last executing test programs: 12m12.496075622s ago: executing program 2 (id=20): r0 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'syz_tun\x00'}, 0x18) 12m9.982455257s ago: executing program 2 (id=25): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x43, 0x0, 0xffffffff, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0xfffffffd, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) readv(r1, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000004000000000000000000850000007b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000700)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1) 12m5.772765539s ago: executing program 2 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="330000001936450008001b"], 0x28}}, 0x0) 12m4.296882477s ago: executing program 2 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = eventfd(0x7ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) read(r3, &(0x7f0000001000), 0x8) 12m2.158003589s ago: executing program 2 (id=40): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x49}, 0x28) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) mremap(&(0x7f000063d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000063d000/0x2000)=nil) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f000063b000/0x4000)=nil) ptrace$peek(0x1, r1, &(0x7f0000000240)) write$cgroup_pid(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150020000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e6574"], 0x60}}, 0x0) 11m59.425238077s ago: executing program 2 (id=43): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x10001, 0xfffffff2, {{0xd, 0x4, 0x1, 0x36, 0x34, 0x66, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @local, {[@lsrr={0x83, 0x1f, 0xad, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7, 0x7, 0x1000, 0x7, {{0x16, 0x4, 0x3, 0x2e, 0x58, 0x67, 0x7fff, 0x1, 0x29, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0x5, [{@remote, 0xdb}, {@multicast1, 0x6}, {@multicast1, 0xd}]}, @timestamp_addr={0x44, 0x24, 0x67, 0x1, 0x1, [{@loopback, 0x1}, {@loopback, 0x1}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @end]}}}}}) r3 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r3, 0x402, 0x80000038) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) semget$private(0x0, 0x3, 0x203) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) r5 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc8, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0xc8}}, 0x40080) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) read(r6, &(0x7f0000000040)=""/31, 0x1f) pread64(r6, &(0x7f0000000080)=""/26, 0xfdef, 0xff) 11m44.236423188s ago: executing program 32 (id=43): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x10001, 0xfffffff2, {{0xd, 0x4, 0x1, 0x36, 0x34, 0x66, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @local, {[@lsrr={0x83, 0x1f, 0xad, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7, 0x7, 0x1000, 0x7, {{0x16, 0x4, 0x3, 0x2e, 0x58, 0x67, 0x7fff, 0x1, 0x29, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0x5, [{@remote, 0xdb}, {@multicast1, 0x6}, {@multicast1, 0xd}]}, @timestamp_addr={0x44, 0x24, 0x67, 0x1, 0x1, [{@loopback, 0x1}, {@loopback, 0x1}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @end]}}}}}) r3 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r3, 0x402, 0x80000038) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) semget$private(0x0, 0x3, 0x203) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) r5 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc8, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0xc8}}, 0x40080) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) read(r6, &(0x7f0000000040)=""/31, 0x1f) pread64(r6, &(0x7f0000000080)=""/26, 0xfdef, 0xff) 10m16.986378499s ago: executing program 4 (id=176): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) listen(r3, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) close_range(r2, 0xffffffffffffffff, 0x0) 10m14.953420766s ago: executing program 4 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000480)=""/244, 0xf4) 10m14.559372529s ago: executing program 4 (id=179): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0xb, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000004, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x4000000100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 10m13.923059303s ago: executing program 4 (id=181): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x1, {}, 0xfd}, 0x18) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x4769c32eaf764bef}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 10m9.977206244s ago: executing program 4 (id=190): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0xb, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000004, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x4000000100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 10m9.386365163s ago: executing program 4 (id=192): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000005000000dd000000000000009500000000000000c54e7c07816f8680e2284fea630c38e0b80516e234efad8202a94532f8"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1af, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/173, 0xad) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000040)={0x1, 0x4, 0xbbd1}) prlimit64(r0, 0xc, &(0x7f0000000080)={0x8001, 0x5}, &(0x7f00000001c0)) 9m53.932198644s ago: executing program 33 (id=192): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000005000000dd000000000000009500000000000000c54e7c07816f8680e2284fea630c38e0b80516e234efad8202a94532f8"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1af, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/173, 0xad) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000040)={0x1, 0x4, 0xbbd1}) prlimit64(r0, 0xc, &(0x7f0000000080)={0x8001, 0x5}, &(0x7f00000001c0)) 15.777150526s ago: executing program 1 (id=1161): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x264, 0x30, 0x871a15abc695f91d, 0x0, 0x0, {}, [{0x250, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40003, 0x0, 0x1, 0x200000, 0x10}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}, @m_tunnel_key={0xbc, 0x17, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe, 0x92db, 0x3, 0x6, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x84, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x98, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x69, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092b7ee194fceec6f36a9fd75fe5dedc20749c4f127768202979a913d3c140ae84f54b33f261beb283c20852cc5b0027f9a72f3f9fb3819d57c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x264}}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 13.984459012s ago: executing program 1 (id=1166): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x198, 0x30, 0x871a15abc695f91d, 0x0, 0x0, {}, [{0x184, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40003, 0x0, 0x1, 0x200000, 0x10}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}, @m_tunnel_key={0xbc, 0x17, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe, 0x92db, 0x3, 0x6, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x50, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0xcb8c}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x198}}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 12.380609088s ago: executing program 1 (id=1169): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 12.145292707s ago: executing program 5 (id=1170): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(0x0, 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 9.315132052s ago: executing program 0 (id=1171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2147483647 ', 0xb) ioperm(0x4, 0x8, 0x5) semget$private(0x0, 0x7fffffff, 0x200) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) 8.676605406s ago: executing program 0 (id=1175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x28c, 0x30, 0x871a15abc695f91d, 0x0, 0x0, {}, [{0x278, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40003, 0x0, 0x1, 0x200000, 0x10}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}, @m_tunnel_key={0xb0, 0x17, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe, 0x92db, 0x3, 0x6, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4b, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x9c, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x19, 0x6, "b0c788834491db917a9a992c9833c17cff3b436365"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xb4, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0xcb8c}, 0x4}}]}, {0x65, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092b7ee194fceec6f36a9fd75fe5dedc20749c4f127768202979a913d3c140ae84f54b33f261beb283c20852cc5b0027f9a72f3f9fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x28c}}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 8.675203174s ago: executing program 6 (id=1176): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x21c, 0x30, 0x871a15abc695f91d, 0x0, 0x0, {}, [{0x208, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40003, 0x0, 0x1, 0x200000, 0x10}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7}}}}, @m_tunnel_key={0xbc, 0x17, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe, 0x92db, 0x3, 0x6, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x84, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x50, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0xcb8c}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x21c}}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 8.219811551s ago: executing program 5 (id=1177): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000140), 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000580)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 8.157121741s ago: executing program 1 (id=1178): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 8.152566244s ago: executing program 3 (id=1179): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000840)="9d446cacf30d861f8022841279765bbf160c23192047af7e52f23ec6ce9c328c8c620a5a2bb9dfac65af2a42744bfdda72a1a6a284269f9b143078378e0a730495ab533e772a60654a05c65bfa3539aaf7084aa291e19bfb46f4f25e64c8c95aae6c", 0x62}, {&(0x7f00000008c0)="dafdaad3e998d129255b2c7c8887972ecff027d859e46f3b5995c6fb30d1e01fa42f78b14bfe4fcdd68d23d09b0b82e6fdb3308e72bb2bf9a683e968638d20feb45bf8c738fd82dd391cf34f647951322f640487c9b08cbf8394284eb3f0e5410f6f873e5919183f136bb367cec137e5e296b8adac669848a2104b489853573f14ab3e670810a4e6b4eae0324b1a60bc8b47a43695820d50d675b637a65cf5a932ac73c0adc0cfdfc93caca31d9e1a37ec5a3aff28e8b6f52fbb37f7434d42dabe4c0231e9d5513d2132e27bb35ce9", 0xcf}, {&(0x7f00000009c0)="749b62c21d2c9939af23603449858441da920e3ed83130f7dd4b195d9ab78f00a43a09f9cf1ecaf7fc658c766759dd0903bb9cca30df0df5809f61752df1b258675e9d334747dbe9acdd19ba1e40750d9bce49c62591d6e33ff6798f6fd16b59852bb76f02d5d158aedf175e211c9bae5a10c08680b584e0f750b65733c8e99c512c897d5a4957105f9e04dd1d888cf71fb2972443ae05bc07b4f2a10007524538dc99", 0xa3}, {&(0x7f0000000a80)="fabb1af2d0feec678ff84c2efcc7ff0a77192f46df86b35ba600ab4df44c381d57acf61f280c2ea254e51e05537e11ecd8cf54eea3dcdc5827242864c508637b416e323963c6444452d27beb09ffd26c9d5fb76fe80f6601328b0024ac67cc8b638a3abdeb3187785b6e694a26d7", 0x6e}, {&(0x7f0000000b00)="2d4cc42204293cac19602057c76d1148929422b8c551a83daf80c6be1b72467a8a0e0889a596ae095b5cf5f96298cc119982e2aabca1e6d15fbd1789dfa89345b65b4d84bb3f44df1022cc4680543005da79ea4ab8069932d0a38bf21269380f7c50b629baf002b896f54f031eeb497fde8e63531f270dc694703bc55ba67fa5838ce8259c0cec78b4cf7996075f9d43cbb73885d3c0a436cbf684dbe9f456fc1e8bb6fd52e5e91bbf87beea28c0a58d618193d3ff8467b79fc7e44a762971", 0xbf}, {&(0x7f0000000bc0)="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", 0xfc}, {&(0x7f0000000cc0)="b238eb06c86e0409cb5161a4c081829aea0038b502cc54260a040cf88e435188b50fa9df8f7031008bfca9fd4c423202e7a6ffe7033b1f26387cef51acc08fad2f87d6769bf57b59bde7556d6ea52d6d63e59206ee42f8de05f97ede2000a98d6408cffd70d48012839f1644a2e8a5802e9a7805164e107e62b8a981e1af02b9216a62bc", 0x84}, {&(0x7f0000000d80)="fc3039ad97d7044539b10066c70bf36af39022f7dc69cb6f19b9fcc0ab09eddce6dafaf87830fa17bc05de58998dac451a9dc9c8f708acbf3e146a81c3401e2869b14cf4b2000f92c0e328ac7b67e23922447ced17a0e838c59ee461e288bc931ce0c99994ed9e10fa6e0de9ce8ed7fda047e8c05d16cf42ff61275e052126178dc5d36630b45d2314e8055712138e02754491ad082465040e820f9d45a27a8024a0a10c6b95d20f09c03ae36a83c63c288467e69d544961beb8e5f8e4d11ffaa6e523a4b0f73a21114103875bdd5395433d085e7fdfa8f129c8fc5fd164f59a66", 0xe1}, {&(0x7f0000000e80)="bc73a001c6954391ede93884e294007d5ebb8add7a802935242cf15990a6b45bf1f75f99aa09e4aab1387a22d3056689fb194d4802be8a4c54dacbf310f25c5620b6a141d40cda146e07f30db6f4bb229fae7eef4d6ec5b055d79024f4c34b3fda9a095e41906a3601193b2ab5af7b97956cff04a7f622bc4377f12834421e22f9596dde128120b2a2a60e76364debe84b191481368db7f2596528ae074dccabf29246da23dc8eb973d22ee2691edf076428f25da204c28669ec78bcf583b49e508a8eb765b3255379c89c8f033ce05ea5a11656d23a882f8896", 0xda}], 0x9, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000840000000500000030000000ff0000002000000000000000840000000800000020010000000000000000000000000001180000000000000007000000640101010000000018000000000000008400000007000000ac1414aa00000000180000000000000084000000000000000900ff7f00020300180000080000000084000000000000f10700b50007000b00"], 0x98, 0x4800}, 0x800) 8.018480039s ago: executing program 0 (id=1180): syz_create_resource$binfmt(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003900010700000000000000001000000021c3c0aebcdc2fffff79a0fbc155dcfef7c26ee4eb3344997d2d1459527a57b74e01b7f43a9399c46195ea6e22a772ff8c89ad969cb619015aacaee188f2fa250fe943dba0f70e239ab52f914521716fe2d1e3df75f0e582f7b9ec"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe"], 0xfffffffffffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x16, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="851000000400000095000000000000001800a877000000800000000000000000950000000000000085100000fcffffff950000000000eeff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 7.474762981s ago: executing program 6 (id=1181): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$igmp(0x2, 0x3, 0x2) openat(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = semget$private(0x0, 0x1, 0x122) semctl$SETVAL(r0, 0x4, 0x10, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 7.438432439s ago: executing program 5 (id=1182): syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0xc0000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000180)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgctl$IPC_INFO(0x0, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8910, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2f07a46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681000000140000800d000000c606f93f6b8199f926000000000000"], 0xe0}], 0x1}, 0x40040) fchdir(r2) r4 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000280)=""/202) mlockall(0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x5d, 0x25, 0xfd, 0x8, 0x1a0a, 0x101, 0x5aed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40, "", [{{0x9, 0x4, 0xb0, 0x8, 0x0, 0x7, 0xcc, 0xa5, 0x2}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) io_setup(0x7, &(0x7f00000005c0)) acct(&(0x7f0000000080)='./file1\x00') mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 7.413712254s ago: executing program 3 (id=1183): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(0x0, 0x42000, 0x18) ftruncate(r0, 0x2007ffb) bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271d, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bind$802154_raw(r0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) 7.106293659s ago: executing program 1 (id=1184): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xff0c, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48}) 5.616290688s ago: executing program 6 (id=1185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2147483647 ', 0xb) ioperm(0x4, 0x8, 0x5) semget$private(0x0, 0x7fffffff, 0x200) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) 5.439110228s ago: executing program 3 (id=1186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) 3.848341362s ago: executing program 1 (id=1187): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f088a823", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.179914949s ago: executing program 0 (id=1188): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 2.894557237s ago: executing program 5 (id=1189): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030", 0x5}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120000000600000004000000043c52a27da689d3c51ee6bcce74889d84749b18dfafb2de875a0f1840c5547c3dff", @ANYBLOB="82375f84ae3ee254e87233c3b356b172fb41edadae56a5a407529e34a5d1f1b555bdc76fcab9a9f6e634240de96bc962f1c8bda7b3ff6ff7af1f900e0bd7e0c80c4181db3505a20dc20c3720ca3293bae0252f404d232fcb9791db5e405fb387764a4d05d10d67a4927304e36a4490435e0d59b86eca9a773f5f4466b69ee9dcc7f8f6136ebf8f5a31514a61e729ebdb9de502b4e0944719a9e5eabe74480505c4af285dd3efff2f4eca0888b2460043c2998bf36dc91e034ae6e7e52c5a4fcf184c3aeaad2e9c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r5, &(0x7f0000000a00)}, 0x20) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bind$802154_raw(r0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) 1.143115623s ago: executing program 3 (id=1197): syz_emit_ethernet(0x4a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18f) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.origin\x00') syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x102c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 905.56133ms ago: executing program 5 (id=1198): syz_create_resource$binfmt(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003900010700000000000000001000000021c3c0aebcdc2fffff79a0fbc155dcfef7c26ee4eb3344997d2d1459527a57b74e01b7f43a9399c46195ea6e22a772ff8c89ad969cb619015aacaee188f2fa250fe943dba0f70e239ab52f914521716fe2d1e3df75f0e582f7b9ec"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe"], 0xfffffffffffffffe) connect$unix(r2, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x16, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="851000000400000095000000000000001800a877000000800000000000000000950000000000000085100000fcffffff950000000000eeff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 0s ago: executing program 6 (id=1199): syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xc0000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000180)={'veth0_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgctl$IPC_INFO(0x0, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8910, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2f07a46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681000000140000800d000000c606f93f6b8199f926000000000000"], 