last executing test programs: 3m27.885107771s ago: executing program 3 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108"], 0x78}}, 0x0) 3m26.335268911s ago: executing program 3 (id=176): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x106, 0x1}}, 0x20) 3m25.786412649s ago: executing program 3 (id=178): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001c030109021b0001000000040904080001030000000905", @ANYBLOB="9fef"], 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000001900)) (async, rerun: 64) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) (async, rerun: 64) write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 3m24.006002289s ago: executing program 3 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x12928a1, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x2a5b091, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0xf4}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)) read$FUSE(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000100)="2d097f0d0ad8d0a6c7f9838479b9", 0xe, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @sack_perm, @mss={0x2, 0x7}, @timestamp, @timestamp, @window={0x3, 0x100, 0x8}, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 3m20.530213664s ago: executing program 3 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000140)={0x0, 0x5d52, 0x1, 0x3, 0x28c}, &(0x7f0000001b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f2b, 0x2000, 0x0, 0x289, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1a7, 0x80210, 0x1, 0x164, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x721b, 0x4, 0x0, 0x21a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x1, 0x3, 0x80}}], 0x4, 0x0, 0x0) 3m17.797882192s ago: executing program 3 (id=199): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffc, 0x0, 0xad, @buffer={0x0, 0xe7, &(0x7f0000000080)=""/231}, 0x0, 0x0, 0x9, 0x21, 0x2, 0x0}) mkdir(&(0x7f0000000000)='my_proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f00000005c0)="a51d484e240000000000f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d85e4475117000ba4294ecbb8fbe89", 0x32}], 0x2) socket$netlink(0x10, 0x3, 0x4) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x6) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sched_setparam(r1, &(0x7f00000006c0)=0x4) capset(&(0x7f00000001c0)={0x19980330, r1}, &(0x7f0000000340)={0x200000, 0x200000, 0x1, 0x200004, 0x5989, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='3c0', 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) 50.648622435s ago: executing program 2 (id=561): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0xaa182, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902590001000000000904000000ef040100052406000105240000000d240f0100000000060000000006241a050000152412"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, 0x0) 48.577743545s ago: executing program 2 (id=567): ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) 48.555735519s ago: executing program 2 (id=568): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5d136e9"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) (fail_nth: 1) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b62011"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) 44.6894811s ago: executing program 2 (id=577): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x65, 0x24, 0x1, 0x70bd2c, 0x25cfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffb}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 3) 44.427099823s ago: executing program 2 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5', 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c0000000206050600000000000000000200000005000100070000000900020073797a300000000011000300686173683a69702c6decaa2d0800000005000400030000000500050002000000"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xc, &(0x7f0000000400)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), 0x0}, 0x20) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 41.733720457s ago: executing program 2 (id=587): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8, 0xb21d, 0x7, 0x8000, 0x4, 0x8, 0x5b, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010114, 0x0, 0xe4}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) write$binfmt_script(r5, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "153635d227f2a2811b218d2c177a396498ccf84a11aa0a4a1a40463a1bcfeb7b69b1f8fded82bc72e7ba69b5d45a424b12251cccd1597e58bbab2956be9009870c8a51fa2154902deb40ab538f75dd858387ee897392c0a9006c1421"}, 0x15c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x400) ioctl$EVIOCSABS0(r9, 0x401845c0, &(0x7f0000000180)={0x96, 0xb8e3, 0x7fffffff, 0x81, 0xff, 0x7}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bdfb7000fbdbdf2544000000080003", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x4c040) 26.556554591s ago: executing program 32 (id=587): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8, 0xb21d, 0x7, 0x8000, 0x4, 0x8, 0x5b, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010114, 0x0, 0xe4}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) write$binfmt_script(r5, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "153635d227f2a2811b218d2c177a396498ccf84a11aa0a4a1a40463a1bcfeb7b69b1f8fded82bc72e7ba69b5d45a424b12251cccd1597e58bbab2956be9009870c8a51fa2154902deb40ab538f75dd858387ee897392c0a9006c1421"}, 0x15c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x400) ioctl$EVIOCSABS0(r9, 0x401845c0, &(0x7f0000000180)={0x96, 0xb8e3, 0x7fffffff, 0x81, 0xff, 0x7}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bdfb7000fbdbdf2544000000080003", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x4c040) 25.149874238s ago: executing program 0 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c9078010000004b142b7461fd777b1c0114d14efb9f49fcdb8f080c26a04883ad5c8c43efa869890a881c51852e4451b57d037ad3c04594282423424d0000000000000000000000001dbcfd56f1375461caaa8719935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe090000000000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r4, 0x8b2d, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40012020) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r6, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x12}, 0xbb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(r9, 0x0, &(0x7f0000001100)={{0x77359400}}, &(0x7f0000001140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=']) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000020a01014200000000000000050000000900010073797a30"], 0xbc}}, 0x0) 23.543689344s ago: executing program 4 (id=621): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x9fd}}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = socket$inet6(0xa, 0x6, 0x5) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa873751852e4451b57d037ad3c045942824251d7d1704001584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a50fbb3f39cb307b347a57df67d544af6e8dafe09"], 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000040)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x18, r10, 0x1, 0xfd, 0x6, @remote}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x200400d1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a40000000002010400000000000000000a000000180001800600018008000100ac14141608000200640111013c0003800c00028005000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414370c000280050001"], 0xa4}, 0x1, 0x0, 0x0, 0x22000801}, 0x4) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x200) 22.834557918s ago: executing program 0 (id=623): syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0xfffc, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x84, 0x0, @loopback, @local}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0xac, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x0, 0x2}]}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x17, 0x501, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @empty, @remote}, "000022eb00000000"}}}}}, 0x0) 21.401617003s ago: executing program 4 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000940)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r9, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r9, 0x2}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r10, &(0x7f0000000200)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7d}, [@ldst={0x4, 0x0, 0x4, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x31dd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x484}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) 21.27613216s ago: executing program 0 (id=625): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) r1 = syz_usb_connect$midi(0x4, 0x86, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1045, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x5, 0x70, 0x2c, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0xfe, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0xff}, @ms_header={0x7, 0x24, 0x1, 0x663, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x66, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0xf2, 0x5}, {0x4, 0x7f}], 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x63}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x0, 0x3}], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0xc, 0x4, 0x36, {0x6, 0x25, 0x1, 0x2, ']&'}}}, {{0x9, 0x5, 0xa, 0x2, 0x0, 0x6, 0x2, 0x3, {0x10, 0x25, 0x1, 0xc, "babd170f0320b93e2824a6ec"}}}, {{0x9, 0x5, 0x3, 0x10, 0x3d7, 0xd, 0xd, 0x0, {0x6, 0x25, 0x1, 0x2, 'Aa'}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x5, 0x4, 0x6, 0x40, 0x99}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x7, [{0x49, &(0x7f00000006c0)=ANY=[]}, {0x80, &(0x7f0000000200)=@string={0x80, 0x3, "ad5b01f1138eedc3caf4486adb1dfbc8ce4a07a761e23343329eeaa0159e8a6ac5da07acaf09b2b9f17aca811e9d467df5299dbc71f2db284e94cf9a9cd9818c39d7b269edb2fc68cdffae1b51dd4cde06a348aff6940d5154a8bb021cedfa4312b893e74002e8cbe441318f58014bd536f5fe6048656b5e0ccf89d31973"}}, {0x4c, &(0x7f0000000280)=ANY=[@ANYBLOB="4d0374ba0238dbe03c69fe184eb9b8a5ea94ca94190045f0ef4697c4dc90d0262f9d1c85abe28c11e37db89972fd9b4e16ab0be01695cc1e852f7b02e29d21fafea72a57876b43de1718"]}, {0x13, &(0x7f0000000300)=@string={0x13, 0x3, "4ba7b4ed68af17c81930e4c84fee37490e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}, {0xac, &(0x7f00000003c0)=@string={0xac, 0x3, "c9bec69786e1247ef33dca61fcc47c1e1789152914b0efe6d21adbddff8dcd58580a9eb9b413ded89e14786a566ebe2d378f2c930e17f2ab045fbcc93808fc5c1b4d343b63a90b8afd3851f3825e5ef466434156980c6a20407ae83b481d91d6512a78ac2a567221836e3c6d3a2f92fd02215899a9ccb6e704689697e90593e1e931d67aee1b62320624d05b344bef4850af129026a89abcc300a71962da89010ac96d6881772d0711b3"}}]}) syz_usb_ep_write(r1, 0xd5, 0x9e, &(0x7f0000000580)="01c1d498510b0667aad6159dee395442c506a42cbab25e1accc41f3eb9720b7602e40ab03cf9cfd63e4d309d0f26a207bb8e7b643228fd45f1e575b27faf6522423f1ca3471e60a574b26c24d3ee10d363e94cb59125dd72eea388ebf6a12d51c6f891ab41eeb1566c22583e3e30f233d0bd14bff54aa65ca58c63a6144b9e6ffc1c857a5e75e15c43dc65a326cf95ed1682754972a33e1916d307bb92f0") r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003280), 0x1, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d14, &(0x7f0000000000)) geteuid() listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000022c0)={0xffffffffffffffff, 0x20, &(0x7f0000002280)={&(0x7f0000001200)=""/4096, 0x1000, 0x0, &(0x7f0000002200)=""/74, 0x4a}}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_connect(0x5, 0x73f, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0xbd, 0xe2, 0x66, 0x10, 0x403, 0xdaff, 0xae15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72d, 0x4, 0x9, 0x1, 0x30, 0x54, "", [{{0x9, 0x4, 0x10, 0x4, 0x9, 0x10, 0x25, 0x4a, 0xd, [@hid_hid={0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xaa5}}, @hid_hid={0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x2fd}}], [{{0x9, 0x5, 0xf, 0x3, 0x40, 0x7, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}, @generic={0xec, 0x23, "00429ab921402424e3c66fa57c82706e8f1783b07d80d5ff83ec95a12cb35c91db5016ec21cbcc4d159e4fcc8530b1ead80c71864566c569577b381cb07857edddb8d743d94b363c98a5cbc43c1bc46edc510e1cff9e0be45b459b09f374ffc4bca831bd5f1362ba716163c1b0340dd9f8bebbb721f8d0de66534049833289f831cf1102a09a62c29dae7244f2c815f2d38c5f59d2ac7415d429de919dc3bf5c04699353b01c3686e240bec1bb2bd350bdc154ef52db0843fa5130f01eff63832964ca6f6c58a1209751e6cb88707f6998506c1e02562b9cf0a8e0901a29204fb0b506fc3f3df0afc9f0"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1d, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x2}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3f7, 0x9, 0x6, 0xe}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x3, 0xf6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0xfb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x5, 0x4e}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2b, 0x9, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0xab983480e47cee8d, 0x86, 0x8, 0x4, [@generic={0xf9, 0x21, "22da3ae161886545472e4b64d014b112a4a1c78c826e150a223a57387cc176d855cc30c3d31bb38c467fb1a6fa7f348e884da5b29284c8d0d45865064603e82a85ab58e96e522518a86409c4b4ceb59e5c7a0d0cd0d235c364d47fe0130dbd73265597bfb97f6d27ae5a1cc9aba156e9142b7ab92f3eb89eb2f159ef13e6666ddcb709438ac7a293b14c3acdda6409761419a627e7fb4b0ce3820cc1dafd411ea35f0fae1009aecb10dbbf884961c4aed6ad71031a8ef393b33989a8fdd9afef695cafcd9cfc0001eb4cd6d7c639e7e07c04eaf615b41d9bb8cc3858c0312976d33f6dcd7763fbf3e4176c08118bb899e7ac504488da9d"}]}}, {{0x9, 0x5, 0x2d1e04f97de6ccce, 0x4, 0x200, 0x9, 0x40, 0x4, [@generic={0x9c, 0xf, "6341156fec8d4e734b9b634d55e73863ab066b3f38836ebaef8a818757714d94b504dbf232d81c89ae9723eb7a294a08058ae5900125c778ec9fee3b5f920294a96711e30e034cdbde2beeb51edb1b2494be10d4d1b9f854c90f0aad4c3a76552419cde94ec678511e4213d4440013b25a61d9fae19fb6c4122de9adf7e359d13d3d054b963d1a8d70c28f66efc077a404a44b32fb7d2738f5f5"}]}}]}}, {{0x9, 0x4, 0xde, 0x6, 0x9, 0x7d, 0x61, 0x61, 0x3, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "7811e4c2"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x1}, [@country_functional={0xc, 0x24, 0x7, 0xc, 0x3d, [0xb, 0x9, 0xc]}]}, @hid_hid={0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x514}}], [{{0x9, 0x5, 0x5, 0x4, 0x400, 0xa1, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xc, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x0, 0x8, [@generic={0x48, 0x7, "14b45f32587d82c46f5582fd81d8ab2243a728c0d72742d8a5a6115d5a0f13f3d8d2e6ce3e936cf201f72b8216d211c872a07b21be2a330ebd467336a4253aa7201d39f190f6"}, @generic={0x47, 0x23, "64e65003ebf15d33e204d0ad6f802808db3cbce3a4ab029585397f864e3f4a6af91eef25fe685df6907f117b83a95526ee3ff38574956ba2d7f850259e10393acd2ead87df"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0xfc, 0x35, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x100}, @generic={0xe0, 0x23, "79ce4f88b4d39f01b97381f352d4f757283f0fe39b50d3712967a823556fcfc38ec0bd6123276dc87803b60da62df0c981c47f17614f42f7a11629ed8d29d1bf6e0de4838a27b2d626e9b259c3746eec6e52bec8cd98e526010a7b0ad3c642677b5b146000e7db976b6525669cd31a869fcb1d80da1a3abe8bf1bda980aca3bb343485be60d59361993923b2e358a2d9cb76bf20756246d182c16b2880b06d07b4bdc801389033b628763238c9c4d07ed300f8d86c825d3e3d1f03d858c936f1711ec74095d73fd3e6234d56b1d371ee6e356ab20fd3c9a1bcee242be313"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x3, 0xfa, 0xc, [@generic={0xf, 0x1, "f3e52d71df1f7570353f442bb4"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x0, 0x9, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x58f, 0x1, 0x5, 0xf8}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x8, 0x2, 0x9}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x4, 0x8, 0xb}}]}}, {{0x9, 0x4, 0xc8, 0x81, 0x5, 0x60, 0xeb, 0x90, 0x80, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "691529"}, {0x5, 0x24, 0x0, 0x1d2f}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x0, 0x3}, [@dmm={0x7, 0x24, 0x14, 0xfff9, 0x7}, @mdlm_detail={0x5d, 0x24, 0x13, 0xf8, "045c3ee7a78fe461b4cda10a2b37b0f1c0da168916f664ec595b9f8016a07d07d3538fcd05912f5aec1e103ca1ba15971cabcd2fb10b09004b059d3b53601f12fae4cbabe703ac8d5adb2f3ab2ed6b4b39cae1a8aa22bf53e2"}, @dmm={0x7, 0x24, 0x14, 0xff, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}]}, @uac_as], [{{0x9, 0x5, 0x8, 0xc, 0x10, 0xa6, 0x5, 0xfa}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x4, 0xa}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x42, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x4}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x9, 0x3, 0x3}}, {{0x9, 0x5, 0x8d, 0x12, 0x10, 0x5, 0x7f, 0xd0}}]}}, {{0x9, 0x4, 0xe9, 0x32, 0x6, 0xac, 0xae, 0x98, 0xff, [@generic={0xd, 0xf, "09c6ceab723a2f1a802b87"}, @generic={0xc0, 0x0, "37588461f6ba2e92f698a5fdca0bcc4e6167098ee4249e5e9b7adf2bc050b3cd728523b0681c5a30e6e5afaa1de9083f41f4d736ba786a23f8b5c951fe46e68cbabfd4806b78df782c46d2f8562cf57c2cabc692a0bdf2f202eaef1df4ae10cacc6b709bca9a51331c72d84a385a874d6a9f43169d623d0bfe8f630403efd3f43d623ead35eda1e96222ba5e5b38b9c9d33ec72476da948b0dd9e5bb087192f9b86cc2a173f1ca7b54dc779113b912e35b87e701b93dcb06f1dbb7dcd3da"}], [{{0x9, 0x5, 0xc, 0x0, 0x208, 0x5, 0x59, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x52, 0x3}]}}, {{0x9, 0x5, 0x8, 0x4, 0x0, 0x1, 0x1, 0x5}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x8, 0x54, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x3}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x5, 0x0, 0xe}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x3, 0x0, 0x4, [@generic={0xf, 0x22, "2233d6432a0980867a0171a97c"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfff8}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x6, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x250, 0x4, 0xff, 0x7, 0x20, 0x8}, 0x5d, &(0x7f0000000f00)={0x5, 0xf, 0x5d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x1, 0x5}, @wireless={0xb, 0x10, 0x1, 0x1c, 0x8, 0xfa, 0x1c, 0x7, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x8, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "4b1dbfd29b1fd4e639392ef1d2a32188"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "afc64c844784d63687ecd79b9efa3cdf"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "a9830a913926ec8f4e97a4408b4827af"}]}, 0x3, [{0xba, &(0x7f0000000f80)=@string={0xba, 0x3, "57499ab56c301f2511b001d640f0c9443d666b588d7196425c2f178b4e33dc1c25c6eddd90d7a47364f74602ff3f53c338c0bd178110aa3e270f06a35a51335f916aa15a032c399ec480a9b58905b0337284b22127d781293b8f0622ae9d8142397815486f4743a7eabbb8b7978a4bb9484eff4cd98fba944cb4319b2920e44776878faf39efcb1c5106f931fc2922451e3b086d2c2fb792400a35a646c8dbf432c610a2ec243481c9f2ecdb15619757d6e6ffb5a37f7654"}}, {0xeb, &(0x7f0000001040)=@string={0xeb, 0x3, "89a505fe8e14e6e6e3b6e5993bae50849459a09bcc53598dbe3b75b71e8c13bdc9741e6e3f078bd86e5d6dc3c39d9c77ccae783e97da53d9545504685cf725ff9d82f257abdf83eec2821a24d5ac99ce4cd69727f86870646f5c29a842e3f3d2a4f0e473d8a5b0edcf204c5f7f63eecf793c5ca29fc85f870dbe3ab06f225e10de5aeabaa36f82751f71c676fffc8f2a2ab95e0499c506adbecd4ed5006f66615b6acc66718bd54dcbef9aa3649f2e013b5e432b2835f8ae7f6d8eb7ff190ea93707ac1b27174523d9efa524157af7c0afcc93df60f9c1306af1ab5214c5828e532515e48650fc93ce"}}, {0x6f, &(0x7f0000001140)=@string={0x6f, 0x3, "cc36ae4a7736a0d99494588b75b31f8545ca01f51b30632fb8a0783ea3f13be95a4c978fd70e4cadb81364fc7fb0c902b2c32f9b7e6e54b217de9a1080beefb22ee7a041f47412f9d09c7a803f65e03f303b89b02bb83eff8fa0291930078bb8063370c718a95474fc06a848cd"}}]}) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004044) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) 19.205325909s ago: executing program 0 (id=631): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 18.895178171s ago: executing program 0 (id=632): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='vers\x00', &(0x7f00000001c0)='4.2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b0d, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 