last executing test programs: 4.850345263s ago: executing program 3 (id=2648): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000050000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 4.702360954s ago: executing program 3 (id=2650): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000068a000000000000041f00181801000020696c2500000000002020207ba1d8fd000000007ba1000000000000040100000400ffffb702000008001f1fb70300000200001f850000002effb00095"], &(0x7f0000000480)='GPL\x00', 0xa, 0xffa, &(0x7f0000000cc0)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 4.670750396s ago: executing program 3 (id=2651): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, 0x26, 0x109, 0x870bd22, 0x25dfdbfb, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x6, 0x3, 0x0, 0x0, @binary='G\x00'}, @nested={0x10, 0x10c, 0x0, 0x1, [@typed={0xc, 0x158, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 4.491661921s ago: executing program 3 (id=2652): socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000740)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0xe22, 0xb, @empty, 0x3}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000840)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "1084a3696b9868c32d603c8030cce236c800024c3b1a4bf57b5397b6d9b5ea06", "0a43b0f6dd508916bcf5234da5967ee27f0d59ff12074ad742c64939a15a21458cd9058f80362f2074f596e36e45fa67", "2123d548a393a78cab85fd7380ed16deb9df58d67f425ef2a70ee437", {"931e798ab730196da16ba200000000c5", "4494e22135823d6603cff9637c6487be"}}}}}}}}, 0x0) 4.413382175s ago: executing program 3 (id=2653): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x200000000000009, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000001b40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001c80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000001d00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000001dc0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000001e00)) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000001e40)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000001ec0), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000001f00)=0xce0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000001f40)='net/rpc\x00') r8 = openat(r7, &(0x7f0000001f80)='nfsd.export/channel\x00', 0x2, 0x0) write(r8, &(0x7f0000001fc0)='localhost /tmp 2000000000 0 0 0 0\n', 0x22) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002080)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f00000020c0)='\x00') pread64(r5, &(0x7f0000002100)=""/4096, 0x1000, 0xfffffff7) timer_settime(0x0, 0x1, &(0x7f0000003100)={{}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000003140)={&(0x7f0000003180)={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000031c0)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r10], 0x28}, 0x4044804) 3.810326825s ago: executing program 0 (id=2654): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2801002d88a6d0130c080200000000000000010000000107d1231dcf5219130418416b8987335b35951dfc967e55631ce080aa0fa8854a9d5223191cfa0000fe3ac60339e5191a70df821eaefed0cd210e36cdd4dda0ea1e1998dc83ff570a11"], 0x128}, 0x4004001) io_uring_setup(0x5509, &(0x7f0000000500)={0x0, 0x83a4, 0x10, 0x1, 0x213}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x40}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54010000100013070000000000000000fc020000000000000000000000000001fc00000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000002000000000000004d53300000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000002000000000000000000000064001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0"], 0x154}}, 0x0) 3.469720782s ago: executing program 0 (id=2656): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfeda, 0x10000, 0x0, 0x53}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r4 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x80, 0x0, 0x1, 0xfc, 0x1, 0xfe, 0x0, 0x984729dfc6efaef8}}, 0x1c}, 0x1, 0x0, 0x0, 0xc8}, 0x82) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r5, &(0x7f0000000580)=[{{&(0x7f00000005c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x20000057) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f000000dd40)=[{&(0x7f000000dd80)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x200, 0x0, {0x0, r7}}) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x5bd2, 0xca77, 0x9, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r9 = syz_mount_image$fuse(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000002a00)={0x50, 0x0, r10, {0x7, 0x27, 0x0, 0x411a0034, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe}}, 0x50) read$FUSE(r8, &(0x7f0000002a80)={0x2020, 0x0, 0x0, 0x0}, 0x2051) write$FUSE_INTERRUPT(r8, &(0x7f0000004ac0)={0x10, 0xffffffffffffffda, r13}, 0x10) syz_fuse_handle_req(r8, &(0x7f0000004b00)="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", 0x2000, &(0x7f0000006b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006bc0)={0x90, 0x0, 0x9, {0x6, 0x1, 0x68, 0xfa0, 0xffffffff, 0x0, {0x6, 0x2, 0x0, 0x1, 0x9, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x2000, 0x1, r14, 0x0, 0x3, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r9, &(0x7f0000006c80)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) r15 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r7) syz_usb_disconnect(r15) syz_usb_ep_write$ath9k_ep1(r15, 0x82, 0x174, &(0x7f0000000240)={[{0xf0, 0x4e00, "49ece12f92c9d69831db42132dcd6113fc682d6bb9b4db2f6bbaf7ea59796968714150dd4de9e5bfb6c05b9634e4cec7d9e85e8f0c81cfe3107ed0d38e967400dd040da3c0d956ce286510f027d4a0a712963376da84acd209804a5caac9069ec83b3ba0d8022571a86c6174011529b8db021baf0af7dd2343e0b359e5867390a6db7cf19064e443868629779d1d02f95532d00e4435dad173b1bc4f003b5fc09d0f91380f215f0879039e7f2c72344348529b3269344ba3f7401fca083d77da788a0832d561d2e97d35545148a0e908fc2747c04ac0dda7784eac6a041b00b657231e1783ba24082a2874400820c297"}, {0x7c, 0x4e00, "466d75577aea1661827c48469de23a89ce88b6915e97c8ace73a7e098fa22938242fff6cdc22f4bc934508175761043d48f9449a01298b4c3bd98e9b7e2124e364951c72bfe343a79fa44bb3698c210b5dbb1402bf60b04d51507424853f5a4ea82f3343e8b9203acb9f7d51611884f26a99c65d039a1c9569b08158"}]}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x10, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x3a5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xd, 0x2}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x4, 0x9, 0x0, 0x8, 0x5}, 0x3a, &(0x7f00000004c0)={0x5, 0xf, 0x3a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "7d394f7913478906c259036866bb02d7"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "567572aee3e34f0fd831c2bfbed0e55d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x0, 0x7}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1c01}}, {0x9, &(0x7f0000000540)=@string={0x9, 0x3, "e9a6ad166e0b57"}}, {0x8e, &(0x7f0000006cc0)=ANY=[@ANYBLOB="8e032c3b7d3bf90adb1a94624ef86cdf655d80b15d244ea18d6e541480c229ebc0c12a11afe63ba08b680463ec16d64948c2a2e98c2d5e94f4ce44e5852566fb703d6c77508c7a39ae1449c1c8fddfeb7a34913fd2ee4240b142ce4fb71000000000000000aa8bf97a00cfc46b56add594b8c4bb4035b41c348704ac7c8090826c12a4020712fce5d979cc0000009d7ebcf9ab3d4775211f77c24fc20ccf5ba3d065aa9d22c0749fffe978cd010462596b973271c4c10d9988f63cba0b934bf5f50458840933e5d242d94cd8e0c7484fefcc53ea2e4d02a8719dc0b22b5dee7c3b"]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x441}}, {0x59, &(0x7f0000000680)=@string={0x59, 0x3, "e0fad62026a3e1a1232cdede0364e90894a9130c253afde29a168d478bb184f3715366540effd1dde1f1c435ac21d3c1c292c60242f65f7aaa0a2b0f59980f6a370d7d506254308a3ad305c5efb2ad7594533adfd24bfc"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1041}}, {0x60, &(0x7f0000000780)=@string={0x60, 0x3, "473d76c35545d68d8b2b3f08506b7ca8d62cd0d727a75610c4406a9ac8aba1be4fcb19ba8fed0f5ea80ce5a48ea7cb59fa83cf0fa40738c93fd669cdffa5a0301ef4a41b9636fabee83aca8c15a784d063f2cf4f1461454e4003fe26fbd8"}}]}) syz_clone(0x60000000, &(0x7f0000008f40)="c4a3a82518fc3bdd8900153691b7d50f3b8a691abcc09681b0150fd27b8abdfe577760ac719e7d542c0eaa0a025668406716ebae47053129b38575ba6bdea71656dcf2d694371db8dd55c439eaa761f281b05d9a0479956b2f1fcc5f3b6b4a969f16a69e374991af4d1fc60ec12a3d5c049481b9623de7096ed8aafbae688ea66152b67ea8012292f47b061efbae1b93eac18150d6b56b56957a7dae07956203f2a9b73ce780c5de06e80b39100fd9f354326ba43cf16eeba6431cdabaae255f37b35282fc2716f83bce8ff0", 