last executing test programs: 7.87949639s ago: executing program 2 (id=432): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x810, 0x0}}], 0x34000, 0x0) 7.710135994s ago: executing program 2 (id=434): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00', 0x2000, &(0x7f00000041c0)={&(0x7f0000000340)={0x50, 0x0, 0x3, {0x7, 0x29, 0x75e, 0xffffffffd020860e, 0x0, 0xc, 0x0, 0x5a, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0xb, {0x6, 0xb, 0x0, {0x1, 0x8, 0x10000, 0x400, 0x10004, 0x1, 0x9d1f, 0x4, 0x2, 0xa000, 0x4, 0x0, 0xffffffffffffffff, 0x5ffffffa, 0xc1c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket(0xa, 0x1, 0x0) listen(r7, 0x80) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x7) r9 = socket(0x2, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) close(r2) r12 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r0) 7.456099112s ago: executing program 2 (id=436): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) 4.984750436s ago: executing program 4 (id=451): syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd61a7000200442f00fe8000200000000000000001000000bbfe8000000000000000000000000000aa0c2088be0000000201009900000086dd080088be"], 0x0) 4.812115856s ago: executing program 4 (id=453): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa0100ff, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x6e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@local}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 4.675948651s ago: executing program 4 (id=455): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, 0x0, 0x0, 0x0) 4.56624289s ago: executing program 4 (id=457): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101175129205705092006c70102030109022400010200100009045807028ab53800090506"], 0x0) syz_usb_connect$uac3(0x2, 0x154, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x142, 0x3, 0x1, 0x6, 0x2f1a57407a2e40c4, 0x5, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0xf6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6d, 0x1}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x404, 0x2, 0x5, 0x7, 0x788, 0x0, 0x6, 0xd513}, @power_domain={0xa, 0x24, 0x10, 0x0, 0xfffd, 0x5, 0x8, "9f"}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x200, 0x5, 0x7, 0x2, 0x1, 0x0, 0x0, 0x5}, @source_unit={0xc, 0x24, 0xb, 0x6, 0x2, 0x4, 0x9, 0x9}, @processing_unit={0x15, 0x24, 0x9, 0x3, 0x6, [0x3, 0x3, 0x3, 0x0]}, @power_domain={0x10, 0x24, 0x10, 0x5, 0x0, 0xf4, 0x9, "6d24c574644855"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x38, 0x4c, 0x8, 0x1, 0x7f, 0x94}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x800, 0x1, 0x2, "cbf9a7f325"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x1}, @as_header={0x17, 0x24, 0x1, 0x2, 0x8001, 0x7, 0x1002, 0x1, 0x3, 0x8, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x3, 0x1, 0x7f, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x7, 0x6, {0xa, 0x25, 0x25, 0x6, 0x3, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0x2f, "a5114e6c742ca5"}, @as_header={0x17, 0x24, 0x1, 0xa, 0xfffffff9, 0x7ff, 0x3, 0x3, 0x5, 0x8ebb, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4b, 0xf7, 0x3, {0xa, 0x25, 0x25, 0x20400000, 0xd8, 0x4}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x25, &(0x7f00000002c0)=@string={0x25, 0x3, "8bc0bfbf7a1563114e945e780347602488f09b97a221263b1b6b5a68e27401d9367e22"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xee, 0x0}, {0xfa, &(0x7f0000000540)=ANY=[@ANYBLOB="fa03e97e4c6b0bf86d0d5f3b29e3a2ede9811c2acfb7f11b4398301bec2d0670162f12fce3e58088b9cb0f85f48857c0470ffac2f18e615bc087e8b0337524e8a670ecf8f7922c8c728746ce24f70bd5e17ff3a98bde0eae967286f237d8992dd07b824ec0a9d76c81ac7247367ae65bf50aa6162d3e6da1875d4967935b7c34693fd95e3b6abae7e9fe121af1af096970cbb15b2e54586b72177082c2ad1dda1e205d4efb9a243337732e7a432b41c0d4f19eef2f74ce037cc46315abb6bd6204c2f380f1155e7c16476c456bbcd911d29d34c385af8ec799c2fef703572350cb0749c3eb01af7a9b3ec164f5e4c595c2f8f2"]}, {0x7b, &(0x7f0000000340)=@string={0x7b, 0x3, "52f051111f51ee16e353c9a27776980dc6d2ee4391588c29f808d6eb7638114f64d4c2ac57e0390e418d46ec0c375476bfb9de732bdb3ac5094e1865797ed6c6673aa2d520a22b05d0ce518ced5e761fb489977f5b2c4235fe9d75d9f1992a867054bef2260ee14e892970438aa374b282836da9111aa18443"}}]}) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) socket$inet6(0xa, 0x802, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, &(0x7f0000000f00)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1c00000029000100360003001d00000000000000000100000000000020000000290000003200000000000000000000000000ffffe0000001", @ANYRES32=0x0, @ANYBLOB="10000000290000000b000000000000082c0000"], 0x78}}], 0x1, 0x0) syz_clone(0x38000111, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f0000000780)={{r5}, "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"}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000440)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000040)={0x1, 0x8bb, 0x1}}) 4.403579059s ago: executing program 2 (id=458): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newsa={0x100, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d1, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}, @replay_thresh={0x8, 0xb, 0x2}]}, 0x100}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f00000000c0)=0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3.916092209s ago: executing program 3 (id=459): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0xfffffffe, 0x8db, 0x4, 0x9, 0xf, 0x8400}) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x2) getdents64(r0, &(0x7f0000000300)=""/55, 0x37) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$kcm(r3, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{0xc, 0x10d, 0x7}, {0xc, 0x117, 0x3ff}], 0x18}, 0x4000004) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200dfc907002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000000000002303be4ec7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000480)={0x0, 0x3, "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"}) 3.699220721s ago: executing program 0 (id=460): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x824, 0x0, 0x4b6ae4f95a5de35b) 3.467473744s ago: executing program 3 (id=461): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/stat\x00') getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) r2 = getuid() openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000a40)=0xfff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) (async) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r4, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r2, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x1}) (async) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r2, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100027387ac10c21509000000000000000902120001036f20800904c8020023486b63d051d79b7556591347c9a80cceb2c18ebf3a451823f8a209a2ec6bb408d5145dfb044692e7b269967b493dbfdb79f88ac28f269e8e0aeb9db62da9a808260dcca8dc1a58b7279186436d19fd43b7538a91099a676035111d8939c9d39ae06c013b75fd3fd9"], 0x0) 3.404121909s ago: executing program 0 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x1372, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdb010000000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES32, @ANYBLOB="14000300200100000000000000000000000000010400130014000200fe"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 3.19551186s ago: executing program 0 (id=463): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.947589054s ago: executing program 0 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 2.744946281s ago: executing program 0 (id=465): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6f17, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x25, "d545483e2f8c728a385e3b83b61bbd2f344fe8ff0e8a7b8d6269ee4e29adb2484df83d36dc"}, &(0x7f0000000080)=0x2d) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x9}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$FE_SET_TONE(r3, 0x6f42, &(0x7f0000000040)=0x2) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 2.512431427s ago: executing program 3 (id=466): r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x2b0000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000001c0)={'bond0\x00'}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4028840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="000426bd7000ffdbdf257a000000ad002a002d1a0010000700000000000000060005001600000001000d000000020006020202020202831f00f709ffffffffffff06000000faffffff23930000ffffffffffff620600008462100640080211000001040000000802110000003d0040080211000001010400000802110000010d004008021100000002000000080211000001150000ffffffffffff0f0000000f000008021100000102000000080000480211000000020000001000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4004090}, 0x40864) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000020578f1bd4d6d3faa10a8aa9b19c6288dc76fc6d3034dc8a6c0f0065626cf04dda6a496d69dec9c669a186", @ANYBLOB="7ef19f550000000008001b0000000000140014006d"], 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x88000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@loopback, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x100000, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 2.464058476s ago: executing program 1 (id=467): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, 0x0, 0x0, 0x0) 2.403352604s ago: executing program 1 (id=468): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) 2.155204947s ago: executing program 0 (id=469): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000000000000000001000000010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200000000000000000fffffffffffffffffeffffff0000000005000000"], 0xb4}, 0x1, 0x0, 0x0, 0x2048841}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000014000100000000001b000000e00000020000000000000000000000006401010000000000000000000000000000000000100000000a00200000000000e9ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000006000000000000000000000000000000feffffffffbfffff00"/108], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) close_range(r3, 0xffffffffffffffff, 0x2) r4 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) read(r5, &(0x7f0000000880)=""/4096, 0x1000) shmctl$IPC_RMID(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r6, 0x300000000000000}, 0x38) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}}) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_G_INPUT(r7, 0x80045626, &(0x7f00000002c0)) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x4ab03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.095929807s ago: executing program 3 (id=470): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ramfs\x00', 0x1) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7182, 0x0) sendfile(r3, r3, 0x0, 0x2000fb) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r4, 0x4, 0x7c00) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.756351561s ago: executing program 2 (id=471): keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.706872898s ago: executing program 2 (id=472): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b10009058206"], 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030428bd7000ffdbdf2500000300", @ANYRESHEX=r2, @ANYBLOB="000000004000020014001280090001007663616e"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2040000, 0x0) socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xa, 0x0, 0x99, 0x5, 0x7}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x70}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000034000000030a01080000000000000000010000000900030073797a320000000008000a40000000040900010073797a30000000002c000000060a01fdffffffffffffff00010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4040035}, 0x4008090) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x57e6, 0x880, 0x1, 0x282}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6956, 0x4, 0x2, 0x208}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ef1, 0x8000, 0x0, 0x1c3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70f9, 0x20, 0x0, 0x1c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1a32, 0x4000, 0x1, 0x1b2}}], 0x4, 0x0, &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r9, 0x12, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.140152786s ago: executing program 3 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000080900020073797a31000000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4048015) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) getsockname(r2, &(0x7f0000000300)=@tipc=@name, &(0x7f0000000380)=0x80) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) sendmsg$nl_route_sched(r4, 0x0, 0x44080) sendmsg$nl_route_sched(r4, 0x0, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4000018}, 0x1040) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x1, 0x1, 0x100, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x20004000) 1.075976854s ago: executing program 1 (id=474): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a30000440c0000140012800b0001006d"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x810) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x42001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) write$sndseq(r6, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 566.584004ms ago: executing program 1 (id=475): syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd61a7000200442f00fe8000200000000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000201009900000086dd080088be"], 0x0) (fail_nth: 5) 257.37173ms ago: executing program 4 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081ccfcffffff0300000002000000000000031f0000000500160004000000080017004e214e22"], 0x2c}, 0x1, 0x0, 0x0, 0x20044034}, 0x44004) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x840) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000210a03904ffffffff0000000000000000", @ANYRES32=0x0, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0xc841}, 0x40008c0) 155.427649ms ago: executing program 3 (id=477): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3af7912e, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x20000880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 155.066712ms ago: executing program 1 (id=478): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380), 0x0, 0x0) 80.296872ms ago: executing program 4 (id=479): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/4096, 0xc26}, 0x20ff}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x15) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000001fc0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201007008090400000102060000052406000105240000000d240f0100000000000000000006241a000008090581030800000000090401"], 0x0) write$FUSE_LK(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, {{0x80000000, 0xfff, 0x2}}}, 0x28) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @dev={0xac, 0x14, 0x14, 0x16}, 0x4620, 0x800002, 'nq\x00', 0x29, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 0s ago: executing program 1 (id=480): r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x2b0000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000001c0)={'bond0\x00'}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4028840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="000426bd7000ffdbdf257a000000ad002a002d1a0010000700000000000000060005001600000001000d000000020006020202020202831f00f709ffffffffffff06000000faffffff23930000ffffffffffff620600008462100640080211000001040000000802110000003d0040080211000001010400000802110000010d004008021100000002000000080211000001150000ffffffffffff0f0000000f000008021100000102000000080000480211000000020000001000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4004090}, 0x40864) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000020578f1bd4d6d3faa10a8aa9b19c6288dc76fc6d3034dc8a6c0f0065626cf04dda6a496d69dec9c669a186", @ANYBLOB="7ef19f550000000008001b0000000000140014006d"], 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x88000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@loopback, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x100000, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): mory cgroup out of memory: Killed process 6151 (syz.1.135) total-vm:104072kB, anon-rss:1308kB, file-rss:22988kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 103.161475][ T6146] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.175594][ T6146] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.189617][ T6146] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.201191][ T6146] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.207255][ T6146] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.214510][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.245156][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.303397][ T6148] syz.3.133 uses obsolete (PF_INET,SOCK_PACKET) [ 103.330458][ T6148] xt_l2tp: wrong L2TP version: 94 [ 103.353684][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 103.435669][ T6148] bond1 (unregistering): Released all slaves [ 103.578179][ T5673] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.665815][ T6177] FAULT_INJECTION: forcing a failure. [ 103.665815][ T6177] name failslab, interval 1, probability 0, space 0, times 1 [ 103.684537][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.4.144 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.684560][ T6177] Tainted: [L]=SOFTLOCKUP [ 103.684567][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.684576][ T6177] Call Trace: [ 103.684583][ T6177] [ 103.684590][ T6177] dump_stack_lvl+0xe8/0x150 [ 103.684618][ T6177] should_fail_ex+0x40c/0x560 [ 103.684647][ T6177] should_failslab+0xa8/0x100 [ 103.684673][ T6177] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 