last executing test programs: 50.377516549s ago: executing program 2 (id=190): syz_usb_connect(0x4, 0x32, &(0x7f0000000040)=ANY=[], 0x0) (async) nanosleep(&(0x7f0000000100)={0x2}, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 48.204348553s ago: executing program 3 (id=202): capset(0x0, &(0x7f0000000080)={0x1, 0x6, 0x2, 0x84, 0xffffffff, 0x40}) syz_open_dev$loop(0x0, 0xf, 0x58081) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x24}}, 0x4004004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 47.625651303s ago: executing program 3 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys/module/kernel/parameters/panic\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) open$dir(&(0x7f0000000240)='./proc\x00', 0x90000, 0x60) r1 = socket$kcm(0x10, 0x2, 0x0) symlink(&(0x7f00000003c0)='./sys/block/nullb0/queue/scheduler\x00', &(0x7f0000000480)='./sys\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x15) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfe, {0x24, 0x7, './sys/module/kernel/parameters/panic', './file0'}, [""]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$TCSETS(r2, 0x40384708, &(0x7f0000001040)={0x800004, 0x7, 0xe, 0x10, 0x11, "3e0000000100"}) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x128020, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x882802, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kernel/parameters/panic\x00', 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x3d7, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) read(r6, &(0x7f0000000400)=""/100, 0x64) socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="0201100100000008bd2834090000000000012102000000000300030009218100fd0122280009058103ff0303810adf209541b2173c42017038e69ba1d5adf07dc3971d791d99d712b3e342e70ab5e0852379bf3fb39c67020ae985f88fbe98"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200471"], 0x0, 0x0, 0x0, 0x0}, 0x0) write(r0, &(0x7f00000001c0)='kyber', 0x5) 47.038902765s ago: executing program 2 (id=204): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@llc, &(0x7f0000000100)=0x80) write(r1, &(0x7f0000000140)="debe01af65cb00da2aae47dffdd25b0dfce451e9b935005d9757ea0831132a352f37c0f40e3dcbe6dd52e343bff909aab6a0ebcea74ab46293662c5dab03b2a84c0a338583c25601fff510e5ab38db28a44240e1e706f5098fa3140a86bfd4e3663b5657a7f023655d76c4a60c04578aae494bf14b6cba203784f33f47755c78b1ad0cabbe5abdc0cacb33b0ab7a2ccebfcd4622c07dea2308bcf55295", 0x9d) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f00000002c0)='/dev/video#\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000380)=""/40, 0x28}], 0x2, 0xb7, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000400)) poll(&(0x7f0000000440)=[{r0, 0x580}, {r1, 0x2008}, {r2, 0x400}, {r2, 0x1080}, {r1, 0x80}, {r0, 0x1}, {r2, 0x10}, {r1, 0x20}], 0x8, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000500)={@l2tp={0x2, 0x0, @local, 0x4}, {&(0x7f0000000480)=""/21, 0x15}, &(0x7f00000004c0), 0x40}, 0xa0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) write(r2, &(0x7f0000000600)="7cbe24469e3b1e5f9b1e89aae0c5f13300bc752c0c9e87d17bdfbc59250cb7debe41be5441d072270be7628152de8bd955389c2a5c4330b1131ba3ea82ee5409fabdbe583aca42848a17d47e671b91345e", 0x51) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000006c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x40000, 0x0) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000740)) ioctl(r2, 0xfff, &(0x7f0000000780)="0015601e447864d6c862ca7ec665589a1bf62df8b8d5c42c87") inotify_init() ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x7, 0xd9, 0xcfc, 0x3, 0x7, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000840)={0x0, 0x3, 0xb4e7, 0x1dbb, r7}) ioctl$OCFS2_IOC_REFLINK(r6, 0x40186f04, &(0x7f0000000900)={&(0x7f0000000880)='/dev/kvm\x00', &(0x7f00000008c0)='\x00', 0x2}) r8 = creat(&(0x7f0000000940)='./file0\x00', 0x20) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000000980)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000009c0)={0x0, 0x8}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000a40)={0x1, 0x7, 0x0, 0x2, 0x4, 0xf926, 0xb3, 0x6, r9}, 0x20) r10 = fsmount(r8, 0x0, 0x74) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000a80)) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000b00)=@riscv64_aia_csr={0x8030000003010006, &(0x7f0000000ac0)=0xe}) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) 45.429287239s ago: executing program 3 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c000100060006000800000c100007007f0000017f000001910040001400020010000c"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 45.232767718s ago: executing program 3 (id=210): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x86ac0, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000002"], 0x24, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xa8, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="020f0000080000000000000000000000030005000000000002000000ffffffff0000000000000000030006000000000002000000e00000010000000000000000dd3200c0e24ee9f0702b62bf164b54075bc29f3981d4c171343e6db5edad3e84672d06ef58098b06eaf0f33562fe05b0c20a5cd4dfd159b3aa417a40efa8d5b2a39e4483ce31e20ef4a2c4efbbe48ba7e238f6ec856a2e7b7f0009d46e18b340a2836cece6e4dbe3c5b57e6279f67c815ea93c17230e996735d3b320"], 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r3, 0x47550000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x0, 0x9, 0x40, 0x0, 0x7, 0x1, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2\x00', 0x42c01, 0x0) 45.179877103s ago: executing program 0 (id=211): capset(0x0, &(0x7f0000000080)={0x1, 0x6, 0x2, 0x84, 0xffffffff, 0x40}) syz_open_dev$loop(0x0, 0xf, 0x58081) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x24}}, 0x4004004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 44.863102885s ago: executing program 0 (id=212): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400000040a882, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac0414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="7f67ce94fdf583bd58ce1f00a5540c8bd87b9401e929ef74a89928c755761465dee0a547da1b51817fe785db11f6378e31b79c09248a2f0f62f687332ee353b61a54f8b083d944ef57ea70f86b566665785736addc91b0d6c62e", 0x5a}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="b9", 0x1}], 0x1}}], 0x2, 0x0) syz_clone(0x2040800, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="fe5ca0acf87418c316a670ce9bf76256f8f68489b319fd3e10134fb473e3b0fab1a3ed076535fd50ed1a28cd517af67e587dc7bc4e2775b9b0ed0d") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r4, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) io_setup(0x2, &(0x7f0000000400)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xff2e) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYRESHEX=r3, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c"], 0x23c}, 0x1, 0x0, 0x0, 0x8045}, 0x4000) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r5, 0x0) dup3(r6, r1, 0x80000) 44.449283492s ago: executing program 1 (id=213): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x840) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000103) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000120000000000aaff02000000000000000000000000000111"], 0xffe) 44.198699235s ago: executing program 1 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000002c0)="0f20d835080000000f22d80f009239dd000026674b0fc71b66b852000f00d00f78ff430f1e1f65430f0664440f22400f32c482b5be9800000000", 0x3a}], 0x1, 0x31, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.805608153s ago: executing program 0 (id=215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000588440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 43.400263812s ago: executing program 0 (id=216): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) (fail_nth: 3) 42.965116067s ago: executing program 0 (id=217): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0x20) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x2, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0xfe, 0x20}, 0xe) (async, rerun: 32) shutdown(r1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x4}, 0x8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) timer_create(0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, 0x0, 0x0) (async) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2fe5, 0x4000000000, &(0x7f0000006680)) (async) mbind(&(0x7f00005cc000/0x2000)=nil, 0x2000, 0x3, 0x0, 0xb, 0x1) (async) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0x601, 0xfffffffffffffff4}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$pidfd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) r7 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x100010, r8, 0x26ad7000) socket$kcm(0x2, 0x3, 0x2) 41.747732934s ago: executing program 2 (id=218): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) 41.594708013s ago: executing program 2 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") write(r0, &(0x7f0000000438)="000000000000000000800000000000000000000000000000636163686500000000000000373a302037", 0x29) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="04000000000000000000005c7c0100003801000001") 41.395747546s ago: executing program 3 (id=220): capset(0x0, &(0x7f0000000080)={0x1, 0x6, 0x2, 0x84, 0xffffffff, 0x40}) syz_open_dev$loop(0x0, 0xf, 0x58081) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x24}}, 0x4004004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 41.378365767s ago: executing program 1 (id=221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x400c941) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.152822688s ago: executing program 2 (id=222): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r3, 0x903, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4044810, &(0x7f0000000280)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x20, 0x40, 0x10}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf250100000008000100", @ANYRES32=r11], 0x1c8}, 0x1, 0x400000000000000, 0x0, 0x4810}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x10, 0x20, 0x8, 0x8, {{0x38, 0x4, 0x1, 0x29, 0xe0, 0x67, 0x0, 0x18, 0x2d, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x34, 0x6, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x2}, {@remote, 0x200}, {@private=0xa010100, 0x7}, {@broadcast, 0x8}]}, @lsrr={0x83, 0x7, 0xec, [@multicast1]}, @timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x8, [{@local, 0xeb4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x2}, {@private=0xa010102, 0xc825}]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x7, 0xb, "3a89c672c643ed5fa4"}, {0x1, 0xc, "58d3df52bcd7bbffb209"}, {0x7, 0x12, "98171c30e8489efbbc7c44c1219dc44b"}, {0x6, 0x3, "04"}, {0x2, 0x6, "f8ac900e"}]}, @cipso={0x86, 0x2a, 0x2, [{0x6, 0x5, "a5e88e"}, {0xa, 0x2}, {0x7, 0xa, "7c589756c11ea97f"}, {0x6, 0xd, "bb73a55d5eaea9e55b9b89"}, {0x0, 0x6, "958ea7ce"}]}, @lsrr={0x83, 0x7, 0x38, [@loopback]}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@loopback, @local, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb8}}, 0x40004000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r14, 0xfffffffffffffffe, 0x29) ioctl$FAT_IOCTL_GET_VOLUME_ID(r14, 0x80047213, &(0x7f0000000100)) 41.016648152s ago: executing program 3 (id=223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01000000dd86140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 40.391040244s ago: executing program 2 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x128}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@cr0={0x0, 0x60010001}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 39.858203587s ago: executing program 1 (id=225): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0x20, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 39.666732763s ago: executing program 1 (id=226): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 4) 39.037715935s ago: executing program 0 (id=227): mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0xc0040, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0xa, 0x0, &(0x7f0000000080)) (async) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) (async) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000005, 0x7fffffff, 0x0, 0x1, 0x0, 0x7fffffffff7fffff, 0xffffffffffffff70, 0xa, 0x7f, 0x0, 0x80, 0x3, 0x6, 0x1, 0x1], 0xeeee0000, 0x300}) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="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", 0x148}], 0x2}}], 0x1, 0x2090) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd4ec5c341c0156ed616124c8d5f2aeffffff7f000000005df79aec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df475710215facd37b35605811f4af67f99977c186c32df773c81e81f1543adb", 0xfffffffffffffe44}, {&(0x7f0000000340)="37f00163ee64590eddc69225a76b0c705b43d255bb682c28fc62b9d27da33e7fd1c9f3f83d7292ca519c643a0c26e004b98f6755b5456afb57a36b83100e28affe312181983618c81414e3782b174522a8ff7ddff631251728d3a1110d86459c876a912701116b222ab6038d2d1747808826804d7d89d8b376011e37", 0x53}], 0x4) write(r4, &(0x7f0000001e00)="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", 0x4af) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,ctrl_loss_tmo=', 0xaf) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/usb/devices/usb1/bNumInterfaces\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/21, 0x15) 38.996670686s ago: executing program 1 (id=228): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0xf4ffffff, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 0s ago: executing program 32 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x128}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@cr0={0x0, 0x60010001}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): PREEMPT(full) [ 87.844746][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 87.844765][ T5769] Call Trace: [ 87.844776][ T5769] [ 87.844785][ T5769] dump_stack_lvl+0xe8/0x150 [ 87.844841][ T5769] should_fail_ex+0x3eb/0x540 [ 87.844871][ T5769] should_failslab+0xa8/0x100 [ 87.844896][ T5769] __kmalloc_noprof+0xf9/0x710 [ 87.844925][ T5769] ? rcu_is_watching+0x16/0xb0 [ 87.844947][ T5769] ? tomoyo_realpath_from_path+0xef/0x640 [ 87.844981][ T5769] ? tomoyo_realpath_from_path+0xef/0x640 [ 87.845015][ T5769] tomoyo_realpath_from_path+0xef/0x640 [ 87.845054][ T5769] tomoyo_check_open_permission+0x229/0x470 [ 87.845078][ T5769] ? tomoyo_check_open_permission+0x1d3/0x470 [ 87.845099][ T5769] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 87.845123][ T5769] ? __asan_memset+0x22/0x50 [ 87.845180][ T5769] ? do_raw_spin_lock+0x12b/0x2f0 [ 87.845206][ T5769] ? tomoyo_file_open+0x163/0x220 [ 87.845237][ T5769] security_file_open+0xa9/0x240 [ 87.845258][ T5769] do_dentry_open+0x495/0x1360 [ 87.845290][ T5769] vfs_open_consume+0x4a/0x350 [ 87.845311][ T5769] ? path_openat+0x14bb/0x1e40 [ 87.845345][ T5769] path_openat+0x14d7/0x1e40 [ 87.845394][ T5769] do_file_open+0x23e/0x4a0 [ 87.845430][ T5769] ? __pfx_do_file_open+0x10/0x10 [ 87.845483][ T5769] ? _raw_spin_unlock+0x28/0x50 [ 87.845510][ T5769] ? alloc_fd+0x651/0x6c0 [ 87.845545][ T5769] do_sys_openat2+0x115/0x200 [ 87.845569][ T5769] ? __se_sys_futex+0x3a8/0x450 [ 87.845592][ T5769] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.845621][ T5769] ? rcu_is_watching+0x16/0xb0 [ 87.845647][ T5769] __x64_sys_openat+0x138/0x170 [ 87.845676][ T5769] do_syscall_64+0x166/0x520 [ 87.845713][ T5769] ? trace_irq_disable+0x3b/0x140 [ 87.845744][ T5769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.845766][ T5769] ? clear_bhb_loop+0x70/0xc0 [ 87.845793][ T5769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.845815][ T5769] RIP: 0033:0x7fecd3b5e98e [ 87.845843][ T5769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.845862][ T5769] RSP: 002b:00007fecd4ae8f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.845890][ T5769] RAX: ffffffffffffffda RBX: 00007fecd4ae96c0 RCX: 00007fecd3b5e98e [ 87.845907][ T5769] RDX: 0000000000000000 RSI: 00007fecd3c34776 RDI: ffffffffffffff9c [ 87.845922][ T5769] RBP: 00007fecd3c3503b R08: 0000000000000000 R09: 0000000000000000 [ 87.845954][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.845974][ T5769] R13: 00007fecd3e26038 R14: 00007fecd3e25fa0 R15: 00007ffe6d00f368 [ 87.846027][ T5769] [ 87.846071][ T5769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.871655][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.871706][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.186125][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.186147][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.314592][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.314614][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.439553][ T5773] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 88.508223][ T5773] block nbd3: not configured, cannot reconfigure [ 88.558683][ T5773] FAULT_INJECTION: forcing a failure. [ 88.558683][ T5773] name fail_futex, interval 1, probability 0, space 0, times 1 [ 88.558717][ T5773] CPU: 0 UID: 0 PID: 5773 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 88.558742][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 88.558755][ T5773] Call Trace: [ 88.558765][ T5773] [ 88.558774][ T5773] dump_stack_lvl+0xe8/0x150 [ 88.558808][ T5773] should_fail_ex+0x3eb/0x540 [ 88.558838][ T5773] get_futex_key+0x1b4/0x1580 [ 88.558879][ T5773] ? __pfx_futex_wake_mark+0x10/0x10 [ 88.558913][ T5773] ? __pfx_get_futex_key+0x10/0x10 [ 88.558961][ T5773] futex_wake+0x119/0x5f0 [ 88.558996][ T5773] ? __pfx_futex_wake+0x10/0x10 [ 88.559041][ T5773] do_futex+0x458/0x4e0 [ 88.559072][ T5773] ? __pfx_do_futex+0x10/0x10 [ 88.559106][ T5773] __se_sys_futex+0x3a8/0x450 [ 88.559135][ T5773] ? __fget_files+0x2a/0x420 [ 88.559163][ T5773] ? __pfx___se_sys_futex+0x10/0x10 [ 88.559185][ T5773] ? __fget_files+0x2a/0x420 [ 88.559211][ T5773] ? rcu_is_watching+0x16/0xb0 [ 88.559239][ T5773] ? __x64_sys_futex+0x21/0xf0 [ 88.559267][ T5773] do_syscall_64+0x166/0x520 [ 88.559288][ T5773] ? trace_irq_disable+0x3b/0x140 [ 88.559320][ T5773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.559342][ T5773] ? clear_bhb_loop+0x70/0xc0 [ 88.559370][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.559400][ T5773] RIP: 0033:0x7f64bd59e159 [ 88.559420][ T5773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.559439][ T5773] RSP: 002b:00007f64be48b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.559463][ T5773] RAX: ffffffffffffffda RBX: 00007f64bd825fa8 RCX: 00007f64bd59e159 [ 88.559479][ T5773] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64bd825fac [ 88.559494][ T5773] RBP: 00007f64bd825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 88.559509][ T5773] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 88.559523][ T5773] R13: 00007f64bd826038 R14: 00007fff2cf11380 R15: 00007fff2cf11468 [ 88.559557][ T5773] [ 88.811500][ T5779] netlink: Unknown conntrack attr (0) [ 88.812260][ T5779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.886010][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 88.909334][ T5777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.067654][ T5786] ERROR: Out of memory at tomoyo_memory_ok. [ 89.143134][ T5790] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.173668][ T5622] Bluetooth: hci0: command tx timeout [ 89.173730][ T5622] Bluetooth: hci2: command tx timeout [ 89.173786][ T5617] Bluetooth: hci1: command tx timeout [ 89.252274][ T5617] Bluetooth: hci3: command tx timeout [ 89.267745][ T5795] nftables ruleset with unbound set [ 89.309554][ T5794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 89.645311][ T5814] FAULT_INJECTION: forcing a failure. [ 89.645311][ T5814] name failslab, interval 1, probability 0, space 0, times 0 [ 89.645343][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 89.645369][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 89.645382][ T5814] Call Trace: [ 89.645390][ T5814] [ 89.645399][ T5814] dump_stack_lvl+0xe8/0x150 [ 89.645432][ T5814] should_fail_ex+0x3eb/0x540 [ 89.645461][ T5814] should_failslab+0xa8/0x100 [ 89.645485][ T5814] ? skb_ext_add+0x148/0x8e0 [ 89.645508][ T5814] kmem_cache_alloc_noprof+0x9c/0x600 [ 89.645540][ T5814] ? skb_ext_add+0x148/0x8e0 [ 89.645568][ T5814] skb_ext_add+0x148/0x8e0 [ 89.645590][ T5814] ? dev_get_by_index+0x22/0x2d0 [ 89.645624][ T5814] isotp_sendmsg+0xa7d/0x1cb0 [ 89.645674][ T5814] ? __pfx_isotp_sendmsg+0x10/0x10 [ 89.645707][ T5814] ? __pfx_aa_sk_perm+0x10/0x10 [ 89.645733][ T5814] ? aa_sock_msg_perm+0x144/0x210 [ 89.645763][ T5814] ? apparmor_socket_sendmsg+0x98/0x360 [ 89.645834][ T5814] ? __pfx_isotp_sendmsg+0x10/0x10 [ 89.645862][ T5814] sock_sendmsg_nosec+0x13a/0x180 [ 89.645896][ T5814] __sys_sendto+0x408/0x5a0 [ 89.645918][ T5814] ? ksys_write+0x1e6/0x270 [ 89.645953][ T5814] ? __pfx___sys_sendto+0x10/0x10 [ 89.645973][ T5814] ? __mutex_unlock_slowpath+0x731/0x900 [ 89.646024][ T5814] ? __pfx_ksys_write+0x10/0x10 [ 89.646061][ T5814] __x64_sys_sendto+0xde/0x100 [ 89.646088][ T5814] do_syscall_64+0x166/0x520 [ 89.646107][ T5814] ? trace_irq_disable+0x3b/0x140 [ 89.646139][ T5814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.646163][ T5814] ? clear_bhb_loop+0x70/0xc0 [ 89.646191][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.646214][ T5814] RIP: 0033:0x7fe10739e159 [ 89.646235][ T5814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.646253][ T5814] RSP: 002b:00007fe108343028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.646277][ T5814] RAX: ffffffffffffffda RBX: 00007fe107625fa0 RCX: 00007fe10739e159 [ 89.646294][ T5814] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 89.646308][ T5814] RBP: 00007fe108343090 R08: 0000000000000000 R09: 0000000000000000 [ 89.646323][ T5814] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 89.646336][ T5814] R13: 00007fe107626038 R14: 00007fe107625fa0 R15: 00007ffd41b073a8 [ 89.646369][ T5814] [ 90.081497][ T31] audit: type=1807 audit(1789517739.459:2): func=FILE_CHECK res=0 [ 90.082415][ T31] audit: type=1802 audit(1789517739.469:3): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.21" res=0 errno=0 [ 90.115893][ T5815] ima: policy update failed [ 90.116369][ T31] audit: type=1802 audit(1789517739.499:4): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.21" res=0 errno=0 [ 90.166401][ T5819] FAULT_INJECTION: forcing a failure. [ 90.166401][ T5819] name failslab, interval 1, probability 0, space 0, times 0 [ 90.166435][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 90.166462][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 90.166475][ T5819] Call Trace: [ 90.166483][ T5819] [ 90.166492][ T5819] dump_stack_lvl+0xe8/0x150 [ 90.166527][ T5819] should_fail_ex+0x3eb/0x540 [ 90.166555][ T5819] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.166586][ T5819] should_failslab+0xa8/0x100 [ 90.166613][ T5819] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.166642][ T5819] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 90.166677][ T5819] ? sock_alloc_inode+0x2c/0x1a0 [ 90.166706][ T5819] ? sock_alloc_inode+0x2c/0x1a0 [ 90.166753][ T5819] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.166784][ T5819] sock_alloc_inode+0x2c/0x1a0 [ 90.166815][ T5819] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.166845][ T5819] alloc_inode+0x6a/0x1b0 [ 90.166875][ T5819] __sock_create+0x127/0xac0 [ 90.166910][ T5819] ? __pfx___se_sys_setns+0x10/0x10 [ 90.166942][ T5819] __sys_socket+0xd6/0x1b0 [ 90.166980][ T5819] __x64_sys_socket+0x7a/0x90 [ 90.167018][ T5819] do_syscall_64+0x166/0x520 [ 90.167040][ T5819] ? trace_irq_disable+0x3b/0x140 [ 90.167074][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.167098][ T5819] ? clear_bhb_loop+0x70/0xc0 [ 90.167126][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.167149][ T5819] RIP: 0033:0x7fe10739e159 [ 90.167170][ T5819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.167189][ T5819] RSP: 002b:00007fe108342fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 90.167214][ T5819] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe10739e159 [ 90.167231][ T5819] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 90.167245][ T5819] RBP: 00007fe10743503b R08: 0000000000000000 R09: 0000000000000000 [ 90.167260][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.167273][ T5819] R13: 00007fe107626038 R14: 00007fe107625fa0 R15: 00007ffd41b073a8 [ 90.167309][ T5819] [ 90.169885][ T5819] socket: no more sockets [ 90.523759][ T5822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.597562][ T5828] netlink: 128 bytes leftover after parsing attributes in process `syz.0.28'. [ 90.635157][ T5830] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 90.920616][ T5841] loop0: detected capacity change from 0 to 32768 [ 90.950819][ T5843] netlink: 5 bytes leftover after parsing attributes in process `syz.2.34'. [ 90.951434][ T5843] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 90.973467][ T5843] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 90.979262][ T5841] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 91.010160][ T5841] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4293853188.0.0), cmd(9) [ 91.010626][ T5841] device-mapper: ioctl: The device has no table. [ 91.023073][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.183411][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 91.190840][ T5846] FAULT_INJECTION: forcing a failure. [ 91.190840][ T5846] name failslab, interval 1, probability 0, space 0, times 0 [ 91.190885][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) [ 91.190911][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 91.190924][ T5846] Call Trace: [ 91.190933][ T5846] [ 91.190943][ T5846] dump_stack_lvl+0xe8/0x150 [ 91.190978][ T5846] should_fail_ex+0x3eb/0x540 [ 91.191017][ T5846] ? __pfx_sock_alloc_inode+0x10/0x10 [ 91.191044][ T5846] should_failslab+0xa8/0x100 [ 91.191069][ T5846] ? __pfx_sock_alloc_inode+0x10/0x10 [ 91.191112][ T5846] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 91.191145][ T5846] ? sock_alloc_inode+0x2c/0x1a0 [ 91.191174][ T5846] ? sock_alloc_inode+0x2c/0x1a0 [ 91.191207][ T5846] ? __pfx_sock_alloc_inode+0x10/0x10 [ 91.191236][ T5846] sock_alloc_inode+0x2c/0x1a0 [ 91.191265][ T5846] ? __pfx_sock_alloc_inode+0x10/0x10 [ 91.191316][ T5846] alloc_inode+0x6a/0x1b0 [ 91.191344][ T5846] __sock_create+0x127/0xac0 [ 91.191376][ T5846] ? __pfx___se_sys_setns+0x10/0x10 [ 91.191404][ T5846] __sys_socket+0xd6/0x1b0 [ 91.191436][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.191439][ T5846] __x64_sys_socket+0x7a/0x90 [ 91.191470][ T5846] do_syscall_64+0x166/0x520 [ 91.191489][ T5846] ? trace_irq_disable+0x3b/0x140 [ 91.191520][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.191541][ T5846] ? clear_bhb_loop+0x70/0xc0 [ 91.191566][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.191588][ T5846] RIP: 0033:0x7fe10739e159 [ 91.191607][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.191624][ T5846] RSP: 002b:00007fe108342fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 91.191647][ T5846] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe10739e159 [ 91.191662][ T5846] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 91.191674][ T5846] RBP: 00007fe10743503b R08: 0000000000000000 R09: 0000000000000000 [ 91.191687][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.191700][ T5846] R13: 00007fe107626038 R14: 00007fe107625fa0 R15: 00007ffd41b073a8 [ 91.191731][ T5846] [ 91.192627][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 91.311005][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.311090][ T10] usb 2-1: Product: syz [ 91.311134][ T10] usb 2-1: Manufacturer: syz [ 91.311172][ T10] usb 2-1: SerialNumber: syz [ 91.327104][ T5846] socket: no more sockets [ 91.514925][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 91.514962][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 91.727269][ T5864] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 91.756106][ T10] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 91.917022][ T189] cfg80211: failed to load regulatory.db [ 91.975907][ T5871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.079857][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 92.140136][ T10] usb 2-1: USB disconnect, device number 2 [ 92.319650][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.401907][ T189] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.494023][ T5890] FAULT_INJECTION: forcing a failure. [ 92.494023][ T5890] name failslab, interval 1, probability 0, space 0, times 0 [ 92.494071][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 92.494095][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 92.494108][ T5890] Call Trace: [ 92.494116][ T5890] [ 92.494126][ T5890] dump_stack_lvl+0xe8/0x150 [ 92.494160][ T5890] should_fail_ex+0x3eb/0x540 [ 92.494190][ T5890] should_failslab+0xa8/0x100 [ 92.494213][ T5890] ? skb_clone+0x212/0x3a0 [ 92.494239][ T5890] kmem_cache_alloc_noprof+0x9c/0x600 [ 92.494273][ T5890] ? skb_clone+0x212/0x3a0 [ 92.494305][ T5890] skb_clone+0x212/0x3a0 [ 92.494334][ T5890] __netlink_deliver_tap+0x413/0x860 [ 92.494374][ T5890] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.494404][ T5890] netlink_deliver_tap+0x19c/0x1b0 [ 92.494434][ T5890] netlink_unicast+0x781/0x940 [ 92.494470][ T5890] netlink_sendmsg+0x7c3/0xae0 [ 92.494505][ T5890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.494558][ T5890] ? apparmor_socket_sendmsg+0x98/0x360 [ 92.494583][ T5890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.494609][ T5890] sock_sendmsg_nosec+0x13a/0x180 [ 92.494644][ T5890] ____sys_sendmsg+0x54e/0x850 [ 92.494673][ T5890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.494705][ T5890] ? import_iovec+0x73/0xa0 [ 92.494736][ T5890] ___sys_sendmsg+0x2a5/0x360 [ 92.494758][ T5890] ? __lock_acquire+0x747/0x2de0 [ 92.494792][ T5890] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.494848][ T5890] ? __fget_files+0x2a/0x420 [ 92.494874][ T5890] ? __fget_files+0x3a2/0x420 [ 92.494910][ T5890] __x64_sys_sendmsg+0x1b1/0x290 [ 92.494936][ T5890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.494979][ T5890] do_syscall_64+0x166/0x520 [ 92.494999][ T5890] ? trace_irq_disable+0x3b/0x140 [ 92.495028][ T5890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.495049][ T5890] ? clear_bhb_loop+0x70/0xc0 [ 92.495075][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.495095][ T5890] RIP: 0033:0x7f2d9039e159 [ 92.495114][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.495131][ T5890] RSP: 002b:00007f2d912e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.495153][ T5890] RAX: ffffffffffffffda RBX: 00007f2d90625fa0 RCX: 00007f2d9039e159 [ 92.495168][ T5890] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 92.495181][ T5890] RBP: 00007f2d912e7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.495194][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.495206][ T5890] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 92.495238][ T5890] [ 92.556627][ T189] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 92.567728][ T189] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 92.567786][ T189] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 92.567837][ T189] usb 4-1: config 220 has no interface number 2 [ 92.567989][ T189] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 92.568068][ T189] usb 4-1: config 220 interface 0 has no altsetting 0 [ 92.568117][ T189] usb 4-1: config 220 interface 76 has no altsetting 0 [ 92.568173][ T189] usb 4-1: config 220 interface 1 has no altsetting 0 [ 92.638253][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.638327][ T189] usb 4-1: Product: syz [ 92.638366][ T189] usb 4-1: Manufacturer: syz [ 92.638406][ T189] usb 4-1: SerialNumber: syz [ 92.883458][ T5888] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 92.883495][ T5888] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 92.883544][ T5888] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 92.890634][ T5888] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.951500][ T5888] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.011405][ T5894] FAULT_INJECTION: forcing a failure. [ 93.011405][ T5894] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.011436][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(full) [ 93.011461][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 93.011474][ T5894] Call Trace: [ 93.011483][ T5894] [ 93.011501][ T5894] dump_stack_lvl+0xe8/0x150 [ 93.011540][ T5894] should_fail_ex+0x3eb/0x540 [ 93.011571][ T5894] _copy_to_user+0x31/0xb0 [ 93.011603][ T5894] simple_read_from_buffer+0xe1/0x170 [ 93.011639][ T5894] proc_fail_nth_read+0x1bb/0x230 [ 93.011676][ T5894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.011712][ T5894] ? rw_verify_area+0x24a/0x4c0 [ 93.011745][ T5894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.011777][ T5894] vfs_read+0x213/0xa80 [ 93.011812][ T5894] ? __pfx___mutex_lock+0x10/0x10 [ 93.011833][ T5894] ? __pfx_vfs_read+0x10/0x10 [ 93.011864][ T5894] ? __fget_files+0x2a/0x420 [ 93.011909][ T5894] ? __fget_files+0x3a2/0x420 [ 93.011935][ T5894] ? __fget_files+0x2a/0x420 [ 93.011970][ T5894] ksys_read+0x150/0x270 [ 93.012001][ T5894] ? __pfx_ksys_read+0x10/0x10 [ 93.012030][ T5894] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 93.012070][ T5894] do_syscall_64+0x166/0x520 [ 93.012090][ T5894] ? trace_irq_disable+0x3b/0x140 [ 93.012121][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.012143][ T5894] ? clear_bhb_loop+0x70/0xc0 [ 93.012170][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.012191][ T5894] RIP: 0033:0x7f2d9035e98e [ 93.012212][ T5894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.012229][ T5894] RSP: 002b:00007f2d912e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.012252][ T5894] RAX: ffffffffffffffda RBX: 00007f2d912e76c0 RCX: 00007f2d9035e98e [ 93.012268][ T5894] RDX: 000000000000000f RSI: 00007f2d912e70a0 RDI: 0000000000000004 [ 93.012281][ T5894] RBP: 00007f2d912e7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.012294][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.012306][ T5894] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 93.012334][ T5894] [ 93.204605][ T5744] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 93.310932][ T12] smbdirect: ib_dev[syz2] removed [ 93.338139][ T5896] FAULT_INJECTION: forcing a failure. [ 93.338139][ T5896] name failslab, interval 1, probability 0, space 0, times 0 [ 93.338169][ T5896] CPU: 1 UID: 0 PID: 5896 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 93.338185][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 93.338194][ T5896] Call Trace: [ 93.338200][ T5896] [ 93.338206][ T5896] dump_stack_lvl+0xe8/0x150 [ 93.338247][ T5896] should_fail_ex+0x3eb/0x540 [ 93.338276][ T5896] should_failslab+0xa8/0x100 [ 93.338300][ T5896] __kmalloc_noprof+0xf9/0x710 [ 93.338332][ T5896] ? rcu_is_watching+0x16/0xb0 [ 93.338347][ T5896] ? tomoyo_realpath_from_path+0xef/0x640 [ 93.338366][ T5896] ? tomoyo_realpath_from_path+0xef/0x640 [ 93.338408][ T5896] tomoyo_realpath_from_path+0xef/0x640 [ 93.338447][ T5896] tomoyo_check_open_permission+0x229/0x470 [ 93.338480][ T5896] ? tomoyo_check_open_permission+0x1d3/0x470 [ 93.338496][ T5896] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 93.338512][ T5896] ? __asan_memset+0x22/0x50 [ 93.338574][ T5896] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.338600][ T5896] ? tomoyo_file_open+0x163/0x220 [ 93.338636][ T5896] security_file_open+0xa9/0x240 [ 93.338651][ T5896] do_dentry_open+0x495/0x1360 [ 93.338679][ T5896] vfs_open_consume+0x4a/0x350 [ 93.338709][ T5896] ? path_openat+0x14bb/0x1e40 [ 93.338764][ T5896] path_openat+0x14d7/0x1e40 [ 93.338815][ T5896] do_file_open+0x23e/0x4a0 [ 93.338843][ T5896] ? __pfx_do_file_open+0x10/0x10 [ 93.338914][ T5896] ? _raw_spin_unlock+0x28/0x50 [ 93.338944][ T5896] ? alloc_fd+0x651/0x6c0 [ 93.338981][ T5896] do_sys_openat2+0x115/0x200 [ 93.338999][ T5896] ? __se_sys_futex+0x3a8/0x450 [ 93.339039][ T5896] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.339069][ T5896] ? __pfx___se_sys_futex+0x10/0x10 [ 93.339093][ T5896] ? rcu_is_watching+0x16/0xb0 [ 93.339121][ T5896] __x64_sys_openat+0x138/0x170 [ 93.339144][ T5896] do_syscall_64+0x166/0x520 [ 93.339158][ T5896] ? trace_irq_disable+0x3b/0x140 [ 93.339204][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.339227][ T5896] ? clear_bhb_loop+0x70/0xc0 [ 93.339254][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.339279][ T5896] RIP: 0033:0x7f2d9035e98e [ 93.339294][ T5896] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.339307][ T5896] RSP: 002b:00007f2d912e6f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.339339][ T5896] RAX: ffffffffffffffda RBX: 00007f2d912e76c0 RCX: 00007f2d9035e98e [ 93.339357][ T5896] RDX: 0000000000000000 RSI: 00007f2d90434776 RDI: ffffffffffffff9c [ 93.339373][ T5896] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 93.339386][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.339399][ T5896] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 93.339436][ T5896] [ 93.339479][ T5896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.441608][ T5744] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 93.534142][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.534165][ T5744] usb 2-1: Product: syz [ 93.534178][ T5744] usb 2-1: Manufacturer: syz [ 93.534190][ T5744] usb 2-1: SerialNumber: syz [ 93.686123][ T5744] usb 2-1: config 0 descriptor?? [ 93.699196][ T5744] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 93.856911][ T5902] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 93.954773][ T5912] netlink: 44 bytes leftover after parsing attributes in process `syz.2.50'. [ 94.020832][ T5912] PID 5912 killed due to inadequate hugepage pool [ 94.443964][ T5744] gspca_stk1135: reg_w 0x7 err -110 [ 94.447404][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 94.447421][ T5744] gspca_stk1135: Sensor write failed [ 94.447460][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 94.447471][ T5744] gspca_stk1135: Sensor write failed [ 94.447509][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 94.447520][ T5744] gspca_stk1135: Sensor read failed [ 94.447557][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 94.447567][ T5744] gspca_stk1135: Sensor read failed [ 94.447576][ T5744] gspca_stk1135: Detected sensor type unknown (0x0) [ 94.447623][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 94.447649][ T5744] gspca_stk1135: Sensor read failed [ 94.447685][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 94.447696][ T5744] gspca_stk1135: Sensor read failed [ 94.447734][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 94.447745][ T5744] gspca_stk1135: Sensor write failed [ 94.447780][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 94.447790][ T5744] gspca_stk1135: Sensor write failed [ 94.447870][ T5744] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 94.598253][ T5926] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 94.673999][ T5928] FAULT_INJECTION: forcing a failure. [ 94.673999][ T5928] name failslab, interval 1, probability 0, space 0, times 0 [ 94.674031][ T5928] CPU: 1 UID: 0 PID: 5928 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(full) [ 94.674056][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 94.674069][ T5928] Call Trace: [ 94.674078][ T5928] [ 94.674087][ T5928] dump_stack_lvl+0xe8/0x150 [ 94.674120][ T5928] should_fail_ex+0x3eb/0x540 [ 94.674150][ T5928] should_failslab+0xa8/0x100 [ 94.674175][ T5928] __kmalloc_noprof+0xf9/0x710 [ 94.674207][ T5928] ? sk_prot_alloc+0xe7/0x210 [ 94.674227][ T5928] ? sk_prot_alloc+0xe7/0x210 [ 94.674249][ T5928] ? security_inode_alloc+0x39/0x310 [ 94.674280][ T5928] sk_prot_alloc+0xe7/0x210 [ 94.674300][ T5928] ? sk_alloc+0x27/0x390 [ 94.674324][ T5928] sk_alloc+0x3a/0x390 [ 94.674349][ T5928] bt_sock_alloc+0x3b/0x330 [ 94.674403][ T5928] sco_sock_create+0xbc/0x3e0 [ 94.674434][ T5928] bt_sock_create+0x163/0x240 [ 94.674459][ T5928] __sock_create+0x4b5/0xac0 [ 94.674500][ T5928] __sys_socket+0xd6/0x1b0 [ 94.674546][ T5928] __x64_sys_socket+0x7a/0x90 [ 94.674595][ T5928] do_syscall_64+0x166/0x520 [ 94.674616][ T5928] ? trace_irq_disable+0x3b/0x140 [ 94.674646][ T5928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.674670][ T5928] ? clear_bhb_loop+0x70/0xc0 [ 94.674697][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.674720][ T5928] RIP: 0033:0x7f2d9039e159 [ 94.674740][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.674758][ T5928] RSP: 002b:00007f2d912e6fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 94.674782][ T5928] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2d9039e159 [ 94.674808][ T5928] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 94.674821][ T5928] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 94.674836][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.674849][ T5928] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 94.674883][ T5928] [ 94.938633][ T189] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 94.938680][ T189] uvcvideo 4-1:220.0: No valid video chain found. [ 94.938791][ T189] usb 4-1: selecting invalid altsetting 0 [ 95.000908][ T189] usb 4-1: selecting invalid altsetting 0 [ 95.000940][ T189] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 95.027433][ T189] usb 4-1: USB disconnect, device number 2 [ 95.200192][ T5935] openvswitch: netlink: Missing key (keys=c0, expected=2000) [ 95.324058][ T5939] atomic_op ffff88805a38c9e0 conn xmit_atomic 0000000000000000 [ 95.432174][ T189] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 95.470827][ T5946] FAULT_INJECTION: forcing a failure. [ 95.470827][ T5946] name failslab, interval 1, probability 0, space 0, times 0 [ 95.470857][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 95.470880][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 95.470892][ T5946] Call Trace: [ 95.470900][ T5946] [ 95.470909][ T5946] dump_stack_lvl+0xe8/0x150 [ 95.470942][ T5946] should_fail_ex+0x3eb/0x540 [ 95.470970][ T5946] should_failslab+0xa8/0x100 [ 95.470993][ T5946] ? security_inode_alloc+0x39/0x310 [ 95.471020][ T5946] kmem_cache_alloc_noprof+0x9c/0x600 [ 95.471054][ T5946] ? make_kgid+0x1d1/0x6a0 [ 95.471081][ T5946] ? rcu_is_watching+0x16/0xb0 [ 95.471104][ T5946] ? security_inode_alloc+0x39/0x310 [ 95.471135][ T5946] security_inode_alloc+0x39/0x310 [ 95.471163][ T5946] inode_init_always_gfp+0x97e/0xd30 [ 95.471192][ T5946] ? __pfx_sock_alloc_inode+0x10/0x10 [ 95.471222][ T5946] alloc_inode+0x82/0x1b0 [ 95.471247][ T5946] __sock_create+0x127/0xac0 [ 95.471279][ T5946] ? __pfx___se_sys_setns+0x10/0x10 [ 95.471308][ T5946] __sys_socket+0xd6/0x1b0 [ 95.471341][ T5946] __x64_sys_socket+0x7a/0x90 [ 95.471372][ T5946] do_syscall_64+0x166/0x520 [ 95.471408][ T5946] ? trace_irq_disable+0x3b/0x140 [ 95.471440][ T5946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.471463][ T5946] ? clear_bhb_loop+0x70/0xc0 [ 95.471491][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.471514][ T5946] RIP: 0033:0x7f2d9039e159 [ 95.471534][ T5946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.471552][ T5946] RSP: 002b:00007f2d912e6fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 95.471576][ T5946] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2d9039e159 [ 95.471602][ T5946] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 95.471614][ T5946] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 95.471628][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.471640][ T5946] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 95.471671][ T5946] [ 95.573901][ T5946] socket: no more sockets [ 95.662023][ T189] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.700034][ T189] usb 4-1: not running at top speed; connect to a high speed hub [ 95.700138][ T189] usb 4-1: New USB device found, idVendor=1410, idProduct=a006, bcdDevice=f7.4e [ 95.726303][ T189] usb 4-1: config 5 has an invalid interface number: 89 but max is 2 [ 95.726332][ T189] usb 4-1: config 5 has an invalid interface number: 45 but max is 2 [ 95.726353][ T189] usb 4-1: config 5 has an invalid interface number: 26 but max is 2 [ 95.726374][ T189] usb 4-1: config 5 has no interface number 0 [ 95.726391][ T189] usb 4-1: config 5 has no interface number 1 [ 95.726408][ T189] usb 4-1: config 5 has no interface number 2 [ 95.726460][ T189] usb 4-1: config 5 interface 45 has no altsetting 0 [ 95.726479][ T189] usb 4-1: config 5 interface 26 has no altsetting 0 [ 95.734091][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.734160][ T189] usb 4-1: Product: syz [ 95.734199][ T189] usb 4-1: Manufacturer: syz [ 95.734241][ T189] usb 4-1: SerialNumber: syz [ 96.080368][ T5932] FAULT_INJECTION: forcing a failure. [ 96.080368][ T5932] name fail_futex, interval 1, probability 0, space 0, times 0 [ 96.080399][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT(full) [ 96.080421][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 96.080433][ T5932] Call Trace: [ 96.080441][ T5932] [ 96.080450][ T5932] dump_stack_lvl+0xe8/0x150 [ 96.080481][ T5932] should_fail_ex+0x3eb/0x540 [ 96.080508][ T5932] get_futex_key+0x1b4/0x1580 [ 96.080550][ T5932] ? __pfx_get_futex_key+0x10/0x10 [ 96.080580][ T5932] ? kasan_quarantine_put+0xbb/0x1f0 [ 96.080637][ T5932] futex_wake+0x119/0x5f0 [ 96.080670][ T5932] ? __pfx_futex_wake+0x10/0x10 [ 96.080720][ T5932] do_futex+0x458/0x4e0 [ 96.080759][ T5932] ? __pfx_do_futex+0x10/0x10 [ 96.080788][ T5932] __se_sys_futex+0x3a8/0x450 [ 96.080814][ T5932] ? __fget_files+0x2a/0x420 [ 96.080839][ T5932] ? __pfx___se_sys_futex+0x10/0x10 [ 96.080859][ T5932] ? __fget_files+0x2a/0x420 [ 96.080891][ T5932] ? __x64_sys_futex+0x21/0xf0 [ 96.080915][ T5932] do_syscall_64+0x166/0x520 [ 96.080933][ T5932] ? trace_irq_disable+0x3b/0x140 [ 96.080960][ T5932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.080981][ T5932] ? clear_bhb_loop+0x70/0xc0 [ 96.081005][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.081025][ T5932] RIP: 0033:0x7f64bd59e159 [ 96.081043][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.081058][ T5932] RSP: 002b:00007f64be48b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.081080][ T5932] RAX: ffffffffffffffda RBX: 00007f64bd825fa8 RCX: 00007f64bd59e159 [ 96.081098][ T5932] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64bd825fac [ 96.081110][ T5932] RBP: 00007f64bd825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 96.081124][ T5932] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 96.081135][ T5932] R13: 00007f64bd826038 R14: 00007fff2cf11380 R15: 00007fff2cf11468 [ 96.081167][ T5932] [ 96.416357][ T9] usb 2-1: USB disconnect, device number 3 [ 96.514423][ T189] usb 4-1: USB disconnect, device number 3 [ 96.753325][ T5971] FAULT_INJECTION: forcing a failure. [ 96.753325][ T5971] name failslab, interval 1, probability 0, space 0, times 0 [ 96.753357][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.1.73 Not tainted syzkaller #0 PREEMPT(full) [ 96.753381][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 96.753395][ T5971] Call Trace: [ 96.753403][ T5971] [ 96.753413][ T5971] dump_stack_lvl+0xe8/0x150 [ 96.753449][ T5971] should_fail_ex+0x3eb/0x540 [ 96.753480][ T5971] should_failslab+0xa8/0x100 [ 96.753507][ T5971] __kmalloc_noprof+0xf9/0x710 [ 96.753541][ T5971] ? sk_prot_alloc+0xe7/0x210 [ 96.753563][ T5971] ? sk_prot_alloc+0xe7/0x210 [ 96.753586][ T5971] ? security_inode_alloc+0x39/0x310 [ 96.753618][ T5971] sk_prot_alloc+0xe7/0x210 [ 96.753639][ T5971] ? sk_alloc+0x27/0x390 [ 96.753664][ T5971] sk_alloc+0x3a/0x390 [ 96.753691][ T5971] bt_sock_alloc+0x3b/0x330 [ 96.753730][ T5971] sco_sock_create+0xbc/0x3e0 [ 96.753761][ T5971] bt_sock_create+0x163/0x240 [ 96.753785][ T5971] __sock_create+0x4b5/0xac0 [ 96.753826][ T5971] __sys_socket+0xd6/0x1b0 [ 96.753862][ T5971] __x64_sys_socket+0x7a/0x90 [ 96.753896][ T5971] do_syscall_64+0x166/0x520 [ 96.753916][ T5971] ? trace_irq_disable+0x3b/0x140 [ 96.753948][ T5971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.753972][ T5971] ? clear_bhb_loop+0x70/0xc0 [ 96.754000][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.754022][ T5971] RIP: 0033:0x7fecd3b9e159 [ 96.754043][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.754061][ T5971] RSP: 002b:00007fecd4ae8fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 96.754085][ T5971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fecd3b9e159 [ 96.754100][ T5971] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 96.754113][ T5971] RBP: 00007fecd3c3503b R08: 0000000000000000 R09: 0000000000000000 [ 96.754127][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.754148][ T5971] R13: 00007fecd3e26038 R14: 00007fecd3e25fa0 R15: 00007ffe6d00f368 [ 96.754183][ T5971] [ 97.065154][ T31] audit: type=1400 audit(1789517746.449:5): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=5972 comm="syz.0.74" [ 97.182984][ T5982] netlink: 48 bytes leftover after parsing attributes in process `syz.3.76'. [ 97.392109][ T988] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.512434][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 97.541601][ T988] usb 3-1: Using ep0 maxpacket: 8 [ 97.542332][ T988] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.01 [ 97.543497][ T988] usb 3-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 97.543520][ T988] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.543553][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.603056][ T988] usb 3-1: config 0 descriptor?? [ 97.671647][ T189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.816849][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.819566][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.833018][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 97.842835][ T189] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 97.860422][ T189] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 97.873335][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.873362][ T189] usb 2-1: Product: syz [ 97.873378][ T189] usb 2-1: Manufacturer: syz [ 97.873394][ T189] usb 2-1: SerialNumber: syz [ 97.874886][ T6003] FAULT_INJECTION: forcing a failure. [ 97.874886][ T6003] name failslab, interval 1, probability 0, space 0, times 0 [ 97.874916][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT(full) [ 97.874942][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 97.874955][ T6003] Call Trace: [ 97.874964][ T6003] [ 97.874976][ T6003] dump_stack_lvl+0xe8/0x150 [ 97.875012][ T6003] should_fail_ex+0x3eb/0x540 [ 97.875041][ T6003] ? __alloc_skb+0x1db/0x7a0 [ 97.875061][ T6003] should_failslab+0xa8/0x100 [ 97.875087][ T6003] ? __alloc_skb+0x1db/0x7a0 [ 97.875105][ T6003] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 97.875137][ T6003] ? __alloc_skb+0x18d/0x7a0 [ 97.875158][ T6003] ? __alloc_skb+0x1db/0x7a0 [ 97.875185][ T6003] __alloc_skb+0x1db/0x7a0 [ 97.875211][ T6003] netlink_sendmsg+0x577/0xae0 [ 97.875247][ T6003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.875284][ T6003] ? apparmor_socket_sendmsg+0x98/0x360 [ 97.875311][ T6003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.875339][ T6003] sock_sendmsg_nosec+0x13a/0x180 [ 97.875373][ T6003] ____sys_sendmsg+0x54e/0x850 [ 97.875403][ T6003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.875438][ T6003] ? import_iovec+0x73/0xa0 [ 97.875470][ T6003] ___sys_sendmsg+0x2a5/0x360 [ 97.875502][ T6003] ? __lock_acquire+0x747/0x2de0 [ 97.875540][ T6003] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.875568][ T6003] ? futex_wake+0x51b/0x5f0 [ 97.875626][ T6003] ? __fget_files+0x2a/0x420 [ 97.875654][ T6003] ? __fget_files+0x3a2/0x420 [ 97.875692][ T6003] __x64_sys_sendmsg+0x1b1/0x290 [ 97.875720][ T6003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.875766][ T6003] do_syscall_64+0x166/0x520 [ 97.875787][ T6003] ? trace_irq_disable+0x3b/0x140 [ 97.875818][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.875841][ T6003] ? clear_bhb_loop+0x70/0xc0 [ 97.875869][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.875891][ T6003] RIP: 0033:0x7f2d9039e159 [ 97.875911][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.875929][ T6003] RSP: 002b:00007f2d912e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.875952][ T6003] RAX: ffffffffffffffda RBX: 00007f2d90625fa0 RCX: 00007f2d9039e159 [ 97.875969][ T6003] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 97.875983][ T6003] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 97.875997][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.876010][ T6003] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 97.876043][ T6003] [ 97.879074][ T189] usb 2-1: config 0 descriptor?? [ 98.118375][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.190396][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.216501][ T189] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 98.216963][ T189] dvb-usb: bulk message failed: -22 (2/0) [ 98.241024][ T189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.254040][ T189] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 98.254135][ T189] usb 2-1: media controller created [ 98.282465][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.285170][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.285719][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.332991][ T189] usb 2-1: selecting invalid altsetting 7 [ 98.333012][ T189] cxusb: set interface failed [ 98.333024][ T189] dvb-usb: bulk message failed: -22 (1/0) [ 98.392456][ T6012] FAULT_INJECTION: forcing a failure. [ 98.392456][ T6012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.392488][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(full) [ 98.392513][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 98.392526][ T6012] Call Trace: [ 98.392535][ T6012] [ 98.392544][ T6012] dump_stack_lvl+0xe8/0x150 [ 98.392577][ T6012] should_fail_ex+0x3eb/0x540 [ 98.392611][ T6012] _copy_to_iter+0x59c/0x1810 [ 98.392651][ T6012] ? __pfx__copy_to_iter+0x10/0x10 [ 98.392682][ T6012] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.392716][ T6012] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.392751][ T6012] __skb_datagram_iter+0xf8/0x980 [ 98.392780][ T6012] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 98.392816][ T6012] skb_copy_datagram_iter+0xb5/0x240 [ 98.392847][ T6012] netlink_recvmsg+0x2b9/0xa50 [ 98.392886][ T6012] ? __pfx_netlink_recvmsg+0x10/0x10 [ 98.392918][ T6012] ? aa_sock_msg_perm+0x144/0x210 [ 98.392958][ T6012] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 98.392982][ T6012] ? security_socket_recvmsg+0x7e/0x2c0 [ 98.393013][ T6012] ? __pfx_netlink_recvmsg+0x10/0x10 [ 98.393041][ T6012] sock_recvmsg+0x196/0x1e0 [ 98.393076][ T6012] ____sys_recvmsg+0x1e6/0x4a0 [ 98.393100][ T6012] ? iovec_from_user+0x87/0x250 [ 98.393135][ T6012] ? __pfx_____sys_recvmsg+0x10/0x10 [ 98.393176][ T6012] ? import_iovec+0x73/0xa0 [ 98.393207][ T6012] ___sys_recvmsg+0x213/0x5a0 [ 98.393233][ T6012] ? lock_acquire+0x115/0x350 [ 98.393266][ T6012] ? __pfx____sys_recvmsg+0x10/0x10 [ 98.393295][ T6012] ? lock_acquire+0x115/0x350 [ 98.393341][ T6012] ? __fget_files+0x3a2/0x420 [ 98.393381][ T6012] do_recvmmsg+0x31a/0x7f0 [ 98.393414][ T6012] ? __pfx_do_recvmmsg+0x10/0x10 [ 98.393453][ T6012] ? get_timespec64+0x119/0x1b0 [ 98.393474][ T6012] ? __pfx_get_timespec64+0x10/0x10 [ 98.393506][ T6012] __x64_sys_recvmmsg+0x1b7/0x250 [ 98.393535][ T6012] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 98.393573][ T6012] do_syscall_64+0x166/0x520 [ 98.393593][ T6012] ? trace_irq_disable+0x3b/0x140 [ 98.393625][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.393648][ T6012] ? clear_bhb_loop+0x70/0xc0 [ 98.393675][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.393697][ T6012] RIP: 0033:0x7f64bd59e159 [ 98.393716][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.393734][ T6012] RSP: 002b:00007f64be48b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 98.393757][ T6012] RAX: ffffffffffffffda RBX: 00007f64bd825fa0 RCX: 00007f64bd59e159 [ 98.393772][ T6012] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 98.393787][ T6012] RBP: 00007f64be48b090 R08: 0000200000003700 R09: 0000000000000000 [ 98.393802][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.393815][ T6012] R13: 00007f64bd826038 R14: 00007f64bd825fa0 R15: 00007fff2cf11468 [ 98.393846][ T6012] [ 98.714556][ T988] usb 3-1: string descriptor 0 read error: -71 [ 98.721046][ T988] usb 3-1: USB disconnect, device number 2 [ 98.736500][ T189] DVB: Unable to find symbol lgdt330x_attach() [ 98.736516][ T189] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 98.911662][ T189] rc_core: IR keymap rc-dvico-portable not found [ 98.911680][ T189] Registered IR keymap rc-empty [ 98.916409][ T189] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 98.957886][ T189] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 98.982677][ T189] dvb-usb: schedule remote query interval to 100 msecs. [ 98.982711][ T189] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 98.987534][ T189] usb 2-1: USB disconnect, device number 4 [ 99.096481][ T189] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 99.151668][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 99.265586][ T6028] gadgetfs: bound to dummy_udc driver [ 99.304257][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.308024][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 99.308054][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=36.a1 [ 99.327553][ T10] usb 4-1: config 4 has an invalid interface number: 84 but max is 0 [ 99.327585][ T10] usb 4-1: config 4 has no interface number 0 [ 99.327628][ T10] usb 4-1: config 4 interface 84 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 99.327658][ T10] usb 4-1: config 4 interface 84 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 99.327686][ T10] usb 4-1: config 4 interface 84 has no altsetting 0 [ 99.371850][ T988] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.388697][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.388726][ T10] usb 4-1: Product: syz [ 99.388742][ T10] usb 4-1: Manufacturer: syz [ 99.388757][ T10] usb 4-1: SerialNumber: syz [ 99.425503][ T6018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.498167][ T6032] FAULT_INJECTION: forcing a failure. [ 99.498167][ T6032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.498199][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz.1.94 Not tainted syzkaller #0 PREEMPT(full) [ 99.498223][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 99.498238][ T6032] Call Trace: [ 99.498247][ T6032] [ 99.498256][ T6032] dump_stack_lvl+0xe8/0x150 [ 99.498289][ T6032] should_fail_ex+0x3eb/0x540 [ 99.498317][ T6032] _copy_from_user+0x2d/0xb0 [ 99.498346][ T6032] ___sys_sendmsg+0x1c6/0x360 [ 99.498369][ T6032] ? __lock_acquire+0x747/0x2de0 [ 99.498404][ T6032] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.498430][ T6032] ? futex_wait+0x2a2/0x390 [ 99.498504][ T6032] ? __fget_files+0x2a/0x420 [ 99.498529][ T6032] ? __fget_files+0x3a2/0x420 [ 99.498562][ T6032] __x64_sys_sendmsg+0x1b1/0x290 [ 99.498586][ T6032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.498627][ T6032] do_syscall_64+0x166/0x520 [ 99.498647][ T6032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.498667][ T6032] ? clear_bhb_loop+0x70/0xc0 [ 99.498691][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.498710][ T6032] RIP: 0033:0x7fecd3b9e159 [ 99.498727][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.498743][ T6032] RSP: 002b:00007fecd4ae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.498769][ T6032] RAX: ffffffffffffffda RBX: 00007fecd3e25fa0 RCX: 00007fecd3b9e159 [ 99.498784][ T6032] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 99.498815][ T6032] RBP: 00007fecd3c3503b R08: 0000000000000000 R09: 0000000000000000 [ 99.498829][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.498843][ T6032] R13: 00007fecd3e26038 R14: 00007fecd3e25fa0 R15: 00007ffe6d00f368 [ 99.498878][ T6032] [ 99.539508][ T988] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 99.546334][ T988] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.546457][ T988] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.546532][ T988] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.546624][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.601974][ T988] usb 1-1: config 0 descriptor?? [ 99.762095][ T10] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 99.767257][ T10] usb 4-1: USB disconnect, device number 4 [ 100.056201][ T988] sony 0003:054C:0268.0001: ignoring exceeding usage max [ 100.058144][ T988] sony 0003:054C:0268.0001: ignoring exceeding usage max [ 100.084556][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.112115][ T988] sony 0003:054C:0268.0001: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 100.112149][ T988] sony 0003:054C:0268.0001: failed to claim input [ 100.242660][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 100.246852][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.246898][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.250434][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 100.250458][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.250477][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.265098][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.265177][ T9] usb 2-1: Product: syz [ 100.265229][ T9] usb 2-1: Manufacturer: syz [ 100.265277][ T9] usb 2-1: SerialNumber: syz [ 100.344044][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.344521][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.348498][ T6024] ufs: You didn't specify the type of your ufs filesystem [ 100.348498][ T6024] [ 100.348498][ T6024] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 100.348498][ T6024] [ 100.348498][ T6024] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 100.348538][ T6024] ufs: ufstype=old is supported read-only [ 100.349550][ T6024] ufs: ufs_fill_super(): bad magic number [ 100.411357][ T30] usb 1-1: USB disconnect, device number 2 [ 100.530298][ T6054] netlink: 'syz.2.102': attribute type 12 has an invalid length. [ 100.534438][ T5617] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 100.534670][ T5617] Bluetooth: hci0: Injecting HCI hardware error event [ 100.537380][ T5615] Bluetooth: hci0: hardware error 0x00 [ 100.623722][ T9] usb 2-1: 0:2 : does not exist [ 100.676588][ T9] usb 2-1: USB disconnect, device number 5 [ 100.734362][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.765708][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.780048][ T6057] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.103'. [ 100.781185][ T6056] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.103'. [ 100.781409][ T6056] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.103'. [ 100.912320][ T10] usb 4-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=15.3d [ 100.913683][ T10] usb 4-1: config 2 has an invalid interface number: 183 but max is 0 [ 100.913700][ T10] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 100.913712][ T10] usb 4-1: config 2 has an invalid interface number: 192 but max is 0 [ 100.913733][ T10] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 100.913747][ T10] usb 4-1: config 2 has no interface number 0 [ 100.913758][ T10] usb 4-1: config 2 has no interface number 1 [ 100.913792][ T10] usb 4-1: config 2 interface 183 altsetting 169 endpoint 0x7 has invalid maxpacket 1007, setting to 64 [ 100.913810][ T10] usb 4-1: config 2 interface 183 altsetting 169 has an invalid descriptor for endpoint zero, skipping [ 100.913825][ T10] usb 4-1: config 2 interface 183 altsetting 169 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 100.913843][ T10] usb 4-1: config 2 interface 183 altsetting 169 has a duplicate endpoint with address 0x8, skipping [ 100.913858][ T10] usb 4-1: config 2 interface 183 altsetting 169 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 100.913877][ T10] usb 4-1: too many endpoints for config 2 interface 192 altsetting 39: 184, using maximum allowed: 30 [ 100.913900][ T10] usb 4-1: config 2 interface 192 altsetting 39 has a duplicate endpoint with address 0x8, skipping [ 100.913915][ T10] usb 4-1: config 2 interface 192 altsetting 39 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 100.913933][ T10] usb 4-1: config 2 interface 192 altsetting 39 has a duplicate endpoint with address 0x5, skipping [ 100.913948][ T10] usb 4-1: config 2 interface 192 altsetting 39 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 100.913966][ T10] usb 4-1: config 2 interface 192 altsetting 39 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 100.913985][ T10] usb 4-1: config 2 interface 192 altsetting 39 has a duplicate endpoint with address 0xD, skipping [ 100.914000][ T10] usb 4-1: config 2 interface 192 altsetting 39 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 100.914018][ T10] usb 4-1: config 2 interface 192 altsetting 39 has an invalid descriptor for endpoint zero, skipping [ 100.914032][ T10] usb 4-1: config 2 interface 192 altsetting 39 has 10 endpoint descriptors, different from the interface descriptor's value: 184 [ 100.914050][ T10] usb 4-1: config 2 interface 183 has no altsetting 0 [ 100.914062][ T10] usb 4-1: config 2 interface 192 has no altsetting 0 [ 100.916533][ T6059] FAULT_INJECTION: forcing a failure. [ 100.916533][ T6059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.916562][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.2.104 Not tainted syzkaller #0 PREEMPT(full) [ 100.916586][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 100.916598][ T6059] Call Trace: [ 100.916609][ T6059] [ 100.916621][ T6059] dump_stack_lvl+0xe8/0x150 [ 100.916649][ T6059] should_fail_ex+0x3eb/0x540 [ 100.916671][ T6059] _copy_from_user+0x2d/0xb0 [ 100.916693][ T6059] ___sys_sendmsg+0x1c6/0x360 [ 100.916711][ T6059] ? __lock_acquire+0x747/0x2de0 [ 100.916744][ T6059] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.916764][ T6059] ? futex_wait+0x2a2/0x390 [ 100.916806][ T6059] ? __fget_files+0x2a/0x420 [ 100.916826][ T6059] ? __fget_files+0x3a2/0x420 [ 100.916853][ T6059] __x64_sys_sendmsg+0x1b1/0x290 [ 100.916873][ T6059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.916906][ T6059] do_syscall_64+0x166/0x520 [ 100.916920][ T6059] ? trace_irq_disable+0x3b/0x140 [ 100.916943][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.916960][ T6059] ? clear_bhb_loop+0x70/0xc0 [ 100.916979][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.916995][ T6059] RIP: 0033:0x7fe10739e159 [ 100.917009][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.917022][ T6059] RSP: 002b:00007fe108343028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.917065][ T6059] RAX: ffffffffffffffda RBX: 00007fe107625fa0 RCX: 00007fe10739e159 [ 100.917080][ T6059] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 100.917095][ T6059] RBP: 00007fe10743503b R08: 0000000000000000 R09: 0000000000000000 [ 100.917108][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.917127][ T6059] R13: 00007fe107626038 R14: 00007fe107625fa0 R15: 00007ffd41b073a8 [ 100.917151][ T6059] [ 100.917302][ T10] usb 4-1: Dual-Role OTG device on HNP port [ 100.917592][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.917616][ T10] usb 4-1: Product: syz [ 100.917631][ T10] usb 4-1: SerialNumber: syz [ 101.298079][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.312051][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.507614][ T6062] FAULT_INJECTION: forcing a failure. [ 101.507614][ T6062] name failslab, interval 1, probability 0, space 0, times 0 [ 101.508279][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.0.106 Not tainted syzkaller #0 PREEMPT(full) [ 101.508310][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 101.508326][ T6062] Call Trace: [ 101.508335][ T6062] [ 101.508347][ T6062] dump_stack_lvl+0xe8/0x150 [ 101.508404][ T6062] should_fail_ex+0x3eb/0x540 [ 101.508441][ T6062] should_failslab+0xa8/0x100 [ 101.508472][ T6062] __kmalloc_cache_node_noprof+0xa5/0x620 [ 101.508515][ T6062] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 101.508552][ T6062] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 101.508600][ T6062] sbitmap_queue_init_node+0x1dc/0x4d0 [ 101.508655][ T6062] kyber_alloc_sched_data+0x303/0x540 [ 101.508692][ T6062] blk_mq_alloc_sched_res+0x103/0x360 [ 101.508729][ T6062] elevator_change+0x122/0x480 [ 101.508756][ T6062] ? do_raw_spin_unlock+0xf5/0x200 [ 101.508795][ T6062] elv_iosched_store+0x504/0x630 [ 101.508828][ T6062] ? __pfx_elv_iosched_store+0x10/0x10 [ 101.508878][ T6062] queue_attr_store+0x207/0x2b0 [ 101.508918][ T6062] ? __pfx_queue_attr_store+0x10/0x10 [ 101.508953][ T6062] ? lock_acquire+0x115/0x350 [ 101.508990][ T6062] ? sysfs_file_kobj+0x1a/0x230 [ 101.509030][ T6062] ? sysfs_file_kobj+0x1a/0x230 [ 101.509062][ T6062] ? sysfs_file_kobj+0x1a/0x230 [ 101.509091][ T6062] ? sysfs_file_kobj+0x1a/0x230 [ 101.509124][ T6062] ? sysfs_file_kobj+0x1e4/0x230 [ 101.509157][ T6062] ? sysfs_kf_write+0x166/0x260 [ 101.509196][ T6062] ? __pfx_sysfs_kf_write+0x10/0x10 [ 101.509238][ T6062] kernfs_fop_write_iter+0x3a4/0x540 [ 101.509272][ T6062] vfs_write+0x612/0xba0 [ 101.509316][ T6062] ? __pfx_vfs_write+0x10/0x10 [ 101.509363][ T6062] ? __fget_files+0x2a/0x420 [ 101.509404][ T6062] ksys_write+0x150/0x270 [ 101.509440][ T6062] ? __pfx_ksys_write+0x10/0x10 [ 101.509488][ T6062] do_syscall_64+0x166/0x520 [ 101.509513][ T6062] ? trace_irq_disable+0x3b/0x140 [ 101.509548][ T6062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.509575][ T6062] ? clear_bhb_loop+0x70/0xc0 [ 101.509606][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.509645][ T6062] RIP: 0033:0x7f2d9039e159 [ 101.509669][ T6062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.509689][ T6062] RSP: 002b:00007f2d912e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.509715][ T6062] RAX: ffffffffffffffda RBX: 00007f2d90625fa0 RCX: 00007f2d9039e159 [ 101.509733][ T6062] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 101.509749][ T6062] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 101.509764][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.509779][ T6062] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 101.509816][ T6062] [ 101.717579][ T10] belkin_sa 4-1:2.183: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 101.794540][ T10] usb 4-1: bcdDevice: 153d, bfc: 0 [ 101.821050][ T10] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 101.841162][ T6065] rust_binder: 6060:6065 no such ref 0 [ 101.843895][ T6065] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 101.869610][ T6065] rust_binder: 6060:6065 got transaction to invalid handle 1 [ 101.869674][ T6065] rust_binder: 6060:6065 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 101.872607][ T9] rust_binder: 6060: undelivered TRANSACTION_ERROR: 29201 [ 101.903906][ T10] belkin_sa 4-1:2.192: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 101.907473][ T10] usb 4-1: bcdDevice: 153d, bfc: 0 [ 101.912395][ T10] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 101.983719][ T6065] syz.1.107 (6065) used greatest stack depth: 17456 bytes left [ 101.985639][ T10] usb 4-1: USB disconnect, device number 5 [ 102.049150][ T10] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 102.067749][ T10] belkin_sa 4-1:2.183: device disconnected [ 102.094952][ T6069] FAULT_INJECTION: forcing a failure. [ 102.094952][ T6069] name failslab, interval 1, probability 0, space 0, times 0 [ 102.094981][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.2.109 Not tainted syzkaller #0 PREEMPT(full) [ 102.095006][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 102.095018][ T6069] Call Trace: [ 102.095027][ T6069] [ 102.095037][ T6069] dump_stack_lvl+0xe8/0x150 [ 102.095072][ T6069] should_fail_ex+0x3eb/0x540 [ 102.095103][ T6069] should_failslab+0xa8/0x100 [ 102.095131][ T6069] __kmalloc_noprof+0xf9/0x710 [ 102.095164][ T6069] ? tomoyo_encode+0x2ad/0x570 [ 102.095191][ T6069] ? tomoyo_encode+0x2ad/0x570 [ 102.095225][ T6069] tomoyo_encode+0x2ad/0x570 [ 102.095259][ T6069] tomoyo_realpath_from_path+0x5fa/0x640 [ 102.095299][ T6069] ? tomoyo_path_number_perm+0x219/0x5f0 [ 102.095323][ T6069] tomoyo_path_number_perm+0x246/0x5f0 [ 102.095353][ T6069] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.095376][ T6069] ? __lock_acquire+0x747/0x2de0 [ 102.095415][ T6069] ? __pfx_vfs_writev+0x10/0x10 [ 102.095447][ T6069] ? hook_file_ioctl+0x1f2/0x600 [ 102.095492][ T6069] ? __fget_files+0x2a/0x420 [ 102.095523][ T6069] ? __fget_files+0x2a/0x420 [ 102.095550][ T6069] ? __fget_files+0x3a2/0x420 [ 102.095577][ T6069] ? __fget_files+0x2a/0x420 [ 102.095618][ T6069] security_file_ioctl+0xc3/0x2a0 [ 102.095656][ T6069] __se_sys_ioctl+0x47/0x170 [ 102.095695][ T6069] do_syscall_64+0x166/0x520 [ 102.095715][ T6069] ? trace_irq_disable+0x3b/0x140 [ 102.095748][ T6069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.095772][ T6069] ? clear_bhb_loop+0x70/0xc0 [ 102.095800][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.095822][ T6069] RIP: 0033:0x7fe10739e159 [ 102.095842][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.095861][ T6069] RSP: 002b:00007fe108343028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.095884][ T6069] RAX: ffffffffffffffda RBX: 00007fe107625fa0 RCX: 00007fe10739e159 [ 102.095900][ T6069] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000006 [ 102.095915][ T6069] RBP: 00007fe10743503b R08: 0000000000000000 R09: 0000000000000000 [ 102.095928][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.095942][ T6069] R13: 00007fe107626038 R14: 00007fe107625fa0 R15: 00007ffd41b073a8 [ 102.095977][ T6069] [ 102.096009][ T6069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.109813][ T6070] FAULT_INJECTION: forcing a failure. [ 102.109813][ T6070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.109894][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.0.108 Not tainted syzkaller #0 PREEMPT(full) [ 102.109955][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 102.109993][ T6070] Call Trace: [ 102.110013][ T6070] [ 102.110034][ T6070] dump_stack_lvl+0xe8/0x150 [ 102.110121][ T6070] should_fail_ex+0x3eb/0x540 [ 102.110201][ T6070] _copy_from_iter+0x1d3/0x1660 [ 102.110300][ T6070] ? __pfx__copy_from_iter+0x10/0x10 [ 102.110365][ T6070] ? trace_kmalloc+0x2a/0xf0 [ 102.110459][ T6070] ? __kmalloc_noprof+0x387/0x710 [ 102.110528][ T6070] ? __kmalloc_noprof+0x1a6/0x710 [ 102.110642][ T6070] ? kernfs_fop_write_iter+0x157/0x540 [ 102.110724][ T6070] kernfs_fop_write_iter+0x19a/0x540 [ 102.110816][ T6070] vfs_write+0x612/0xba0 [ 102.110914][ T6070] ? __pfx_vfs_write+0x10/0x10 [ 102.111018][ T6070] ? __fget_files+0x2a/0x420 [ 102.111091][ T6070] ksys_write+0x150/0x270 [ 102.111186][ T6070] ? __pfx_ksys_write+0x10/0x10 [ 102.111291][ T6070] do_syscall_64+0x166/0x520 [ 102.111338][ T6070] ? trace_irq_disable+0x3b/0x140 [ 102.111418][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.111477][ T6070] ? clear_bhb_loop+0x70/0xc0 [ 102.111548][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.111616][ T6070] RIP: 0033:0x7f2d9039e159 [ 102.111653][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.111694][ T6070] RSP: 002b:00007f2d912e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.111754][ T6070] RAX: ffffffffffffffda RBX: 00007f2d90625fa0 RCX: 00007f2d9039e159 [ 102.111793][ T6070] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 102.111832][ T6070] RBP: 00007f2d912e7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.111864][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.111894][ T6070] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 102.112000][ T6070] [ 102.210087][ T6074] tipc: Started in network mode [ 102.210153][ T6074] tipc: Node identity , cluster identity 4711 [ 102.307273][ T10] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 102.334104][ T10] belkin_sa 4-1:2.192: device disconnected [ 102.614994][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 102.745494][ T6079] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 102.826830][ T6083] FAULT_INJECTION: forcing a failure. [ 102.826830][ T6083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.826864][ T6083] CPU: 1 UID: 0 PID: 6083 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 102.826889][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 102.826902][ T6083] Call Trace: [ 102.826911][ T6083] [ 102.826939][ T6083] dump_stack_lvl+0xe8/0x150 [ 102.826975][ T6083] should_fail_ex+0x3eb/0x540 [ 102.827008][ T6083] _copy_from_user+0x2d/0xb0 [ 102.827040][ T6083] ___sys_sendmsg+0x1c6/0x360 [ 102.827065][ T6083] ? __lock_acquire+0x747/0x2de0 [ 102.827108][ T6083] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.827139][ T6083] ? futex_wait+0x2a2/0x390 [ 102.827199][ T6083] ? __fget_files+0x2a/0x420 [ 102.827229][ T6083] ? __fget_files+0x3a2/0x420 [ 102.827268][ T6083] __x64_sys_sendmsg+0x1b1/0x290 [ 102.827298][ T6083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.827347][ T6083] do_syscall_64+0x166/0x520 [ 102.827369][ T6083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.827393][ T6083] ? clear_bhb_loop+0x70/0xc0 [ 102.827422][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.827444][ T6083] RIP: 0033:0x7f2d9039e159 [ 102.827466][ T6083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.827485][ T6083] RSP: 002b:00007f2d912e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.827511][ T6083] RAX: ffffffffffffffda RBX: 00007f2d90625fa0 RCX: 00007f2d9039e159 [ 102.827536][ T6083] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 102.827563][ T6083] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 102.827578][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.827591][ T6083] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 102.827625][ T6083] [ 103.081855][ T6085] comedi comedi1: s526: I/O base address not correctly aligned [ 103.192977][ T1100] IPVS: starting estimator thread 0... [ 103.226985][ T6095] FAULT_INJECTION: forcing a failure. [ 103.226985][ T6095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.227017][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 103.227041][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 103.227055][ T6095] Call Trace: [ 103.227063][ T6095] [ 103.227073][ T6095] dump_stack_lvl+0xe8/0x150 [ 103.227106][ T6095] should_fail_ex+0x3eb/0x540 [ 103.227136][ T6095] strncpy_from_user+0x36/0x2c0 [ 103.227167][ T6095] do_getname+0x77/0x250 [ 103.227196][ T6095] do_sys_openat2+0xcc/0x200 [ 103.227225][ T6095] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.227252][ T6095] ? ksys_write+0x242/0x270 [ 103.227286][ T6095] ? __pfx_ksys_write+0x10/0x10 [ 103.227320][ T6095] __x64_sys_openat+0x138/0x170 [ 103.227352][ T6095] do_syscall_64+0x166/0x520 [ 103.227373][ T6095] ? trace_irq_disable+0x3b/0x140 [ 103.227406][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.227430][ T6095] ? clear_bhb_loop+0x70/0xc0 [ 103.227458][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.227479][ T6095] RIP: 0033:0x7f64bd55e98e [ 103.227499][ T6095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.227516][ T6095] RSP: 002b:00007f64be48af18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.227540][ T6095] RAX: ffffffffffffffda RBX: 00007f64be48b6c0 RCX: 00007f64bd55e98e [ 103.227556][ T6095] RDX: 0000000000000000 RSI: 00007f64bd634776 RDI: ffffffffffffff9c [ 103.227571][ T6095] RBP: 00007f64be48b090 R08: 0000000000000000 R09: 0000000000000000 [ 103.227604][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.227617][ T6095] R13: 00007f64bd826038 R14: 00007f64bd825fa0 R15: 00007fff2cf11468 [ 103.227664][ T6095] [ 103.283348][ T6092] IPVS: using max 30 ests per chain, 72000 per kthread [ 103.458396][ T6096] FAULT_INJECTION: forcing a failure. [ 103.458396][ T6096] name failslab, interval 1, probability 0, space 0, times 0 [ 103.458429][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT(full) [ 103.458454][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 103.458467][ T6096] Call Trace: [ 103.458475][ T6096] [ 103.458485][ T6096] dump_stack_lvl+0xe8/0x150 [ 103.458519][ T6096] should_fail_ex+0x3eb/0x540 [ 103.458550][ T6096] should_failslab+0xa8/0x100 [ 103.458575][ T6096] ? create_new_namespaces+0x33/0x6b0 [ 103.458602][ T6096] kmem_cache_alloc_noprof+0x9c/0x600 [ 103.458637][ T6096] ? create_new_namespaces+0x33/0x6b0 [ 103.458668][ T6096] create_new_namespaces+0x33/0x6b0 [ 103.458694][ T6096] ? __fget_files+0x3a2/0x420 [ 103.458722][ T6096] ? __fget_files+0x2a/0x420 [ 103.458758][ T6096] __se_sys_setns+0x2a1/0x1dc0 [ 103.458793][ T6096] ? __pfx___se_sys_setns+0x10/0x10 [ 103.458869][ T6096] do_syscall_64+0x166/0x520 [ 103.458895][ T6096] ? trace_irq_disable+0x3b/0x140 [ 103.458932][ T6096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.458969][ T6096] ? clear_bhb_loop+0x70/0xc0 [ 103.459002][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.459030][ T6096] RIP: 0033:0x7f2d9039f457 [ 103.459053][ T6096] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.459073][ T6096] RSP: 002b:00007f2d912e6fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 103.459101][ T6096] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f2d9039f457 [ 103.459120][ T6096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 103.459136][ T6096] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 103.459153][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.459168][ T6096] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 103.459208][ T6096] [ 103.496514][ T30] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.681614][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 103.697430][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.697488][ T30] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 103.715970][ T30] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 103.735950][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.735977][ T30] usb 2-1: Product: syz [ 103.735991][ T30] usb 2-1: Manufacturer: syz [ 103.736006][ T30] usb 2-1: SerialNumber: syz [ 103.927620][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 103.927715][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 104.077319][ T6108] FAULT_INJECTION: forcing a failure. [ 104.077319][ T6108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.077381][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT(full) [ 104.077407][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 104.077421][ T6108] Call Trace: [ 104.077430][ T6108] [ 104.077440][ T6108] dump_stack_lvl+0xe8/0x150 [ 104.077474][ T6108] should_fail_ex+0x3eb/0x540 [ 104.077510][ T6108] _copy_from_user+0x2d/0xb0 [ 104.077542][ T6108] ___sys_sendmsg+0x1c6/0x360 [ 104.077580][ T6108] ? __lock_acquire+0x747/0x2de0 [ 104.077617][ T6108] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.077646][ T6108] ? futex_wait+0x2a2/0x390 [ 104.077723][ T6108] ? __fget_files+0x2a/0x420 [ 104.077752][ T6108] ? __fget_files+0x3a2/0x420 [ 104.077792][ T6108] __x64_sys_sendmsg+0x1b1/0x290 [ 104.077822][ T6108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.077870][ T6108] do_syscall_64+0x166/0x520 [ 104.077906][ T6108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.077931][ T6108] ? clear_bhb_loop+0x70/0xc0 [ 104.077959][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.077983][ T6108] RIP: 0033:0x7f64bd59e159 [ 104.078004][ T6108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.078023][ T6108] RSP: 002b:00007f64be48b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.078049][ T6108] RAX: ffffffffffffffda RBX: 00007f64bd825fa0 RCX: 00007f64bd59e159 [ 104.078066][ T6108] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 104.078081][ T6108] RBP: 00007f64bd63503b R08: 0000000000000000 R09: 0000000000000000 [ 104.078095][ T6108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.078109][ T6108] R13: 00007f64bd826038 R14: 00007f64bd825fa0 R15: 00007fff2cf11468 [ 104.078144][ T6108] [ 104.136965][ T988] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.341757][ T988] usb 3-1: Using ep0 maxpacket: 8 [ 104.342974][ T988] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 104.350819][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.350843][ T988] usb 3-1: Product: syz [ 104.350857][ T988] usb 3-1: Manufacturer: syz [ 104.350871][ T988] usb 3-1: SerialNumber: syz [ 104.440228][ T988] usb 3-1: config 0 descriptor?? [ 104.468439][ T988] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 104.468529][ T988] dvb-usb: bulk message failed: -22 (2/0) [ 104.526069][ T988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.526894][ T988] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 104.526976][ T988] usb 3-1: media controller created [ 104.650351][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.831271][ T6112] nfs4: Unknown parameter ''' [ 105.051622][ T5744] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.212787][ T5744] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.215702][ T5744] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.215782][ T5744] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.215811][ T5744] usb 4-1: config 1 interface 0 has no altsetting 0 [ 105.217661][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.217685][ T5744] usb 4-1: SerialNumber: syz [ 105.294524][ T5744] cdc_ether 4-1:1.0: GUID doesn't match [ 105.568513][ T6118] rust_binder: 6110:6118 got transaction to invalid handle 3 [ 105.568544][ T6118] rust_binder: 6110:6118 transaction async to 0:0 failed ENOENT, code 0 size 104-1 [ 105.621061][ T25] usb 4-1: USB disconnect, device number 6 [ 105.652683][ T5744] rust_binder: 6110: undelivered TRANSACTION_ERROR: 29201 [ 106.284918][ T30] snd-ua101 2-1:1.1: sample format descriptor not found [ 106.284946][ T30] snd-ua101 2-1:1.0: invalid num_altsetting [ 106.419367][ T30] usb 2-1: USB disconnect, device number 6 [ 107.015431][ T6128] FAULT_INJECTION: forcing a failure. [ 107.015431][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 107.015466][ T6128] CPU: 1 UID: 0 PID: 6128 Comm: syz.3.128 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.015499][ T6128] Tainted: [L]=SOFTLOCKUP [ 107.015508][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 107.015520][ T6128] Call Trace: [ 107.015529][ T6128] [ 107.015539][ T6128] dump_stack_lvl+0xe8/0x150 [ 107.015574][ T6128] should_fail_ex+0x3eb/0x540 [ 107.015606][ T6128] should_failslab+0xa8/0x100 [ 107.015632][ T6128] __kmalloc_cache_noprof+0x9e/0x600 [ 107.015663][ T6128] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.015696][ T6128] ? __request_module+0x2d0/0x630 [ 107.015718][ T6128] ? __request_module+0x2d0/0x630 [ 107.015748][ T6128] __request_module+0x2d0/0x630 [ 107.015771][ T6128] ? __kernel_text_address+0xd/0x30 [ 107.015810][ T6128] ? __pfx___request_module+0x10/0x10 [ 107.015838][ T6128] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.015875][ T6128] ? do_raw_spin_unlock+0xf5/0x200 [ 107.015917][ T6128] elv_iosched_store+0x30b/0x630 [ 107.015945][ T6128] ? __pfx_elv_iosched_store+0x10/0x10 [ 107.015987][ T6128] queue_attr_store+0x207/0x2b0 [ 107.016018][ T6128] ? __pfx_queue_attr_store+0x10/0x10 [ 107.016046][ T6128] ? lock_acquire+0x115/0x350 [ 107.016076][ T6128] ? sysfs_file_kobj+0x1a/0x230 [ 107.016109][ T6128] ? sysfs_file_kobj+0x1a/0x230 [ 107.016142][ T6128] ? sysfs_file_kobj+0x1a/0x230 [ 107.016166][ T6128] ? sysfs_file_kobj+0x1a/0x230 [ 107.016192][ T6128] ? sysfs_file_kobj+0x1e4/0x230 [ 107.016219][ T6128] ? sysfs_kf_write+0x166/0x260 [ 107.016250][ T6128] ? __pfx_sysfs_kf_write+0x10/0x10 [ 107.016275][ T6128] kernfs_fop_write_iter+0x3a4/0x540 [ 107.016305][ T6128] vfs_write+0x612/0xba0 [ 107.016371][ T6128] ? __pfx_vfs_write+0x10/0x10 [ 107.016431][ T6128] ? __fget_files+0x2a/0x420 [ 107.016471][ T6128] ksys_write+0x150/0x270 [ 107.016505][ T6128] ? __pfx_ksys_write+0x10/0x10 [ 107.016550][ T6128] do_syscall_64+0x166/0x520 [ 107.016572][ T6128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.016596][ T6128] ? clear_bhb_loop+0x70/0xc0 [ 107.016625][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.016648][ T6128] RIP: 0033:0x7f64bd59e159 [ 107.016670][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.016688][ T6128] RSP: 002b:00007f64be48b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.016712][ T6128] RAX: ffffffffffffffda RBX: 00007f64bd825fa0 RCX: 00007f64bd59e159 [ 107.016729][ T6128] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 107.016743][ T6128] RBP: 00007f64be48b090 R08: 0000000000000000 R09: 0000000000000000 [ 107.016757][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.016771][ T6128] R13: 00007f64bd826038 R14: 00007f64bd825fa0 R15: 00007fff2cf11468 [ 107.016807][ T6128] [ 107.407349][ T988] cxusb: set interface failed [ 107.407370][ T988] dvb-usb: bulk message failed: -22 (1/0) [ 107.606087][ T988] DVB: Unable to find symbol mt352_attach() [ 107.606105][ T988] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 107.698035][ T6133] capability: warning: `syz.2.130' uses 32-bit capabilities (legacy support in use) [ 107.761665][ T988] rc_core: IR keymap rc-dvico-portable not found [ 107.761686][ T988] Registered IR keymap rc-empty [ 107.766084][ T988] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 107.800041][ T988] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 107.825217][ T988] dvb-usb: schedule remote query interval to 100 msecs. [ 107.825240][ T988] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 107.851142][ T988] usb 3-1: USB disconnect, device number 3 [ 107.984409][ T988] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 108.441632][ T988] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.592025][ T988] usb 4-1: Using ep0 maxpacket: 16 [ 108.594137][ T988] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 108.598833][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.598856][ T988] usb 4-1: Product: syz [ 108.598870][ T988] usb 4-1: Manufacturer: syz [ 108.598884][ T988] usb 4-1: SerialNumber: syz [ 108.656975][ T988] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.908588][ T988] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 108.956041][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.088242][ T6142] FAULT_INJECTION: forcing a failure. [ 115.088242][ T6142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.088311][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.0.132 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.088339][ T6142] Tainted: [L]=SOFTLOCKUP [ 115.088346][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 115.088364][ T6142] Call Trace: [ 115.088372][ T6142] [ 115.088384][ T6142] dump_stack_lvl+0xe8/0x150 [ 115.088427][ T6142] should_fail_ex+0x3eb/0x540 [ 115.088456][ T6142] _copy_from_user+0x2d/0xb0 [ 115.088488][ T6142] ___sys_sendmsg+0x1c6/0x360 [ 115.088513][ T6142] ? __lock_acquire+0x747/0x2de0 [ 115.088548][ T6142] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.088576][ T6142] ? futex_wait+0x2a2/0x390 [ 115.088630][ T6142] ? __fget_files+0x2a/0x420 [ 115.088657][ T6142] ? __fget_files+0x3a2/0x420 [ 115.088693][ T6142] __x64_sys_sendmsg+0x1b1/0x290 [ 115.088731][ T6142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.088772][ T6142] do_syscall_64+0x166/0x520 [ 115.088791][ T6142] ? trace_irq_disable+0x3b/0x140 [ 115.088844][ T6142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.088866][ T6142] ? clear_bhb_loop+0x70/0xc0 [ 115.088893][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.088914][ T6142] RIP: 0033:0x7f2d9039e159 [ 115.088938][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.088955][ T6142] RSP: 002b:00007f2d912e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.088984][ T6142] RAX: ffffffffffffffda RBX: 00007f2d90625fa0 RCX: 00007f2d9039e159 [ 115.088999][ T6142] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 115.089013][ T6142] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 115.089026][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.089038][ T6142] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 115.089069][ T6142] [ 115.460329][ T6145] Zero length message leads to an empty skb [ 115.655958][ T6148] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 115.655990][ T6148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.891575][ C0] sched: DL replenish lagged too much [ 116.011697][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.151710][ T25] usb 1-1: device descriptor read/64, error -71 [ 116.180528][ T988] usb 4-1: USB disconnect, device number 7 [ 116.391754][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.532722][ T25] usb 1-1: device descriptor read/64, error -71 [ 116.642870][ T25] usb usb1-port1: attempt power cycle [ 116.824517][ T6172] FAULT_INJECTION: forcing a failure. [ 116.824517][ T6172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.824551][ T6172] CPU: 1 UID: 0 PID: 6172 Comm: syz.1.141 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.824597][ T6172] Tainted: [L]=SOFTLOCKUP [ 116.824605][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 116.824618][ T6172] Call Trace: [ 116.824627][ T6172] [ 116.824637][ T6172] dump_stack_lvl+0xe8/0x150 [ 116.824671][ T6172] should_fail_ex+0x3eb/0x540 [ 116.824700][ T6172] _copy_from_user+0x2d/0xb0 [ 116.824742][ T6172] ___sys_sendmsg+0x1c6/0x360 [ 116.824766][ T6172] ? __lock_acquire+0x747/0x2de0 [ 116.824801][ T6172] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.824829][ T6172] ? futex_wait+0x2a2/0x390 [ 116.824884][ T6172] ? __fget_files+0x2a/0x420 [ 116.824910][ T6172] ? __fget_files+0x3a2/0x420 [ 116.824946][ T6172] __x64_sys_sendmsg+0x1b1/0x290 [ 116.824973][ T6172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.825016][ T6172] do_syscall_64+0x166/0x520 [ 116.825036][ T6172] ? trace_irq_disable+0x3b/0x140 [ 116.825066][ T6172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.825087][ T6172] ? clear_bhb_loop+0x70/0xc0 [ 116.825114][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.825135][ T6172] RIP: 0033:0x7fecd3b9e159 [ 116.825154][ T6172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.825171][ T6172] RSP: 002b:00007fecd4ae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.825206][ T6172] RAX: ffffffffffffffda RBX: 00007fecd3e25fa0 RCX: 00007fecd3b9e159 [ 116.825222][ T6172] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 116.825236][ T6172] RBP: 00007fecd3c3503b R08: 0000000000000000 R09: 0000000000000000 [ 116.825249][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.825261][ T6172] R13: 00007fecd3e26038 R14: 00007fecd3e25fa0 R15: 00007ffe6d00f368 [ 116.825293][ T6172] [ 117.065892][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.084036][ T25] usb 1-1: device descriptor read/8, error -71 [ 117.332847][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.352926][ T25] usb 1-1: device descriptor read/8, error -71 [ 117.439785][ T6181] Bluetooth: MGMT ver 1.23 [ 117.439838][ T6181] Bluetooth: hci0: unsupported parameter 5135 [ 117.439854][ T6181] Bluetooth: hci0: unsupported parameter 8192 [ 117.439871][ T6181] Bluetooth: hci0: unsupported parameter 5135 [ 117.439884][ T6181] Bluetooth: hci0: unsupported parameter 8192 [ 117.466651][ T25] usb usb1-port1: unable to enumerate USB device [ 118.874111][ T6204] FAULT_INJECTION: forcing a failure. [ 118.874111][ T6204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.874145][ T6204] CPU: 1 UID: 0 PID: 6204 Comm: syz.2.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.874173][ T6204] Tainted: [L]=SOFTLOCKUP [ 118.874198][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 118.874211][ T6204] Call Trace: [ 118.874219][ T6204] [ 118.874229][ T6204] dump_stack_lvl+0xe8/0x150 [ 118.874264][ T6204] should_fail_ex+0x3eb/0x540 [ 118.874295][ T6204] _copy_from_user+0x2d/0xb0 [ 118.874325][ T6204] ___sys_sendmsg+0x1c6/0x360 [ 118.874351][ T6204] ? __lock_acquire+0x747/0x2de0 [ 118.874389][ T6204] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.874418][ T6204] ? futex_wait+0x2a2/0x390 [ 118.874486][ T6204] ? __fget_files+0x2a/0x420 [ 118.874515][ T6204] ? __fget_files+0x3a2/0x420 [ 118.874563][ T6204] __x64_sys_sendmsg+0x1b1/0x290 [ 118.874590][ T6204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.874635][ T6204] do_syscall_64+0x166/0x520 [ 118.874655][ T6204] ? trace_irq_disable+0x3b/0x140 [ 118.874684][ T6204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.874706][ T6204] ? clear_bhb_loop+0x70/0xc0 [ 118.874732][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.874753][ T6204] RIP: 0033:0x7fe10739e159 [ 118.874773][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.874790][ T6204] RSP: 002b:00007fe108343028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.874812][ T6204] RAX: ffffffffffffffda RBX: 00007fe107625fa0 RCX: 00007fe10739e159 [ 118.874828][ T6204] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 118.874842][ T6204] RBP: 00007fe10743503b R08: 0000000000000000 R09: 0000000000000000 [ 118.874855][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.874867][ T6204] R13: 00007fe107626038 R14: 00007fe107625fa0 R15: 00007ffd41b073a8 [ 118.874898][ T6204] [ 120.268648][ T6230] FAULT_INJECTION: forcing a failure. [ 120.268648][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.268753][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: syz.2.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.268783][ T6230] Tainted: [L]=SOFTLOCKUP [ 120.268791][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 120.268807][ T6230] Call Trace: [ 120.268816][ T6230] [ 120.268825][ T6230] dump_stack_lvl+0xe8/0x150 [ 120.268861][ T6230] should_fail_ex+0x3eb/0x540 [ 120.268892][ T6230] _copy_from_user+0x2d/0xb0 [ 120.268923][ T6230] ___sys_sendmsg+0x1c6/0x360 [ 120.268948][ T6230] ? __lock_acquire+0x747/0x2de0 [ 120.268986][ T6230] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.269016][ T6230] ? futex_wait+0x2a2/0x390 [ 120.269075][ T6230] ? __fget_files+0x2a/0x420 [ 120.269103][ T6230] ? __fget_files+0x3a2/0x420 [ 120.269142][ T6230] __x64_sys_sendmsg+0x1b1/0x290 [ 120.269170][ T6230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.269217][ T6230] do_syscall_64+0x166/0x520 [ 120.269239][ T6230] ? trace_irq_disable+0x3b/0x140 [ 120.269270][ T6230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.269294][ T6230] ? clear_bhb_loop+0x70/0xc0 [ 120.269322][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.269351][ T6230] RIP: 0033:0x7fe10739e159 [ 120.269373][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.269392][ T6230] RSP: 002b:00007fe108343028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.269416][ T6230] RAX: ffffffffffffffda RBX: 00007fe107625fa0 RCX: 00007fe10739e159 [ 120.269433][ T6230] RDX: 0000000004004004 RSI: 0000200000000940 RDI: 0000000000000003 [ 120.269448][ T6230] RBP: 00007fe10743503b R08: 0000000000000000 R09: 0000000000000000 [ 120.269462][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.269475][ T6230] R13: 00007fe107626038 R14: 00007fe107625fa0 R15: 00007ffd41b073a8 [ 120.269509][ T6230] [ 120.656732][ T6232] netlink: 'syz.0.162': attribute type 2 has an invalid length. [ 120.661313][ T6232] netlink: 14 bytes leftover after parsing attributes in process `syz.0.162'. [ 121.323272][ T30] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.481946][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 121.482700][ T30] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.489131][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.544647][ T30] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.544687][ T30] usb 1-1: Product: syz [ 121.544702][ T30] usb 1-1: Manufacturer: syz [ 121.544716][ T30] usb 1-1: SerialNumber: syz [ 121.547956][ T30] usb 1-1: config 0 descriptor?? [ 121.549562][ T6232] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.101035][ T6253] bridge0: port 3(bond0) entered blocking state [ 122.101141][ T6253] bridge0: port 3(bond0) entered disabled state [ 122.132890][ T6253] bond0: entered allmulticast mode [ 122.132912][ T6253] bond_slave_0: entered allmulticast mode [ 122.132947][ T6253] bond_slave_1: entered allmulticast mode [ 122.136560][ T6255] vivid-004: disconnect [ 122.278059][ T6251] vivid-004: reconnect [ 122.312698][ T6253] bond0: entered promiscuous mode [ 122.312720][ T6253] bond_slave_0: entered promiscuous mode [ 122.312901][ T6253] bond_slave_1: entered promiscuous mode [ 122.320833][ T6253] bridge0: port 3(bond0) entered blocking state [ 122.320972][ T6253] bridge0: port 3(bond0) entered forwarding state [ 123.748575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 124.038963][ T5744] usb 1-1: USB disconnect, device number 7 [ 124.564041][ T6280] FAULT_INJECTION: forcing a failure. [ 124.564041][ T6280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.564074][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.3.173 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.564101][ T6280] Tainted: [L]=SOFTLOCKUP [ 124.564109][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 124.564121][ T6280] Call Trace: [ 124.564128][ T6280] [ 124.564137][ T6280] dump_stack_lvl+0xe8/0x150 [ 124.564169][ T6280] should_fail_ex+0x3eb/0x540 [ 124.564197][ T6280] _copy_from_iter+0x1d3/0x1660 [ 124.564234][ T6280] ? __pfx__copy_from_iter+0x10/0x10 [ 124.564256][ T6280] ? trace_kmalloc+0x2a/0xf0 [ 124.564288][ T6280] ? __kmalloc_noprof+0x387/0x710 [ 124.564317][ T6280] ? __kmalloc_noprof+0x1a6/0x710 [ 124.564344][ T6280] ? kernfs_fop_write_iter+0x157/0x540 [ 124.564375][ T6280] kernfs_fop_write_iter+0x19a/0x540 [ 124.564412][ T6280] vfs_write+0x612/0xba0 [ 124.564458][ T6280] ? __pfx_vfs_write+0x10/0x10 [ 124.564496][ T6280] ? __fget_files+0x2a/0x420 [ 124.564531][ T6280] ksys_write+0x150/0x270 [ 124.564562][ T6280] ? __pfx_ksys_write+0x10/0x10 [ 124.564601][ T6280] do_syscall_64+0x166/0x520 [ 124.564621][ T6280] ? trace_irq_disable+0x3b/0x140 [ 124.564650][ T6280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.564671][ T6280] ? clear_bhb_loop+0x70/0xc0 [ 124.564697][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.564717][ T6280] RIP: 0033:0x7f64bd59e159 [ 124.564736][ T6280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.564752][ T6280] RSP: 002b:00007f64be48b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.564774][ T6280] RAX: ffffffffffffffda RBX: 00007f64bd825fa0 RCX: 00007f64bd59e159 [ 124.564789][ T6280] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 124.564801][ T6280] RBP: 00007f64be48b090 R08: 0000000000000000 R09: 0000000000000000 [ 124.564814][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.564826][ T6280] R13: 00007f64bd826038 R14: 00007f64bd825fa0 R15: 00007fff2cf11468 [ 124.564858][ T6280] [ 125.889788][ T6304] rust_binder: 6303:6304 got transaction to invalid handle 1 [ 125.889817][ T6304] rust_binder: 6303:6304 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 125.911247][ T6304] rust_binder: Write failure EINVAL in pid:96 [ 126.764092][ T6324] device-mapper: ioctl: The device has no table. [ 126.784885][ T30] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.896094][ T6327] netlink: 512 bytes leftover after parsing attributes in process `syz.1.186'. [ 126.932898][ T30] usb 4-1: device descriptor read/64, error -71 [ 127.181684][ T30] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.331618][ T30] usb 4-1: device descriptor read/64, error -71 [ 127.452012][ T30] usb usb4-port1: attempt power cycle [ 127.813265][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.832254][ T30] usb 4-1: device descriptor read/8, error -71 [ 128.098659][ T30] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.123904][ T30] usb 4-1: device descriptor read/8, error -71 [ 128.244535][ T30] usb usb4-port1: unable to enumerate USB device [ 129.023576][ T5744] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 129.160396][ T6375] FAULT_INJECTION: forcing a failure. [ 129.160396][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.160430][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.0.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.160460][ T6375] Tainted: [L]=SOFTLOCKUP [ 129.160468][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 129.160481][ T6375] Call Trace: [ 129.160490][ T6375] [ 129.160500][ T6375] dump_stack_lvl+0xe8/0x150 [ 129.160536][ T6375] should_fail_ex+0x3eb/0x540 [ 129.160578][ T6375] _copy_from_iter+0x1d3/0x1660 [ 129.160609][ T6375] ? lock_acquire+0x115/0x350 [ 129.160645][ T6375] ? __pfx__copy_from_iter+0x10/0x10 [ 129.160676][ T6375] ? isotp_sendmsg+0x6af/0x1cb0 [ 129.160707][ T6375] ? isotp_sendmsg+0x6af/0x1cb0 [ 129.160739][ T6375] memcpy_from_msg+0x3c/0xa0 [ 129.160772][ T6375] isotp_sendmsg+0x992/0x1cb0 [ 129.160823][ T6375] ? __pfx_isotp_sendmsg+0x10/0x10 [ 129.160862][ T6375] ? __pfx_aa_sk_perm+0x10/0x10 [ 129.160890][ T6375] ? aa_sock_msg_perm+0x144/0x210 [ 129.160920][ T6375] ? apparmor_socket_sendmsg+0x98/0x360 [ 129.160945][ T6375] ? __pfx_isotp_sendmsg+0x10/0x10 [ 129.160973][ T6375] sock_sendmsg_nosec+0x13a/0x180 [ 129.161007][ T6375] __sys_sendto+0x408/0x5a0 [ 129.161038][ T6375] ? ksys_write+0x1e6/0x270 [ 129.161072][ T6375] ? __pfx___sys_sendto+0x10/0x10 [ 129.161091][ T6375] ? __mutex_unlock_slowpath+0x731/0x900 [ 129.161142][ T6375] ? __pfx_ksys_write+0x10/0x10 [ 129.161177][ T6375] __x64_sys_sendto+0xde/0x100 [ 129.161203][ T6375] do_syscall_64+0x166/0x520 [ 129.161223][ T6375] ? trace_irq_disable+0x3b/0x140 [ 129.161254][ T6375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.161277][ T6375] ? clear_bhb_loop+0x70/0xc0 [ 129.161304][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.161326][ T6375] RIP: 0033:0x7f2d9039e159 [ 129.161346][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.161364][ T6375] RSP: 002b:00007f2d912e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 129.161388][ T6375] RAX: ffffffffffffffda RBX: 00007f2d90625fa0 RCX: 00007f2d9039e159 [ 129.161404][ T6375] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 129.161417][ T6375] RBP: 00007f2d912e7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.161431][ T6375] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 129.161444][ T6375] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 129.161478][ T6375] [ 129.254374][ T5744] usb 2-1: not running at top speed; connect to a high speed hub [ 129.254408][ T5744] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 129.464332][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.464361][ T5744] usb 2-1: Product: syz [ 129.464377][ T5744] usb 2-1: Manufacturer: syz [ 129.464392][ T5744] usb 2-1: SerialNumber: syz [ 129.888685][ T6380] FAULT_INJECTION: forcing a failure. [ 129.888685][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 129.888719][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.0.200 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.888751][ T6380] Tainted: [L]=SOFTLOCKUP [ 129.888759][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 129.888771][ T6380] Call Trace: [ 129.888779][ T6380] [ 129.888788][ T6380] dump_stack_lvl+0xe8/0x150 [ 129.888821][ T6380] should_fail_ex+0x3eb/0x540 [ 129.888850][ T6380] should_failslab+0xa8/0x100 [ 129.888875][ T6380] __kvmalloc_node_noprof+0x171/0x820 [ 129.888913][ T6380] ? __rhashtable_init_noprof+0x545/0xaf0 [ 129.888937][ T6380] ? __rhashtable_init_noprof+0x545/0xaf0 [ 129.888976][ T6380] __rhashtable_init_noprof+0x545/0xaf0 [ 129.889005][ T6380] __rhltable_init_noprof+0x26/0x70 [ 129.889032][ T6380] nf_tables_newtable+0x6a7/0x1990 [ 129.889074][ T6380] nfnetlink_rcv+0x1288/0x28c0 [ 129.889132][ T6380] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 129.889172][ T6380] ? ref_tracker_free+0x689/0x830 [ 129.889222][ T6380] ? skb_clone+0x246/0x3a0 [ 129.889250][ T6380] ? __netlink_deliver_tap+0x811/0x860 [ 129.889285][ T6380] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.889311][ T6380] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.889343][ T6380] netlink_unicast+0x7bd/0x940 [ 129.889378][ T6380] netlink_sendmsg+0x7c3/0xae0 [ 129.889412][ T6380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.889447][ T6380] ? apparmor_socket_sendmsg+0x98/0x360 [ 129.889471][ T6380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.889497][ T6380] sock_sendmsg_nosec+0x13a/0x180 [ 129.889530][ T6380] ____sys_sendmsg+0x54e/0x850 [ 129.889559][ T6380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.889591][ T6380] ? import_iovec+0x73/0xa0 [ 129.889622][ T6380] ___sys_sendmsg+0x2a5/0x360 [ 129.889644][ T6380] ? __lock_acquire+0x747/0x2de0 [ 129.889678][ T6380] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.889705][ T6380] ? futex_wait+0x2a2/0x390 [ 129.889760][ T6380] ? __fget_files+0x2a/0x420 [ 129.889786][ T6380] ? __fget_files+0x3a2/0x420 [ 129.889823][ T6380] __x64_sys_sendmsg+0x1b1/0x290 [ 129.889849][ T6380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.889894][ T6380] do_syscall_64+0x166/0x520 [ 129.889914][ T6380] ? trace_irq_disable+0x3b/0x140 [ 129.889951][ T6380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.889974][ T6380] ? clear_bhb_loop+0x70/0xc0 [ 129.890000][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.890022][ T6380] RIP: 0033:0x7f2d9039e159 [ 129.890041][ T6380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.890059][ T6380] RSP: 002b:00007f2d912c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.890081][ T6380] RAX: ffffffffffffffda RBX: 00007f2d90626090 RCX: 00007f2d9039e159 [ 129.890096][ T6380] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 000000000000000a [ 129.890109][ T6380] RBP: 00007f2d9043503b R08: 0000000000000000 R09: 0000000000000000 [ 129.890122][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.890135][ T6380] R13: 00007f2d90626128 R14: 00007f2d90626090 R15: 00007ffc89d70d48 [ 129.890167][ T6380] [ 130.480932][ T6366] netlink: 'syz.1.196': attribute type 3 has an invalid length. [ 130.574203][ T5744] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 130.574326][ T5744] dvb-usb: bulk message failed: -22 (3/0) [ 130.582077][ T30] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 130.622381][ T5744] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 130.625075][ T5744] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 130.625137][ T5744] usb 2-1: media controller created [ 130.625203][ T5744] dvb-usb: bulk message failed: -22 (5/0) [ 130.625267][ T5744] dvb-usb: MAC address reading failed. [ 130.629216][ T6387] netlink: 'syz.3.203': attribute type 13 has an invalid length. [ 130.629234][ T6387] netlink: 160 bytes leftover after parsing attributes in process `syz.3.203'. [ 130.668798][ T5744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.730914][ T6387] erspan0: refused to change