0xcc, &(0x7f0000009040), &(0x7f0000009080), &(0x7f00000090c0)="2be342216e020a27423db55731820d18bb589dea7f96") ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f0000009280)={0xfff, 0x1873, {r12}, {r11}, 0x0, 0x8000000000000001}) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f00000097c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000009800)='./file0\x00', &(0x7f0000009840), 0x1, &(0x7f0000009880)={{'fd', 0x3d, r16}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r16, &(0x7f0000009900)={0x2020}, 0x2082) 3.170130748s ago: executing program 2 (id=2658): r0 = socket(0x840000000002, 0x3, 0xfa) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x1, 0x4, 0x0, @empty, @empty}}}}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7f9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000300)={0x0, 0x54485746, 0x1, @stepwise={0x5, 0x0, 0x0, 0x9, 0x0, 0x7}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="fbffffff00000004"], 0x50) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000380), 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f00000003c0)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{0xff}, {0x0, 0x4}, {0x0, 0xfc, 0x10}, {0xff, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xd7}, {0xff, 0x0, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x80, '\x00', 0x1}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {0x7}, {}, {0x2}, {0x5, 0x0, 0xfe}, {}, {0x20, 0x0, 0x0, '\x00', 0x2}, {}, {0x0, 0x0, 0x5}, {}, {0x7f}, {0x0, 0xfd, 0x6}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test\x00', 0x777) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x82040, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='10000', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r6 = getpgrp(0x0) ptrace$setopts(0x4206, r6, 0x0, 0x20004f) write(r5, &(0x7f0000000740)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f00000007c0)='0', 0x1) unshare(0x400) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, 0x0, 0x0) listen(r8, 0x402) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000500001406ffff010000000000000000000000000001ff01000000000000000000000000000100004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="724c642700040009"], 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000180)) 2.822862444s ago: executing program 2 (id=2659): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100006000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.523248966s ago: executing program 2 (id=2660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x1, 0x17, &(0x7f00000023c0)=ANY=[@ANYBLOB="18000000fcff1f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090600f7ffffff0400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b7030000f7ffffff14000000060000005d93000000000000b5030200f7ffffff8500000084000000b70000000000000095"], &(0x7f0000002480)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x94) 2.363709784s ago: executing program 2 (id=2661): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000090000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 2.198413789s ago: executing program 1 (id=2662): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, 0x26, 0x109, 0x870bd22, 0x25dfdbfb, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x6, 0x3, 0x0, 0x0, @binary='G\x00'}, @nested={0x10, 0x10c, 0x0, 0x1, [@typed={0xc, 0x158, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 2.048764454s ago: executing program 2 (id=2663): socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000740)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0xe22, 0xb, @empty, 0x3}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000840)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "1084a3696b9868c32d603c8030cce236c800024c3b1a4bf57b5397b6d9b5ea06", "0a43b0f6dd508916bcf5234da5967ee27f0d59ff12074ad742c64939a15a21458cd9058f80362f2074f596e36e45fa67", "2123d548a393a78cab85fd7380ed16deb9df58d67f425ef2a70ee437", {"931e798ab730196da16ba200000000c5", "4494e22135823d6603cff9637c6487be"}}}}}}}}, 0x0) 1.937672701s ago: executing program 1 (id=2664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00!\x00!'], 0x38}}, 0x40000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = syz_io_uring_complete(0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000040)=0x2, 0x4) 1.838778115s ago: executing program 2 (id=2665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740050000000060a010400000000000000000200000008000b400000000028000480240001800b0001007470726f7879000014000280080001400046000a08000340000000130900010073797a30"], 0xc0}}, 0x40000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000000000010902240001000000000904001800090581030044a1bedfbe035d4b13db41c100007d00"/58], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, 0x18, 0x1, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000780)={0x0, 0xffffffffffffff8c, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffc, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x4001}) r9 = socket$inet(0x2, 0x2, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000900)={@multicast1, @local}, 0xc) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000940)={0x4, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000a80)={0x8, {{0x2, 0x4e22, @multicast1}}}, 0x88) getsockopt$inet_buf(r10, 0x0, 0x29, &(0x7f0000000b40)=""/145, &(0x7f0000000c00)=0x24b) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000540)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r11, &(0x7f00000005c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r11, 0x5) write$tun(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580020008"], 0x4a) 1.56723386s ago: executing program 1 (id=2666): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2801002d88a6d0130c080200000000000000010000000107d1231dcf5219130418416b8987335b35951dfc967e55631ce080aa0fa8854a9d5223191cfa0000fe3ac60339e5191a70df821eaefed0cd210e36cdd4dda0ea1e1998dc83ff570a11"], 0x128}, 0x4004001) io_uring_setup(0x5509, &(0x7f0000000500)={0x0, 0x83a4, 0x10, 0x1, 0x213}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x40}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54010000100013070000000000000000fc020000000000000000000000000001fc00000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000005000000000004d53300000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000002000000000000000000000064001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0"], 0x154}}, 0x0) 1.500383049s ago: executing program 1 (id=2667): r0 = socket(0x27, 0x3, 0xff) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000900)) r3 = getpgid(0x0) sched_getscheduler(r3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x3, 0x200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000940), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000980)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r5 = syz_open_dev$dvb_demux(&(0x7f00000009c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000a00)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000a40)={0x0, 0x5961, 0x10000, 0x2, 0x4f}, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000b80)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r5, 0x1, 0x0, 0x0, 0x16, 0x0, {0x3, 0x0, 0x4, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0xb963, 0xa9, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/resume', 0xa82, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000c40), 0x0, 0x0, 0x3) write$cgroup_int(r10, &(0x7f0000000c80)=0x920, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001740), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000001780), &(0x7f0000001880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r11 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r11, 0x110, 0x2, &(0x7f00000018c0), 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000001940)=""/43, 0x2b}], 0x1, 0x42, 0x116d) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.195400212s ago: executing program 1 (id=2668): pipe(&(0x7f0000019480)) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000440)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd914b3d", 0x65}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x2) (async) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000940)={'syz0\x00', {0x80, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x16, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0x7, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x3, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0x7fff], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x7, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x9, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x2, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x7, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6cfe, 0x5, 0x1, 0x3, 0x200, 0x2, 0x3, 0x4, 0x2, 0x0, 0x7, 0xa, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x800, 0x0, 0x6, 0xfffffffb, 0x120000, 0x4003, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x5, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x107fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x3, 0x6, 0x2, 0x1, 0x80000003, 0x1072, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x7fff, 0x5, 0x9, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x40000000, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000dc0), 0x3, 0x822b01) (async) r4 = syz_open_dev$evdev(&(0x7f0000000dc0), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000e00)="e2", 0x918) writev(r3, &(0x7f0000000e40)=[{&(0x7f0000000e80)="45d49deb", 0x4}], 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind(r5, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @local, 0xb}, 0x80) sendmmsg$inet(r2, 0x0, 0x0, 0x4008440) (async) sendmmsg$inet(r2, 0x0, 0x0, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000400)={0x0, &(0x7f00000004c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) (async) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000400)={0x0, &(0x7f00000004c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000500)={0x1, 0x0, [{0x40000001, 0x4, 0x0, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) r11 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac3(r11, 0x0, 0x0) (async) syz_usb_control_io$uac3(r11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) 824.206674ms ago: executing program 4 (id=2669): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000003240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x7fffffff, 0x0, 0x32}, 0x9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000003300)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000003340)='X', 0x34000, 0xe0, &(0x7f0000003380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000033c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001740)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4, 0x0, 0x1, 0x2, 0x0, @remote, @broadcast}, {0x14, 0x0, 0x0, @multicast1}}}}}, 0x0) connect$can_bcm(r2, &(0x7f0000000040), 0x10) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000dc0)=@xdp, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)=""/198, 0xc6}], 0x1, &(0x7f0000000f80)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)=""/133, 0x85}], 0x1, &(0x7f0000001140)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001280)=[{&(0x7f00000012c0)=""/191, 0xbf}, {&(0x7f0000001380)=""/17, 0xb}, {&(0x7f00000013c0)=""/129, 0x81}], 0x3, &(0x7f0000001480)=""/33, 0x21}, 0x1}, {{&(0x7f00000014c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001540)=[{&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/125, 0x7d}, {0x0}, {&(0x7f0000001680)=""/77, 0x4d}, {&(0x7f0000001880)=""/248, 0xf8}, {&(0x7f0000001980)=""/4113, 0x1009}, {0x0}], 0x7, &(0x7f00000029c0)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002b80)=""/113, 0x71}, {&(0x7f0000002c00)=""/224, 0xe0}, {&(0x7f0000002d00)=""/84, 0x54}, {&(0x7f0000002d80)=""/183, 0xb7}], 0x4, &(0x7f0000002e40)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002f00), 0x58}, 0x95}, {{&(0x7f0000002f40)=@vsock, 0x80, &(0x7f0000002fc0)}, 0x5}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000003040)=""/53, 0x35}], 0x1, &(0x7f0000003080)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x8003, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x56, &(0x7f0000002fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000002f00)) syncfs(0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000001700)=r7) ioctl(r5, 0x3b8e, &(0x7f0000000100)="10") write$FUSE_LSEEK(r6, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003200)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)=0x40000000) 613.693537ms ago: executing program 0 (id=2670): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5, 0x10010, 0xffffffffffffffff, 0x1000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd6, 0xd6, 0x5, [@volatile={0x8, 0x0, 0x0, 0x9, 0x4}, @datasec={0x3, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x3, 0x6}, {0x1, 0x8, 0x7}], "c680"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x1}, {0x1, 0x3}, {0xa}, {0xf, 0x2}, {0x0, 0x2}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x4}, @int={0x5, 0x0, 0x0, 0x1, 0x16, 0x17, 0x0, 0x4, 0x1}, @struct={0x5, 0x3, 0x0, 0x4, 0x0, 0x5, [{0x1, 0x4, 0x6989ab6}, {0x3, 0x1}, {0x3, 0x1, 0x5}]}]}, {0x0, [0x5f, 0x61, 0x2e]}}, &(0x7f0000000580)=""/201, 0xf5, 0xc9, 0x1, 0xffffff31, 0x10000}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000900)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x4000040) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r4], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x68d, 0x6, 0x3, 0x2000, r0, 0x5, '\x00', 0x0, r1, 0x3, 0x5, 0x4}, 0x50) syz_emit_ethernet(0x82, &(0x7f0000000b00)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@private}, {@dev}, {@loopback}, {@dev}, {@dev}]}]}}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x1, &(0x7f0000000bc0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) shmget$private(0x0, 0x3000, 0x2c000830, &(0x7f0000ffd000/0x3000)=nil) pivot_root(0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000100)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000010005fba0000000000eeffffff000000", @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x4000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) recvfrom(r7, &(0x7f0000000740)=""/220, 0xdc, 0x40000122, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @multicast2}, 0x1, 0x2}}, 0x80) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) 563.135458ms ago: executing program 4 (id=2671): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100007000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 467.098099ms ago: executing program 3 (id=2672): socket(0x11, 0x800000003, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000001180)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r2, 0x0, 0x0, 0x0, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0xfffffffc, 0x4) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001280)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001340)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001380)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001400)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00009db77c0316e42f8fb39f270c51674b3db88e289da8bdf56afc82d2dd93de8b09c1efaa0638aa01f241dafdb8f5053f1dfee2a62a307acb2ab075461f28adff0f00000000000069268ab54d2a9e4f1e95c72f3dceb3c202af28f8ad88b05ae60beea35be504334a6590df3bdcb419ce995e6dcfefeb7e2d8c6a23f0fb2debec71f320a27266814e7e9471eb49250baff8e66ffd39b22d9e11bc0384ee821d1be194b2d0c3ba820a275cb4167b1ffe29e78de4fd9a3efbf32e933b6d9fc1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000001500)={0x44, &(0x7f0000001580)={0x40, 0x12, 0x3, "64d99b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() write$binfmt_aout(r4, 0x0, 0xffffffdb) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x36, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa3ebc5301d876f01a494e9347f2e5311faaaaaaaabb08aaf70ad157011e2c00000690780a010102ac10000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 465.736776ms ago: executing program 4 (id=2673): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000200000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 322.848124ms ago: executing program 0 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, 0x26, 0x109, 0x870bd22, 0x25dfdbfb, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x6, 0x3, 0x0, 0x0, @binary='G\x00'}, @nested={0x10, 0x10c, 0x0, 0x1, [@typed={0xc, 0x158, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 305.276769ms ago: executing program 4 (id=2675): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000740)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000780)={0xa, 0xe22, 0xb, @empty, 0x3}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000840)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "1084a3696b9868c32d603c8030cce236c800024c3b1a4bf57b5397b6d9b5ea06", "0a43b0f6dd508916bcf5234da5967ee27f0d59ff12074ad742c64939a15a21458cd9058f80362f2074f596e36e45fa67", "2123d548a393a78cab85fd7380ed16deb9df58d67f425ef2a70ee437", {"931e798ab730196da16ba200000000c5", "4494e22135823d6603cff9637c6487be"}}}}}}}}, 0x0) 184.752327ms ago: executing program 0 (id=2676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01020304"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 184.299964ms ago: executing program 4 (id=2677): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2801002d88a6d0130c080200000000000000010000000107d1231dcf5219130418416b8987335b35951dfc967e55631ce080aa0fa8854a9d5223191cfa0000fe3ac60339e5191a70df821eaefed0cd210e36cdd4dda0ea1e1998dc83ff570a11"], 0x128}, 0x4004001) io_uring_setup(0x5509, &(0x7f0000000500)={0x0, 0x83a4, 0x10, 0x1, 0x213}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x40}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54010000100013070000000000000000fc020000000000000000000000000001fc00000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000006000000000004d53300000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000002000000000000000000000064001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0"], 0x154}}, 0x0) 70.373348ms ago: executing program 0 (id=2678): r0 = socket(0xf, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0000008}) mmap(&(0x7f00002dc000/0x4000)=nil, 0x4000, 0x2000000, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00002dc000/0x4000)=nil, 0x4000, 0x2000000, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) 14.963474ms ago: executing program 4 (id=2679): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe840) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0xe400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r3, 0x5) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000001000000000000000100100000e00"/40], 0x28}, 0x0) sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000100000002000000000000001000000000000000100100000e000000"], 0x28}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020605000000000000000000030000020500040001000000050001000700000014000780080006000000000208001340000083d14eb429c6000605000500020000000d000300686173683a6e6574000000004c9435d9430fea04f9951091"], 0x5c}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404940, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, 0x0) r6 = syz_io_uring_setup(0xb32, &(0x7f0000000500)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) io_uring_enter(r6, 0x0, 0x0, 0x9, &(0x7f0000000640), 0x18) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000080) r7 = open(&(0x7f00000006c0)='./file1\x00', 0x80242, 0x0) sendfile(r7, r7, 0x0, 0x7f03) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000700)={r7, 0xd, 0x386, 0xc}) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc0c40, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000780), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f00000007c0)={0x3, &(0x7f0000000800)=[{0x2b, '\x00', @buffer={"010d1de90c16308a633fda925d1085c6b9f70f72ad6cc5f4853700", 0x20}, 0xfffffff9}, {0x27, '\x00', @buffer={"24fe89aec1d079da5ddee1336f9601ba0f621bd6ca64a6a0fb8ecb2779261f77", 0x20}, 0x5}, {0x16, '\x00', @buffer={"886a335544529008667f1d25491f81c15e313a87d437d73300", 0x20}, 0x7fe}]}) 0s ago: executing program 1 (id=2680): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000660000000000000005000600000000000a000000000000000000000000000000000000000000000101000000000000000200010000000080fffffffd0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4400ffff090a010400000000000000000a0000040900010073797a31000000ec08000540000000020900020073797a310000000008000a40fffffffc08000340000000143c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00c0000d0a010300000000000000000a0000010900020073797a31000000000900014073797a3100000000d5cc0e9a5b8b8e3afb05380b4a11c32cf1349bb9cf97ee0021ce61fa65d582409a9551392be2df491031e86d97c39facbb1380f4d7a46b209faf01c569b92bc0536be6ab07bc2a914d25c7ab2d598fd61fa2c08cbc7c91856b1591a6b06a791de8c406fc9b65c11ab641181bb04db8a103c0bdc87327f17418e683b9f311981afafb30f621da201f34a701390b6732121061c421a200"/209], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) madvise(&(0x7f0000143000/0x4000)=nil, 0x4000, 0xa) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001940)=[{0xfffffffffffffffe}], 0x1, 0x0) kernel console output (not intermixed with test programs): 3e syscall=202 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 345.459893][ T29] audit: type=1326 audit(1792552569.004:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.2.2251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 345.460386][ T29] audit: type=1326 audit(1792552569.004:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.2.2251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 345.460598][ T29] audit: type=1326 audit(1792552569.004:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.2.2251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 345.462494][ T29] audit: type=1326 audit(1792552569.004:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.2.2251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 345.462693][ T29] audit: type=1326 audit(1792552569.004:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.2.2251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 345.462899][ T29] audit: type=1326 audit(1792552569.004:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.2.2251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 345.463567][ T29] audit: type=1326 audit(1792552569.004:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.2.2251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 345.463942][ T29] audit: type=1326 audit(1792552569.004:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12110 comm="syz.2.2251" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32339f559 code=0x7ffc0000 [ 346.276499][ T5613] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 346.428931][ T5613] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 346.430360][ T5613] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 346.430387][ T5613] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 346.430406][ T5613] usb 4-1: config 2 has no interface number 0 [ 346.430445][ T5613] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 346.430471][ T5613] usb 4-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 346.430494][ T5613] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 346.430517][ T5613] usb 4-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.433179][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.433204][ T5613] usb 4-1: Product: syz [ 346.433219][ T5613] usb 4-1: Manufacturer: syz [ 346.433234][ T5613] usb 4-1: SerialNumber: syz [ 347.287105][ T5613] usb 4-1: probing VID:PID(0424:012C) [ 347.292442][ T5613] usb 4-1: vub300 testing BULK IN EndPoint(0) 8E [ 347.292468][ T5613] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 347.323346][ T5613] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 347.344920][ T5613] usb 4-1: USB disconnect, device number 77 [ 347.385931][T12159] fuse: Unknown parameter '' [ 347.432452][T12159] netlink: 'syz.4.2263': attribute type 6 has an invalid length. [ 347.532375][T12161] warn_alloc: 1 callbacks suppressed [ 347.532391][T12161] syz.1.2265: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 347.532450][T12161] CPU: 0 