0xe0}], 0x1}, 0x40040) fchdir(r2) r4 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000280)=""/202) mlockall(0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x5d, 0x25, 0xfd, 0x8, 0x1a0a, 0x101, 0x5aed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40, "", [{{0x9, 0x4, 0xb0, 0x8, 0x0, 0x7, 0xcc, 0xa5, 0x2}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) io_setup(0x7, &(0x7f00000005c0)) acct(&(0x7f0000000080)='./file1\x00') mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) kernel console output (not intermixed with test programs): 1055.312386][ T9968] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1055.312411][ T9968] dvb_demux_ioctl+0x29/0x40 [ 1055.312436][ T9968] __se_sys_ioctl+0xff/0x170 [ 1055.312470][ T9968] do_syscall_64+0x166/0x520 [ 1055.312499][ T9968] ? trace_irq_disable+0x3b/0x140 [ 1055.312527][ T9968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.312551][ T9968] ? clear_bhb_loop+0x70/0xc0 [ 1055.312579][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.312602][ T9968] RIP: 0033:0x7fc0dca2e159 [ 1055.312625][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.312645][ T9968] RSP: 002b:00007fc0dac86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.312670][ T9968] RAX: ffffffffffffffda RBX: 00007fc0dccb5fa0 RCX: 00007fc0dca2e159 [ 1055.312688][ T9968] RDX: 0000200000000040 RSI: 0000000040026f34 RDI: 0000000000000003 [ 1055.312704][ T9968] RBP: 00007fc0dac86090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.312720][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.312734][ T9968] R13: 00007fc0dccb6038 R14: 00007fc0dccb5fa0 R15: 00007ffd32bb3c38 [ 1055.312771][ T9968] [ 1055.606997][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 1055.607018][ T37] audit: type=1326 audit(1788784207.691:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.607836][ T37] audit: type=1326 audit(1788784207.691:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.607891][ T37] audit: type=1326 audit(1788784207.691:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.608183][ T37] audit: type=1326 audit(1788784207.691:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.608475][ T37] audit: type=1326 audit(1788784207.691:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.608773][ T37] audit: type=1326 audit(1788784207.691:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.609430][ T37] audit: type=1326 audit(1788784207.691:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.609484][ T37] audit: type=1326 audit(1788784207.691:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.609743][ T37] audit: type=1326 audit(1788784207.691:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1055.610036][ T37] audit: type=1326 audit(1788784207.691:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.6.923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1056.019063][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.064540][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.141401][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.530611][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.565471][ T9984] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1056.565505][ T9984] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1056.570148][ T9984] overlayfs: conflicting lowerdir path [ 1056.572178][ T9985] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1057.161506][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.569657][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.935747][T10000] netlink: 160 bytes leftover after parsing attributes in process `syz.1.932'. [ 1058.086175][T10002] netlink: 32 bytes leftover after parsing attributes in process `syz.5.933'. [ 1058.190898][ T9879] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1058.201921][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.365636][ T9879] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1058.385780][ T9879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.385900][ T9879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1058.386033][ T9879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.598644][ T9879] usb 2-1: config 0 descriptor?? [ 1059.226807][ T9879] hid-picolcd 0003:04D8:F002.0017: No report with id 0xf3 found [ 1059.226967][ T9879] hid-picolcd 0003:04D8:F002.0017: No report with id 0xf4 found [ 1059.254033][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.567320][T10000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.615887][T10000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.009434][T10000] Bluetooth: MGMT ver 1.23 [ 1060.010868][ T5774] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1060.136167][T10000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.932'. [ 1060.211148][ T5774] usb 4-1: Using ep0 maxpacket: 16 [ 1060.218140][ T5774] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1060.259939][ T9] usb 2-1: USB disconnect, device number 41 [ 1060.284222][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.323322][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.340764][ T5774] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.340826][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.375545][ T5774] usb 4-1: config 0 descriptor?? [ 1060.404062][ T5774] pxrc 4-1:0.0: Could not find endpoint [ 1060.413294][ T5774] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1060.699308][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.707399][ T7766] usb 4-1: USB disconnect, device number 46 [ 1060.742889][T10035] No such timeout policy "s" [ 1060.751640][T10035] netlink: Failed to associated timeout policy 's' [ 1060.807730][ T5636] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1060.814194][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1060.814238][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1060.814254][ T5636] Workqueue: hci5 hci_rx_work [ 1060.814296][ T5636] Call Trace: [ 1060.814306][ T5636] [ 1060.814318][ T5636] dump_stack_lvl+0xe8/0x150 [ 1060.814357][ T5636] sysfs_create_dir_ns+0x271/0x2a0 [ 1060.814387][ T5636] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1060.814420][ T5636] ? rt_spin_unlock+0x165/0x200 [ 1060.814446][ T5636] kobject_add_internal+0x62c/0xce0 [ 1060.814491][ T5636] kobject_add+0x163/0x240 [ 1060.814522][ T5636] ? rt_spin_unlock+0x159/0x200 [ 1060.814548][ T5636] ? __pfx_kobject_add+0x10/0x10 [ 1060.814588][ T5636] ? get_device_parent+0x370/0x3a0 [ 1060.814623][ T5636] device_add+0x3fa/0xb80 [ 1060.814658][ T5636] hci_conn_add_sysfs+0xd5/0x210 [ 1060.814698][ T5636] le_conn_complete_evt+0xfe3/0x16d0 [ 1060.814736][ T5636] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1060.814769][ T5636] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1060.814799][ T5636] ? rt_mutex_slowunlock+0x219/0x460 [ 1060.814891][ T5636] ? skb_pull_data+0xf0/0x200 [ 1060.814989][ T5636] hci_le_conn_complete_evt+0x187/0x470 [ 1060.815088][ T5636] hci_event_packet+0x67a/0xf10 [ 1060.815187][ T5636] ? reacquire_held_locks+0x117/0x1a0 [ 1060.815305][ T5636] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1060.815390][ T5636] ? __pfx_hci_event_packet+0x10/0x10 [ 1060.815491][ T5636] ? rt_spin_unlock+0x159/0x200 [ 1060.815570][ T5636] ? hci_send_to_monitor+0xe2/0x590 [ 1060.815667][ T5636] hci_rx_work+0x3ee/0x1020 [ 1060.815786][ T5636] ? process_scheduled_works+0x97a/0x1630 [ 1060.815861][ T5636] process_scheduled_works+0xc3d/0x1630 [ 1060.816036][ T5636] ? __pfx_process_scheduled_works+0x10/0x10 [ 1060.816136][ T5636] ? assign_work+0x3cf/0x5d0 [ 1060.816227][ T5636] worker_thread+0xa47/0xfb0 [ 1060.816277][ T5636] ? __kthread_parkme+0x71/0x1f0 [ 1060.816322][ T5636] kthread+0x38b/0x470 [ 1060.816345][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 1060.816375][ T5636] ? __pfx_kthread+0x10/0x10 [ 1060.816400][ T5636] ret_from_fork+0x514/0xb70 [ 1060.816427][ T5636] ? __pfx_ret_from_fork+0x10/0x10 [ 1060.816449][ T5636] ? __switch_to+0xc89/0x1420 [ 1060.816506][ T5636] ? __pfx_kthread+0x10/0x10 [ 1060.816588][ T5636] ret_from_fork_asm+0x1a/0x30 [ 1060.816702][ T5636] [ 1060.816860][ T5636] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1060.816977][ T5636] Bluetooth: hci5: failed to register connection device [ 1061.321642][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.671001][ T9879] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1061.829546][ T9879] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1061.846555][ T9879] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1061.846662][ T9879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.846686][ T9879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1061.846909][ T9879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.914834][ T9879] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1061.914923][ T9879] usb 2-1: Product: syz [ 1061.914942][ T9879] usb 2-1: Manufacturer: syz [ 1061.933935][T10049] CIFS: Attempting to mount //::1/share [ 1062.007544][ T9879] cdc_wdm 2-1:1.0: skipping garbage [ 1062.007921][ T9879] cdc_wdm 2-1:1.0: skipping garbage [ 1062.038421][ T9879] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1062.038513][ T9879] cdc_wdm 2-1:1.0: Unknown control protocol [ 1062.361589][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.433512][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.445761][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.402293][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.598220][T10049] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1063.731744][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.441428][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.684460][ T7766] usb 2-1: USB disconnect, device number 42 [ 1065.000115][T10068] FAULT_INJECTION: forcing a failure. [ 1065.000115][T10068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.024367][T10068] CPU: 0 UID: 0 PID: 10068 Comm: syz.0.954 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1065.024403][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1065.024417][T10068] Call Trace: [ 1065.024427][T10068] [ 1065.024439][T10068] dump_stack_lvl+0xe8/0x150 [ 1065.024480][T10068] should_fail_ex+0x46b/0x600 [ 1065.024515][T10068] _copy_to_user+0x31/0xb0 [ 1065.024550][T10068] simple_read_from_buffer+0xe1/0x170 [ 1065.024576][T10068] proc_fail_nth_read+0x1be/0x230 [ 1065.024604][T10068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1065.024630][T10068] ? rw_verify_area+0x250/0x4d0 [ 1065.024653][T10068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1065.024675][T10068] vfs_read+0x219/0xa90 [ 1065.024703][T10068] ? __pfx_vfs_read+0x10/0x10 [ 1065.024726][T10068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1065.024752][T10068] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1065.024775][T10068] ? mutex_lock_nested+0x152/0x1d0 [ 1065.024804][T10068] ? fdget_pos+0x252/0x320 [ 1065.024831][T10068] ksys_read+0x156/0x270 [ 1065.024854][T10068] ? __pfx_ksys_read+0x10/0x10 [ 1065.024885][T10068] do_syscall_64+0x166/0x520 [ 1065.024909][T10068] ? trace_irq_disable+0x3b/0x140 [ 1065.024932][T10068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.024951][T10068] ? clear_bhb_loop+0x70/0xc0 [ 1065.024974][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.024993][T10068] RIP: 0033:0x7fc8c867e98e [ 1065.025011][T10068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1065.025027][T10068] RSP: 002b:00007fc8c6915fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1065.025047][T10068] RAX: ffffffffffffffda RBX: 00007fc8c69166c0 RCX: 00007fc8c867e98e [ 1065.025069][T10068] RDX: 000000000000000f RSI: 00007fc8c69160a0 RDI: 0000000000000008 [ 1065.025080][T10068] RBP: 00007fc8c6916090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.025093][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.025104][T10068] R13: 00007fc8c8946038 R14: 00007fc8c8945fa0 R15: 00007ffe54dd16d8 [ 1065.025134][T10068] [ 1065.488516][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.583608][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'. [ 1066.126257][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.516813][T10081] [U] ^E [ 1066.521442][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.775947][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.561660][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.847141][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.847651][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.280406][T10108] CIFS: Attempting to mount //::1/share [ 1068.605224][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.902830][T10108] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1068.902881][T10108] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1069.638899][ T7766] kernel read not supported for file /vcsa (pid: 7766 comm: kworker/0:7) [ 1069.654745][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.080855][T10122] FAULT_INJECTION: forcing a failure. [ 1070.080855][T10122] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.080892][T10122] CPU: 1 UID: 0 PID: 10122 Comm: syz.5.968 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1070.080911][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1070.080922][T10122] Call Trace: [ 1070.080928][T10122] [ 1070.080935][T10122] dump_stack_lvl+0xe8/0x150 [ 1070.080966][T10122] should_fail_ex+0x46b/0x600 [ 1070.080990][T10122] should_failslab+0xa8/0x100 [ 1070.081026][T10122] __kmalloc_noprof+0xfb/0x790 [ 1070.081048][T10122] ? tomoyo_encode+0x2ad/0x570 [ 1070.081069][T10122] ? tomoyo_encode+0x2ad/0x570 [ 1070.081096][T10122] tomoyo_encode+0x2ad/0x570 [ 1070.081123][T10122] tomoyo_realpath_from_path+0x5fa/0x640 [ 1070.081153][T10122] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1070.081172][T10122] tomoyo_path_number_perm+0x246/0x5f0 [ 1070.081193][T10122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1070.081210][T10122] ? __lock_acquire+0x747/0x2de0 [ 1070.081244][T10122] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1070.081265][T10122] ? hook_file_ioctl+0x1f5/0x610 [ 1070.081305][T10122] ? __fget_files+0x2a/0x420 [ 1070.081326][T10122] ? __fget_files+0x2a/0x420 [ 1070.081341][T10122] ? __fget_files+0x3a8/0x420 [ 1070.081357][T10122] ? __fget_files+0x2a/0x420 [ 1070.081377][T10122] security_file_ioctl+0xc3/0x2a0 [ 1070.081398][T10122] __se_sys_ioctl+0x47/0x170 [ 1070.081423][T10122] do_syscall_64+0x166/0x520 [ 1070.081443][T10122] ? trace_irq_disable+0x3b/0x140 [ 1070.081464][T10122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.081481][T10122] ? clear_bhb_loop+0x70/0xc0 [ 1070.081502][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.081521][T10122] RIP: 0033:0x7f23ec6ce159 [ 1070.081536][T10122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.081550][T10122] RSP: 002b:00007f23ea926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1070.081568][T10122] RAX: ffffffffffffffda RBX: 00007f23ec955fa0 RCX: 00007f23ec6ce159 [ 1070.081581][T10122] RDX: 0000200000000040 RSI: 0000000000008933 RDI: 0000000000000005 [ 1070.081592][T10122] RBP: 00007f23ea926090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.081603][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.081613][T10122] R13: 00007f23ec956038 R14: 00007f23ec955fa0 R15: 00007ffc48e18438 [ 1070.081639][T10122] [ 1070.081654][T10122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1071.331165][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1071.378101][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.473886][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.581122][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1071.704967][ T9] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 1071.705050][ T9] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.705073][ T9] usb 2-1: config 171 has no interface number 0 [ 1071.705241][ T9] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1071.705326][ T9] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1071.705385][ T9] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 1299, setting to 1024 [ 1071.705474][ T9] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1071.711782][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.711876][ T9] usb 2-1: Product: syz [ 1071.711919][ T9] usb 2-1: Manufacturer: syz [ 1071.711962][ T9] usb 2-1: SerialNumber: syz [ 1071.867998][T10119] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1072.198400][ T9] ath6kl: Failed to submit usb control message: -71 [ 1072.198518][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1072.198538][ T9] ath6kl: Unable to send get target info: -71 [ 1072.328493][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1072.348959][ T9] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1072.502835][ T9] usb 2-1: USB disconnect, device number 43 [ 1072.542157][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.212873][T10135] FAULT_INJECTION: forcing a failure. [ 1073.212873][T10135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.212988][T10135] CPU: 0 UID: 0 PID: 10135 Comm: syz.6.973 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1073.213087][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1073.213127][T10135] Call Trace: [ 1073.213157][T10135] [ 1073.213166][T10135] dump_stack_lvl+0xe8/0x150 [ 1073.213281][T10135] should_fail_ex+0x46b/0x600 [ 1073.213368][T10135] _copy_from_iter+0x1d3/0x1660 [ 1073.213455][T10135] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1073.213542][T10135] ? __pfx__copy_from_iter+0x10/0x10 [ 1073.213610][T10135] ? __alloc_skb+0x27a/0x7a0 [ 1073.213683][T10135] ? __alloc_skb+0x27a/0x7a0 [ 1073.213782][T10135] ? netlink_sendmsg+0x650/0xb40 [ 1073.213843][T10135] ? skb_put+0x112/0x210 [ 1073.213906][T10135] netlink_sendmsg+0x6c0/0xb40 [ 1073.213990][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.214061][T10135] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1073.214150][T10135] ? __kernel_text_address+0xd/0x30 [ 1073.214207][T10135] ? unwind_get_return_address+0x4d/0x90 [ 1073.214283][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.214343][T10135] sock_sendmsg_nosec+0x13a/0x180 [ 1073.214422][T10135] ____sys_sendmsg+0x565/0x870 [ 1073.214478][T10135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1073.214593][T10135] ? import_iovec+0x73/0xa0 [ 1073.214684][T10135] ___sys_sendmsg+0x2a5/0x360 [ 1073.214777][T10135] ? __lock_acquire+0x747/0x2de0 [ 1073.214861][T10135] ? __pfx____sys_sendmsg+0x10/0x10 [ 1073.215041][T10135] ? __fget_files+0x2a/0x420 [ 1073.215090][T10135] ? __fget_files+0x3a8/0x420 [ 1073.215176][T10135] __x64_sys_sendmsg+0x1b7/0x290 [ 1073.215266][T10135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1073.215413][T10135] do_syscall_64+0x166/0x520 [ 1073.215473][T10135] ? trace_irq_disable+0x3b/0x140 [ 1073.215547][T10135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.215611][T10135] ? clear_bhb_loop+0x70/0xc0 [ 1073.215689][T10135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.215754][T10135] RIP: 0033:0x7f108399e159 [ 1073.215807][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.215851][T10135] RSP: 002b:00007f1081bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1073.215929][T10135] RAX: ffffffffffffffda RBX: 00007f1083c25fa0 RCX: 00007f108399e159 [ 1073.215954][T10135] RDX: 0000000004000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 1073.215984][T10135] RBP: 00007f1081bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.216031][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.216072][T10135] R13: 00007f1083c26038 R14: 00007f1083c25fa0 R15: 00007ffc74200758 [ 1073.216160][T10135] [ 1073.347222][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 1073.561652][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.174172][T10142] CIFS: Attempting to mount //::1/share [ 1074.441829][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.601740][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.990854][T10142] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1075.210875][ T9879] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1075.412918][ T9879] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1075.423643][ T9879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.423693][ T9879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.429512][ T9879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.429535][ T9879] usb 2-1: Product: syz [ 1075.429547][ T9879] usb 2-1: Manufacturer: syz [ 1075.429558][ T9879] usb 2-1: SerialNumber: syz [ 1075.641274][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.622422][T10151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.013789][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.231677][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.482718][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.742765][T10155] FAULT_INJECTION: forcing a failure. [ 1077.742765][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.756672][T10155] CPU: 1 UID: 0 PID: 10155 Comm: syz.3.980 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1077.756696][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.756712][T10155] Call Trace: [ 1077.756721][T10155] [ 1077.756728][T10155] dump_stack_lvl+0xe8/0x150 [ 1077.756759][T10155] should_fail_ex+0x46b/0x600 [ 1077.756787][T10155] _copy_from_user+0x2d/0xb0 [ 1077.756810][T10155] get_timespec64+0x96/0x1b0 [ 1077.756835][T10155] ? __pfx_get_timespec64+0x10/0x10 [ 1077.756860][T10155] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1077.756892][T10155] __x64_sys_recvmmsg+0x14b/0x250 [ 1077.756924][T10155] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1077.756959][T10155] do_syscall_64+0x166/0x520 [ 1077.756980][T10155] ? trace_irq_disable+0x3b/0x140 [ 1077.757002][T10155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.757019][T10155] ? clear_bhb_loop+0x70/0xc0 [ 1077.757039][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.757056][T10155] RIP: 0033:0x7fa41abce159 [ 1077.757072][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.757087][T10155] RSP: 002b:00007fa418e26028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1077.757105][T10155] RAX: ffffffffffffffda RBX: 00007fa41ae55fa0 RCX: 00007fa41abce159 [ 1077.757117][T10155] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 1077.757128][T10155] RBP: 00007fa418e26090 R08: 0000200000000480 R09: 0000000000000000 [ 1077.757139][T10155] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 1077.757150][T10155] R13: 00007fa41ae56038 R14: 00007fa41ae55fa0 R15: 00007ffc57b93748 [ 1077.757175][T10155] [ 1077.931049][ T9879] cdc_ncm 2-1:1.0: bind() failure [ 1078.015844][ T9879] usbtest 2-1:1.0: Linux gadget zero [ 1078.022330][ T9879] usbtest 2-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1078.050172][ T9879] usbtest 2-1:1.1: couldn't get endpoints, -22 [ 1078.057086][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.067274][ T9879] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 1078.076888][ T9879] usbhid 2-1:1.1: couldn't find an input interrupt endpoint [ 1078.090012][ T9879] usb 2-1: USB disconnect, device number 44 [ 1078.636151][T10160] comedi comedi1: Minor 4 could not be opened [ 1078.660281][T10160] UDC core: g1: couldn't find an available UDC or it's busy [ 1078.940109][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.123226][T10160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.282684][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.362004][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.521851][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.532175][ T5664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.542258][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.550150][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.593464][ T1607] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1080.790851][ T1607] usb 4-1: Using ep0 maxpacket: 16 [ 1080.857439][ T1607] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1080.868676][ T1607] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.891344][ T1607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.899516][ T1607] usb 4-1: Product: syz [ 1080.899538][ T1607] usb 4-1: Manufacturer: syz [ 1080.899556][ T1607] usb 4-1: SerialNumber: syz [ 1080.940279][ T1607] usb 4-1: config 0 descriptor?? [ 1080.957842][ T1607] mcba_usb 4-1:0.0: Can't find endpoints [ 1081.183813][T10178] netlink: 160 bytes leftover after parsing attributes in process `syz.6.979'. [ 1081.220228][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.248601][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.271003][T10178] netlink: 32 bytes leftover after parsing attributes in process `syz.6.979'. [ 1081.322564][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.323159][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.378663][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.985'. [ 1081.378773][T10171] netlink: 64 bytes leftover after parsing attributes in process `syz.3.985'. [ 1081.378919][T10171] netlink: 64 bytes leftover after parsing attributes in process `syz.3.985'. [ 1081.544006][ T996] usb 4-1: USB disconnect, device number 47 [ 1081.669380][T10185] netlink: 36 bytes leftover after parsing attributes in process `syz.6.979'. [ 1081.688113][T10184] CIFS: Attempting to mount //::1/share [ 1082.427818][T10184] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1082.427892][T10184] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1082.448433][ T996] net_ratelimit: 1 callbacks suppressed [ 1082.448498][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.600925][ T1607] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1082.711404][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.725456][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.760995][ T1607] usb 2-1: Using ep0 maxpacket: 32 [ 1082.775733][ T1607] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1082.788031][ T1607] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1082.789706][ T1607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1082.789739][ T1607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1082.789763][ T1607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1082.789790][ T1607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1082.862839][ T1607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.871059][ T1607] usb 2-1: Product: syz [ 1082.871083][ T1607] usb 2-1: Manufacturer: syz [ 1082.871100][ T1607] usb 2-1: SerialNumber: syz [ 1082.909670][ T1607] usb 2-1: config 0 descriptor?? [ 1083.172965][ T1607] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1083.398128][ T1607] input input52: Device does not respond to id packet M [ 1083.483909][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.648734][T10208] capability: warning: `syz.5.996' uses 32-bit capabilities (legacy support in use) [ 1083.697395][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.946435][T10215] bond1: option resend_igmp: invalid value (2878) [ 1083.946475][T10215] bond1: option resend_igmp: allowed values 0 - 255 [ 1084.206484][T10215] bond1 (unregistering): Released all slaves [ 1084.242754][ T9611] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1084.419083][ T9611] usb 6-1: Using ep0 maxpacket: 32 [ 1084.420248][ T9611] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1084.426505][ T9611] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.426582][ T9611] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.426621][ T9611] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.426675][ T9611] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1084.426706][ T9611] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1084.426759][ T9611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.507797][ T9611] usb 6-1: config 0 descriptor?? [ 1084.551377][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.566065][ T1607] iforce 2-1:0.0: usb_submit_urb failed: -110 [ 1084.571030][ T1607] input input52: Device does not respond to id packet P [ 1084.579411][ T1607] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1084.579463][ T1607] input input52: Device does not respond to id packet B [ 1084.580012][ T1607] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1084.580061][ T1607] input input52: Device does not respond to id packet N [ 1084.580559][ T1607] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1084.619325][ T1607] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1084.627464][ T1607] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1084.675283][ T1607] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1084.775305][ T37] kauditd_printk_skb: 351 callbacks suppressed [ 1084.785335][ T37] audit: type=1326 audit(1788784236.861:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.810972][ T37] audit: type=1326 audit(1788784236.861:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.811037][ T37] audit: type=1326 audit(1788784236.861:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.811098][ T37] audit: type=1326 audit(1788784236.861:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.811148][ T37] audit: type=1326 audit(1788784236.861:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.811194][ T37] audit: type=1326 audit(1788784236.861:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.811241][ T37] audit: type=1326 audit(1788784236.861:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.811285][ T37] audit: type=1326 audit(1788784236.861:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.811330][ T37] audit: type=1326 audit(1788784236.871:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1084.811376][ T37] audit: type=1326 audit(1788784236.871:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10206 comm="syz.5.996" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23ec6cddeb code=0x7ffc0000 [ 1085.146990][ T1607] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 1085.364429][ T1607] usb 2-1: USB disconnect, device number 45 [ 1085.561198][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.581897][ T9611] hid_parser_main: 470 callbacks suppressed [ 1085.587035][ T9611] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 1085.587175][ T9611] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 1085.587254][ T9611] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 1085.587328][ T9611] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 1085.590475][ T9611] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 1085.848396][ T9611] hid-thrustmaster 0003:044F:B65D.0018: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 1085.852267][ T9611] hid-thrustmaster 0003:044F:B65D.0018: Wrong number of endpoints? [ 1085.852609][ C1] hid-thrustmaster 0003:044F:B65D.0018: URB to get model id failed with error -71 [ 1085.907231][ T9611] usb 6-1: USB disconnect, device number 4 [ 1086.436286][ T1607] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1086.601521][T10211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.624759][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.631764][ T1607] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1086.645859][ T1607] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1086.645887][ T1607] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.645906][ T1607] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1086.645957][ T1607] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.764149][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.799417][ T1607] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1086.807666][ T1607] usb 4-1: Product: syz [ 1086.807692][ T1607] usb 4-1: Manufacturer: syz [ 1086.852931][T10230] fido_id[10230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1086.924387][ T1607] cdc_wdm 4-1:1.0: skipping garbage [ 1086.958732][ T1607] cdc_wdm 4-1:1.0: skipping garbage [ 1086.986194][ T1607] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1086.992286][ T1607] cdc_wdm 4-1:1.0: Unknown control protocol [ 1087.324525][T10228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.326313][T10228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.530899][ T996] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1087.641280][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.724899][ T996] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1087.758477][ T996] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.758521][ T996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1087.758556][ T996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.074146][ T996] usb 2-1: config 0 descriptor?? [ 1088.681464][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.821832][ T996] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf3 found [ 1088.821986][ T996] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf4 found [ 1089.032968][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.044415][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.437372][T10239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1002'. [ 1089.581192][ T9611] usb 4-1: USB disconnect, device number 48 [ 1089.649031][T10211] usb 2-1: USB disconnect, device number 46 [ 1089.729812][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.825065][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.053499][T10254] validate_nla: 56 callbacks suppressed [ 1090.059291][T10254] netlink: 'syz.3.1007': attribute type 7 has an invalid length. [ 1090.295815][T10258] FAULT_INJECTION: forcing a failure. [ 1090.295815][T10258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.302918][T10258] CPU: 0 UID: 0 PID: 10258 Comm: syz.0.1008 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1090.302943][T10258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1090.302953][T10258] Call Trace: [ 1090.302960][T10258] [ 1090.302967][T10258] dump_stack_lvl+0xe8/0x150 [ 1090.302999][T10258] should_fail_ex+0x46b/0x600 [ 1090.303023][T10258] _copy_from_iter+0x3b0/0x1660 [ 1090.303044][T10258] ? __lock_acquire+0x747/0x2de0 [ 1090.303069][T10258] ? lock_acquire+0x115/0x350 [ 1090.303089][T10258] ? __pfx__copy_from_iter+0x10/0x10 [ 1090.303110][T10258] ? smack_socket_sendmsg+0x1f8/0x5a0 [ 1090.303130][T10258] ? lock_acquire+0x115/0x350 [ 1090.303157][T10258] bcm_sendmsg+0x157/0x7a0 [ 1090.303183][T10258] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1090.303205][T10258] ? __lock_acquire+0x747/0x2de0 [ 1090.303228][T10258] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1090.303254][T10258] ? __kernel_text_address+0xd/0x30 [ 1090.303272][T10258] ? unwind_get_return_address+0x4d/0x90 [ 1090.303295][T10258] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1090.303317][T10258] sock_sendmsg_nosec+0x13a/0x180 [ 1090.303348][T10258] ____sys_sendmsg+0x565/0x870 [ 1090.303380][T10258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1090.303411][T10258] ? import_iovec+0x73/0xa0 [ 1090.303435][T10258] ___sys_sendmsg+0x2a5/0x360 [ 1090.303459][T10258] ? __lock_acquire+0x747/0x2de0 [ 1090.303483][T10258] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.303534][T10258] ? __fget_files+0x2a/0x420 [ 1090.303550][T10258] ? __fget_files+0x3a8/0x420 [ 1090.303574][T10258] __x64_sys_sendmsg+0x1b7/0x290 [ 1090.303601][T10258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1090.303643][T10258] do_syscall_64+0x166/0x520 [ 1090.303663][T10258] ? trace_irq_disable+0x3b/0x140 [ 1090.303684][T10258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.303701][T10258] ? clear_bhb_loop+0x70/0xc0 [ 1090.303721][T10258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.303738][T10258] RIP: 0033:0x7fc8c86be159 [ 1090.303753][T10258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.303768][T10258] RSP: 002b:00007fc8c6916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.303786][T10258] RAX: ffffffffffffffda RBX: 00007fc8c8945fa0 RCX: 00007fc8c86be159 [ 1090.303804][T10258] RDX: 0000000020000080 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1090.303815][T10258] RBP: 00007fc8c6916090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.303825][T10258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.303866][T10258] R13: 00007fc8c8946038 R14: 00007fc8c8945fa0 R15: 00007ffe54dd16d8 [ 1090.303904][T10258] [ 1090.766131][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.124862][T10271] FAULT_INJECTION: forcing a failure. [ 1091.124862][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.124985][T10271] CPU: 1 UID: 0 PID: 10271 Comm: syz.6.1011 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1091.125011][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1091.125024][T10271] Call Trace: [ 1091.125034][T10271] [ 1091.125043][T10271] dump_stack_lvl+0xe8/0x150 [ 1091.125083][T10271] should_fail_ex+0x46b/0x600 [ 1091.125116][T10271] should_failslab+0xa8/0x100 [ 1091.125152][T10271] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1091.125183][T10271] ? __alloc_skb+0x1db/0x7a0 [ 1091.125211][T10271] ? __alloc_skb+0x1db/0x7a0 [ 1091.125246][T10271] __alloc_skb+0x1db/0x7a0 [ 1091.125279][T10271] alloc_skb_with_frags+0xc6/0x760 [ 1091.125330][T10271] sock_alloc_send_pskb+0x884/0x9a0 [ 1091.125360][T10271] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1091.125397][T10271] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1091.125425][T10271] ? dev_get_by_index+0x22/0x2d0 [ 1091.125447][T10271] ? dev_get_by_index+0x22/0x2d0 [ 1091.125484][T10271] packet_sendmsg+0x31bb/0x4f80 [ 1091.125512][T10271] ? is_bpf_text_address+0x292/0x2b0 [ 1091.125560][T10271] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1091.125595][T10271] ? __lock_acquire+0x747/0x2de0 [ 1091.125636][T10271] ? __lock_acquire+0x747/0x2de0 [ 1091.125674][T10271] ? smack_socket_sendmsg+0x1f8/0x5a0 [ 1091.125708][T10271] ? __pfx_packet_sendmsg+0x10/0x10 [ 1091.125743][T10271] ? cpu_attach_domain+0x740/0x1110 [ 1091.125782][T10271] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1091.125823][T10271] ? __pfx_packet_sendmsg+0x10/0x10 [ 1091.125850][T10271] sock_sendmsg_nosec+0x13a/0x180 [ 1091.125880][T10271] __sys_sendto+0x41e/0x5d0 [ 1091.125975][T10271] ? __pfx___sys_sendto+0x10/0x10 [ 1091.126142][T10271] ? __pfx_ksys_write+0x10/0x10 [ 1091.126233][T10271] __x64_sys_sendto+0xde/0x100 [ 1091.126323][T10271] do_syscall_64+0x166/0x520 [ 1091.126374][T10271] ? trace_irq_disable+0x3b/0x140 [ 1091.126458][T10271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.126523][T10271] ? clear_bhb_loop+0x70/0xc0 [ 1091.126598][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.126655][T10271] RIP: 0033:0x7f108399e159 [ 1091.126717][T10271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.126764][T10271] RSP: 002b:00007f1081bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1091.126836][T10271] RAX: ffffffffffffffda RBX: 00007f1083c25fa0 RCX: 00007f108399e159 [ 1091.126879][T10271] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1091.126920][T10271] RBP: 00007f1081bf6090 R08: 0000200000000080 R09: 0000000000000014 [ 1091.126962][T10271] R10: 0000000020048884 R11: 0000000000000246 R12: 0000000000000001 [ 1091.126990][T10271] R13: 00007f1083c26038 R14: 00007f1083c25fa0 R15: 00007ffc74200758 [ 1091.127081][T10271] [ 1091.273054][T10211] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1091.486613][T10211] usb 2-1: not running at top speed; connect to a high speed hub [ 1091.494551][T10211] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 0.00 [ 1091.504051][T10211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.603283][T10211] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 1091.801413][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.819597][T10275] FAULT_INJECTION: forcing a failure. [ 1091.819597][T10275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.834033][T10275] CPU: 0 UID: 0 PID: 10275 Comm: syz.6.1014 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1091.834066][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1091.834080][T10275] Call Trace: [ 1091.834090][T10275] [ 1091.834100][T10275] dump_stack_lvl+0xe8/0x150 [ 1091.834145][T10275] should_fail_ex+0x46b/0x600 [ 1091.834179][T10275] _copy_to_user+0x31/0xb0 [ 1091.834213][T10275] simple_read_from_buffer+0xe1/0x170 [ 1091.834245][T10275] proc_fail_nth_read+0x1be/0x230 [ 1091.834277][T10275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.834310][T10275] ? rw_verify_area+0x250/0x4d0 [ 1091.834339][T10275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.834374][T10275] vfs_read+0x219/0xa90 [ 1091.834411][T10275] ? __pfx_vfs_read+0x10/0x10 [ 1091.834440][T10275] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1091.834473][T10275] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1091.834501][T10275] ? mutex_lock_nested+0x152/0x1d0 [ 1091.834535][T10275] ? fdget_pos+0x252/0x320 [ 1091.834569][T10275] ksys_read+0x156/0x270 [ 1091.834598][T10275] ? __pfx_ksys_read+0x10/0x10 [ 1091.834628][T10275] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 1091.834660][T10275] do_syscall_64+0x166/0x520 [ 1091.834689][T10275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.834712][T10275] ? clear_bhb_loop+0x70/0xc0 [ 1091.834741][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.834764][T10275] RIP: 0033:0x7f108395e98e [ 1091.834786][T10275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1091.834806][T10275] RSP: 002b:00007f1081bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1091.834831][T10275] RAX: ffffffffffffffda RBX: 00007f1081bf66c0 RCX: 00007f108395e98e [ 1091.834849][T10275] RDX: 000000000000000f RSI: 00007f1081bf60a0 RDI: 0000000000000003 [ 1091.834865][T10275] RBP: 00007f1081bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.834881][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.834895][T10275] R13: 00007f1083c26038 R14: 00007f1083c25fa0 R15: 00007ffc74200758 [ 1091.834933][T10275] [ 1092.301482][T10279] FAULT_INJECTION: forcing a failure. [ 1092.301482][T10279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.301600][T10279] CPU: 1 UID: 0 PID: 10279 Comm: syz.3.1015 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1092.301626][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1092.301640][T10279] Call Trace: [ 1092.301679][T10279] [ 1092.301725][T10279] dump_stack_lvl+0xe8/0x150 [ 1092.301766][T10279] should_fail_ex+0x46b/0x600 [ 1092.301800][T10279] _copy_to_user+0x31/0xb0 [ 1092.301906][T10279] smack_socket_getpeersec_stream+0x1cb/0x2e0 [ 1092.301943][T10279] ? __pfx_smack_socket_getpeersec_stream+0x10/0x10 [ 1092.302038][T10279] security_socket_getpeersec_stream+0xbf/0x380 [ 1092.302090][T10279] sk_getsockopt+0xcba/0x2760 [ 1092.302142][T10279] ? __pfx_sk_getsockopt+0x10/0x10 [ 1092.302247][T10279] ? __lock_acquire+0x747/0x2de0 [ 1092.302300][T10279] ? lock_acquire+0x115/0x350 [ 1092.302415][T10279] do_sock_getsockopt+0x2bd/0x7e0 [ 1092.302459][T10279] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1092.302576][T10279] ? __fget_files+0x3a8/0x420 [ 1092.302602][T10279] ? __fget_files+0x2a/0x420 [ 1092.302642][T10279] __x64_sys_getsockopt+0x1aa/0x250 [ 1092.302739][T10279] do_syscall_64+0x166/0x520 [ 1092.302769][T10279] ? trace_irq_disable+0x3b/0x140 [ 1092.302813][T10279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.302882][T10279] ? clear_bhb_loop+0x70/0xc0 [ 1092.302918][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.302943][T10279] RIP: 0033:0x7fa41abce159 [ 1092.302964][T10279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.302982][T10279] RSP: 002b:00007fa418e05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1092.303006][T10279] RAX: ffffffffffffffda RBX: 00007fa41ae56090 RCX: 00007fa41abce159 [ 1092.303022][T10279] RDX: 000000000000001f RSI: 0000000000000001 RDI: 0000000000000003 [ 1092.303041][T10279] RBP: 00007fa418e05090 R08: 0000200000000180 R09: 0000000000000000 [ 1092.303052][T10279] R10: 0000200000001680 R11: 0000000000000246 R12: 0000000000000001 [ 1092.303085][T10279] R13: 00007fa41ae56128 R14: 00007fa41ae56090 R15: 00007ffc57b93748 [ 1092.303122][T10279] [ 1092.849103][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.593883][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.595575][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.685855][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.825522][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.826749][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.927672][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.002232][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.762130][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.037764][ T7766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.038507][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.801474][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.816749][ T996] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1097.898288][T10211] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1097.912834][T10211] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1097.922670][T10211] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 1097.943357][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.024288][ T996] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1098.050910][ T996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.051034][ T996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1098.051202][ T996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.109692][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.148193][ T996] usb 6-1: config 0 descriptor?? [ 1098.195108][T10211] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 1098.396886][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.529353][T10211] usb 2-1: USB disconnect, device number 47 [ 1098.671895][ T996] hid-picolcd 0003:04D8:F002.001A: No report with id 0xf3 found [ 1098.672101][ T996] hid-picolcd 0003:04D8:F002.001A: No report with id 0xf4 found [ 1098.931702][T10312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.940985][T10312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.346766][T10312] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1021'. [ 1099.433391][ T9611] usb 6-1: USB disconnect, device number 5 [ 1099.485056][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.515155][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.041885][T10211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.121580][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.405806][T10342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1029'. [ 1100.828541][T10349] FAULT_INJECTION: forcing a failure. [ 1100.828541][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.828657][T10349] CPU: 1 UID: 0 PID: 10349 Comm: syz.0.1031 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1100.828683][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.828763][T10349] Call Trace: [ 1100.828786][T10349] [ 1100.828823][T10349] dump_stack_lvl+0xe8/0x150 [ 1100.828955][T10349] should_fail_ex+0x46b/0x600 [ 1100.829043][T10349] should_failslab+0xa8/0x100 [ 1100.829141][T10349] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1100.829227][T10349] ? __alloc_skb+0x1db/0x7a0 [ 1100.829255][T10349] ? __alloc_skb+0x1db/0x7a0 [ 1100.829293][T10349] __alloc_skb+0x1db/0x7a0 [ 1100.829328][T10349] netlink_sendmsg+0x5d4/0xb40 [ 1100.829360][T10349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.829396][T10349] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1100.829514][T10349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.829570][T10349] sock_sendmsg_nosec+0x13a/0x180 [ 1100.829653][T10349] __sys_sendto+0x41e/0x5d0 [ 1100.829742][T10349] ? __pfx___sys_sendto+0x10/0x10 [ 1100.829904][T10349] ? do_user_addr_fault+0xc4c/0x1340 [ 1100.829994][T10349] __x64_sys_sendto+0xde/0x100 [ 1100.830083][T10349] do_syscall_64+0x166/0x520 [ 1100.830158][T10349] ? trace_irq_disable+0x3b/0x140 [ 1100.830249][T10349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.830294][T10349] ? clear_bhb_loop+0x70/0xc0 [ 1100.830322][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.830345][T10349] RIP: 0033:0x7fc8c867e98e [ 1100.830366][T10349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1100.830386][T10349] RSP: 002b:00007fc8c68d2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1100.830473][T10349] RAX: ffffffffffffffda RBX: 00007fc8c68d46c0 RCX: 00007fc8c867e98e [ 1100.830519][T10349] RDX: 0000000000000024 RSI: 00007fc8c68d3000 RDI: 0000000000000004 [ 1100.830560][T10349] RBP: 0000000000000000 R08: 00007fc8c68d2f04 R09: 000000000000000c [ 1100.830594][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1100.830627][T10349] R13: 00007fc8c68d2f58 R14: 00007fc8c68d3000 R15: 0000000000000000 [ 1100.830701][T10349] [ 1101.161170][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.316175][T10351] netlink: Unknown conntrack attr (type=16383, max=9) [ 1101.338311][T10351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.434370][T10211] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1104.211832][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.575819][ T4950] udevd[4950]: worker [8995] /devices/platform/dummy_hcd.6/usb7/7-1 is taking a long time [ 1104.793351][T10211] usb 2-1: Using ep0 maxpacket: 8 [ 1104.952785][T10211] usb 2-1: device descriptor read/all, error -71 [ 1105.427650][T10382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1105.566900][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.577741][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.604071][T10211] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1105.681371][T10384] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1041'. [ 1105.848088][T10211] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1105.859201][T10211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.859260][T10211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1105.859306][T10211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.913617][T10211] usb 2-1: config 0 descriptor?? [ 1106.601605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.601907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.602140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.602365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.602573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.602812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.252018][T10211] hid-picolcd 0003:04D8:F002.001B: No report with id 0xf3 found [ 1107.258147][T10211] hid-picolcd 0003:04D8:F002.001B: No report with id 0xf4 found [ 1109.316721][ T5774] usb 2-1: USB disconnect, device number 49 [ 1109.596968][T10400] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1045'. [ 1109.637327][T10400] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1045'. [ 1109.958570][ T996] net_ratelimit: 219 callbacks suppressed [ 1109.958669][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.523571][T10396] ip6erspan0: entered allmulticast mode [ 1111.001280][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.492617][T10211] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1111.692089][T10211] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1111.704215][T10211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.705982][T10211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.706014][T10211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1111.706069][T10211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.779975][T10211] usb 2-1: config 0 descriptor?? [ 1112.045731][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.054955][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.236318][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1052'. [ 1112.261577][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269230][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269271][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269301][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269329][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269358][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269386][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269414][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269442][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.269469][T10211] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1112.400004][T10211] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1113.082523][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.121510][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.178064][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.572386][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.717869][T10452] FAULT_INJECTION: forcing a failure. [ 1115.717869][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.717996][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.6.1059 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1115.718025][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1115.718041][T10452] Call Trace: [ 1115.718051][T10452] [ 1115.718062][T10452] dump_stack_lvl+0xe8/0x150 [ 1115.718104][T10452] should_fail_ex+0x46b/0x600 [ 1115.718139][T10452] _copy_to_user+0x31/0xb0 [ 1115.718173][T10452] simple_read_from_buffer+0xe1/0x170 [ 1115.718205][T10452] proc_fail_nth_read+0x1be/0x230 [ 1115.718239][T10452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1115.718272][T10452] ? rw_verify_area+0x250/0x4d0 [ 1115.718302][T10452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1115.718330][T10452] vfs_read+0x219/0xa90 [ 1115.718368][T10452] ? __pfx_vfs_read+0x10/0x10 [ 1115.718397][T10452] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1115.718430][T10452] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1115.718460][T10452] ? mutex_lock_nested+0x152/0x1d0 [ 1115.718495][T10452] ? fdget_pos+0x252/0x320 [ 1115.718531][T10452] ksys_read+0x156/0x270 [ 1115.718559][T10452] ? __pfx_ksys_read+0x10/0x10 [ 1115.718600][T10452] do_syscall_64+0x166/0x520 [ 1115.718629][T10452] ? trace_irq_disable+0x3b/0x140 [ 1115.718659][T10452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.718684][T10452] ? clear_bhb_loop+0x70/0xc0 [ 1115.718713][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.718738][T10452] RIP: 0033:0x7f108395e98e [ 1115.718760][T10452] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1115.718780][T10452] RSP: 002b:00007f1081bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1115.718806][T10452] RAX: ffffffffffffffda RBX: 00007f1081bf66c0 RCX: 00007f108395e98e [ 1115.718825][T10452] RDX: 000000000000000f RSI: 00007f1081bf60a0 RDI: 0000000000000005 [ 1115.718840][T10452] RBP: 00007f1081bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.718863][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.718877][T10452] R13: 00007f1083c26038 R14: 00007f1083c25fa0 R15: 00007ffc74200758 [ 1115.718916][T10452] [ 1116.046404][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.054796][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.468951][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 1116.475351][ T37] audit: type=1326 audit(1788784268.561:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41abce159 code=0x7ffc0000 [ 1116.509204][ T37] audit: type=1326 audit(1788784268.561:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41abce159 code=0x7ffc0000 [ 1116.509266][ T37] audit: type=1326 audit(1788784268.571:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa41abcef49 code=0x7ffc0000 [ 1116.520790][ T37] audit: type=1326 audit(1788784268.601:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa41ab8aebb code=0x7ffc0000 [ 1116.520852][ T37] audit: type=1326 audit(1788784268.601:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41abce159 code=0x7ffc0000 [ 1116.520901][ T37] audit: type=1326 audit(1788784268.601:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41abce159 code=0x7ffc0000 [ 1116.564423][ T37] audit: type=1326 audit(1788784268.621:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa41ab8a5ac code=0x7ffc0000 [ 1116.564486][ T37] audit: type=1326 audit(1788784268.631:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa41ab8a60e code=0x7ffc0000 [ 1116.564525][ T37] audit: type=1326 audit(1788784268.631:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa41abcddeb code=0x7ffc0000 [ 1116.598004][ T37] audit: type=1326 audit(1788784268.631:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10456 