103.684694][ T6177] ? skb_clone+0x212/0x3a0 [ 103.684713][ T6177] ? skb_clone+0x212/0x3a0 [ 103.684737][ T6177] skb_clone+0x212/0x3a0 [ 103.684760][ T6177] __netlink_deliver_tap+0x413/0x860 [ 103.684787][ T6177] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.684807][ T6177] netlink_deliver_tap+0x19c/0x1b0 [ 103.684827][ T6177] netlink_sendskb+0x68/0x140 [ 103.684846][ T6177] netlink_rcv_skb+0x2a4/0x4a0 [ 103.684866][ T6177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.684887][ T6177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.684926][ T6177] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.684946][ T6177] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.684971][ T6177] netlink_unicast+0x7bb/0x940 [ 103.684998][ T6177] netlink_sendmsg+0x813/0xb40 [ 103.685027][ T6177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.685052][ T6177] ? aa_sock_msg_perm+0xf1/0x1b0 [ 103.685075][ T6177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.685093][ T6177] sock_sendmsg_nosec+0x13a/0x180 [ 103.685117][ T6177] ____sys_sendmsg+0x54e/0x850 [ 103.685142][ T6177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.685175][ T6177] ___sys_sendmsg+0x2a5/0x360 [ 103.685195][ T6177] ? __lock_acquire+0x683/0x2cf0 [ 103.685221][ T6177] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.685241][ T6177] ? get_pid_task+0x20/0x1f0 [ 103.685265][ T6177] ? get_pid_task+0x20/0x1f0 [ 103.685286][ T6177] ? get_pid_task+0x20/0x1f0 [ 103.685335][ T6177] ? __fget_files+0x2a/0x420 [ 103.685357][ T6177] ? __fget_files+0x3a2/0x420 [ 103.685388][ T6177] __sys_sendmsg+0x177/0x240 [ 103.685410][ T6177] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.685448][ T6177] __do_fast_syscall_32+0x23e/0x6f0 [ 103.685469][ T6177] ? do_fast_syscall_32+0x33/0x70 [ 103.685489][ T6177] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.685508][ T6177] ? asm_int80_emulation+0x1a/0x20 [ 103.685525][ T6177] ? do_int80_emulation+0x29f/0x550 [ 103.685545][ T6177] ? trace_irq_disable+0x3b/0x140 [ 103.685569][ T6177] do_fast_syscall_32+0x33/0x70 [ 103.685592][ T6177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.685611][ T6177] RIP: 0023:0xf7f290ec [ 103.685627][ T6177] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 103.685641][ T6177] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 103.685659][ T6177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 103.685670][ T6177] RDX: 0000000004040050 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.685680][ T6177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.685689][ T6177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.685699][ T6177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.685725][ T6177] [ 103.690081][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 103.878485][ T6183] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 103.926296][ T5673] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 104.036568][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 104.080293][ T6183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.141'. [ 104.100449][ T5673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.119687][ T5673] usb 2-1: config 0 descriptor?? [ 104.140479][ T5673] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 104.194711][ T6189] syz.2.147 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 104.208182][ T6183] .`: renamed from bond0 [ 104.213842][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.2.147 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.213874][ T6189] Tainted: [L]=SOFTLOCKUP [ 104.213880][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.213890][ T6189] Call Trace: [ 104.213897][ T6189] [ 104.213903][ T6189] dump_stack_lvl+0xe8/0x150 [ 104.213931][ T6189] dump_header+0xd3/0x4b0 [ 104.213952][ T6189] oom_kill_process+0x3ab/0x970 [ 104.213972][ T6189] out_of_memory+0x1064/0x1480 [ 104.213986][ T6189] ? try_charge_memcg+0xbca/0x1590 [ 104.214019][ T6189] ? __pfx_out_of_memory+0x10/0x10 [ 104.214036][ T6189] ? do_raw_spin_unlock+0xf5/0x210 [ 104.214062][ T6189] try_charge_memcg+0xc74/0x1590 [ 104.214094][ T6189] ? __pfx_try_charge_memcg+0x10/0x10 [ 104.214114][ T6189] ? do_fast_syscall_32+0x33/0x70 [ 104.214139][ T6189] ? percpu_ref_tryget+0x15/0x180 [ 104.214165][ T6189] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 104.214192][ T6189] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 104.214210][ T6189] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 104.214230][ T6189] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 104.214263][ T6189] kmem_cache_alloc_noprof+0x350/0x5f0 [ 104.214281][ T6189] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 104.214297][ T6189] ? alloc_empty_file+0x5b/0x1d0 [ 104.214318][ T6189] ? alloc_empty_file+0x5b/0x1d0 [ 104.214342][ T6189] alloc_empty_file+0x5b/0x1d0 [ 104.214362][ T6189] alloc_file_pseudo+0x115/0x1e0 [ 104.214383][ T6189] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 104.214411][ T6189] sock_alloc_file+0xb8/0x2e0 [ 104.214435][ T6189] __sys_socketpair+0x386/0x560 [ 104.214467][ T6189] __ia32_sys_socketpair+0x9a/0xb0 [ 104.214492][ T6189] __do_fast_syscall_32+0x23e/0x6f0 [ 104.214511][ T6189] ? do_fast_syscall_32+0x33/0x70 [ 104.214529][ T6189] ? lockdep_hardirqs_on+0x7a/0x110 [ 104.214546][ T6189] ? irqentry_exit+0x10f/0x8f0 [ 104.214562][ T6189] ? trace_irq_disable+0x3b/0x140 [ 104.214585][ T6189] do_fast_syscall_32+0x33/0x70 [ 104.214606][ T6189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.214624][ T6189] RIP: 0023:0xf700f0ec [ 104.214640][ T6189] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 104.214652][ T6189] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000168 [ 104.214669][ T6189] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000002 [ 104.214679][ T6189] RDX: 0000000000000000 RSI: 0000000080000640 RDI: 0000000000000000 [ 104.214688][ T6189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.214697][ T6189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.214706][ T6189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.214732][ T6189] [ 104.214739][ T6189] memory: usage 8kB, limit 8kB, failcnt 21 [ 104.490096][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.564352][ T6189] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 104.605250][ T6189] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 104.616014][ T6189] Memory cgroup stats for /syz2/test: [ 104.636662][ T6189] cache 0 [ 104.698279][ T6189] rss 0 [ 104.704192][ T6189] rss_huge 0 [ 104.719210][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 104.730999][ T6189] shmem 0 [ 104.735929][ T6189] mapped_file 0 [ 104.751488][ T6189] dirty 0 [ 104.760475][ T6189] writeback 0 [ 104.765824][ T6194] netlink: 13 bytes leftover after parsing attributes in process `syz.0.148'. [ 104.781455][ T6189] workingset_refault_anon 0 [ 104.786193][ T6189] workingset_refault_file 0 [ 104.793761][ T6189] swap 0 [ 104.801399][ T6189] swapcached 0 [ 104.808768][ T6189] pgpgin 0 [ 104.815131][ T6189] pgpgout 0 [ 104.821227][ T6189] pgfault 0 [ 104.828165][ T6189] pgmajfault 0 [ 104.834802][ T6189] inactive_anon 0 [ 104.842164][ T6189] active_anon 0 [ 104.853409][ T6189] inactive_file 0 [ 104.863004][ T6189] active_file 0 [ 104.873654][ T6189] unevictable 0 [ 104.878987][ T6189] hierarchical_memory_limit 8192 [ 104.887079][ T6189] hierarchical_memsw_limit 9223372036854771712 [ 104.899508][ T6189] total_cache 0 [ 104.905263][ T6189] total_rss 0 [ 104.912724][ T6189] total_rss_huge 0 [ 104.918127][ T6189] total_shmem 0 [ 104.935406][ T6189] total_mapped_file 0 [ 104.939549][ T6189] total_dirty 0 [ 104.944762][ T6189] total_writeback 0 [ 104.959629][ T6189] total_workingset_refault_anon 0 [ 104.989530][ T6189] total_workingset_refault_file 0 [ 105.012928][ T6189] total_swap 0 [ 105.027171][ T6189] total_swapcached 0 [ 105.047975][ T6189] total_pgpgin 0 [ 105.070360][ T6189] total_pgpgout 0 [ 105.077650][ T6199] FAULT_INJECTION: forcing a failure. [ 105.077650][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 105.098466][ T6199] CPU: 0 UID: 0 PID: 6199 Comm: syz.3.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.098489][ T6199] Tainted: [L]=SOFTLOCKUP [ 105.098495][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.098504][ T6199] Call Trace: [ 105.098510][ T6199] [ 105.098516][ T6199] dump_stack_lvl+0xe8/0x150 [ 105.098544][ T6199] should_fail_ex+0x40c/0x560 [ 105.098569][ T6199] should_failslab+0xa8/0x100 [ 105.098598][ T6199] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 105.098618][ T6199] ? skb_clone+0x212/0x3a0 [ 105.098636][ T6199] ? skb_clone+0x212/0x3a0 [ 105.098659][ T6199] skb_clone+0x212/0x3a0 [ 105.098682][ T6199] __netlink_deliver_tap+0x413/0x860 [ 105.098712][ T6199] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.098732][ T6199] netlink_deliver_tap+0x19c/0x1b0 [ 105.098753][ T6199] netlink_sendskb+0x68/0x140 [ 105.098781][ T6199] netlink_rcv_skb+0x2a4/0x4a0 [ 105.098801][ T6199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.098821][ T6199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.098847][ T6199] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.098862][ T6199] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.098881][ T6199] netlink_unicast+0x7bb/0x940 [ 105.098902][ T6199] netlink_sendmsg+0x813/0xb40 [ 105.098925][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.098944][ T6199] ? aa_sock_msg_perm+0xf1/0x1b0 [ 105.098962][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.098978][ T6199] sock_sendmsg_nosec+0x13a/0x180 [ 105.099002][ T6199] ____sys_sendmsg+0x54e/0x850 [ 105.099024][ T6199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.099053][ T6199] ___sys_sendmsg+0x2a5/0x360 [ 105.099070][ T6199] ? __lock_acquire+0x683/0x2cf0 [ 105.099095][ T6199] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.099110][ T6199] ? get_pid_task+0x20/0x1f0 [ 105.099130][ T6199] ? get_pid_task+0x20/0x1f0 [ 105.099148][ T6199] ? get_pid_task+0x20/0x1f0 [ 105.099197][ T6199] ? __fget_files+0x2a/0x420 [ 105.099217][ T6199] ? __fget_files+0x3a2/0x420 [ 105.099241][ T6199] __sys_sendmsg+0x177/0x240 [ 105.099261][ T6199] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.099293][ T6199] __do_fast_syscall_32+0x23e/0x6f0 [ 105.099315][ T6199] ? do_fast_syscall_32+0x33/0x70 [ 105.099334][ T6199] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.099350][ T6199] ? asm_int80_emulation+0x1a/0x20 [ 105.099366][ T6199] ? do_int80_emulation+0x29f/0x550 [ 105.099384][ T6199] ? trace_irq_disable+0x3b/0x140 [ 105.099408][ T6199] do_fast_syscall_32+0x33/0x70 [ 105.099429][ T6199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.099447][ T6199] RIP: 0023:0xf6fef0ec [ 105.099461][ T6199] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 105.099473][ T6199] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 105.099488][ T6199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 105.099498][ T6199] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.099508][ T6199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.099517][ T6199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.099527][ T6199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.099551][ T6199] [ 105.267913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 105.276026][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.281501][ T6189] total_pgfault 0 [ 105.281808][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.287983][ T6189] total_pgmajfault 0 [ 105.290942][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.328384][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.423747][ T6189] total_inactive_anon 0 [ 105.487340][ T6189] total_active_anon 0 [ 105.491475][ T6189] total_inactive_file 0 [ 105.495643][ T6189] total_active_file 0 [ 105.499699][ T6189] total_unevictable 0 [ 105.503705][ T6189] anon_cost 0 [ 105.507008][ T6189] file_cost 0 [ 105.513858][ T6189] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.147,pid=6188,uid=0 [ 105.553092][ T6189] Memory cgroup out of memory: Killed process 6189 (syz.2.147) total-vm:104072kB, anon-rss:1308kB, file-rss:23012kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 105.585617][ T5673] gp8psk: usb in 128 operation failed. [ 105.608711][ T5673] gp8psk: usb in 137 operation failed. [ 105.620826][ T5673] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.632635][ T5673] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 105.643739][ T5673] usb 2-1: media controller created [ 105.718764][ T5673] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.793032][ T5673] gp8psk_fe: Frontend attached [ 105.819274][ T5673] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 105.858514][ T5673] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 105.906223][ T3811] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.007706][ T3811] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.117075][ T5673] gp8psk: usb in 138 operation failed. [ 106.145034][ T5673] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 106.204406][ T5673] gp8psk: found Genpix USB device pID = 203 (hex) [ 106.264166][ T5673] usb 2-1: USB disconnect, device number 8 [ 106.558804][ T5673] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 106.927903][ T5673] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.088000][ T5673] usb 2-1: Using ep0 maxpacket: 32 [ 107.093899][ T5673] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 107.104062][ T5673] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 107.112721][ T5673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.124747][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.132854][ T5673] usb 2-1: Product: syz [ 107.137328][ T5673] usb 2-1: Manufacturer: syz [ 107.142072][ T5673] usb 2-1: SerialNumber: syz [ 107.150544][ T5673] usb 2-1: config 0 descriptor?? [ 107.159119][ T5673] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 107.357748][ T5673] gspca_sunplus: reg_r err -32 [ 107.541386][ T6224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.547547][ T6224] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.554478][ T6224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.562036][ T6224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.568271][ T6224] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.576587][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.595865][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.808568][ T5704] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.828014][ T3811] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 107.927871][ T5610] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.968477][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 107.974043][ T5704] usb 3-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 107.981725][ T3811] usb 1-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=a7.ea [ 107.994143][ T3811] usb 1-1: config 0 has an invalid interface number: 141 but max is 0 [ 107.997647][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.002552][ T3811] usb 1-1: config 0 has no interface number 0 [ 108.012703][ T5704] usb 3-1: Product: syz [ 108.017065][ T3811] usb 1-1: config 0 interface 141 has no altsetting 0 [ 108.021496][ T5704] usb 3-1: Manufacturer: syz [ 108.030068][ T3811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.033104][ T5704] usb 3-1: SerialNumber: syz [ 108.049076][ T3811] usb 1-1: config 0 descriptor?? [ 108.088855][ T5610] usb 5-1: Using ep0 maxpacket: 32 [ 108.094690][ T5610] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 108.105452][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.117141][ T5610] usb 5-1: config 0 descriptor?? [ 108.126578][ T5610] gspca_main: sunplus-2.14.0 probing 041e:400b [ 108.262791][ T5704] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.263541][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.283682][ T5704] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 108.292318][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.303044][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.314476][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.349197][ T3811] usb 1-1: string descriptor 0 read error: -71 [ 108.358680][ T5673] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 108.389534][ T3811] snd-usb-caiaq 1-1:0.141: can't set alt interface. [ 108.398490][ T5673] usb 2-1: USB disconnect, device number 9 [ 108.422127][ T3811] usb 1-1: unable to init card! (ret=-5) [ 108.440502][ T3811] snd-usb-caiaq 1-1:0.141: probe with driver snd-usb-caiaq failed with error -5 [ 108.469149][ T6250] FAULT_INJECTION: forcing a failure. [ 108.469149][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 108.483471][ T3811] usb 1-1: USB disconnect, device number 4 [ 108.514377][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.1.166 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.514402][ T6250] Tainted: [L]=SOFTLOCKUP [ 108.514409][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.514418][ T6250] Call Trace: [ 108.514425][ T6250] [ 108.514432][ T6250] dump_stack_lvl+0xe8/0x150 [ 108.514461][ T6250] should_fail_ex+0x40c/0x560 [ 108.514496][ T6250] should_failslab+0xa8/0x100 [ 108.514523][ T6250] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 108.514543][ T6250] ? local_lock_release+0x9c/0x160 [ 108.514562][ T6250] ? __alloc_skb+0x1d7/0x7a0 [ 108.514577][ T6250] ? __alloc_skb+0x1d7/0x7a0 [ 108.514599][ T6250] __alloc_skb+0x1d7/0x7a0 [ 108.514619][ T6250] netlink_ack+0x136/0xb30 [ 108.514638][ T6250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.514663][ T6250] ? __pfx_nl80211_post_doit+0x10/0x10 [ 108.514689][ T6250] ? __pfx_ref_tracker_free+0x10/0x10 [ 108.514721][ T6250] netlink_rcv_skb+0x2a4/0x4a0 [ 108.514742][ T6250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.514768][ T6250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.514802][ T6250] ? down_read+0x2be/0x330 [ 108.514827][ T6250] genl_rcv+0x28/0x40 [ 108.514849][ T6250] netlink_unicast+0x7bb/0x940 [ 108.514876][ T6250] netlink_sendmsg+0x813/0xb40 [ 108.514905][ T6250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.514930][ T6250] ? aa_sock_msg_perm+0xf1/0x1b0 [ 108.514953][ T6250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.514972][ T6250] sock_sendmsg_nosec+0x13a/0x180 [ 108.514999][ T6250] ____sys_sendmsg+0x54e/0x850 [ 108.515024][ T6250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.515058][ T6250] ___sys_sendmsg+0x2a5/0x360 [ 108.515077][ T6250] ? __lock_acquire+0x683/0x2cf0 [ 108.515105][ T6250] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.515124][ T6250] ? get_pid_task+0x20/0x1f0 [ 108.515147][ T6250] ? get_pid_task+0x20/0x1f0 [ 108.515168][ T6250] ? get_pid_task+0x20/0x1f0 [ 108.515218][ T6250] ? __fget_files+0x2a/0x420 [ 108.515239][ T6250] ? __fget_files+0x3a2/0x420 [ 108.515271][ T6250] __sys_sendmsg+0x177/0x240 [ 108.515293][ T6250] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.515330][ T6250] __do_fast_syscall_32+0x23e/0x6f0 [ 108.515351][ T6250] ? do_fast_syscall_32+0x33/0x70 [ 108.515371][ T6250] ? lockdep_hardirqs_on+0x7a/0x110 [ 108.515390][ T6250] ? asm_int80_emulation+0x1a/0x20 [ 108.515408][ T6250] ? do_int80_emulation+0x29f/0x550 [ 108.515427][ T6250] ? trace_irq_disable+0x3b/0x140 [ 108.515451][ T6250] do_fast_syscall_32+0x33/0x70 [ 108.515473][ T6250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.515500][ T6250] RIP: 0023:0xf6fff0ec [ 108.515516][ T6250] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 108.515530][ T6250] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 108.515548][ T6250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006000 [ 108.515560][ T6250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.515569][ T6250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.515579][ T6250] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 108.515588][ T6250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.515614][ T6250] [ 108.854836][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.912316][ T5704] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 108.963614][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.147907][ T3811] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.211550][ T6264] FAULT_INJECTION: forcing a failure. [ 109.211550][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 109.224354][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.1.169 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.224380][ T6264] Tainted: [L]=SOFTLOCKUP [ 109.224390][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.224397][ T6264] Call Trace: [ 109.224405][ T6264] [ 109.224410][ T6264] dump_stack_lvl+0xe8/0x150 [ 109.224433][ T6264] should_fail_ex+0x40c/0x560 [ 109.224451][ T6264] should_failslab+0xa8/0x100 [ 109.224471][ T6264] __kmalloc_cache_noprof+0xa8/0x660 [ 109.224488][ T6264] ? tcf_proto_create+0x65/0x330 [ 109.224504][ T6264] ? tcf_proto_create+0x65/0x330 [ 109.224524][ T6264] tcf_proto_create+0x65/0x330 [ 109.224544][ T6264] tc_new_tfilter+0x13c9/0x1850 [ 109.224575][ T6264] ? __pfx_tc_new_tfilter+0x10/0x10 [ 109.224599][ T6264] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 109.224622][ T6264] ? __pfx_tc_new_tfilter+0x10/0x10 [ 109.224636][ T6264] rtnetlink_rcv_msg+0x802/0xc00 [ 109.224651][ T6264] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 109.224662][ T6264] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.224673][ T6264] ? ref_tracker_free+0x689/0x830 [ 109.224690][ T6264] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.224712][ T6264] netlink_rcv_skb+0x226/0x4a0 [ 109.224727][ T6264] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.224740][ T6264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.224762][ T6264] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.224775][ T6264] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.224793][ T6264] netlink_unicast+0x7bb/0x940 [ 109.224811][ T6264] netlink_sendmsg+0x813/0xb40 [ 109.224831][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.224848][ T6264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 109.224864][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.224878][ T6264] sock_sendmsg_nosec+0x13a/0x180 [ 109.224897][ T6264] ____sys_sendmsg+0x54e/0x850 [ 109.224919][ T6264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.224943][ T6264] ___sys_sendmsg+0x2a5/0x360 [ 109.224956][ T6264] ? __lock_acquire+0x683/0x2cf0 [ 109.224975][ T6264] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.224989][ T6264] ? get_pid_task+0x20/0x1f0 [ 109.225005][ T6264] ? get_pid_task+0x20/0x1f0 [ 109.225020][ T6264] ? get_pid_task+0x20/0x1f0 [ 109.225054][ T6264] ? __fget_files+0x2a/0x420 [ 109.225070][ T6264] ? __fget_files+0x3a2/0x420 [ 109.225091][ T6264] __sys_sendmsg+0x177/0x240 [ 109.225107][ T6264] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.225132][ T6264] __do_fast_syscall_32+0x23e/0x6f0 [ 109.225148][ T6264] ? do_fast_syscall_32+0x33/0x70 [ 109.225162][ T6264] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.225176][ T6264] ? asm_int80_emulation+0x1a/0x20 [ 109.225187][ T6264] ? do_int80_emulation+0x29f/0x550 [ 109.225201][ T6264] ? trace_irq_disable+0x3b/0x140 [ 109.225219][ T6264] do_fast_syscall_32+0x33/0x70 [ 109.225234][ T6264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.225249][ T6264] RIP: 0023:0xf6fff0ec [ 109.225260][ T6264] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 109.225269][ T6264] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 109.225282][ T6264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 109.225290][ T6264] RDX: 0000000024040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.225297][ T6264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.225304][ T6264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.225311][ T6264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.225329][ T6264] [ 109.319609][ T3811] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 109.587999][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.589244][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.594108][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.600561][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.612244][ T3811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.647724][ T3811] usb 1-1: config 0 descriptor?? [ 109.659486][ T3811] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 109.743350][ T6242] netlink: 148 bytes leftover after parsing attributes in process `syz.4.164'. [ 109.766969][ T6242] netlink: 'syz.4.164': attribute type 10 has an invalid length. [ 109.775079][ T6242] netlink: 152 bytes leftover after parsing attributes in process `syz.4.164'. [ 109.786776][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.800274][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.821977][ T6272] FAULT_INJECTION: forcing a failure. [ 109.821977][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 109.837248][ T6272] CPU: 1 UID: 0 PID: 6272 Comm: syz.1.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.837274][ T6272] Tainted: [L]=SOFTLOCKUP [ 109.837280][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.837293][ T6272] Call Trace: [ 109.837299][ T6272] [ 109.837306][ T6272] dump_stack_lvl+0xe8/0x150 [ 109.837337][ T6272] should_fail_ex+0x40c/0x560 [ 109.837364][ T6272] should_failslab+0xa8/0x100 [ 109.837391][ T6272] __kmalloc_noprof+0xfe/0x720 [ 109.837422][ T6272] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 109.837449][ T6272] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 109.837483][ T6272] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 109.837517][ T6272] genl_family_rcv_msg_doit+0xda/0x340 [ 109.837549][ T6272] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 109.837582][ T6272] ? apparmor_capable+0x126/0x170 [ 109.837606][ T6272] ? bpf_lsm_capable+0x9/0x20 [ 109.837627][ T6272] ? security_capable+0x7e/0x2c0 [ 109.837659][ T6272] genl_rcv_msg+0x614/0x7a0 [ 109.837690][ T6272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.837714][ T6272] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 109.837737][ T6272] ? __pfx_nl80211_tdls_mgmt+0x10/0x10 [ 109.837758][ T6272] ? __pfx_nl80211_post_doit+0x10/0x10 [ 109.837784][ T6272] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.837815][ T6272] netlink_rcv_skb+0x226/0x4a0 [ 109.837834][ T6272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.837856][ T6272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.837884][ T6272] ? down_read+0x2be/0x330 [ 109.837908][ T6272] genl_rcv+0x28/0x40 [ 109.837927][ T6272] netlink_unicast+0x7bb/0x940 [ 109.837953][ T6272] netlink_sendmsg+0x813/0xb40 [ 109.837982][ T6272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.838001][ T6272] ? aa_sock_msg_perm+0xf1/0x1b0 [ 109.838018][ T6272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.838033][ T6272] sock_sendmsg_nosec+0x13a/0x180 [ 109.838056][ T6272] ____sys_sendmsg+0x54e/0x850 [ 109.838075][ T6272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.838102][ T6272] ___sys_sendmsg+0x2a5/0x360 [ 109.838117][ T6272] ? __lock_acquire+0x683/0x2cf0 [ 109.838140][ T6272] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.838158][ T6272] ? get_pid_task+0x20/0x1f0 [ 109.838178][ T6272] ? get_pid_task+0x20/0x1f0 [ 109.838203][ T6272] ? get_pid_task+0x20/0x1f0 [ 109.838247][ T6272] ? __fget_files+0x2a/0x420 [ 109.838265][ T6272] ? __fget_files+0x3a2/0x420 [ 109.838294][ T6272] __sys_sendmsg+0x177/0x240 [ 109.838315][ T6272] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.838351][ T6272] __do_fast_syscall_32+0x23e/0x6f0 [ 109.838373][ T6272] ? do_fast_syscall_32+0x33/0x70 [ 109.838392][ T6272] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.838419][ T6272] ? asm_int80_emulation+0x1a/0x20 [ 109.838435][ T6272] ? do_int80_emulation+0x29f/0x550 [ 109.838453][ T6272] ? trace_irq_disable+0x3b/0x140 [ 109.838476][ T6272] do_fast_syscall_32+0x33/0x70 [ 109.838497][ T6272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.838513][ T6272] RIP: 0023:0xf6fff0ec [ 109.838526][ T6272] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 109.838537][ T6272] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 109.838553][ T6272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 109.838564][ T6272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.838572][ T6272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.838579][ T6272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.838586][ T6272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.838607][ T6272] [ 110.204643][ T5610] gspca_sunplus: reg_w_riv err -110 [ 110.210072][ T5610] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 110.221688][ T5610] usb 5-1: USB disconnect, device number 4 [ 110.345222][ T24] usb 3-1: USB disconnect, device number 7 [ 110.882343][ T3811] gp8psk: usb in 128 operation failed. [ 110.898878][ T3811] gp8psk: usb in 137 operation failed. [ 110.911965][ T3811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.932419][ T3811] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 110.975461][ T3811] usb 1-1: media controller created [ 111.087755][ T3811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.172090][ T3811] gp8psk_fe: Frontend attached [ 111.182904][ T3811] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 111.219767][ T3811] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 111.472713][ T3811] gp8psk: usb in 138 operation failed. [ 111.496016][ T3811] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 111.532269][ T3811] gp8psk: found Genpix USB device pID = 203 (hex) [ 111.572493][ T3811] usb 1-1: USB disconnect, device number 5 [ 111.839271][ T3811] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 112.568208][ T130] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.586639][ T130] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.607461][ T130] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.635535][ T130] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.897896][ T3811] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 112.968553][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 113.067876][ T3811] usb 2-1: Using ep0 maxpacket: 16 [ 113.078420][ T3811] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 113.096393][ T3811] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 250, using maximum allowed: 30 [ 113.112293][ T3811] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 113.136167][ T3811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.143295][ T3811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.155231][ T3811] usb 2-1: config 0 descriptor?? [ 113.300692][ T6349] syz.2.195 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 113.317505][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.2.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.317534][ T6349] Tainted: [L]=SOFTLOCKUP [ 113.317540][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.317559][ T6349] Call Trace: [ 113.317567][ T6349] [ 113.317574][ T6349] dump_stack_lvl+0xe8/0x150 [ 113.317606][ T6349] dump_header+0xd3/0x4b0 [ 113.317633][ T6349] oom_kill_process+0x3ab/0x970 [ 113.317657][ T6349] out_of_memory+0x1064/0x1480 [ 113.317674][ T6349] ? try_charge_memcg+0xbca/0x1590 [ 113.317711][ T6349] ? __pfx_out_of_memory+0x10/0x10 [ 113.317727][ T6349] ? do_raw_spin_unlock+0xf5/0x210 [ 113.317756][ T6349] try_charge_memcg+0xc74/0x1590 [ 113.317798][ T6349] ? __pfx_try_charge_memcg+0x10/0x10 [ 113.317827][ T6349] ? percpu_ref_tryget+0x15/0x180 [ 113.317855][ T6349] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 113.317884][ T6349] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 113.317906][ T6349] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 113.317929][ T6349] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 113.317968][ T6349] kmem_cache_alloc_lru_noprof+0x358/0x5f0 [ 113.317990][ T6349] ? kmem_cache_alloc_lru_noprof+0x150/0x5f0 [ 113.318019][ T6349] ? alloc_inode+0xb8/0x1b0 [ 113.318039][ T6349] ? alloc_inode+0xb8/0x1b0 [ 113.318065][ T6349] alloc_inode+0xb8/0x1b0 [ 113.318087][ T6349] path_from_stashed+0x205/0x580 [ 113.318120][ T6349] open_namespace_file+0x97/0x140 [ 113.318145][ T6349] ? __pfx_open_namespace_file+0x10/0x10 [ 113.318174][ T6349] ? do_raw_spin_unlock+0xf5/0x210 [ 113.318197][ T6349] open_new_namespace+0x1fb/0xd90 [ 113.318228][ T6349] ? vfs_open_tree+0x32d/0x3d0 [ 113.318260][ T6349] ? __pfx_open_new_namespace+0x10/0x10 [ 113.318294][ T6349] ? do_getname+0x151/0x250 [ 113.318319][ T6349] vfs_open_tree+0x32d/0x3d0 [ 113.318348][ T6349] ? __pfx_vfs_open_tree+0x10/0x10 [ 113.318373][ T6349] ? alloc_fd+0x651/0x6c0 [ 113.318404][ T6349] __ia32_sys_open_tree+0x96/0x110 [ 113.318428][ T6349] __do_fast_syscall_32+0x23e/0x6f0 [ 113.318452][ T6349] ? do_fast_syscall_32+0x33/0x70 [ 113.318473][ T6349] ? lockdep_hardirqs_on+0x7a/0x110 [ 113.318493][ T6349] ? asm_int80_emulation+0x1a/0x20 [ 113.318510][ T6349] ? do_int80_emulation+0x29f/0x550 [ 113.318530][ T6349] ? trace_irq_disable+0x3b/0x140 [ 113.318563][ T6349] do_fast_syscall_32+0x33/0x70 [ 113.318586][ T6349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.318608][ T6349] RIP: 0023:0xf700f0ec [ 113.318625][ T6349] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 113.318640][ T6349] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 00000000000001ac [ 113.318660][ T6349] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000640 [ 113.318680][ T6349] RDX: 0000000000001902 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.318690][ T6349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.318701][ T6349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 113.318712][ T6349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.318740][ T6349] [ 113.617725][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.642245][ T6349] memory: usage 8kB, limit 8kB, failcnt 58 [ 113.648160][ T6349] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 113.655762][ T6349] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 113.662744][ T6349] Memory cgroup stats for /syz2/test: [ 113.662867][ T6349] cache 0 [ 113.673125][ T6349] rss 0 [ 113.675972][ T6349] rss_huge 0 [ 113.679328][ T6349] shmem 0 [ 113.682334][ T6349] mapped_file 0 [ 113.686186][ T6349] dirty 0 [ 113.689217][ T6349] writeback 0 [ 113.692579][ T6349] workingset_refault_anon 0 [ 113.697203][ T6349] workingset_refault_file 0 [ 113.702646][ T6349] swap 0 [ 113.705824][ T6349] swapcached 0 [ 113.709916][ T6349] pgpgin 0 [ 113.713050][ T6349] pgpgout 0 [ 113.716227][ T6349] pgfault 8 [ 113.719597][ T6349] pgmajfault 0 [ 113.723105][ T6349] inactive_anon 0 [ 113.726799][ T6349] active_anon 0 [ 113.730447][ T6349] inactive_file 0 [ 113.734230][ T6349] active_file 0 [ 113.736287][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.738480][ T6349] unevictable 0 [ 113.749050][ T6349] hierarchical_memory_limit 8192 [ 113.754063][ T6349] hierarchical_memsw_limit 9223372036854771712 [ 113.760368][ T6349] total_cache 0 [ 113.763985][ T6349] total_rss 0 [ 113.767359][ T6349] total_rss_huge 0 [ 113.771233][ T6349] total_shmem 0 [ 113.774754][ T6349] total_mapped_file 0 [ 113.779153][ T6349] total_dirty 0 [ 113.782777][ T6349] total_writeback 0 [ 113.786651][ T6349] total_workingset_refault_anon 0 [ 113.791883][ T6349] total_workingset_refault_file 0 [ 113.797084][ T6349] total_swap 0 [ 113.800590][ T6349] total_swapcached 0 [ 113.805485][ T6349] total_pgpgin 0 [ 113.809205][ T6349] total_pgpgout 0 [ 113.812908][ T6349] total_pgfault 8 [ 113.816605][ T6349] total_pgmajfault 0 [ 113.820691][ T6349] total_inactive_anon 0 [ 113.824920][ T6349] total_active_anon 0 [ 113.829055][ T6349] total_inactive_file 0 [ 113.833369][ T6349] total_active_file 0 [ 113.837426][ T6349] total_unevictable 0 [ 113.841532][ T6349] anon_cost 0 [ 113.844958][ T6349] file_cost 0 [ 113.848550][ T6349] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.195,pid=6348,uid=0 [ 113.864742][ T6349] Memory cgroup out of memory: Killed process 6348 (syz.2.195) total-vm:102024kB, anon-rss:1308kB, file-rss:23020kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 113.904685][ T3811] dragonrise 0003:0079:0006.0002: unknown main item tag 0x2 [ 113.948061][ T6320] netlink: 44 bytes leftover after parsing attributes in process `syz.4.186'. [ 113.962660][ T3811] dragonrise 0003:0079:0006.0002: unknown main item tag 0x1 [ 113.992824][ T3811] dragonrise 0003:0079:0006.0002: reserved main item tag 0xe [ 114.023404][ T3811] dragonrise 0003:0079:0006.0002: unknown main item tag 0x3 [ 114.049613][ T6352] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.055776][ T3811] dragonrise 0003:0079:0006.0002: reserved main item tag 0xe [ 114.077335][ T6352] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.089134][ T3811] dragonrise 0003:0079:0006.0002: item fetching failed at offset 38/40 [ 114.090731][ T6352] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.109249][ T3811] dragonrise 0003:0079:0006.0002: parse failed [ 114.110983][ T6352] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.122083][ T3811] dragonrise 0003:0079:0006.0002: probe with driver dragonrise failed with error -22 [ 114.130768][ T3811] usb 2-1: USB disconnect, device number 10 [ 114.148750][ T6352] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.195196][ T6360] FAULT_INJECTION: forcing a failure. [ 114.195196][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 114.243787][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.3.