UID: 0 PID: 12161 Comm: syz.1.2265 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.532466][T12161] Tainted: [L]=SOFTLOCKUP [ 347.532472][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 347.532479][T12161] Call Trace: [ 347.532484][T12161] [ 347.532492][T12161] dump_stack_lvl+0xe8/0x150 [ 347.532514][T12161] warn_alloc+0x24d/0x270 [ 347.532529][T12161] ? kasan_save_track+0x4f/0x80 [ 347.532544][T12161] ? kasan_save_track+0x3e/0x80 [ 347.532561][T12161] ? __pfx_warn_alloc+0x10/0x10 [ 347.532572][T12161] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 347.532585][T12161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.532606][T12161] __vmalloc_node_range_noprof+0x127/0x1540 [ 347.532628][T12161] ? rcu_is_watching+0x16/0xb0 [ 347.532646][T12161] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 347.532657][T12161] ? __kmalloc_cache_noprof+0x321/0x600 [ 347.532670][T12161] ? __kmalloc_cache_noprof+0x14d/0x600 [ 347.532682][T12161] ? xskq_create+0x56/0x220 [ 347.532698][T12161] xskq_create+0x148/0x220 [ 347.532710][T12161] ? xsk_init_queue+0x8a/0xe0 [ 347.532723][T12161] xsk_init_queue+0x8a/0xe0 [ 347.532735][T12161] xsk_setsockopt+0x52a/0x960 [ 347.532748][T12161] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.532759][T12161] ? __pfx_aa_sk_perm+0x10/0x10 [ 347.532781][T12161] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 347.532797][T12161] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.532809][T12161] do_sock_setsockopt+0x17c/0x1b0 [ 347.532823][T12161] __x64_sys_setsockopt+0x13d/0x1b0 [ 347.532839][T12161] do_syscall_64+0x166/0x520 [ 347.532852][T12161] ? trace_irq_disable+0x3b/0x140 [ 347.532864][T12161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.532875][T12161] ? clear_bhb_loop+0x70/0xc0 [ 347.532889][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.532900][T12161] RIP: 0033:0x7f1f97f9f559 [ 347.532913][T12161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.532922][T12161] RSP: 002b:00007f1f98df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.532934][T12161] RAX: ffffffffffffffda RBX: 00007f1f98225fa0 RCX: 00007f1f97f9f559 [ 347.532942][T12161] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 347.532949][T12161] RBP: 00007f1f98036b20 R08: 0000000000000029 R09: 0000000000000000 [ 347.532956][T12161] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 347.532963][T12161] R13: 00007f1f98226038 R14: 00007f1f98225fa0 R15: 00007f1f9834fa48 [ 347.532980][T12161] [ 347.533005][T12161] Mem-Info: [ 347.533012][T12161] active_anon:38097 inactive_anon:0 isolated_anon:0 [ 347.533012][T12161] active_file:2710 inactive_file:60031 isolated_file:0 [ 347.533012][T12161] unevictable:0 dirty:67 writeback:0 [ 347.533012][T12161] slab_reclaimable:12111 slab_unreclaimable:99654 [ 347.533012][T12161] mapped:31232 shmem:32109 pagetables:1556 [ 347.533012][T12161] sec_pagetables:0 bounce:0 [ 347.533012][T12161] kernel_misc_reclaimable:0 [ 347.533012][T12161] free:1227460 free_pcp:36968 free_cma:0 [ 347.533041][T12161] Node 0 active_anon:152388kB inactive_anon:0kB active_file:10840kB inactive_file:239928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124928kB dirty:268kB writeback:0kB shmem:128436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14392kB pagetables:6080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 347.533076][T12161] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 347.533105][T12161] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.533151][T12161] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 347.533172][T12161] Node 0 DMA32 free:965036kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:152388kB inactive_anon:0kB active_file:10840kB inactive_file:239928kB unevictable:0kB writepending:268kB zspages:0kB present:3129332kB managed:2527440kB mlocked:0kB bounce:0kB free_pcp:137540kB local_pcp:78356kB free_cma:0kB [ 347.533205][T12161] lowmem_reserve[]: 0 0 0 0 0 [ 347.533224][T12161] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.533253][T12161] lowmem_reserve[]: 0 0 0 0 0 [ 347.533285][T12161] Node 1 Normal free:3929444kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:10332kB local_pcp:2728kB free_cma:0kB [ 347.533317][T12161] lowmem_reserve[]: 0 0 0 0 0 [ 347.533336][T12161] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 347.546033][T12161] Node 0 DMA32: 14162*4kB (UM) 877*8kB (UME) 64*16kB (UM) 437*32kB (UME) 51*64kB (UME) 16*128kB (E) 9*256kB (ME) 3*512kB (ME) 1*1024kB (M) 4*2048kB (UME) 212*4096kB (UM) = 965392kB [ 347.546250][T12161] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 347.546410][T12161] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 0*32kB 1*64kB (U) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3929444kB [ 347.546582][T12161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.546599][T12161] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 347.546637][T12161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.546653][T12161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 347.546669][T12161] 94717 total pagecache pages [ 347.546677][T12161] 3 pages in swap cache [ 347.546685][T12161] Free swap = 124984kB [ 347.546693][T12161] Total swap = 124996kB [ 347.546701][T12161] 2097051 pages RAM [ 347.546709][T12161] 0 pages HighMem/MovableOnly [ 347.546716][T12161] 433575 pages reserved [ 347.546724][T12161] 0 pages cma reserved [ 347.904478][ T9122] usb 3-1: USB disconnect, device number 55 [ 348.099069][T12166] usb 1-1: USB disconnect, device number 29 [ 348.267758][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 348.347903][ T5681] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 348.406910][ T190] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 348.426548][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 348.429891][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.429940][ T9] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 348.431029][ T9] usb 5-1: config 4 interface 0 has no altsetting 0 [ 348.436266][T12178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.436835][ T9] usb 5-1: string descriptor 0 read error: -22 [ 348.436926][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 348.496806][ T5681] usb 4-1: Using ep0 maxpacket: 16 [ 348.499325][ T5681] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 348.500394][ T5681] usb 4-1: config 0 interface 0 has no altsetting 0 [ 348.500440][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.505897][ T5681] usb 4-1: config 0 descriptor?? [ 348.511071][ T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 348.558771][ T190] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.560104][ T190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.560154][ T190] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 348.564302][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.564328][ T190] usb 2-1: Product: syz [ 348.564342][ T190] usb 2-1: Manufacturer: syz [ 348.564357][ T190] usb 2-1: SerialNumber: syz [ 348.575916][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 348.576495][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 348.576643][ T9] usb 5-1: media controller created [ 348.597205][ T190] usb 2-1: selecting invalid altsetting 1 [ 348.673638][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.856668][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 348.931817][T12173] openvswitch: netlink: Message has 5920 unknown bytes. [ 348.931865][T12173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.963638][ T190] cdc_ncm 2-1:1.0: bind() failure [ 349.040043][ T190] usb 2-1: USB disconnect, device number 82 [ 349.165119][ T9] usb 5-1: USB disconnect, device number 65 [ 349.591364][ T5681] usbhid 4-1:0.0: can't add hid device: -71 [ 349.591475][ T5681] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 349.605001][ T5681] usb 4-1: USB disconnect, device number 78 [ 349.931548][T12204] FAULT_INJECTION: forcing a failure. [ 349.931548][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 349.931586][T12204] CPU: 1 UID: 0 PID: 12204 Comm: syz.4.