comm="syz.3.1060" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa41abce159 code=0x7ffc0000 [ 1116.670997][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.874485][ T5639] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 1117.440870][T10211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.727085][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.131661][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.225543][ T5774] usb 2-1: USB disconnect, device number 50 [ 1118.264201][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f86a400: rx timeout, send abort [ 1118.764402][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f86a400: abort rx timeout. Force session deactivation [ 1118.765574][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.172514][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.298772][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.229505][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.513721][T10506] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1073'. [ 1122.550990][ T5774] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1122.838752][ T5774] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1122.872628][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1122.872763][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.945193][ T5774] usb 4-1: config 0 descriptor?? [ 1122.957351][T10504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1123.241143][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.630350][ T5774] usbhid 4-1:0.0: can't add hid device: -71 [ 1123.630653][ T5774] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1123.663769][ T5774] usb 4-1: USB disconnect, device number 49 [ 1124.310564][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.288422][T10525] syz.3.1078: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1125.299939][T10525] CPU: 1 UID: 0 PID: 10525 Comm: syz.3.1078 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1125.299968][T10525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1125.299982][T10525] Call Trace: [ 1125.299992][T10525] [ 1125.300002][T10525] dump_stack_lvl+0xe8/0x150 [ 1125.300044][T10525] warn_alloc+0x24d/0x270 [ 1125.300083][T10525] ? __pfx_warn_alloc+0x10/0x10 [ 1125.300111][T10525] ? xsk_setsockopt+0x52a/0x960 [ 1125.300135][T10525] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1125.300187][T10525] __vmalloc_node_range_noprof+0x127/0x1540 [ 1125.300248][T10525] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1125.300278][T10525] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1125.300310][T10525] ? xskq_create+0x56/0x220 [ 1125.300341][T10525] xskq_create+0x148/0x220 [ 1125.300366][T10525] ? xsk_init_queue+0x8a/0xe0 [ 1125.300398][T10525] xsk_init_queue+0x8a/0xe0 [ 1125.300426][T10525] xsk_setsockopt+0x52a/0x960 [ 1125.300453][T10525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1125.300490][T10525] ? __fget_files+0x2a/0x420 [ 1125.300515][T10525] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1125.300536][T10525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1125.300562][T10525] do_sock_setsockopt+0x17c/0x1b0 [ 1125.300601][T10525] __x64_sys_setsockopt+0x143/0x1b0 [ 1125.300647][T10525] do_syscall_64+0x166/0x520 [ 1125.300674][T10525] ? trace_irq_disable+0x3b/0x140 [ 1125.300702][T10525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.300726][T10525] ? clear_bhb_loop+0x70/0xc0 [ 1125.300754][T10525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.300791][T10525] RIP: 0033:0x7fa41abce159 [ 1125.300814][T10525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.300833][T10525] RSP: 002b:00007fa418e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1125.300857][T10525] RAX: ffffffffffffffda RBX: 00007fa41ae55fa0 RCX: 00007fa41abce159 [ 1125.300875][T10525] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1125.300888][T10525] RBP: 00007fa41ac65024 R08: 0000000000000004 R09: 0000000000000000 [ 1125.300903][T10525] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.300917][T10525] R13: 00007fa41ae56038 R14: 00007fa41ae55fa0 R15: 00007ffc57b93748 [ 1125.300955][T10525] [ 1125.502623][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.503570][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.547704][T10525] Mem-Info: [ 1125.547751][T10525] active_anon:196 inactive_anon:40634 isolated_anon:0 [ 1125.547751][T10525] active_file:29122 inactive_file:38675 isolated_file:0 [ 1125.547751][T10525] unevictable:0 dirty:62 writeback:0 [ 1125.547751][T10525] slab_reclaimable:12251 slab_unreclaimable:105428 [ 1125.547751][T10525] mapped:36637 shmem:33990 pagetables:1527 [ 1125.547751][T10525] sec_pagetables:0 bounce:0 [ 1125.547751][T10525] kernel_misc_reclaimable:0 [ 1125.547751][T10525] free:1256591 free_pcp:8207 free_cma:0 [ 1125.547988][T10525] Node 0 active_anon:784kB inactive_anon:162536kB active_file:116284kB inactive_file:154700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146548kB dirty:248kB writeback:0kB shmem:135960kB kernel_stack:13716kB pagetables:5964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1125.548156][T10525] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1125.548303][T10525] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.548480][T10525] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1125.556068][T10525] Node 0 DMA32 free:1071644kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:784kB inactive_anon:162536kB active_file:116284kB inactive_file:154700kB unevictable:0kB writepending:248kB zspages:0kB present:3129332kB managed:2558840kB mlocked:0kB bounce:0kB free_pcp:32804kB local_pcp:16640kB free_cma:0kB [ 1125.556265][T10525] lowmem_reserve[]: 0 0 1 1 1 [ 1125.556373][T10525] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1125.560889][ T5769] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1125.613203][T10525] lowmem_reserve[]: 0 0 0 0 0 [ 1125.613348][T10525] Node 1 Normal free:3939360kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.613530][T10525] lowmem_reserve[]: 0 0 0 0 0 [ 1125.613638][T10525] Node 0 DMA: [ 1125.850810][ T5769] usb 2-1: Using ep0 maxpacket: 32 [ 1125.867712][ T5769] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1125.877955][ T5769] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1125.886848][ T5769] usb 2-1: config 0 has no interface number 0 [ 1125.886910][ T5769] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1125.886937][ T5769] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1125.886967][ T5769] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1125.886996][ T5769] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1125.887022][ T5769] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1125.887048][ T5769] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1125.887069][ T5769] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1125.887096][ T5769] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1125.887124][ T5769] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1125.887150][ T5769] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1125.889827][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.889858][ T5769] usb 2-1: Product: syz [ 1125.889873][ T5769] usb 2-1: Manufacturer: syz [ 1125.889889][ T5769] usb 2-1: SerialNumber: syz [ 1125.998062][ T5769] usb 2-1: config 0 descriptor?? [ 1125.999426][T10522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1125.999849][T10522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1126.089562][ T5769] usb 2-1: will this work? Response EP is not usually 3 [ 1126.096772][ T5769] usb 2-1: will this work? Image data EP is not usually 2 [ 1126.113763][ T5769] scsi host1: microtekX6 [ 1126.127984][T10525] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1126.128204][T10525] Node 0 DMA32: 540*4kB (UME) 923*8kB (UME) 367*16kB (UME) 226*32kB (UME) 1078*64kB (UME) 512*128kB (UME) 205*256kB (UM) 66*512kB (UME) 13*1024kB (UM) 5*2048kB (ME) 197*4096kB (UM) = 1073912kB [ 1126.128420][T10525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1126.128556][T10525] Node 1 Normal: 4*4kB (UM) 12*8kB (UM) 11*16kB (UM) 6*32kB (UM) 11*64kB (UM) 5*128kB (UM) 7*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3939360kB [ 1126.128776][T10525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1126.128797][T10525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1126.128817][T10525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1126.128837][T10525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1126.128856][T10525] 101783 total pagecache pages [ 1126.128871][T10525] 0 pages in swap cache [ 1126.128880][T10525] Free swap = 124996kB [ 1126.128889][T10525] Total swap = 124996kB [ 1126.128900][T10525] 2097051 pages RAM [ 1126.128908][T10525] 0 pages HighMem/MovableOnly [ 1126.128917][T10525] 425272 pages reserved [ 1126.128927][T10525] 0 pages cma reserved [ 1126.458866][ T5769] usb 2-1: USB disconnect, device number 51 [ 1126.488774][ T9675] usb 2-1: error -19 submitting URB [ 1126.544603][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.576721][ T1681] usb 2-1: error -19 submitting URB [ 1126.620893][ T1681] usb 2-1: error -19 submitting URB [ 1126.660871][ T1681] usb 2-1: error -19 submitting URB [ 1126.948389][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.568274][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.281320][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1087'. [ 1129.299535][T10561] FAULT_INJECTION: forcing a failure. [ 1129.299535][T10561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.299709][T10561] CPU: 1 UID: 0 PID: 10561 Comm: syz.3.1089 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1129.299738][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1129.299753][T10561] Call Trace: [ 1129.299763][T10561] [ 1129.299773][T10561] dump_stack_lvl+0xe8/0x150 [ 1129.299814][T10561] should_fail_ex+0x46b/0x600 [ 1129.299850][T10561] _copy_to_user+0x31/0xb0 [ 1129.299885][T10561] simple_read_from_buffer+0xe1/0x170 [ 1129.299925][T10561] proc_fail_nth_read+0x1be/0x230 [ 1129.299959][T10561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.299992][T10561] ? rw_verify_area+0x250/0x4d0 [ 1129.300067][T10561] ? lockdep_hardirqs_on+0x7b/0x110 [ 1129.300098][T10561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.300127][T10561] vfs_read+0x219/0xa90 [ 1129.300157][T10561] ? preempt_schedule_thunk+0x16/0x40 [ 1129.300190][T10561] ? __pfx_vfs_read+0x10/0x10 [ 1129.300214][T10561] ? preempt_schedule_thunk+0x16/0x40 [ 1129.300248][T10561] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 1129.300279][T10561] ? mutex_lock_nested+0x152/0x1d0 [ 1129.300313][T10561] ? fdget_pos+0x252/0x320 [ 1129.300348][T10561] ksys_read+0x156/0x270 [ 1129.300378][T10561] ? __pfx_ksys_read+0x10/0x10 [ 1129.300418][T10561] do_syscall_64+0x166/0x520 [ 1129.300448][T10561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.300472][T10561] ? clear_bhb_loop+0x70/0xc0 [ 1129.300501][T10561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.300523][T10561] RIP: 0033:0x7fa41ab8e98e [ 1129.300544][T10561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1129.300564][T10561] RSP: 002b:00007fa418de3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1129.300589][T10561] RAX: ffffffffffffffda RBX: 00007fa418de46c0 RCX: 00007fa41ab8e98e [ 1129.300607][T10561] RDX: 000000000000000f RSI: 00007fa418de40a0 RDI: 0000000000000006 [ 1129.300621][T10561] RBP: 00007fa418de4090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.300637][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.300651][T10561] R13: 00007fa41ae56218 R14: 00007fa41ae56180 R15: 00007ffc57b93748 [ 1129.300688][T10561] [ 1130.294475][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.348068][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.349110][T10560] input: syz1 as /devices/virtual/input/input53 [ 1131.321165][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.403633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.142896][T10588] syzkaller0: entered promiscuous mode [ 1132.142981][T10588] syzkaller0: entered allmulticast mode [ 1132.362972][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.782761][T10596] FAULT_INJECTION: forcing a failure. [ 1132.782761][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.782810][T10596] CPU: 1 UID: 0 PID: 10596 Comm: syz.1.1098 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1132.782830][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1132.782841][T10596] Call Trace: [ 1132.782848][T10596] [ 1132.782855][T10596] dump_stack_lvl+0xe8/0x150 [ 1132.782887][T10596] should_fail_ex+0x46b/0x600 [ 1132.782912][T10596] should_failslab+0xa8/0x100 [ 1132.782940][T10596] __kmalloc_cache_noprof+0xa1/0x680 [ 1132.782964][T10596] ? syslog_print_all+0xf8/0x450 [ 1132.782988][T10596] ? syslog_print_all+0xf8/0x450 [ 1132.783028][T10596] syslog_print_all+0xf8/0x450 [ 1132.783058][T10596] ? __pfx_syslog_print_all+0x10/0x10 [ 1132.783082][T10596] ? smack_privileged_cred+0xb6/0x380 [ 1132.783115][T10596] ? smack_privileged_cred+0xb6/0x380 [ 1132.783150][T10596] ? smack_privileged_cred+0xb6/0x380 [ 1132.783177][T10596] ? smack_privileged_cred+0xb6/0x380 [ 1132.783205][T10596] ? smack_privileged_cred+0x33c/0x380 [ 1132.783234][T10596] ? smack_syslog+0x95/0xf0 [ 1132.783262][T10596] do_syslog+0x3b4/0x7d0 [ 1132.783289][T10596] ? __pfx_do_syslog+0x10/0x10 [ 1132.783318][T10596] ? __se_sys_futex+0x3a8/0x450 [ 1132.783338][T10596] ? ksys_write+0x248/0x270 [ 1132.783357][T10596] ? __pfx___se_sys_futex+0x10/0x10 [ 1132.783373][T10596] ? __pfx_ksys_write+0x10/0x10 [ 1132.783398][T10596] __x64_sys_syslog+0x7c/0x90 [ 1132.783425][T10596] do_syscall_64+0x166/0x520 [ 1132.783446][T10596] ? trace_irq_disable+0x3b/0x140 [ 1132.783469][T10596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.783486][T10596] ? clear_bhb_loop+0x70/0xc0 [ 1132.783507][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.783527][T10596] RIP: 0033:0x7fc0dca2e159 [ 1132.783542][T10596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.783557][T10596] RSP: 002b:00007fc0dac86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1132.783575][T10596] RAX: ffffffffffffffda RBX: 00007fc0dccb5fa0 RCX: 00007fc0dca2e159 [ 1132.783588][T10596] RDX: 0000000000000063 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1132.783598][T10596] RBP: 00007fc0dcac5024 R08: 0000000000000000 R09: 0000000000000000 [ 1132.783608][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.783618][T10596] R13: 00007fc0dccb6038 R14: 00007fc0dccb5fa0 R15: 00007ffd32bb3c38 [ 1132.783643][T10596] [ 1133.331324][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.407575][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.217861][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 1134.987441][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.150836][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1135.262890][T10615] FAULT_INJECTION: forcing a failure. [ 1135.262890][T10615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.294313][T10615] CPU: 1 UID: 0 PID: 10615 Comm: syz.1.1103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1135.294347][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1135.294362][T10615] Call Trace: [ 1135.294372][T10615] [ 1135.294384][T10615] dump_stack_lvl+0xe8/0x150 [ 1135.294426][T10615] should_fail_ex+0x46b/0x600 [ 1135.294461][T10615] _copy_from_user+0x2d/0xb0 [ 1135.294493][T10615] __se_sys_add_key+0x2af/0x420 [ 1135.294523][T10615] ? __pfx___se_sys_add_key+0x10/0x10 [ 1135.294560][T10615] ? __x64_sys_add_key+0x20/0xc0 [ 1135.294586][T10615] do_syscall_64+0x166/0x520 [ 1135.294615][T10615] ? trace_irq_disable+0x3b/0x140 [ 1135.294645][T10615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.294668][T10615] ? clear_bhb_loop+0x70/0xc0 [ 1135.294697][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.294721][T10615] RIP: 0033:0x7fc0dca2e159 [ 1135.294743][T10615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.294762][T10615] RSP: 002b:00007fc0dac86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1135.294788][T10615] RAX: ffffffffffffffda RBX: 00007fc0dccb5fa0 RCX: 00007fc0dca2e159 [ 1135.294805][T10615] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000200000000040 [ 1135.294821][T10615] RBP: 00007fc0dac86090 R08: ffffffffffffffff R09: 0000000000000000 [ 1135.294838][T10615] R10: 00000000000000d4 R11: 0000000000000246 R12: 0000000000000001 [ 1135.294852][T10615] R13: 00007fc0dccb6038 R14: 00007fc0dccb5fa0 R15: 00007ffd32bb3c38 [ 1135.294889][T10615] [ 1135.345555][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 1135.374689][ T5902] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1135.437435][ T5902] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1135.437467][ T5902] usb 6-1: config 0 has no interface number 0 [ 1135.437516][ T5902] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1135.437563][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.541582][ T5902] usb 6-1: config 0 descriptor?? [ 1135.566171][ T5902] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1135.890195][T10605] input: syz1 as /devices/virtual/input/input54 [ 1136.043565][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.080374][ T5774] usb 6-1: USB disconnect, device number 6 [ 1136.500919][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.536097][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.492131][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.957533][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.964608][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.984220][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.990633][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.436485][T10648] CIFS: Attempting to mount //::1/share [ 1138.522280][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.192184][T10648] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1139.561877][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.572096][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.655783][T10665] netlink: 'syz.1.1119': attribute type 21 has an invalid length. [ 1140.380854][ T5621] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1140.681171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.802993][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.888732][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.602615][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.041308][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.125210][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.229616][ T5621] usb 4-1: device descriptor read/all, error -71 [ 1145.292217][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.671846][T10695] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1127'. [ 