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.243813][ T6360] Tainted: [L]=SOFTLOCKUP [ 114.243819][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.243828][ T6360] Call Trace: [ 114.243835][ T6360] [ 114.243842][ T6360] dump_stack_lvl+0xe8/0x150 [ 114.243870][ T6360] should_fail_ex+0x40c/0x560 [ 114.243894][ T6360] should_failslab+0xa8/0x100 [ 114.243922][ T6360] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 114.243937][ T6360] ? alloc_vfsmnt+0x23/0x410 [ 114.243948][ T6360] ? alloc_vfsmnt+0x23/0x410 [ 114.243968][ T6360] alloc_vfsmnt+0x23/0x410 [ 114.243982][ T6360] clone_mnt+0x4b/0x9b0 [ 114.243998][ T6360] open_new_namespace+0x5ad/0xd90 [ 114.244025][ T6360] ? __pfx_open_new_namespace+0x10/0x10 [ 114.244049][ T6360] ? do_getname+0x151/0x250 [ 114.244065][ T6360] vfs_open_tree+0x32d/0x3d0 [ 114.244086][ T6360] ? __pfx_vfs_open_tree+0x10/0x10 [ 114.244104][ T6360] ? alloc_fd+0x651/0x6c0 [ 114.244125][ T6360] __ia32_sys_open_tree+0x96/0x110 [ 114.244141][ T6360] __do_fast_syscall_32+0x23e/0x6f0 [ 114.244157][ T6360] ? do_fast_syscall_32+0x33/0x70 [ 114.244172][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.244185][ T6360] ? asm_int80_emulation+0x1a/0x20 [ 114.244197][ T6360] ? do_int80_emulation+0x29f/0x550 [ 114.244211][ T6360] ? trace_irq_disable+0x3b/0x140 [ 114.244227][ T6360] do_fast_syscall_32+0x33/0x70 [ 114.244242][ T6360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.244257][ T6360] RIP: 0023:0xf6fef0ec [ 114.244268][ T6360] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 114.244278][ T6360] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 00000000000001ac [ 114.244291][ T6360] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000640 [ 114.244300][ T6360] RDX: 0000000000001902 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.244307][ T6360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.244314][ T6360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.244321][ T6360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.244338][ T6360] [ 114.736411][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.744060][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.874785][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.907472][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.998045][ T5704] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 115.160662][ T5704] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.171340][ T5704] usb 1-1: not running at top speed; connect to a high speed hub [ 115.191357][ T5704] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 115.228328][ T5704] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 195, changing to 4 [ 115.239675][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.239837][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.239871][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.239903][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.286229][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.297969][ T5704] usb 1-1: Product: syz [ 115.311636][ T5704] usb 1-1: Manufacturer: syz [ 115.322588][ T5704] usb 1-1: SerialNumber: syz [ 115.571708][ T6391] capability: warning: `syz.4.209' uses 32-bit capabilities (legacy support in use) [ 115.608308][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 115.666716][ T5704] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 115.703529][ T5704] usb 1-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 115.936670][ T5704] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 116.020903][ T5704] usb 1-1: USB disconnect, device number 6 [ 116.029501][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.067969][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.148134][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.148159][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.154569][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.227944][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.288848][ T5704] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.359252][ T6432] FAULT_INJECTION: forcing a failure. [ 117.359252][ T6432] name failslab, interval 1, probability 0, space 0, times 0 [ 117.409410][ T6432] CPU: 0 UID: 0 PID: 6432 Comm: syz.1.219 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.409432][ T6432] Tainted: [L]=SOFTLOCKUP [ 117.409436][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.409444][ T6432] Call Trace: [ 117.409450][ T6432] [ 117.409456][ T6432] dump_stack_lvl+0xe8/0x150 [ 117.409481][ T6432] should_fail_ex+0x40c/0x560 [ 117.409506][ T6432] should_failslab+0xa8/0x100 [ 117.409531][ T6432] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 117.409548][ T6432] ? local_lock_release+0x9c/0x160 [ 117.409565][ T6432] ? __alloc_skb+0x1d7/0x7a0 [ 117.409578][ T6432] ? __alloc_skb+0x1d7/0x7a0 [ 117.409599][ T6432] __alloc_skb+0x1d7/0x7a0 [ 117.409616][ T6432] _sctp_make_chunk+0x59/0x290 [ 117.409635][ T6432] sctp_make_init+0x5e9/0xe20 [ 117.409670][ T6432] ? __pfx_sctp_make_init+0x10/0x10 [ 117.409705][ T6432] ? stack_trace_save+0xa9/0x100 [ 117.409742][ T6432] sctp_sf_do_prm_asoc+0xcf/0x3f0 [ 117.409768][ T6432] sctp_do_sm+0x239/0x5d50 [ 117.409791][ T6432] ? __kmalloc_cache_noprof+0x32d/0x660 [ 117.409811][ T6432] ? __pfx_sctp_pname+0x10/0x10 [ 117.409834][ T6432] ? sctp_sendmsg_to_asoc+0x88d/0x1880 [ 117.409852][ T6432] ? sctp_sendmsg+0x1bb5/0x2d00 [ 117.409871][ T6432] ? __sys_sendto+0x408/0x5a0 [ 117.409888][ T6432] ? do_fast_syscall_32+0x33/0x70 [ 117.409908][ T6432] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.409937][ T6432] ? __pfx_sctp_do_sm+0x10/0x10 [ 117.409995][ T6432] ? __sk_mem_raise_allocated+0x292/0x1250 [ 117.410017][ T6432] ? __genradix_ptr+0x1e1/0x220 [ 117.410050][ T6432] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 117.410076][ T6432] sctp_sendmsg_to_asoc+0x13fb/0x1880 [ 117.410103][ T6432] ? sctp_assoc_add_peer+0xd57/0x1430 [ 117.410138][ T6432] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 117.410158][ T6432] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 117.410180][ T6432] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 117.410201][ T6432] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 117.410221][ T6432] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 117.410243][ T6432] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 117.410262][ T6432] ? security_sctp_bind_connect+0x7e/0x2c0 [ 117.410288][ T6432] sctp_sendmsg+0x1bb5/0x2d00 [ 117.410322][ T6432] ? __pfx_sctp_sendmsg+0x10/0x10 [ 117.410348][ T6432] ? aa_sk_perm+0x6d5/0x900 [ 117.410379][ T6432] ? __might_fault+0xaf/0x130 [ 117.410402][ T6432] ? sock_rps_record_flow+0x19/0x350 [ 117.410426][ T6432] ? inet_sendmsg+0x298/0x320 [ 117.410448][ T6432] ? __pfx_inet_sendmsg+0x10/0x10 [ 117.410467][ T6432] sock_sendmsg_nosec+0x10e/0x180 [ 117.410494][ T6432] __sys_sendto+0x408/0x5a0 [ 117.410517][ T6432] ? __pfx___sys_sendto+0x10/0x10 [ 117.410546][ T6432] ? __fget_files+0x3a2/0x420 [ 117.410578][ T6432] ? ksys_write+0x242/0x270 [ 117.410609][ T6432] __ia32_sys_sendto+0xdd/0x100 [ 117.410630][ T6432] __do_fast_syscall_32+0x23e/0x6f0 [ 117.410652][ T6432] ? do_fast_syscall_32+0x33/0x70 [ 117.410671][ T6432] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.410690][ T6432] ? asm_int80_emulation+0x1a/0x20 [ 117.410706][ T6432] ? do_int80_emulation+0x29f/0x550 [ 117.410733][ T6432] ? trace_irq_disable+0x3b/0x140 [ 117.410757][ T6432] do_fast_syscall_32+0x33/0x70 [ 117.410779][ T6432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.410800][ T6432] RIP: 0023:0xf6fff0ec [ 117.410815][ T6432] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 117.410829][ T6432] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 117.410847][ T6432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 117.410858][ T6432] RDX: 0000000000034000 RSI: 00000000000000e0 RDI: 000000008005ffe4 [ 117.410868][ T6432] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 117.410878][ T6432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 117.410888][ T6432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.410913][ T6432] [ 118.017193][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.024924][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.103030][ T5704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.114100][ T5704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.125057][ T5704] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.138800][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.147041][ T5704] usb 5-1: Product: syz [ 118.151390][ T5704] usb 5-1: Manufacturer: syz [ 118.156026][ T5704] usb 5-1: SerialNumber: syz [ 118.176093][ T5704] cdc_mbim 5-1:1.0: skipping garbage [ 118.330243][ T6432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.353597][ T6432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.375067][ T6428] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.727623][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.735421][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.935612][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.975659][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.149697][ T5704] cdc_mbim 5-1:1.0: bind() failure [ 119.195635][ T5704] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 119.236350][ T5704] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 119.249582][ T5704] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 119.284179][ T5704] usb 5-1: USB disconnect, device number 5 [ 119.408140][ T1095] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.426015][ T1095] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.588803][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.628968][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.687751][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.713835][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.731907][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.743692][ T63] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.132941][ T6469] netlink: 'syz.4.227': attribute type 25 has an invalid length. [ 121.408242][ T5680] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.577884][ T5680] usb 5-1: Using ep0 maxpacket: 32 [ 121.595159][ T5680] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 121.624413][ T5680] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 121.642581][ T5680] usb 5-1: config 0 has no interface number 0 [ 121.659662][ T5680] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.688133][ T5680] usb 5-1: config 0 interface 89 has no altsetting 0 [ 121.731263][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.739503][ T5680] usb 5-1: Product: syz [ 121.743756][ T5680] usb 5-1: Manufacturer: syz [ 121.752392][ T5680] usb 5-1: SerialNumber: syz [ 121.775584][ T5680] usb 5-1: config 0 descriptor?? [ 121.795991][ T5680] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 121.822582][ T5680] em28xx 5-1:0.89: Video interface 89 found: [ 122.340309][ T6504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.350947][ T6504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.361131][ T6504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.372138][ T6504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.382907][ T6504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.396429][ T5680] em28xx 5-1:0.89: chip ID is em2884 [ 122.498026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.579071][ T6516] netlink: 'syz.2.239': attribute type 25 has an invalid length. [ 122.670060][ T5680] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 122.702893][ T5680] em28xx 5-1:0.89: board has no eeprom [ 122.768795][ T5680] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 122.796955][ T5680] em28xx 5-1:0.89: analog set to bulk mode. [ 122.816586][ T5610] em28xx 5-1:0.89: Registering V4L2 extension [ 122.845537][ T5680] usb 5-1: USB disconnect, device number 6 [ 122.885966][ T5680] em28xx 5-1:0.89: Disconnecting em28xx [ 122.941532][ T5610] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 122.965884][ T5610] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 122.994448][ T5610] em28xx 5-1:0.89: No AC97 audio processor [ 123.023171][ T5610] usb 5-1: Decoder not found [ 123.040276][ T5610] em28xx 5-1:0.89: failed to create media graph [ 123.071965][ T5610] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 123.104933][ T5610] em28xx 5-1:0.89: Registering snapshot button... [ 123.122367][ T5610] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input8 [ 123.201613][ T5610] em28xx 5-1:0.89: Remote control support is not available for this card. [ 123.230748][ T5680] em28xx 5-1:0.89: Closing input extension [ 123.272601][ T5680] em28xx 5-1:0.89: Deregistering snapshot button [ 123.379621][ T6517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.387749][ T5680] em28xx 5-1:0.89: Freeing device [ 123.396797][ T6517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.423259][ T6517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.453883][ T6517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.479187][ T6517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.627866][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.756659][ T6559] netlink: 'syz.3.251': attribute type 25 has an invalid length. [ 124.972194][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.252'. [ 125.428060][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.428074][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.508054][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.508514][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.335779][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 126.817888][ T6577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.833342][ T6577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.843093][ T6577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.851506][ T6577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.857620][ T6577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.158156][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.435680][ T6646] syzkaller0: entered promiscuous mode [ 128.450682][ T6646] syzkaller0: entered allmulticast mode [ 128.571959][ T6655] : renamed from bond_slave_0 (while UP) [ 128.704597][ T6661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.714337][ T6661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.721011][ T6661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.727380][ T6661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.739475][ T6661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.941944][ T6695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.296'. [ 130.066381][ T6705] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 130.100252][ T6705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.109056][ T6705] FAULT_INJECTION: forcing a failure. [ 130.109056][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 130.125566][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.2.301 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.125591][ T6705] Tainted: [L]=SOFTLOCKUP [ 130.125597][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.125607][ T6705] Call Trace: [ 130.125614][ T6705] [ 130.125628][ T6705] dump_stack_lvl+0xe8/0x150 [ 130.125668][ T6705] should_fail_ex+0x40c/0x560 [ 130.125694][ T6705] should_failslab+0xa8/0x100 [ 130.125721][ T6705] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 130.125743][ T6705] ? __d_lookup+0x66/0x790 [ 130.125769][ T6705] ? __d_alloc+0x37/0x6f0 [ 130.125791][ T6705] ? __d_alloc+0x37/0x6f0 [ 130.125821][ T6705] __d_alloc+0x37/0x6f0 [ 130.125850][ T6705] d_alloc+0x4b/0x190 [ 130.125872][ T6705] ? lookup_one_qstr_excl+0xc4/0x360 [ 130.125899][ T6705] lookup_one_qstr_excl+0xd8/0x360 [ 130.125925][ T6705] ? lookup_noperm_common+0x245/0x430 [ 130.125952][ T6705] start_dirop+0x5c/0x90 [ 130.125976][ T6705] simple_start_creating+0xcc/0x110 [ 130.126003][ T6705] ? __pfx_simple_start_creating+0x10/0x10 [ 130.126030][ T6705] ? do_raw_spin_unlock+0xf5/0x210 [ 130.126049][ T6705] ? mntput+0x65/0xc0 [ 130.126072][ T6705] debugfs_start_creating+0xdb/0x1a0 [ 130.126101][ T6705] __debugfs_create_file+0x6f/0x400 [ 130.126129][ T6705] debugfs_create_file_full+0x3f/0x60 [ 130.126158][ T6705] ref_tracker_dir_debugfs+0x197/0x360 [ 130.126182][ T6705] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 130.126228][ T6705] ? __kvmalloc_node_noprof+0x55a/0x860 [ 130.126255][ T6705] ? __kvmalloc_node_noprof+0x35c/0x860 [ 130.126281][ T6705] ? __raw_spin_lock_init+0x45/0x100 [ 130.126302][ T6705] alloc_netdev_mqs+0x275/0x12b0 [ 130.126325][ T6705] ? __pfx_snprintf+0x10/0x10 [ 130.126351][ T6705] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 130.126380][ T6705] rtnl_create_link+0x321/0xd70 [ 130.126411][ T6705] rtnl_newlink_create+0x25f/0xb00 [ 130.126440][ T6705] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 130.126465][ T6705] ? __pfx___mutex_lock+0x10/0x10 [ 130.126495][ T6705] ? ns_capable+0x89/0xe0 [ 130.126519][ T6705] rtnl_newlink+0x167f/0x1bd0 [ 130.126551][ T6705] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.126571][ T6705] ? __lock_acquire+0x683/0x2cf0 [ 130.126601][ T6705] ? __lock_acquire+0x683/0x2cf0 [ 130.126644][ T6705] ? unwind_next_frame+0x8f/0x2550 [ 130.126669][ T6705] ? is_bpf_text_address+0x26/0x2b0 [ 130.126704][ T6705] ? is_bpf_text_address+0x26/0x2b0 [ 130.126737][ T6705] ? __lock_acquire+0x683/0x2cf0 [ 130.126763][ T6705] ? kernel_text_address+0xa5/0xe0 [ 130.126790][ T6705] ? __kernel_text_address+0xd/0x30 [ 130.126816][ T6705] ? unwind_get_return_address+0x4d/0x90 [ 130.126833][ T6705] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 130.126855][ T6705] ? arch_stack_walk+0xfb/0x150 [ 130.126882][ T6705] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 130.126915][ T6705] ? __pfx_rtnl_newlink+0x10/0x10 [ 130.126932][ T6705] rtnetlink_rcv_msg+0x802/0xc00 [ 130.126949][ T6705] ? netlink_sendmsg+0x5d4/0xb40 [ 130.126974][ T6705] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 130.126992][ T6705] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.127011][ T6705] ? __lock_acquire+0x683/0x2cf0 [ 130.127046][ T6705] netlink_rcv_skb+0x226/0x4a0 [ 130.127068][ T6705] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.127088][ T6705] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.127121][ T6705] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.127142][ T6705] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.127168][ T6705] netlink_unicast+0x7bb/0x940 [ 130.127197][ T6705] netlink_sendmsg+0x813/0xb40 [ 130.127228][ T6705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.127254][ T6705] ? aa_sock_msg_perm+0xf1/0x1b0 [ 130.127277][ T6705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.127297][ T6705] sock_sendmsg_nosec+0x13a/0x180 [ 130.127326][ T6705] ____sys_sendmsg+0x54e/0x850 [ 130.127353][ T6705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.127389][ T6705] ___sys_sendmsg+0x2a5/0x360 [ 130.127408][ T6705] ? __lock_acquire+0x683/0x2cf0 [ 130.127436][ T6705] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.127456][ T6705] ? get_pid_task+0x20/0x1f0 [ 130.127479][ T6705] ? get_pid_task+0x20/0x1f0 [ 130.127500][ T6705] ? get_pid_task+0x20/0x1f0 [ 130.127552][ T6705] ? __fget_files+0x2a/0x420 [ 130.127574][ T6705] ? __fget_files+0x3a2/0x420 [ 130.127606][ T6705] __sys_sendmsg+0x177/0x240 [ 130.127634][ T6705] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.127674][ T6705] __do_fast_syscall_32+0x23e/0x6f0 [ 130.127696][ T6705] ? do_fast_syscall_32+0x33/0x70 [ 130.127717][ T6705] ? lockdep_hardirqs_on+0x7a/0x110 [ 130.127736][ T6705] ? asm_int80_emulation+0x1a/0x20 [ 130.127753][ T6705] ? do_int80_emulation+0x29f/0x550 [ 130.127773][ T6705] ? trace_irq_disable+0x3b/0x140 [ 130.127798][ T6705] do_fast_syscall_32+0x33/0x70 [ 130.127820][ T6705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.127841][ T6705] RIP: 0023:0xf700f0ec [ 130.127863][ T6705] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 130.127878][ T6705] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 130.127900][ T6705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 130.127912][ T6705] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.127922][ T6705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.127932][ T6705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.127943][ T6705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.127970][ T6705] [ 130.257997][ T3811] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 130.370389][ T6705] bond1: (slave ip6erspan0): making interface the new active one [ 130.621387][ T3811] usb 2-1: Using ep0 maxpacket: 32 [ 130.683563][ T6705] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 130.707970][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.718085][ T3811] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 130.732962][ T3811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.741398][ T3811] usb 2-1: Product: syz [ 130.754551][ T3811] usb 2-1: Manufacturer: syz [ 130.763039][ T3811] usb 2-1: SerialNumber: syz [ 130.786413][ T3811] usb 2-1: config 0 descriptor?? [ 130.797493][ T3811] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 130.798468][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.811417][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.814175][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.817445][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.832778][ T6709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.841873][ T6709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.849925][ T6709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.857334][ T6709] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.862403][ T3811] dvb-usb: bulk message failed: -22 (4/0) [ 130.864914][ T6709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.877655][ T3811] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.900601][ T3811] dvb-usb: bulk message failed: -22 (5/0) [ 130.906697][ T3811] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.922769][ T3811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.932720][ T3811] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 130.963958][ T3811] usb 2-1: media controller created [ 130.987734][ T3811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.067480][ T3811] usb 2-1: selecting invalid altsetting 3 [ 131.094557][ T3811] ttusb2: set interface to alts=3 failed [ 131.161060][ T3811] DVB: Unable to find symbol tda10086_attach() [ 131.177428][ T3811] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 131.192793][ T3811] dvb-usb: bulk message failed: -22 (4/0) [ 131.200918][ T3811] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 131.212831][ T3811] dvb-usb: bulk message failed: -22 (5/0) [ 131.219392][ T3811] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 131.229622][ T3811] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 131.244798][ T3811] usb 2-1: USB disconnect, device number 11 [ 131.281637][ T3811] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 131.723844][ T6740] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 131.779962][ T6740] bond2: entered promiscuous mode [ 131.785244][ T6740] bond2: entered allmulticast mode [ 131.790980][ T6740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.450870][ T6767] FAULT_INJECTION: forcing a failure. [ 132.450870][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.471609][ T6765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.314'. [ 132.482465][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.4.317 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.482491][ T6767] Tainted: [L]=SOFTLOCKUP [ 132.482498][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.482508][ T6767] Call Trace: [ 132.482515][ T6767] [ 132.482522][ T6767] dump_stack_lvl+0xe8/0x150 [ 132.482552][ T6767] should_fail_ex+0x40c/0x560 [ 132.482580][ T6767] _copy_to_user+0x31/0xb0 [ 132.482609][ T6767] simple_read_from_buffer+0xe1/0x170 [ 132.482638][ T6767] proc_fail_nth_read+0x1bb/0x230 [ 132.482667][ T6767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.482695][ T6767] ? rw_verify_area+0x24a/0x4c0 [ 132.482722][ T6767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.482747][ T6767] vfs_read+0x213/0xa80 [ 132.482777][ T6767] ? __pfx___mutex_lock+0x10/0x10 [ 132.482799][ T6767] ? __pfx_vfs_read+0x10/0x10 [ 132.482825][ T6767] ? __fget_files+0x2a/0x420 [ 132.482852][ T6767] ? __fget_files+0x3a2/0x420 [ 132.482873][ T6767] ? __fget_files+0x2a/0x420 [ 132.482903][ T6767] ksys_read+0x150/0x270 [ 132.482931][ T6767] ? __pfx_ksys_read+0x10/0x10 [ 132.482961][ T6767] ? asm_int80_emulation+0x1a/0x20 [ 132.482983][ T6767] do_int80_emulation+0x19a/0x550 [ 132.483005][ T6767] ? trace_irq_disable+0x3b/0x140 [ 132.483026][ T6767] ? asm_int80_emulation+0x1a/0x20 [ 132.483042][ T6767] ? clear_bhb_loop+0x70/0xc0 [ 132.483059][ T6767] ? clear_bhb_loop+0x70/0xc0 [ 132.483081][ T6767] asm_int80_emulation+0x1a/0x20 [ 132.483098][ T6767] RIP: 0023:0xf71274eb [ 132.483113][ T6767] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 132.483127][ T6767] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 132.483145][ T6767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 132.483157][ T6767] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 132.483167][ T6767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.483177][ T6767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.483188][ T6767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.483214][ T6767] [ 132.484477][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709746][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.878200][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.878217][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.884779][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.890443][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.896306][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.921109][ T6769] tipc: Started in network mode [ 132.955157][ T6769] tipc: Node identity f68199d45ed3, cluster identity 4711 [ 132.963670][ T6769] tipc: Enabled bearer , priority 10 [ 132.973426][ T6768] tipc: Resetting bearer [ 132.999723][ T6775] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 133.159213][ T6768] tipc: Disabling bearer [ 133.179245][ T6775] FAULT_INJECTION: forcing a failure. [ 133.179245][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 133.193271][ T6775] CPU: 1 UID: 0 PID: 6775 Comm: syz.0.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.193297][ T6775] Tainted: [L]=SOFTLOCKUP [ 133.193304][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.193314][ T6775] Call Trace: [ 133.193322][ T6775] [ 133.193330][ T6775] dump_stack_lvl+0xe8/0x150 [ 133.193365][ T6775] should_fail_ex+0x40c/0x560 [ 133.193389][ T6775] should_failslab+0xa8/0x100 [ 133.193413][ T6775] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 133.193434][ T6775] ? alloc_inode+0x6a/0x1b0 [ 133.193450][ T6775] ? alloc_inode+0x6a/0x1b0 [ 133.193472][ T6775] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 133.193495][ T6775] alloc_inode+0x6a/0x1b0 [ 133.193514][ T6775] new_inode+0x1f/0x170 [ 133.193536][ T6775] __debugfs_create_file+0xb8/0x400 [ 133.193562][ T6775] debugfs_create_file_full+0x3f/0x60 [ 133.193587][ T6775] ref_tracker_dir_debugfs+0x197/0x360 [ 133.193608][ T6775] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 133.193647][ T6775] ? __kvmalloc_node_noprof+0x55a/0x860 [ 133.193670][ T6775] ? __kvmalloc_node_noprof+0x35c/0x860 [ 133.193692][ T6775] ? __raw_spin_lock_init+0x45/0x100 [ 133.193711][ T6775] alloc_netdev_mqs+0x275/0x12b0 [ 133.193731][ T6775] ? __pfx_snprintf+0x10/0x10 [ 133.193753][ T6775] ? __pfx_bond_setup+0x10/0x10 [ 133.193779][ T6775] rtnl_create_link+0x321/0xd70 [ 133.193805][ T6775] rtnl_newlink_create+0x25f/0xb00 [ 133.193828][ T6775] ? __mutex_lock+0x5d4/0x1550 [ 133.193851][ T6775] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 133.193875][ T6775] ? __pfx___mutex_lock+0x10/0x10 [ 133.193903][ T6775] ? ns_capable+0x89/0xe0 [ 133.193928][ T6775] rtnl_newlink+0x167f/0x1bd0 [ 133.193962][ T6775] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.193982][ T6775] ? __lock_acquire+0x683/0x2cf0 [ 133.194015][ T6775] ? __lock_acquire+0x683/0x2cf0 [ 133.194053][ T6775] ? unwind_next_frame+0x8f/0x2550 [ 133.194079][ T6775] ? is_bpf_text_address+0x26/0x2b0 [ 133.194115][ T6775] ? is_bpf_text_address+0x26/0x2b0 [ 133.194143][ T6775] ? __lock_acquire+0x683/0x2cf0 [ 133.194169][ T6775] ? kernel_text_address+0xa5/0xe0 [ 133.194197][ T6775] ? __kernel_text_address+0xd/0x30 [ 133.194221][ T6775] ? unwind_get_return_address+0x4d/0x90 [ 133.194238][ T6775] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.194259][ T6775] ? arch_stack_walk+0xfb/0x150 [ 133.194286][ T6775] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 133.194319][ T6775] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.194336][ T6775] rtnetlink_rcv_msg+0x802/0xc00 [ 133.194365][ T6775] ? netlink_sendmsg+0x5d4/0xb40 [ 133.194389][ T6775] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 133.194406][ T6775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.194425][ T6775] ? __lock_acquire+0x683/0x2cf0 [ 133.194459][ T6775] netlink_rcv_skb+0x226/0x4a0 [ 133.194482][ T6775] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.194502][ T6775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.194535][ T6775] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.194556][ T6775] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.194582][ T6775] netlink_unicast+0x7bb/0x940 [ 133.194611][ T6775] netlink_sendmsg+0x813/0xb40 [ 133.194641][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.194667][ T6775] ? aa_sock_msg_perm+0xf1/0x1b0 [ 133.194690][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.194710][ T6775] sock_sendmsg_nosec+0x13a/0x180 [ 133.194737][ T6775] ____sys_sendmsg+0x54e/0x850 [ 133.194807][ T6775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.194833][ T6775] ___sys_sendmsg+0x2a5/0x360 [ 133.194846][ T6775] ? __lock_acquire+0x683/0x2cf0 [ 133.194865][ T6775] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.194879][ T6775] ? get_pid_task+0x20/0x1f0 [ 133.194895][ T6775] ? get_pid_task+0x20/0x1f0 [ 133.194923][ T6775] ? get_pid_task+0x20/0x1f0 [ 133.194958][ T6775] ? __fget_files+0x2a/0x420 [ 133.194974][ T6775] ? __fget_files+0x3a2/0x420 [ 133.194996][ T6775] __sys_sendmsg+0x177/0x240 [ 133.195012][ T6775] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.195038][ T6775] __do_fast_syscall_32+0x23e/0x6f0 [ 133.195055][ T6775] ? do_fast_syscall_32+0x33/0x70 [ 133.195069][ T6775] ? lockdep_hardirqs_on+0x7a/0x110 [ 133.195082][ T6775] ? asm_int80_emulation+0x1a/0x20 [ 133.195094][ T6775] ? do_int80_emulation+0x29f/0x550 [ 133.195109][ T6775] ? trace_irq_disable+0x3b/0x140 [ 133.195127][ T6775] do_fast_syscall_32+0x33/0x70 [ 133.195143][ T6775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.195158][ T6775] RIP: 0023:0xf7fd40ec [ 133.195170][ T6775] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 133.195180][ T6775] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 133.195193][ T6775] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 133.195202][ T6775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.195210][ T6775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.195216][ T6775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.195223][ T6775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.195274][ T6775] [ 133.196587][ T6775] debugfs: out of free dentries, can not create file 'netdev@ffff88802070c700' [ 133.726772][ T6775] bond0: entered promiscuous mode [ 133.732211][ T6775] bond0: entered allmulticast mode [ 133.737687][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.757937][ T3811] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.917910][ T3811] usb 3-1: Using ep0 maxpacket: 32 [ 133.923581][ T3811] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 133.946032][ T3811] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 133.957304][ T3811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.973524][ T3811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.002001][ T6786] netlink: 'syz.0.324': attribute type 14 has an invalid length. [ 134.014804][ T3811] usb 3-1: config 0 descriptor?? [ 134.811780][ T3811] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 134.972516][ T6804] netlink: 'syz.3.329': attribute type 1 has an invalid length. [ 135.064063][ T6804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.121236][ T6808] bond1: (slave ip6erspan0): making interface the new active one [ 135.154347][ T6808] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 135.204485][ T3811] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -110 [ 135.275498][ T3811] usb 3-1: USB disconnect, device number 8 [ 135.404992][ T6829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.425423][ T6829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.751420][ T6834] FAULT_INJECTION: forcing a failure. [ 135.751420][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.774080][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.2.