last executing test programs: 3m11.140125326s ago: executing program 2 (id=50): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b24, 0x0) 3m7.504789914s ago: executing program 2 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m7.350759083s ago: executing program 2 (id=77): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x42020054, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x80) 3m6.635472551s ago: executing program 2 (id=81): mkdir(&(0x7f0000000080)='./file0\x00', 0x1ac) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1020020, &(0x7f00000000c0)={[{@noprefix}]}) 3m6.554294952s ago: executing program 2 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, &(0x7f0000000080)=[0x0], 0x1, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m5.071417638s ago: executing program 2 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m50.0136108s ago: executing program 32 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m43.247158701s ago: executing program 4 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m42.985116083s ago: executing program 4 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000006"], 0x6a) 2m42.806530046s ago: executing program 4 (id=229): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m42.607977859s ago: executing program 4 (id=230): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x35315258, 0x780, 0x438, 0x0, @discrete={0x2, 0x4}}) 2m42.595845393s ago: executing program 4 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000001004)="01000000", 0x4, 0x1004) pwrite64(r0, &(0x7f0000001008)="01000000", 0x4, 0x1008) pwrite64(r0, &(0x7f0000001048)="01000000", 0x4, 0x1048) pwrite64(r0, 0x0, 0x0, 0x105c) pwrite64(r0, &(0x7f000000100c)='\b\x00\x00\x00', 0x4, 0x1060) pwrite64(r0, &(0x7f0000001010)="1000000000000000", 0x8, 0x1080) pwrite64(r0, &(0x7f0000001018)='\n\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1088) pwrite64(r0, &(0x7f0000001020)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1090) pwrite64(r0, &(0x7f0000001028)="2a4e2ba9", 0x4, 0x10d8) pwrite64(r0, &(0x7f000000102c)='bitm', 0x4, 0x2000) pwrite64(r0, &(0x7f0000001030)="04000000", 0x4, 0x2004) pwrite64(r0, &(0x7f0000001034)="00020000", 0x4, 0x2034) pwrite64(r0, &(0x7f0000001038)="01000000", 0x4, 0x2038) pwrite64(r0, &(0x7f000000103c)='\x00\x00\x00\x00', 0x4, 0x203c) fsync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='md0\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1.2\n', 0x4) write(0xffffffffffffffff, &(0x7f0000000800)='1:0\n', 0x4) write(0xffffffffffffffff, &(0x7f0000000a00)='writemostly\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) 2m42.528106113s ago: executing program 4 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m27.387893662s ago: executing program 33 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 1m50.818333383s ago: executing program 0 (id=618): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x3b81, &(0x7f0000000040)='\f') ioctl(r0, 0x3ba0, &(0x7f0000000080)="480000000200000001") ioctl(r0, 0x3b89, &(0x7f0000000100)="280000000100000003000000") ioctl(r0, 0x3b90, &(0x7f0000000140)="2000000000000000efbeadde03000000050000000000000018") close(0x3) 1m50.719491626s ago: executing program 0 (id=619): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0x1, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0x3, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0x83, 0xffffffff, 0xffffffff, 0xfffffffb, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m48.367327892s ago: executing program 0 (id=642): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) 1m46.140658123s ago: executing program 0 (id=660): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) writev(r1, &(0x7f0000001940)=[{&(0x7f0000000180)='\f', 0x1}], 0x1) 1m46.068803579s ago: executing program 0 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000"], 0x6a) 1m44.928832906s ago: executing program 0 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 1m29.831254724s ago: executing program 34 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 1m12.194219635s ago: executing program 6 (id=967): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f00000000c0)=0x8) 1m11.991855947s ago: executing program 6 (id=970): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xfc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xe8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x74b9c7924d4830a3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m11.828136211s ago: executing program 6 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x8, r3, 0x1, 0xd8}, 0x14) 1m11.584665055s ago: executing program 6 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c0001"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 1m11.480763945s ago: executing program 6 (id=979): prctl$PR_SET_FPEMU(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 1m11.348125639s ago: executing program 6 (id=980): socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10", @ANYRES8=r0], 0xa) 1m8.62034688s ago: executing program 1 (id=986): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/66) 1m8.527113165s ago: executing program 1 (id=987): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x5, @private=0x80000001}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) 1m8.401830361s ago: executing program 1 (id=988): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0x800000e, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001080, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x40000005, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x9, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x0, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x8, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0xc, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0xc, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x3, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x8000, 0x10, 0x1002, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x9, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x40, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 1m8.212194287s ago: executing program 1 (id=989): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fsopen(0x0, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000003140)) 1m8.115529863s ago: executing program 1 (id=990): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040050}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x8202, 0xb4c0, 0x5}, &(0x7f0000000140)=0x10) 1m7.832608979s ago: executing program 1 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(r0, &(0x7f0000000240)='3', 0x1) 56.144462312s ago: executing program 35 (id=980): socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10", @ANYRES8=r0], 0xa) 52.63016388s ago: executing program 36 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(r0, &(0x7f0000000240)='3', 0x1) 3.919872881s ago: executing program 8 (id=1357): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa09"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.240517909s ago: executing program 3 (id=1364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.10819643s ago: executing program 3 (id=1365): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, &(0x7f0000000380)=""/254, 0xfe) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) 2.592392577s ago: executing program 3 (id=1369): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x4000) 2.415694557s ago: executing program 7 (id=1371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.278919619s ago: executing program 3 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.098681775s ago: executing program 5 (id=1374): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) 2.09520016s ago: executing program 3 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.446430798s ago: executing program 7 (id=1375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x1, 0x9, 0x486, 0xff, 0x10000000100006, 0x8001, 0xf, 0xb, 0x5, 0xffffbfff, 0x44, 0x9, 0x1000a9ab, 0x20000000000fc, 0x32, 0x4000000000000], 0x8080000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.446231803s ago: executing program 3 (id=1376): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) epoll_create(0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x7f, 0x7, &(0x7f00000002c0)={0x10, "db6f15b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc900"}}) 1.42858544s ago: executing program 5 (id=1377): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/254, 0xfe) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) 1.260010818s ago: executing program 5 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) 1.060183435s ago: executing program 5 (id=1380): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x1e, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, &(0x7f0000000100)) 907.419598ms ago: executing program 5 (id=1381): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 794.718627ms ago: executing program 8 (id=1382): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) close_range(r0, 0xffffffffffffffff, 0x0) 672.166599ms ago: executing program 5 (id=1384): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000080)={0x1, 0x2, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0x86, 0x1fe, 0x6, 0x28, 0x2, 0x5}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b70cf489f5cb3b}) 650.327216ms ago: executing program 7 (id=1385): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) close(r0) 573.699384ms ago: executing program 8 (id=1386): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwrite64(r0, &(0x7f0000000700)="19", 0x1, 0x3fc) close(r0) (fail_nth: 1) 488.138749ms ago: executing program 8 (id=1387): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) 482.944176ms ago: executing program 7 (id=1388): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='1', 0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_tables_matches\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwrite64(r1, &(0x7f0000000700)="19", 0x1, 0x3fc) close(r1) 324.075851ms ago: executing program 7 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) 126.456591ms ago: executing program 8 (id=1390): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x40047457, &(0x7f0000000100)) 22.447892ms ago: executing program 7 (id=1391): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa09"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=1392): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) kernel console output (not intermixed with test programs): 295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=147665 res=0 errno=0 [ 214.989368][ T31] audit: type=1800 audit(1788693623.279:868): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=147643 res=0 errno=0 [ 214.990484][ T31] audit: type=1800 audit(1788693623.279:869): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=147644 res=0 errno=0 [ 215.184441][ T5764] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 215.203480][ T5764] wwan wwan0: port wwan0qmi0 attached [ 215.403041][ T5764] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 0a:21:38:49:b4:6d [ 215.649844][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 215.741258][ T25] usb 4-1: USB disconnect, device number 21 [ 215.747268][ T25] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 215.836325][ T25] wwan wwan0: port wwan0qmi0 disconnected [ 216.366203][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.366257][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 216.366282][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 216.366306][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 216.446754][ T5625] Bluetooth: hci6: command 0x0c1a tx timeout [ 216.446807][ T5625] Bluetooth: hci5: command 0x0c1a tx timeout [ 217.430328][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 217.578811][ T25] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 217.579361][ T25] usb 4-1: config 0 has no interfaces? [ 217.579394][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.582295][ T25] usb 4-1: config 0 descriptor?? [ 217.739158][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 218.114894][ T9134] capability: warning: `syz.5.1025' uses deprecated v2 capabilities in a way that may be insecure [ 218.462155][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 218.465769][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 218.465889][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 218.471829][ T4931] Bluetooth: hci2: command 0x0406 tx timeout [ 218.547596][ T5614] Bluetooth: hci5: command 0x0c1a tx timeout [ 218.550506][ T5628] Bluetooth: hci6: command 0x0c1a tx timeout [ 219.676027][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 219.676046][ T31] audit: type=1800 audit(1788693627.932:903): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 219.826539][ T31] audit: type=1800 audit(1788693628.081:904): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 220.020172][ T31] audit: type=1800 audit(1788693628.270:905): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 220.065781][ T31] audit: type=1800 audit(1788693628.320:906): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148003 res=0 errno=0 [ 220.082662][ T31] audit: type=1800 audit(1788693628.330:907): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148014 res=0 errno=0 [ 220.095859][ T5614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.104740][ T5614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.105534][ T5614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.106349][ T5614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.107585][ T5614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.167276][ T31] audit: type=1800 audit(1788693628.419:908): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148041 res=0 errno=0 [ 220.173944][ T31] audit: type=1800 audit(1788693628.419:909): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148052 res=0 errno=0 [ 220.251193][ T5764] usb 4-1: USB disconnect, device number 22 [ 220.289170][ T31] audit: type=1800 audit(1788693628.538:910): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 220.365145][ T5699] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 220.517293][ T5699] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 220.518297][ T5699] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.518340][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.533978][ T31] audit: type=1800 audit(1788693628.777:911): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148063 res=0 errno=0 [ 220.552984][ T31] audit: type=1800 audit(1788693628.797:912): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=148092 res=0 errno=0 [ 220.574618][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.636870][ T5628] Bluetooth: hci5: command 0x0c1a tx timeout [ 220.748868][ T5699] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 220.754792][ T5699] wwan wwan0: port wwan0qmi0 attached [ 220.937498][ T6064] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.971138][ T5699] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 5e:fe:93:3c:74:ab [ 221.111604][ T6064] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.159075][ T25] usb 6-1: USB disconnect, device number 10 [ 221.177599][ T25] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 221.271234][ T25] wwan wwan0: port wwan0qmi0 disconnected [ 221.394705][ T6064] bond0: (slave netdevsim1): Releasing backup interface [ 221.409919][ T6064] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.543791][ T6064] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.189322][ T5628] Bluetooth: hci7: command tx timeout [ 222.624626][ T5628] Bluetooth: hci5: unexpected subevent 0x03 length: 30 > 9 [ 222.734560][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.739619][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.739810][ T9143] bridge_slave_0: entered allmulticast mode [ 222.751838][ T9143] bridge_slave_0: entered promiscuous mode [ 222.763034][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.763131][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.763262][ T9143] bridge_slave_1: entered allmulticast mode [ 222.774877][ T9143] bridge_slave_1: entered promiscuous mode [ 223.101902][ T6064] bridge_slave_1: left allmulticast mode [ 223.101965][ T6064] bridge_slave_1: left promiscuous mode [ 223.104150][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.131266][ T6064] bridge_slave_0: left allmulticast mode [ 223.131292][ T6064] bridge_slave_0: left promiscuous mode [ 223.131496][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.628635][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.631958][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.636964][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.638546][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.639084][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.708453][ T5700] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 223.731134][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.950795][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.007177][ T6064] bond0 (unregistering): Released all slaves [ 224.247865][ T5614] Bluetooth: hci7: command tx timeout [ 224.283064][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.300937][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.439356][ T5700] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 224.440621][ T5700] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.440665][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.658538][ T9143] team0: Port device team_slave_0 added [ 224.696739][ T9143] team0: Port device team_slave_1 added [ 224.826386][ T5700] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 224.827696][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 224.827712][ T31] audit: type=1800 audit(1788693633.055:976): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152370 res=0 errno=0 [ 224.862520][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.864521][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.864597][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.297300][ T5700] wwan wwan0: port wwan0qmi0 attached [ 225.314619][ T31] audit: type=1800 audit(1788693633.544:977): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152470 res=0 errno=0 [ 225.317949][ T31] audit: type=1800 audit(1788693633.544:978): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152482 res=0 errno=0 [ 225.363302][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.363344][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.363371][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.409933][ T31] audit: type=1800 audit(1788693633.644:979): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152500 res=0 errno=0 [ 225.517385][ T5700] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, ee:26:1c:8e:7b:85 [ 225.537439][ T31] audit: type=1800 audit(1788693633.774:980): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=152505 res=0 errno=0 [ 225.538480][ T31] audit: type=1800 audit(1788693633.774:981): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=152509 res=0 errno=0 [ 225.587637][ T31] audit: type=1800 audit(1788693633.814:982): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=152508 res=0 errno=0 [ 225.597101][ T5700] usb 6-1: USB disconnect, device number 11 [ 225.600369][ T31] audit: type=1800 audit(1788693633.814:983): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=152511 res=0 errno=0 [ 225.624385][ T5700] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 225.666720][ T31] audit: type=1800 audit(1788693633.894:984): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 225.690423][ T5614] Bluetooth: hci6: command tx timeout [ 225.790494][ T9143] hsr_slave_0: entered promiscuous mode [ 225.791451][ T9143] hsr_slave_1: entered promiscuous mode [ 225.792184][ T9143] debugfs: 'hsr0' already exists in 'hsr' [ 225.792202][ T9143] Cannot create hsr debugfs directory [ 225.938180][ T5700] wwan wwan0: port wwan0qmi0 disconnected [ 226.179482][ T31] audit: type=1800 audit(1788693634.403:985): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24605 res=0 errno=0 [ 226.267285][ T6064] hsr_slave_0: left promiscuous mode [ 226.268330][ T6064] hsr_slave_1: left promiscuous mode [ 226.283215][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.283273][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.307890][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.307914][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.330824][ T5614] Bluetooth: hci7: command tx timeout [ 226.390504][ T6064] veth1_macvtap: left promiscuous mode [ 226.390577][ T6064] veth0_macvtap: left promiscuous mode [ 226.390689][ T6064] veth1_vlan: left promiscuous mode [ 226.390880][ T6064] veth0_vlan: left promiscuous mode [ 227.096318][ T6064] team0 (unregistering): Port device team_slave_1 removed [ 227.150896][ T6064] team0 (unregistering): Port device team_slave_0 removed [ 227.302135][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 227.381785][ T5764] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 227.554220][ T5764] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 227.560115][ T5764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.560162][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.772106][ T5614] Bluetooth: hci6: command tx timeout [ 227.809416][ T9143] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 227.838585][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.873483][ T5764] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 227.879804][ T5764] wwan wwan0: port wwan0qmi0 attached [ 227.928384][ T9143] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 227.951907][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.979905][ T9143] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 228.003493][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.005376][ T9143] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 228.009389][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.095217][ T5764] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, f2:e5:6e:12:e2:3e [ 228.262335][ T5700] usb 4-1: USB disconnect, device number 23 [ 228.297452][ T5700] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 228.390974][ T5700] wwan wwan0: port wwan0qmi0 disconnected [ 228.412768][ T5614] Bluetooth: hci7: command tx timeout [ 228.467756][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 228.516942][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.517149][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.517287][ T9236] bridge_slave_0: entered allmulticast mode [ 228.519069][ T9236] bridge_slave_0: entered promiscuous mode [ 228.552445][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.552541][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.552670][ T9236] bridge_slave_1: entered allmulticast mode [ 228.580636][ T9236] bridge_slave_1: entered promiscuous mode [ 228.676010][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.686534][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.746851][ T9236] team0: Port device team_slave_0 added [ 228.751313][ T9236] team0: Port device team_slave_1 added [ 228.811094][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.811112][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.811138][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.817091][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.817109][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.817134][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.916706][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.982092][ T9236] hsr_slave_0: entered promiscuous mode [ 228.984298][ T9236] hsr_slave_1: entered promiscuous mode [ 228.984994][ T9236] debugfs: 'hsr0' already exists in 'hsr' [ 228.985012][ T9236] Cannot create hsr debugfs directory [ 229.034012][ T5700] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 229.111214][ T9143] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.156992][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.157091][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.213774][ T5700] usb 6-1: Using ep0 maxpacket: 8 [ 229.214482][ T5700] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 229.215472][ T5700] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 229.215496][ T5700] usb 6-1: config 0 has no interface number 0 [ 229.215536][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.218293][ T5700] usb 6-1: config 0 descriptor?? [ 229.266107][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.266204][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.324565][ T5700] viperboard 6-1:0.143: version 0.00 found at bus 006 address 012 [ 229.402650][ T5700] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 229.402678][ T5700] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 229.466979][ T5700] usb 6-1: USB disconnect, device number 12 [ 229.854985][ T5614] Bluetooth: hci6: command tx timeout [ 229.913302][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 229.913321][ T31] audit: type=1800 audit(1788693638.138:1036): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 229.959076][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 229.979098][ T9236] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 229.993789][ T9236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.003805][ T9236] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 230.026025][ T9236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.026960][ T9236] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 230.031151][ T9236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.033361][ T9236] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 230.080149][ T9236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.110345][ T31] audit: type=1800 audit(1788693638.338:1037): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 230.208036][ T31] audit: type=1800 audit(1788693638.438:1038): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 230.276981][ T5764] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 230.430207][ T5764] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 230.432969][ T5764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.433016][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.453112][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.484145][ T31] audit: type=1800 audit(1788693638.708:1039): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 230.508436][ T31] audit: type=1800 audit(1788693638.718:1040): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161313 res=0 errno=0 [ 230.508485][ T31] audit: type=1800 audit(1788693638.718:1041): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161342 res=0 errno=0 [ 230.508521][ T31] audit: type=1800 audit(1788693638.718:1042): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=161320 res=0 errno=0 [ 230.519053][ T31] audit: type=1800 audit(1788693638.737:1043): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=161321 res=0 errno=0 [ 230.526863][ T31] audit: type=1800 audit(1788693638.737:1044): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=161322 res=0 errno=0 [ 230.547991][ T9236] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.582486][ T31] audit: type=1800 audit(1788693638.807:1045): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161362 res=0 errno=0 [ 230.603207][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.603338][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.652942][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.653042][ T6019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.736596][ T5764] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 230.756910][ T5764] wwan wwan0: port wwan0qmi0 attached [ 230.953980][ T5764] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, ba:f7:5d:f7:12:53 [ 230.985731][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.133369][ T9] usb 4-1: USB disconnect, device number 24 [ 231.152222][ T9] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 231.492921][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 231.625636][ T9412] FAULT_INJECTION: forcing a failure. [ 231.625636][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 231.625674][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.5.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.625704][ T9412] Tainted: [L]=SOFTLOCKUP [ 231.625711][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.625737][ T9412] Call Trace: [ 231.625746][ T9412] [ 231.625755][ T9412] dump_stack_lvl+0xe8/0x150 [ 231.625789][ T9412] should_fail_ex+0x3eb/0x540 [ 231.625818][ T9412] should_failslab+0xa8/0x100 [ 231.625840][ T9412] ? mas_alloc_nodes+0x291/0x350 [ 231.625870][ T9412] kmem_cache_alloc_noprof+0x9c/0x600 [ 231.625901][ T9412] ? mas_alloc_nodes+0x291/0x350 [ 231.625938][ T9412] mas_alloc_nodes+0x291/0x350 [ 231.625972][ T9412] mas_preallocate+0x42a/0x840 [ 231.626000][ T9412] ? percpu_ref_get_many+0x19/0x140 [ 231.626028][ T9412] ? __pfx_mas_preallocate+0x10/0x10 [ 231.626067][ T9412] ? __mas_set_range+0x11a/0x3a0 [ 231.626093][ T9412] vma_link+0x123/0x460 [ 231.626112][ T9412] ? anon_vma_clone+0x8f5/0x9f0 [ 231.626138][ T9412] ? __pfx_vma_link+0x10/0x10 [ 231.626166][ T9412] ? anon_vma_clone+0x8f5/0x9f0 [ 231.626197][ T9412] copy_vma+0x7f7/0xad0 [ 231.626224][ T9412] ? __pfx_copy_vma+0x10/0x10 [ 231.626262][ T9412] ? do_vmi_align_munmap+0x3b7/0x4b0 [ 231.626295][ T9412] ? rcu_is_watching+0x16/0xb0 [ 231.626315][ T9412] ? percpu_counter_add_batch+0xec/0x1d0 [ 231.626347][ T9412] move_vma+0x8fc/0x1850 [ 231.626385][ T9412] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 231.626417][ T9412] ? __pfx_move_vma+0x10/0x10 [ 231.626442][ T9412] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 231.626473][ T9412] ? mtree_load+0x12a/0x780 [ 231.626501][ T9412] ? cap_mmap_addr+0xaa/0xf0 [ 231.626522][ T9412] ? bpf_lsm_mmap_addr+0x9/0x50 [ 231.626557][ T9412] mremap_to+0x7f9/0x8d0 [ 231.626583][ T9412] ? __pfx_mremap_to+0x10/0x10 [ 231.626603][ T9412] ? __pfx_mtree_load+0x10/0x10 [ 231.626626][ T9412] ? __pfx_check_prep_vma+0x10/0x10 [ 231.626651][ T9412] ? futex_wait+0x2a2/0x390 [ 231.626682][ T9412] __se_sys_mremap+0xf59/0x12d0 [ 231.626709][ T9412] ? __pfx___se_sys_mremap+0x10/0x10 [ 231.626726][ T9412] ? do_futex+0x3e7/0x4e0 [ 231.626749][ T9412] ? __pfx_do_futex+0x10/0x10 [ 231.626778][ T9412] ? __se_sys_futex+0x3a8/0x450 [ 231.626816][ T9412] ? __x64_sys_mremap+0x20/0xc0 [ 231.626839][ T9412] do_syscall_64+0x166/0x520 [ 231.626856][ T9412] ? trace_irq_disable+0x3b/0x140 [ 231.626884][ T9412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.626903][ T9412] ? clear_bhb_loop+0x70/0xc0 [ 231.626925][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.626942][ T9412] RIP: 0033:0x7f09c299e159 [ 231.626960][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.626978][ T9412] RSP: 002b:00007f09c3886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 231.627000][ T9412] RAX: ffffffffffffffda RBX: 00007f09c2c25fa0 RCX: 00007f09c299e159 [ 231.627015][ T9412] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 231.627028][ T9412] RBP: 00007f09c2a35024 R08: 0000200000ffd000 R09: 0000000000000000 [ 231.627042][ T9412] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 231.627054][ T9412] R13: 00007f09c2c26038 R14: 00007f09c2c25fa0 R15: 00007ffed954cdf8 [ 231.627085][ T9412] [ 231.861756][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 231.950094][ T5614] Bluetooth: hci6: command tx timeout [ 232.100752][ T9143] veth0_vlan: entered promiscuous mode [ 232.153755][ T9143] veth1_vlan: entered promiscuous mode [ 232.319543][ T9143] veth0_macvtap: entered promiscuous mode [ 232.324383][ T9143] veth1_macvtap: entered promiscuous mode [ 232.355519][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.367386][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.579797][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.581533][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.700307][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.700330][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.785927][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.799740][ T6064] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.831007][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.035071][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.035132][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.301147][ T9236] veth0_vlan: entered promiscuous mode [ 234.338993][ T9236] veth1_vlan: entered promiscuous mode [ 234.554801][ T9236] veth0_macvtap: entered promiscuous mode [ 234.579944][ T9236] veth1_macvtap: entered promiscuous mode [ 234.626624][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.657854][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.250007][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 235.250025][ T31] audit: type=1800 audit(1788693643.472:1078): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 235.419328][ T31] audit: type=1800 audit(1788693643.642:1079): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 235.464675][ T31] audit: type=1800 audit(1788693643.692:1080): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 235.560696][ T31] audit: type=1800 audit(1788693643.781:1081): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 235.584397][ T31] audit: type=1800 audit(1788693643.811:1082): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161953 res=0 errno=0 [ 235.590508][ T31] audit: type=1800 audit(1788693643.811:1083): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161957 res=0 errno=0 [ 235.643095][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.643835][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.649998][ T31] audit: type=1800 audit(1788693643.871:1084): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162036 res=0 errno=0 [ 235.650337][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.650372][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.809474][ T31] audit: type=1800 audit(1788693644.031:1085): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 235.883319][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.883341][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.891782][ T31] audit: type=1800 audit(1788693644.111:1086): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 235.907121][ T31] audit: type=1800 audit(1788693644.121:1087): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162162 res=0 errno=0 [ 235.990717][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.990739][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.018152][ T9555] FAULT_INJECTION: forcing a failure. [ 238.018152][ T9555] name failslab, interval 1, probability 0, space 0, times 0 [ 238.018245][ T9555] CPU: 1 UID: 0 PID: 9555 Comm: syz.5.1111 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.018267][ T9555] Tainted: [L]=SOFTLOCKUP [ 238.018273][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.018283][ T9555] Call Trace: [ 238.018291][ T9555] [ 238.018300][ T9555] dump_stack_lvl+0xe8/0x150 [ 238.018330][ T9555] should_fail_ex+0x3eb/0x540 [ 238.018358][ T9555] should_failslab+0xa8/0x100 [ 238.018395][ T9555] __kmalloc_cache_noprof+0x9e/0x600 [ 238.018426][ T9555] ? mpi_alloc+0x52/0x140 [ 238.018448][ T9555] ? mpi_alloc+0x52/0x140 [ 238.018478][ T9555] mpi_alloc+0x52/0x140 [ 238.018504][ T9555] mpi_read_raw_data+0x139/0x970 [ 238.018535][ T9555] dh_set_secret+0x193/0x320 [ 238.018560][ T9555] ? crypto_create_tfm_node+0x81/0x3c0 [ 238.018596][ T9555] ? __pfx_dh_set_secret+0x10/0x10 [ 238.018625][ T9555] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 238.018650][ T9555] __keyctl_dh_compute+0x5ae/0xd10 [ 238.018683][ T9555] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 238.018734][ T9555] ? __might_fault+0xaf/0x130 [ 238.018766][ T9555] keyctl_dh_compute+0x124/0x180 [ 238.018795][ T9555] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 238.018836][ T9555] __se_sys_keyctl+0x44c/0xbc0 [ 238.018858][ T9555] ? __pfx___se_sys_keyctl+0x10/0x10 [ 238.018881][ T9555] ? __pfx_do_futex+0x10/0x10 [ 238.018908][ T9555] ? __se_sys_futex+0x3a8/0x450 [ 238.018935][ T9555] ? rcu_is_watching+0x16/0xb0 [ 238.018962][ T9555] ? __x64_sys_keyctl+0x20/0xc0 [ 238.018993][ T9555] do_syscall_64+0x166/0x520 [ 238.019013][ T9555] ? trace_irq_disable+0x3b/0x140 [ 238.019041][ T9555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.019063][ T9555] ? clear_bhb_loop+0x70/0xc0 [ 238.019087][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.019108][ T9555] RIP: 0033:0x7f09c299e159 [ 238.019137][ T9555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.019155][ T9555] RSP: 002b:00007f09c3886028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 238.019177][ T9555] RAX: ffffffffffffffda RBX: 00007f09c2c25fa0 RCX: 00007f09c299e159 [ 238.019192][ T9555] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000017 [ 238.019206][ T9555] RBP: 00007f09c2a35024 R08: 0000200000000200 R09: 0000000000000000 [ 238.019219][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.019231][ T9555] R13: 00007f09c2c26038 R14: 00007f09c2c25fa0 R15: 00007ffed954cdf8 [ 238.019262][ T9555] [ 238.428967][ T9563] netlink: 844 bytes leftover after parsing attributes in process `syz.8.1115'. [ 238.428994][ T9563] netlink: 844 bytes leftover after parsing attributes in process `syz.8.1115'. [ 239.616919][ T9582] md: could not open device unknown-block(0,0). [ 239.616988][ T9582] md: error, md_import_device() returned -6 [ 240.374438][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 240.374458][ T31] audit: type=1800 audit(1788693648.576:1116): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 240.476358][ T31] audit: type=1800 audit(1788693648.686:1117): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=21431 res=0 errno=0 [ 240.509936][ T31] audit: type=1800 audit(1788693648.726:1118): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 240.514552][ T31] audit: type=1800 audit(1788693648.726:1119): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=21460 res=0 errno=0 [ 240.539781][ T31] audit: type=1800 audit(1788693648.756:1120): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 240.560299][ T31] audit: type=1800 audit(1788693648.756:1121): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31628 res=0 errno=0 [ 240.560349][ T31] audit: type=1800 audit(1788693648.756:1122): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31651 res=0 errno=0 [ 240.651367][ T31] audit: type=1800 audit(1788693648.866:1123): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 240.719359][ T31] audit: type=1800 audit(1788693648.936:1124): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 240.767899][ T1220] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 240.778733][ T9615] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 240.778752][ T9615] rust_binder: Read failure Err(EFAULT) in pid:504 [ 240.808153][ T31] audit: type=1800 audit(1788693649.026:1125): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 240.907789][ T1220] usb 9-1: device descriptor read/64, error -71 [ 241.095978][ T9627] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 241.096029][ T9627] rust_binder: Read failure Err(EFAULT) in pid:504 [ 241.103752][ T9627] rust_binder: 9613:9627 got transaction with invalid offset [ 241.104292][ T9627] rust_binder: Failure in copy_transaction_data: EINVAL [ 241.104477][ T9627] rust_binder: 9613:9627 transaction call to 9613:0 failed EINVAL, code 0 size 112-4280 [ 241.207859][ T1220] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 241.418275][ T1220] usb 9-1: device descriptor read/64, error -71 [ 241.532146][ T1220] usb usb9-port1: attempt power cycle [ 241.576719][ T4944] rust_binder: 9613: undelivered TRANSACTION_ERROR: 29201 [ 241.579075][ T9627] syz.5.1127 (9627) used greatest stack depth: 11632 bytes left [ 241.970774][ T1220] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 241.989273][ T1220] usb 9-1: device descriptor read/8, error -71 [ 242.229317][ T1220] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 242.249782][ T1220] usb 9-1: device descriptor read/8, error -71 [ 242.351066][ T4944] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 242.359579][ T1220] usb usb9-port1: unable to enumerate USB device [ 242.503139][ T4944] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 242.514576][ T4944] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.514603][ T4944] usb 8-1: Product: syz [ 242.514617][ T4944] usb 8-1: Manufacturer: syz [ 242.514630][ T4944] usb 8-1: SerialNumber: syz [ 242.894870][ T4944] rtl8150 8-1:1.0: couldn't reset the device [ 242.895182][ T4944] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 242.990749][ T4944] usb 8-1: USB disconnect, device number 2 [ 244.264031][ T5614] Bluetooth: hci7: unexpected event 0x04 length: 11 > 10 [ 244.272181][ T5614] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:200' [ 244.272248][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.272279][ T5614] Tainted: [L]=SOFTLOCKUP [ 244.272287][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.272303][ T5614] Workqueue: hci7 hci_rx_work [ 244.272337][ T5614] Call Trace: [ 244.272345][ T5614] [ 244.272355][ T5614] dump_stack_lvl+0xe8/0x150 [ 244.272385][ T5614] sysfs_create_dir_ns+0x271/0x2a0 [ 244.272419][ T5614] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 244.272451][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 244.272482][ T5614] kobject_add_internal+0x622/0xcd0 [ 244.272513][ T5614] kobject_add+0x163/0x240 [ 244.272536][ T5614] ? preempt_schedule_thunk+0x16/0x40 [ 244.272570][ T5614] ? __pfx_kobject_add+0x10/0x10 [ 244.272599][ T5614] ? get_device_parent+0x366/0x3a0 [ 244.272628][ T5614] device_add+0x3fa/0xb80 [ 244.272663][ T5614] hci_conn_add_sysfs+0xd5/0x210 [ 244.272695][ T5614] hci_conn_complete_evt+0x8a8/0x1350 [ 244.272731][ T5614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.272753][ T5614] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 244.272785][ T5614] ? skb_pull_data+0xf0/0x200 [ 244.272815][ T5614] hci_event_packet+0x6cd/0xf10 [ 244.272849][ T5614] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 244.272876][ T5614] ? __pfx_hci_event_packet+0x10/0x10 [ 244.272910][ T5614] ? audit_tree_freeing_mark+0x670/0xb20 [ 244.272940][ T5614] ? hci_send_to_monitor+0xe2/0x590 [ 244.272967][ T5614] hci_rx_work+0x3ee/0x1020 [ 244.273003][ T5614] ? process_scheduled_works+0x97a/0x1630 [ 244.273028][ T5614] process_scheduled_works+0xc3d/0x1630 [ 244.273081][ T5614] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.273112][ T5614] ? assign_work+0x3cf/0x5d0 [ 244.273140][ T5614] worker_thread+0xa47/0xfb0 [ 244.273178][ T5614] ? __kthread_parkme+0x71/0x1f0 [ 244.273214][ T5614] kthread+0x38b/0x480 [ 244.273242][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 244.273264][ T5614] ? __pfx_kthread+0x10/0x10 [ 244.273293][ T5614] ret_from_fork+0x514/0xb70 [ 244.273325][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 244.273353][ T5614] ? __switch_to+0xc89/0x1420 [ 244.273380][ T5614] ? __pfx_kthread+0x10/0x10 [ 244.273410][ T5614] ret_from_fork_asm+0x1a/0x30 [ 244.273454][ T5614] [ 244.273726][ T5614] kobject: kobject_add_internal failed for hci7:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 244.273856][ T5614] Bluetooth: hci7: failed to register connection device [ 245.362252][ T5764] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 245.447182][ T9760] FAULT_INJECTION: forcing a failure. [ 245.447182][ T9760] name failslab, interval 1, probability 0, space 0, times 0 [ 245.447217][ T9760] CPU: 1 UID: 0 PID: 9760 Comm: syz.3.1176 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.447243][ T9760] Tainted: [L]=SOFTLOCKUP [ 245.447251][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.447263][ T9760] Call Trace: [ 245.447271][ T9760] [ 245.447280][ T9760] dump_stack_lvl+0xe8/0x150 [ 245.447311][ T9760] should_fail_ex+0x3eb/0x540 [ 245.447336][ T9760] ? __pfx_dev_uevent_name+0x10/0x10 [ 245.447383][ T9760] should_failslab+0xa8/0x100 [ 245.447408][ T9760] __kmalloc_cache_noprof+0x9e/0x600 [ 245.447439][ T9760] ? kobject_uevent_env+0x289/0x9e0 [ 245.447463][ T9760] ? kobject_uevent_env+0x289/0x9e0 [ 245.447500][ T9760] ? __pfx_dev_uevent_name+0x10/0x10 [ 245.447532][ T9760] kobject_uevent_env+0x289/0x9e0 [ 245.447556][ T9760] ? __pfx_dummy_pullup+0x10/0x10 [ 245.447585][ T9760] gadget_bind_driver+0x599/0x9e0 [ 245.447624][ T9760] ? __pfx_gadget_bind_driver+0x10/0x10 [ 245.447649][ T9760] really_probe+0x254/0xae0 [ 245.447681][ T9760] __driver_probe_device+0x1e8/0x360 [ 245.447711][ T9760] driver_probe_device+0x4f/0x240 [ 245.447744][ T9760] __driver_attach+0x339/0x600 [ 245.447773][ T9760] bus_for_each_dev+0x23b/0x2c0 [ 245.447793][ T9760] ? __pfx___driver_attach+0x10/0x10 [ 245.447817][ T9760] ? __pfx_bus_for_each_dev+0x10/0x10 [ 245.447840][ T9760] ? do_raw_spin_unlock+0xf5/0x200 [ 245.447869][ T9760] bus_add_driver+0x345/0x670 [ 245.447897][ T9760] driver_register+0x23a/0x320 [ 245.447928][ T9760] usb_gadget_register_driver_owner+0xf9/0x270 [ 245.447959][ T9760] raw_ioctl+0x1541/0x41c0 [ 245.447984][ T9760] ? tomoyo_path_number_perm+0x219/0x5f0 [ 245.448009][ T9760] ? do_vfs_ioctl+0x116f/0x1530 [ 245.448029][ T9760] ? __pfx_raw_ioctl+0x10/0x10 [ 245.448059][ T9760] ? hook_file_ioctl+0x1f2/0x600 [ 245.448098][ T9760] ? __fget_files+0x2a/0x420 [ 245.448127][ T9760] ? __fget_files+0x2a/0x420 [ 245.448152][ T9760] ? __fget_files+0x3a2/0x420 [ 245.448175][ T9760] ? __fget_files+0x2a/0x420 [ 245.448203][ T9760] ? bpf_lsm_file_ioctl+0x9/0x20 [ 245.448228][ T9760] ? __pfx_raw_ioctl+0x10/0x10 [ 245.448248][ T9760] __se_sys_ioctl+0xfc/0x170 [ 245.448281][ T9760] do_syscall_64+0x166/0x520 [ 245.448298][ T9760] ? trace_irq_disable+0x3b/0x140 [ 245.448323][ T9760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.448343][ T9760] ? clear_bhb_loop+0x70/0xc0 [ 245.448364][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.448384][ T9760] RIP: 0033:0x7fc74e99ddeb [ 245.448403][ T9760] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 245.448421][ T9760] RSP: 002b:00007fc74cbf3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.448442][ T9760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc74e99ddeb [ 245.448455][ T9760] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 245.448467][ T9760] RBP: 00007fc74cbf4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 245.448488][ T9760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.448500][ T9760] R13: 00002000000006c0 R14: 0000000000000000 R15: 0000000000000000 [ 245.448529][ T9760] [ 245.450077][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 245.450093][ T31] audit: type=1800 audit(1788693653.661:1161): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 245.493558][ T5764] usb 6-1: device descriptor read/64, error -71 [ 245.504692][ T31] audit: type=1800 audit(1788693653.711:1162): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 245.576824][ T31] audit: type=1800 audit(1788693653.791:1163): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26344 res=0 errno=0 [ 245.629536][ T31] audit: type=1800 audit(1788693653.841:1164): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 245.682878][ T1220] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 245.735648][ T31] audit: type=1800 audit(1788693653.951:1165): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 245.793035][ T5764] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 245.812347][ T1220] usb 4-1: device descriptor read/64, error -71 [ 245.836389][ T31] audit: type=1800 audit(1788693654.051:1166): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 245.951662][ T5764] usb 6-1: device descriptor read/64, error -71 [ 245.976312][ T31] audit: type=1800 audit(1788693654.190:1167): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 246.043568][ T31] audit: type=1800 audit(1788693654.260:1168): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 246.052718][ T1220] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 246.078560][ T5764] usb usb6-port1: attempt power cycle [ 246.170411][ T31] audit: type=1800 audit(1788693654.380:1169): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 246.190658][ T1220] usb 4-1: device descriptor read/64, error -71 [ 246.260338][ T31] audit: type=1800 audit(1788693654.470:1170): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 246.293684][ T1220] usb usb4-port1: attempt power cycle [ 246.422924][ T5764] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 246.445177][ T5764] usb 6-1: device descriptor read/8, error -71 [ 246.638934][ T1220] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 246.669488][ T1220] usb 4-1: device descriptor read/8, error -71 [ 246.683443][ T5764] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 246.703947][ T5764] usb 6-1: device descriptor read/8, error -71 [ 246.706835][ T9807] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1191'. [ 246.706871][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1191'. [ 246.706892][ T9807] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1191'. [ 246.815466][ T5764] usb usb6-port1: unable to enumerate USB device [ 246.905737][ T1220] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 246.924997][ T1220] usb 4-1: device descriptor read/8, error -71 [ 247.034815][ T1220] usb usb4-port1: unable to enumerate USB device [ 247.364047][ T5628] Bluetooth: hci7: command tx timeout [ 248.250150][ T1220] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 248.270703][ T1220] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.012750][ T9848] fido_id[9848]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 249.087895][ T9853] FAULT_INJECTION: forcing a failure. [ 249.087895][ T9853] name failslab, interval 1, probability 0, space 0, times 0 [ 249.087930][ T9853] CPU: 0 UID: 0 PID: 9853 Comm: syz.5.