18.201618968s ago: executing program 0 (id=633): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r2 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400461f1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x8000, 0x20, 0x81, 0x8, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @broadcast, @broadcast}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="45f760c50ae5db1991046ad93409", 0x0, 0x7404, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4c094) close_range(r1, r2, 0x2) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22, 0x7f, @remote, 0x8}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000380)=[{0x6, 0x4, 0xa4, 0x7fff0003}, {0x1, 0x80, 0x5, 0x8}, {0x200, 0x9, 0x80, 0x8001}]}) r9 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x28200) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r11, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x19, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) ioctl$RTC_ALM_READ(r9, 0x80247008, &(0x7f0000000100)) close_range(r8, 0xffffffffffffffff, 0x0) 17.996553067s ago: executing program 1 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xb, 0x1, [0x2]}, 0xa) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x4001000, 0x8, 0x9, 0x80000001, 0xff}, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "4494a5"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030427bd7000fd9bdf250000692a", @ANYRES32=0x0, @ANYBLOB="0000000006a701002400128009000100626f6e640040000014ea018008001400ffffffff08001300027467ba8f3cb0343e1fc30f400127076b9341906558abcbbf8973ad558db4bf8084ad27135f78d460af898abb"], 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844) 17.904270534s ago: executing program 4 (id=635): ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) 17.342043379s ago: executing program 4 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000072c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x8000040) 17.096938286s ago: executing program 1 (id=637): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 17.094078196s ago: executing program 4 (id=638): writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f00000005c0)="a51d484e240000000000f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d85e4475117000ba4294ecbb8f", 0x30}], 0x2) 16.817965566s ago: executing program 1 (id=639): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x109001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) dup3(r1, r0, 0x0) 16.802466247s ago: executing program 4 (id=640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18024000010000000000000002030400ff01000000000000a37f15fbb6ffff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7da, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7d, 0xe, &(0x7f00000002c0)=""/14, 0x6fd91ccb43ef15a6, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x3, 0x682, 0x40}, 0x10, 0x1034, r2, 0x6, &(0x7f0000000500)=[r3, 0x1, r4, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x5, 0x1, 0xd, 0x1}, {0x3, 0x4, 0x4, 0x1}, {0x2, 0x3, 0x8}, {0x2, 0x1, 0x4, 0x2}, {0x2, 0x3, 0x5, 0xc}, {0x1, 0x2, 0xe, 0x2}], 0x10, 0xfffffffa}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8001) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf4, 0x0, 0x400, 0x1, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdd1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xf4}}, 0x4000) 16.657003124s ago: executing program 1 (id=641): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 16.469769553s ago: executing program 1 (id=642): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x28, {0x28, 0x23, "c26313852642782c3cbdb7a368c50fb74237cc4b44b72fb0688881ce2a52973661d67a0c5544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x28, {0x28, 0x23, "c26313852642782c3cbdb7a368c50fb74237cc4b44b72fb0688881ce2a52973661d67a0c5544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) writev(r2, &(0x7f00000013c0)=[{&(0x7f0000000700)="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", 0x188}], 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000680)=[{{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x2, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3}, {0x2}}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1}}], 0x48) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x1, 0x4, 0x4, 0x4000000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x1, 0x4, 0x4, 0x4000000}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff110002000200000800040001000000", 0x24) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200000010200010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000100)="0e00300000000100000000020000") (async) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000100)="0e00300000000100000000020000") (async) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000120)="0e00310000000100000000000000") (async) syz_usb_ep_write(r3, 0x81, 0xe, &(0x7f0000000120)="0e00310000000100000000000000") (async) syz_usb_ep_write(r3, 0x81, 0xa, &(0x7f0000000140)="0a000000000003000000") (async) syz_usb_ep_write(r3, 0x81, 0xb, &(0x7f0000000160)="0b00000000000300000001") (async) syz_usb_ep_write(r0, 0x81, 0x16, &(0x7f0000000640)="f7ffffffffff02088bfef2000000a08609008096ae00") (async) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000040)=0x8) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) (async) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x800101b, r4, 0x0) (async) fanotify_mark(r5, 0x105, 0x800101b, r4, 0x0) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) syz_usb_ep_write(r3, 0x81, 0xc, &(0x7f00000001a0)="0c000000000003000000ff00") (async) syz_usb_ep_write(r3, 0x81, 0xa, &(0x7f00000001c0)="0a000000000003000000") (async) syz_usb_ep_write(r3, 0x81, 0xa, &(0x7f00000001e0)="0a000000000003000000") (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x60}}, 0x200040c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 15.10426399s ago: executing program 1 (id=643): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x2}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000001540)) 3.10409127s ago: executing program 33 (id=633): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r2 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400461f1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x8000, 0x20, 0x81, 0x8, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @broadcast, @broadcast}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="45f760c50ae5db1991046ad93409", 0x0, 0x7404, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf253d0000003eea188ec7a96e0e0001006e6574646554fff495066395d72f1084d460e77f6e7673696d00000b0f00113700007464657673695730635f69735f6d756c7469636173740000000000000000009909a03f3f1ac51be1fc2e516c2bd3dce54d7624e2baaf5d713fc102cb8ffb5db91136ffdb182b6ca5ec2b6f665f580f6c81dcc7d57949f9bd912c1400b6c708561ea14fe216f5094542bf1762a8668edb7907a55cab80abda9838b94b9994278dd51cb9db3bbc626f20fbbf4649d14853f4886c377d427d63395095e8f36fa366cc9e0f3efb198825956689af1ae840593172a600290d856235d51adf0235dfc3effb361fad461078bb45babd3657fe7cc20d398bed7f2afbe2e6b915ef41904718e906d71cc2e11e95ff27c2a7101b1c0b"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4c094) close_range(r1, r2, 0x2) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22, 0x7f, @remote, 0x8}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000380)=[{0x6, 0x4, 0xa4, 0x7fff0003}, {0x1, 0x80, 0x5, 0x8}, {0x200, 0x9, 0x80, 0x8001}]}) r9 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x28200) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r11, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x19, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) ioctl$RTC_ALM_READ(r9, 0x80247008, &(0x7f0000000100)) close_range(r8, 0xffffffffffffffff, 0x0) 1.053861178s ago: executing program 34 (id=640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18024000010000000000000002030400ff01000000000000a37f15fbb6ffff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7da, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7d, 0xe, &(0x7f00000002c0)=""/14, 0x6fd91ccb43ef15a6, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x3, 0x682, 0x40}, 0x10, 0x1034, r2, 0x6, &(0x7f0000000500)=[r3, 0x1, r4, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x5, 0x1, 0xd, 0x1}, {0x3, 0x4, 0x4, 0x1}, {0x2, 0x3, 0x8}, {0x2, 0x1, 0x4, 0x2}, {0x2, 0x3, 0x5, 0xc}, {0x1, 0x2, 0xe, 0x2}], 0x10, 0xfffffffa}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8001) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf4, 0x0, 0x400, 0x1, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdd1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xf4}}, 0x4000) 0s ago: executing program 35 (id=643): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x2}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000001540)) kernel console output (not intermixed with test programs): cp:0kB local_pcp:0kB free_cma:0kB [ 268.015769][ T7370] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 268.015973][ T7370] Node 0 DMA32 free:1070176kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12192kB inactive_anon:239668kB active_file:89396kB inactive_file:158136kB unevictable:4976kB writepending:1180kB zspages:0kB present:3129332kB managed:2560496kB mlocked:2488kB bounce:0kB free_pcp:10444kB local_pcp:2024kB free_cma:0kB [ 268.016089][ T7370] lowmem_reserve[]: 0 0 1 1 1 [ 268.016289][ T7370] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 268.016417][ T7370] lowmem_reserve[]: 0 0 0 0 0 [ 268.016632][ T7370] Node 1 Normal free:3935356kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.016758][ T7370] lowmem_reserve[]: 0 0 0 0 0 [ 268.016965][ T7370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 268.017552][ T7370] Node 0 DMA32: 3*4kB (UME) 43*8kB (UE) 32*16kB (UE) 419*32kB (UME) 550*64kB (UME) 132*128kB (UME) 97*256kB (UME) 44*512kB (UME) 18*1024kB (UME) 8*2048kB (UM) 225*4096kB (UM) = 1070148kB [ 268.018417][ T7370] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.018883][ T7370] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 6*16kB (UM) 6*32kB (UM) 11*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 959*4096kB (M) = 3935356kB [ 268.019708][ T7370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.019753][ T7370] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.019797][ T7370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.019841][ T7370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.019884][ T7370] 118655 total pagecache pages [ 268.019939][ T7370] 0 pages in swap cache [ 268.019971][ T7370] Free swap = 124996kB [ 268.020013][ T7370] Total swap = 124996kB [ 268.020045][ T7370] 2097051 pages RAM [ 268.020076][ T7370] 0 pages HighMem/MovableOnly [ 268.020107][ T7370] 424849 pages reserved [ 268.020138][ T7370] 0 pages cma reserved [ 269.068888][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.705857][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.107975][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.820174][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.056104][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.332767][ T199] usb 2-1: USB disconnect, device number 21 [ 272.746103][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.834871][ T7412] FAULT_INJECTION: forcing a failure. [ 272.834871][ T7412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.834914][ T7412] CPU: 1 UID: 0 PID: 7412 Comm: syz.0.446 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 272.834945][ T7412] Tainted: [L]=SOFTLOCKUP [ 272.834953][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.834967][ T7412] Call Trace: [ 272.834976][ T7412] [ 272.834985][ T7412] dump_stack_lvl+0xe8/0x150 [ 272.835023][ T7412] should_fail_ex+0x467/0x600 [ 272.835062][ T7412] prepare_alloc_pages+0x223/0x690 [ 272.835096][ T7412] __alloc_frozen_pages_noprof+0x12f/0x380 [ 272.835129][ T7412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.835160][ T7412] ? __pfx_policy_nodemask+0x10/0x10 [ 272.835195][ T7412] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 272.835227][ T7412] alloc_pages_mpol+0xce/0x280 [ 272.835260][ T7412] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 272.835292][ T7412] vma_alloc_folio_noprof+0xe1/0x1e0 [ 272.835323][ T7412] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 272.835363][ T7412] do_wp_page+0x115e/0x3d90 [ 272.835398][ T7412] ? rt_spin_lock+0x1e0/0x400 [ 272.835433][ T7412] ? rt_spin_lock+0x1e0/0x400 [ 272.835476][ T7412] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 272.835507][ T7412] ? preempt_count_add+0x91/0x190 [ 272.835534][ T7412] ? __pfx_do_wp_page+0x10/0x10 [ 272.835567][ T7412] ? rt_spin_lock+0x2ce/0x400 [ 272.835605][ T7412] ? __pfx_rt_spin_lock+0x10/0x10 [ 272.835646][ T7412] ? pte_offset_map_rw_nolock+0xea/0x160 [ 272.835694][ T7412] handle_mm_fault+0xa03/0x13f0 [ 272.835738][ T7412] ? handle_mm_fault+0xe8/0x13f0 [ 272.835777][ T7412] ? __pfx_handle_mm_fault+0x10/0x10 [ 272.835829][ T7412] ? __lock_acquire+0x683/0x2ce0 [ 272.835857][ T7412] ? lock_mm_and_find_vma+0xa7/0x340 [ 272.835888][ T7412] do_user_addr_fault+0x744/0x1340 [ 272.835940][ T7412] exc_page_fault+0x6a/0xc0 [ 272.835970][ T7412] asm_exc_page_fault+0x26/0x30 [ 272.835992][ T7412] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 272.836027][ T7412] Code: 2c 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 272.836047][ T7412] RSP: 0018:ffffc90003f273f8 EFLAGS: 00050202 [ 272.836068][ T7412] RAX: ffffffff84c01901 RBX: ffff88805719c000 RCX: 0000000000000480 [ 272.836084][ T7412] RDX: 0000000000000000 RSI: ffff88805719ca40 RDI: 0000200000002000 [ 272.836100][ T7412] RBP: ffffc90003f27578 R08: ffff88805719cebf R09: 1ffff1100ae339d7 [ 272.836116][ T7412] R10: dffffc0000000000 R11: ffffed100ae339d8 R12: 1ffff920007e4fc3 [ 272.836133][ T7412] R13: 00002000000015c0 R14: ffffc90003f27e28 R15: 0000000000000ec0 [ 272.836158][ T7412] ? _copy_to_iter+0x1d1/0x1810 [ 272.836204][ T7412] _copy_to_iter+0x255/0x1810 [ 272.836258][ T7412] ? __pfx__copy_to_iter+0x10/0x10 [ 272.836304][ T7412] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 272.836333][ T7412] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.836361][ T7412] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 272.836394][ T7412] __skb_datagram_iter+0xf8/0x980 [ 272.836429][ T7412] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 272.836471][ T7412] skb_copy_datagram_iter+0xb5/0x240 [ 272.836506][ T7412] unix_stream_read_actor+0x6c/0xb0 [ 272.836539][ T7412] unix_stream_read_generic+0xa60/0x2310 [ 272.836605][ T7412] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 272.836640][ T7412] ? is_bpf_text_address+0x26/0x2b0 [ 272.836684][ T7412] ? __lock_acquire+0x683/0x2ce0 [ 272.836712][ T7412] unix_stream_recvmsg+0x16b/0x1d0 [ 272.836747][ T7412] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 272.836779][ T7412] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 272.836811][ T7412] ? __lock_acquire+0x683/0x2ce0 [ 272.836838][ T7412] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 272.836869][ T7412] ? security_socket_recvmsg+0x7e/0x2c0 [ 272.836905][ T7412] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 272.836938][ T7412] sock_recvmsg+0x196/0x1e0 [ 272.836978][ T7412] ____sys_recvmsg+0x1f2/0x4b0 [ 272.837018][ T7412] ? __pfx_____sys_recvmsg+0x10/0x10 [ 272.837067][ T7412] ? import_iovec+0x73/0xa0 [ 272.837097][ T7412] ___sys_recvmsg+0x213/0x5a0 [ 272.837133][ T7412] ? __pfx____sys_recvmsg+0x10/0x10 [ 272.837169][ T7412] ? __fget_files+0x2a/0x420 [ 272.837212][ T7412] ? __fget_files+0x3a8/0x420 [ 272.837247][ T7412] __x64_sys_recvmsg+0x1b4/0x290 [ 272.837284][ T7412] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 272.837335][ T7412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.837361][ T7412] do_syscall_64+0x174/0x580 [ 272.837387][ T7412] ? trace_irq_disable+0x3b/0x140 [ 272.837424][ T7412] ? clear_bhb_loop+0x70/0xc0 [ 272.837454][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.837477][ T7412] RIP: 0033:0x7f452eb6e0d9 [ 272.837498][ T7412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.837516][ T7412] RSP: 002b:00007f452cd84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 272.837539][ T7412] RAX: ffffffffffffffda RBX: 00007f452edf6180 RCX: 00007f452eb6e0d9 [ 272.837556][ T7412] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000004 [ 272.837571][ T7412] RBP: 00007f452cd84090 R08: 0000000000000000 R09: 0000000000000000 [ 272.837584][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.837598][ T7412] R13: 00007f452edf6218 R14: 00007f452edf6180 R15: 00007fff5a840558 [ 272.837634][ T7412] [ 272.924897][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.027169][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.054910][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.072035][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.118865][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.836876][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.192041][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.519031][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.610177][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 279.590279][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.904147][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 279.921314][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 279.921367][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.150697][ T31] usb 2-1: config 0 descriptor?? [ 280.670073][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.837777][ T31] usb 2-1: can't set config #0, error -71 [ 280.853615][ T31] usb 2-1: USB disconnect, device number 22 [ 281.105358][ T6087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.306815][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.707010][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.595094][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.792132][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.820093][ T6087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.965319][ T5595] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 285.118191][ T5595] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 285.122144][ T5595] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 285.122173][ T5595] usb 1-1: Product: syz [ 285.122188][ T5595] usb 1-1: SerialNumber: syz [ 285.153844][ T7053] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.187276][ T5595] usb 1-1: config 0 descriptor?? [ 285.290723][ T7053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.293160][ T7053] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.377801][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 285.438687][ T7053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 285.439806][ T5595] hso 1-1:0.0: Failed to find BULK eps [ 285.459895][ T7053] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.537994][ T7053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.539864][ T7053] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.589439][ T7053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 285.657623][ T31] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 285.662192][ T31] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 285.662221][ T31] usb 3-1: Product: syz [ 285.662237][ T31] usb 3-1: SerialNumber: syz [ 285.698648][ T999] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 285.723151][ T31] usb 3-1: config 0 descriptor?? [ 285.752331][ T5595] usb 1-1: USB disconnect, device number 15 [ 285.878239][ T999] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 285.943718][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.974730][ T999] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 285.974760][ T999] usb 2-1: Product: syz [ 285.974776][ T999] usb 2-1: SerialNumber: syz [ 285.980682][ T31] hso 3-1:0.0: Failed to find BULK eps [ 286.057710][ T7053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.063313][ T999] usb 2-1: config 0 descriptor?? [ 286.295966][ T7053] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.365689][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.368900][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.502518][ T1409] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.502650][ T1409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.541002][ T37] kauditd_printk_skb: 59 callbacks suppressed [ 286.541021][ T37] audit: type=1326 audit(1787020850.283:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.541072][ T37] audit: type=1326 audit(1787020850.293:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.541130][ T37] audit: type=1326 audit(1787020850.293:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.541179][ T37] audit: type=1326 audit(1787020850.293:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.541226][ T37] audit: type=1326 audit(1787020850.293:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.541276][ T37] audit: type=1326 audit(1787020850.293:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.541325][ T37] audit: type=1326 audit(1787020850.293:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.552400][ T37] audit: type=1326 audit(1787020850.303:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.581866][ T37] audit: type=1326 audit(1787020850.333:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.582057][ T37] audit: type=1326 audit(1787020850.333:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940ad4e0d9 code=0x7ffc0000 [ 286.801879][ T999] hso 2-1:0.0: Failed to find BULK eps [ 286.802956][ T31] usb 3-1: USB disconnect, device number 17 [ 287.042471][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.043959][ T999] usb 2-1: USB disconnect, device number 23 [ 287.096134][ T7541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.096333][ T7541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.123723][ T7541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.134446][ T7541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.134578][ T7541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.219056][ T5721] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 287.408926][ T7546] FAULT_INJECTION: forcing a failure. [ 287.408926][ T7546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.408966][ T7546] CPU: 1 UID: 0 PID: 7546 Comm: syz.2.472 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 287.408996][ T7546] Tainted: [L]=SOFTLOCKUP [ 287.409009][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.409042][ T7546] Call Trace: [ 287.409050][ T7546] [ 287.409059][ T7546] dump_stack_lvl+0xe8/0x150 [ 287.409097][ T7546] should_fail_ex+0x467/0x600 [ 287.409136][ T7546] _copy_from_user+0x2d/0xb0 [ 287.409162][ T7546] vmci_host_unlocked_ioctl+0x20f/0x2850 [ 287.409194][ T7546] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 287.409242][ T7546] ? kasan_quarantine_put+0xbb/0x1f0 [ 287.409284][ T7546] ? tomoyo_path_number_perm+0x219/0x5f0 [ 287.409320][ T7546] ? tomoyo_path_number_perm+0x219/0x5f0 [ 287.409358][ T7546] ? do_vfs_ioctl+0x1184/0x1550 [ 287.409389][ T7546] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 287.409430][ T7546] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 287.409456][ T7546] ? hook_file_ioctl+0x1f3/0x600 [ 287.409492][ T7546] ? __asan_memset+0x22/0x50 [ 287.409523][ T7546] ? smack_file_ioctl+0x263/0x360 [ 287.409558][ T7546] ? __pfx_smack_file_ioctl+0x10/0x10 [ 287.409601][ T7546] ? __fget_files+0x2a/0x420 [ 287.409630][ T7546] ? __fget_files+0x3a8/0x420 [ 287.409650][ T7546] ? __fget_files+0x2a/0x420 [ 287.409680][ T7546] ? bpf_lsm_file_ioctl+0x9/0x20 [ 287.409715][ T7546] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 287.409738][ T7546] __se_sys_ioctl+0xff/0x170 [ 287.409765][ T7546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.409789][ T7546] do_syscall_64+0x174/0x580 [ 287.409816][ T7546] ? trace_irq_disable+0x3b/0x140 [ 287.409850][ T7546] ? clear_bhb_loop+0x70/0xc0 [ 287.409878][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.409900][ T7546] RIP: 0033:0x7f4e7b53e0d9 [ 287.409921][ T7546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.409939][ T7546] RSP: 002b:00007f4e79796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.409962][ T7546] RAX: ffffffffffffffda RBX: 00007f4e7b7c5fa0 RCX: 00007f4e7b53e0d9 [ 287.409978][ T7546] RDX: 0000000000000000 RSI: 00000000000007cb RDI: 0000000000000003 [ 287.409992][ T7546] RBP: 00007f4e79796090 R08: 0000000000000000 R09: 0000000000000000 [ 287.410006][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.410020][ T7546] R13: 00007f4e7b7c6038 R14: 00007f4e7b7c5fa0 R15: 00007ffcc21b2f38 [ 287.410056][ T7546] [ 287.496625][ T5721] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 287.760711][ T5721] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 287.760743][ T5721] usb 5-1: config 0 has no interface number 0 [ 287.760807][ T5721] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.812608][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.812641][ T5721] usb 5-1: Product: syz [ 287.812657][ T5721] usb 5-1: Manufacturer: syz [ 287.812672][ T5721] usb 5-1: SerialNumber: syz [ 287.884733][ T5721] usb 5-1: config 0 descriptor?? [ 287.967711][ T5721] yurex 5-1:0.50: Could not find endpoints [ 288.248430][ T999] usb 5-1: USB disconnect, device number 23 [ 288.375349][ T5721] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 288.414181][ T7567] FAULT_INJECTION: forcing a failure. [ 288.414181][ T7567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.414221][ T7567] CPU: 0 UID: 0 PID: 7567 Comm: syz.1.476 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 288.414251][ T7567] Tainted: [L]=SOFTLOCKUP [ 288.414259][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.414273][ T7567] Call Trace: [ 288.414281][ T7567] [ 288.414291][ T7567] dump_stack_lvl+0xe8/0x150 [ 288.414328][ T7567] should_fail_ex+0x467/0x600 [ 288.414367][ T7567] _copy_from_user+0x2d/0xb0 [ 288.414394][ T7567] kvm_vm_ioctl+0x34a/0xd30 [ 288.414430][ T7567] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 288.414485][ T7567] ? kasan_quarantine_put+0xbb/0x1f0 [ 288.414529][ T7567] ? tomoyo_path_number_perm+0x219/0x5f0 [ 288.414566][ T7567] ? tomoyo_path_number_perm+0x219/0x5f0 [ 288.414606][ T7567] ? do_vfs_ioctl+0x1184/0x1550 [ 288.414638][ T7567] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 288.414681][ T7567] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 288.414708][ T7567] ? hook_file_ioctl+0x1f3/0x600 [ 288.414745][ T7567] ? __asan_memset+0x22/0x50 [ 288.414777][ T7567] ? smack_file_ioctl+0x331/0x360 [ 288.414820][ T7567] ? __pfx_smack_file_ioctl+0x10/0x10 [ 288.414866][ T7567] ? __fget_files+0x2a/0x420 [ 288.414888][ T7567] ? __fget_files+0x3a8/0x420 [ 288.414908][ T7567] ? __fget_files+0x2a/0x420 [ 288.414933][ T7567] ? bpf_lsm_file_ioctl+0x9/0x20 [ 288.415000][ T7567] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 288.415035][ T7567] __se_sys_ioctl+0xff/0x170 [ 288.415063][ T7567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.415089][ T7567] do_syscall_64+0x174/0x580 [ 288.415116][ T7567] ? trace_irq_disable+0x3b/0x140 [ 288.415150][ T7567] ? clear_bhb_loop+0x70/0xc0 [ 288.415178][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.415201][ T7567] RIP: 0033:0x7f57db94e0d9 [ 288.415223][ T7567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.415243][ T7567] RSP: 002b:00007f57d9ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.415265][ T7567] RAX: ffffffffffffffda RBX: 00007f57dbbd5fa0 RCX: 00007f57db94e0d9 [ 288.415281][ T7567] RDX: 0000200000000000 RSI: 000000004008ae6a RDI: 0000000000000004 [ 288.415296][ T7567] RBP: 00007f57d9ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.415309][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.415323][ T7567] R13: 00007f57dbbd6038 R14: 00007f57dbbd5fa0 R15: 00007ffd5a11fcb8 [ 288.415357][ T7567] [ 288.636698][ T5721] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 288.689142][ T5721] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 288.689162][ T5721] usb 3-1: config 1 has no interface number 0 [ 288.689196][ T5721] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 288.689214][ T5721] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.731341][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.731371][ T5721] usb 3-1: Product: syz [ 288.731391][ T5721] usb 3-1: Manufacturer: syz [ 288.731402][ T5721] usb 3-1: SerialNumber: syz [ 288.769512][ T7556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 288.783460][ T5721] usb 3-1: Expected 3 endpoints, found: 2 [ 288.973877][ T5570] usb 3-1: USB disconnect, device number 18 [ 289.082913][ T999] net_ratelimit: 3 callbacks suppressed [ 289.082932][ T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.843479][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 289.858867][ T5570] IPVS: starting estimator thread 0... [ 289.885444][ T999] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 289.975750][ T7597] IPVS: using max 11 ests per chain, 26400 per kthread [ 290.008430][ T7594] batadv0: entered promiscuous mode [ 290.055374][ T199] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 290.072902][ T7594] macsec2: entered promiscuous mode [ 290.084300][ T7594] macsec2: entered allmulticast mode [ 290.088126][ T7594] batadv0: entered allmulticast mode [ 290.101225][ T999] usb 3-1: New USB device found, idVendor=16d8, idProduct=7251, bcdDevice=5a.84 [ 290.103956][ T999] usb 3-1: config 128 has an invalid interface number: 1 but max is 0 [ 290.103984][ T999] usb 3-1: config 128 has no interface number 0 [ 290.135110][ T999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.135139][ T999] usb 3-1: Product: syz [ 290.135156][ T999] usb 3-1: Manufacturer: syz [ 290.135173][ T999] usb 3-1: SerialNumber: syz [ 290.189934][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.230809][ T199] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 290.246646][ T199] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 290.246679][ T199] usb 5-1: Product: syz [ 290.246697][ T199] usb 5-1: SerialNumber: syz [ 290.274293][ T199] usb 5-1: config 0 descriptor?? [ 290.333013][ T7594] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 290.396982][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.414488][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.417606][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.422241][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.423879][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.478151][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.505832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.519849][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.542464][ T199] hso 5-1:0.0: Failed to find BULK eps [ 290.595870][ T7594] batadv0: left allmulticast mode [ 290.623849][ T7594] batadv0: left promiscuous mode [ 290.738539][ T999] usb 3-1: USB disconnect, device number 19 [ 290.756699][ T5595] usb 5-1: USB disconnect, device number 24 [ 290.898737][ T7053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.034956][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.046819][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.139387][ T7053] veth0_vlan: entered promiscuous mode [ 291.159488][ T7053] veth1_vlan: entered promiscuous mode [ 291.208965][ T7053] veth0_macvtap: entered promiscuous mode [ 291.255344][ T999] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 291.285548][ T199] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 291.303996][ T7053] veth1_macvtap: entered promiscuous mode [ 291.321538][ T7589] syz.2.481 (7589) used greatest stack depth: 18880 bytes left [ 291.437096][ T199] usb 2-1: not running at top speed; connect to a high speed hub [ 291.437141][ T199] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 291.439237][ T199] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 291.439307][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.440951][ T7053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.446225][ T999] usb 1-1: Using ep0 maxpacket: 32 [ 291.453979][ T999] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 291.510360][ T999] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 291.510390][ T999] usb 1-1: config 0 has no interface number 0 [ 291.566408][ T199] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 291.566500][ T199] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 291.576022][ T999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.576052][ T999] usb 1-1: Product: syz [ 291.576069][ T999] usb 1-1: Manufacturer: syz [ 291.576084][ T999] usb 1-1: SerialNumber: syz [ 291.653978][ T999] usb 1-1: config 0 descriptor?? [ 291.683381][ T999] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 291.751874][ T7053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.883973][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.097639][ T999] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 292.305969][ T1409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.345520][ T1409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.386483][ T1409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.487529][ T6087] usb 2-1: USB disconnect, device number 24 [ 292.487924][ T999] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 292.878479][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 293.213955][ T999] usb 1-1: USB disconnect, device number 16 [ 293.505773][ T36] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 293.513970][ T999] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 293.654985][ T999] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 293.675294][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 293.676331][ T36] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 293.687210][ T36] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 293.687286][ T36] usb 5-1: Product: syz [ 293.687327][ T36] usb 5-1: Manufacturer: syz [ 293.687580][ T36] usb 5-1: SerialNumber: syz [ 293.688015][ T999] quatech2 1-1:0.51: device disconnected [ 293.797880][ T36] usb 5-1: config 0 descriptor?? [ 293.810513][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.810535][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.895837][ T36] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 294.305756][ T7631] syz.0.493 uses obsolete (PF_INET,SOCK_PACKET) [ 294.306444][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 294.306597][ T7634] net_ratelimit: 13 callbacks suppressed [ 294.306612][ T7634] netlink: Conntrack attr has 4 unknown bytes [ 294.357173][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.474006][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.489547][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.753330][ T36] gspca_zc3xx: reg_w_i err -71 [ 294.753395][ T36] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 294.777132][ T36] usb 5-1: USB disconnect, device number 25 [ 294.827045][ T5595] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 294.945154][ T3280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.946196][ T3280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.028289][ T5595] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 295.101557][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 295.101578][ T5595] usb 3-1: Product: syz [ 295.101589][ T5595] usb 3-1: SerialNumber: syz [ 295.143893][ T5595] usb 3-1: config 0 descriptor?? [ 295.363232][ T7638] FAULT_INJECTION: forcing a failure. [ 295.363232][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 295.363271][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.0.495 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.363300][ T7638] Tainted: [L]=SOFTLOCKUP [ 295.363308][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.363322][ T7638] Call Trace: [ 295.363330][ T7638] [ 295.363338][ T7638] dump_stack_lvl+0xe8/0x150 [ 295.363374][ T7638] should_fail_ex+0x467/0x600 [ 295.363412][ T7638] should_failslab+0xa8/0x100 [ 295.363438][ T7638] __kmalloc_cache_noprof+0xa0/0x6b0 [ 295.363461][ T7638] ? __se_sys_mount+0x166/0x420 [ 295.363480][ T7638] ? __se_sys_mount+0x166/0x420 [ 295.363501][ T7638] ? memdup_user+0x99/0xd0 [ 295.363533][ T7638] __se_sys_mount+0x166/0x420 [ 295.363561][ T7638] ? __pfx___se_sys_mount+0x10/0x10 [ 295.363589][ T7638] ? __x64_sys_mount+0x20/0xc0 [ 295.363608][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.363632][ T7638] do_syscall_64+0x174/0x580 [ 295.363659][ T7638] ? clear_bhb_loop+0x70/0xc0 [ 295.363686][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.363708][ T7638] RIP: 0033:0x7f452eb6e0d9 [ 295.363727][ T7638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.363746][ T7638] RSP: 002b:00007f452cdc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.363769][ T7638] RAX: ffffffffffffffda RBX: 00007f452edf5fa0 RCX: 00007f452eb6e0d9 [ 295.363784][ T7638] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 295.363798][ T7638] RBP: 00007f452cdc6090 R08: 00002000000001c0 R09: 0000000000000000 [ 295.363812][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.363824][ T7638] R13: 00007f452edf6038 R14: 00007f452edf5fa0 R15: 00007fff5a840558 [ 295.363857][ T7638] [ 295.386387][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.424308][ T5595] hso 3-1:0.0: Failed to find BULK eps [ 295.667683][ T5595] usb 3-1: USB disconnect, device number 20 [ 297.285468][ T6087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.525377][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.975424][ T5595] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 298.113345][ T4902] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.149298][ T5595] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.173049][ T5595] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 298.173080][ T5595] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.226317][ T4902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.228175][ T4902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.235510][ T5595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.235564][ T5595] usb 1-1: Product: syz [ 298.235583][ T5595] usb 1-1: Manufacturer: syz [ 298.235601][ T5595] usb 1-1: SerialNumber: syz [ 298.253840][ T4902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.256479][ T4902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.450010][ T5595] usb 1-1: 0:2 : does not exist [ 298.450126][ T5595] usb 1-1: unit 6 not found! [ 298.589371][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.683072][ T7645] binder: 7642:7645 ioctl 127f 200000000180 returned -22 [ 298.823544][ T37] kauditd_printk_skb: 98 callbacks suppressed [ 298.823565][ T37] audit: type=1326 audit(1787020862.563:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.2.