1145.673819][ T5774] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1145.683154][T10682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.844426][ T5774] usb 6-1: Using ep0 maxpacket: 8 [ 1145.846165][ T5774] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1145.888275][ T5774] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1145.888362][ T5774] usb 6-1: config 0 has no interface number 0 [ 1145.888412][ T5774] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1145.888578][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.939650][ T5774] usb 6-1: config 0 descriptor?? [ 1146.013920][ T5774] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 1146.022627][T10702] openvswitch: netlink: Message has 5920 unknown bytes. [ 1146.022731][T10702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.171329][ T5774] usb 6-1: USB disconnect, device number 7 [ 1146.242781][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.794153][ T5621] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1147.138612][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.563974][ T5621] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1147.581816][ T5621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.592193][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.653194][ T5621] usb 4-1: config 0 descriptor?? [ 1148.661504][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.761095][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.960790][T10719] comedi comedi1: Minor 4 could not be opened [ 1148.974024][T10719] Need at least one configuration in g1. [ 1148.974182][T10719] udc dummy_udc.0: failed to start g1: -22 [ 1148.974209][T10719] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1148.978355][T10719] UDC core: g1: couldn't find an available UDC or it's busy [ 1149.152541][T10719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.220295][ T5621] ath6kl: mismatched byte count 2081443527 vs. expected 12 [ 1149.271847][ T5621] ath6kl: Failed to init ath6kl core: -22 [ 1149.278752][ T5621] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1149.597628][T10719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.722077][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.473025][ T5621] usb 4-1: USB disconnect, device number 52 [ 1150.566564][T10737] IPVS: Scheduler module ip_vs_ not found [ 1150.791486][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.990961][ T5769] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1151.024524][T10742] CIFS: Attempting to mount //::1/share [ 1151.033499][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 1151.151332][ T5769] usb 6-1: Using ep0 maxpacket: 16 [ 1151.157692][ T5769] usb 6-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1151.157759][ T5769] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1151.159296][ T5769] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.159325][ T5769] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1151.204033][ T5769] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.214382][ T5769] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1151.216130][ T5769] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.216158][ T5769] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1151.220371][ T5769] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.220397][ T5769] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1151.287499][ T5769] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.297846][ T5769] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1151.299889][ T5769] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.299918][ T5769] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1151.319738][T10745] jffs2: notice: (10745) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1151.364876][ T5769] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.375522][ T5769] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1151.377849][ T5769] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.377878][ T5769] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1151.431098][ T9611] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1151.511029][ T5769] usb 6-1: string descriptor 0 read error: -71 [ 1151.517715][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.549447][ T5769] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1151.555899][ T5769] r8152-cfgselector 6-1: rejected 8 configurations due to insufficient available bus power [ 1151.555928][ T5769] r8152-cfgselector 6-1: no configuration chosen from 8 choices [ 1151.573046][T10742] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1151.573087][T10742] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1151.606722][ T5769] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 1151.622113][ T9611] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1151.634727][ T9611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.653963][ T9611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1151.654021][ T9611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.704505][ T9611] usb 4-1: config 0 descriptor?? [ 1151.823054][ T9612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.833767][T10682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.906064][T10745] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 1152.231187][ T9611] hid-picolcd 0003:04D8:F002.001D: No report with id 0xf3 found [ 1152.237073][ T9611] hid-picolcd 0003:04D8:F002.001D: No report with id 0xf4 found [ 1152.429288][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.439398][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.619647][ T5636] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 1152.710974][T10749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1144'. [ 1152.764831][ T37] kauditd_printk_skb: 1148 callbacks suppressed [ 1152.771498][ T37] audit: type=1326 audit(1788784304.851:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.798001][ T5621] usb 4-1: USB disconnect, device number 53 [ 1152.869218][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.910566][ T37] audit: type=1326 audit(1788784304.851:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.910801][ T37] audit: type=1326 audit(1788784304.851:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.910875][ T37] audit: type=1326 audit(1788784304.851:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.910937][ T37] audit: type=1326 audit(1788784304.851:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.910997][ T37] audit: type=1326 audit(1788784304.861:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.911063][ T37] audit: type=1326 audit(1788784304.861:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.911129][ T37] audit: type=1326 audit(1788784304.861:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.911313][ T37] audit: type=1326 audit(1788784304.861:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1152.911513][ T37] audit: type=1326 audit(1788784304.871:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10763 comm="syz.5.1149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1153.749039][T10776] FAULT_INJECTION: forcing a failure. [ 1153.749039][T10776] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.786891][T10776] CPU: 1 UID: 0 PID: 10776 Comm: syz.3.1152 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1153.786927][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1153.786943][T10776] Call Trace: [ 1153.786952][T10776] [ 1153.786963][T10776] dump_stack_lvl+0xe8/0x150 [ 1153.787004][T10776] should_fail_ex+0x46b/0x600 [ 1153.787040][T10776] should_failslab+0xa8/0x100 [ 1153.787079][T10776] __kmalloc_cache_noprof+0xa1/0x680 [ 1153.787113][T10776] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1153.787149][T10776] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1153.787196][T10776] nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 1153.787239][T10776] notifier_call_chain+0x1a5/0x3d0 [ 1153.787288][T10776] blocking_notifier_call_chain+0x6a/0x90 [ 1153.787315][T10776] netlink_release+0x1219/0x1aa0 [ 1153.787348][T10776] ? netlink_release+0x106/0x1aa0 [ 1153.787377][T10776] ? __pfx_netlink_release+0x10/0x10 [ 1153.787414][T10776] __sock_release+0xa0/0x1f0 [ 1153.787442][T10776] ? __pfx_sock_close+0x10/0x10 [ 1153.787466][T10776] sock_close+0x1c/0x30 [ 1153.787490][T10776] __fput+0x42a/0xa80 [ 1153.787536][T10776] fput_close_sync+0x11f/0x240 [ 1153.787572][T10776] ? __pfx_fput_close_sync+0x10/0x10 [ 1153.787621][T10776] __x64_sys_close+0x7e/0x110 [ 1153.787643][T10776] do_syscall_64+0x166/0x520 [ 1153.787684][T10776] ? trace_irq_disable+0x3b/0x140 [ 1153.787717][T10776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.787742][T10776] ? clear_bhb_loop+0x70/0xc0 [ 1153.787772][T10776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.787796][T10776] RIP: 0033:0x7fa41ab8e98e [ 1153.787819][T10776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1153.787841][T10776] RSP: 002b:00007fa418e24f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1153.787868][T10776] RAX: ffffffffffffffda RBX: 00007fa418e266c0 RCX: 00007fa41ab8e98e [ 1153.787886][T10776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1153.787904][T10776] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1153.787919][T10776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.787934][T10776] R13: 00007fa41ae56038 R14: 00007fa41ae55fa0 R15: 00007ffc57b93748 [ 1153.787973][T10776] [ 1153.840810][ T5769] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 1153.881108][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.068550][ T5769] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1154.075741][ T5769] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=5a.ed [ 1154.088302][ T5769] usb 6-1: config 24 has an invalid interface number: 176 but max is 0 [ 1154.088958][ T5769] usb 6-1: config 24 has no interface number 0 [ 1154.088998][ T5769] usb 6-1: config 24 interface 176 has no altsetting 0 [ 1154.137741][ T5769] usb 6-1: string descriptor 0 read error: -22 [ 1154.144230][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.229390][T10776] IPVS: Scheduler module ip_vs_ not found [ 1154.911736][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.075506][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.833429][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.833706][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.895805][ T5769] usb_ehset_test 6-1:24.176: probe with driver usb_ehset_test failed with error -32 [ 1157.001906][ T5769] usb 6-1: USB disconnect, device number 9 [ 1157.470859][T10682] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1157.623297][T10682] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1157.633261][T10682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1157.633494][T10682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.662848][T10682] usb 4-1: config 0 descriptor?? [ 1157.665941][T10796] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1157.882986][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.972134][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.116894][T10682] hid_parser_main: 5 callbacks suppressed [ 1158.117295][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117368][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117398][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117425][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117452][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117479][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117504][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117530][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117557][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.117583][T10682] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 1158.210897][T10682] hid-picolcd 0003:04D8:C002.001E: No report with id 0x11 found [ 1158.338271][ T5769] usb 4-1: USB disconnect, device number 54 [ 1158.442213][ T5636] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 1158.513129][ T1607] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1158.670911][ T1607] usb 6-1: Using ep0 maxpacket: 16 [ 1158.672827][ T1607] usb 6-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1158.672900][ T1607] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1158.674651][ T1607] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.674682][ T1607] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1158.676922][ T1607] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.676953][ T1607] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1158.684904][ T1607] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.684982][ T1607] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1158.686057][ T5636] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1158.686085][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1158.686114][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.686132][ T5636] Workqueue: hci0 hci_rx_work [ 1158.686186][ T5636] Call Trace: [ 1158.686196][ T5636] [ 1158.686206][ T5636] dump_stack_lvl+0xe8/0x150 [ 1158.686248][ T5636] sysfs_create_dir_ns+0x271/0x2a0 [ 1158.686281][ T5636] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1158.686317][ T5636] ? rt_spin_unlock+0x165/0x200 [ 1158.686346][ T5636] kobject_add_internal+0x62c/0xce0 [ 1158.686392][ T5636] kobject_add+0x163/0x240 [ 1158.686425][ T5636] ? rt_spin_unlock+0x159/0x200 [ 1158.686454][ T5636] ? __pfx_kobject_add+0x10/0x10 [ 1158.686497][ T5636] ? get_device_parent+0x370/0x3a0 [ 1158.686535][ T5636] device_add+0x3fa/0xb80 [ 1158.686571][ T5636] hci_conn_add_sysfs+0xd5/0x210 [ 1158.686612][ T5636] le_conn_complete_evt+0xfe3/0x16d0 [ 1158.686659][ T5636] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1158.686694][ T5636] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1158.686726][ T5636] ? rt_mutex_slowunlock+0x219/0x460 [ 1158.686766][ T5636] ? skb_pull_data+0xf0/0x200 [ 1158.686797][ T5636] hci_le_conn_complete_evt+0x187/0x470 [ 1158.686837][ T5636] hci_event_packet+0x67a/0xf10 [ 1158.686877][ T5636] ? reacquire_held_locks+0x117/0x1a0 [ 1158.686919][ T5636] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1158.686947][ T5636] ? __pfx_hci_event_packet+0x10/0x10 [ 1158.686986][ T5636] ? rt_spin_unlock+0x159/0x200 [ 1158.687020][ T5636] ? hci_send_to_monitor+0xe2/0x590 [ 1158.687056][ T5636] hci_rx_work+0x3ee/0x1020 [ 1158.687104][ T5636] ? process_scheduled_works+0x97a/0x1630 [ 1158.687139][ T5636] process_scheduled_works+0xc3d/0x1630 [ 1158.687210][ T5636] ? __pfx_process_scheduled_works+0x10/0x10 [ 1158.687243][ T5636] ? assign_work+0x3cf/0x5d0 [ 1158.687274][ T5636] worker_thread+0xa47/0xfb0 [ 1158.687313][ T5636] ? __kthread_parkme+0x71/0x1f0 [ 1158.687350][ T5636] kthread+0x38b/0x470 [ 1158.687372][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 1158.687397][ T5636] ? __pfx_kthread+0x10/0x10 [ 1158.687417][ T5636] ret_from_fork+0x514/0xb70 [ 1158.687439][ T5636] ? __pfx_ret_from_fork+0x10/0x10 [ 1158.687457][ T5636] ? __switch_to+0xc89/0x1420 [ 1158.687489][ T5636] ? __pfx_kthread+0x10/0x10 [ 1158.687510][ T5636] ret_from_fork_asm+0x1a/0x30 [ 1158.687544][ T5636] [ 1158.697700][ T5636] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1158.697751][ T5636] Bluetooth: hci0: failed to register connection device [ 1158.802953][ T1607] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.803034][ T1607] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1159.029116][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.339138][ T1607] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.339317][ T1607] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1159.431857][ T1607] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.432018][ T1607] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1159.501313][ T1607] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.501393][ T1607] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1159.535788][ T1607] usb 6-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.535879][ T1607] usb 6-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 1160.043712][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.124327][T10830] FAULT_INJECTION: forcing a failure. [ 1160.124327][T10830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.138551][T10830] CPU: 1 UID: 0 PID: 10830 Comm: syz.3.1165 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1160.138586][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1160.138601][T10830] Call Trace: [ 1160.138611][T10830] [ 1160.138622][T10830] dump_stack_lvl+0xe8/0x150 [ 1160.138666][T10830] should_fail_ex+0x46b/0x600 [ 1160.138702][T10830] _copy_to_iter+0x1e4/0x1810 [ 1160.138732][T10830] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1160.138767][T10830] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1160.138803][T10830] ? __pfx__copy_to_iter+0x10/0x10 [ 1160.138840][T10830] ? rt_spin_unlock+0x159/0x200 [ 1160.138869][T10830] __skb_datagram_iter+0xf8/0x980 [ 1160.138914][T10830] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1160.138964][T10830] skb_copy_datagram_iter+0xb5/0x240 [ 1160.139009][T10830] netlink_recvmsg+0x2b9/0xa50 [ 1160.139056][T10830] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1160.139092][T10830] ? __fget_files+0x3a8/0x420 [ 1160.139116][T10830] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1160.139154][T10830] ? security_socket_recvmsg+0x7e/0x2c0 [ 1160.139180][T10830] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1160.139207][T10830] sock_recvmsg+0x196/0x1e0 [ 1160.139239][T10830] __sys_recvfrom+0x230/0x3b0 [ 1160.139279][T10830] ? __pfx___sys_recvfrom+0x10/0x10 [ 1160.139347][T10830] ? do_user_addr_fault+0xc4c/0x1340 [ 1160.139379][T10830] __x64_sys_recvfrom+0xde/0x100 [ 1160.139417][T10830] do_syscall_64+0x166/0x520 [ 1160.139445][T10830] ? trace_irq_disable+0x3b/0x140 [ 1160.139477][T10830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.139503][T10830] ? clear_bhb_loop+0x70/0xc0 [ 1160.139535][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.139559][T10830] RIP: 0033:0x7fa41ab8e98e [ 1160.139582][T10830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1160.139604][T10830] RSP: 002b:00007fa418e24ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1160.139632][T10830] RAX: ffffffffffffffda RBX: 00007fa418e266c0 RCX: 00007fa41ab8e98e [ 1160.139651][T10830] RDX: 0000000000001000 RSI: 00007fa418e25000 RDI: 0000000000000004 [ 1160.139668][T10830] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1160.139683][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 1160.139700][T10830] R13: 00007fa418e24fb0 R14: 0000000000000009 R15: 0000000000000000 [ 1160.139735][T10830] [ 1160.818051][ T1607] usb 6-1: string descriptor 0 read error: -71 [ 1160.818278][ T1607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.892486][T10830] IPVS: Scheduler module ip_vs_ not found [ 1160.906427][ T1607] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1160.906518][ T1607] r8152-cfgselector 6-1: rejected 8 configurations due to insufficient available bus power [ 1160.906613][ T1607] r8152-cfgselector 6-1: no configuration chosen from 8 choices [ 1160.947355][ T1607] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 1160.959008][ T37] kauditd_printk_skb: 111 callbacks suppressed [ 1160.959096][ T37] audit: type=1326 audit(1788784313.041:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1160.959184][ T37] audit: type=1326 audit(1788784313.041:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1160.966846][ T37] audit: type=1326 audit(1788784313.051:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1160.967050][ T37] audit: type=1326 audit(1788784313.051:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1160.977277][ T37] audit: type=1326 audit(1788784313.061:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1161.049646][ T37] audit: type=1326 audit(1788784313.061:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1161.077851][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.116322][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.171356][ T37] audit: type=1326 audit(1788784313.261:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108399e159 code=0x7ffc0000 [ 1161.200121][ T37] audit: type=1326 audit(1788784313.261:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f108399dec2 code=0x7ffc0000 [ 1161.200177][ T37] audit: type=1326 audit(1788784313.261:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f108399df57 code=0x7ffc0000 [ 1161.200228][ T37] audit: type=1326 audit(1788784313.261:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.6.1164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f108395ae51 code=0x7ffc0000 [ 1161.623674][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.644504][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.139982][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.121268][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.576451][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.162698][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.523630][T10823] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1165.943903][T10877] FAULT_INJECTION: forcing a failure. [ 1165.943903][T10877] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1165.944009][T10877] CPU: 0 UID: 0 PID: 10877 Comm: syz.5.1177 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1165.944094][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1165.944150][T10877] Call Trace: [ 1165.944189][T10877] [ 1165.944199][T10877] dump_stack_lvl+0xe8/0x150 [ 1165.944315][T10877] should_fail_ex+0x46b/0x600 [ 1165.944418][T10877] get_futex_key+0x1b4/0x1580 [ 1165.944523][T10877] ? kasan_save_stack+0x4d/0x60 [ 1165.944610][T10877] ? call_rcu+0xee/0x8b0 [ 1165.944699][T10877] ? fput_close_sync+0x11f/0x240 [ 1165.944796][T10877] ? __x64_sys_close+0x7e/0x110 [ 1165.944875][T10877] ? __pfx_get_futex_key+0x10/0x10 [ 1165.945005][T10877] futex_wake+0x119/0x600 [ 1165.945102][T10877] ? __pfx_futex_wake+0x10/0x10 [ 1165.945219][T10877] do_futex+0x458/0x4e0 [ 1165.945254][T10877] ? call_rcu+0x64d/0x8b0 [ 1165.945343][T10877] ? __pfx_do_futex+0x10/0x10 [ 1165.945451][T10877] __se_sys_futex+0x3a8/0x450 [ 1165.945482][T10877] ? __pfx___se_sys_futex+0x10/0x10 [ 1165.945547][T10877] ? rcu_is_watching+0x16/0xb0 [ 1165.945670][T10877] ? __x64_sys_futex+0x21/0xf0 [ 1165.945746][T10877] do_syscall_64+0x166/0x520 [ 1165.945831][T10877] ? trace_irq_disable+0x3b/0x140 [ 1165.945908][T10877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.945973][T10877] ? clear_bhb_loop+0x70/0xc0 [ 1165.946050][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.946122][T10877] RIP: 0033:0x7f23ec6ce159 [ 1165.946179][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.946234][T10877] RSP: 002b:00007f23ea9260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1165.946305][T10877] RAX: ffffffffffffffda RBX: 00007f23ec955fa8 RCX: 00007f23ec6ce159 [ 1165.946344][T10877] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23ec955fac [ 1165.946388][T10877] RBP: 00007f23ec955fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1165.946438][T10877] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000000 [ 1165.946474][T10877] R13: 00007f23ec956038 R14: 00007ffc48e18350 R15: 00007ffc48e18438 [ 1165.946570][T10877] [ 1165.961191][T10682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.201094][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.301783][T10877] IPVS: Scheduler module ip_vs_ not found [ 1166.670783][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.685767][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.863236][ T37] kauditd_printk_skb: 115 callbacks suppressed [ 1166.869652][ T37] audit: type=1326 audit(1788784318.951:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.885333][ T37] audit: type=1326 audit(1788784318.951:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.885400][ T37] audit: type=1326 audit(1788784318.951:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.885450][ T37] audit: type=1326 audit(1788784318.961:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.885500][ T37] audit: type=1326 audit(1788784318.961:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.885549][ T37] audit: type=1326 audit(1788784318.971:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.885597][ T37] audit: type=1326 audit(1788784318.971:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.885646][ T37] audit: type=1326 audit(1788784318.971:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.920912][ T37] audit: type=1326 audit(1788784318.951:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1166.920978][ T37] audit: type=1326 audit(1788784318.981:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.5.1182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec6ce159 code=0x7ffc0000 [ 1167.243435][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.649792][ T1607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.291347][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.573326][T10903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1170.030782][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.681553][T10682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.081520][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.450491][ T5640] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1171.963193][T10921] FAULT_INJECTION: forcing a failure. [ 1171.963193][T10921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.964871][T10921] CPU: 1 UID: 0 PID: 10921 Comm: syz.5.1192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1171.964913][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1171.964964][T10921] Call Trace: [ 1171.965002][T10921] [ 1171.965034][T10921] dump_stack_lvl+0xe8/0x150 [ 1171.965152][T10921] should_fail_ex+0x46b/0x600 [ 1171.965243][T10921] _copy_to_iter+0x1e4/0x1810 [ 1171.965343][T10921] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1171.965431][T10921] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1171.965527][T10921] ? __pfx__copy_to_iter+0x10/0x10 [ 1171.965625][T10921] ? rt_spin_unlock+0x159/0x200 [ 1171.965692][T10921] __skb_datagram_iter+0xf8/0x980 [ 1171.965801][T10921] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1171.965938][T10921] skb_copy_datagram_iter+0xb5/0x240 [ 1171.966053][T10921] netlink_recvmsg+0x2b9/0xa50 [ 1171.966150][T10921] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1171.966240][T10921] ? __fget_files+0x3a8/0x420 [ 1171.966312][T10921] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1171.966406][T10921] ? security_socket_recvmsg+0x7e/0x2c0 [ 1171.966453][T10921] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1171.966518][T10921] sock_recvmsg+0x196/0x1e0 [ 1171.966605][T10921] __sys_recvfrom+0x230/0x3b0 [ 1171.966712][T10921] ? __pfx___sys_recvfrom+0x10/0x10 [ 1171.966878][T10921] ? do_user_addr_fault+0xc4c/0x1340 [ 1171.966964][T10921] __x64_sys_recvfrom+0xde/0x100 [ 1171.967061][T10921] do_syscall_64+0x166/0x520 [ 1171.967139][T10921] ? trace_irq_disable+0x3b/0x140 [ 1171.967223][T10921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.967288][T10921] ? clear_bhb_loop+0x70/0xc0 [ 1171.967370][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.967436][T10921] RIP: 0033:0x7f23ec68e98e [ 1171.967500][T10921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1171.967555][T10921] RSP: 002b:00007f23ea924ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1171.967646][T10921] RAX: ffffffffffffffda RBX: 00007f23ea9266c0 RCX: 00007f23ec68e98e [ 1171.967706][T10921] RDX: 0000000000001000 RSI: 00007f23ea925000 RDI: 0000000000000004 [ 1171.967757][T10921] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1171.967808][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 1171.967862][T10921] R13: 00007f23ea924fb0 R14: 0000000000000009 R15: 0000000000000000 [ 1171.967959][T10921] [ 1172.121602][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.637331][T10929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.638114][T10929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.770064][T10921] IPVS: Scheduler module ip_vs_ not found [ 1173.189300][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.752085][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.202650][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.921036][ T39] INFO: task kworker/0:5:5768 blocked for more than 143 seconds. [ 1174.921121][ T39] Not tainted syzkaller #0 [ 1174.921134][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1174.921146][ T39] task:kworker/0:5 state:D stack:22008 pid:5768 tgid:5768 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1174.921215][ T39] Workqueue: usb_hub_wq hub_event [ 1174.921253][ T39] Call Trace: [ 1174.921262][ T39] [ 1174.921279][ T39] __schedule+0x16d9/0x5700 [ 1174.921310][ T39] ? __lock_acquire+0x747/0x2de0 [ 1174.921349][ T39] ? rcu_is_watching+0x16/0xb0 [ 1174.921414][ T39] ? __pfx___schedule+0x10/0x10 [ 1174.921438][ T39] ? lock_acquire+0x115/0x350 [ 1174.921479][ T39] ? schedule+0x90/0x2b0 [ 1174.921509][ T39] schedule+0x164/0x2b0 [ 1174.921539][ T39] schedule_timeout+0xc0/0x2c0 [ 1174.921566][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 1174.921594][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1174.921623][ T39] ? wait_for_completion+0x272/0x5e0 [ 1174.921651][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 1174.921679][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1174.921713][ T39] ? wait_for_completion+0x272/0x5e0 [ 1174.921742][ T39] wait_for_completion+0x2ca/0x5e0 [ 1174.921785][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 1174.921833][ T39] ? kobject_put+0x50f/0x550 [ 1174.921873][ T39] i2c_del_adapter+0x292/0x440 [ 1174.921926][ T39] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1174.921960][ T39] ? dvb_usbv2_exit+0x94d/0xb80 [ 1174.921999][ T39] dvb_usbv2_probe+0x4bb/0x3950 [ 1174.922063][ T39] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1174.922097][ T39] ? __pm_runtime_set_status+0x977/0xc40 [ 1174.922143][ T39] usb_probe_interface+0x788/0xe50 [ 1174.922193][ T39] ? __pfx_usb_probe_interface+0x10/0x10 [ 1174.922235][ T39] ? sysfs_do_create_link_sd+0xe0/0x110 [ 1174.922267][ T39] ? driver_sysfs_add+0x1fe/0x210 [ 1174.922303][ T39] ? __pfx_usb_probe_interface+0x10/0x10 [ 1174.922340][ T39] really_probe+0x254/0xae0 [ 1175.022337][ T39] __driver_probe_device+0x1e8/0x360 [ 1175.022406][ T39] driver_probe_device+0x4f/0x240 [ 1175.022488][ T39] __device_attach_driver+0x270/0x410 [ 1175.022539][ T39] bus_for_each_drv+0x25b/0x2f0 [ 1175.022608][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 1175.022684][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1175.022748][ T39] ? rt_spin_unlock+0x165/0x200 [ 1175.022836][ T39] __device_attach+0x2c7/0x450 [ 1175.022881][ T39] ? rt_spin_unlock+0x159/0x200 [ 1175.022944][ T39] ? __pfx___device_attach+0x10/0x10 [ 1175.023047][ T39] device_initial_probe+0xa1/0xd0 [ 1175.023094][ T39] bus_probe_device+0x12d/0x220 [ 1175.023162][ T39] device_add+0x7d7/0xb80 [ 1175.023241][ T39] usb_set_configuration+0x1ad8/0x2180 [ 1175.023369][ T39] usb_generic_driver_probe+0x8d/0x150 [ 1175.023423][ T39] usb_probe_device+0x1c3/0x3b0 [ 1175.023504][ T39] ? __pfx_usb_probe_device+0x10/0x10 [ 1175.023547][ T39] really_probe+0x254/0xae0 [ 1175.023626][ T39] __driver_probe_device+0x1e8/0x360 [ 1175.023693][ T39] driver_probe_device+0x4f/0x240 [ 1175.023746][ T39] __device_attach_driver+0x270/0x410 [ 1175.030253][ T39] bus_for_each_drv+0x25b/0x2f0 [ 1175.048035][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 1175.052837][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1175.063492][ T39] ? rt_spin_unlock+0x165/0x200 [ 1175.117217][ T39] __device_attach+0x2c7/0x450 [ 1175.117315][ T39] ? __pfx___device_attach+0x10/0x10 [ 1175.117420][ T39] device_initial_probe+0xa1/0xd0 [ 1175.117466][ T39] bus_probe_device+0x12d/0x220 [ 1175.161348][ T39] device_add+0x7d7/0xb80 [ 1175.161410][ T39] usb_new_device+0x99a/0x1680 [ 1175.161995][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1175.163963][ T39] ? __pfx_usb_new_device+0x10/0x10 [ 1175.168767][ T39] hub_event+0x28cf/0x4cf0 [ 1175.201462][ T39] ? __pfx_hub_event+0x10/0x10 [ 1175.223534][ T39] ? rcu_is_watching+0x16/0xb0 [ 1175.257562][ T39] ? process_scheduled_works+0x97a/0x1630 [ 1175.257619][ T39] process_scheduled_works+0xc3d/0x1630 [ 1175.272057][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1175.275459][ T39] ? assign_work+0x3cf/0x5d0 [ 1175.284257][ T39] worker_thread+0xa47/0xfb0 [ 1175.309787][ T39] ? __kthread_parkme+0x71/0x1f0 [ 1175.396405][ T39] kthread+0x38b/0x470 [ 1175.397119][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1175.397209][ T39] ? __pfx_kthread+0x10/0x10 [ 1175.397238][ T39] ret_from_fork+0x514/0xb70 [ 1175.397321][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1175.397404][ T39] ? __switch_to+0xc89/0x1420 [ 1175.397495][ T39] ? __pfx_kthread+0x10/0x10 [ 1175.397569][ T39] ret_from_fork_asm+0x1a/0x30 [ 1175.397754][ T39] [ 1175.398282][ T39] [ 1175.398282][ T39] Showing all locks held in the system: [ 1175.398301][ T39] locks held by kworker/0:0H/11: 6, last CPU#0: [ 1175.409618][ T39] #0: ffff88813ff27538 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.441338][ T39] #1: ffffc90000107c40 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.464764][ T39] #2: ffff888033975278 (&dev->lock#2){+.+.}-{3:3}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1175.507766][ T39] #3: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1175.508033][ T39] #4: ffff8880b8628558 (hrtimer_bases.lock){-...}-{2:2}, at: __wake_up_common_lock+0x2f/0x1f0 [ 1175.508329][ T39] #5: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1175.509048][ T39] locks held by kworker/u8:1/13: 4, last CPU#1: [ 1175.509266][ T39] #0: ffff888035c3f938 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.510016][ T39] #1: ffffc90000127c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.603273][ T39] #2: ffff88805ab19a38 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1175.603907][ T39] #3: ffffffff8e30acc0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 1175.604812][ T39] locks held by pr/ttyS0/17: 3, last CPU#1: [ 1175.604833][ T39] #0: ffffffff8e09d5f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1175.605416][ T39] #1: ffffffff99e9c1f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 1175.606463][ T39] #2: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.606693][ T39] locks held by rcuc/1/28: 2, last CPU#1: [ 1175.606712][ T39] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.607787][ T39] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x790 [ 1175.654803][ T39] locks held by kworker/u8:2/38: 6, last CPU#1: [ 1175.655466][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.658501][ T39] #1: ffffc90000af7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.778530][ T39] #2: ffff888025f86310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1175.781136][ T39] #3: ffff88805ddbf520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1175.781381][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.781500][ T39] #5: ffff8880b8737350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1175.781608][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 1175.781668][ T39] #0: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1175.781877][ T39] locks held by kworker/u8:11/1115: 4, last CPU#1: [ 1175.782161][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.786037][ T39] #1: ffffc9000643fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.824803][ T39] #2: ffff88805f2008d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1175.829871][ T39] #3: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 1175.829952][ T39] locks held by kworker/0:2/1607: 2, last CPU#0: [ 1175.829971][ T39] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.830037][ T39] #1: ffffc90006f0fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.830138][ T39] locks held by klogd/4939: 1, last CPU#1: [ 1175.830156][ T39] #0: ffffffff8e311470 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1175.830220][ T39] locks held by udevd/4950: 1, last CPU#1: [ 1175.830238][ T39] #0: ffffffff8e94f4b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1175.830300][ T39] locks held by getty/5335: 2, on CPU#1: [ 1175.830317][ T39] #0: ffff88801bba90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1175.830386][ T39] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1175.830450][ T39] locks held by syz-executor/5631: 4, last CPU#1: [ 1175.830467][ T39] #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: __se_sys_kill+0x6b/0x360 [ 1175.830535][ T39] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x279/0x4b0 [ 1175.830591][ T39] #2: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: lock_task_sighand+0x29/0x2a0 [ 1175.830685][ T39] #3: ffff88802dac93d8 (&sighand->siglock){+.+.}-{3:3}, at: lock_task_sighand+0x164/0x2a0 [ 1175.830744][ T39] locks held by syz-executor/5634: 5, last CPU#1: [ 1175.830761][ T39] #0: ffff888060d10510 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1175.830829][ T39] #1: ffff888060daa0f0 (&sb->s_type->i_lock_key){+.+.}-{3:3}, at: filemap_remove_folio+0xdb/0x3a0 [ 1175.830903][ T39] #2: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.830971][ T39] #3: ffff888060daa2c8 (&xa->xa_lock#7){+.+.