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.087958][ T9853] Tainted: [L]=SOFTLOCKUP [ 249.087965][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.087977][ T9853] Call Trace: [ 249.087985][ T9853] [ 249.087995][ T9853] dump_stack_lvl+0xe8/0x150 [ 249.088026][ T9853] should_fail_ex+0x3eb/0x540 [ 249.088054][ T9853] should_failslab+0xa8/0x100 [ 249.088079][ T9853] ? dst_alloc+0x105/0x170 [ 249.088106][ T9853] kmem_cache_alloc_noprof+0x9c/0x600 [ 249.088131][ T9853] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.088159][ T9853] ? arch_stack_walk+0xfb/0x150 [ 249.088178][ T9853] ? dst_alloc+0x105/0x170 [ 249.088209][ T9853] dst_alloc+0x105/0x170 [ 249.088232][ T9853] ? ip_check_mc_rcu+0x68a/0x7c0 [ 249.088256][ T9853] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 249.088293][ T9853] ? ip_route_output_key_hash+0xd8/0x2a0 [ 249.088322][ T9853] ip_route_output_key_hash+0x18d/0x2a0 [ 249.088347][ T9853] ? __kasan_slab_free+0x5c/0x80 [ 249.088365][ T9853] ? kfree+0x1c5/0x650 [ 249.088391][ T9853] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 249.088421][ T9853] ? lock_acquire+0x115/0x350 [ 249.088459][ T9853] ip_route_output_flow+0x2a/0x150 [ 249.088483][ T9853] ? security_sk_classify_flow+0x6d/0x150 [ 249.088515][ T9853] udp_sendmsg+0x144a/0x2140 [ 249.088561][ T9853] ? __pfx_udp_sendmsg+0x10/0x10 [ 249.088594][ T9853] ? trace_hrtimer_start+0x82/0x200 [ 249.088630][ T9853] ? hrtimer_start_range_ns_common+0x83b/0xb90 [ 249.088667][ T9853] ? finish_task_switch+0x40e/0xc60 [ 249.088690][ T9853] ? lockdep_hardirqs_on+0x7b/0x110 [ 249.088723][ T9853] ? rcu_is_watching+0x16/0xb0 [ 249.088744][ T9853] ? trace_sched_exit_tp+0x3a/0x130 [ 249.088764][ T9853] ? begin_current_label_crit_section+0x299/0x830 [ 249.088805][ T9853] udpv6_sendmsg+0x915/0x2610 [ 249.088850][ T9853] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 249.088909][ T9853] ? __asan_memset+0x22/0x50 [ 249.088944][ T9853] ? inet_send_prepare+0x5b/0x260 [ 249.088972][ T9853] ? inet6_sendmsg+0xe4/0x120 [ 249.088998][ T9853] ? __pfx_inet6_sendmsg+0x10/0x10 [ 249.089022][ T9853] sock_sendmsg_nosec+0x90/0x180 [ 249.089053][ T9853] sock_write_iter+0x2de/0x3e0 [ 249.089080][ T9853] ? __pfx_sock_write_iter+0x10/0x10 [ 249.089110][ T9853] ? bpf_lsm_file_permission+0x9/0x20 [ 249.089134][ T9853] ? security_file_permission+0x75/0x260 [ 249.089171][ T9853] vfs_write+0x612/0xba0 [ 249.089207][ T9853] ? __pfx_vfs_write+0x10/0x10 [ 249.089243][ T9853] ? __fget_files+0x2a/0x420 [ 249.089277][ T9853] ksys_write+0x150/0x270 [ 249.089307][ T9853] ? __pfx_ksys_write+0x10/0x10 [ 249.089344][ T9853] do_syscall_64+0x166/0x520 [ 249.089362][ T9853] ? trace_irq_disable+0x3b/0x140 [ 249.089388][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.089406][ T9853] ? clear_bhb_loop+0x70/0xc0 [ 249.089427][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.089449][ T9853] RIP: 0033:0x7f09c299e159 [ 249.089469][ T9853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.089484][ T9853] RSP: 002b:00007f09c3886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.089505][ T9853] RAX: ffffffffffffffda RBX: 00007f09c2c25fa0 RCX: 00007f09c299e159 [ 249.089520][ T9853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 249.089533][ T9853] RBP: 00007f09c2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 249.089547][ T9853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.089559][ T9853] R13: 00007f09c2c26038 R14: 00007f09c2c25fa0 R15: 00007ffed954cdf8 [ 249.089591][ T9853] [ 249.401168][ T5628] Bluetooth: hci7: command tx timeout [ 250.423775][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1208'. [ 250.489135][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 250.489154][ T31] audit: type=1800 audit(1788693658.696:1191): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 251.024638][ T30] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 251.087951][ T31] audit: type=1800 audit(1788693659.296:1192): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 251.231389][ T30] usb 9-1: device descriptor read/64, error -71 [ 251.417326][ T31] audit: type=1800 audit(1788693659.615:1193): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 251.464690][ T31] audit: type=1800 audit(1788693659.665:1194): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 251.469019][ T30] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 251.531815][ T9901] FAULT_INJECTION: forcing a failure. [ 251.531815][ T9901] name failslab, interval 1, probability 0, space 0, times 0 [ 251.531851][ T9901] CPU: 0 UID: 0 PID: 9901 Comm: syz.3.1214 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.531880][ T9901] Tainted: [L]=SOFTLOCKUP [ 251.531887][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.531900][ T9901] Call Trace: [ 251.531908][ T9901] [ 251.531917][ T9901] dump_stack_lvl+0xe8/0x150 [ 251.531957][ T9901] should_fail_ex+0x3eb/0x540 [ 251.531986][ T9901] should_failslab+0xa8/0x100 [ 251.532011][ T9901] __kmalloc_noprof+0xf9/0x710 [ 251.532041][ T9901] ? __alloc_workqueue+0x10f/0x1b70 [ 251.532070][ T9901] ? __alloc_workqueue+0x10f/0x1b70 [ 251.532105][ T9901] __alloc_workqueue+0x10f/0x1b70 [ 251.532133][ T9901] ? vsnprintf+0xe42/0xef0 [ 251.532170][ T9901] alloc_workqueue_noprof+0xe3/0x210 [ 251.532205][ T9901] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 251.532240][ T9901] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.532270][ T9901] nci_register_device+0x3ff/0xa00 [ 251.532300][ T9901] ? __pfx_nci_register_device+0x10/0x10 [ 251.532321][ T9901] ? __raw_spin_lock_init+0x45/0x100 [ 251.532349][ T9901] ? __raw_spin_lock_init+0x45/0x100 [ 251.532374][ T9901] ? __init_waitqueue_head+0xa8/0x150 [ 251.532402][ T9901] virtual_ncidev_open+0x129/0x1a0 [ 251.532428][ T9901] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 251.532447][ T9901] misc_open+0x2d5/0x350 [ 251.532480][ T9901] chrdev_open+0x4d9/0x600 [ 251.532506][ T9901] ? __pfx_chrdev_open+0x10/0x10 [ 251.532529][ T9901] ? devcgroup_check_permission+0x31/0x8f0 [ 251.532563][ T9901] ? __pfx_chrdev_open+0x10/0x10 [ 251.532583][ T9901] do_dentry_open+0x80e/0x1360 [ 251.532616][ T9901] vfs_open_consume+0x4a/0x350 [ 251.532636][ T9901] ? path_openat+0x14bb/0x1e40 [ 251.532669][ T9901] path_openat+0x14d7/0x1e40 [ 251.532717][ T9901] do_file_open+0x23e/0x4a0 [ 251.532752][ T9901] ? __pfx_do_file_open+0x10/0x10 [ 251.532805][ T9901] ? _raw_spin_unlock+0x28/0x50 [ 251.532831][ T9901] ? alloc_fd+0x651/0x6c0 [ 251.532866][ T9901] do_sys_openat2+0x115/0x200 [ 251.532889][ T9901] ? __se_sys_futex+0x3a8/0x450 [ 251.532912][ T9901] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.532941][ T9901] ? rcu_is_watching+0x16/0xb0 [ 251.532973][ T9901] __x64_sys_openat+0x138/0x170 [ 251.533001][ T9901] do_syscall_64+0x166/0x520 [ 251.533020][ T9901] ? trace_irq_disable+0x3b/0x140 [ 251.533050][ T9901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.533071][ T9901] ? clear_bhb_loop+0x70/0xc0 [ 251.533096][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.533116][ T9901] RIP: 0033:0x7fc74e99e159 [ 251.533136][ T9901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.533154][ T9901] RSP: 002b:00007fc74cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.533178][ T9901] RAX: ffffffffffffffda RBX: 00007fc74ec25fa0 RCX: 00007fc74e99e159 [ 251.533194][ T9901] RDX: 000000000000003e RSI: 0000200000000080 RDI: ffffffffffffff9c [ 251.533209][ T9901] RBP: 00007fc74ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 251.533222][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.533235][ T9901] R13: 00007fc74ec26038 R14: 00007fc74ec25fa0 R15: 00007ffd12fe67c8 [ 251.533268][ T9901] [ 251.605045][ T30] usb 9-1: device descriptor read/64, error -71 [ 251.617530][ T31] audit: type=1800 audit(1788693659.815:1195): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 251.708788][ T30] usb usb9-port1: attempt power cycle [ 251.767295][ T31] audit: type=1800 audit(1788693659.965:1196): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 252.049538][ T30] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 252.069044][ T30] usb 9-1: device descriptor read/8, error -71 [ 252.121585][ T9922] Set syz1 is full, maxelem 65536 reached [ 252.308468][ T30] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 252.331604][ T30] usb 9-1: device descriptor read/8, error -71 [ 252.385051][ T31] audit: type=1800 audit(1788693660.584:1197): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 252.439118][ T30] usb usb9-port1: unable to enumerate USB device [ 252.525458][ T31] audit: type=1800 audit(1788693660.724:1198): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 252.784462][ T31] audit: type=1800 audit(1788693660.984:1199): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 253.348083][ T31] audit: type=1800 audit(1788693661.544:1200): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 253.398768][ T9952] FAULT_INJECTION: forcing a failure. [ 253.398768][ T9952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.398801][ T9952] CPU: 1 UID: 0 PID: 9952 Comm: syz.7.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.398829][ T9952] Tainted: [L]=SOFTLOCKUP [ 253.398839][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.398852][ T9952] Call Trace: [ 253.398860][ T9952] [ 253.398869][ T9952] dump_stack_lvl+0xe8/0x150 [ 253.398899][ T9952] should_fail_ex+0x3eb/0x540 [ 253.398928][ T9952] prepare_alloc_pages+0x21e/0x5f0 [ 253.398965][ T9952] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 253.398999][ T9952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 253.399029][ T9952] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.399060][ T9952] ? _raw_spin_unlock_irq+0x2e/0x50 [ 253.399090][ T9952] ? policy_nodemask+0x2cc/0x8e0 [ 253.399117][ T9952] alloc_pages_mpol+0x21e/0x390 [ 253.399142][ T9952] ? snd_seq_oss_readq_new+0x3c/0x1d0 [ 253.399171][ T9952] ___kmalloc_large_node+0x7b/0x170 [ 253.399202][ T9952] __kmalloc_large_node_noprof+0x18/0x90 [ 253.399230][ T9952] __kmalloc_noprof+0x3f6/0x710 [ 253.399255][ T9952] ? snd_seq_queue_alloc+0x57c/0x740 [ 253.399282][ T9952] ? snd_seq_oss_readq_new+0x3c/0x1d0 [ 253.399317][ T9952] snd_seq_oss_readq_new+0x3c/0x1d0 [ 253.399347][ T9952] snd_seq_oss_open+0x803/0xf40 [ 253.399375][ T9952] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 253.399431][ T9952] ? rcu_is_watching+0x16/0xb0 [ 253.399457][ T9952] ? trace_contention_end+0x3d/0x140 [ 253.399516][ T9952] ? __pfx___mutex_lock+0x10/0x10 [ 253.399539][ T9952] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 253.399562][ T9952] ? __pfx_free_devinfo+0x10/0x10 [ 253.399582][ T9952] ? do_raw_spin_unlock+0xf5/0x200 [ 253.399610][ T9952] ? soundcore_open+0x2da/0x490 [ 253.399637][ T9952] odev_open+0x67/0xa0 [ 253.399664][ T9952] chrdev_open+0x4d9/0x600 [ 253.399687][ T9952] ? __pfx_chrdev_open+0x10/0x10 [ 253.399709][ T9952] ? devcgroup_check_permission+0x31/0x8f0 [ 253.399751][ T9952] ? __pfx_chrdev_open+0x10/0x10 [ 253.399771][ T9952] do_dentry_open+0x80e/0x1360 [ 253.399803][ T9952] vfs_open_consume+0x4a/0x350 [ 253.399825][ T9952] ? path_openat+0x14bb/0x1e40 [ 253.399856][ T9952] path_openat+0x14d7/0x1e40 [ 253.399908][ T9952] do_file_open+0x23e/0x4a0 [ 253.399941][ T9952] ? __pfx_do_file_open+0x10/0x10 [ 253.399988][ T9952] ? _raw_spin_unlock+0x28/0x50 [ 253.400014][ T9952] ? alloc_fd+0x651/0x6c0 [ 253.400049][ T9952] do_sys_openat2+0x115/0x200 [ 253.400072][ T9952] ? __se_sys_futex+0x3a8/0x450 [ 253.400095][ T9952] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.400123][ T9952] ? rcu_is_watching+0x16/0xb0 [ 253.400148][ T9952] __x64_sys_openat+0x138/0x170 [ 253.400175][ T9952] do_syscall_64+0x166/0x520 [ 253.400194][ T9952] ? trace_irq_disable+0x3b/0x140 [ 253.400222][ T9952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.400242][ T9952] ? clear_bhb_loop+0x70/0xc0 [ 253.400267][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.400286][ T9952] RIP: 0033:0x7f384919e159 [ 253.400305][ T9952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.400323][ T9952] RSP: 002b:00007f384a00a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.400346][ T9952] RAX: ffffffffffffffda RBX: 00007f3849425fa0 RCX: 00007f384919e159 [ 253.400362][ T9952] RDX: 0000000000042000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 253.400377][ T9952] RBP: 00007f3849235024 R08: 0000000000000000 R09: 0000000000000000 [ 253.400390][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.400402][ T9952] R13: 00007f3849426038 R14: 00007f3849425fa0 R15: 00007ffccea9e8c8 [ 253.400434][ T9952] [ 253.775186][ T9955] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1231'. [ 253.775212][ T9955] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1231'. [ 254.391921][ T9982] FAULT_INJECTION: forcing a failure. [ 254.391921][ T9982] name failslab, interval 1, probability 0, space 0, times 0 [ 254.391963][ T9982] CPU: 0 UID: 0 PID: 9982 Comm: syz.8.