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.774106][ T6834] Tainted: [L]=SOFTLOCKUP [ 135.774112][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.774122][ T6834] Call Trace: [ 135.774135][ T6834] [ 135.774143][ T6834] dump_stack_lvl+0xe8/0x150 [ 135.774170][ T6834] should_fail_ex+0x40c/0x560 [ 135.774189][ T6834] _copy_to_user+0x31/0xb0 [ 135.774209][ T6834] simple_read_from_buffer+0xe1/0x170 [ 135.774229][ T6834] proc_fail_nth_read+0x1bb/0x230 [ 135.774249][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.774269][ T6834] ? rw_verify_area+0x24a/0x4c0 [ 135.774289][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.774306][ T6834] vfs_read+0x213/0xa80 [ 135.774327][ T6834] ? __pfx___mutex_lock+0x10/0x10 [ 135.774343][ T6834] ? __pfx_vfs_read+0x10/0x10 [ 135.774362][ T6834] ? __fget_files+0x2a/0x420 [ 135.774381][ T6834] ? __fget_files+0x3a2/0x420 [ 135.774396][ T6834] ? __fget_files+0x2a/0x420 [ 135.774417][ T6834] ksys_read+0x150/0x270 [ 135.774437][ T6834] ? __pfx_ksys_read+0x10/0x10 [ 135.774458][ T6834] ? asm_int80_emulation+0x1a/0x20 [ 135.774474][ T6834] do_int80_emulation+0x19a/0x550 [ 135.774509][ T6834] ? trace_irq_disable+0x3b/0x140 [ 135.774530][ T6834] ? asm_int80_emulation+0x1a/0x20 [ 135.774545][ T6834] ? clear_bhb_loop+0x70/0xc0 [ 135.774561][ T6834] ? clear_bhb_loop+0x70/0xc0 [ 135.774585][ T6834] asm_int80_emulation+0x1a/0x20 [ 135.774597][ T6834] RIP: 0023:0xf71474eb [ 135.774608][ T6834] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 135.774618][ T6834] RSP: 002b:00000000f53dc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 135.774633][ T6834] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53dc5d0 [ 135.774642][ T6834] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 135.774649][ T6834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.774655][ T6834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 135.774662][ T6834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.774680][ T6834] [ 136.667178][ T6846] FAULT_INJECTION: forcing a failure. [ 136.667178][ T6846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.698349][ T6846] CPU: 0 UID: 0 PID: 6846 Comm: syz.4.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.698376][ T6846] Tainted: [L]=SOFTLOCKUP [ 136.698382][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.698392][ T6846] Call Trace: [ 136.698399][ T6846] [ 136.698406][ T6846] dump_stack_lvl+0xe8/0x150 [ 136.698435][ T6846] should_fail_ex+0x40c/0x560 [ 136.698461][ T6846] _copy_to_user+0x31/0xb0 [ 136.698488][ T6846] simple_read_from_buffer+0xe1/0x170 [ 136.698516][ T6846] proc_fail_nth_read+0x1bb/0x230 [ 136.698545][ T6846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.698573][ T6846] ? rw_verify_area+0x24a/0x4c0 [ 136.698601][ T6846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.698625][ T6846] vfs_read+0x213/0xa80 [ 136.698655][ T6846] ? __pfx___mutex_lock+0x10/0x10 [ 136.698677][ T6846] ? __pfx_vfs_read+0x10/0x10 [ 136.698704][ T6846] ? __fget_files+0x2a/0x420 [ 136.698731][ T6846] ? __fget_files+0x3a2/0x420 [ 136.698753][ T6846] ? __fget_files+0x2a/0x420 [ 136.698783][ T6846] ksys_read+0x150/0x270 [ 136.698812][ T6846] ? __pfx_ksys_read+0x10/0x10 [ 136.698841][ T6846] ? asm_int80_emulation+0x1a/0x20 [ 136.698864][ T6846] do_int80_emulation+0x19a/0x550 [ 136.698885][ T6846] ? trace_irq_disable+0x3b/0x140 [ 136.698905][ T6846] ? asm_int80_emulation+0x1a/0x20 [ 136.698922][ T6846] ? clear_bhb_loop+0x70/0xc0 [ 136.698939][ T6846] ? clear_bhb_loop+0x70/0xc0 [ 136.698961][ T6846] asm_int80_emulation+0x1a/0x20 [ 136.698977][ T6846] RIP: 0023:0xf71274eb [ 136.698994][ T6846] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 136.699010][ T6846] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 136.699028][ T6846] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53e65d0 [ 136.699040][ T6846] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 136.699058][ T6846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.699069][ T6846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.699079][ T6846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.699105][ T6846] [ 140.408841][ T3811] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 140.740825][ T3811] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 140.764932][ T3811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.825770][ T3811] usb 3-1: config 0 descriptor?? [ 140.844653][ T3811] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 140.969906][ T6949] netlink: 'syz.0.365': attribute type 9 has an invalid length. [ 140.984740][ T6949] FAULT_INJECTION: forcing a failure. [ 140.984740][ T6949] name failslab, interval 1, probability 0, space 0, times 0 [ 141.002862][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.0.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.002888][ T6949] Tainted: [L]=SOFTLOCKUP [ 141.002895][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.002906][ T6949] Call Trace: [ 141.002912][ T6949] [ 141.002920][ T6949] dump_stack_lvl+0xe8/0x150 [ 141.002951][ T6949] should_fail_ex+0x40c/0x560 [ 141.002980][ T6949] should_failslab+0xa8/0x100 [ 141.003006][ T6949] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 141.003032][ T6949] ? security_inode_alloc+0x39/0x310 [ 141.003045][ T6949] ? security_inode_alloc+0x39/0x310 [ 141.003079][ T6949] security_inode_alloc+0x39/0x310 [ 141.003101][ T6949] inode_init_always_gfp+0x97e/0xd30 [ 141.003127][ T6949] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 141.003154][ T6949] alloc_inode+0x82/0x1b0 [ 141.003175][ T6949] new_inode+0x1f/0x170 [ 141.003194][ T6949] __debugfs_create_file+0xb8/0x400 [ 141.003215][ T6949] debugfs_create_file_full+0x3f/0x60 [ 141.003257][ T6949] ref_tracker_dir_debugfs+0x197/0x360 [ 141.003279][ T6949] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 141.003334][ T6949] ? __kvmalloc_node_noprof+0x55a/0x860 [ 141.003354][ T6949] ? __kvmalloc_node_noprof+0x35c/0x860 [ 141.003386][ T6949] ? __raw_spin_lock_init+0x45/0x100 [ 141.003408][ T6949] alloc_netdev_mqs+0x275/0x12b0 [ 141.003430][ T6949] ? __pfx_snprintf+0x10/0x10 [ 141.003454][ T6949] ? __pfx_macvlan_setup+0x10/0x10 [ 141.003481][ T6949] rtnl_create_link+0x321/0xd70 [ 141.003503][ T6949] rtnl_newlink_create+0x25f/0xb00 [ 141.003537][ T6949] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 141.003563][ T6949] ? __pfx___mutex_lock+0x10/0x10 [ 141.003592][ T6949] ? ns_capable+0x89/0xe0 [ 141.003614][ T6949] rtnl_newlink+0x167f/0x1bd0 [ 141.003644][ T6949] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.003657][ T6949] ? __lock_acquire+0x683/0x2cf0 [ 141.003682][ T6949] ? __lock_acquire+0x683/0x2cf0 [ 141.003720][ T6949] ? __lock_acquire+0x683/0x2cf0 [ 141.003749][ T6949] ? unwind_next_frame+0x8f/0x2550 [ 141.003772][ T6949] ? is_bpf_text_address+0x26/0x2b0 [ 141.003803][ T6949] ? is_bpf_text_address+0x26/0x2b0 [ 141.003824][ T6949] ? __lock_acquire+0x683/0x2cf0 [ 141.003855][ T6949] ? kernel_text_address+0xa5/0xe0 [ 141.003883][ T6949] ? __kernel_text_address+0xd/0x30 [ 141.003907][ T6949] ? unwind_get_return_address+0x4d/0x90 [ 141.003923][ T6949] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 141.003944][ T6949] ? arch_stack_walk+0xfb/0x150 [ 141.003962][ T6949] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 141.003985][ T6949] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.004013][ T6949] rtnetlink_rcv_msg+0x802/0xc00 [ 141.004029][ T6949] ? netlink_sendmsg+0x5d4/0xb40 [ 141.004052][ T6949] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 141.004069][ T6949] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.004090][ T6949] ? __lock_acquire+0x683/0x2cf0 [ 141.004114][ T6949] netlink_rcv_skb+0x226/0x4a0 [ 141.004129][ T6949] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.004156][ T6949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.004188][ T6949] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.004208][ T6949] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.004236][ T6949] netlink_unicast+0x7bb/0x940 [ 141.004257][ T6949] netlink_sendmsg+0x813/0xb40 [ 141.004277][ T6949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.004308][ T6949] ? aa_sock_msg_perm+0xf1/0x1b0 [ 141.004331][ T6949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.004351][ T6949] sock_sendmsg_nosec+0x13a/0x180 [ 141.004377][ T6949] ____sys_sendmsg+0x54e/0x850 [ 141.004401][ T6949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.004426][ T6949] ___sys_sendmsg+0x2a5/0x360 [ 141.004439][ T6949] ? __lock_acquire+0x683/0x2cf0 [ 141.004480][ T6949] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.004500][ T6949] ? get_pid_task+0x20/0x1f0 [ 141.004520][ T6949] ? get_pid_task+0x20/0x1f0 [ 141.004545][ T6949] ? get_pid_task+0x20/0x1f0 [ 141.004580][ T6949] ? __fget_files+0x2a/0x420 [ 141.004595][ T6949] ? __fget_files+0x3a2/0x420 [ 141.004638][ T6949] __sys_sendmsg+0x177/0x240 [ 141.004659][ T6949] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.004701][ T6949] __do_fast_syscall_32+0x23e/0x6f0 [ 141.004717][ T6949] ? do_fast_syscall_32+0x33/0x70 [ 141.004732][ T6949] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.004745][ T6949] ? asm_int80_emulation+0x1a/0x20 [ 141.004772][ T6949] ? do_int80_emulation+0x29f/0x550 [ 141.004793][ T6949] ? trace_irq_disable+0x3b/0x140 [ 141.004816][ T6949] do_fast_syscall_32+0x33/0x70 [ 141.004838][ T6949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.004859][ T6949] RIP: 0023:0xf7fd40ec [ 141.004871][ T6949] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 141.004881][ T6949] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 141.004894][ T6949] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 141.004914][ T6949] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.004925][ T6949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.004935][ T6949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 141.004945][ T6949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.004970][ T6949] [ 141.605040][ T6949] debugfs: out of free dentries, can not create file 'netdev@ffff888032722700' [ 141.827288][ T3811] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 141.874004][ T3811] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 142.349439][ T6975] FAULT_INJECTION: forcing a failure. [ 142.349439][ T6975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.362642][ T6975] CPU: 0 UID: 0 PID: 6975 Comm: syz.3.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.362674][ T6975] Tainted: [L]=SOFTLOCKUP [ 142.362680][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.362690][ T6975] Call Trace: [ 142.362696][ T6975] [ 142.362704][ T6975] dump_stack_lvl+0xe8/0x150 [ 142.362732][ T6975] should_fail_ex+0x40c/0x560 [ 142.362758][ T6975] _copy_to_user+0x31/0xb0 [ 142.362786][ T6975] simple_read_from_buffer+0xe1/0x170 [ 142.362815][ T6975] proc_fail_nth_read+0x1bb/0x230 [ 142.362843][ T6975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.362871][ T6975] ? rw_verify_area+0x24a/0x4c0 [ 142.362899][ T6975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.362923][ T6975] vfs_read+0x213/0xa80 [ 142.362952][ T6975] ? __pfx___mutex_lock+0x10/0x10 [ 142.362974][ T6975] ? __pfx_vfs_read+0x10/0x10 [ 142.363001][ T6975] ? __fget_files+0x2a/0x420 [ 142.363027][ T6975] ? __fget_files+0x3a2/0x420 [ 142.363048][ T6975] ? __fget_files+0x2a/0x420 [ 142.363078][ T6975] ksys_read+0x150/0x270 [ 142.363106][ T6975] ? __pfx_ksys_read+0x10/0x10 [ 142.363136][ T6975] ? asm_int80_emulation+0x1a/0x20 [ 142.363159][ T6975] do_int80_emulation+0x19a/0x550 [ 142.363180][ T6975] ? trace_irq_disable+0x3b/0x140 [ 142.363200][ T6975] ? asm_int80_emulation+0x1a/0x20 [ 142.363216][ T6975] ? clear_bhb_loop+0x70/0xc0 [ 142.363234][ T6975] ? clear_bhb_loop+0x70/0xc0 [ 142.363255][ T6975] asm_int80_emulation+0x1a/0x20 [ 142.363272][ T6975] RIP: 0023:0xf71274eb [ 142.363288][ T6975] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 142.363304][ T6975] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 142.363321][ T6975] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0 [ 142.363333][ T6975] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 142.363343][ T6975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.363353][ T6975] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.363364][ T6975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.363390][ T6975] [ 142.718517][ T5704] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.877855][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 142.883613][ T5704] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 142.900414][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.928021][ T5704] usb 1-1: Product: syz [ 142.932621][ T5704] usb 1-1: Manufacturer: syz [ 142.949082][ T5704] usb 1-1: SerialNumber: syz [ 142.963346][ T5704] usb 1-1: config 0 descriptor?? [ 142.976889][ T5704] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 143.199253][ T3811] usb 3-1: USB disconnect, device number 9 [ 143.713448][ T7010] FAULT_INJECTION: forcing a failure. [ 143.713448][ T7010] name failslab, interval 1, probability 0, space 0, times 0 [ 143.743987][ T7010] CPU: 1 UID: 0 PID: 7010 Comm: syz.3.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.744014][ T7010] Tainted: [L]=SOFTLOCKUP [ 143.744020][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.744030][ T7010] Call Trace: [ 143.744037][ T7010] [ 143.744045][ T7010] dump_stack_lvl+0xe8/0x150 [ 143.744075][ T7010] should_fail_ex+0x40c/0x560 [ 143.744100][ T7010] should_failslab+0xa8/0x100 [ 143.744129][ T7010] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 143.744152][ T7010] ? alloc_inode+0x6a/0x1b0 [ 143.744172][ T7010] ? alloc_inode+0x6a/0x1b0 [ 143.744196][ T7010] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 143.744223][ T7010] alloc_inode+0x6a/0x1b0 [ 143.744246][ T7010] new_inode+0x1f/0x170 [ 143.744271][ T7010] __debugfs_create_file+0xb8/0x400 [ 143.744300][ T7010] debugfs_create_file_full+0x3f/0x60 [ 143.744333][ T7010] ref_tracker_dir_debugfs+0x197/0x360 [ 143.744357][ T7010] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 143.744402][ T7010] ? __kvmalloc_node_noprof+0x55a/0x860 [ 143.744428][ T7010] ? __kvmalloc_node_noprof+0x35c/0x860 [ 143.744454][ T7010] ? __raw_spin_lock_init+0x45/0x100 [ 143.744476][ T7010] alloc_netdev_mqs+0x275/0x12b0 [ 143.744499][ T7010] ? __pfx_snprintf+0x10/0x10 [ 143.744525][ T7010] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 143.744548][ T7010] rtnl_create_link+0x321/0xd70 [ 143.744577][ T7010] rtnl_newlink_create+0x25f/0xb00 [ 143.744607][ T7010] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 143.744632][ T7010] ? __pfx___mutex_lock+0x10/0x10 [ 143.744662][ T7010] ? ns_capable+0x89/0xe0 [ 143.744686][ T7010] rtnl_newlink+0x167f/0x1bd0 [ 143.744724][ T7010] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.744743][ T7010] ? __lock_acquire+0x683/0x2cf0 [ 143.744791][ T7010] ? __lock_acquire+0x683/0x2cf0 [ 143.744834][ T7010] ? unwind_next_frame+0x8f/0x2550 [ 143.744864][ T7010] ? is_bpf_text_address+0x26/0x2b0 [ 143.744905][ T7010] ? is_bpf_text_address+0x26/0x2b0 [ 143.744948][ T7010] ? __lock_acquire+0x683/0x2cf0 [ 143.744979][ T7010] ? kernel_text_address+0xa5/0xe0 [ 143.745012][ T7010] ? __kernel_text_address+0xd/0x30 [ 143.745041][ T7010] ? unwind_get_return_address+0x4d/0x90 [ 143.745061][ T7010] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 143.745086][ T7010] ? arch_stack_walk+0xfb/0x150 [ 143.745116][ T7010] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 143.745155][ T7010] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.745175][ T7010] rtnetlink_rcv_msg+0x802/0xc00 [ 143.745194][ T7010] ? netlink_sendmsg+0x5d4/0xb40 [ 143.745223][ T7010] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 143.745244][ T7010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.745266][ T7010] ? __lock_acquire+0x683/0x2cf0 [ 143.745308][ T7010] netlink_rcv_skb+0x226/0x4a0 [ 143.745335][ T7010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.745359][ T7010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.745398][ T7010] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.745422][ T7010] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.745453][ T7010] netlink_unicast+0x7bb/0x940 [ 143.745487][ T7010] netlink_sendmsg+0x813/0xb40 [ 143.745522][ T7010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.745552][ T7010] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.745579][ T7010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.745603][ T7010] sock_sendmsg_nosec+0x13a/0x180 [ 143.745637][ T7010] ____sys_sendmsg+0x54e/0x850 [ 143.745668][ T7010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.745711][ T7010] ___sys_sendmsg+0x2a5/0x360 [ 143.745734][ T7010] ? __lock_acquire+0x683/0x2cf0 [ 143.745766][ T7010] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.745797][ T7010] ? get_pid_task+0x20/0x1f0 [ 143.745825][ T7010] ? get_pid_task+0x20/0x1f0 [ 143.745849][ T7010] ? get_pid_task+0x20/0x1f0 [ 143.745910][ T7010] ? __fget_files+0x2a/0x420 [ 143.745936][ T7010] ? __fget_files+0x3a2/0x420 [ 143.746007][ T7010] __sys_sendmsg+0x177/0x240 [ 143.746029][ T7010] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.746068][ T7010] __do_fast_syscall_32+0x23e/0x6f0 [ 143.746090][ T7010] ? do_fast_syscall_32+0x33/0x70 [ 143.746110][ T7010] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.746129][ T7010] ? asm_int80_emulation+0x1a/0x20 [ 143.746145][ T7010] ? do_int80_emulation+0x29f/0x550 [ 143.746165][ T7010] ? trace_irq_disable+0x3b/0x140 [ 143.746188][ T7010] do_fast_syscall_32+0x33/0x70 [ 143.746210][ T7010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.746231][ T7010] RIP: 0023:0xf6fef0ec [ 143.746247][ T7010] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 143.746262][ T7010] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 143.746281][ T7010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 143.746293][ T7010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.746303][ T7010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.746313][ T7010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.746323][ T7010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.746349][ T7010] [ 144.232345][ T7010] debugfs: out of free dentries, can not create file 'netdev@ffff888068a2c700' [ 144.267403][ T5704] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 144.434748][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 144.448829][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 144.464635][ T5704] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 144.490684][ T5704] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 144.573125][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.602935][ T5704] usb 2-1: config 0 has no interface number 0 [ 144.655990][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.682454][ T5704] usb 2-1: Product: syz [ 144.696129][ T5704] usb 2-1: Manufacturer: syz [ 144.722941][ T5704] usb 2-1: SerialNumber: syz [ 144.748298][ T5704] usb 2-1: config 0 descriptor?? [ 144.790225][ T5704] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 144.812673][ T5704] uvcvideo 2-1:0.105: No valid video chain found. [ 144.986160][ T5704] usb 2-1: USB disconnect, device number 12 [ 145.395987][ T5704] usb 1-1: USB disconnect, device number 7 [ 146.081640][ T7057] FAULT_INJECTION: forcing a failure. [ 146.081640][ T7057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.152339][ T7057] CPU: 1 UID: 0 PID: 7057 Comm: syz.1.