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.931615][T12204] Tainted: [L]=SOFTLOCKUP [ 349.931622][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 349.931635][T12204] Call Trace: [ 349.931731][T12204] [ 349.931807][T12204] dump_stack_lvl+0xe8/0x150 [ 349.931925][T12204] should_fail_ex+0x410/0x560 [ 349.931998][T12204] should_failslab+0xa8/0x100 [ 349.932030][T12204] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 349.932051][T12204] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 349.932092][T12204] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 349.932107][T12204] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 349.932121][T12204] krealloc_node_align_noprof+0x19a/0x390 [ 349.932135][T12204] ? bpf_diag_init+0x87/0x140 [ 349.932161][T12204] ? bpf_diag_init+0x87/0x140 [ 349.932176][T12204] kvrealloc_node_align_noprof+0x7b/0xf0 [ 349.932191][T12204] bpf_iarray_realloc+0x34/0xa0 [ 349.932207][T12204] bpf_check+0x148b/0x2ef0 [ 349.932240][T12204] ? __pfx_bpf_check+0x10/0x10 [ 349.932254][T12204] ? bpf_obj_name_cpy+0x194/0x1e0 [ 349.932273][T12204] bpf_prog_load+0x14d6/0x1c20 [ 349.932292][T12204] ? __pfx_bpf_prog_load+0x10/0x10 [ 349.932322][T12204] __sys_bpf+0xd0d/0xd90 [ 349.932342][T12204] ? __pfx___sys_bpf+0x10/0x10 [ 349.932362][T12204] ? __fget_files+0x2a/0x420 [ 349.932388][T12204] ? ksys_write+0x242/0x270 [ 349.932405][T12204] ? __pfx_ksys_write+0x10/0x10 [ 349.932419][T12204] __x64_sys_bpf+0xba/0xd0 [ 349.932433][T12204] do_syscall_64+0x166/0x520 [ 349.932498][T12204] ? trace_irq_disable+0x3b/0x140 [ 349.932510][T12204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.932531][T12204] ? clear_bhb_loop+0x70/0xc0 [ 349.932544][T12204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.932555][T12204] RIP: 0033:0x7f9a37f9f559 [ 349.932593][T12204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.932604][T12204] RSP: 002b:00007f9a38f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.932643][T12204] RAX: ffffffffffffffda RBX: 00007f9a38225fa0 RCX: 00007f9a37f9f559 [ 349.932651][T12204] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 349.932658][T12204] RBP: 00007f9a38f19090 R08: 0000000000000000 R09: 0000000000000000 [ 349.932665][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.932672][T12204] R13: 00007f9a38226038 R14: 00007f9a38225fa0 R15: 00007f9a3834fa48 [ 349.932689][T12204] [ 350.202149][T12196] nvme nvme0: rdma connection establishment failed (-104) [ 350.239487][T12207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.239896][T12207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.246273][T12207] xt_l2tp: missing protocol rule (udp|l2tpip) [ 350.288558][T12210] syz.2.2280 (12210): /proc/12209/oom_adj is deprecated, please use /proc/12209/oom_score_adj instead. [ 350.637342][ T5613] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 350.787998][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 350.789532][ T5613] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 350.790814][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.826097][ T5613] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 350.997784][ T5681] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 351.146839][ T5681] usb 5-1: Using ep0 maxpacket: 8 [ 351.148452][ T5681] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 351.151897][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.151924][ T5681] usb 5-1: Product: syz [ 351.151938][ T5681] usb 5-1: Manufacturer: syz [ 351.151953][ T5681] usb 5-1: SerialNumber: syz [ 351.154476][ T5681] usb 5-1: config 0 descriptor?? [ 351.356849][ T5681] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 351.531649][ T5613] gspca_nw80x: reg_w err -71 [ 351.531850][ T5613] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 351.550899][ T5613] usb 4-1: USB disconnect, device number 79 [ 351.612169][T12258] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.953621][ T5681] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 352.757511][T12285] team0: entered allmulticast mode [ 352.757537][T12285] team_slave_0: entered allmulticast mode [ 352.757554][T12285] team_slave_1: entered allmulticast mode [ 352.759613][T12285] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 353.407000][ T5681] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 353.569018][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 353.572417][ T5681] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 353.575376][ T5681] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 353.575406][ T5681] usb 3-1: config 179 has no interface number 0 [ 353.575453][ T5681] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 353.575477][ T5681] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 353.575492][ T5681] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 353.575505][ T5681] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 353.575527][ T5681] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 353.575552][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.596780][T12297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.739061][ T5613] usb 5-1: USB disconnect, device number 66 [ 354.059802][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 354.059816][ T29] audit: type=1326 audit(1792552577.594:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.060077][ T29] audit: type=1326 audit(1792552577.604:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.072478][ T29] audit: type=1326 audit(1792552577.614:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.072597][ T29] audit: type=1326 audit(1792552577.614:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.072636][ T29] audit: type=1326 audit(1792552577.614:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.078371][ T29] audit: type=1326 audit(1792552577.614:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.078499][ T29] audit: type=1326 audit(1792552577.614:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.086975][ T29] audit: type=1326 audit(1792552577.614:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.111903][ T29] audit: type=1326 audit(1792552577.654:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.114101][ T29] audit: type=1326 audit(1792552577.654:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.3.2310" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7879f559 code=0x7ffc0000 [ 354.363248][T12320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.363831][T12320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.388574][T12313] bridge0: port 1(bridge_slave_0) entered learning state [ 354.433692][T12320] binder: BINDER_SET_CONTEXT_MGR already set [ 354.433703][T12320] binder: 12319:12320 ioctl 4018620d 200000000240 returned -16 [ 354.463229][T12320] binder: BINDER_SET_CONTEXT_MGR already set [ 354.463240][T12320] binder: 12319:12320 ioctl 4018620d 200000000380 returned -16 [ 354.488957][T12320] openvswitch: netlink: Message has 5920 unknown bytes. [ 354.489037][T12320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.583796][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2313'. [ 354.646702][T12324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2313'. [ 354.908479][ T5613] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 354.932429][T12330] batadv1: entered allmulticast mode [ 354.933501][T12330] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 354.934152][T12330] bridge0: port 3(batadv1) entered blocking state [ 354.934346][T12330] bridge0: port 3(batadv1) entered disabled state [ 354.936107][T12330] batadv1: entered promiscuous mode [ 355.056467][ T5613] usb 5-1: Using ep0 maxpacket: 32 [ 355.058102][ T5613] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 355.061354][ T5613] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.061388][ T5613] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 355.061424][ T5613] usb 5-1: config 0 interface 0 has no altsetting 0 [ 355.061457][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.065590][ T5613] usb 5-1: config 0 descriptor?? [ 355.437852][T12116] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 355.437874][T12116] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 