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.391993][ T9982] Tainted: [L]=SOFTLOCKUP [ 254.392001][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.392014][ T9982] Call Trace: [ 254.392022][ T9982] [ 254.392031][ T9982] dump_stack_lvl+0xe8/0x150 [ 254.392064][ T9982] should_fail_ex+0x3eb/0x540 [ 254.392093][ T9982] should_failslab+0xa8/0x100 [ 254.392118][ T9982] __kmalloc_cache_node_noprof+0xa5/0x620 [ 254.392151][ T9982] ? __get_vm_area_node+0x155/0x2f0 [ 254.392176][ T9982] ? __get_vm_area_node+0x155/0x2f0 [ 254.392202][ T9982] ? kasan_save_track+0x4f/0x80 [ 254.392236][ T9982] __get_vm_area_node+0x155/0x2f0 [ 254.392260][ T9982] ? video_usercopy+0x860/0x1430 [ 254.392286][ T9982] ? __se_sys_ioctl+0xfc/0x170 [ 254.392320][ T9982] __vmalloc_node_range_noprof+0x340/0x1690 [ 254.392356][ T9982] ? vb2_vmalloc_alloc+0xef/0x360 [ 254.392416][ T9982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.392445][ T9982] ? __kasan_kmalloc+0x93/0xb0 [ 254.392466][ T9982] ? __kmalloc_cache_noprof+0x31c/0x600 [ 254.392500][ T9982] vmalloc_user_noprof+0xad/0xe0 [ 254.392528][ T9982] ? vb2_vmalloc_alloc+0xef/0x360 [ 254.392555][ T9982] vb2_vmalloc_alloc+0xef/0x360 [ 254.392580][ T9982] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 254.392608][ T9982] __vb2_queue_alloc+0xa0b/0x1660 [ 254.392657][ T9982] vb2_core_reqbufs+0xc3f/0x1470 [ 254.392696][ T9982] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 254.392719][ T9982] ? vb2_verify_memory_type+0x1fc/0x570 [ 254.392746][ T9982] ? vb2_reqbufs+0x399/0x630 [ 254.392777][ T9982] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 254.392810][ T9982] __video_do_ioctl+0x8af/0xc70 [ 254.392845][ T9982] ? __pfx___video_do_ioctl+0x10/0x10 [ 254.392874][ T9982] ? __might_fault+0xaf/0x130 [ 254.392907][ T9982] video_usercopy+0x860/0x1430 [ 254.392941][ T9982] ? __pfx___video_do_ioctl+0x10/0x10 [ 254.392969][ T9982] ? __pfx_video_usercopy+0x10/0x10 [ 254.393006][ T9982] ? __fget_files+0x2a/0x420 [ 254.393034][ T9982] ? __fget_files+0x2a/0x420 [ 254.393058][ T9982] ? __fget_files+0x3a2/0x420 [ 254.393086][ T9982] v4l2_ioctl+0x18d/0x1e0 [ 254.393112][ T9982] ? __pfx_v4l2_ioctl+0x10/0x10 [ 254.393137][ T9982] __se_sys_ioctl+0xfc/0x170 [ 254.393170][ T9982] do_syscall_64+0x166/0x520 [ 254.393188][ T9982] ? trace_irq_disable+0x3b/0x140 [ 254.393216][ T9982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.393237][ T9982] ? clear_bhb_loop+0x70/0xc0 [ 254.393266][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.393286][ T9982] RIP: 0033:0x7fbbab99e159 [ 254.393306][ T9982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.393324][ T9982] RSP: 002b:00007fbbac7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.393354][ T9982] RAX: ffffffffffffffda RBX: 00007fbbabc25fa0 RCX: 00007fbbab99e159 [ 254.393370][ T9982] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 254.393384][ T9982] RBP: 00007fbbaba35024 R08: 0000000000000000 R09: 0000000000000000 [ 254.393397][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.393409][ T9982] R13: 00007fbbabc26038 R14: 00007fbbabc25fa0 R15: 00007ffe02430078 [ 254.393442][ T9982] [ 254.510462][ T9982] syz.8.1244: vmalloc error: size 614400, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 254.510565][ T9982] CPU: 1 UID: 0 PID: 9982 Comm: syz.8.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.510592][ T9982] Tainted: [L]=SOFTLOCKUP [ 254.510599][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.510611][ T9982] Call Trace: [ 254.510619][ T9982] [ 254.510627][ T9982] dump_stack_lvl+0xe8/0x150 [ 254.510666][ T9982] warn_alloc+0x24d/0x270 [ 254.510695][ T9982] ? __kasan_kmalloc+0x22/0xb0 [ 254.510719][ T9982] ? __pfx_warn_alloc+0x10/0x10 [ 254.510745][ T9982] ? __get_vm_area_node+0x155/0x2f0 [ 254.510771][ T9982] ? kasan_save_track+0x4f/0x80 [ 254.510803][ T9982] ? __get_vm_area_node+0x2a9/0x2f0 [ 254.510824][ T9982] ? video_usercopy+0x860/0x1430 [ 254.510857][ T9982] __vmalloc_node_range_noprof+0x368/0x1690 [ 254.510915][ T9982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.510941][ T9982] ? __kasan_kmalloc+0x93/0xb0 [ 254.510961][ T9982] ? __kmalloc_cache_noprof+0x31c/0x600 [ 254.510994][ T9982] vmalloc_user_noprof+0xad/0xe0 [ 254.511020][ T9982] ? vb2_vmalloc_alloc+0xef/0x360 [ 254.511047][ T9982] vb2_vmalloc_alloc+0xef/0x360 [ 254.511071][ T9982] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 254.511097][ T9982] __vb2_queue_alloc+0xa0b/0x1660 [ 254.511142][ T9982] vb2_core_reqbufs+0xc3f/0x1470 [ 254.511180][ T9982] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 254.511202][ T9982] ? vb2_verify_memory_type+0x1fc/0x570 [ 254.511226][ T9982] ? vb2_reqbufs+0x399/0x630 [ 254.511256][ T9982] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 254.511288][ T9982] __video_do_ioctl+0x8af/0xc70 [ 254.511322][ T9982] ? __pfx___video_do_ioctl+0x10/0x10 [ 254.511349][ T9982] ? __might_fault+0xaf/0x130 [ 254.511380][ T9982] video_usercopy+0x860/0x1430 [ 254.511411][ T9982] ? __pfx___video_do_ioctl+0x10/0x10 [ 254.511438][ T9982] ? __pfx_video_usercopy+0x10/0x10 [ 254.511473][ T9982] ? __fget_files+0x2a/0x420 [ 254.511503][ T9982] ? __fget_files+0x2a/0x420 [ 254.511526][ T9982] ? __fget_files+0x3a2/0x420 [ 254.511552][ T9982] v4l2_ioctl+0x18d/0x1e0 [ 254.511576][ T9982] ? __pfx_v4l2_ioctl+0x10/0x10 [ 254.511600][ T9982] __se_sys_ioctl+0xfc/0x170 [ 254.511631][ T9982] do_syscall_64+0x166/0x520 [ 254.511654][ T9982] ? trace_irq_disable+0x3b/0x140 [ 254.511682][ T9982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.511702][ T9982] ? clear_bhb_loop+0x70/0xc0 [ 254.511727][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.511745][ T9982] RIP: 0033:0x7fbbab99e159 [ 254.511764][ T9982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.511781][ T9982] RSP: 002b:00007fbbac7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.511800][ T9982] RAX: ffffffffffffffda RBX: 00007fbbabc25fa0 RCX: 00007fbbab99e159 [ 254.511814][ T9982] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 254.511827][ T9982] RBP: 00007fbbaba35024 R08: 0000000000000000 R09: 0000000000000000 [ 254.511839][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.511851][ T9982] R13: 00007fbbabc26038 R14: 00007fbbabc25fa0 R15: 00007ffe02430078 [ 254.511881][ T9982] [ 254.513056][ T9982] Mem-Info: [ 254.513066][ T9982] active_anon:13206 inactive_anon:25 isolated_anon:0 [ 254.513066][ T9982] active_file:16 inactive_file:43816 isolated_file:0 [ 254.513066][ T9982] unevictable:0 dirty:66 writeback:0 [ 254.513066][ T9982] slab_reclaimable:11038 slab_unreclaimable:107626 [ 254.513066][ T9982] mapped:48175 shmem:6262 pagetables:1582 [ 254.513066][ T9982] sec_pagetables:0 bounce:0 [ 254.513066][ T9982] kernel_misc_reclaimable:0 [ 254.513066][ T9982] free:1271768 free_pcp:11570 free_cma:0 [ 254.513119][ T9982] Node 0 active_anon:52824kB inactive_anon:100kB active_file:64kB inactive_file:175056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192700kB dirty:260kB writeback:0kB shmem:25048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13884kB pagetables:6200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 254.513175][ T9982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 254.513226][ T9982] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.513282][ T9982] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 254.513318][ T9982] Node 0 DMA32 free:1139000kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52824kB inactive_anon:100kB active_file:64kB inactive_file:175056kB unevictable:0kB writepending:260kB zspages:632kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:46276kB local_pcp:24232kB free_cma:0kB [ 254.513377][ T9982] lowmem_reserve[]: 0 0 1 1 1 [ 254.513410][ T9982] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 254.513465][ T9982] lowmem_reserve[]: 0 0 0 0 0 [ 254.513497][ T9982] Node 1 Normal free:3932712kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.513554][ T9982] lowmem_reserve[]: 0 0 0 0 0 [ 254.513586][ T9982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 254.513734][ T9982] Node 0 DMA32: 111*4kB (UME) 31*8kB (UME) 6*16kB (UME) 19*32kB (UME) 18*64kB (UM) 36*128kB (UM) 33*256kB (UME) 22*512kB (M) 16*1024kB (UM) 15*2048kB (UME) 260*4096kB (M) = 1138932kB [ 254.513890][ T9982] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 254.513986][ T9982] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 7*32kB (UM) 9*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3932712kB [ 254.520213][ T9982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.520232][ T9982] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 254.520249][ T9982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.520265][ T9982] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 254.520281][ T9982] 50091 total pagecache pages [ 254.520289][ T9982] 1 pages in swap cache [ 254.520297][ T9982] Free swap = 124808kB [ 254.520303][ T9982] Total swap = 124996kB [ 254.520312][ T9982] 2097051 pages RAM [ 254.520319][ T9982] 0 pages HighMem/MovableOnly [ 254.520326][ T9982] 429554 pages reserved [ 254.520333][ T9982] 0 pages cma reserved [ 254.614031][ T30] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 254.740578][ T30] usb 6-1: device descriptor read/64, error -71 [ 254.981931][ T30] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 255.110893][ T30] usb 6-1: device descriptor read/64, error -71 [ 255.283074][ T30] usb usb6-port1: attempt power cycle [ 255.304429][ T9993] FAULT_INJECTION: forcing a failure. [ 255.304429][ T9993] name failslab, interval 1, probability 0, space 0, times 0 [ 255.304464][ T9993] CPU: 1 UID: 0 PID: 9993 Comm: syz.8.1247 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.304493][ T9993] Tainted: [L]=SOFTLOCKUP [ 255.304500][ T9993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.304512][ T9993] Call Trace: [ 255.304520][ T9993] [ 255.304529][ T9993] dump_stack_lvl+0xe8/0x150 [ 255.304560][ T9993] should_fail_ex+0x3eb/0x540 [ 255.304598][ T9993] should_failslab+0xa8/0x100 [ 255.304619][ T9993] ? vm_area_dup+0x28/0x760 [ 255.304645][ T9993] kmem_cache_alloc_noprof+0x9c/0x600 [ 255.304674][ T9993] ? ptlock_alloc+0x20/0x70 [ 255.304699][ T9993] ? vm_area_dup+0x28/0x760 [ 255.304725][ T9993] ? __kasan_slab_alloc+0x6c/0x80 [ 255.304748][ T9993] vm_area_dup+0x28/0x760 [ 255.304772][ T9993] ? __split_vma+0x1b7/0xa60 [ 255.304797][ T9993] __split_vma+0x1d7/0xa60 [ 255.304826][ T9993] ? __pfx___split_vma+0x10/0x10 [ 255.304858][ T9993] ? __lock_acquire+0x747/0x2de0 [ 255.304892][ T9993] vms_gather_munmap_vmas+0x322/0x1370 [ 255.304925][ T9993] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 255.304946][ T9993] ? do_raw_spin_lock+0x12b/0x2f0 [ 255.304984][ T9993] do_vmi_align_munmap+0x2b4/0x4b0 [ 255.305019][ T9993] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 255.305056][ T9993] ? mas_walk+0x37e/0x490 [ 255.305085][ T9993] ? mas_find+0x642/0xcb0 [ 255.305107][ T9993] do_vmi_munmap+0x252/0x2d0 [ 255.305132][ T9993] move_vma+0x11bd/0x1850 [ 255.305169][ T9993] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 255.305201][ T9993] ? __pfx_move_vma+0x10/0x10 [ 255.305227][ T9993] ? mtree_load+0x12a/0x780 [ 255.305256][ T9993] ? cap_mmap_addr+0xaa/0xf0 [ 255.305275][ T9993] ? bpf_lsm_mmap_addr+0x9/0x50 [ 255.305308][ T9993] mremap_to+0x7f9/0x8d0 [ 255.305332][ T9993] ? __pfx_mremap_to+0x10/0x10 [ 255.305351][ T9993] ? __pfx_mtree_load+0x10/0x10 [ 255.305370][ T9993] ? __pfx_check_prep_vma+0x10/0x10 [ 255.305393][ T9993] ? futex_wait+0x2a2/0x390 [ 255.305428][ T9993] __se_sys_mremap+0xf59/0x12d0 [ 255.305457][ T9993] ? __pfx___se_sys_mremap+0x10/0x10 [ 255.305475][ T9993] ? do_futex+0x3e7/0x4e0 [ 255.305509][ T9993] ? __pfx_do_futex+0x10/0x10 [ 255.305539][ T9993] ? __se_sys_futex+0x3a8/0x450 [ 255.305584][ T9993] ? __x64_sys_mremap+0x20/0xc0 [ 255.305606][ T9993] do_syscall_64+0x166/0x520 [ 255.305624][ T9993] ? trace_irq_disable+0x3b/0x140 [ 255.305651][ T9993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.305671][ T9993] ? clear_bhb_loop+0x70/0xc0 [ 255.305695][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.305715][ T9993] RIP: 0033:0x7fbbab99e159 [ 255.305734][ T9993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.305750][ T9993] RSP: 002b:00007fbbac7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 255.305771][ T9993] RAX: ffffffffffffffda RBX: 00007fbbabc25fa0 RCX: 00007fbbab99e159 [ 255.305786][ T9993] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 255.305799][ T9993] RBP: 00007fbbaba35024 R08: 0000200000ffd000 R09: 0000000000000000 [ 255.305812][ T9993] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 255.305824][ T9993] R13: 00007fbbabc26038 R14: 00007fbbabc25fa0 R15: 00007ffe02430078 [ 255.305859][ T9993] [ 255.440456][ T9991] FAULT_INJECTION: forcing a failure. [ 255.440456][ T9991] name fail_futex, interval 1, probability 0, space 0, times 0 [ 255.440490][ T9991] CPU: 1 UID: 0 PID: 9991 Comm: syz.7.1246 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.440515][ T9991] Tainted: [L]=SOFTLOCKUP [ 255.440523][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.440535][ T9991] Call Trace: [ 255.440543][ T9991] [ 255.440551][ T9991] dump_stack_lvl+0xe8/0x150 [ 255.440589][ T9991] should_fail_ex+0x3eb/0x540 [ 255.440614][ T9991] get_futex_key+0xf12/0x1580 [ 255.440654][ T9991] ? __pfx_get_futex_key+0x10/0x10 [ 255.440693][ T9991] futex_wake+0x119/0x5f0 [ 255.440721][ T9991] ? __pfx_futex_wake+0x10/0x10 [ 255.440753][ T9991] ? mm_exit_exec_release+0x20/0x290 [ 255.440778][ T9991] do_futex+0x458/0x4e0 [ 255.440803][ T9991] ? __pfx_do_futex+0x10/0x10 [ 255.440827][ T9991] ? __might_fault+0xaf/0x130 [ 255.440853][ T9991] mm_exit_exec_release+0x10d/0x290 [ 255.440877][ T9991] exit_mm+0x4d/0x2d0 [ 255.440906][ T9991] do_exit+0x6cd/0x2360 [ 255.440938][ T9991] ? __pfx_do_exit+0x10/0x10 [ 255.440970][ T9991] ? do_raw_spin_lock+0x12b/0x2f0 [ 255.441001][ T9991] do_group_exit+0x22d/0x2f0 [ 255.441026][ T9991] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.441054][ T9991] get_signal+0x1216/0x12c0 [ 255.441085][ T9991] ? __asan_memcpy+0x40/0x70 [ 255.441117][ T9991] arch_do_signal_or_restart+0xbb/0x860 [ 255.441144][ T9991] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 255.441184][ T9991] exit_to_user_mode_loop+0x10e/0x770 [ 255.441212][ T9991] ? rcu_is_watching+0x16/0xb0 [ 255.441234][ T9991] do_syscall_64+0x328/0x520 [ 255.441251][ T9991] ? trace_irq_disable+0x3b/0x140 [ 255.441277][ T9991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.441296][ T9991] ? clear_bhb_loop+0x70/0xc0 [ 255.441318][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.441337][ T9991] RIP: 0033:0x7f384919e159 [ 255.441354][ T9991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.441370][ T9991] RSP: 002b:00007f384a00a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 255.441391][ T9991] RAX: 0000000000000001 RBX: 00007f3849425fa8 RCX: 00007f384919e159 [ 255.441405][ T9991] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3849425fac [ 255.441417][ T9991] RBP: 00007f3849425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 255.441431][ T9991] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 255.441442][ T9991] R13: 00007f3849426038 R14: 00007ffccea9e7e0 R15: 00007ffccea9e8c8 [ 255.441472][ T9991] [ 255.622690][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 255.622708][ T31] audit: type=1800 audit(1788693663.822:1219): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 255.622786][ T30] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 255.644802][ T30] usb 6-1: device descriptor read/8, error -71 [ 255.737319][ T9999] FAULT_INJECTION: forcing a failure. [ 255.737319][ T9999] name failslab, interval 1, probability 0, space 0, times 0 [ 255.737353][ T9999] CPU: 1 UID: 0 PID: 9999 Comm: syz.3.1250 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.737379][ T9999] Tainted: [L]=SOFTLOCKUP [ 255.737386][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.737398][ T9999] Call Trace: [ 255.737406][ T9999] [ 255.737415][ T9999] dump_stack_lvl+0xe8/0x150 [ 255.737446][ T9999] should_fail_ex+0x3eb/0x540 [ 255.737472][ T9999] ? __alloc_skb+0x1db/0x7a0 [ 255.737491][ T9999] should_failslab+0xa8/0x100 [ 255.737514][ T9999] ? __alloc_skb+0x1db/0x7a0 [ 255.737537][ T9999] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 255.737565][ T9999] ? __alloc_skb+0x18d/0x7a0 [ 255.737583][ T9999] ? __alloc_skb+0x1db/0x7a0 [ 255.737606][ T9999] __alloc_skb+0x1db/0x7a0 [ 255.737629][ T9999] alloc_skb_with_frags+0xc6/0x760 [ 255.737653][ T9999] ? rcu_is_watching+0x16/0xb0 [ 255.737677][ T9999] sock_alloc_send_pskb+0x95e/0xa70 [ 255.737723][ T9999] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 255.737758][ T9999] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 255.737785][ T9999] unix_dgram_sendmsg+0x445/0x1bc0 [ 255.737815][ T9999] ? aa_file_perm+0x18b/0x15f0 [ 255.737844][ T9999] ? aa_file_perm+0x4ed/0x15f0 [ 255.737868][ T9999] ? aa_file_perm+0x18b/0x15f0 [ 255.737901][ T9999] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 255.737930][ T9999] ? aa_sock_msg_perm+0x129/0x210 [ 255.737957][ T9999] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 255.737986][ T9999] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 255.738012][ T9999] sock_sendmsg_nosec+0x13a/0x180 [ 255.738042][ T9999] sock_write_iter+0x2de/0x3e0 [ 255.738068][ T9999] ? __pfx_sock_write_iter+0x10/0x10 [ 255.738100][ T9999] ? bpf_lsm_file_permission+0x9/0x20 [ 255.738122][ T9999] ? security_file_permission+0x75/0x260 [ 255.738159][ T9999] vfs_write+0x612/0xba0 [ 255.738193][ T9999] ? __pfx_vfs_write+0x10/0x10 [ 255.738226][ T9999] ? __fget_files+0x2a/0x420 [ 255.738258][ T9999] ksys_write+0x150/0x270 [ 255.738286][ T9999] ? __pfx_ksys_write+0x10/0x10 [ 255.738322][ T9999] do_syscall_64+0x166/0x520 [ 255.738339][ T9999] ? trace_irq_disable+0x3b/0x140 [ 255.738366][ T9999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.738386][ T9999] ? clear_bhb_loop+0x70/0xc0 [ 255.738410][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.738430][ T9999] RIP: 0033:0x7fc74e99e159 [ 255.738447][ T9999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.738464][ T9999] RSP: 002b:00007fc74cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.738486][ T9999] RAX: ffffffffffffffda RBX: 00007fc74ec25fa0 RCX: 00007fc74e99e159 [ 255.738501][ T9999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 255.738512][ T9999] RBP: 00007fc74ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 255.738525][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.738542][ T9999] R13: 00007fc74ec26038 R14: 00007fc74ec25fa0 R15: 00007ffd12fe67c8 [ 255.738572][ T9999] [ 255.886252][ T30] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 255.905778][ T30] usb 6-1: device descriptor read/8, error -71 [ 255.927370][ T31] audit: type=1800 audit(1788693664.131:1220): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 255.992579][ T31] audit: type=1800 audit(1788693664.191:1221): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 256.013872][ T30] usb usb6-port1: unable to enumerate USB device [ 256.117770][ T31] audit: type=1800 audit(1788693664.321:1222): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 256.180048][ T31] audit: type=1800 audit(1788693664.381:1223): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 256.211303][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.211357][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.450874][ T31] audit: type=1800 audit(1788693664.651:1224): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163414 res=0 errno=0 [ 256.463545][ T31] audit: type=1800 audit(1788693664.671:1225): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=163418 res=0 errno=0 [ 256.560307][ T31] audit: type=1800 audit(1788693664.761:1226): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 256.580813][ T31] audit: type=1800 audit(1788693664.781:1227): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=163446 res=0 errno=0 [ 256.758715][ T31] audit: type=1800 audit(1788693664.961:1228): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 257.017248][T10027] Bluetooth: hci8: Frame reassembly failed (-84) [ 258.799628][ T2247] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 258.943941][ T2247] usb 4-1: Using ep0 maxpacket: 8 [ 258.947844][ T2247] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.956253][ T2247] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 258.956303][ T2247] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 258.956328][ T2247] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 258.956351][ T2247] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 258.956375][ T2247] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.956414][ T2247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.983798][ T2247] usbtmc 4-1:16.0: bulk endpoints not found [ 259.574539][ T30] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 259.704546][ T30] usb 9-1: device descriptor read/64, error -71 [ 259.948113][ T30] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 260.084858][ T30] usb 9-1: device descriptor read/64, error -71 [ 260.205377][ T30] usb usb9-port1: attempt power cycle [ 260.545408][ T30] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 260.568484][ T30] usb 9-1: device descriptor read/8, error -71 [ 260.810337][ T30] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 260.826181][ T30] usb 9-1: device descriptor read/8, error -71 [ 260.937552][ T30] usb usb9-port1: unable to enumerate USB device [ 260.963128][ T30] usb 4-1: USB disconnect, device number 29 [ 261.596036][ T5764] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 261.756134][ T5764] usb 4-1: Using ep0 maxpacket: 8 [ 261.757017][ T5764] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.758280][ T5764] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 261.758327][ T5764] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 261.758353][ T5764] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 261.758375][ T5764] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 261.758396][ T5764] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 261.758417][ T5764] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.758454][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.803476][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 261.803494][ T31] audit: type=1800 audit(1788693669.997:1252): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163739 res=0 errno=0 [ 261.803531][ T31] audit: type=1800 audit(1788693669.997:1253): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=163768 res=0 errno=0 [ 261.803561][ T31] audit: type=1800 audit(1788693669.997:1254): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=163746 res=0 errno=0 [ 261.803597][ T31] audit: type=1800 audit(1788693669.997:1255): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=163747 res=0 errno=0 [ 261.803633][ T31] audit: type=1800 audit(1788693669.997:1256): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=163748 res=0 errno=0 [ 261.879658][ T31] audit: type=1800 audit(1788693670.057:1257): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163788 res=0 errno=0 [ 262.057890][ T5764] usb 4-1: usb_control_msg returned -32 [ 262.057940][ T5764] usbtmc 4-1:16.0: can't read capabilities [ 262.060293][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.060746][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.071203][ T31] audit: type=1800 audit(1788693670.267:1258): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163805 res=0 errno=0 [ 262.397400][ T31] audit: type=1800 audit(1788693670.586:1259): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 262.522209][ T31] audit: type=1800 audit(1788693670.716:1260): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 262.679792][ T31] audit: type=1800 audit(1788693670.876:1261): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 263.919569][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 264.067896][ T9] usb 8-1: device descriptor read/64, error -71 [ 264.625788][ T2247] usb 4-1: USB disconnect, device number 30 [ 264.661210][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 265.083771][ T9] usb 8-1: device descriptor read/64, error -71 [ 265.189961][ T9] usb usb8-port1: attempt power cycle [ 265.909207][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 265.931236][ T9] usb 8-1: device descriptor read/8, error -71 [ 266.171192][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 266.191584][ T9] usb 8-1: device descriptor read/8, error -71 [ 266.287482][T10196] FAULT_INJECTION: forcing a failure. [ 266.287482][T10196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.287516][T10196] CPU: 0 UID: 0 PID: 10196 Comm: syz.8.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.287548][T10196] Tainted: [L]=SOFTLOCKUP [ 266.287556][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.287569][T10196] Call Trace: [ 266.287577][T10196] [ 266.287587][T10196] dump_stack_lvl+0xe8/0x150 [ 266.287619][T10196] should_fail_ex+0x3eb/0x540 [ 266.287647][T10196] _copy_from_user+0x2d/0xb0 [ 266.287675][T10196] do_fcntl+0x913/0x1a20 [ 266.287710][T10196] ? lock_acquire+0x115/0x350 [ 266.287738][T10196] ? __pfx_do_fcntl+0x10/0x10 [ 266.287775][T10196] ? __fget_files+0x2a/0x420 [ 266.287802][T10196] ? __fget_files+0x2a/0x420 [ 266.287832][T10196] ? bpf_lsm_file_fcntl+0x9/0x20 [ 266.287860][T10196] __se_sys_fcntl+0xc8/0x150 [ 266.287891][T10196] do_syscall_64+0x166/0x520 [ 266.287911][T10196] ? trace_irq_disable+0x3b/0x140 [ 266.287939][T10196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.287960][T10196] ? clear_bhb_loop+0x70/0xc0 [ 266.287986][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.288006][T10196] RIP: 0033:0x7fbbab99e159 [ 266.288026][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.288045][T10196] RSP: 002b:00007fbbac7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 266.288068][T10196] RAX: ffffffffffffffda RBX: 00007fbbabc25fa0 RCX: 00007fbbab99e159 [ 266.288084][T10196] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000003 [ 266.288097][T10196] RBP: 00007fbbaba35024 R08: 0000000000000000 R09: 0000000000000000 [ 266.288117][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.288130][T10196] R13: 00007fbbabc26038 R14: 00007fbbabc25fa0 R15: 00007ffe02430078 [ 266.288161][T10196] [ 266.313979][ T9] usb usb8-port1: unable to enumerate USB device [ 266.855615][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 266.855634][ T31] audit: type=1800 audit(1788693675.043:1284): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 266.909937][ T31] audit: type=1800 audit(1788693675.093:1285): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 267.160423][ T31] audit: type=1800 audit(1788693675.353:1286): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 267.758188][ T31] audit: type=1800 audit(1788693675.952:1287): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 267.904039][ T31] audit: type=1800 audit(1788693676.102:1288): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15582 res=0 errno=0 [ 267.953750][ T31] audit: type=1800 audit(1788693676.152:1289): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 268.195892][ T31] audit: type=1800 audit(1788693676.392:1290): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 268.293236][ T5764] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 268.502229][ T5764] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 268.503583][ T5764] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.503607][ T5764] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 268.503643][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.562225][ T31] audit: type=1800 audit(1788693676.762:1291): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 268.564323][ T31] audit: type=1800 audit(1788693676.762:1292): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164048 res=0 errno=0 [ 268.566089][ T31] audit: type=1800 audit(1788693676.762:1293): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=164077 res=0 errno=0 [ 268.943988][T10245] FAULT_INJECTION: forcing a failure. [ 268.943988][T10245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.944021][T10245] CPU: 1 UID: 0 PID: 10245 Comm: syz.7.1326 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.944038][T10245] Tainted: [L]=SOFTLOCKUP [ 268.944043][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.944050][T10245] Call Trace: [ 268.944055][T10245] [ 268.944060][T10245] dump_stack_lvl+0xe8/0x150 [ 268.944086][T10245] should_fail_ex+0x3eb/0x540 [ 268.944103][T10245] _copy_from_user+0x2d/0xb0 [ 268.944118][T10245] kstrtouint_from_user+0xd6/0x180 [ 268.944132][T10245] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 268.944149][T10245] ? lock_acquire+0x115/0x350 [ 268.944169][T10245] proc_fail_nth_write+0x8e/0x210 [ 268.944187][T10245] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.944207][T10245] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.944222][T10245] vfs_write+0x296/0xba0 [ 268.944242][T10245] ? __pfx_vfs_write+0x10/0x10 [ 268.944257][T10245] ? __fget_files+0x2a/0x420 [ 268.944273][T10245] ? __fget_files+0x3a2/0x420 [ 268.944286][T10245] ? __fget_files+0x2a/0x420 [ 268.944303][T10245] ksys_write+0x150/0x270 [ 268.944319][T10245] ? __pfx_ksys_write+0x10/0x10 [ 268.944339][T10245] do_syscall_64+0x166/0x520 [ 268.944350][T10245] ? trace_irq_disable+0x3b/0x140 [ 268.944365][T10245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.944377][T10245] ? clear_bhb_loop+0x70/0xc0 [ 268.944391][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.944402][T10245] RIP: 0033:0x7f384919e159 [ 268.944413][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.944423][T10245] RSP: 002b:00007f384a00a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.944436][T10245] RAX: ffffffffffffffda RBX: 00007f3849425fa0 RCX: 00007f384919e159 [ 268.944444][T10245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 268.944451][T10245] RBP: 00007f3849235024 R08: 0000000000000000 R09: 0000000000000000 [ 268.944457][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.944463][T10245] R13: 00007f3849426038 R14: 00007f3849425fa0 R15: 00007ffccea9e8c8 [ 268.944480][T10245] [ 269.440032][ T30] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 270.015349][ T30] usb 8-1: device descriptor read/64, error -71 [ 270.293273][ T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 270.433543][ T30] usb 8-1: device descriptor read/64, error -71 [ 270.544353][ T30] usb usb8-port1: attempt power cycle [ 270.883966][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 270.903876][ T30] usb 8-1: device descriptor read/8, error -71 [ 271.047906][ T5699] usb 4-1: USB disconnect, device number 31 [ 271.142942][ T30] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 271.163940][ T30] usb 8-1: device descriptor read/8, error -71 [ 271.275975][ T30] usb usb8-port1: unable to enumerate USB device [ 271.798153][T10306] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 271.899698][T10306] kvm: MONITOR instruction emulated as NOP! [ 272.010020][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 272.010038][ T31] audit: type=1800 audit(1788693680.200:1328): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 272.048963][ T5699] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 272.080337][ T31] audit: type=1800 audit(1788693680.269:1329): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 272.162409][ T31] audit: type=1800 audit(1788693680.349:1330): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 272.203869][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 272.204782][ T5699] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 272.209732][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.209755][ T5699] usb 6-1: Product: syz [ 272.209768][ T5699] usb 6-1: Manufacturer: syz [ 272.209780][ T5699] usb 6-1: SerialNumber: syz [ 272.214311][ T5699] usb 6-1: config 0 descriptor?? [ 272.231959][ T31] audit: type=1800 audit(1788693680.419:1331): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 272.255293][ T31] audit: type=1800 audit(1788693680.449:1332): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164235 res=0 errno=0 [ 272.258386][ T31] audit: type=1800 audit(1788693680.449:1333): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=164267 res=0 errno=0 [ 272.260867][ T31] audit: type=1800 audit(1788693680.449:1334): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=164242 res=0 errno=0 [ 272.270705][ T31] audit: type=1800 audit(1788693680.459:1335): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=164243 res=0 errno=0 [ 272.300100][ T31] audit: type=1800 audit(1788693680.489:1336): pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1359" name="disksize" dev="sysfs" ino=21040 res=0 errno=0 [ 272.314727][T10322] zram0: detected capacity change from 0 to 8 [ 272.393164][ T5699] usb 6-1: selecting invalid altsetting 1 [ 272.393188][ T5699] technisat-usb2: could not set alternate setting to 0 [ 272.431962][ T31] audit: type=1800 audit(1788693680.619:1337): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 272.453446][ T5700] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 272.461476][ T5699] technisat-usb2: firmware version: 0.0 [ 272.461519][ T5699] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 272.468400][T10325] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1360'. [ 272.475949][T10326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1361'. [ 272.573324][T10329] FAULT_INJECTION: forcing a failure. [ 272.573324][T10329] name failslab, interval 1, probability 0, space 0, times 0 [ 272.573376][T10329] CPU: 1 UID: 0 PID: 10329 Comm: syz.3.