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.152360][ T7057] Tainted: [L]=SOFTLOCKUP [ 146.152364][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.152372][ T7057] Call Trace: [ 146.152377][ T7057] [ 146.152383][ T7057] dump_stack_lvl+0xe8/0x150 [ 146.152404][ T7057] should_fail_ex+0x40c/0x560 [ 146.152449][ T7057] _copy_to_user+0x31/0xb0 [ 146.152477][ T7057] __se_sys_mincore+0x4e7/0x620 [ 146.152506][ T7057] __do_fast_syscall_32+0x23e/0x6f0 [ 146.152522][ T7057] ? do_fast_syscall_32+0x33/0x70 [ 146.152537][ T7057] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.152550][ T7057] ? asm_int80_emulation+0x1a/0x20 [ 146.152562][ T7057] ? do_int80_emulation+0x29f/0x550 [ 146.152576][ T7057] ? trace_irq_disable+0x3b/0x140 [ 146.152593][ T7057] do_fast_syscall_32+0x33/0x70 [ 146.152609][ T7057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.152624][ T7057] RIP: 0023:0xf6fff0ec [ 146.152635][ T7057] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 146.152646][ T7057] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 00000000000000da [ 146.152659][ T7057] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 146.152668][ T7057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.152675][ T7057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.152682][ T7057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 146.152689][ T7057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.152707][ T7057] [ 147.847877][ T5704] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.904707][ T29] audit: type=1326 audit(1786761234.388:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 147.967862][ T29] audit: type=1326 audit(1786761234.418:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71474eb code=0x7ffc0000 [ 148.022219][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 148.029332][ T5610] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 148.052313][ T5704] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 148.077344][ T5704] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 148.081086][ T29] audit: type=1326 audit(1786761234.418:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71474eb code=0x7ffc0000 [ 148.117833][ T5704] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.134709][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.170783][ T5704] usb 5-1: config 0 descriptor?? [ 148.183577][ T29] audit: type=1326 audit(1786761234.418:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 148.218967][ T5610] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.246340][ T5610] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 148.268133][ T5610] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 148.282600][ T29] audit: type=1326 audit(1786761234.418:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 148.309565][ T5610] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.326876][ T7109] vlan0: entered promiscuous mode [ 148.356672][ T5610] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.386253][ T29] audit: type=1326 audit(1786761234.418:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 148.413999][ T5610] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 148.442917][ T5610] usb 1-1: config 168 interface 0 has no altsetting 0 [ 148.467544][ T5610] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 148.494522][ T29] audit: type=1326 audit(1786761234.418:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 148.496214][ T5610] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 148.597276][ T5610] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.633137][ T5610] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.646274][ T29] audit: type=1326 audit(1786761234.418:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 148.688945][ T5610] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 148.727916][ T29] audit: type=1326 audit(1786761234.418:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 148.779560][ T5610] usb 1-1: config 168 interface 0 has no altsetting 0 [ 148.779878][ T29] audit: type=1326 audit(1786761234.418:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.2.393" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 148.817537][ T5610] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 148.859733][ T5610] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 148.871100][ T5680] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 148.913568][ T5610] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.940531][ T5610] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.951340][ T5610] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 148.965061][ T5610] usb 1-1: config 168 interface 0 has no altsetting 0 [ 148.980120][ T5610] usb 1-1: string descriptor 0 read error: -22 [ 148.993419][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.008079][ T5680] usb 3-1: device descriptor read/64, error -71 [ 149.054661][ T5704] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 149.067174][ T5610] adutux 1-1:168.0: interrupt endpoints not found [ 149.248214][ T5680] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 149.399801][ T5680] usb 3-1: device descriptor read/64, error -71 [ 149.460815][ T5704] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -110 [ 149.485238][ T5704] usb 5-1: USB disconnect, device number 7 [ 149.528175][ T5680] usb usb3-port1: attempt power cycle [ 149.868380][ T5680] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 149.899001][ T5680] usb 3-1: device descriptor read/8, error -71 [ 149.925275][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 150.078556][ T24] usb 1-1: USB disconnect, device number 8 [ 150.141321][ T5680] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 150.178495][ T5680] usb 3-1: device descriptor read/8, error -71 [ 150.303546][ T5680] usb usb3-port1: unable to enumerate USB device [ 151.086241][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.410'. [ 151.101856][ T7173] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 151.717906][ T5680] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 151.888002][ T5680] usb 2-1: Using ep0 maxpacket: 32 [ 151.905696][ T5680] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 151.940350][ T5680] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 151.976008][ T5680] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.002806][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.029659][ T5680] usb 2-1: config 0 descriptor?? [ 152.526406][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 153.247903][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.407889][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 153.422369][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 153.448989][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 153.469206][ T24] usb 3-1: config 0 has no interface number 0 [ 153.496207][ T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.525878][ T24] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.552026][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.566402][ T24] usb 3-1: Product: syz [ 153.581403][ T24] usb 3-1: Manufacturer: syz [ 153.590833][ T24] usb 3-1: SerialNumber: syz [ 153.606761][ T24] usb 3-1: config 0 descriptor?? [ 153.623002][ T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 153.644761][ T24] em28xx 3-1:0.132: Video interface 132 found: bulk [ 153.816863][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 153.826022][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 153.869160][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.889385][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.978888][ T24] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 154.055250][ T24] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 154.068559][ T24] em28xx 3-1:0.132: board has no eeprom [ 154.137873][ T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 154.146069][ T24] em28xx 3-1:0.132: analog set to bulk mode. [ 154.153531][ T3811] em28xx 3-1:0.132: Registering V4L2 extension [ 154.177457][ T24] usb 3-1: USB disconnect, device number 14 [ 154.201348][ T24] em28xx 3-1:0.132: Disconnecting em28xx [ 154.316167][ T7244] netlink: 'syz.3.425': attribute type 4 has an invalid length. [ 154.365600][ T7244] netlink: 'syz.3.425': attribute type 4 has an invalid length. [ 154.417124][ T3811] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 154.426145][ T3811] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 154.446646][ T3811] em28xx 3-1:0.132: No AC97 audio processor [ 154.475870][ T3811] usb 3-1: Decoder not found [ 154.492533][ T3811] em28xx 3-1:0.132: failed to create media graph [ 154.517674][ T3811] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 154.562905][ T3811] em28xx 3-1:0.132: Remote control support is not available for this card. [ 154.602263][ T5680] usbhid 2-1:0.0: can't add hid device: -71 [ 154.605482][ T24] em28xx 3-1:0.132: Closing input extension [ 154.631686][ T5680] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 154.675439][ T24] em28xx 3-1:0.132: Freeing device [ 154.679354][ T5680] usb 2-1: USB disconnect, device number 13 [ 155.738347][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 155.782248][ T7288] FAULT_INJECTION: forcing a failure. [ 155.782248][ T7288] name failslab, interval 1, probability 0, space 0, times 0 [ 155.836721][ T7288] CPU: 0 UID: 0 PID: 7288 Comm: syz.3.438 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.836748][ T7288] Tainted: [L]=SOFTLOCKUP [ 155.836754][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.836764][ T7288] Call Trace: [ 155.836771][ T7288] [ 155.836778][ T7288] dump_stack_lvl+0xe8/0x150 [ 155.836808][ T7288] should_fail_ex+0x40c/0x560 [ 155.836834][ T7288] should_failslab+0xa8/0x100 [ 155.836861][ T7288] __kmalloc_cache_noprof+0xa8/0x660 [ 155.836886][ T7288] ? nsim_fib_event_nb+0x185/0x11d0 [ 155.836916][ T7288] ? nsim_fib_event_nb+0x185/0x11d0 [ 155.836943][ T7288] nsim_fib_event_nb+0x185/0x11d0 [ 155.836968][ T7288] ? atomic_notifier_call_chain+0x26/0x180 [ 155.836999][ T7288] notifier_call_chain+0x1a5/0x3d0 [ 155.837024][ T7288] ? atomic_notifier_call_chain+0x26/0x180 [ 155.837048][ T7288] atomic_notifier_call_chain+0xda/0x180 [ 155.837071][ T7288] call_fib_notifiers+0x31/0x60 [ 155.837093][ T7288] call_fib_entry_notifiers+0x158/0x200 [ 155.837123][ T7288] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 155.837158][ T7288] ? lockdep_rtnl_is_held+0x26/0x40 [ 155.837180][ T7288] ? fib_find_node+0x2b0/0x2f0 [ 155.837209][ T7288] fib_table_insert+0xc9a/0x1b10 [ 155.837246][ T7288] ? kernel_text_address+0xa5/0xe0 [ 155.837273][ T7288] ? fib_new_table+0x110/0x320 [ 155.837294][ T7288] inet_rtm_newroute+0x14f/0x250 [ 155.837319][ T7288] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 155.837359][ T7288] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 155.837378][ T7288] rtnetlink_rcv_msg+0x802/0xc00 [ 155.837393][ T7288] ? netlink_sendmsg+0x5d4/0xb40 [ 155.837417][ T7288] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 155.837434][ T7288] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.837451][ T7288] ? __lock_acquire+0x683/0x2cf0 [ 155.837486][ T7288] netlink_rcv_skb+0x226/0x4a0 [ 155.837508][ T7288] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.837528][ T7288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.837560][ T7288] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.837580][ T7288] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.837605][ T7288] netlink_unicast+0x7bb/0x940 [ 155.837633][ T7288] netlink_sendmsg+0x813/0xb40 [ 155.837663][ T7288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.837688][ T7288] ? aa_sock_msg_perm+0xf1/0x1b0 [ 155.837711][ T7288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.837731][ T7288] sock_sendmsg_nosec+0x13a/0x180 [ 155.837762][ T7288] ____sys_sendmsg+0x54e/0x850 [ 155.837787][ T7288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.837821][ T7288] ___sys_sendmsg+0x2a5/0x360 [ 155.837840][ T7288] ? __lock_acquire+0x683/0x2cf0 [ 155.837867][ T7288] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.837886][ T7288] ? get_pid_task+0x20/0x1f0 [ 155.837916][ T7288] ? get_pid_task+0x20/0x1f0 [ 155.837937][ T7288] ? get_pid_task+0x20/0x1f0 [ 155.837988][ T7288] ? __fget_files+0x2a/0x420 [ 155.838009][ T7288] ? __fget_files+0x3a2/0x420 [ 155.838041][ T7288] __sys_sendmsg+0x177/0x240 [ 155.838063][ T7288] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.838101][ T7288] __do_fast_syscall_32+0x23e/0x6f0 [ 155.838124][ T7288] ? do_fast_syscall_32+0x33/0x70 [ 155.838144][ T7288] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.838163][ T7288] ? asm_int80_emulation+0x1a/0x20 [ 155.838180][ T7288] ? do_int80_emulation+0x29f/0x550 [ 155.838200][ T7288] ? trace_irq_disable+0x3b/0x140 [ 155.838224][ T7288] do_fast_syscall_32+0x33/0x70 [ 155.838246][ T7288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.838266][ T7288] RIP: 0023:0xf6fef0ec [ 155.838283][ T7288] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 155.838298][ T7288] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 155.838317][ T7288] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 155.838329][ T7288] RDX: 00000000000008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.838339][ T7288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.838350][ T7288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.838360][ T7288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.838386][ T7288] [ 156.651114][ T7299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.708300][ T7299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.855869][ T7307] ªªªªªª: renamed from vlan0 [ 157.476955][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.493786][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.523372][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.549424][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.583992][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.608863][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.300681][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.334905][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.907856][ T5680] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 159.100487][ T5680] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 159.138860][ T7362] capability: warning: `syz.3.459' uses deprecated v2 capabilities in a way that may be insecure [ 159.152268][ T5680] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 159.183855][ T5680] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 159.226957][ T5680] usb 5-1: config 2 has no interface number 0 [ 159.267360][ T5680] usb 5-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 159.311575][ T5680] usb 5-1: config 2 interface 88 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.362741][ T7364] netlink: 27 bytes leftover after parsing attributes in process `syz.0.460'. [ 159.431991][ T5680] usb 5-1: config 2 interface 88 has no altsetting 0 [ 159.482225][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.510472][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.523596][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.541440][ T5680] usb 5-1: Product: syz [ 159.549408][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.570929][ T5680] usb 5-1: Manufacturer: syz [ 159.587345][ T5680] usb 5-1: SerialNumber: syz [ 159.608421][ T5680] asix 5-1:2.88: probe with driver asix failed with error -22 [ 159.621410][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.639379][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 159.669609][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 159.769435][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.809667][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.821995][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 159.831540][ T7373] netlink: 27 bytes leftover after parsing attributes in process `syz.0.463'. [ 159.868803][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 159.883378][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 