}-{3:3}, at: filemap_remove_folio+0xe7/0x3a0 [ 1175.831042][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.831112][ T39] locks held by kworker/u8:3/5659: 6, last CPU#1: [ 1175.831130][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.831194][ T39] #1: ffffc90005b9fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.831262][ T39] #2: ffff88803bad2310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1175.831326][ T39] #3: ffff888020fba520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1175.831384][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.831451][ T39] #5: ffff8880b8737350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1175.831517][ T39] locks held by kworker/u8:4/5661: 9, last CPU#1: [ 1175.831534][ T39] #0: ffff88803a8ed938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.831599][ T39] #1: ffffc90005bbfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.831665][ T39] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.831729][ T39] #3: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.831793][ T39] #4: ffff88805dc96cd8 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 1175.831859][ T39] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x279/0x4b0 [ 1175.831921][ T39] #6: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.831985][ T39] #7: ffffffff8e1c3ba0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x217/0xec0 [ 1175.832047][ T39] #8: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1175.832108][ T39] locks held by kworker/u8:5/5664: 6, on CPU#1: [ 1175.832126][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.832190][ T39] #1: ffffc90005befc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.832257][ T39] #2: ffff88803569e310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1175.832321][ T39] #3: ffff8880595a5120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1175.832380][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.832447][ T39] #5: ffff8880b8737350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1175.832517][ T39] locks held by kworker/0:5/5768: 5, on CPU#0: [ 1175.832535][ T39] #0: ffff8880222b2d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.832599][ T39] #1: ffffc900060cfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.832664][ T39] #2: ffff88802a588210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1175.832728][ T39] #3: ffff88802e22a210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1175.832792][ T39] #4: ffff88803ad931d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1175.832856][ T39] locks held by kworker/1:5/5769: 8, last CPU#1: [ 1175.832874][ T39] #0: ffff88805cdf1d38 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.832951][ T39] #1: ffffc900060efc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.833034][ T39] #2: ffff88803e04ce90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 1175.833094][ T39] #3: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.833157][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.833222][ T39] #5: ffffffff8e1c3ba0 (rcu_read_lock_bh){....}-{1:3}, at: wg_noise_handshake_begin_session+0x355/0xbe0 [ 1175.833282][ T39] #6: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.833345][ T39] #7: ffff88803e04cc10 (&peer->keypairs.keypair_update_lock){+...}-{3:3}, at: wg_noise_handshake_begin_session+0x44f/0xbe0 [ 1175.833407][ T39] locks held by kworker/u8:7/5799: 4, last CPU#1: [ 1175.833425][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.833490][ T39] #1: ffffc9000614fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.833554][ T39] #2: ffff8880393c08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1175.833623][ T39] #3: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1175.833684][ T39] locks held by kworker/u8:8/5816: 3, last CPU#1: [ 1175.833701][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.833766][ T39] #1: ffffc900062efc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.833832][ T39] #2: ffff8880611a08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1175.833908][ T39] locks held by kworker/u8:9/5834: 6, on CPU#1: [ 1175.833925][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.833989][ T39] #1: ffffc900063dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.834056][ T39] #2: ffff88805dc74310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1175.834120][ T39] #3: ffff888031ec2920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1175.834179][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.834245][ T39] #5: ffff ** replaying previous printk message ** [ 1175.834245][ T39] #5: ffff8880b8737350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1175.834309][ T39] locks held by kworker/u8:12/5896: 7, last CPU#1: [ 1175.834326][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.834392][ T39] #1: ffffc900065cfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.834458][ T39] #2: ffffffff8e051e70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 1175.834522][ T39] #3: ffffffff8e2a1638 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 1175.834587][ T39] #4: ffffffff8e068718 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1175.834657][ T39] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1175.834715][ T39] #6: ffff88813ff5cc58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1175.834782][ T39] locks held by kworker/u8:13/5897: 8, last CPU#1: [ 1175.834800][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.834864][ T39] #1: ffffc9000650fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.834938][ T39] #2: ffff888031c54310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1175.835002][ T39] #3: ffff88805fc26120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1175.835060][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.835127][ T39] #5: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.835190][ T39] #6: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.835254][ T39] #7: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.835321][ T39] locks held by kworker/u8:14/5898: 6, last CPU#1: [ 1175.835339][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.835404][ T39] #1: ffffc9000652fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.835470][ T39] #2: ffff8880603708d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1175.835540][ T39] #3: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.835603][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.835666][ T39] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.835735][ T39] locks held by kworker/u8:15/5899: 12, last CPU#1: [ 1175.835753][ T39] #0: ffff88806113a938 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.835823][ T39] #1: ffffc900065dfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.835895][ T39] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.835958][ T39] #3: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.836022][ T39] #4: ffff88803e04cce0 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 1175.836087][ T39] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x279/0x4b0 [ 1175.836141][ T39] #6: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.836204][ T39] #7: ffffffff8e1c3ba0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x920 [ 1175.836265][ T39] #8: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 1175.836329][ T39] #9: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.836392][ T39] #10: ffffffff8e1c3ba0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x294/0x3880 [ 1175.836449][ T39] #11: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.836517][ T39] locks held by kworker/u8:16/5901: 5, on CPU#1: [ 1175.836534][ T39] #0: ffff88805b97c938 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.836605][ T39] #1: ffffc900065efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.836671][ T39] #2: ffff88805bc297b8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1175.836731][ T39] #3: ffff88805e0e43e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1175.836790][ T39] #4: ffff8880b8737350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1175.836855][ T39] locks held by kworker/1:6/5902: 4, last CPU#1: [ 1175.836872][ T39] #0: ffff888033800938 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.836950][ T39] #1: ffffc9000661fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.837033][ T39] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.837097][ T39] #3: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.837161][ T39] locks held by kworker/u8:17/5911: 3, last CPU#1: [ 1175.837178][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.837259][ T39] #1: ffffc900064efc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.837325][ T39] #2: ffff888060cf08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1175.837398][ T39] locks held by udevd/8995: 4, on CPU#0: [ 1175.837414][ T39] #0: ffff88803305b1a8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 1175.837478][ T39] #1: ffff8880596c2878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1175.837550][ T39] #2: ffff88802a3f2968 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1175.837623][ T39] #3: ffff88802e22a210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1175.837688][ T39] locks held by syz-executor/9201: 9, last CPU#1: [ 1175.837705][ T39] #0: ffffffff8e29ef70 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 1175.837768][ T39] #1: ffff88803295e2b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 1175.837831][ T39] #2: ffff88802a6747b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 1175.837907][ T39] #3: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1175.837964][ T39] #4: ffff88804139e7d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1175.838029][ T39] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.838096][ T39] #6: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1175.838153][ T39] #7: ffff8880339fedd8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x569/0x58f0 [ 1175.838228][ T39] #8: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1e0/0x400 [ 1175.838298][ T39] locks held by syz-executor/9286: 2, last CPU#1: [ 1175.838316][ T39] #0: ffffffff8e94f4b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 1175.838376][ T39] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1175.838435][ T39] locks held by kworker/u8:10/9675: 6, on CPU#1: [ 1175.838452][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.838516][ T39] #1: ffffc90004fd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.838583][ T39] #2: ffff88802139a310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1175.838646][ T39] #3: ffff88805dda3d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1175.838704][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.838770][ T39] #5: ffff8880b8737350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1175.838835][ T39] locks held by kworker/u8:18/9676: 6, last CPU#1: [ 1175.838852][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.838923][ T39] #1: ffffc90004ed7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.838989][ T39] #2: ffff88805f0908d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1175.839057][ T39] #3: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.839120][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.839183][ T39] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.839250][ T39] locks held by kworker/u8:19/10681: 6, last CPU#1: [ 1175.839268][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.839333][ T39] #1: ffffc90005fd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.839400][ T39] #2: ffff888025440310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1175.839457][ T39] #3: ffff88805d8aad20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1175.839515][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.839582][ T39] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1175.839643][ T39] locks held by syz.6.1160/10819: 1, last CPU#1: [ 1175.839660][ T39] #0: ffff88802a320510 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x376a/0x4520 [ 1175.839732][ T39] locks held by syz.0.1162/10822: 2, last CPU#1: [ 1175.839749][ T39] #0: ffff888027e4c510 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x376a/0x4520 [ 1175.839819][ T39] #1: ffff888060d05d90 (&sb->s_type->i_mutex_key#14){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 1175.839900][ T39] locks held by kworker/u8:20/10825: 6, last CPU#1: [ 1175.839918][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.839982][ T39] #1: ffffc900046c7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1175.840048][ T39] #2: ffff88805fd808d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1175.840116][ T39] #3: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.840178][ T39] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1175.840242][ T39] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1175.840310][ T39] locks held by syz.3.1174/10871: 4, last CPU#1: [ 1175.840327][ T39] #0: ffff888032040510 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x376a/0x4520 [ 1175.840398][ T39] #1: ffff88802adbf030 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0 [ 1175.840464][ T39] #2: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1175.840522][ T39] #3: ffff888031aba4d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1175.840587][ T39] locks held by syz.5.1189/10913: 2, last CPU#1: [ 1175.840604][ T39] #0: ffff88803797c510 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x376a/0x4520 [ 1175.906614][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.951409][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.766624][ T39] #1: ffff8880255b6c90 (&sb->s_type->i_mutex_key#14){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 1176.766926][ T39] locks held by syz.0.1196/10931: 1, on CPU#0: [ 1176.766972][ T39] #0: ffff888032f18958 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_release+0x79/0x220 [ 1176.767197][ T39] [ 1176.767212][ T39] ============================================= [ 1176.767212][ T39] [ 1176.767245][ T39] NMI backtrace for cpu 0 [ 1176.767297][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1176.767357][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1176.767399][ T39] Call Trace: [ 1176.767424][ T39] [ 1176.767456][ T39] dump_stack_lvl+0xe8/0x150 [ 1176.767555][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1176.767652][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1176.767745][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1176.767860][ T39] sys_info+0x135/0x170 [ 1176.767953][ T39] watchdog+0xfd7/0x1030 [ 1176.768064][ T39] ? watchdog+0x1c7/0x1030 [ 1176.768158][ T39] kthread+0x38b/0x470 [ 1176.768224][ T39] ? __pfx_watchdog+0x10/0x10 [ 1176.768297][ T39] ? __pfx_kthread+0x10/0x10 [ 1176.768373][ T39] ret_from_fork+0x514/0xb70 [ 1176.768446][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1176.768501][ T39] ? __switch_to+0xc89/0x1420 [ 1176.768604][ T39] ? __pfx_kthread+0x10/0x10 [ 1176.768662][ T39] ret_from_fork_asm+0x1a/0x30 [ 1176.768766][ T39] [ 1176.768831][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1176.768906][ C1] NMI backtrace for cpu 1 [ 1176.768922][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1176.768944][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1176.768955][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1176.768982][ C1] Code: e8 0e 88 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 67 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1176.768999][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 1176.769016][ C1] RAX: 1ffffffff33d3800 RBX: 00000000000003fd RCX: 0000000000000000 [ 1176.769029][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1176.769041][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1176.769054][ C1] R10: dffffc0000000000 R11: ffffffff856105b0 R12: dffffc0000000000 [ 1176.769069][ C1] R13: 0000000000000000 R14: ffffffff99e9c220 R15: 0000000000000000 [ 1176.769082][ C1] FS: 0000000000000000(0000) GS:ffff888125cd1000(0000) knlGS:0000000000000000 [ 1176.769098][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1176.769111][ C1] CR2: 000055556d9d3a38 CR3: 0000000035b2a000 CR4: 00000000003526f0 [ 1176.769128][ C1] Call Trace: [ 1176.769136][ C1] [ 1176.769145][ C1] wait_for_lsr+0x190/0x300 [ 1176.769170][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 1176.769202][ C1] serial8250_console_write+0xac5/0x1230 [ 1176.769229][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1176.769259][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1176.769295][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1176.769325][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1176.769362][ C1] nbcon_kthread_func+0x679/0x880 [ 1176.769391][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1176.769415][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1176.769444][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1176.769473][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1176.769503][ C1] kthread+0x38b/0x470 [ 1176.769521][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1176.769544][ C1] ? __pfx_kthread+0x10/0x10 [ 1176.769564][ C1] ret_from_fork+0x514/0xb70 [ 1176.769583][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1176.769601][ C1] ? __switch_to+0xc89/0x1420 [ 1176.769629][ C1] ? __pfx_kthread+0x10/0x10 [ 1176.769648][ C1] ret_from_fork_asm+0x1a/0x30 [ 1176.769681][ C1] [ 1176.790503][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1178.304699][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1178.314351][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1178.324443][ T39] Call Trace: [ 1178.327828][ T39] [ 1178.330786][ T39] vpanic+0x56d/0xa60 [ 1178.334809][ T39] ? __pfx___schedule+0x10/0x10 [ 1178.339677][ T39] ? __pfx_vpanic+0x10/0x10 [ 1178.344222][ T39] panic+0xc5/0xd0 [ 1178.347953][ T39] ? __pfx_panic+0x10/0x10 [ 1178.352392][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 1178.357887][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1178.363281][ T39] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1178.369470][ T39] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1178.375655][ T39] watchdog+0x1030/0x1030 [ 1178.380028][ T39] ? watchdog+0x1c7/0x1030 [ 1178.384491][ T39] kthread+0x38b/0x470 [ 1178.389112][ T39] ? __pfx_watchdog+0x10/0x10 [ 1178.393827][ T39] ? __pfx_kthread+0x10/0x10 [ 1178.398433][ T39] ret_from_fork+0x514/0xb70 [ 1178.403038][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1178.408262][ T39] ? __switch_to+0xc89/0x1420 [ 1178.413012][ T39] ? __pfx_kthread+0x10/0x10 [ 1178.417617][ T39] ret_from_fork_asm+0x1a/0x30 [ 1178.422403][ T39] [ 1178.426074][ T39] Kernel Offset: disabled [ 1178.430419][ T39] Rebooting in 86400 seconds..