355.545191][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.545232][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.545260][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.545286][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.545311][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.545337][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.545363][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.545389][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.570465][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.570500][ T5613] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 355.630451][ T5613] kye 0003:0458:4018.0016: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0 [ 355.739435][ T5613] usb 5-1: USB disconnect, device number 67 [ 355.861647][T12347] program syz.0.2321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.109705][ T5613] usb 3-1: USB disconnect, device number 56 [ 356.109830][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 356.109878][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 356.196629][ T1219] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 356.233647][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2326'. [ 356.346670][ T1219] usb 2-1: Using ep0 maxpacket: 32 [ 356.347408][ T1219] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 356.348459][ T1219] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 356.348487][ T1219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 130, setting to 64 [ 356.351252][ T1219] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 356.351278][ T1219] usb 2-1: Product: syz [ 356.351290][ T1219] usb 2-1: Manufacturer: syz [ 356.351304][ T1219] usb 2-1: SerialNumber: syz [ 356.354542][ T1219] usb 2-1: config 0 descriptor?? [ 356.433675][T12363] tc action pedit 'at' offset 525311 out of bounds [ 356.452377][T12365] fuse: Bad value for 'fd' [ 356.452596][ T1219] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 356.636978][ T5613] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 356.792016][ T5613] usb 3-1: Using ep0 maxpacket: 16 [ 356.792813][ T5613] usb 3-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 356.794243][ T5613] usb 3-1: config 254 has an invalid interface number: 52 but max is 0 [ 356.794270][ T5613] usb 3-1: config 254 has no interface number 0 [ 356.794298][ T5613] usb 3-1: config 254 interface 52 has no altsetting 0 [ 356.834416][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.834443][ T5613] usb 3-1: Product: syz [ 356.834457][ T5613] usb 3-1: Manufacturer: syz [ 356.834472][ T5613] usb 3-1: SerialNumber: syz [ 356.886527][ T5681] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 357.037567][ T5681] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 357.044456][ T5681] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 357.044484][ T5681] usb 5-1: config 0 has no interface number 0 [ 357.044523][ T5681] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 357.044548][ T5681] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 357.044573][ T5681] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 357.052184][ T5681] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 357.052211][ T5681] usb 5-1: Product: syz [ 357.052227][ T5681] usb 5-1: SerialNumber: syz [ 357.061059][ T5681] usb 5-1: config 0 descriptor?? [ 357.075359][ T5681] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 357.090072][ T5681] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input29 [ 357.162386][ T5613] usb-storage 3-1:254.52: USB Mass Storage device detected [ 357.178099][ T5613] usb-storage 3-1:254.52: This device (04e6,000a,0200 S 00 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 357.178099][ T5613] Please send a copy of this message to and [ 357.236604][ T5613] usb 3-1: USB disconnect, device number 57 [ 357.524271][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 357.540171][T11927] usb 2-1: Failed to submit usb control message: -110 [ 357.540209][T11927] usb 2-1: unable to send the bmi data to the device: -110 [ 357.540227][T11927] usb 2-1: unable to get target info from device [ 357.540243][T11927] usb 2-1: could not get target info (-110) [ 357.540674][T11927] usb 2-1: could not probe fw (-110) [ 357.544076][T12378] program syz.0.2332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.788441][ T5681] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 357.938946][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 357.939640][ T5681] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 357.940923][ T5681] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 357.940948][ T5681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.940967][ T5681] usb 4-1: config 0 has no interface number 0 [ 357.941033][ T5681] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.941056][ T5681] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 357.941080][ T5681] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 357.941102][ T5681] usb 4-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.945157][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.945183][ T5681] usb 4-1: Product: syz [ 357.945223][ T5681] usb 4-1: Manufacturer: syz [ 357.945238][ T5681] usb 4-1: SerialNumber: syz [ 357.958626][ T5681] usb 4-1: config 0 descriptor?? [ 358.022620][ T5681] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 358.076466][ T5613] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 358.206461][ T5613] usb 3-1: device descriptor read/64, error -71 [ 358.255183][T12380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.264098][T12380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.265416][ T5681] usb 4-1: USB disconnect, device number 80 [ 358.351529][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 358.351761][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 358.352014][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 358.352244][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 358.352339][ T5674] usb 5-1: USB disconnect, device number 68 [ 358.352455][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 358.352478][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 358.395048][ T5674] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 358.476415][ T5613] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 358.606387][ T5613] usb 3-1: device descriptor read/64, error -71 [ 358.717094][ T5613] usb usb3-port1: attempt power cycle [ 358.969691][ T5674] usb 2-1: USB disconnect, device number 83 [ 359.056510][ T5613] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 359.077040][ T5613] usb 3-1: device descriptor read/8, error -71 [ 359.317459][ T5613] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 359.346930][ T5613] usb 3-1: device descriptor read/8, error -71 [ 359.352302][T12412] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 359.466854][ T5613] usb usb3-port1: unable to enumerate USB device [ 359.692644][T12410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.765207][T12397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 359.765385][T12397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 359.765479][T12397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.765569][T12397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.765658][T12397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 359.957393][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.957830][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.091592][ T5617] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 360.117811][T12410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.145441][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 360.145460][ T29] audit: type=1326 audit(1792552583.684:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.4.2344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 360.145682][ T29] audit: type=1326 audit(1792552583.684:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.4.2344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 360.146014][ T29] audit: type=1326 audit(1792552583.684:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.4.2344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 