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.573402][T10329] Tainted: [L]=SOFTLOCKUP [ 272.573409][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.573420][T10329] Call Trace: [ 272.573428][T10329] [ 272.573435][T10329] dump_stack_lvl+0xe8/0x150 [ 272.573465][T10329] should_fail_ex+0x3eb/0x540 [ 272.573492][T10329] should_failslab+0xa8/0x100 [ 272.573512][T10329] ? __kernfs_new_node+0xe6/0x980 [ 272.573541][T10329] kmem_cache_alloc_noprof+0x9c/0x600 [ 272.573570][T10329] ? __kernfs_new_node+0xe6/0x980 [ 272.573604][T10329] __kernfs_new_node+0xe6/0x980 [ 272.573631][T10329] ? __lock_acquire+0x747/0x2de0 [ 272.573664][T10329] ? __pfx___kernfs_new_node+0x10/0x10 [ 272.573690][T10329] ? kernfs_root+0x1c/0x230 [ 272.573718][T10329] ? kernfs_root+0x1c/0x230 [ 272.573739][T10329] ? kernfs_root+0x1c/0x230 [ 272.573760][T10329] ? kernfs_root+0x1c/0x230 [ 272.573787][T10329] kernfs_create_dir_ns+0xfe/0x230 [ 272.573812][T10329] internal_create_group+0x440/0x1180 [ 272.573847][T10329] ? __pfx_dev_add_physical_location+0x10/0x10 [ 272.573882][T10329] ? sysfs_create_groups+0xa0/0x120 [ 272.573910][T10329] ? __pfx_internal_create_group+0x10/0x10 [ 272.573938][T10329] ? device_add_attrs+0x5c3/0x600 [ 272.573965][T10329] ? __pfx_device_add_attrs+0x10/0x10 [ 272.573993][T10329] dpm_sysfs_add+0x6a/0x270 [ 272.574025][T10329] device_add+0x4ca/0xb80 [ 272.574062][T10329] device_create+0x269/0x300 [ 272.574094][T10329] ? timer_init_key+0x161/0x2c0 [ 272.574124][T10329] ? __pfx_device_create+0x10/0x10 [ 272.574148][T10329] ? ieee80211_roc_setup+0x119/0x1d0 [ 272.574174][T10329] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 272.574208][T10329] mac80211_hwsim_new_radio+0x3f6/0x56b0 [ 272.574248][T10329] ? __pfx___nla_validate_parse+0x10/0x10 [ 272.574286][T10329] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 272.574314][T10329] ? trace_kmalloc+0x2a/0xf0 [ 272.574347][T10329] hwsim_new_radio_nl+0xd8b/0xf90 [ 272.574390][T10329] genl_family_rcv_msg_doit+0x233/0x340 [ 272.574428][T10329] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.574472][T10329] ? bpf_lsm_capable+0x9/0x20 [ 272.574498][T10329] ? security_capable+0x7e/0x2c0 [ 272.574527][T10329] genl_rcv_msg+0x614/0x7a0 [ 272.574562][T10329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.574592][T10329] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 272.574625][T10329] ? __asan_memcpy+0x40/0x70 [ 272.574650][T10329] ? __skb_clone+0x5c/0x6c0 [ 272.574680][T10329] netlink_rcv_skb+0x226/0x4a0 [ 272.574705][T10329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.574732][T10329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.574768][T10329] ? down_read+0x2b9/0x320 [ 272.574793][T10329] genl_rcv+0x28/0x40 [ 272.574819][T10329] netlink_unicast+0x7bd/0x940 [ 272.574851][T10329] netlink_sendmsg+0x7c3/0xae0 [ 272.574882][T10329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.574914][T10329] ? apparmor_socket_sendmsg+0x98/0x360 [ 272.574938][T10329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.574962][T10329] sock_sendmsg_nosec+0x13a/0x180 [ 272.574993][T10329] ____sys_sendmsg+0x54e/0x850 [ 272.575020][T10329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.575059][T10329] ? import_iovec+0x73/0xa0 [ 272.575089][T10329] ___sys_sendmsg+0x2a5/0x360 [ 272.575109][T10329] ? __lock_acquire+0x747/0x2de0 [ 272.575141][T10329] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.575168][T10329] ? futex_wait+0x2a2/0x390 [ 272.575221][T10329] ? __fget_files+0x2a/0x420 [ 272.575264][T10329] ? __fget_files+0x3a2/0x420 [ 272.575300][T10329] __x64_sys_sendmsg+0x1b1/0x290 [ 272.575326][T10329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.575369][T10329] do_syscall_64+0x166/0x520 [ 272.575388][T10329] ? trace_irq_disable+0x3b/0x140 [ 272.575415][T10329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.575437][T10329] ? clear_bhb_loop+0x70/0xc0 [ 272.575462][T10329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.575483][T10329] RIP: 0033:0x7fc74e99e159 [ 272.575503][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.575520][T10329] RSP: 002b:00007fc74cbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.575543][T10329] RAX: ffffffffffffffda RBX: 00007fc74ec25fa0 RCX: 00007fc74e99e159 [ 272.575557][T10329] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 272.575571][T10329] RBP: 00007fc74ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 272.575584][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.575597][T10329] R13: 00007fc74ec26038 R14: 00007fc74ec25fa0 R15: 00007ffd12fe67c8 [ 272.575628][T10329] [ 272.658314][ T5700] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 272.670728][ T5700] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.670758][ T5700] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 272.670796][ T5700] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.035924][T10338] FAULT_INJECTION: forcing a failure. [ 273.035924][T10338] name failslab, interval 1, probability 0, space 0, times 0 [ 273.036047][T10338] CPU: 0 UID: 0 PID: 10338 Comm: syz.3.1365 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.036076][T10338] Tainted: [L]=SOFTLOCKUP [ 273.036083][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.036095][T10338] Call Trace: [ 273.036103][T10338] [ 273.036111][T10338] dump_stack_lvl+0xe8/0x150 [ 273.036143][T10338] should_fail_ex+0x3eb/0x540 [ 273.036174][T10338] should_failslab+0xa8/0x100 [ 273.036202][T10338] __kvmalloc_node_noprof+0x171/0x820 [ 273.036236][T10338] ? __rhashtable_init_noprof+0x545/0xaf0 [ 273.036258][T10338] ? __rhashtable_init_noprof+0x545/0xaf0 [ 273.036286][T10338] __rhashtable_init_noprof+0x545/0xaf0 [ 273.036313][T10338] __rhltable_init_noprof+0x26/0x70 [ 273.036337][T10338] sta_info_init+0x2f/0x130 [ 273.036363][T10338] ieee80211_alloc_hw_nm+0x808/0x1f00 [ 273.036395][T10338] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 273.036428][T10338] mac80211_hwsim_new_radio+0x1ea/0x56b0 [ 273.036498][T10338] ? __pfx___nla_validate_parse+0x10/0x10 [ 273.036539][T10338] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 273.036568][T10338] ? trace_kmalloc+0x2a/0xf0 [ 273.036601][T10338] hwsim_new_radio_nl+0xd8b/0xf90 [ 273.036644][T10338] genl_family_rcv_msg_doit+0x233/0x340 [ 273.036681][T10338] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 273.036722][T10338] ? bpf_lsm_capable+0x9/0x20 [ 273.036748][T10338] ? security_capable+0x7e/0x2c0 [ 273.036775][T10338] genl_rcv_msg+0x614/0x7a0 [ 273.036811][T10338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.036840][T10338] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 273.036871][T10338] ? __asan_memcpy+0x40/0x70 [ 273.036896][T10338] ? __skb_clone+0x5c/0x6c0 [ 273.036924][T10338] netlink_rcv_skb+0x226/0x4a0 [ 273.036949][T10338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.036978][T10338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.037017][T10338] ? down_read+0x2b9/0x320 [ 273.037049][T10338] genl_rcv+0x28/0x40 [ 273.037092][T10338] netlink_unicast+0x7bd/0x940 [ 273.037127][T10338] netlink_sendmsg+0x7c3/0xae0 [ 273.037158][T10338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.037190][T10338] ? apparmor_socket_sendmsg+0x98/0x360 [ 273.037216][T10338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.037240][T10338] sock_sendmsg_nosec+0x13a/0x180 [ 273.037269][T10338] ____sys_sendmsg+0x54e/0x850 [ 273.037297][T10338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.037343][T10338] ? import_iovec+0x73/0xa0 [ 273.037372][T10338] ___sys_sendmsg+0x2a5/0x360 [ 273.037392][T10338] ? __lock_acquire+0x747/0x2de0 [ 273.037426][T10338] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.037451][T10338] ? futex_wait+0x2a2/0x390 [ 273.037503][T10338] ? __fget_files+0x2a/0x420 [ 273.037528][T10338] ? __fget_files+0x3a2/0x420 [ 273.037561][T10338] __x64_sys_sendmsg+0x1b1/0x290 [ 273.037586][T10338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.037627][T10338] do_syscall_64+0x166/0x520 [ 273.037649][T10338] ? trace_irq_disable+0x3b/0x140 [ 273.037678][T10338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.037697][T10338] ? clear_bhb_loop+0x70/0xc0 [ 273.037724][T10338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.037744][T10338] RIP: 0033:0x7fc74e99e159 [ 273.037760][T10338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.037776][T10338] RSP: 002b:00007fc74cbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.037797][T10338] RAX: ffffffffffffffda RBX: 00007fc74ec25fa0 RCX: 00007fc74e99e159 [ 273.037812][T10338] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 273.037826][T10338] RBP: 00007fc74ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 273.037838][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.037850][T10338] R13: 00007fc74ec26038 R14: 00007fc74ec25fa0 R15: 00007ffd12fe67c8 [ 273.037898][T10338] [ 273.517196][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.519291][ T5699] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 273.519344][ T5699] usb 6-1: media controller created [ 273.519391][ T5699] technisat-usb2: i2c-error: out failed 53 = -22 [ 273.519439][ T5699] dvb-usb: MAC address reading failed. [ 273.533882][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.745886][T10355] zram: Cannot change disksize for initialized device [ 273.786411][ T5699] DVB: Unable to find symbol stv090x_attach() [ 273.786899][ T5699] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 273.866377][T10361] FAULT_INJECTION: forcing a failure. [ 273.866377][T10361] name failslab, interval 1, probability 0, space 0, times 0 [ 273.866411][T10361] CPU: 1 UID: 0 PID: 10361 Comm: syz.5.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.866440][T10361] Tainted: [L]=SOFTLOCKUP [ 273.866447][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.866460][T10361] Call Trace: [ 273.866468][T10361] [ 273.866477][T10361] dump_stack_lvl+0xe8/0x150 [ 273.866510][T10361] should_fail_ex+0x3eb/0x540 [ 273.866540][T10361] should_failslab+0xa8/0x100 [ 273.866562][T10361] ? __kernfs_new_node+0xe6/0x980 [ 273.866593][T10361] kmem_cache_alloc_noprof+0x9c/0x600 [ 273.866624][T10361] ? __kernfs_new_node+0xe6/0x980 [ 273.866658][T10361] __kernfs_new_node+0xe6/0x980 [ 273.866697][T10361] ? __pfx___kernfs_new_node+0x10/0x10 [ 273.866728][T10361] ? kernfs_root+0x1c/0x230 [ 273.866762][T10361] ? kernfs_root+0x1c/0x230 [ 273.866790][T10361] ? kernfs_root+0x1c/0x230 [ 273.866816][T10361] ? kernfs_root+0x1c/0x230 [ 273.866848][T10361] kernfs_new_node+0xea/0x140 [ 273.866881][T10361] __kernfs_create_file+0x4b/0x2e0 [ 273.866907][T10361] sysfs_add_file_mode_ns+0x237/0x300 [ 273.866938][T10361] sysfs_merge_group+0x183/0x320 [ 273.866977][T10361] ? __pfx_sysfs_merge_group+0x10/0x10 [ 273.867006][T10361] ? device_add_attrs+0x5c3/0x600 [ 273.867033][T10361] ? __pfx_device_add_attrs+0x10/0x10 [ 273.867062][T10361] dpm_sysfs_add+0xd2/0x270 [ 273.867093][T10361] device_add+0x4ca/0xb80 [ 273.867118][T10361] device_create+0x269/0x300 [ 273.867148][T10361] ? timer_init_key+0x161/0x2c0 [ 273.867177][T10361] ? __pfx_device_create+0x10/0x10 [ 273.867204][T10361] ? ieee80211_roc_setup+0x119/0x1d0 [ 273.867231][T10361] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 273.867266][T10361] mac80211_hwsim_new_radio+0x3f6/0x56b0 [ 273.867308][T10361] ? __pfx___nla_validate_parse+0x10/0x10 [ 273.867354][T10361] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 273.867387][T10361] ? trace_kmalloc+0x2a/0xf0 [ 273.867421][T10361] hwsim_new_radio_nl+0xd8b/0xf90 [ 273.867466][T10361] genl_family_rcv_msg_doit+0x233/0x340 [ 273.867506][T10361] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 273.867549][T10361] ? bpf_lsm_capable+0x9/0x20 [ 273.867576][T10361] ? security_capable+0x7e/0x2c0 [ 273.867605][T10361] genl_rcv_msg+0x614/0x7a0 [ 273.867642][T10361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.867671][T10361] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 273.867704][T10361] ? __asan_memcpy+0x40/0x70 [ 273.867731][T10361] ? __skb_clone+0x5c/0x6c0 [ 273.867760][T10361] netlink_rcv_skb+0x226/0x4a0 [ 273.867787][T10361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.867819][T10361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.867859][T10361] ? down_read+0x2b9/0x320 [ 273.867885][T10361] genl_rcv+0x28/0x40 [ 273.867914][T10361] netlink_unicast+0x7bd/0x940 [ 273.867954][T10361] netlink_sendmsg+0x7c3/0xae0 [ 273.867987][T10361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.868021][T10361] ? apparmor_socket_sendmsg+0x98/0x360 [ 273.868043][T10361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.868067][T10361] sock_sendmsg_nosec+0x13a/0x180 [ 273.868097][T10361] ____sys_sendmsg+0x54e/0x850 [ 273.868125][T10361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.868163][T10361] ? import_iovec+0x73/0xa0 [ 273.868194][T10361] ___sys_sendmsg+0x2a5/0x360 [ 273.868215][T10361] ? __lock_acquire+0x747/0x2de0 [ 273.868247][T10361] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.868274][T10361] ? futex_wake+0x51b/0x5f0 [ 273.868330][T10361] ? __fget_files+0x2a/0x420 [ 273.868354][T10361] ? __fget_files+0x3a2/0x420 [ 273.868386][T10361] __x64_sys_sendmsg+0x1b1/0x290 [ 273.868410][T10361] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.868452][T10361] do_syscall_64+0x166/0x520 [ 273.868471][T10361] ? trace_irq_disable+0x3b/0x140 [ 273.868501][T10361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.868522][T10361] ? clear_bhb_loop+0x70/0xc0 [ 273.868547][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.868567][T10361] RIP: 0033:0x7f09c299e159 [ 273.868586][T10361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.868604][T10361] RSP: 002b:00007f09c3886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.868626][T10361] RAX: ffffffffffffffda RBX: 00007f09c2c25fa0 RCX: 00007f09c299e159 [ 273.868642][T10361] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 273.868656][T10361] RBP: 00007f09c2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 273.868669][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.868682][T10361] R13: 00007f09c2c26038 R14: 00007f09c2c25fa0 R15: 00007ffed954cdf8 [ 273.868714][T10361] [ 273.904632][ T5699] rc_core: IR keymap rc-technisat-usb2 not found [ 273.904651][ T5699] Registered IR keymap rc-empty [ 273.926994][ T5699] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 273.929438][ T5699] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input8 [ 273.957367][ T5699] dvb-usb: schedule remote query interval to 100 msecs. [ 273.977921][ T5699] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 273.989286][ T5699] usb 6-1: USB disconnect, device number 21 [ 274.486167][ T5699] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 274.712936][T10375] FAULT_INJECTION: forcing a failure. [ 274.712936][T10375] name failslab, interval 1, probability 0, space 0, times 0 [ 274.712969][T10375] CPU: 1 UID: 0 PID: 10375 Comm: syz.5.1377 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.712998][T10375] Tainted: [L]=SOFTLOCKUP [ 274.713005][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.713017][T10375] Call Trace: [ 274.713026][T10375] [ 274.713035][T10375] dump_stack_lvl+0xe8/0x150 [ 274.713066][T10375] should_fail_ex+0x3eb/0x540 [ 274.713094][T10375] should_failslab+0xa8/0x100 [ 274.713120][T10375] ? __kernfs_new_node+0xe6/0x980 [ 274.713151][T10375] kmem_cache_alloc_noprof+0x9c/0x600 [ 274.713178][T10375] ? kstrdup+0x81/0x100 [ 274.713206][T10375] ? __kernfs_new_node+0xe6/0x980 [ 274.713242][T10375] __kernfs_new_node+0xe6/0x980 [ 274.713280][T10375] ? __pfx___kernfs_new_node+0x10/0x10 [ 274.713309][T10375] ? lock_acquire+0x115/0x350 [ 274.713337][T10375] ? kernfs_root+0x1c/0x230 [ 274.713371][T10375] ? kernfs_root+0x1c/0x230 [ 274.713398][T10375] ? kernfs_root+0x1c/0x230 [ 274.713433][T10375] ? kernfs_root+0x1c/0x230 [ 274.713466][T10375] kernfs_new_node+0xea/0x140 [ 274.713501][T10375] kernfs_create_link+0xa7/0x200 [ 274.713529][T10375] sysfs_do_create_link_sd+0x83/0x110 [ 274.713559][T10375] device_add_class_symlinks+0x1cf/0x240 [ 274.713589][T10375] device_add+0x467/0xb80 [ 274.713615][T10375] device_create+0x269/0x300 [ 