device tx_queue_len [ 130.730935][ T6387] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 130.739276][ T30] usb 1-1: device descriptor read/64, error -71 [ 130.778577][ T5744] dvb-usb: bulk message failed: -22 (6/0) [ 130.778859][ T5744] dvb-usb: bulk message failed: -22 (6/0) [ 130.778975][ T5744] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 130.827893][ T5744] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 130.857047][ T5744] dvb-usb: schedule remote query interval to 100 msecs. [ 130.857071][ T5744] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 130.895543][ T5744] usb 2-1: USB disconnect, device number 7 [ 130.972767][ T30] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 130.998422][ T5744] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 131.111672][ T30] usb 1-1: device descriptor read/64, error -71 [ 131.171673][ T988] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 131.222079][ T30] usb usb1-port1: attempt power cycle [ 131.333437][ T988] usb 4-1: Using ep0 maxpacket: 8 [ 131.335148][ T988] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 131.338530][ T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.340988][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.341013][ T988] usb 4-1: Product: syz [ 131.341029][ T988] usb 4-1: Manufacturer: syz [ 131.341045][ T988] usb 4-1: SerialNumber: syz [ 131.400855][ T988] usb 4-1: config 0 descriptor?? [ 131.418284][ T988] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 131.418375][ T988] usb 4-1: selecting invalid altsetting 1 [ 131.516604][ T6394] FAULT_INJECTION: forcing a failure. [ 131.516604][ T6394] name failslab, interval 1, probability 0, space 0, times 0 [ 131.516670][ T6394] CPU: 1 UID: 0 PID: 6394 Comm: syz.1.205 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.516703][ T6394] Tainted: [L]=SOFTLOCKUP [ 131.516712][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 131.516726][ T6394] Call Trace: [ 131.516735][ T6394] [ 131.516746][ T6394] dump_stack_lvl+0xe8/0x150 [ 131.516785][ T6394] should_fail_ex+0x3eb/0x540 [ 131.516819][ T6394] should_failslab+0xa8/0x100 [ 131.516848][ T6394] __kmalloc_cache_node_noprof+0xa5/0x620 [ 131.516886][ T6394] ? kyber_alloc_sched_data+0x79/0x540 [ 131.516911][ T6394] ? kyber_alloc_sched_data+0x79/0x540 [ 131.516945][ T6394] kyber_alloc_sched_data+0x79/0x540 [ 131.516979][ T6394] blk_mq_alloc_sched_res+0x103/0x360 [ 131.517013][ T6394] elevator_change+0x122/0x480 [ 131.517038][ T6394] ? do_raw_spin_unlock+0xf5/0x200 [ 131.517073][ T6394] elv_iosched_store+0x504/0x630 [ 131.517104][ T6394] ? __pfx_elv_iosched_store+0x10/0x10 [ 131.517152][ T6394] queue_attr_store+0x207/0x2b0 [ 131.517188][ T6394] ? __pfx_queue_attr_store+0x10/0x10 [ 131.517220][ T6394] ? lock_acquire+0x115/0x350 [ 131.517254][ T6394] ? sysfs_file_kobj+0x1a/0x230 [ 131.517291][ T6394] ? sysfs_file_kobj+0x1a/0x230 [ 131.517320][ T6394] ? sysfs_file_kobj+0x1a/0x230 [ 131.517347][ T6394] ? sysfs_file_kobj+0x1a/0x230 [ 131.517378][ T6394] ? sysfs_file_kobj+0x1e4/0x230 [ 131.517415][ T6394] ? sysfs_kf_write+0x166/0x260 [ 131.517452][ T6394] ? __pfx_sysfs_kf_write+0x10/0x10 [ 131.517480][ T6394] kernfs_fop_write_iter+0x3a4/0x540 [ 131.517515][ T6394] vfs_write+0x612/0xba0 [ 131.517558][ T6394] ? __pfx_vfs_write+0x10/0x10 [ 131.517604][ T6394] ? __fget_files+0x2a/0x420 [ 131.517657][ T6394] ksys_write+0x150/0x270 [ 131.517689][ T6394] ? __pfx_ksys_write+0x10/0x10 [ 131.517731][ T6394] do_syscall_64+0x166/0x520 [ 131.517751][ T6394] ? trace_irq_disable+0x3b/0x140 [ 131.517781][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.517803][ T6394] ? clear_bhb_loop+0x70/0xc0 [ 131.517830][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.517870][ T6394] RIP: 0033:0x7fecd3b9e159 [ 131.517890][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.517910][ T6394] RSP: 002b:00007fecd4ae9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.517935][ T6394] RAX: ffffffffffffffda RBX: 00007fecd3e25fa0 RCX: 00007fecd3b9e159 [ 131.517952][ T6394] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000003 [ 131.517966][ T6394] RBP: 00007fecd3c3503b R08: 0000000000000000 R09: 0000000000000000 [ 131.517980][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.517994][ T6394] R13: 00007fecd3e26038 R14: 00007fecd3e25fa0 R15: 00007ffe6d00f368 [ 131.518031][ T6394] [ 131.638783][ T30] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 131.874400][ T30] usb 1-1: device descriptor read/8, error -71 [ 131.898880][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.901173][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.922824][ T988] gspca_stk014: reg_r err -110 [ 131.922910][ T988] stk014 4-1:0.0: probe with driver stk014 failed with error -110 [ 131.957070][ T988] usb 4-1: USB disconnect, device number 12 [ 132.066522][ T6396] FAULT_INJECTION: forcing a failure. [ 132.066522][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 132.066560][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.1.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.066591][ T6396] Tainted: [L]=SOFTLOCKUP [ 132.066600][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 132.066614][ T6396] Call Trace: [ 132.066623][ T6396] [ 132.066632][ T6396] dump_stack_lvl+0xe8/0x150 [ 132.066669][ T6396] should_fail_ex+0x3eb/0x540 [ 132.066712][ T6396] should_failslab+0xa8/0x100 [ 132.066741][ T6396] __kmalloc_cache_node_noprof+0xa5/0x620 [ 132.066779][ T6396] ? blk_mq_init_tags+0x83/0x2d0 [ 132.066811][ T6396] ? blk_mq_init_tags+0x83/0x2d0 [ 132.066852][ T6396] blk_mq_init_tags+0x83/0x2d0 [ 132.066889][ T6396] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 132.066921][ T6396] ? __kmalloc_noprof+0x387/0x710 [ 132.066954][ T6396] ? __kmalloc_noprof+0x1a6/0x710 [ 132.066985][ T6396] ? blk_mq_alloc_sched_tags+0x6e/0x380 [ 132.067011][ T6396] ? blk_mq_alloc_sched_tags+0x6e/0x380 [ 132.067046][ T6396] blk_mq_alloc_sched_tags+0x14d/0x380 [ 132.067082][ T6396] blk_mq_alloc_sched_res+0x92/0x360 [ 132.067116][ T6396] elevator_change+0x122/0x480 [ 132.067139][ T6396] ? do_raw_spin_unlock+0xf5/0x200 [ 132.067174][ T6396] elv_iosched_store+0x504/0x630 [ 132.067205][ T6396] ? __pfx_elv_iosched_store+0x10/0x10 [ 132.067252][ T6396] queue_attr_store+0x207/0x2b0 [ 132.067287][ T6396] ? __pfx_queue_attr_store+0x10/0x10 [ 132.067319][ T6396] ? lock_acquire+0x115/0x350 [ 132.067353][ T6396] ? sysfs_file_kobj+0x1a/0x230 [ 132.067389][ T6396] ? sysfs_file_kobj+0x1a/0x230 [ 132.067417][ T6396] ? sysfs_file_kobj+0x1a/0x230 [ 132.067443][ T6396] ? sysfs_file_kobj+0x1a/0x230 [ 132.067473][ T6396] ? sysfs_file_kobj+0x1e4/0x230 [ 132.067503][ T6396] ? sysfs_kf_write+0x166/0x260 [ 132.067550][ T6396] ? __pfx_sysfs_kf_write+0x10/0x10 [ 132.067588][ T6396] kernfs_fop_write_iter+0x3a4/0x540 [ 132.067618][ T6396] vfs_write+0x612/0xba0 [ 132.067657][ T6396] ? __pfx_vfs_write+0x10/0x10 [ 132.067697][ T6396] ? __fget_files+0x2a/0x420 [ 132.067740][ T6396] ksys_write+0x150/0x270 [ 132.067771][ T6396] ? __pfx_ksys_write+0x10/0x10 [ 132.067812][ T6396] do_syscall_64+0x166/0x520 [ 132.067832][ T6396] ? trace_irq_disable+0x3b/0x140 [ 132.067862][ T6396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.067883][ T6396] ? clear_bhb_loop+0x70/0xc0 [ 132.067909][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.067930][ T6396] RIP: 0033:0x7fecd3b9e159 [ 132.067949][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.067967][ T6396] RSP: 002b:00007fecd4ae9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.067989][ T6396] RAX: ffffffffffffffda RBX: 00007fecd3e25fa0 RCX: 00007fecd3b9e159 [ 132.068004][ T6396] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 132.068018][ T6396] RBP: 00007fecd4ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 132.068031][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.068044][ T6396] R13: 00007fecd3e26038 R14: 00007fecd3e25fa0 R15: 00007ffe6d00f368 [ 132.068078][ T6396] [ 132.112816][ T30] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 132.173123][ T30] usb 1-1: device descriptor read/8, error -71 [ 132.296909][ T30] usb usb1-port1: unable to enumerate USB device [ 132.730178][ T6402] netlink: Conntrack attr has 12 unknown bytes [ 132.730228][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.944906][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.945014][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.179537][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 133.290041][ T6414] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.792181][ T6429] FAULT_INJECTION: forcing a failure. [ 134.792181][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 134.792228][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.0.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.792260][ T6429] Tainted: [L]=SOFTLOCKUP [ 134.792269][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 134.792287][ T6429] Call Trace: [ 134.792296][ T6429] [ 134.792306][ T6429] dump_stack_lvl+0xe8/0x150 [ 134.792341][ T6429] should_fail_ex+0x3eb/0x540 [ 134.792373][ T6429] should_failslab+0xa8/0x100 [ 134.792400][ T6429] __kmalloc_cache_noprof+0x9e/0x600 [ 134.792436][ T6429] ? ovl_iterate+0x14d9/0x2160 [ 134.792464][ T6429] ? ovl_iterate+0x14d9/0x2160 [ 134.792501][ T6429] ovl_iterate+0x14d9/0x2160 [ 134.792561][ T6429] ? __pfx_ovl_iterate+0x10/0x10 [ 134.792592][ T6429] ? lockdep_unlock+0x5c/0xd0 [ 134.792620][ T6429] ? __lock_acquire+0x1511/0x2de0 [ 134.792656][ T6429] ? add_lock_to_list+0xc7/0x100 [ 134.792689][ T6429] ? __pfx_ovl_fill_real+0x10/0x10 [ 134.792750][ T6429] ? down_write+0x166/0x200 [ 134.792779][ T6429] ? wrap_directory_iterator+0x52/0xe0 [ 134.792804][ T6429] ? __pfx_ovl_iterate+0x10/0x10 [ 134.792835][ T6429] wrap_directory_iterator+0x96/0xe0 [ 134.792862][ T6429] iterate_dir+0x2e2/0x4d0 [ 134.792889][ T6429] __se_sys_getdents64+0xf1/0x280 [ 134.792916][ T6429] ? __pfx___se_sys_getdents64+0x10/0x10 [ 134.792937][ T6429] ? ksys_write+0x242/0x270 [ 134.792966][ T6429] ? __pfx_filldir64+0x10/0x10 [ 134.792991][ T6429] ? __pfx_ksys_write+0x10/0x10 [ 134.793035][ T6429] do_syscall_64+0x166/0x520 [ 134.793057][ T6429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.793081][ T6429] ? clear_bhb_loop+0x70/0xc0 [ 134.793109][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.793143][ T6429] RIP: 0033:0x7f2d9039e159 [ 134.793164][ T6429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.793183][ T6429] RSP: 002b:00007f2d912e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 134.793207][ T6429] RAX: ffffffffffffffda RBX: 00007f2d90625fa0 RCX: 00007f2d9039e159 [ 134.793235][ T6429] RDX: 0000000000000029 RSI: 9999999999999999 RDI: 0000000000000003 [ 134.793249][ T6429] RBP: 00007f2d912e7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.793262][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.793274][ T6429] R13: 00007f2d90626038 R14: 00007f2d90625fa0 R15: 00007ffc89d70d48 [ 134.793317][ T6429] [ 136.814740][ T6439] device-mapper: ioctl: Invalid ioctl structure: name c, dev f801 [ 137.237591][ T6451] netlink: 428 bytes leftover after parsing attributes in process `syz.2.222'. [ 138.505884][ T6463] FAULT_INJECTION: forcing a failure. [ 138.505884][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 138.505918][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.1.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.505946][ T6463] Tainted: [L]=SOFTLOCKUP [ 138.505954][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 138.505966][ T6463] Call Trace: [ 138.505974][ T6463] [ 138.505983][ T6463] dump_stack_lvl+0xe8/0x150 [ 138.506016][ T6463] should_fail_ex+0x3eb/0x540 [ 138.506044][ T6463] should_failslab+0xa8/0x100 [ 138.506067][ T6463] ? dst_alloc+0x105/0x170 [ 138.506102][ T6463] kmem_cache_alloc_noprof+0x9c/0x600 [ 138.506134][ T6463] ? lock_acquire+0x115/0x350 [ 138.506164][ T6463] ? dst_alloc+0x105/0x170 [ 138.506193][ T6463] ? __pfx_ip6_dst_gc+0x10/0x10 [ 138.506222][ T6463] dst_alloc+0x105/0x170 [ 138.506253][ T6463] ip6_pol_route+0xba1/0x14d0 [ 138.506281][ T6463] ? ip6_pol_route+0x163/0x14d0 [ 138.506315][ T6463] ? __pfx_ip6_pol_route+0x10/0x10 [ 138.506348][ T6463] ? __lock_acquire+0x747/0x2de0 [ 138.506386][ T6463] ? __lock_acquire+0x747/0x2de0 [ 138.506419][ T6463] fib6_rule_lookup+0x222/0x730 [ 138.506467][ T6463] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 138.506499][ T6463] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 138.506532][ T6463] ? lock_acquire+0x115/0x350 [ 138.506581][ T6463] ip6_route_output_flags+0x364/0x5d0 [ 138.506614][ T6463] ? ip6_route_output_flags+0x2e/0x5d0 [ 138.506650][ T6463] ip6_dst_lookup_tail+0x1a1/0x1610 [ 138.506686][ T6463] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 138.506709][ T6463] ? txopt_get+0x79/0x3f0 [ 138.506732][ T6463] ? txopt_get+0x79/0x3f0 [ 138.506753][ T6463] ? txopt_get+0x79/0x3f0 [ 138.506777][ T6463] ? __pfx__copy_from_iter+0x10/0x10 [ 138.506801][ T6463] ? txopt_get+0x343/0x3f0 [ 138.506827][ T6463] ? __pfx_txopt_get+0x10/0x10 [ 138.506856][ T6463] ip6_dst_lookup_flow+0x89/0x150 [ 138.506882][ T6463] rawv6_sendmsg+0xdd0/0x18c0 [ 138.506920][ T6463] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 138.506969][ T6463] ? __lock_acquire+0x747/0x2de0 [ 138.507007][ T6463] ? aa_sock_msg_perm+0xf5/0x210 [ 138.507032][ T6463] ? sock_rps_record_flow+0x19/0x350 [ 138.507065][ T6463] ? inet_sendmsg+0x298/0x320 [ 138.507091][ T6463] ? apparmor_socket_sendmsg+0x98/0x360 [ 138.507123][ T6463] ? __pfx_inet_sendmsg+0x10/0x10 [ 138.507151][ T6463] sock_sendmsg_nosec+0x10e/0x180 [ 138.507186][ T6463] ____sys_sendmsg+0x54e/0x850 [ 138.507218][ T6463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.507253][ T6463] ? import_iovec+0x73/0xa0 [ 138.507285][ T6463] ___sys_sendmsg+0x2a5/0x360 [ 138.507309][ T6463] ? __lock_acquire+0x747/0x2de0 [ 138.507346][ T6463] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.507408][ T6463] ? __fget_files+0x2a/0x420 [ 138.507435][ T6463] ? __fget_files+0x3a2/0x420 [ 138.507474][ T6463] __x64_sys_sendmsg+0x1b1/0x290 [ 138.507503][ T6463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.507555][ T6463] do_syscall_64+0x166/0x520 [ 138.507576][ T6463] ? trace_irq_disable+0x3b/0x140 [ 138.507629][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.507652][ T6463] ? clear_bhb_loop+0x70/0xc0 [ 138.507681][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.507704][ T6463] RIP: 0033:0x7fecd3b9e159 [ 138.507725][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.507745][ T6463] RSP: 002b:00007fecd4ae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.507770][ T6463] RAX: ffffffffffffffda RBX: 00007fecd3e25fa0 RCX: 00007fecd3b9e159 [ 138.507787][ T6463] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 138.507802][ T6463] RBP: 00007fecd4ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 138.507817][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.507830][ T6463] R13: 00007fecd3e26038 R14: 00007fecd3e25fa0 R15: 00007ffe6d00f368 [ 138.507867][ T6463] [ 139.162262][ T6469] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 194.672362][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.688115][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.294979][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 207.295091][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 248.065615][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 256.992117][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.007274][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 303.394444][ T32] INFO: task kworker/0:5:5695 blocked for more than 144 seconds. [ 303.394474][ T32] Tainted: G L syzkaller #0 [ 303.394487][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.394497][ T32] task:kworker/0:5 state:D stack:26728 pid:5695 tgid:5695 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 303.394564][ T32] Workqueue: events_power_efficient crda_timeout_work [ 303.394618][ T32] Call Trace: [ 303.394626][ T32] [ 303.394641][ T32] __schedule+0x17dd/0x5940 [ 303.394692][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 303.394725][ T32] ? __pfx___schedule+0x10/0x10 [ 303.394765][ T32] ? schedule+0x90/0x2b0 [ 303.394811][ T32] schedule+0x164/0x2b0 [ 303.394843][ T32] schedule_preempt_disabled+0x13/0x30 [ 303.394874][ T32] __mutex_lock+0x7c4/0x15a0 [ 303.394900][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 303.394954][ T32] ? crda_timeout_work+0x16/0x80 [ 303.394991][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 303.395030][ T32] ? rcu_is_watching+0x16/0xb0 [ 303.395053][ T32] ? process_scheduled_works+0x97a/0x1630 [ 303.395081][ T32] crda_timeout_work+0x16/0x80 [ 303.395115][ T32] process_scheduled_works+0xc3d/0x1630 [ 303.395173][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 303.395207][ T32] ? assign_work+0x3cf/0x5d0 [ 303.395238][ T32] worker_thread+0xa47/0xfb0 [ 303.395293][ T32] kthread+0x38b/0x480 [ 303.395326][ T32] ? __pfx_worker_thread+0x10/0x10 [ 303.395351][ T32] ? __pfx_kthread+0x10/0x10 [ 303.395384][ T32] ret_from_fork+0x514/0xb70 [ 303.395418][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 303.395450][ T32] ? __switch_to+0xc89/0x1420 [ 303.395480][ T32] ? __pfx_kthread+0x10/0x10 [ 303.395514][ T32] ret_from_fork_asm+0x1a/0x30 [ 303.395562][ T32] [ 303.395580][ T32] INFO: task kworker/0:6:5715 blocked for more than 144 seconds. [ 303.395599][ T32] Tainted: G L syzkaller #0 [ 303.395611][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.395622][ T32] task:kworker/0:6 state:D stack:23392 pid:5715 tgid:5715 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 303.395685][ T32] Workqueue: events reg_todo [ 303.395718][ T32] Call Trace: [ 303.395726][ T32] [ 303.395739][ T32] __schedule+0x17dd/0x5940 [ 303.395797][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 303.395832][ T32] ? __pfx___schedule+0x10/0x10 [ 303.395873][ T32] ? schedule+0x90/0x2b0 [ 303.395909][ T32] schedule+0x164/0x2b0 [ 303.395942][ T32] schedule_preempt_disabled+0x13/0x30 [ 303.395974][ T32] __mutex_lock+0x7c4/0x15a0 [ 303.396000][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 303.396027][ T32] ? reg_process_self_managed_hints+0x8d/0x160 [ 303.396063][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 303.396083][ T32] ? reg_process_self_managed_hint+0x1ab/0x4d0 [ 303.396117][ T32] ? __pfx_reg_process_self_managed_hint+0x10/0x10 [ 303.415058][ T32] ? reg_todo+0x8da/0xa40 [ 303.415107][ T32] reg_process_self_managed_hints+0x8d/0x160 [ 303.415143][ T32] reg_todo+0x8df/0xa40 [ 303.415178][ T32] ? process_scheduled_works+0x97a/0x1630 [ 303.415205][ T32] process_scheduled_works+0xc3d/0x1630 [ 303.415259][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 303.415290][ T32] ? assign_work+0x3cf/0x5d0 [ 303.415319][ T32] worker_thread+0xa47/0xfb0 [ 303.415376][ T32] ? __kthread_parkme+0x71/0x1f0 [ 303.415415][ T32] kthread+0x38b/0x480 [ 303.415447][ T32] ? __pfx_worker_thread+0x10/0x10 [ 303.415472][ T32] ? __pfx_kthread+0x10/0x10 [ 303.415506][ T32] ret_from_fork+0x514/0xb70 [ 303.415540][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 303.415572][ T32] ? __switch_to+0xc89/0x1420 [ 303.415602][ T32] ? __pfx_kthread+0x10/0x10 [ 303.415635][ T32] ret_from_fork_asm+0x1a/0x30 [ 303.415682][ T32] [ 303.415708][ T32] [ 303.415708][ T32] Showing all locks held in the system: [ 303.415718][ T32] locks held by kthreadd/2: 1, last CPU#1: [ 303.415734][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 303.415811][ T32] locks held by kworker/0:0/9: 2, last CPU#0: [ 303.415838][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.415890][ T32] #1: ffffc900000e7c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.415944][ T32] locks held by kworker/0:1/10: 2, last CPU#0: [ 303.415958][ T32] #0: ffff888032668d40 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.416016][ T32] #1: ffffc900000f7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.416071][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 303.416086][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.416156][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.416214][ T32] #2: ffff88805c4307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 303.416275][ T32] locks held by kworker/u8:1/13: 4, last CPU#1: [ 303.416291][ T32] #0: ffff888078807140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.416353][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.416416][ T32] #2: ffff88807d0e9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 303.416498][ T32] #3: ffff888076089700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 303.416561][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#0: [ 303.416578][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 303.416639][ T32] locks held by pr/ttyS0/16: 3, last CPU#0: [ 303.416655][ T32] #0: ffffffff8ee363b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 303.416724][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 303.416797][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 303.416854][ T32] locks held by kworker/1:0/25: 4, last CPU#1: [ 303.416870][ T32] #0: ffff88807eaf6140 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.416935][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.417012][ T32] #2: ffff888034d3d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 303.417076][ T32] #3: ffff88802a42e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 303.417141][ T32] locks held by kworker/1:1/30: 4, last CPU#1: [ 303.417157][ T32] #0: ffff888031171540 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.417222][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.417300][ T32] #2: ffff888076239440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 303.417363][ T32] #3: ffff88807608dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 303.417427][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 303.417443][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 303.417500][ T32] locks held by kworker/u8:2/42: 3, last CPU#1: [ 303.417516][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.417575][ T32] #1: ffffc90000b27c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.417634][ T32] #2: ffff88805ca807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 303.417709][ T32] locks held by kworker/u8:3/49: 3, last CPU#1: [ 303.417725][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.417789][ T32] #1: ffffc90000ba7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.417846][ T32] #2: ffff88805c9907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 303.417908][ T32] locks held by kworker/u8:4/59: 3, last CPU#1: [ 303.417924][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.417980][ T32] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418037][ T32] #2: ffff88805ce207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 303.418097][ T32] locks held by kworker/u8:5/76: 4, last CPU#1: [ 303.418114][ T32] #0: ffff88807f4de140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418175][ T32] #1: ffffc9000202fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418234][ T32] #2: ffff888076239440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 303.418296][ T32] #3: ffff88807608dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 303.418361][ T32] locks held by kworker/u8:6/638: 3, last CPU#1: [ 303.418377][ T32] #0: ffff888078847940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418439][ T32] #1: ffffc9000417fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418497][ T32] #2: ffff88802a42c080 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 303.418558][ T32] locks held by kworker/1:2/988: 3, last CPU#1: [ 303.418574][ T32] #0: ffff888028c8b540 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418647][ T32] #1: ffffc90004fb7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418717][ T32] #2: ffff88807d0ed440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 303.418784][ T32] locks held by kworker/u8:7/1100: 3, last CPU#1: [ 303.418799][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418853][ T32] #1: ffffc90005327c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.418906][ T32] #2: ffff88805ca907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 303.418984][ T32] locks held by kworker/u8:8/1156: 3, last CPU#1: [ 303.419000][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419057][ T32] #1: ffffc900052b7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419114][ T32] #2: ffff88805c8707a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 303.419175][ T32] locks held by kworker/u8:9/1163: 3, last CPU#1: [ 303.419191][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419248][ T32] #1: ffffc90005467c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419306][ T32] #2: ffff88805c4207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 303.419379][ T32] locks held by kworker/u8:10/2996: 3, last CPU#1: [ 303.419395][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419452][ T32] #1: ffffc9000e36fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419509][ T32] #2: ffff88805cf107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 303.419569][ T32] locks held by kworker/R-ipv6_/3197: 3, on CPU#1: [ 303.419585][ T32] #0: ffff888031e76140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419642][ T32] #1: ffffc9000ee6fc20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419699][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 303.419768][ T32] locks held by kworker/R-bat_e/3228: 2, last CPU#1: [ 303.419790][ T32] #0: ffff8880329e4940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419847][ T32] #1: ffffc9000efcfc20 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.419907][ T32] locks held by udevd/4983: 4, last CPU#1: [ 303.419922][ T32] #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470 [ 303.419977][ T32] #1: ffff88807e9fb6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 303.420037][ T32] #2: ffff88802a714378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 303.420102][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 303.420166][ T32] locks held by getty/5369: 2, on CPU#1: [ 303.420181][ T32] #0: ffff888035cb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 303.420246][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 303.420307][ T32] locks held by syz-executor/5602: 1, last CPU#1: [ 303.420323][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 303.420386][ T32] locks held by syz-executor/5611: 5, last CPU#1: [ 303.420402][ T32] #0: ffff88802895c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 303.420471][ T32] #1: ffff88805bf7b960 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 303.420535][ T32] #2: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 303.420589][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 303.420651][ T32] #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 303.420704][ T32] locks held by syz-executor/5612: 4, last CPU#1: [ 303.420731][ T32] #0: ffff888028a9e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 303.420819][ T32] #1: ffff888078f808a0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 303.420883][ T32] #2: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 303.420936][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 303.420999][ T32] locks held by syz-executor/5613: 2, last CPU#1: [ 303.421015][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 303.421077][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 303.421134][ T32] locks held by kworker/R-wg-cr/5684: 1, last CPU#1: [ 303.421150][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 303.421210][ T32] locks held by kworker/0:5/5695: 3, on CPU#0: [ 303.421225][ T32] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.421283][ T32] #1: ffffc9000467fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.421341][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 303.421406][ T32] locks held by kworker/1:4/5702: 3, last CPU#1: [ 303.421422][ T32] #0: ffff88807e244540 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.465570][ T32] #1: ffffc900046efc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.465649][ T32] #2: ffff88807608bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 303.465715][ T32] locks held by kworker/0:6/5715: 4, on CPU#0: [ 303.465731][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.465788][ T32] #1: ffffc900047cfc40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.465844][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa40 [ 303.465908][ T32] #3: ffff88805c4307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160 [ 303.465974][ T32] locks held by kworker/1:5/5744: 3, last CPU#1: [ 303.465990][ T32] #0: ffff88807e8dd540 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.466070][ T32] #1: ffffc900048afc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.466148][ T32] #2: ffff888036769440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 303.466216][ T32] locks held by dhcpcd-run-hook/6464: 4, last CPU#1: [ 303.466232][ T32] #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470 [ 303.466298][ T32] #1: ffff888034dd7678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 303.466372][ T32] #2: ffff8880764c7678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 303.466436][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 303.466518][ T32] locks held by kworker/u8:11/6472: 4, last CPU#0: [ 303.466535][ T32] #0: ffff888078847940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.466599][ T32] #1: ffffc900075ffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.466660][ T32] #2: ffff888076245440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 303.466724][ T32] #3: ffff88802a42c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 303.466788][ T32] locks held by kworker/u8:12/6473: 2, last CPU#1: [ 303.466805][ T32] #0: ffff88807e6f2940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.466864][ T32] #1: ffffc90003f6fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 303.466927][ T32] [ 303.466934][ T32] ============================================= [ 303.466934][ T32] [ 303.466958][ T32] NMI backtrace for cpu 0 [ 303.466977][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 303.467006][ T32] Tainted: [L]=SOFTLOCKUP [ 303.467014][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 303.467028][ T32] Call Trace: [ 303.467037][ T32] [ 303.467047][ T32] dump_stack_lvl+0xe8/0x150 [ 303.467078][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 303.467108][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 303.467142][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 303.467175][ T32] sys_info+0x135/0x170 [ 303.467200][ T32] watchdog+0x1058/0x10d0 [ 303.467240][ T32] ? watchdog+0x209/0x10d0 [ 303.467287][ T32] kthread+0x38b/0x480 [ 303.467321][ T32] ? __pfx_watchdog+0x10/0x10 [ 303.467351][ T32] ? __pfx_kthread+0x10/0x10 [ 303.467384][ T32] ret_from_fork+0x514/0xb70 [ 303.467419][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 303.467450][ T32] ? __switch_to+0xc89/0x1420 [ 303.467480][ T32] ? __pfx_kthread+0x10/0x10 [ 303.467514][ T32] ret_from_fork_asm+0x1a/0x30 [ 303.467561][ T32] [ 303.467588][ T32] Sending NMI from CPU 0 to CPUs 1: [ 303.467640][ C1] NMI backtrace for cpu 1 [ 303.467654][ C1] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.467678][ C1] Tainted: [L]=SOFTLOCKUP [ 303.467684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 303.467695][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 303.467724][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x2e/0x110 [ 303.467750][ C1] Code: 48 8b 46 08 48 8d 48 ff 48 89 c2 48 31 ca 48 39 ca 0f 86 e6 00 00 00 f3 48 0f bc c8 48 83 c1 fd 48 83 f9 03 0f 87 d3 00 00 00 <48> 8b 06 48 85 c0 0f 84 c7 00 00 00 41 57 41 56 41 54 53 48 8d 0c [ 303.467765][ C1] RSP: 0018:ffffc90000a18878 EFLAGS: 00000293 [ 303.467786][ C1] RAX: 0000000000000008 RBX: 1ffff92000143114 RCX: 0000000000000000 [ 303.467798][ C1] RDX: 000000000000000f RSI: ffffffff90505370 RDI: 0000000000000002 [ 303.467809][ C1] RBP: ffffc90000a189a0 R08: ffffc90000a1890f R09: 0000000000000000 [ 303.467821][ C1] R10: ffffc90000a18900 R11: fffff52000143122 R12: 0000000000000002 [ 303.467832][ C1] R13: ffff88807f169270 R14: dffffc0000000000 R15: ffff88816f2ff3c0 [ 303.467846][ C1] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 303.467860][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.467872][ C1] CR2: 00007ffc89d6ffcc CR3: 000000007058e000 CR4: 00000000003526f0 [ 303.467887][ C1] Call Trace: [ 303.467894][ C1] [ 303.467899][ C1] nft_do_chain_inet+0xe0/0x4b0 [ 303.467920][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 303.467937][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 303.467967][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 303.467991][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 303.468009][ C1] nf_hook_slow+0xc5/0x220 [ 303.468037][ C1] NF_HOOK+0x21f/0x3c0 [ 303.468055][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 303.468073][ C1] ? NF_HOOK+0x9e/0x3c0 [ 303.468088][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 303.468106][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 303.468127][ C1] ? ip_local_deliver+0x113/0x190 [ 303.468145][ C1] NF_HOOK+0x336/0x3c0 [ 303.468162][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 303.468179][ C1] ? NF_HOOK+0x9e/0x3c0 [ 303.468194][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 303.468212][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 303.468228][ C1] ? ip_rcv_core+0x88d/0xd50 [ 303.468247][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 303.468263][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 303.468281][ C1] process_backlog+0xa6b/0x18b0 [ 303.468310][ C1] ? process_backlog+0x3de/0x18b0 [ 303.468341][ C1] __napi_poll+0xaa/0x330 [ 303.468367][ C1] net_rx_action+0x61d/0xf50 [ 303.468398][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 303.468423][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 303.468453][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 303.468485][ C1] handle_softirqs+0x226/0x860 [ 303.468507][ C1] ? do_softirq+0x77/0xd0 [ 303.468527][ C1] ? kernel_fpu_end+0x62/0x80 [ 303.468545][ C1] do_softirq+0x77/0xd0 [ 303.468562][ C1] [ 303.468567][ C1] [ 303.468573][ C1] __local_bh_enable_ip+0x100/0x140 [ 303.468593][ C1] blake2s_compress+0xfa/0x1c00 [ 303.468620][ C1] ? chacha_permute+0x4ce/0xf00 [ 303.468652][ C1] ? __asan_memset+0x22/0x50 [ 303.468677][ C1] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 303.468695][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 303.468720][ C1] ? kernel_fpu_end+0x62/0x80 [ 303.468739][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 303.468758][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 303.468789][ C1] ? kernel_fpu_end+0x62/0x80 [ 303.468806][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 303.468824][ C1] ? blake2s_compress+0x1b4d/0x1c00 [ 303.468855][ C1] blake2s_final+0x10f/0x270 [ 303.468881][ C1] hmac+0x2dc/0x3b0 [ 303.468902][ C1] ? __pfx_hmac+0x10/0x10 [ 303.468927][ C1] ? curve25519_generate_public+0x2fed/0x3050 [ 303.468954][ C1] ? __asan_memset+0x22/0x50 [ 303.468979][ C1] message_ephemeral+0x233/0x310 [ 303.469002][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 303.469039][ C1] ? down_read+0x2b9/0x320 [ 303.469058][ C1] wg_noise_handshake_create_response+0x297/0x9f0 [ 303.469085][ C1] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 303.469108][ C1] ? wake_up_q+0x99/0xd0 [ 303.469132][ C1] ? rcu_is_watching+0x16/0xb0 [ 303.469152][ C1] ? __up_read+0x29c/0x930 [ 303.469175][ C1] ? __pfx___up_read+0x10/0x10 [ 303.469203][ C1] ? wg_noise_handshake_consume_initiation+0x70c/0x9b0 [ 303.469233][ C1] ? __lock_acquire+0x747/0x2de0 [ 303.469269][ C1] ? __asan_memset+0x22/0x50 [ 303.469297][ C1] ? blake2s_final+0x145/0x270 [ 303.469331][ C1] ? lock_acquire+0x115/0x350 [ 303.469363][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 303.469397][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 303.469427][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 303.469458][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 303.469490][ C1] wg_packet_send_handshake_response+0x110/0x2d0 [ 303.469524][ C1] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 303.469567][ C1] ? wg_socket_set_peer_endpoint_from_skb+0xd7/0x130 [ 303.469595][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 303.469619][ C1] wg_packet_handshake_receive_worker+0x6a9/0x10b0 [ 303.469650][ C1] ? look_up_lock_class+0x57/0x110 [ 303.469684][ C1] ? wg_packet_handshake_receive_worker+0x72f/0x10b0 [ 303.469712][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 303.469742][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 303.469770][ C1] ? lock_acquire+0x115/0x350 [ 303.469807][ C1] ? rcu_is_watching+0x16/0xb0 [ 303.469826][ C1] ? process_scheduled_works+0x97a/0x1630