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e7b53e0d9 code=0x0 [ 299.127374][ T31] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 299.277632][ T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=b8.f9 [ 299.291610][ T31] usb 3-1: config 8 has an invalid interface number: 73 but max is 0 [ 299.291639][ T31] usb 3-1: config 8 has no interface number 0 [ 299.291681][ T31] usb 3-1: config 8 interface 73 altsetting 2 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 299.291709][ T31] usb 3-1: config 8 interface 73 altsetting 2 endpoint 0x5 has an invalid bInterval 130, changing to 4 [ 299.291736][ T31] usb 3-1: config 8 interface 73 has no altsetting 0 [ 299.412718][ T5593] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 299.412750][ T5593] CPU: 1 UID: 0 PID: 5593 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.412783][ T5593] Tainted: [L]=SOFTLOCKUP [ 299.412791][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.412806][ T5593] Workqueue: hci1 hci_rx_work [ 299.412853][ T5593] Call Trace: [ 299.412863][ T5593] [ 299.412872][ T5593] dump_stack_lvl+0xe8/0x150 [ 299.412910][ T5593] sysfs_create_dir_ns+0x271/0x2a0 [ 299.412938][ T5593] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 299.412968][ T5593] ? rt_spin_unlock+0x163/0x200 [ 299.412995][ T5593] kobject_add_internal+0x62c/0xce0 [ 299.413039][ T5593] kobject_add+0x163/0x240 [ 299.413071][ T5593] ? rt_spin_unlock+0x157/0x200 [ 299.413100][ T5593] ? __pfx_kobject_add+0x10/0x10 [ 299.413141][ T5593] ? get_device_parent+0x370/0x3a0 [ 299.413176][ T5593] device_add+0x3fa/0xb80 [ 299.413216][ T5593] hci_conn_add_sysfs+0xd5/0x210 [ 299.413246][ T5593] le_conn_complete_evt+0xfef/0x1580 [ 299.413289][ T5593] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 299.413323][ T5593] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.413351][ T5593] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.413378][ T5593] ? rt_mutex_slowunlock+0x219/0x460 [ 299.413415][ T5593] ? skb_pull_data+0xf0/0x200 [ 299.413451][ T5593] hci_le_conn_complete_evt+0x187/0x470 [ 299.413490][ T5593] hci_event_packet+0x67a/0xf10 [ 299.413523][ T5593] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 299.413551][ T5593] ? __pfx_hci_event_packet+0x10/0x10 [ 299.413575][ T5593] ? rt_spin_unlock+0x157/0x200 [ 299.413607][ T5593] ? hci_send_to_monitor+0xe2/0x590 [ 299.413643][ T5593] hci_rx_work+0x3ee/0x1020 [ 299.413679][ T5593] ? process_scheduled_works+0xa20/0x14e0 [ 299.413706][ T5593] process_scheduled_works+0xa8e/0x14e0 [ 299.413766][ T5593] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.413801][ T5593] ? assign_work+0x3cf/0x5d0 [ 299.413833][ T5593] worker_thread+0xa47/0xfb0 [ 299.413892][ T5593] kthread+0x388/0x470 [ 299.413926][ T5593] ? __pfx_worker_thread+0x10/0x10 [ 299.413951][ T5593] ? __pfx_kthread+0x10/0x10 [ 299.413987][ T5593] ret_from_fork+0x514/0xb70 [ 299.414025][ T5593] ? __pfx_ret_from_fork+0x10/0x10 [ 299.414061][ T5593] ? __switch_to+0xc89/0x1420 [ 299.414093][ T5593] ? __pfx_kthread+0x10/0x10 [ 299.414129][ T5593] ret_from_fork_asm+0x1a/0x30 [ 299.414184][ T5593] [ 299.414333][ T5593] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 299.414378][ T5593] Bluetooth: hci1: failed to register connection device [ 299.530456][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.530537][ T31] usb 3-1: Product: syz [ 299.530580][ T31] usb 3-1: Manufacturer: syz [ 299.530621][ T31] usb 3-1: SerialNumber: syz [ 299.626754][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.787433][ T7660] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 300.345934][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.425636][ T4902] Bluetooth: hci3: command tx timeout [ 300.507120][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.541093][ T7675] netlink: 68 bytes leftover after parsing attributes in process `syz.4.505'. [ 300.604634][ T5570] usb 1-1: USB disconnect, device number 17 [ 300.665925][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.690821][ T199] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 301.709552][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.717249][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.767594][ T31] rtsx_usb 3-1:8.73: probe with driver rtsx_usb failed with error -22 [ 301.847929][ T199] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 301.849828][ T199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 301.849876][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.033246][ T31] usb 3-1: USB disconnect, device number 21 [ 302.034719][ T199] usb 5-1: config 0 descriptor?? [ 302.047647][ T7688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.114206][ T7690] syz_tun: entered promiscuous mode [ 302.165373][ T5570] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 302.325552][ T5570] usb 1-1: Using ep0 maxpacket: 32 [ 302.326726][ T5570] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 302.328907][ T5570] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 302.328935][ T5570] usb 1-1: config 0 has no interface number 0 [ 302.329064][ T5570] usb 1-1: config 0 interface 12 has no altsetting 0 [ 302.334549][ T5570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.334572][ T5570] usb 1-1: Product: syz [ 302.334586][ T5570] usb 1-1: Manufacturer: syz [ 302.334599][ T5570] usb 1-1: SerialNumber: syz [ 302.449133][ T5570] usb 1-1: config 0 descriptor?? [ 302.509698][ T4902] Bluetooth: hci3: command tx timeout [ 302.605081][ T199] usbhid 5-1:0.0: can't add hid device: -71 [ 302.606376][ T199] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 302.675657][ T199] usb 5-1: USB disconnect, device number 26 [ 302.745615][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.034544][ T7702] jffs2: notice: (7702) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 303.164780][ T7702] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 303.367933][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.399963][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.594319][ T5570] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 303.594399][ T5570] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 303.594419][ T5570] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 303.594526][ T5570] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 303.664040][ T5570] usb 1-1: USB disconnect, device number 18 [ 303.785536][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.029391][ T37] audit: type=1800 audit(1787020868.733:582): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.515" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 305.078836][ T4902] Bluetooth: hci3: command tx timeout [ 305.084513][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.100727][ T31] IPVS: starting estimator thread 0... [ 305.118503][ T7710] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 305.118552][ T7710] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 305.118577][ T7710] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 305.160415][ T7715] FAULT_INJECTION: forcing a failure. [ 305.160415][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.160456][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.4.516 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.160486][ T7715] Tainted: [L]=SOFTLOCKUP [ 305.160493][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.160506][ T7715] Call Trace: [ 305.160515][ T7715] [ 305.160524][ T7715] dump_stack_lvl+0xe8/0x150 [ 305.160561][ T7715] should_fail_ex+0x467/0x600 [ 305.160601][ T7715] _copy_from_user+0x2d/0xb0 [ 305.160628][ T7715] smc_setsockopt+0x3c0/0xb00 [ 305.160660][ T7715] ? __pfx_smc_setsockopt+0x10/0x10 [ 305.160687][ T7715] ? __fget_files+0x2a/0x420 [ 305.160707][ T7715] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 305.160736][ T7715] ? __pfx_smc_setsockopt+0x10/0x10 [ 305.160761][ T7715] do_sock_setsockopt+0x17c/0x1b0 [ 305.160796][ T7715] __x64_sys_setsockopt+0x143/0x1b0 [ 305.160824][ T7715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.160848][ T7715] do_syscall_64+0x174/0x580 [ 305.160874][ T7715] ? trace_irq_disable+0x3b/0x140 [ 305.160907][ T7715] ? clear_bhb_loop+0x70/0xc0 [ 305.160935][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.160957][ T7715] RIP: 0033:0x7f940ad4e0d9 [ 305.160978][ T7715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.160997][ T7715] RSP: 002b:00007f9408fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.161020][ T7715] RAX: ffffffffffffffda RBX: 00007f940afd5fa0 RCX: 00007f940ad4e0d9 [ 305.161036][ T7715] RDX: 0000000000000483 RSI: 0000000000000000 RDI: 0000000000000007 [ 305.161049][ T7715] RBP: 00007f9408fa6090 R08: 000000000000002c R09: 0000000000000000 [ 305.161063][ T7715] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.161077][ T7715] R13: 00007f940afd6038 R14: 00007f940afd5fa0 R15: 00007ffff2526938 [ 305.161111][ T7715] [ 305.227644][ T7730] IPVS: using max 7 ests per chain, 16800 per kthread [ 305.703308][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.784219][ T7710] syz.0.515 (7710) used greatest stack depth: 18600 bytes left [ 305.975148][ T7747] netlink: 'syz.4.524': attribute type 4 has an invalid length. [ 306.030930][ T7750] FAULT_INJECTION: forcing a failure. [ 306.030930][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.030970][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.1.525 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.031001][ T7750] Tainted: [L]=SOFTLOCKUP [ 306.031010][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.031024][ T7750] Call Trace: [ 306.031032][ T7750] [ 306.031041][ T7750] dump_stack_lvl+0xe8/0x150 [ 306.031080][ T7750] should_fail_ex+0x467/0x600 [ 306.031119][ T7750] _copy_to_user+0x31/0xb0 [ 306.031149][ T7750] simple_read_from_buffer+0xe1/0x170 [ 306.031179][ T7750] proc_fail_nth_read+0x1be/0x230 [ 306.031215][ T7750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.031244][ T7750] ? rw_verify_area+0x250/0x4d0 [ 306.031273][ T7750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.031298][ T7750] vfs_read+0x219/0xa90 [ 306.031333][ T7750] ? __pfx_vfs_read+0x10/0x10 [ 306.031367][ T7750] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 306.031395][ T7750] ? lockdep_hardirqs_on+0x7a/0x110 [ 306.031423][ T7750] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 306.031452][ T7750] ? mutex_lock_nested+0x152/0x1d0 [ 306.031485][ T7750] ? fdget_pos+0x252/0x320 [ 306.031518][ T7750] ksys_read+0x156/0x270 [ 306.031548][ T7750] ? __pfx_ksys_read+0x10/0x10 [ 306.031574][ T7750] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 306.031614][ T7750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.031639][ T7750] do_syscall_64+0x174/0x580 [ 306.031666][ T7750] ? trace_irq_disable+0x3b/0x140 [ 306.031703][ T7750] ? clear_bhb_loop+0x70/0xc0 [ 306.031732][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.031756][ T7750] RIP: 0033:0x7f57db90e90e [ 306.031776][ T7750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.031795][ T7750] RSP: 002b:00007f57d9ba5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.031820][ T7750] RAX: ffffffffffffffda RBX: 00007f57d9ba66c0 RCX: 00007f57db90e90e [ 306.031837][ T7750] RDX: 000000000000000f RSI: 00007f57d9ba60a0 RDI: 0000000000000004 [ 306.031852][ T7750] RBP: 00007f57d9ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.031867][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.031880][ T7750] R13: 00007f57dbbd6038 R14: 00007f57dbbd5fa0 R15: 00007ffd5a11fcb8 [ 306.031917][ T7750] [ 306.411360][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.425959][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.524336][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.740141][ T7758] FAULT_INJECTION: forcing a failure. [ 306.740141][ T7758] name failslab, interval 1, probability 0, space 0, times 0 [ 306.740176][ T7758] CPU: 1 UID: 0 PID: 7758 Comm: syz.2.527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.740203][ T7758] Tainted: [L]=SOFTLOCKUP [ 306.740209][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.740220][ T7758] Call Trace: [ 306.740227][ T7758] [ 306.740234][ T7758] dump_stack_lvl+0xe8/0x150 [ 306.740270][ T7758] should_fail_ex+0x467/0x600 [ 306.740301][ T7758] should_failslab+0xa8/0x100 [ 306.740322][ T7758] __kvmalloc_node_noprof+0x17a/0x8a0 [ 306.740344][ T7758] ? io_ring_ctx_alloc+0x1d1/0xc60 [ 306.740360][ T7758] ? io_ring_ctx_alloc+0x1d1/0xc60 [ 306.740381][ T7758] io_ring_ctx_alloc+0x1d1/0xc60 [ 306.740402][ T7758] io_uring_create+0x50/0x990 [ 306.740422][ T7758] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 306.740446][ T7758] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 306.740476][ T7758] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 306.740513][ T7758] ? __pfx_ksys_write+0x10/0x10 [ 306.740545][ T7758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.740567][ T7758] do_syscall_64+0x174/0x580 [ 306.740588][ T7758] ? trace_irq_disable+0x3b/0x140 [ 306.740616][ T7758] ? clear_bhb_loop+0x70/0xc0 [ 306.740648][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.740666][ T7758] RIP: 0033:0x7f4e7b53e0d9 [ 306.740683][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.740698][ T7758] RSP: 002b:00007f4e79795ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 306.740718][ T7758] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4e7b53e0d9 [ 306.740732][ T7758] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 306.740749][ T7758] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 306.740760][ T7758] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 306.740772][ T7758] R13: 0000200000000b10 R14: 00007f4e79795fd8 R15: 0000000000000000 [ 306.740798][ T7758] [ 307.156222][ T4902] Bluetooth: hci3: command tx timeout [ 307.310269][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.310397][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.362441][ T7653] bridge_slave_0: entered allmulticast mode [ 307.372730][ T7653] bridge_slave_0: entered promiscuous mode [ 307.387830][ T7768] FAULT_INJECTION: forcing a failure. [ 307.387830][ T7768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.387948][ T7768] CPU: 1 UID: 0 PID: 7768 Comm: syz.2.530 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 307.388025][ T7768] Tainted: [L]=SOFTLOCKUP [ 307.388053][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.388088][ T7768] Call Trace: [ 307.388104][ T7768] [ 307.388127][ T7768] dump_stack_lvl+0xe8/0x150 [ 307.388230][ T7768] should_fail_ex+0x467/0x600 [ 307.388330][ T7768] _copy_to_user+0x31/0xb0 [ 307.388404][ T7768] simple_read_from_buffer+0xe1/0x170 [ 307.388485][ T7768] proc_fail_nth_read+0x1be/0x230 [ 307.388541][ T7768] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 307.388626][ T7768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.388707][ T7768] ? rw_verify_area+0x250/0x4d0 [ 307.388781][ T7768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.388844][ T7768] vfs_read+0x219/0xa90 [ 307.388937][ T7768] ? __pfx_vfs_read+0x10/0x10 [ 307.389011][ T7768] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 307.389085][ T7768] ? lockdep_hardirqs_on+0x7a/0x110 [ 307.389152][ T7768] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 307.389226][ T7768] ? mutex_lock_nested+0x152/0x1d0 [ 307.389307][ T7768] ? fdget_pos+0x252/0x320 [ 307.389338][ T7768] ksys_read+0x156/0x270 [ 307.389399][ T7768] ? __pfx_ksys_read+0x10/0x10 [ 307.389493][ T7768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.389577][ T7768] do_syscall_64+0x174/0x580 [ 307.389654][ T7768] ? trace_irq_disable+0x3b/0x140 [ 307.389748][ T7768] ? clear_bhb_loop+0x70/0xc0 [ 307.389823][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.389887][ T7768] RIP: 0033:0x7f4e7b4fe90e [ 307.389941][ T7768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.389998][ T7768] RSP: 002b:00007f4e79795fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.390061][ T7768] RAX: ffffffffffffffda RBX: 00007f4e797966c0 RCX: 00007f4e7b4fe90e [ 307.390097][ T7768] RDX: 000000000000000f RSI: 00007f4e797960a0 RDI: 0000000000000004 [ 307.390138][ T7768] RBP: 00007f4e79796090 R08: 0000000000000000 R09: 0000000000000000 [ 307.390171][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.390210][ T7768] R13: 00007f4e7b7c6038 R14: 00007f4e7b7c5fa0 R15: 00007ffcc21b2f38 [ 307.390298][ T7768] [ 307.444015][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.444289][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.444846][ T7653] bridge_slave_1: entered allmulticast mode [ 307.469435][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.284004][ T7653] bridge_slave_1: entered promiscuous mode [ 308.665772][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.785998][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.081598][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.748498][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.928149][ T7787] FAULT_INJECTION: forcing a failure. [ 309.928149][ T7787] name failslab, interval 1, probability 0, space 0, times 0 [ 309.928189][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.1.535 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 309.928220][ T7787] Tainted: [L]=SOFTLOCKUP [ 309.928228][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.928242][ T7787] Call Trace: [ 309.928250][ T7787] [ 309.928260][ T7787] dump_stack_lvl+0xe8/0x150 [ 309.928298][ T7787] should_fail_ex+0x467/0x600 [ 309.928339][ T7787] should_failslab+0xa8/0x100 [ 309.928368][ T7787] __kmalloc_noprof+0xfe/0x780 [ 309.928392][ T7787] ? tomoyo_encode+0x2ad/0x570 [ 309.928418][ T7787] ? tomoyo_encode+0x2ad/0x570 [ 309.928453][ T7787] tomoyo_encode+0x2ad/0x570 [ 309.928487][ T7787] tomoyo_realpath_from_path+0x5fa/0x640 [ 309.928527][ T7787] ? tomoyo_path_number_perm+0x219/0x5f0 [ 309.928566][ T7787] tomoyo_path_number_perm+0x246/0x5f0 [ 309.928607][ T7787] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 309.928645][ T7787] ? __lock_acquire+0x683/0x2ce0 [ 309.928684][ T7787] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 309.928710][ T7787] ? hook_file_ioctl+0x1f3/0x600 [ 309.928742][ T7787] ? lockdep_hardirqs_on+0x7a/0x110 [ 309.928790][ T7787] ? __fget_files+0x2a/0x420 [ 309.928816][ T7787] ? __fget_files+0x2a/0x420 [ 309.928839][ T7787] ? __fget_files+0x3a8/0x420 [ 309.928861][ T7787] ? __fget_files+0x2a/0x420 [ 309.928894][ T7787] security_file_ioctl+0xc3/0x2a0 [ 309.928921][ T7787] __se_sys_ioctl+0x47/0x170 [ 309.928951][ T7787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.928975][ T7787] do_syscall_64+0x174/0x580 [ 309.929003][ T7787] ? trace_irq_disable+0x3b/0x140 [ 309.929039][ T7787] ? clear_bhb_loop+0x70/0xc0 [ 309.929067][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.929090][ T7787] RIP: 0033:0x7f57db94e0d9 [ 309.929111][ T7787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.929131][ T7787] RSP: 002b:00007f57d9ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.929155][ T7787] RAX: ffffffffffffffda RBX: 00007f57dbbd5fa0 RCX: 00007f57db94e0d9 [ 309.929171][ T7787] RDX: 0000000000000000 RSI: 000000000000560a RDI: 0000000000000006 [ 309.929185][ T7787] RBP: 00007f57d9ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 309.929200][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.929213][ T7787] R13: 00007f57dbbd6038 R14: 00007f57dbbd5fa0 R15: 00007ffd5a11fcb8 [ 309.929249][ T7787] [ 309.933867][ T7787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.327529][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.327920][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.829462][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.833662][ T7653] team0: Port device team_slave_0 added [ 311.858551][ T7653] team0: Port device team_slave_1 added [ 311.872810][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.952940][ T7805] FAULT_INJECTION: forcing a failure. [ 311.952940][ T7805] name failslab, interval 1, probability 0, space 0, times 0 [ 311.952985][ T7805] CPU: 1 UID: 0 PID: 7805 Comm: syz.4.540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.953015][ T7805] Tainted: [L]=SOFTLOCKUP [ 311.953023][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.953036][ T7805] Call Trace: [ 311.953044][ T7805] [ 311.953054][ T7805] dump_stack_lvl+0xe8/0x150 [ 311.953092][ T7805] should_fail_ex+0x467/0x600 [ 311.953132][ T7805] should_failslab+0xa8/0x100 [ 311.953160][ T7805] kmem_cache_alloc_node_noprof+0xae/0x670 [ 311.953197][ T7805] ? __alloc_skb+0x1d7/0x7a0 [ 311.953221][ T7805] ? __alloc_skb+0x1d7/0x7a0 [ 311.953252][ T7805] __alloc_skb+0x1d7/0x7a0 [ 311.953281][ T7805] netlink_sendmsg+0x5d4/0xb40 [ 311.953322][ T7805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.953353][ T7805] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 311.953385][ T7805] ? __kernel_text_address+0xd/0x30 [ 311.953420][ T7805] ? unwind_get_return_address+0x4d/0x90 [ 311.953447][ T7805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.953475][ T7805] sock_sendmsg_nosec+0x13a/0x180 [ 311.953513][ T7805] ____sys_sendmsg+0x565/0x870 [ 311.953541][ T7805] ? __might_fault+0xaf/0x130 [ 311.953571][ T7805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.953609][ T7805] ? import_iovec+0x73/0xa0 [ 311.953638][ T7805] ___sys_sendmsg+0x2a5/0x360 [ 311.953665][ T7805] ? __lock_acquire+0x683/0x2ce0 [ 311.953691][ T7805] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.953765][ T7805] ? __fget_files+0x2a/0x420 [ 311.953787][ T7805] ? __fget_files+0x3a8/0x420 [ 311.953820][ T7805] __x64_sys_sendmsg+0x1b7/0x290 [ 311.953852][ T7805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.953908][ T7805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.953934][ T7805] do_syscall_64+0x174/0x580 [ 311.953961][ T7805] ? trace_irq_disable+0x3b/0x140 [ 311.953996][ T7805] ? clear_bhb_loop+0x70/0xc0 [ 311.954025][ T7805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.954048][ T7805] RIP: 0033:0x7f940ad4e0d9 [ 311.954071][ T7805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.954090][ T7805] RSP: 002b:00007f9408fa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.954114][ T7805] RAX: ffffffffffffffda RBX: 00007f940afd5fa0 RCX: 00007f940ad4e0d9 [ 311.954131][ T7805] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000f [ 311.954145][ T7805] RBP: 00007f9408fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.954159][ T7805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.954173][ T7805] R13: 00007f940afd6038 R14: 00007f940afd5fa0 R15: 00007ffff2526938 [ 311.954208][ T7805] [ 312.641437][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.641457][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.641488][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.688564][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.688613][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.688694][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.907865][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.185335][ T31] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 313.252252][ T7824] netlink: 80 bytes leftover after parsing attributes in process `syz.2.546'. [ 313.348730][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 313.348790][ T31] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 313.350583][ T31] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 313.350611][ T31] usb 1-1: config 100 has no interface number 0 [ 313.350658][ T31] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 313.350684][ T31] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 313.350710][ T31] usb 1-1: config 100 interface 173 has no altsetting 0 [ 313.410411][ T31] usb 1-1: string descriptor 0 read error: -22 [ 313.410571][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.448411][ T7653] hsr_slave_0: entered promiscuous mode [ 313.452066][ T7653] hsr_slave_1: entered promiscuous mode [ 313.453349][ T7653] debugfs: 'hsr0' already exists in 'hsr' [ 313.453375][ T7653] Cannot create hsr debugfs directory [ 313.575467][ T199] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 313.579325][ T6087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.650004][ T7821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.872538][ T199] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 314.908643][ T199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 314.909348][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.418995][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.508108][ T31] metro_usb 1-1:100.173: required endpoints missing [ 315.520430][ T199] usb 5-1: config 0 descriptor?? [ 315.542014][ T7823] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 317.185017][ T199] hid_parser_main: 453 callbacks suppressed [ 317.185043][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185074][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185101][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185128][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185153][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185228][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185255][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185281][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185307][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.185333][ T199] asus 0003:0B05:1ABE.0007: unknown main item tag 0x0 [ 317.204981][ T199] asus 0003:0B05:1ABE.0007: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 317.414371][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.414447][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.432369][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.466704][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.470223][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.547318][ T199] usb 5-1: USB disconnect, device number 27 [ 317.591415][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.599718][ T55] bridge_slave_1: left allmulticast mode [ 317.599750][ T55] bridge_slave_1: left promiscuous mode [ 317.600042][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.705408][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 317.905327][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 317.906197][ T31] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 317.907706][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 317.912968][ T31] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 317.912993][ T31] usb 2-1: Product: syz [ 317.913009][ T31] usb 2-1: Manufacturer: syz [ 317.913023][ T31] usb 2-1: SerialNumber: syz [ 317.975274][ T7857] fido_id[7857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 318.007328][ T31] usb 2-1: config 0 descriptor?? [ 318.091098][ T7864] FAULT_INJECTION: forcing a failure. [ 318.091098][ T7864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.091137][ T7864] CPU: 0 UID: 0 PID: 7864 Comm: syz.2.553 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.091167][ T7864] Tainted: [L]=SOFTLOCKUP [ 318.091175][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.091188][ T7864] Call Trace: [ 318.091196][ T7864] [ 318.091205][ T7864] dump_stack_lvl+0xe8/0x150 [ 318.091243][ T7864] should_fail_ex+0x467/0x600 [ 318.091284][ T7864] _copy_to_user+0x31/0xb0 [ 318.091323][ T7864] simple_read_from_buffer+0xe1/0x170 [ 318.091352][ T7864] proc_fail_nth_read+0x1be/0x230 [ 318.091380][ T7864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.091408][ T7864] ? rw_verify_area+0x250/0x4d0 [ 318.091436][ T7864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.091460][ T7864] vfs_read+0x219/0xa90 [ 318.091494][ T7864] ? __pfx_vfs_read+0x10/0x10 [ 318.091522][ T7864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 318.091551][ T7864] ? lockdep_hardirqs_on+0x7a/0x110 [ 318.091579][ T7864] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.091607][ T7864] ? mutex_lock_nested+0x152/0x1d0 [ 318.091640][ T7864] ? fdget_pos+0x252/0x320 [ 318.091676][ T7864] ksys_read+0x156/0x270 [ 318.091697][ T7864] ? __pfx_ksys_read+0x10/0x10 [ 318.091721][ T7864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.091737][ T7864] do_syscall_64+0x174/0x580 [ 318.091756][ T7864] ? trace_irq_disable+0x3b/0x140 [ 318.091780][ T7864] ? clear_bhb_loop+0x70/0xc0 [ 318.091801][ T7864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.091817][ T7864] RIP: 0033:0x7f4e7b4fe90e [ 318.091832][ T7864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.091846][ T7864] RSP: 002b:00007f4e79795fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.091862][ T7864] RAX: ffffffffffffffda RBX: 00007f4e797966c0 RCX: 00007f4e7b4fe90e [ 318.091874][ T7864] RDX: 000000000000000f RSI: 00007f4e797960a0 RDI: 0000000000000004 [ 318.091883][ T7864] RBP: 00007f4e79796090 R08: 0000000000000000 R09: 0000000000000000 [ 318.091893][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.091902][ T7864] R13: 00007f4e7b7c6038 R14: 00007f4e7b7c5fa0 R15: 00007ffcc21b2f38 [ 318.091927][ T7864] [ 318.179765][ T31] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 318.354642][ T55] bridge_slave_0: left allmulticast mode [ 318.354678][ T55] bridge_slave_0: left promiscuous mode [ 318.354944][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.641781][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.268327][ T7872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.268542][ T7872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.268852][ T7872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.272021][ T7872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.273853][ T7872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.274056][ T7872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.738038][ T155] usb 2-1: Failed to submit usb control message: -110 [ 319.738079][ T155] usb 2-1: unable to send the bmi data to the device: -110 [ 319.738099][ T155] usb 2-1: unable to get target info from device [ 319.738129][ T155] usb 2-1: could not get target info (-110) [ 319.738474][ T155] usb 2-1: could not probe fw (-110) [ 320.075948][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.096434][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.121340][ T55] bond0 (unregistering): Released all slaves [ 320.665769][ T199] net_ratelimit: 8 callbacks suppressed [ 320.665790][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.757823][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.114124][ T5570] usb 1-1: USB disconnect, device number 19 [ 321.214074][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.558'. [ 321.214096][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 321.267543][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 321.340748][ T31] usb 2-1: USB disconnect, device number 25 [ 321.413728][ T37] audit: type=1326 audit(1787020885.163:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.440688][ T37] audit: type=1326 audit(1787020885.163:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.486555][ T37] audit: type=1326 audit(1787020885.233:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.524294][ T37] audit: type=1326 audit(1787020885.243:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.528126][ T37] audit: type=1326 audit(1787020885.283:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.533340][ T37] audit: type=1326 audit(1787020885.283:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.577529][ T37] audit: type=1326 audit(1787020885.333:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.577679][ T37] audit: type=1326 audit(1787020885.333:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.577794][ T37] audit: type=1326 audit(1787020885.333:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.590510][ T37] audit: type=1326 audit(1787020885.343:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7886 comm="syz.0.559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 321.786635][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.945440][ T5570] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 322.112205][ T5570] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 322.116228][ T5570] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 322.116303][ T5570] usb 1-1: config 0 has no interface number 0 [ 322.116429][ T5570] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.138648][ T5721] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 322.179859][ T5570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.179891][ T5570] usb 1-1: Product: syz [ 322.179907][ T5570] usb 1-1: Manufacturer: syz [ 322.179923][ T5570] usb 1-1: SerialNumber: syz [ 322.215324][ T5570] usb 1-1: config 0 descriptor?? [ 322.239113][ T5570] yurex 1-1:0.50: Could not find endpoints [ 322.255708][ T7899] FAULT_INJECTION: forcing a failure. [ 322.255708][ T7899] name failslab, interval 1, probability 0, space 0, times 0 [ 322.255786][ T7899] CPU: 1 UID: 0 PID: 7899 Comm: syz.4.564 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.255815][ T7899] Tainted: [L]=SOFTLOCKUP [ 322.255823][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.255855][ T7899] Call Trace: [ 322.255863][ T7899] [ 322.255871][ T7899] dump_stack_lvl+0xe8/0x150 [ 322.255908][ T7899] should_fail_ex+0x467/0x600 [ 322.255947][ T7899] should_failslab+0xa8/0x100 [ 322.255976][ T7899] __kmalloc_noprof+0xfe/0x780 [ 322.255997][ T7899] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 322.256020][ T7899] ? alloc_pipe_info+0x1f9/0x4c0 [ 322.256048][ T7899] ? alloc_pipe_info+0x1f9/0x4c0 [ 322.256084][ T7899] alloc_pipe_info+0x1f9/0x4c0 [ 322.256117][ T7899] splice_direct_to_actor+0xa52/0xcc0 [ 322.256142][ T7899] ? __lock_acquire+0x683/0x2ce0 [ 322.256168][ T7899] ? kstrtouint+0x6e/0xe0 [ 322.256208][ T7899] ? __lock_acquire+0x683/0x2ce0 [ 322.256230][ T7899] ? __pfx_direct_splice_actor+0x10/0x10 [ 322.256255][ T7899] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 322.256292][ T7899] do_splice_direct+0x19b/0x2a0 [ 322.256324][ T7899] ? __pfx_do_splice_direct+0x10/0x10 [ 322.256350][ T7899] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 322.256379][ T7899] ? bpf_lsm_file_permission+0x9/0x20 [ 322.256413][ T7899] ? security_file_permission+0x75/0x260 [ 322.256438][ T7899] ? rw_verify_area+0x209/0x4d0 [ 322.256469][ T7899] do_sendfile+0x540/0x7e0 [ 322.256503][ T7899] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.256548][ T7899] ? __pfx_do_sendfile+0x10/0x10 [ 322.256597][ T7899] __se_sys_sendfile64+0x144/0x1a0 [ 322.256634][ T7899] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 322.256677][ T7899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.256702][ T7899] do_syscall_64+0x174/0x580 [ 322.256729][ T7899] ? trace_irq_disable+0x3b/0x140 [ 322.256763][ T7899] ? clear_bhb_loop+0x70/0xc0 [ 322.256791][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.256814][ T7899] RIP: 0033:0x7f940ad4e0d9 [ 322.256834][ T7899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.256852][ T7899] RSP: 002b:00007f9408fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 322.256874][ T7899] RAX: ffffffffffffffda RBX: 00007f940afd5fa0 RCX: 00007f940ad4e0d9 [ 322.256890][ T7899] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 322.256903][ T7899] RBP: 00007f9408fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.256918][ T7899] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 322.256932][ T7899] R13: 00007f940afd6038 R14: 00007f940afd5fa0 R15: 00007ffff2526938 [ 322.256967][ T7899] [ 322.456389][ T5721] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 322.485278][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.485342][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.589824][ T5721] usb 3-1: config 0 descriptor?? [ 322.603236][ T5721] rndis_host 3-1:0.0: GUID doesn't match [ 322.652629][ T7902] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 322.676671][ T5570] usb 1-1: USB disconnect, device number 20 [ 323.009908][ T7905] fuse: Unknown parameter 'allow_ouser' [ 323.192057][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.270001][ T10] usb 3-1: USB disconnect, device number 22 [ 323.985885][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.185841][ T5570] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 324.269135][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.344317][ T7904] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 324.344357][ T7904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 324.344377][ T7904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 324.435352][ T5570] usb 3-1: Using ep0 maxpacket: 32 [ 324.440168][ T5570] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 324.441730][ T5570] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 324.481727][ T5570] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 324.481760][ T5570] usb 3-1: Product: syz [ 324.481776][ T5570] usb 3-1: Manufacturer: syz [ 324.481792][ T5570] usb 3-1: SerialNumber: syz [ 324.533472][ T5570] usb 3-1: config 0 descriptor?? [ 324.534321][ T7912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 324.585072][ T5570] hub 3-1:0.0: bad descriptor, ignoring hub [ 324.585115][ T5570] hub 3-1:0.0: probe with driver hub failed with error -5 [ 324.619187][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 324.619225][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 324.863135][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 324.863171][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 325.153517][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.156294][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.254012][ T7912] FAULT_INJECTION: forcing a failure. [ 325.254012][ T7912] name failslab, interval 1, probability 0, space 0, times 0 [ 325.254042][ T7912] CPU: 1 UID: 0 PID: 7912 Comm: syz.2.568 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 325.254065][ T7912] Tainted: [L]=SOFTLOCKUP [ 325.254071][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.254081][ T7912] Call Trace: [ 325.254086][ T7912] [ 325.254093][ T7912] dump_stack_lvl+0xe8/0x150 [ 325.254147][ T7912] should_fail_ex+0x467/0x600 [ 325.254186][ T7912] should_failslab+0xa8/0x100 [ 325.254215][ T7912] __kmalloc_cache_noprof+0xa0/0x6b0 [ 325.254239][ T7912] ? usb_control_msg+0x73/0x3e0 [ 325.254273][ T7912] ? usb_control_msg+0x73/0x3e0 [ 325.254303][ T7912] usb_control_msg+0x73/0x3e0 [ 325.254330][ T7912] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 325.254356][ T7912] hub_ext_port_status+0x114/0x810 [ 325.254389][ T7912] hub_activate+0x740/0x1b10 [ 325.254419][ T7912] hub_resume+0xa4/0x3f0 [ 325.254436][ T7912] ? __pfx_hub_resume+0x10/0x10 [ 325.254459][ T7912] usb_resume_both+0x5f1/0xb20 [ 325.254484][ T7912] ? __pfx_usb_runtime_resume+0x10/0x10 [ 325.254504][ T7912] __rpm_callback+0x2d6/0x930 [ 325.254526][ T7912] ? __pfx_usb_runtime_resume+0x10/0x10 [ 325.254549][ T7912] ? __pfx_usb_runtime_resume+0x10/0x10 [ 325.254571][ T7912] rpm_resume+0x104d/0x16d0 [ 325.254590][ T7912] ? rt_spin_lock+0x1e0/0x400 [ 325.254626][ T7912] ? __pfx_rpm_resume+0x10/0x10 [ 325.254644][ T7912] ? rt_spin_lock+0x2ce/0x400 [ 325.254670][ T7912] ? __pfx_rt_spin_lock+0x10/0x10 [ 325.254692][ T7912] ? rt_spin_unlock+0x157/0x200 [ 325.254709][ T7912] ? rt_spin_unlock+0x163/0x200 [ 325.254725][ T7912] rpm_resume+0x8b0/0x16d0 [ 325.254744][ T7912] ? rt_spin_lock+0x1e0/0x400 [ 325.254780][ T7912] ? __pfx_rpm_resume+0x10/0x10 [ 325.254797][ T7912] ? rt_spin_lock+0x2ce/0x400 [ 325.254823][ T7912] ? __pfx_rt_spin_lock+0x10/0x10 [ 325.254852][ T7912] ? rt_spin_unlock+0x157/0x200 [ 325.254869][ T7912] ? rt_spin_unlock+0x163/0x200 [ 325.254885][ T7912] rpm_resume+0x8b0/0x16d0 [ 325.254905][ T7912] ? rt_spin_lock+0x1e0/0x400 [ 325.254943][ T7912] ? __pfx_rpm_resume+0x10/0x10 [ 325.254961][ T7912] ? rt_spin_lock+0x2ce/0x400 [ 325.255013][ T7912] ? __pfx_rt_spin_lock+0x10/0x10 [ 325.255053][ T7912] ? __pm_runtime_resume+0x9d/0x170 [ 325.255085][ T7912] __pm_runtime_resume+0x119/0x170 [ 325.255120][ T7912] usb_autopm_get_interface+0x20/0xf0 [ 325.255142][ T7912] _chaoskey_fill+0x1bc/0xa70 [ 325.255185][ T7912] ? __pfx__chaoskey_fill+0x10/0x10 [ 325.255213][ T7912] ? __pfx_autoremove_wake_function+0x10/0x10 [ 325.255258][ T7912] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 325.255291][ T7912] ? lockdep_hardirqs_on+0x7a/0x110 [ 325.255323][ T7912] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 325.255352][ T7912] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 325.255388][ T7912] ? chaoskey_read+0x16f/0x690 [ 325.255421][ T7912] chaoskey_read+0x1f3/0x690 [ 325.255460][ T7912] ? __pfx_chaoskey_read+0x10/0x10 [ 325.255490][ T7912] vfs_read+0x219/0xa90 [ 325.255527][ T7912] ? __pfx_vfs_read+0x10/0x10 [ 325.255555][ T7912] ? __fget_files+0x2a/0x420 [ 325.255581][ T7912] ? __fget_files+0x2a/0x420 [ 325.255608][ T7912] ? __fget_files+0x3a8/0x420 [ 325.255622][ T7912] ? __fget_files+0x2a/0x420 [ 325.255644][ T7912] ksys_read+0x156/0x270 [ 325.255665][ T7912] ? __pfx_ksys_read+0x10/0x10 [ 325.255690][ T7912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.255708][ T7912] do_syscall_64+0x174/0x580 [ 325.255727][ T7912] ? trace_irq_disable+0x3b/0x140 [ 325.255752][ T7912] ? clear_bhb_loop+0x70/0xc0 [ 325.255771][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.255787][ T7912] RIP: 0033:0x7f4e7b53e0d9 [ 325.255802][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.255816][ T7912] RSP: 002b:00007f4e79796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.255838][ T7912] RAX: ffffffffffffffda RBX: 00007f4e7b7c5fa0 RCX: 00007f4e7b53e0d9 [ 325.255850][ T7912] RDX: 00000000000000e3 RSI: 0000200000000300 RDI: 0000000000000007 [ 325.255860][ T7912] RBP: 00007f4e79796090 R08: 0000000000000000 R09: 0000000000000000 [ 325.255870][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.255879][ T7912] R13: 00007f4e7b7c6038 R14: 00007f4e7b7c5fa0 R15: 00007ffcc21b2f38 [ 325.255904][ T7912] [ 325.305742][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.487458][ T7912] hub 3-0:1.0: hub_ext_port_status failed (err = -12) [ 325.686887][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.735160][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.939461][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.940072][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.235298][ T5570] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 326.346452][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.395354][ T5570] usb 1-1: Using ep0 maxpacket: 32 [ 326.396306][ T5570] usb 1-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 326.401072][ T5570] usb 1-1: config 183 has an invalid interface number: 124 but max is 0 [ 326.401097][ T5570] usb 1-1: config 183 has no interface number 0 [ 326.401136][ T5570] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 326.401166][ T5570] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 326.401205][ T5570] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 326.401230][ T5570] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 326.401274][ T5570] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 326.401300][ T5570] usb 1-1: config 183 interface 124 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 326.401323][ T5570] usb 1-1: config 183 interface 124 has no altsetting 0 [ 326.517129][ T5570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.517158][ T5570] usb 1-1: Product: syz [ 326.517173][ T5570] usb 1-1: Manufacturer: syz [ 326.517188][ T5570] usb 1-1: SerialNumber: syz [ 326.762762][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.515791][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.634672][ T10] usb 3-1: USB disconnect, device number 23 [ 327.747418][ T5570] sierra 1-1:183.124: Sierra USB modem converter detected [ 327.782165][ T5570] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 327.936005][ T5570] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 327.968136][ T5570] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 328.081685][ T5570] usb 1-1: USB disconnect, device number 21 [ 328.099638][ T7951] netlink: 'syz.2.579': attribute type 16 has an invalid length. [ 328.099663][ T7951] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.579'. [ 328.394465][ T5570] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 328.588259][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.742625][ T5570] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 328.852010][ T5570] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 328.853009][ T5570] sierra 1-1:183.124: device disconnected [ 329.310336][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.456303][ T55] hsr_slave_0: left promiscuous mode [ 329.503500][ T55] hsr_slave_1: left promiscuous mode [ 329.504593][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.504620][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.551557][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.551587][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.626435][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.688254][ T55] veth1_macvtap: left promiscuous mode [ 329.688368][ T55] veth0_macvtap: left promiscuous mode [ 329.688621][ T55] veth1_vlan: left promiscuous mode [ 329.688749][ T55] veth0_vlan: left promiscuous mode [ 329.786421][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.358446][ T7980] ref_ctr_offset mismatch. inode: 0x2ce offset: 0x0 ref_ctr_offset(old): 0x20040 ref_ctr_offset(new): 0x0 [ 330.670161][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.300743][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.602469][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.623105][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.473479][ T37] kauditd_printk_skb: 100 callbacks suppressed [ 334.473492][ T37] audit: type=1326 audit(1787020898.223:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473529][ T37] audit: type=1326 audit(1787020898.223:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473561][ T37] audit: type=1326 audit(1787020898.223:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473592][ T37] audit: type=1326 audit(1787020898.223:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473624][ T37] audit: type=1326 audit(1787020898.223:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473656][ T37] audit: type=1326 audit(1787020898.223:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473689][ T37] audit: type=1326 audit(1787020898.223:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473721][ T37] audit: type=1326 audit(1787020898.223:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473754][ T37] audit: type=1326 audit(1787020898.223:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.473786][ T37] audit: type=1326 audit(1787020898.223:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.1.593" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 334.666250][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.085534][ T55] team0 (unregistering): Port device team_slave_1 removed [ 335.599239][ T55] team0 (unregistering): Port device team_slave_0 removed [ 335.705688][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.666735][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.762584][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.556245][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 337.693279][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 337.785763][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.825993][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.906733][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.996505][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 339.148557][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 339.153036][ T10] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 339.153055][ T10] usb 1-1: config 0 has no interface number 0 [ 339.153087][ T10] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.201939][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.201969][ T10] usb 1-1: Product: syz [ 339.201984][ T10] usb 1-1: Manufacturer: syz [ 339.201999][ T10] usb 1-1: SerialNumber: syz [ 339.283442][ T10] usb 1-1: config 0 descriptor?? [ 339.319983][ T10] yurex 1-1:0.50: Could not find endpoints [ 339.349537][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 339.349563][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 339.518354][ T37] kauditd_printk_skb: 136 callbacks suppressed [ 339.518374][ T37] audit: type=1326 audit(1787020903.273:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 339.518868][ T37] audit: type=1326 audit(1787020903.273:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 339.597967][ T37] audit: type=1326 audit(1787020903.353:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 339.607067][ T37] audit: type=1326 audit(1787020903.363:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 339.607125][ T37] audit: type=1326 audit(1787020903.363:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 339.698483][ T37] audit: type=1326 audit(1787020903.423:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452eb6e0d9 code=0x7ffc0000 [ 339.698538][ T37] audit: type=1326 audit(1787020903.423:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f452eb6de42 code=0x7ffc0000 [ 339.698582][ T37] audit: type=1326 audit(1787020903.423:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f452eb6ded7 code=0x7ffc0000 [ 339.698631][ T37] audit: type=1326 audit(1787020903.423:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f452eb2add1 code=0x7ffc0000 [ 339.698674][ T37] audit: type=1326 audit(1787020903.423:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.0.599" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f452eb6eec9 code=0x7ffc0000 [ 339.755592][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.866329][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.915458][ T36] usb 1-1: USB disconnect, device number 22 [ 341.622566][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.350367][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.379839][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.436951][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.591149][ T8061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.605'. [ 344.591180][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 345.028715][ T8071] FAULT_INJECTION: forcing a failure. [ 345.028715][ T8071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.028761][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.0.611 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.028792][ T8071] Tainted: [L]=SOFTLOCKUP [ 345.028800][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.028813][ T8071] Call Trace: [ 345.028821][ T8071] [ 345.028831][ T8071] dump_stack_lvl+0xe8/0x150 [ 345.028875][ T8071] should_fail_ex+0x467/0x600 [ 345.028916][ T8071] _copy_to_iter+0x1e4/0x1810 [ 345.028956][ T8071] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.028986][ T8071] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.029014][ T8071] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 345.029048][ T8071] ? __pfx__copy_to_iter+0x10/0x10 [ 345.029081][ T8071] ? reacquire_held_locks+0x104/0x190 [ 345.029118][ T8071] ? rt_spin_unlock+0x157/0x200 [ 345.029143][ T8071] __skb_datagram_iter+0xf8/0x980 [ 345.029175][ T8071] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 345.029215][ T8071] skb_copy_datagram_iter+0xb5/0x240 [ 345.029251][ T8071] raw_recvmsg+0x1d4/0x770 [ 345.029282][ T8071] ? __pfx_raw_recvmsg+0x10/0x10 [ 345.029304][ T8071] ? __lock_acquire+0x683/0x2ce0 [ 345.029326][ T8071] ? sock_rps_record_flow+0x19/0x350 [ 345.029356][ T8071] ? inet_recvmsg+0x101/0x120 [ 345.029380][ T8071] ? __pfx_inet_recvmsg+0x10/0x10 [ 345.029406][ T8071] sock_recvmsg_nosec+0xff/0x170 [ 345.029446][ T8071] ____sys_recvmsg+0x3ef/0x4b0 [ 345.029485][ T8071] ? __pfx_____sys_recvmsg+0x10/0x10 [ 345.029532][ T8071] ? import_iovec+0x73/0xa0 [ 345.029561][ T8071] ___sys_recvmsg+0x213/0x5a0 [ 345.029596][ T8071] ? __pfx____sys_recvmsg+0x10/0x10 [ 345.029631][ T8071] ? __fget_files+0x2a/0x420 [ 345.029685][ T8071] do_recvmmsg+0x320/0x7f0 [ 345.029725][ T8071] ? __pfx_do_recvmmsg+0x10/0x10 [ 345.029755][ T8071] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.029794][ T8071] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 345.029843][ T8071] __x64_sys_recvmmsg+0x198/0x250 [ 345.029885][ T8071] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 345.029926][ T8071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.029951][ T8071] do_syscall_64+0x174/0x580 [ 345.029978][ T8071] ? trace_irq_disable+0x3b/0x140 [ 345.030014][ T8071] ? clear_bhb_loop+0x70/0xc0 [ 345.030043][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.030067][ T8071] RIP: 0033:0x7f452eb6e0d9 [ 345.030088][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.030108][ T8071] RSP: 002b:00007f452cda5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 345.030133][ T8071] RAX: ffffffffffffffda RBX: 00007f452edf6090 RCX: 00007f452eb6e0d9 [ 345.030150][ T8071] RDX: 0000000000000002 RSI: 000020000000cf00 RDI: 0000000000000004 [ 345.030164][ T8071] RBP: 00007f452cda5090 R08: 0000000000000000 R09: 0000000000000000 [ 345.030179][ T8071] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 345.030193][ T8071] R13: 00007f452edf6128 R14: 00007f452edf6090 R15: 00007fff5a840558 [ 345.030227][ T8071] [ 345.297799][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 345.297861][ T37] audit: type=1326 audit(1787020909.023:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.298006][ T37] audit: type=1326 audit(1787020909.023:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.298083][ T37] audit: type=1326 audit(1787020909.023:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.298210][ T37] audit: type=1326 audit(1787020909.023:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.298346][ T37] audit: type=1326 audit(1787020909.023:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.298466][ T37] audit: type=1326 audit(1787020909.023:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.298599][ T37] audit: type=1326 audit(1787020909.023:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.298722][ T37] audit: type=1326 audit(1787020909.043:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.298857][ T37] audit: type=1326 audit(1787020909.043:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.299017][ T37] audit: type=1326 audit(1787020909.043:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57db94e0d9 code=0x7ffc0000 [ 345.466098][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.660385][ T8074] fuse: Bad value for 'user_id' [ 345.660444][ T8074] fuse: Bad value for 'user_id' [ 345.696298][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 346.220166][ T8082] netlink: 'syz.0.613': attribute type 2 has an invalid length. [ 346.220181][ T8082] netlink: 'syz.0.613': attribute type 2 has an invalid length. [ 346.220191][ T8082] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 346.220200][ T8082] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 346.426183][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.517214][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.616074][ T8088] tipc: Started in network mode [ 346.616112][ T8088] tipc: Node identity 72853dcc3b2c, cluster identity 4711 [ 346.616574][ T8088] tipc: Enabled bearer , priority 0 [ 346.617364][ T8085] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 346.692549][ T8085] syzkaller0: MTU too low for tipc bearer [ 346.692571][ T8085] tipc: Disabling bearer [ 346.793303][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.835394][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.870431][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.884136][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.902361][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.546771][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.800309][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.995316][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.071680][ T4902] Bluetooth: hci5: command tx timeout [ 349.187674][ T8106] fuse: Bad value for 'user_id' [ 349.187695][ T8106] fuse: Bad value for 'user_id' [ 349.214072][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 349.329624][ T7653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.477872][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.479780][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.484785][ T7653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.595347][ T5595] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 349.777838][ T5595] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 349.788128][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 349.788181][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.854510][ T5595] usb 2-1: config 0 descriptor?? [ 349.863643][ T8125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.911222][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.913400][ T7653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.920055][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.411078][ T5595] usbhid 2-1:0.0: can't add hid device: -71 [ 350.411205][ T5595] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 350.450968][ T5595] usb 2-1: USB disconnect, device number 26 [ 350.539436][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.646975][ T7653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 350.776523][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.995818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.998213][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.145475][ T4902] Bluetooth: hci5: command tx timeout [ 351.605341][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 351.806059][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 351.807057][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 351.812040][ T9] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 351.812069][ T9] usb 1-1: Product: syz [ 351.812085][ T9] usb 1-1: Manufacturer: syz [ 351.812100][ T9] usb 1-1: SerialNumber: syz [ 351.890489][ T9] usb 1-1: config 0 descriptor?? [ 351.947690][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 352.027296][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.342129][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.402494][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.513669][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.645983][ T9] gspca_zc3xx: reg_w_i err -71 [ 352.646079][ T9] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 352.678164][ T9] usb 1-1: USB disconnect, device number 23 [ 352.900940][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.975362][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 353.130522][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 353.133173][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 353.133228][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.171124][ T10] usb 2-1: config 0 descriptor?? [ 353.172365][ T8185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.305384][ T4902] Bluetooth: hci5: command tx timeout [ 353.762779][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 353.762917][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 353.826718][ T10] usb 2-1: USB disconnect, device number 27 [ 353.949638][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.594915][ T8194] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.633:8194 [ 355.385498][ T4902] Bluetooth: hci5: command tx timeout [ 355.546236][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.255430][ T5570] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 356.426810][ T5570] usb 2-1: Using ep0 maxpacket: 8 [ 356.427707][ T5570] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 