159.910579][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.973098][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.001383][ T24] usb 3-1: config 0 descriptor?? [ 160.029379][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 160.226035][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 160.375030][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.406132][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.542868][ T4963] bcm5974 3-1:0.0: could not read from device [ 160.576925][ T4963] bcm5974 3-1:0.0: could not read from device [ 160.598300][ T4963] bcm5974 3-1:0.0: could not read from device [ 160.607300][ T24] usb 3-1: USB disconnect, device number 15 [ 160.624432][ T4963] bcm5974 3-1:0.0: could not read from device [ 160.646132][ T5623] bcm5974 3-1:0.0: could not read from device [ 161.047878][ T3811] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 161.219143][ T3811] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 161.244284][ T3811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.254460][ T3811] usb 1-1: Product: syz [ 161.264714][ T3811] usb 1-1: Manufacturer: syz [ 161.269483][ T3811] usb 1-1: SerialNumber: syz [ 161.277642][ T3811] usb 1-1: config 0 descriptor?? [ 161.498010][ T5680] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 161.499203][ T3811] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 009 [ 161.668163][ T5680] usb 3-1: Using ep0 maxpacket: 32 [ 161.675998][ T5680] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 161.694796][ T5680] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 161.713362][ T7388] netlink: 104 bytes leftover after parsing attributes in process `syz.0.469'. [ 161.722497][ T5680] usb 3-1: config 0 has no interface number 0 [ 161.729261][ T5680] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.739598][ T7388] netlink: 104 bytes leftover after parsing attributes in process `syz.0.469'. [ 161.748730][ T5680] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.777474][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.799512][ T5680] usb 3-1: Product: syz [ 161.807297][ T5680] usb 3-1: Manufacturer: syz [ 161.816436][ T5680] usb 3-1: SerialNumber: syz [ 161.838116][ T5680] usb 3-1: config 0 descriptor?? [ 161.850622][ T5680] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 161.861329][ T5680] em28xx 3-1:0.132: Video interface 132 found: bulk [ 162.054337][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.472'. [ 162.305245][ T7406] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 162.315489][ T7406] netlink: 256 bytes leftover after parsing attributes in process `syz.1.474'. [ 162.383090][ T7408] FAULT_INJECTION: forcing a failure. [ 162.383090][ T7408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.397580][ T7408] CPU: 0 UID: 0 PID: 7408 Comm: syz.1.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.397606][ T7408] Tainted: [L]=SOFTLOCKUP [ 162.397612][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.397622][ T7408] Call Trace: [ 162.397629][ T7408] [ 162.397637][ T7408] dump_stack_lvl+0xe8/0x150 [ 162.397667][ T7408] should_fail_ex+0x40c/0x560 [ 162.397696][ T7408] _copy_from_user+0x2d/0xb0 [ 162.397723][ T7408] kstrtouint_from_user+0xd6/0x180 [ 162.397741][ T7408] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 162.397766][ T7408] proc_fail_nth_write+0x8e/0x210 [ 162.397804][ T7408] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.397835][ T7408] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.397860][ T7408] vfs_write+0x296/0xba0 [ 162.397894][ T7408] ? __pfx_vfs_write+0x10/0x10 [ 162.397921][ T7408] ? __fget_files+0x2a/0x420 [ 162.397947][ T7408] ? __fget_files+0x3a2/0x420 [ 162.397969][ T7408] ? __fget_files+0x2a/0x420 [ 162.397999][ T7408] ksys_write+0x150/0x270 [ 162.398026][ T7408] ? __pfx_ksys_write+0x10/0x10 [ 162.398056][ T7408] ? asm_int80_emulation+0x1a/0x20 [ 162.398080][ T7408] do_int80_emulation+0x19a/0x550 [ 162.398101][ T7408] ? trace_irq_disable+0x3b/0x140 [ 162.398120][ T7408] ? asm_int80_emulation+0x1a/0x20 [ 162.398139][ T7408] ? clear_bhb_loop+0x70/0xc0 [ 162.398151][ T7408] ? clear_bhb_loop+0x70/0xc0 [ 162.398166][ T7408] asm_int80_emulation+0x1a/0x20 [ 162.398179][ T7408] RIP: 0023:0xf71374eb [ 162.398190][ T7408] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 162.398201][ T7408] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 162.398214][ T7408] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53ed5d0 [ 162.398223][ T7408] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.398230][ T7408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.398237][ T7408] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 162.398244][ T7408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.398262][ T7408] [ 162.680024][ T5704] usb 5-1: USB disconnect, device number 8 [ 163.008388][ T5680] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 163.087522][ T5680] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 163.103600][ T5680] em28xx 3-1:0.132: board has no eeprom [ 163.167981][ T5680] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 163.181654][ T5680] em28xx 3-1:0.132: analog set to bulk mode. [ 163.188023][ T5704] em28xx 3-1:0.132: Registering V4L2 extension [ 163.274498][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 163.287255][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 163.297042][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 163.307142][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 163.342587][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 163.351643][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 163.361014][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 163.375089][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 163.434229][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 163.453266][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 163.468122][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 163.483201][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 163.500272][ T5704] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 163.520846][ T5704] em28xx 3-1:0.132: Config register raw data: 0xfffffffb [ 163.533061][ T5704] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 163.542687][ T5704] em28xx 3-1:0.132: No AC97 audio processor [ 163.568896][ T5704] usb 3-1: Decoder not found [ 163.584405][ T5704] em28xx 3-1:0.132: failed to create media graph [ 163.628656][ T5704] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 163.645175][ T5704] em28xx 3-1:0.132: Remote control support is not available for this card. [ 163.656391][ T7429] ================================================================== [ 163.664466][ T7429] BUG: KASAN: slab-use-after-free in v4l2_open+0x397/0x3a0 [ 163.671771][ T7429] Read of size 4 at addr ffff888078efc860 by task v4l_id/7429 [ 163.679239][ T7429] [ 163.681566][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 163.681590][ T7429] Tainted: [L]=SOFTLOCKUP [ 163.681597][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.681607][ T7429] Call Trace: [ 163.681614][ T7429] [ 163.681620][ T7429] dump_stack_lvl+0xe8/0x150 [ 163.681648][ T7429] print_address_description+0x55/0x1e0 [ 163.681671][ T7429] ? v4l2_open+0x397/0x3a0 [ 163.681691][ T7429] print_report+0x58/0x70 [ 163.681711][ T7429] kasan_report+0x117/0x150 [ 163.681736][ T7429] ? v4l2_open+0x397/0x3a0 [ 163.681759][ T7429] v4l2_open+0x397/0x3a0 [ 163.681780][ T7429] chrdev_open+0x4d9/0x600 [ 163.681799][ T7429] ? __pfx_chrdev_open+0x10/0x10 [ 163.681817][ T7429] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 163.681851][ T7429] ? __pfx_chrdev_open+0x10/0x10 [ 163.681868][ T7429] do_dentry_open+0x816/0x1380 [ 163.681893][ T7429] vfs_open+0x3b/0x340 [ 163.681911][ T7429] ? path_openat+0x2e2d/0x3830 [ 163.681938][ T7429] path_openat+0x2e44/0x3830 [ 163.681964][ T7429] ? kasan_save_track+0x3e/0x80 [ 163.681983][ T7429] ? do_sys_openat2+0xcc/0x200 [ 163.682002][ T7429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.682027][ T7429] do_file_open+0x23e/0x4a0 [ 163.682053][ T7429] ? __pfx_do_file_open+0x10/0x10 [ 163.682084][ T7429] ? _raw_spin_unlock+0x28/0x50 [ 163.682095][ T7429] ? alloc_fd+0x651/0x6c0 [ 163.682112][ T7429] do_sys_openat2+0x115/0x200 [ 163.682128][ T7429] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.682143][ T7429] ? exc_page_fault+0x6a/0xc0 [ 163.682157][ T7429] ? do_user_addr_fault+0xc4a/0x1340 [ 163.682175][ T7429] __x64_sys_openat+0x138/0x170 [ 163.682190][ T7429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.682202][ T7429] do_syscall_64+0x174/0x580 [ 163.682216][ T7429] ? trace_irq_disable+0x3b/0x140 [ 163.682230][ T7429] ? clear_bhb_loop+0x70/0xc0 [ 163.682244][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.682256][ T7429] RIP: 0033:0x7f090aca7407 [ 163.682268][ T7429] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 163.682278][ T7429] RSP: 002b:00007fff6fc7b300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 163.682292][ T7429] RAX: ffffffffffffffda RBX: 00007f090b3e6880 RCX: 00007f090aca7407 [ 163.682301][ T7429] RDX: 0000000000000000 RSI: 00007fff6fc7bf1b RDI: ffffffffffffff9c [ 163.682310][ T7429] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 163.682317][ T7429] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 163.682325][ T7429] R13: 00007fff6fc7b550 R14: 00007f090b54d000 R15: 000055d5e9a8b4d8 [ 163.682339][ T7429] [ 163.682343][ T7429] [ 163.946750][ T7429] Allocated by task 5704: [ 163.951073][ T7429] kasan_save_track+0x3e/0x80 [ 163.955753][ T7429] __kasan_kmalloc+0x93/0xb0 [ 163.960343][ T7429] __kmalloc_cache_noprof+0x32d/0x660 [ 163.965720][ T7429] em28xx_v4l2_init+0x103/0x3300 [ 163.970661][ T7429] em28xx_init_extension+0x120/0x1d0 [ 163.975949][ T7429] process_scheduled_works+0xa8e/0x14e0 [ 163.981496][ T7429] worker_thread+0xa47/0xfb0 [ 163.986101][ T7429] kthread+0x388/0x470 [ 163.990178][ T7429] ret_from_fork+0x514/0xb70 [ 163.994775][ T7429] ret_from_fork_asm+0x1a/0x30 [ 163.999542][ T7429] [ 164.001859][ T7429] Freed by task 5704: [ 164.005832][ T7429] kasan_save_track+0x3e/0x80 [ 164.010507][ T7429] kasan_save_free_info+0x40/0x50 [ 164.015539][ T7429] __kasan_slab_free+0x5c/0x80 [ 164.020304][ T7429] kfree+0x1c5/0x640 [ 164.024202][ T7429] em28xx_v4l2_init+0x1919/0x3300 [ 164.029235][ T7429] em28xx_init_extension+0x120/0x1d0 [ 164.034524][ T7429] process_scheduled_works+0xa8e/0x14e0 [ 164.040073][ T7429] worker_thread+0xa47/0xfb0 [ 164.044674][ T7429] kthread+0x388/0x470 [ 164.048744][ T7429] ret_from_fork+0x514/0xb70 [ 164.053339][ T7429] ret_from_fork_asm+0x1a/0x30 [ 164.058122][ T7429] [ 164.060446][ T7429] The buggy address belongs to the object at ffff888078efc000 [ 164.060446][ T7429] which belongs to the cache kmalloc-8k of size 8192 [ 164.074499][ T7429] The buggy address is located 2144 bytes inside of [ 164.074499][ T7429] freed 8192-byte region [ffff888078efc000, ffff888078efe000) [ 164.088480][ T7429] [ 164.090800][ T7429] The buggy address belongs to the physical page: [ 164.097209][ T7429] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78ef8 [ 164.105967][ T7429] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.114463][ T7429] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 164.122001][ T7429] page_type: f5(slab) [ 164.125984][ T7429] raw: 00fff00000000040 ffff88801b002280 dead000000000100 dead000000000122 [ 164.134568][ T7429] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 164.143157][ T7429] head: 00fff00000000040 ffff88801b002280 dead000000000100 dead000000000122 [ 164.151837][ T7429] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 164.160503][ T7429] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 164.169174][ T7429] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 164.177835][ T7429] page dumped because: kasan: bad access detected [ 164.184246][ T7429] page_owner tracks the page as allocated [ 164.189959][ T7429] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5265, tgid 5265 (run-parts), ts 42968781502, free_ts 42968141751 [ 164.210292][ T7429] post_alloc_hook+0x1f9/0x250 [ 164.215058][ T7429] get_page_from_freelist+0x21fa/0x2270 [ 164.220604][ T7429] __alloc_frozen_pages_noprof+0x18d/0x380 [ 164.226409][ T7429] allocate_slab+0x79/0x5e0 [ 164.230906][ T7429] refill_objects+0x2d5/0x350 [ 164.235582][ T7429] __pcs_replace_empty_main+0x2bf/0x6b0 [ 164.241127][ T7429] __kmalloc_cache_noprof+0x3a7/0x660 [ 164.246497][ T7429] tomoyo_init_log+0x112e/0x1fa0 [ 164.251430][ T7429] tomoyo_supervisor+0x35f/0x1560 [ 164.256451][ T7429] tomoyo_env_perm+0x151/0x1f0 [ 164.261212][ T7429] tomoyo_find_next_domain+0x1332/0x1a90 [ 164.266842][ T7429] tomoyo_bprm_check_security+0x11b/0x180 [ 164.272559][ T7429] security_bprm_check+0x85/0x240 [ 164.277592][ T7429] bprm_execve+0x918/0x1630 [ 164.282108][ T7429] do_execveat_common+0x4f4/0x670 [ 164.287141][ T7429] __x64_sys_execve+0x97/0xc0 [ 164.291825][ T7429] page last free pid 5265 tgid 5265 stack trace: [ 164.298146][ T7429] __free_frozen_pages+0xc1e/0xd10 [ 164.303261][ T7429] __slab_free+0x274/0x2c0 [ 164.307771][ T7429] qlist_free_all+0x99/0x100 [ 164.312373][ T7429] kasan_quarantine_reduce+0x148/0x160 [ 164.317832][ T7429] __kasan_slab_alloc+0x22/0x80 [ 164.322682][ T7429] __kmalloc_noprof+0x311/0x720 [ 164.327532][ T7429] tomoyo_supervisor+0xc53/0x1560 [ 164.332553][ T7429] tomoyo_env_perm+0x151/0x1f0 [ 164.337318][ T7429] tomoyo_find_next_domain+0x1332/0x1a90 [ 164.342952][ T7429] tomoyo_bprm_check_security+0x11b/0x180 [ 164.348669][ T7429] security_bprm_check+0x85/0x240 [ 164.353703][ T7429] bprm_execve+0x918/0x1630 [ 164.358214][ T7429] do_execveat_common+0x4f4/0x670 [ 164.363247][ T7429] __x64_sys_execve+0x97/0xc0 [ 164.367932][ T7429] do_syscall_64+0x174/0x580 [ 164.372520][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.378408][ T7429] [ 164.380727][ T7429] Memory state around the buggy address: [ 164.386350][ T7429] ffff888078efc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.394407][ T7429] ffff888078efc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.402468][ T7429] >ffff888078efc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.410520][ T7429] ^ [ 164.417709][ T7429] ffff888078efc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.425768][ T7429] ffff888078efc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.433822][ T7429] ================================================================== [ 164.467677][ T7397] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 164.486251][ T7397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.494693][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.511116][ T7397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.588370][ T7429] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 164.595616][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 164.606209][ T7429] Tainted: [L]=SOFTLOCKUP [ 164.610528][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.620588][ T7429] Call Trace: [ 164.623874][ T7429] [ 164.626809][ T7429] vpanic+0x56c/0xa60 [ 164.630806][ T7429] ? __pfx_vpanic+0x10/0x10 [ 164.635316][ T7429] panic+0xc5/0xd0 [ 164.639038][ T7429] ? __pfx_panic+0x10/0x10 [ 164.643456][ T7429] ? preempt_schedule_thunk+0x16/0x40 [ 164.648827][ T7429] ? preempt_schedule_thunk+0x16/0x40 [ 164.654215][ T7429] ? v4l2_open+0x397/0x3a0 [ 164.658637][ T7429] check_panic_on_warn+0x89/0xb0 [ 164.663579][ T7429] ? v4l2_open+0x397/0x3a0 [ 164.667999][ T7429] end_report+0x73/0x170 [ 164.672250][ T7429] ? v4l2_open+0x397/0x3a0 [ 164.676669][ T7429] kasan_report+0x128/0x150 [ 164.681177][ T7429] ? v4l2_open+0x397/0x3a0 [ 164.685605][ T7429] v4l2_open+0x397/0x3a0 [ 164.689850][ T7429] chrdev_open+0x4d9/0x600 [ 164.694265][ T7429] ? __pfx_chrdev_open+0x10/0x10 [ 164.699216][ T7429] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 164.705557][ T7429] ? __pfx_chrdev_open+0x10/0x10 [ 164.710495][ T7429] do_dentry_open+0x816/0x1380 [ 164.715267][ T7429] vfs_open+0x3b/0x340 [ 164.719347][ T7429] ? path_openat+0x2e2d/0x3830 [ 164.724123][ T7429] path_openat+0x2e44/0x3830 [ 164.728728][ T7429] ? kasan_save_track+0x3e/0x80 [ 164.733583][ T7429] ? do_sys_openat2+0xcc/0x200 [ 164.738354][ T7429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.744423][ T7429] do_file_open+0x23e/0x4a0 [ 164.748932][ T7429] ? __pfx_do_file_open+0x10/0x10 [ 164.753970][ T7429] ? _raw_spin_unlock+0x28/0x50 [ 164.758820][ T7429] ? alloc_fd+0x651/0x6c0 [ 164.763154][ T7429] do_sys_openat2+0x115/0x200 [ 164.767837][ T7429] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.773038][ T7429] ? exc_page_fault+0x6a/0xc0 [ 164.777731][ T7429] ? do_user_addr_fault+0xc4a/0x1340 [ 164.783026][ T7429] __x64_sys_openat+0x138/0x170 [ 164.787893][ T7429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.793982][ T7429] do_syscall_64+0x174/0x580 [ 164.798575][ T7429] ? trace_irq_disable+0x3b/0x140 [ 164.803607][ T7429] ? clear_bhb_loop+0x70/0xc0 [ 164.808301][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.814204][ T7429] RIP: 0033:0x7f090aca7407 [ 164.818615][ T7429] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 164.838223][ T7429] RSP: 002b:00007fff6fc7b300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 164.846644][ T7429] RAX: ffffffffffffffda RBX: 00007f090b3e6880 RCX: 00007f090aca7407 [ 164.854622][ T7429] RDX: 0000000000000000 RSI: 00007fff6fc7bf1b RDI: ffffffffffffff9c [ 164.862599][ T7429] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 164.870574][ T7429] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 164.878550][ T7429] R13: 00007fff6fc7b550 R14: 00007f090b54d000 R15: 000055d5e9a8b4d8 [ 164.886528][ T7429] [ 164.890140][ T7429] Kernel Offset: disabled [ 164.894462][ T7429] Rebooting in 86400 seconds..