, device number 26 [ 199.952102][ T992] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 199.974821][ T992] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 200.000149][ T992] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 200.022749][ T992] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 200.030664][ T992] keyspan 2-1:1.0: device disconnected [ 200.778043][ T8102] bridge0: entered promiscuous mode [ 200.779416][ T8102] bridge0: entered allmulticast mode [ 202.033331][ T992] usb 5-1: USB disconnect, device number 31 [ 203.827301][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 203.879466][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.975702][ T8165] syzkaller0: entered promiscuous mode [ 203.975718][ T8165] syzkaller0: entered allmulticast mode [ 204.000731][ T9] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 204.008623][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.055205][ T9] usb 2-1: config 0 descriptor?? [ 204.299054][ T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 204.300892][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 204.365285][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 204.365311][ T9] [drm] Initialized udl on minor 1 [ 204.387307][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 204.388354][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 204.410796][ T5695] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 204.437635][ T9] usb 2-1: USB disconnect, device number 27 [ 204.446054][ T5695] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 204.687451][ T8168] syzkaller0: entered promiscuous mode [ 204.687467][ T8168] syzkaller0: entered allmulticast mode [ 204.713345][ T8168] tipc: Enabled bearer , priority 0 [ 204.740632][ T8168] tipc: Resetting bearer [ 204.759910][ T8166] tipc: Resetting bearer [ 204.828804][ T8166] tipc: Disabling bearer [ 204.887051][ T710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.887073][ T710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.025033][ T8214] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 206.709388][ T5695] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 206.859986][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 206.860779][ T5695] usb 2-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.861975][ T5695] usb 2-1: config 32 has an invalid interface number: 85 but max is 0 [ 206.861998][ T5695] usb 2-1: config 32 has no interface number 0 [ 206.862034][ T5695] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.862060][ T5695] usb 2-1: config 32 interface 85 has no altsetting 0 [ 206.866308][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.866332][ T5695] usb 2-1: Product: syz [ 206.866347][ T5695] usb 2-1: Manufacturer: syz [ 206.866361][ T5695] usb 2-1: SerialNumber: syz [ 207.099351][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 207.251396][ T9] usb 6-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 207.252765][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 207.252782][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.252793][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 207.252806][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 207.256548][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.256571][ T9] usb 6-1: Product: syz [ 207.256585][ T9] usb 6-1: Manufacturer: syz [ 207.256598][ T9] usb 6-1: SerialNumber: syz [ 207.312184][ T9] usb 6-1: config 0 descriptor?? [ 207.606186][ T9] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 207.626268][ T9] usb 6-1: USB disconnect, device number 18 [ 207.691121][ T5695] appletouch 2-1:32.85: Geyser mode initialized. [ 207.710475][ T5695] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.85/input/input20 [ 207.713646][ C0] appletouch 2-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 207.926208][ T9] usb 2-1: USB disconnect, device number 28 [ 207.963921][ T9] appletouch 2-1:32.85: input: appletouch disconnected [ 208.141722][ T5704] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 208.294233][ T5704] usb 3-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.00 [ 208.295508][ T5704] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 208.295539][ T5704] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.295572][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.309134][ T5704] usb 3-1: config 0 descriptor?? [ 208.313025][ T8241] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.765580][ T5704] hid (null): invalid report_size 812540268 [ 208.821777][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.821822][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.821847][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.821871][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.821895][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.821920][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.821946][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.821970][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.821994][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.822018][ T5704] razer 0003:1532:010D.0018: unknown main item tag 0x0 [ 208.858587][ T5704] razer 0003:1532:010D.0018: invalid report_size 812540268 [ 208.858610][ T5704] razer 0003:1532:010D.0018: item 0 4 1 7 parsing failed [ 208.860227][ T5704] razer 0003:1532:010D.0018: probe with driver razer failed with error -22 [ 208.958408][ T9] usb 3-1: USB disconnect, device number 21 [ 209.789507][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 209.939526][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 209.943580][ T9] usb 3-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 209.944823][ T9] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 209.976633][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.976649][ T9] usb 3-1: Product: syz [ 209.976656][ T9] usb 3-1: Manufacturer: syz [ 209.976664][ T9] usb 3-1: SerialNumber: syz [ 210.003691][ T9] usb 3-1: config 0 descriptor?? [ 210.025370][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 210.025956][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 210.047264][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.061781][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 210.061836][ T9] usb 3-1: media controller created [ 210.090985][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.115056][ T9] usb 3-1: selecting invalid altsetting 7 [ 210.115074][ T9] cxusb: set interface failed [ 210.115085][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 210.168605][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 210.168631][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 210.222318][ T8260] dvb-usb: bulk message failed: -22 (3/0) [ 210.291744][ T9] rc_core: IR keymap rc-dvico-portable not found [ 210.291763][ T9] Registered IR keymap rc-empty [ 210.312830][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 210.317404][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input22 [ 210.341002][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 210.341024][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 210.343711][ T9] usb 3-1: USB disconnect, device number 22 [ 210.403931][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 210.596999][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 210.779739][ T5704] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 210.829013][ T8303] mmap: syz.1.734 (8303) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 210.889614][ T992] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 210.930190][ T5704] usb 6-1: Using ep0 maxpacket: 8 [ 210.930747][ T5704] usb 6-1: New USB device found: idVendor=07fd, idProduct=0004, bcdDevice=d4.a5 [ 210.939117][ T5704] usb 6-1: config 9 has an invalid interface number: 216 but max is 0 [ 210.939141][ T5704] usb 6-1: config 9 has no interface number 0 [ 210.941498][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.941520][ T5704] usb 6-1: Product: syz [ 210.941533][ T5704] usb 6-1: Manufacturer: syz [ 210.941545][ T5704] usb 6-1: SerialNumber: syz [ 211.040075][ T992] usb 5-1: New USB device found: idVendor=1430, idProduct=474c, bcdDevice=0.00 [ 211.040923][ T992] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 211.040940][ T992] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 211.040953][ T992] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.040966][ T992] usb 5-1: config 0 interface 0 has no altsetting 0 [ 211.040983][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.048310][ T992] usb 5-1: config 0 descriptor?? [ 211.049720][ T8292] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 211.159693][ T24] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 211.256810][ T8303] ip_tables: iptables: counters copy to user failed while replacing table [ 211.289112][ T5704] usb 6-1: USB disconnect, device number 19 [ 211.313211][ T24] usb 3-1: New USB device found: idVendor=154e, idProduct=500e, bcdDevice=0.40 [ 211.316450][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 71, changing to 4 [ 211.316476][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 4 [ 211.353939][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.353955][ T24] usb 3-1: Product: syz [ 211.353962][ T24] usb 3-1: Manufacturer: syz [ 211.353970][ T24] usb 3-1: SerialNumber: syz [ 211.396753][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.467243][ T992] sony 0003:1430:474C.0019: ignoring exceeding usage max [ 211.483290][ T992] sony 0003:1430:474C.0019: hidraw0: USB HID v0.10 Joystick [HID 1430:474c] on usb-dummy_hcd.4-1/input0 [ 211.483349][ T992] sony 0003:1430:474C.0019: failed to claim input [ 211.601950][ T5638] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 211.623736][ T8321] libceph: resolve 'c' (ret=-3): failed [ 211.662599][ T8318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.681288][ T9] usb 5-1: USB disconnect, device number 32 [ 211.764821][ T8147] IPVS: starting estimator thread 0... [ 211.810916][ T24] usb 3-1: USB disconnect, device number 23 [ 