274.713645][T10375] ? timer_init_key+0x161/0x2c0 [ 274.713672][T10375] ? __pfx_device_create+0x10/0x10 [ 274.713698][T10375] ? ieee80211_roc_setup+0x119/0x1d0 [ 274.713725][T10375] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 274.713757][T10375] mac80211_hwsim_new_radio+0x3f6/0x56b0 [ 274.713799][T10375] ? __pfx___nla_validate_parse+0x10/0x10 [ 274.713842][T10375] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 274.713873][T10375] ? trace_kmalloc+0x2a/0xf0 [ 274.713908][T10375] hwsim_new_radio_nl+0xd8b/0xf90 [ 274.713952][T10375] genl_family_rcv_msg_doit+0x233/0x340 [ 274.713991][T10375] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.714035][T10375] ? bpf_lsm_capable+0x9/0x20 [ 274.714061][T10375] ? security_capable+0x7e/0x2c0 [ 274.714088][T10375] genl_rcv_msg+0x614/0x7a0 [ 274.714124][T10375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.714154][T10375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 274.714186][T10375] ? __asan_memcpy+0x40/0x70 [ 274.714212][T10375] ? __skb_clone+0x5c/0x6c0 [ 274.714240][T10375] netlink_rcv_skb+0x226/0x4a0 [ 274.714266][T10375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.714297][T10375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.714337][T10375] ? down_read+0x2b9/0x320 [ 274.714363][T10375] genl_rcv+0x28/0x40 [ 274.714391][T10375] netlink_unicast+0x7bd/0x940 [ 274.714434][T10375] netlink_sendmsg+0x7c3/0xae0 [ 274.714467][T10375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.714501][T10375] ? apparmor_socket_sendmsg+0x98/0x360 [ 274.714525][T10375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.714548][T10375] sock_sendmsg_nosec+0x13a/0x180 [ 274.714580][T10375] ____sys_sendmsg+0x54e/0x850 [ 274.714607][T10375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.714637][T10375] ? import_iovec+0x73/0xa0 [ 274.714666][T10375] ___sys_sendmsg+0x2a5/0x360 [ 274.714687][T10375] ? __lock_acquire+0x747/0x2de0 [ 274.714719][T10375] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.714746][T10375] ? futex_wait+0x2a2/0x390 [ 274.714800][T10375] ? __fget_files+0x2a/0x420 [ 274.714825][T10375] ? __fget_files+0x3a2/0x420 [ 274.714860][T10375] __x64_sys_sendmsg+0x1b1/0x290 [ 274.714886][T10375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.714927][T10375] do_syscall_64+0x166/0x520 [ 274.714944][T10375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.714963][T10375] ? clear_bhb_loop+0x70/0xc0 [ 274.714987][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.715004][T10375] RIP: 0033:0x7f09c299e159 [ 274.715024][T10375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.715055][T10375] RSP: 002b:00007f09c3886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.715076][T10375] RAX: ffffffffffffffda RBX: 00007f09c2c25fa0 RCX: 00007f09c299e159 [ 274.715091][T10375] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 274.715104][T10375] RBP: 00007f09c2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 274.715118][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.715130][T10375] R13: 00007f09c2c26038 R14: 00007f09c2c25fa0 R15: 00007ffed954cdf8 [ 274.715161][T10375] [ 274.907875][ T1220] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 275.065209][ T1220] usb 4-1: Using ep0 maxpacket: 16 [ 275.066009][ T1220] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 275.071162][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.071186][ T1220] usb 4-1: Product: syz [ 275.071199][ T1220] usb 4-1: Manufacturer: syz [ 275.071213][ T1220] usb 4-1: SerialNumber: syz [ 275.082579][ T1220] usb 4-1: config 0 descriptor?? [ 275.093391][ T1220] usb 4-1: selecting invalid altsetting 1 [ 275.093411][ T1220] technisat-usb2: could not set alternate setting to 0 [ 275.164520][ T2247] usb 9-1: USB disconnect, device number 14 [ 275.324460][ T1220] technisat-usb2: firmware version: 0.0 [ 275.324504][ T1220] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 275.796783][ T1220] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.797457][ T1220] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 275.797504][ T1220] usb 4-1: media controller created [ 275.797563][ T1220] technisat-usb2: i2c-error: out failed 53 = -22 [ 275.797609][ T1220] dvb-usb: MAC address reading failed. [ 275.852267][ T1220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.959015][ T1220] DVB: Unable to find symbol stv090x_attach() [ 276.013353][ T1220] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 276.056003][ T32] INFO: task syz.4.232:6478 blocked for more than 143 seconds. [ 276.056031][ T32] Tainted: G L syzkaller #0 [ 276.056043][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.056052][ T32] task:syz.4.232 state:D stack:28520 pid:6478 tgid:6477 ppid:6325 task_flags:0x400140 flags:0x00080002 [ 276.056118][ T32] Call Trace: [ 276.056125][ T32] [ 276.056138][ T32] __schedule+0x17dd/0x5940 [ 276.056195][ T32] ? __pfx___schedule+0x10/0x10 [ 276.056241][ T32] ? schedule+0x90/0x2b0 [ 276.056273][ T32] schedule+0x164/0x2b0 [ 276.056302][ T32] schedule_preempt_disabled+0x13/0x30 [ 276.056330][ T32] __mutex_lock+0x7c4/0x15a0 [ 276.056354][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 276.056377][ T32] ? write_ports+0xb5/0xd10 ** replaying previous printk message ** [ 276.056377][ T32] ? write_ports+0xb5/0xd10 [ 276.056405][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 276.056444][ T32] write_ports+0xb5/0xd10 [ 276.056471][ T32] ? __pfx_write_ports+0x10/0x10 [ 276.056507][ T32] ? __might_fault+0xaf/0x130 [ 276.056537][ T32] ? _copy_from_user+0x94/0xb0 [ 276.056562][ T32] ? simple_transaction_get+0x12d/0x160 [ 276.056591][ T32] nfsctl_transaction_write+0x10f/0x160 [ 276.056618][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 276.056644][ T32] vfs_write+0x296/0xba0 [ 276.056680][ T32] ? __pfx_vfs_write+0x10/0x10 [ 276.056709][ T32] ? __fget_files+0x2a/0x420 [ 276.056736][ T32] ? __fget_files+0x3a2/0x420 [ 276.056760][ T32] ? __fget_files+0x2a/0x420 [ 276.056793][ T32] ksys_write+0x150/0x270 [ 276.056822][ T32] ? __pfx_ksys_write+0x10/0x10 [ 276.056861][ T32] do_syscall_64+0x166/0x520 [ 276.056879][ T32] ? trace_irq_disable+0x3b/0x140 [ 276.056906][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.056926][ T32] ? clear_bhb_loop+0x70/0xc0 [ 276.056951][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.056971][ T32] RIP: 0033:0x7f1be0d9e159 [ 276.056990][ T32] RSP: 002b:00007f1be1cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.057011][ T32] RAX: ffffffffffffffda RBX: 00007f1be1025fa0 RCX: 00007f1be0d9e159 [ 276.057027][ T32] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 276.057040][ T32] RBP: 00007f1be0e35024 R08: 0000000000000000 R09: 0000000000000000 [ 276.057053][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.057066][ T32] R13: 00007f1be1026038 R14: 00007f1be1025fa0 R15: 00007ffcf2f051d8 [ 276.057098][ T32] [ 276.057175][ T32] [ 276.057175][ T32] Showing all locks held in the system: [ 276.057189][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 276.057204][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 276.057267][ T32] locks held by kworker/u8:9/1167: 2, on CPU#1: [ 276.057282][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 276.057334][ T32] #1: ffffc9000537fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 276.060884][ T32] locks held by kworker/1:2/1220: 5, on CPU#1: [ 276.060899][ T32] #0: ffff888022686540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 276.060950][ T32] #1: ffffc9000554fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 276.060998][ T32] #2: ffff8880295e91d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 276.061043][ T32] #3: ffff8880769b51d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 276.061094][ T32] #4: ffff8880794791a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 276.061158][ T32] locks held by getty/5377: 2, on CPU#0: [ 276.061172][ T32] #0: ffff8880339ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 276.061304][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 276.061367][ T32] locks held by udevd/5618: 5, on CPU#1: [ 276.061381][ T32] #0: ffff8880512ed480 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 276.061436][ T32] #1: ffff88805b9d7bd8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 276.061484][ T32] #2: ffff888031a81480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 276.061537][ T32] #3: ffff88805addd2d8 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 276.061592][ T32] #4: ffff8880769b51d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 276.061654][ T32] locks held by syz.2.91/6034: 3, on CPU#0: [ 276.061668][ T32] #0: ffff88807f099eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 276.061720][ T32] #1: ffff888057eb0460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 276.061776][ T32] #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 276.061829][ T32] locks held by syz.4.232/6478: 3, on CPU#1: [ 276.061843][ T32] #0: ffff888078fea0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 276.063383][ T32] #1: ffff88807c2d4460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 276.063446][ T32] #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 276.063500][ T32] locks held by syz.0.666/8064: 3, on CPU#1: [ 276.063514][ T32] #0: ffff88802a60b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 276.063561][ T32] #1: ffff8880675f6460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 276.063616][ T32] #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 276.063663][ T32] locks held by syz.1.993/9001: 3, on CPU#0: [ 276.063676][ T32] #0: ffff888047f58ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 276.063784][ T32] #1: ffff88804c344460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 276.063841][ T32] #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 276.063893][ T32] locks held by syz-executor/9143: 3, last CPU#1: [ 276.063908][ T32] #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470 [ 276.063963][ T32] #1: ffff8880356269b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 276.064016][ T32] #2: ffff8880227fb6b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 276.064071][ T32] locks held by syz-executor/9236: 4, last CPU#0: [ 276.064085][ T32] #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470 [ 276.064133][ T32] #1: ffff88807c1369b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 276.136342][ T32] #2: ffff88804c3136b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 276.136400][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 276.136457][ T32] locks held by modprobe/10406: 1, last CPU#1: [ 276.136471][ T32] #0: ffff8880227fdcf8 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 276.136517][ T32] locks held by syz-executor/10407: 4, last CPU#1: [ 276.136531][ T32] #0: ffff8880478fee48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 276.136582][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 276.136634][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 276.136683][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 276.136740][ T32] [ 276.136745][ T32] ============================================= [ 276.136745][ T32] [ 276.136767][ T32] NMI backtrace for cpu 1 [ 276.136782][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 276.136806][ T32] Tainted: [L]=SOFTLOCKUP [ 276.136813][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.136825][ T32] Call Trace: [ 276.136833][ T32] [ 276.136841][ T32] dump_stack_lvl+0xe8/0x150 [ 276.136866][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 276.136892][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 276.136919][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 276.136949][ T32] sys_info+0x135/0x170 [ 276.136971][ T32] watchdog+0x1058/0x10d0 [ 276.137004][ T32] ? watchdog+0x209/0x10d0 [ 276.137035][ T32] kthread+0x38b/0x480 [ 276.137061][ T32] ? __pfx_watchdog+0x10/0x10 [ 276.137085][ T32] ? __pfx_kthread+0x10/0x10 [ 276.137111][ T32] ret_from_fork+0x514/0xb70 [ 276.137139][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 276.137164][ T32] ? __switch_to+0xc89/0x1420 [ 276.137189][ T32] ? __pfx_kthread+0x10/0x10 [ 276.137217][ T32] ret_from_fork_asm+0x1a/0x30 [ 276.137254][ T32] [ 276.137293][ T32] Sending NMI from CPU 1 to CPUs 0: [ 276.137326][ C0] NMI backtrace for cpu 0 [ 276.137341][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.137365][ C0] Tainted: [L]=SOFTLOCKUP [ 276.137371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.137382][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 276.137406][ C0] Code: e8 1e a3 4a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f cc ba fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a ff 7b 06 cc 44 89 f9 80 e1 07 [ 276.137422][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 276.137437][ C0] RAX: 1ffffffff35f6000 RBX: 00000000000003fd RCX: 0000000000000000 [ 276.137450][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 276.137461][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 276.137478][ C0] R10: dffffc0000000000 R11: ffffffff857d6180 R12: dffffc0000000000 [ 276.137491][ C0] R13: 0000000000000000 R14: ffffffff9afb0560 R15: 0000000000000000 [ 276.137504][ C0] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 276.137519][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.137532][ C0] CR2: 00007fbbac7556c8 CR3: 0000000031ba8000 CR4: 00000000003526f0 [ 276.137547][ C0] Call Trace: [ 276.137554][ C0] [ 276.137562][ C0] wait_for_lsr+0x184/0x2f0 [ 276.137584][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 276.137613][ C0] serial8250_console_write+0xaa1/0x1200 [ 276.137632][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 276.137661][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 276.137680][ C0] ? __schedule+0x17f3/0x5940 [ 276.137711][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 276.137744][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 276.137772][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 276.137805][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 276.137830][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 276.137858][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 276.137882][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 276.137913][ C0] ? __kthread_parkme+0x71/0x1f0 [ 276.137935][ C0] ? __kthread_parkme+0x199/0x1f0 [ 276.137959][ C0] kthread+0x38b/0x480 [ 276.137982][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 276.138006][ C0] ? __pfx_kthread+0x10/0x10 [ 276.138030][ C0] ret_from_fork+0x514/0xb70 [ 276.138054][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 276.138078][ C0] ? __switch_to+0xc89/0x1420 [ 276.138099][ C0] ? __pfx_kthread+0x10/0x10 [ 276.138123][ C0] ret_from_fork_asm+0x1a/0x30 [ 276.138153][ C0] [ 276.145659][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 277.146614][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 277.157371][ T32] Tainted: [L]=SOFTLOCKUP [ 277.161681][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.171722][ T32] Call Trace: [ 277.174994][ T32] [ 277.177916][ T32] vpanic+0x56d/0xa70 [ 277.181902][ T32] ? __pfx___schedule+0x10/0x10 [ 277.186754][ T32] ? __pfx_vpanic+0x10/0x10 [ 277.191357][ T32] panic+0xc5/0xd0 [ 277.195086][ T32] ? __pfx_panic+0x10/0x10 [ 277.199500][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 277.204959][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 277.210331][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 277.216484][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 277.222634][ T32] watchdog+0x10cc/0x10d0 [ 277.226969][ T32] ? watchdog+0x209/0x10d0 [ 277.231395][ T32] kthread+0x38b/0x480 [ 277.235462][ T32] ? __pfx_watchdog+0x10/0x10 [ 277.240232][ T32] ? __pfx_kthread+0x10/0x10 [ 277.244831][ T32] ret_from_fork+0x514/0xb70 [ 277.249425][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 277.254544][ T32] ? __switch_to+0xc89/0x1420 [ 277.259216][ T32] ? __pfx_kthread+0x10/0x10 [ 277.263818][ T32] ret_from_fork_asm+0x1a/0x30 [ 277.268596][ T32] [ 277.271878][ T32] Kernel Offset: disabled [ 277.276193][ T32] Rebooting in 86400 seconds..