356.429272][ T5570] usb 2-1: config 0 interface 0 has no altsetting 0 [ 356.429312][ T5570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.471201][ T5570] usb 2-1: config 0 descriptor?? [ 356.916738][ T5570] hid_parser_main: 467 callbacks suppressed [ 356.916764][ T5570] waltop 0003:172F:0500.0008: unknown main item tag 0x2 [ 356.916864][ T5570] waltop 0003:172F:0500.0008: unknown main item tag 0x4 [ 356.916942][ T5570] waltop 0003:172F:0500.0008: ignoring exceeding usage max [ 356.919455][ T5570] waltop 0003:172F:0500.0008: unbalanced collection at end of report description [ 356.920343][ T5570] waltop 0003:172F:0500.0008: probe with driver waltop failed with error -22 [ 357.247506][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.248123][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.309757][ T5570] usb 2-1: USB disconnect, device number 28 [ 358.992640][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.052174][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.065528][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.066063][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.099592][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.115393][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.116243][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.024320][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.305362][ T5593] Bluetooth: hci2: command tx timeout [ 363.055786][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.236806][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.241570][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.277201][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.279382][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.385427][ T5593] Bluetooth: hci2: command tx timeout [ 365.465428][ T5593] Bluetooth: hci2: command tx timeout [ 366.105849][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.545366][ T5593] Bluetooth: hci2: command tx timeout [ 369.300007][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.300093][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.592619][ T4902] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.632911][ T4902] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.660741][ T4902] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.663183][ T4902] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.665125][ T4902] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.295991][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.659569][ T4902] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.703500][ T4902] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.719754][ T4902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.741883][ T4902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.742682][ T4902] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.865512][ T5593] Bluetooth: hci6: command tx timeout [ 372.658465][ T4902] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 372.702857][ T4902] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 372.717404][ T4902] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 372.719761][ T4902] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 372.721852][ T4902] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 373.298505][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.298655][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.785442][ T5593] Bluetooth: hci7: command tx timeout [ 373.945444][ T5593] Bluetooth: hci6: command tx timeout [ 374.747408][ T5593] Bluetooth: hci8: command tx timeout [ 375.865383][ T5593] Bluetooth: hci7: command tx timeout [ 376.025374][ T5593] Bluetooth: hci6: command tx timeout [ 376.345580][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.825866][ T5593] Bluetooth: hci8: command tx timeout [ 377.945699][ T5593] Bluetooth: hci7: command tx timeout [ 378.105362][ T5593] Bluetooth: hci6: command tx timeout [ 378.592141][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.593878][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.907518][ T5593] Bluetooth: hci8: command tx timeout [ 380.027389][ T5593] Bluetooth: hci7: command tx timeout [ 380.575619][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.985878][ T5593] Bluetooth: hci8: command tx timeout [ 382.575618][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.600459][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.626497][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.937929][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.942743][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.942809][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.943639][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.685486][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.827319][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.828267][ T1232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.862629][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.866846][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.655722][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.899317][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.705797][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.517464][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.847773][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.145475][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.745573][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.735930][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.153471][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.157959][ T3280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.161963][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.164236][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.785694][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.621190][ T4902] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 406.673836][ T4902] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 406.687912][ T4902] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 406.689716][ T4902] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 406.720594][ T4902] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 407.136040][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.136075][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.825532][ T4902] Bluetooth: hci9: command tx timeout [ 408.828561][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.905392][ T4902] Bluetooth: hci9: command tx timeout [ 412.815782][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.985354][ T4902] Bluetooth: hci9: command tx timeout [ 415.065702][ T4902] Bluetooth: hci9: command tx timeout [ 415.376402][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.866899][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.346063][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.375757][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.905772][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.545692][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.050409][ T5593] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 420.094889][ T5593] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 420.110462][ T5593] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 420.173965][ T5593] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 420.174817][ T5593] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 422.345348][ T4902] Bluetooth: hci10: command tx timeout [ 422.895619][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.425313][ T4902] Bluetooth: hci10: command tx timeout [ 425.616983][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.945682][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.946222][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.505342][ T4902] Bluetooth: hci10: command tx timeout [ 427.615776][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.585293][ T4902] Bluetooth: hci10: command tx timeout [ 428.987626][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.571966][ T5593] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 429.627453][ T5593] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 429.654811][ T5593] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 429.667202][ T5593] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 429.668209][ T5593] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 431.785356][ T5593] Bluetooth: hci11: command tx timeout [ 432.637629][ T4902] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 432.690985][ T4902] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 432.692899][ T4902] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 432.694402][ T4902] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 432.727450][ T4902] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 432.975678][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.641506][ T4902] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 433.714917][ T4902] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 433.732111][ T4902] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 433.734398][ T4902] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 433.750232][ T4902] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 433.865448][ T4902] Bluetooth: hci11: command tx timeout [ 434.825412][ T4902] Bluetooth: hci12: command tx timeout [ 435.545557][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.785327][ T4902] Bluetooth: hci13: command tx timeout [ 435.945304][ T4902] Bluetooth: hci11: command tx timeout [ 436.025667][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.905870][ T4902] Bluetooth: hci12: command tx timeout [ 437.865303][ T4902] Bluetooth: hci13: command tx timeout [ 438.025366][ T4902] Bluetooth: hci11: command tx timeout [ 438.985324][ T4902] Bluetooth: hci12: command tx timeout [ 439.945270][ T4902] Bluetooth: hci13: command tx timeout [ 440.015635][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.065298][ T4902] Bluetooth: hci12: command tx timeout [ 442.025339][ T4902] Bluetooth: hci13: command tx timeout [ 443.065632][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.095727][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.105504][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.146641][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.136805][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.407009][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.186978][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.175760][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.245379][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.935489][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.265944][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.635934][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 466.640831][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 466.644042][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 466.713572][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 466.732554][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 467.705326][ T4902] Bluetooth: hci3: command 0x0406 tx timeout [ 468.825481][ T4902] Bluetooth: hci14: command tx timeout [ 469.305808][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.905508][ T4902] Bluetooth: hci14: command tx timeout [ 472.985320][ T4902] Bluetooth: hci14: command tx timeout [ 473.295584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.065389][ T4902] Bluetooth: hci14: command tx timeout [ 475.235639][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.345446][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.176059][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.821736][ T59] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 480.881202][ T59] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 480.916521][ T59] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 480.919803][ T59] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 480.920711][ T59] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 483.065459][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 483.253862][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.775543][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.265514][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.305739][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.748719][ T5607] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 489.773577][ T5607] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 489.796855][ T5607] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 489.837254][ T5607] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 489.839382][ T5607] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 491.590684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.612273][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 491.612349][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.345535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.690354][ T5600] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 492.741075][ T5600] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 492.758757][ T5600] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 492.760891][ T5600] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 492.761822][ T5600] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 493.315775][ T8303] Bluetooth: hci6: command 0x0406 tx timeout [ 493.575493][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.575696][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.725630][ T8307] Bluetooth: hci5: command 0x0406 tx timeout [ 493.730431][ T8307] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 493.807468][ T8307] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 493.814504][ T8307] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 493.837574][ T8307] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 493.839811][ T8307] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 495.386245][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.535608][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.537967][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.425490][ T8318] Bluetooth: hci8: command 0x0406 tx timeout [ 498.425831][ T8318] Bluetooth: hci7: command 0x0406 tx timeout [ 498.482935][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.545522][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.105343][ T38] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 502.105374][ T38] Tainted: G L syzkaller #0 [ 502.105388][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.105400][ T38] task:kworker/u8:0 state:D stack:20488 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 502.105467][ T38] Workqueue: netns cleanup_net [ 502.105501][ T38] Call Trace: [ 502.105510][ T38] [ 502.105526][ T38] __schedule+0x16dc/0x5500 [ 502.105557][ T38] ? unwind_next_frame+0x8f/0x2550 [ 502.105609][ T38] ? __pfx___schedule+0x10/0x10 [ 502.105651][ T38] rt_mutex_schedule+0x76/0xf0 [ 502.105676][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 502.105729][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 502.105766][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 502.105804][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 502.105859][ T38] ? rtnl_net_dev_lock+0x257/0x2f0 [ 502.105897][ T38] ? rtnl_net_dev_lock+0x257/0x2f0 [ 502.105919][ T38] mutex_lock_nested+0x168/0x1d0 [ 502.105966][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 502.105991][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 502.106014][ T38] rtnl_net_dev_lock+0x257/0x2f0 [ 502.106047][ T38] unregister_netdevice_notifier_dev_net+0x96/0x450 [ 502.106075][ T38] ? nsim_destroy+0xbc/0x800 [ 502.106129][ T38] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10 [ 502.106157][ T38] ? __pfx_mntput_no_expire_slowpath+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 502.106193][ T38] ? mntput_no_expire+0x1c/0x1c0 [ 502.106225][ T38] ? rcu_is_watching+0x15/0xb0 [ 502.106257][ T38] ? mntput_no_expire+0x1c/0x1c0 [ 502.106294][ T38] nsim_destroy+0x105/0x800 [ 502.106337][ T38] __nsim_dev_port_del+0x14e/0x200 [ 502.106368][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 502.106394][ T38] ? xa_get_mark+0x67/0x7a0 [ 502.106431][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 502.106460][ T38] devlink_reload+0x1c5/0x890 [ 502.106501][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 502.106549][ T38] devlink_pernet_pre_exit+0x1ff/0x420 [ 502.106583][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 502.106615][ T38] ? iput+0xb84/0xf00 [ 502.106648][ T38] ops_undo_list+0x17d/0x8d0 [ 502.106680][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 502.106703][ T38] ? rt_spin_unlock+0x157/0x200 [ 502.106727][ T38] ? idr_destroy+0x21b/0x2a0 [ 502.106754][ T38] ? rt_spin_unlock+0x163/0x200 [ 502.108269][ T38] cleanup_net+0x575/0x810 [ 502.108304][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 502.108336][ T38] ? rcu_is_watching+0x15/0xb0 [ 502.108366][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 502.108395][ T38] process_scheduled_works+0xa8e/0x14e0 [ 502.108452][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.108486][ T38] ? assign_work+0x3cf/0x5d0 [ 502.108518][ T38] worker_thread+0xa47/0xfb0 [ 502.108577][ T38] kthread+0x388/0x470 [ 502.108610][ T38] ? __pfx_worker_thread+0x10/0x10 [ 502.108636][ T38] ? __pfx_kthread+0x10/0x10 [ 502.108671][ T38] ret_from_fork+0x514/0xb70 [ 502.108709][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 502.108743][ T38] ? __switch_to+0xc89/0x1420 [ 502.108776][ T38] ? __pfx_kthread+0x10/0x10 [ 502.108811][ T38] ret_from_fork_asm+0x1a/0x30 [ 502.108866][ T38] [ 502.109018][ T38] INFO: task kworker/0:3:5570 blocked for more than 143 seconds. [ 502.109038][ T38] Tainted: G L syzkaller #0 [ 502.109051][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.109062][ T38] task:kworker/0:3 state:D stack:21016 pid:5570 tgid:5570 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 502.109126][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 502.109155][ T38] Call Trace: [ 502.109163][ T38] [ 502.109176][ T38] __schedule+0x16dc/0x5500 [ 502.109206][ T38] ? __pfx___resched_curr+0x10/0x10 [ 502.109260][ T38] ? __pfx___schedule+0x10/0x10 [ 502.109302][ T38] rt_mutex_schedule+0x76/0xf0 [ 502.109327][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 502.109379][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 502.109419][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 502.109458][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 502.109508][ T38] ? reg_check_chans_work+0xac/0x1110 [ 502.109539][ T38] ? reg_check_chans_work+0xac/0x1110 [ 502.109573][ T38] ? reg_check_chans_work+0xac/0x1110 [ 502.109598][ T38] mutex_lock_nested+0x168/0x1d0 [ 502.109637][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 502.109664][ T38] reg_check_chans_work+0xac/0x1110 [ 502.109703][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.109738][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 502.109769][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 502.109798][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 502.109831][ T38] ? rcu_is_watching+0x15/0xb0 [ 502.109861][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 502.109895][ T38] process_scheduled_works+0xa8e/0x14e0 [ 502.109953][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.109988][ T38] ? assign_work+0x3cf/0x5d0 [ 502.110032][ T38] worker_thread+0xa47/0xfb0 [ 502.110075][ T38] ? __kthread_parkme+0x71/0x1f0 [ 502.110115][ T38] kthread+0x388/0x470 [ 502.110148][ T38] ? __pfx_worker_thread+0x10/0x10 [ 502.110173][ T38] ? __pfx_kthread+0x10/0x10 [ 502.110207][ T38] ret_from_fork+0x514/0xb70 [ 502.110242][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 502.110276][ T38] ? __switch_to+0xc89/0x1420 [ 502.110307][ T38] ? __pfx_kthread+0x10/0x10 [ 502.110341][ T38] ret_from_fork_asm+0x1a/0x30 [ 502.110393][ T38] [ 502.110435][ T38] INFO: task syz-executor:7653 blocked for more than 143 seconds. [ 502.110454][ T38] Tainted: G L syzkaller #0 [ 502.110466][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.110475][ T38] task:syz-executor state:D stack:21968 pid:7653 tgid:7653 ppid:1 task_flags:0x400140 flags:0x00080002 [ 502.110531][ T38] Call Trace: [ 502.110537][ T38] [ 502.110550][ T38] __schedule+0x16dc/0x5500 [ 502.110605][ T38] ? __pfx___schedule+0x10/0x10 [ 502.110646][ T38] rt_mutex_schedule+0x76/0xf0 [ 502.110669][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 502.110720][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 502.110776][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 502.110815][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 502.110882][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 502.110917][ T38] ? inet6_rtm_newaddr+0x65e/0xdf0 [ 502.110945][ T38] mutex_lock_nested+0x168/0x1d0 [ 502.110981][ T38] ? inet6_rtm_newaddr+0x65e/0xdf0 [ 502.111014][ T38] inet6_rtm_newaddr+0x65e/0xdf0 [ 502.111051][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.111096][ T38] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 502.111135][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 502.111179][ T38] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 502.111208][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 502.111232][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 502.111273][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 502.111298][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.111324][ T38] ? __lock_acquire+0x683/0x2ce0 [ 502.111368][ T38] netlink_rcv_skb+0x226/0x4a0 [ 502.111413][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.111441][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.111485][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.111524][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.111560][ T38] netlink_unicast+0x7f5/0x990 [ 502.111599][ T38] netlink_sendmsg+0x813/0xb40 [ 502.111640][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.111673][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 502.111713][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.111746][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 502.111786][ T38] __sys_sendto+0x41e/0x5d0 [ 502.111819][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 502.111843][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.111890][ T38] ? fput_close_sync+0x11f/0x240 [ 502.111913][ T38] ? kmem_cache_free+0x526/0x6c0 [ 502.111948][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 502.111981][ T38] __x64_sys_sendto+0xde/0x100 [ 502.112009][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.112036][ T38] do_syscall_64+0x174/0x580 [ 502.112066][ T38] ? clear_bhb_loop+0x70/0xc0 [ 502.112095][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.112129][ T38] RIP: 0033:0x7fb5f0e0e90e [ 502.112151][ T38] RSP: 002b:00007ffe7a7668c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.112173][ T38] RAX: ffffffffffffffda RBX: 00005555763d7500 RCX: 00007fb5f0e0e90e [ 502.112191][ T38] RDX: 0000000000000040 RSI: 00007fb5f1c04670 RDI: 0000000000000003 [ 502.112206][ T38] RBP: 0000000000000001 R08: 00007ffe7a766944 R09: 000000000000000c [ 502.112221][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 502.112235][ T38] R13: 0000000000000000 R14: 00007fb5f1c04670 R15: 0000000000000000 [ 502.112270][ T38] [ 502.112309][ T38] [ 502.112309][ T38] Showing all locks held in the system: [ 502.112319][ T38] 6 locks held by kworker/u8:0/12: [ 502.112332][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.112392][ T38] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.112449][ T38] #2: ffffffff8f59dda0 (pernet_ops_rwsem){[ 502.112449][ T38] #2: ffffffff8f59dda0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 502.112502][ T38] #3: ffff88805f408160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 502.112562][ T38] #4: ffff88803adf8310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 502.112627][ T38] #5: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 502.112682][ T38] 4 locks held by ktimers/1/29: [ 502.112696][ T38] 1 lock held by khungtaskd/38: [ 502.112709][ T38] #0: ffffffff8e1c3040 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 502.112764][ T38] 3 locks held by kworker/u8:2/43: [ 502.112776][ T38] #0: ffff8880322e8138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.112833][ T38] #1: ffffc90000b57c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.112898][ T38] #2: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 502.112955][ T38] 2 locks held by kworker/u8:3/55: [ 502.112968][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113026][ T38] #1: ffffc9000121fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113097][ T38] 4 locks held by kworker/u9:0/59: [ 502.113110][ T38] #0: ffff8880291b5938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113182][ T38] #1: ffffc9000125fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113238][ T38] #2: ffff88809de940b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 502.113293][ T38] #3: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 502.113352][ T38] 2 locks held by kworker/0:2/199: [ 502.113365][ T38] #0: ffff88813ff1f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113416][ T38] #1: ffffc90003ac7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113474][ T38] 3 locks held by kworker/1:2/999: [ 502.113487][ T38] #0: ffff88813ff1f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113542][ T38] #1: ffffc90005d4fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113597][ T38] #2: ffff888020fae280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 502.113661][ T38] 2 locks held by kworker/u8:12/1409: [ 502.113674][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113735][ T38] #1: ffffc90006affc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113802][ T38] 3 locks held by kworker/u8:15/3280: [ 502.113814][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113869][ T38] #1: ffffc9000f82fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.113941][ T38] #2: ffff8880612d08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 502.114036][ T38] 4 locks held by kworker/u9:1/4902: [ 502.114050][ T38] #0: ffff888062098138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.114120][ T38] #1: ffffc9000fbbfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.114184][ T38] #2: ffff88806f05c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 502.114241][ T38] #3: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 502.114299][ T38] 2 locks held by getty/5341: [ 502.114312][ T38] #0: ffff8880359330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 502.114368][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 502.114435][ T38] 3 locks held by kworker/0:3/5570: [ 502.114448][ T38] #0: ffff88813ff1e538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.114505][ T38] #1: ffffc900042c7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.114562][ T38] #2: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 502.114620][ T38] 6 locks held by kworker/u9:2/5593: [ 502.114633][ T38] #0: ffff88805e3e6138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.114688][ T38] #1: ffffc90004c27c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.114748][ T38] #2: ffff88803f57cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 502.114804][ T38] #3: ffff88803f57c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 502.114865][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 502.114932][ T38] #5: ffff8880116f7b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 502.115000][ T38] 5 locks held by kworker/u9:3/5596: [ 502.115013][ T38] #0: ffff888028125138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.115068][ T38] #1: ffffc90004c57c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.555328][ T38] #2: ffff888034d5cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 502.555387][ T38] #3: ffff888034d5c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 502.555451][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 502.555529][ T38] 5 locks held by kworker/u9:4/5599: [ 502.555542][ T38] #0: ffff888030f4b938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.555599][ T38] #1: ffffc90004c87c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.555657][ T38] #2: ffff88803ca3cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 502.555718][ T38] #3: ffff88803ca3c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 502.555779][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 502.555841][ T38] 4 locks held by kworker/u9:5/5600: [ 502.555854][ T38] #0: ffff88804edd5138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.555916][ T38] #1: ffffc90004c97c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.555972][ T38] #2: ffff8880570a80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 502.556029][ T38] #3: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 502.556086][ T38] 5 locks held by kworker/u9:8/5607: [ 502.556098][ T38] #0: ffff88803e869138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.556155][ T38] #1: ffffc90004d07c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.556214][ T38] #2: ffff88805ee88f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 502.556267][ T38] #3: ffff88805ee880b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 502.556331][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 502.556401][ T38] 3 locks held by kworker/0:8/6087: [ 502.556414][ T38] #0: ffff88813ff1f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.556470][ T38] #1: ffffc90006657c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.556526][ T38] #2: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 502.556590][ T38] 3 locks held by syz.4.290/6737: [ 502.556603][ T38] #0: ffff88803f99ab38 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 502.556677][ T38] #1: ffffffff8f61bbe0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 502.556741][ T38] #2: ffff88805c9aacc8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x148/0xe60 [ 502.673647][ T38] 3 locks held by kworker/u8:21/7421: [ 502.673668][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.673729][ T38] #1: ffffc9000474fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.673787][ T38] #2: ffff8880615908d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 502.673856][ T38] 1 lock held by syz-executor/7653: [ 502.673869][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65e/0xdf0 [ 502.673931][ T38] 1 lock held by syz-executor/8091: [ 502.673944][ T38] #0: ffffffff8f59dda0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 502.673998][ T38] 1 lock held by syz.0.633/8191: [ 502.674011][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa9/0x140 [ 502.674074][ T38] 1 lock held by syz.4.640/8210: [ 502.674086][ T38] #0: ffff88803b0ba478 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 502.674156][ T38] 1 lock held by syz-executor/8222: [ 502.674169][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.674225][ T38] 1 lock held by syz-executor/8227: [ 502.674238][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.674293][ T38] 1 lock held by syz-executor/8234: [ 502.674306][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.674359][ T38] 1 lock held by syz-executor/8239: [ 502.674372][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.674426][ T38] 1 lock held by dhcpcd/8243: [ 502.674438][ T38] #0: ffff88806f220358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 502.674503][ T38] 1 lock held by dhcpcd/8244: [ 502.674515][ T38] #0: ffff88803be20358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 502.674579][ T38] 1 lock held by dhcpcd/8245: [ 502.674592][ T38] #0: ffff88804ec1a358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 502.674664][ T38] 1 lock held by dhcpcd/8246: [ 502.674677][ T38] #0: ffff88803317e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 502.674741][ T38] 1 lock held by dhcpcd/8247: [ 502.674753][ T38] #0: ffff88803e1d8358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 502.674819][ T38] 1 lock held by dhcpcd/8248: [ 502.674832][ T38] #0: ffff88803be38358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 502.674896][ T38] 1 lock held by syz-executor/8250: [ 502.674909][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.674963][ T38] 1 lock held by syz-executor/8258: [ 502.674977][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.906069][ T38] 1 lock held by syz-executor/8266: [ 502.906084][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.906137][ T38] 1 lock held by syz-executor/8274: [ 502.906149][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.906201][ T38] 1 lock held by syz-executor/8279: [ 502.906213][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.906265][ T38] 1 lock held by syz-executor/8284: [ 502.906277][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.906328][ T38] 1 lock held by syz-executor/8292: [ 502.906341][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.906392][ T38] 1 lock held by syz-executor/8298: [ 502.906405][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.906456][ T38] 4 locks held by kworker/u9:6/8303: [ 502.906468][ T38] #0: ffff8880878dc138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.906548][ T38] #1: ffffc900063efc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.906604][ T38] #2: ffff88805df040b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 502.906668][ T38] #3: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 502.906726][ T38] 1 lock held by syz-executor/8306: [ 502.906739][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.906792][ T38] 5 locks held by kworker/u9:7/8307: [ 502.906804][ T38] #0: ffff88803e1ae938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.906861][ T38] #1: ffffc90003cd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.906917][ T38] #2: ffff888062638f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 502.906973][ T38] #3: ffff8880626380b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 502.907034][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 502.907095][ T38] 1 lock held by syz-executor/8312: [ 502.907108][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 502.907162][ T38] 5 locks held by kworker/u9:10/8315: [ 502.907175][ T38] #0: ffff888061546138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.907232][ T38] #1: ffffc90005987c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 502.907289][ T38] #2: ffff888011e88f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 502.907342][ T38] #3: ffff888011e880b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 502.907403][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 502.907465][ T38] [ 502.907471][ T38] ============================================= [ 502.907471][ T38] [ 502.907487][ T38] NMI backtrace for cpu 0 [ 502.907523][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.907578][ T38] Tainted: [L]=SOFTLOCKUP [ 502.907586][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.907598][ T38] Call Trace: [ 502.907607][ T38] [ 502.907617][ T38] dump_stack_lvl+0xe8/0x150 [ 502.907658][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 502.907682][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.907718][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 502.907744][ T38] sys_info+0x135/0x170 [ 502.907776][ T38] watchdog+0xfd7/0x1030 [ 502.907817][ T38] ? watchdog+0x1c7/0x1030 [ 502.907856][ T38] kthread+0x388/0x470 [ 502.907890][ T38] ? __pfx_watchdog+0x10/0x10 [ 502.907920][ T38] ? __pfx_kthread+0x10/0x10 [ 502.907953][ T38] ret_from_fork+0x514/0xb70 [ 502.907988][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 502.908020][ T38] ? __switch_to+0xc89/0x1420 [ 502.908051][ T38] ? __pfx_kthread+0x10/0x10 [ 502.908084][ T38] ret_from_fork_asm+0x1a/0x30 [ 502.908134][ T38] [ 502.908167][ T38] Sending NMI from CPU 0 to CPUs 1: [ 502.908199][ C1] NMI backtrace for cpu 1 [ 502.908221][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.908247][ C1] Tainted: [L]=SOFTLOCKUP [ 502.908254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.908265][ C1] RIP: 0010:rt_spin_unlock+0x44/0x200 [ 502.908286][ C1] Code: df 48 83 c7 58 48 8b 74 24 30 e8 67 f4 59 f6 65 4c 8b 2d f7 c9 56 07 4d 8d b5 c0 04 00 00 4d 89 f4 49 c1 ec 03 43 0f b6 04 3c <84> c0 0f 85 36 01 00 00 41 0f b7 2e 66 85 ed 0f 8e 19 01 00 00 66 [ 502.908302][ C1] RSP: 0018:ffffc90000a3fac0 EFLAGS: 00000a02 [ 502.908318][ C1] RAX: 0000000000000000 RBX: ffff8880340c33a8 RCX: 0000000000000046 [ 502.908331][ C1] RDX: 0000000096a0bde7 RSI: ffffffff8daf4a1f RDI: ffffffff8bca5980 [ 502.908345][ C1] RBP: ffff88803b98f800 R08: ffffffff8b478ba0 R09: 0000000000000000 [ 502.908358][ C1] R10: 0000000000000000 R11: ffffffff8e1c3040 R12: 1ffff11003a55858 [ 502.908370][ C1] R13: ffff88801d2abe00 R14: ffff88801d2ac2c0 R15: dffffc0000000000 [ 502.908385][ C1] FS: 0000000000000000(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 502.908400][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.908412][ C1] CR2: 00007f940ad9b7c0 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 502.908430][ C1] Call Trace: [ 502.908437][ C1] [ 502.908446][ C1] advance_sched+0x9a3/0xc90 [ 502.908480][ C1] ? __pfx_advance_sched+0x10/0x10 [ 502.908506][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 502.908542][ C1] hrtimer_run_softirq+0x18f/0x260 [ 502.908570][ C1] handle_softirqs+0x1d9/0x6c0 [ 502.908597][ C1] run_ktimerd+0x69/0x100 [ 502.908621][ C1] smpboot_thread_fn+0x57c/0xa80 [ 502.908646][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 502.908674][ C1] kthread+0x388/0x470 [ 502.908700][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 502.908722][ C1] ? __pfx_kthread+0x10/0x10 [ 502.908749][ C1] ret_from_fork+0x514/0xb70 [ 502.908778][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 502.908804][ C1] ? __switch_to+0xc89/0x1420 [ 502.908828][ C1] ? __pfx_kthread+0x10/0x10 [ 502.908855][ C1] ret_from_fork_asm+0x1a/0x30 [ 502.908892][ C1] [ 503.115281][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 503.115308][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 503.115339][ T38] Tainted: [L]=SOFTLOCKUP [ 503.115347][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.115361][ T38] Call Trace: [ 503.115370][ T38] [ 503.115380][ T38] vpanic+0x56c/0xa60 [ 503.115419][ T38] ? __pfx___schedule+0x10/0x10 [ 503.115446][ T38] ? __pfx_vpanic+0x10/0x10 [ 503.115491][ T38] panic+0xc5/0xd0 [ 503.115526][ T38] ? __pfx_panic+0x10/0x10 [ 503.115558][ T38] ? preempt_schedule_common+0x82/0xd0 [ 503.115586][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 503.115620][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 503.115652][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 503.115680][ T38] watchdog+0x1030/0x1030 [ 503.115734][ T38] ? watchdog+0x1c7/0x1030 [ 503.115775][ T38] kthread+0x388/0x470 [ 503.115807][ T38] ? __pfx_watchdog+0x10/0x10 [ 503.115837][ T38] ? __pfx_kthread+0x10/0x10 [ 503.115871][ T38] ret_from_fork+0x514/0xb70 [ 503.115907][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 503.115940][ T38] ? __switch_to+0xc89/0x1420 [ 503.115971][ T38] ? __pfx_kthread+0x10/0x10 [ 503.116004][ T38] ret_from_fork_asm+0x1a/0x30 [ 503.116053][ T38] [ 503.116665][ T38] Kernel Offset: disabled