211.850260][ T8327] IPVS: using max 30 ests per chain, 72000 per kthread [ 211.933000][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.941267][ T8334] syz_tun: entered allmulticast mode [ 211.942035][ T8332] syz_tun: left allmulticast mode [ 212.492322][ T8363] team_slave_0: entered allmulticast mode [ 212.497334][ T8363] team_slave_0: entered promiscuous mode [ 212.722608][ T8370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 212.963945][ T8378] syzkaller0: entered promiscuous mode [ 212.963969][ T8378] syzkaller0: entered allmulticast mode [ 212.985217][ T8378] tipc: Started in network mode [ 212.985234][ T8378] tipc: Node identity 3e479a853919, cluster identity 4711 [ 212.986399][ T8378] tipc: Enabled bearer , priority 0 [ 213.026426][ T8378] tipc: Resetting bearer [ 213.039565][ T8375] tipc: Resetting bearer [ 213.086397][ T8375] tipc: Disabling bearer [ 213.238304][ T8380] netlink: 52 bytes leftover after parsing attributes in process `syz.0.766'. [ 213.909432][ T5695] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 214.080816][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 214.084562][ T5695] usb 2-1: New USB device found: idVendor=05ac, idProduct=0269, bcdDevice=0.00 [ 214.085925][ T5695] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 214.085962][ T5695] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.085987][ T5695] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.086019][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.170465][ T5695] usb 2-1: config 0 descriptor?? [ 214.460929][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 214.631030][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 214.631763][ T9] usb 1-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 214.633028][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.668513][ T9] usb 1-1: config 0 descriptor?? [ 214.701276][ T8410] syzkaller0: entered promiscuous mode [ 214.701299][ T8410] syzkaller0: entered allmulticast mode [ 214.707265][ T8410] tipc: Started in network mode [ 214.707295][ T8410] tipc: Node identity 86133137b4dc, cluster identity 4711 [ 214.707512][ T8410] tipc: Enabled bearer , priority 0 [ 214.746620][ T8410] tipc: Resetting bearer [ 214.748723][ T9] as10x_usb: device has been detected [ 214.762692][ T8409] tipc: Resetting bearer [ 214.769217][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 214.805624][ T8409] tipc: Disabling bearer [ 214.856727][ T5695] input: HID 05ac:0269 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:0269.001A/input/input26 [ 214.881348][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 214.936453][ T8403] ------------[ cut here ]------------ [ 214.936464][ T8403] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 214.936474][ T8403] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#0: syz.0.774/8403 [ 214.957964][ T8403] Modules linked in: [ 214.962008][ T8403] CPU: 0 UID: 0 PID: 8403 Comm: syz.0.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.972984][ T8403] Tainted: [L]=SOFTLOCKUP [ 214.977333][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 214.987409][ T8403] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 214.992926][ T8403] Code: 9e 9d 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 33 b1 99 05 00 75 13 48 8d 3d 86 b0 9c 05 48 c7 c6 80 27 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 215.012643][ T8403] RSP: 0018:ffffc900079afa60 EFLAGS: 00010246 [ 215.018695][ T8403] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 215.026669][ T8403] RDX: ffffc90005ad9000 RSI: ffffffff8c2d2780 RDI: ffffffff91a09e50 [ 215.034679][ T8403] RBP: ffffc900079afc00 R08: ffffffff919d9ef3 R09: 1ffffffff233b3de [ 215.042777][ T8403] R10: dffffc0000000000 R11: fffffbfff233b3df R12: ffff888079d30b30 [ 215.050818][ T8403] R13: 0000000000000000 R14: 1ffff92000f35f60 R15: 0000000000000000 [ 215.058775][ T8403] FS: 00007fd6106ed6c0(0000) GS:ffff888123620000(0000) knlGS:0000000000000000 [ 215.067701][ T8403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.074346][ T8403] CR2: 0000200000381030 CR3: 000000002b838000 CR4: 00000000003526f0 [ 215.082395][ T8403] Call Trace: [ 215.085662][ T8403] [ 215.088591][ T8403] ? trace_contention_end+0x3d/0x140 [ 215.093894][ T8403] ? __mutex_lock+0x305/0x15a0 [ 215.098645][ T8403] ? dmx_ts_feed_set+0x330/0x560 [ 215.103612][ T8403] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 215.109303][ T8403] ? __pfx___mutex_lock+0x10/0x10 [ 215.114313][ T8403] ? __mutex_unlock_slowpath+0x731/0x900 [ 215.119960][ T8403] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.125952][ T8403] as102_dvb_dmx_start_feed+0x70/0x290 [ 215.131418][ T8403] dmx_ts_feed_start_filtering+0x129/0x220 [ 215.137212][ T8403] dvb_dmxdev_filter_start+0x434/0x10d0 [ 215.142782][ T8403] dvb_demux_do_ioctl+0x48b/0x540 [ 215.147806][ T8403] dvb_usercopy+0x199/0x2e0 [ 215.152304][ T8403] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 215.157830][ T8403] ? __pfx_dvb_usercopy+0x10/0x10 [ 215.162857][ T8403] ? __fget_files+0x2a/0x420 [ 215.167430][ T8403] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 215.172787][ T8403] dvb_demux_ioctl+0x29/0x40 [ 215.177397][ T8403] __se_sys_ioctl+0xfc/0x170 [ 215.181991][ T8403] do_syscall_64+0x166/0x520 [ 215.186564][ T8403] ? trace_irq_disable+0x3b/0x140 [ 215.191582][ T8403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.197649][ T8403] ? clear_bhb_loop+0x70/0xc0 [ 215.202392][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.208263][ T8403] RIP: 0033:0x7fd60f79f559 [ 215.212676][ T8403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.232287][ T8403] RSP: 002b:00007fd6106ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.240723][ T8403] RAX: ffffffffffffffda RBX: 00007fd60fa25fa0 RCX: 00007fd60f79f559 [ 215.248675][ T8403] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 215.256666][ T8403] RBP: 00007fd60f836b20 R08: 0000000000000000 R09: 0000000000000000 [ 215.264642][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.272611][ T8403] R13: 00007fd60fa26038 R14: 00007fd60fa25fa0 R15: 00007fd60fb4fa48 [ 215.280582][ T8403] [ 215.283596][ T8403] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.290874][ T8403] CPU: 0 UID: 0 PID: 8403 Comm: syz.0.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.301695][ T8403] Tainted: [L]=SOFTLOCKUP [ 215.305997][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 215.316025][ T8403] Call Trace: [ 215.319286][ T8403] [ 215.322206][ T8403] vpanic+0x26f/0x710 [ 215.326169][ T8403] panic+0xc5/0xd0 [ 215.329867][ T8403] ? __pfx_panic+0x10/0x10 [ 215.334264][ T8403] __warn+0x315/0x4c0 [ 215.338219][ T8403] ? __mutex_lock+0x132a/0x15a0 [ 215.343083][ T8403] ? __mutex_lock+0x132a/0x15a0 [ 215.347911][ T8403] __report_bug+0x276/0x570 [ 215.352392][ T8403] ? __mutex_lock+0x132a/0x15a0 [ 215.357223][ T8403] ? __pfx___report_bug+0x10/0x10 [ 215.362224][ T8403] ? __lock_acquire+0x747/0x2de0 [ 215.367143][ T8403] report_bug_entry+0x19b/0x290 [ 215.371991][ T8403] ? __mutex_lock+0x1331/0x15a0 [ 215.376817][ T8403] ? __mutex_lock+0x1336/0x15a0 [ 215.381664][ T8403] handle_bug+0xce/0x200 [ 215.385889][ T8403] exc_invalid_op+0x1a/0x50 [ 215.390368][ T8403] asm_exc_invalid_op+0x1a/0x20 [ 215.395194][ T8403] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 215.400629][ T8403] Code: 9e 9d 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 33 b1 99 05 00 75 13 48 8d 3d 86 b0 9c 05 48 c7 c6 80 27 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 215.420227][ T8403] RSP: 0018:ffffc900079afa60 EFLAGS: 00010246 [ 215.426307][ T8403] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 215.434274][ T8403] RDX: ffffc90005ad9000 RSI: ffffffff8c2d2780 RDI: ffffffff91a09e50 [ 215.442222][ T8403] RBP: ffffc900079afc00 R08: ffffffff919d9ef3 R09: 1ffffffff233b3de [ 215.450190][ T8403] R10: dffffc0000000000 R11: fffffbfff233b3df R12: ffff888079d30b30 [ 215.458143][ T8403] R13: 0000000000000000 R14: 1ffff92000f35f60 R15: 0000000000000000 [ 215.466098][ T8403] ? trace_contention_end+0x3d/0x140 [ 215.471389][ T8403] ? __mutex_lock+0x305/0x15a0 [ 215.476131][ T8403] ? dmx_ts_feed_set+0x330/0x560 [ 215.481049][ T8403] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 215.486660][ T8403] ? __pfx___mutex_lock+0x10/0x10 [ 215.491662][ T8403] ? __mutex_unlock_slowpath+0x731/0x900 [ 215.497295][ T8403] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.503252][ T8403] as102_dvb_dmx_start_feed+0x70/0x290 [ 215.508689][ T8403] dmx_ts_feed_start_filtering+0x129/0x220 [ 215.514477][ T8403] dvb_dmxdev_filter_start+0x434/0x10d0 [ 215.520005][ T8403] dvb_demux_do_ioctl+0x48b/0x540 [ 215.525008][ T8403] dvb_usercopy+0x199/0x2e0 [ 215.529488][ T8403] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 215.535012][ T8403] ? __pfx_dvb_usercopy+0x10/0x10 [ 215.540018][ T8403] ? __fget_files+0x2a/0x420 [ 215.544587][ T8403] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 215.549851][ T8403] dvb_demux_ioctl+0x29/0x40 [ 215.554418][ T8403] __se_sys_ioctl+0xfc/0x170 [ 215.558988][ T8403] do_syscall_64+0x166/0x520 [ 215.563581][ T8403] ? trace_irq_disable+0x3b/0x140 [ 215.568598][ T8403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.574654][ T8403] ? clear_bhb_loop+0x70/0xc0 [ 215.579310][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.585178][ T8403] RIP: 0033:0x7fd60f79f559 [ 215.589594][ T8403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.609178][ T8403] RSP: 002b:00007fd6106ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.617571][ T8403] RAX: ffffffffffffffda RBX: 00007fd60fa25fa0 RCX: 00007fd60f79f559 [ 215.625522][ T8403] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 215.633469][ T8403] RBP: 00007fd60f836b20 R08: 0000000000000000 R09: 0000000000000000 [ 215.641416][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.649366][ T8403] R13: 00007fd60fa26038 R14: 00007fd60fa25fa0 R15: 00007fd60fb4fa48 [ 215.657321][ T8403] [ 215.660575][ T8403] Kernel Offset: disabled [ 215.664893][ T8403] Rebooting in 86400 seconds..