360.146223][ T29] audit: type=1326 audit(1792552583.684:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.4.2344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 360.148712][ T29] audit: type=1326 audit(1792552583.694:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.4.2344" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 360.310986][T12410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.360594][T12410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.454354][T12434] netlink: 'syz.3.2346': attribute type 2 has an invalid length. [ 360.526429][ T5674] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 360.679358][ T5674] usb 2-1: Using ep0 maxpacket: 8 [ 360.680568][ T5674] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 360.682149][ T5674] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 360.682174][ T5674] usb 2-1: config 0 has no interface number 0 [ 360.682211][ T5674] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.682236][ T5674] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 360.682260][ T5674] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.682287][ T5674] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.682330][ T5674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.693431][ T5674] usb 2-1: config 0 descriptor?? [ 360.715130][ T5674] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 360.801156][T12437] team0: entered allmulticast mode [ 360.811131][T12437] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.811355][T12437] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 360.977839][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 361.147539][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 361.172708][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.175166][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.266555][ T5674] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 361.435278][ T5674] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.435331][ T5674] usb 3-1: New USB device found, idVendor=8c29, idProduct=eaed, bcdDevice= 0.06 [ 361.437105][ T5674] usb 3-1: config 7 has an invalid interface number: 246 but max is 0 [ 361.437245][ T5674] usb 3-1: config 7 has no interface number 0 [ 361.442130][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.442156][ T5674] usb 3-1: Product: syz [ 361.442171][ T5674] usb 3-1: Manufacturer: syz [ 361.442186][ T5674] usb 3-1: SerialNumber: syz [ 361.661053][ T5674] usb-storage 3-1:7.246: USB Mass Storage device detected [ 361.735725][ T5674] usb 3-1: USB disconnect, device number 62 [ 361.778118][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 361.778159][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 361.778186][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 361.778282][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.373984][T12479] IPv6: addrconf: prefix option has invalid lifetime [ 362.418461][T12477] bond2: (slave veth0_to_bond): Releasing active interface [ 362.418528][T12477] veth0_to_bond: left allmulticast mode [ 362.436480][T12477] bond2: (slave veth5): making interface the new active one [ 362.517495][T12477] team0: Port device xfrm0 removed [ 362.518765][T12477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.533987][T11927] tipc: Resetting bearer [ 362.697434][ T5674] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 362.849461][ T5674] usb 4-1: Using ep0 maxpacket: 32 [ 362.850659][ T5674] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 362.854375][ T5674] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 362.854437][ T5674] usb 4-1: config 0 has no interface number 0 [ 362.864886][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.864914][ T5674] usb 4-1: Product: syz [ 362.864929][ T5674] usb 4-1: Manufacturer: syz [ 362.864943][ T5674] usb 4-1: SerialNumber: syz [ 362.875168][ T5674] usb 4-1: config 0 descriptor?? [ 362.902296][ T5674] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 363.057555][ T5681] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 363.115174][ T5674] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 363.143801][ T5674] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 363.206508][ T5681] usb 3-1: Using ep0 maxpacket: 16 [ 363.207805][ T5681] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 363.208892][ T5681] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.208911][ T5681] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.208925][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.208948][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.214567][ T5681] usb 3-1: config 0 descriptor?? [ 363.297910][ T5613] usb 2-1: USB disconnect, device number 84 [ 363.348347][ T5613] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 363.398854][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 363.600143][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 363.601007][ T5674] usb 4-1: USB disconnect, device number 81 [ 363.630403][ T5674] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 363.659591][ T5674] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 363.664636][ T5674] quatech2 4-1:0.51: device disconnected [ 363.750263][ T5681] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F3:074D.0017/input/input30 [ 363.789608][T12501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.804419][T12501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.869744][ T5681] elan 0003:04F3:074D.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input0 [ 364.031101][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.031550][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.505990][T12514] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 365.103014][T12532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.103237][T12532] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.103399][T12532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.103567][T12532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.103788][T12532] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 365.856153][T12544] Cannot find del_set index 2 as target [ 365.917054][T12545] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5627] was attempted by ""[12545] [ 367.000808][T12568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.021056][T12568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.057471][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.085918][T12570] ALSA: mixer_oss: invalid OSS volume '' [ 367.140195][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout [ 367.140229][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.140247][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.140264][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.366660][ T1219] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 369.520099][ T1219] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 369.520883][ T1219] usb 5-1: config 0 has no interfaces? [ 369.525061][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.525089][ T1219] usb 5-1: Product: syz [ 369.525103][ T1219] usb 5-1: Manufacturer: syz [ 369.525118][ T1219] usb 5-1: SerialNumber: syz [ 369.567146][ T1219] usb 5-1: config 0 descriptor?? [ 369.793896][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 369.805464][ T5674] usb 5-1: USB disconnect, device number 69 [ 369.844295][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2394'. [ 369.871285][T12602] bridge1: port 1(erspan0) entered blocking state [ 369.872519][T12602] bridge1: port 1(erspan0) entered disabled state [ 369.872674][T12602] erspan0: entered allmulticast mode [ 369.876178][T12602] erspan0: entered promiscuous mode [ 369.881823][T12602] bridge1: port 1(erspan0) entered blocking state [ 369.881959][T12602] bridge1: port 1(erspan0) entered forwarding state [ 370.157155][ T5681] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 370.306968][ T5681] usb 4-1: Using ep0 maxpacket: 32 [ 370.310994][ T5681] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 370.312378][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.317218][ T5681] usb 4-1: config 0 descriptor?? [ 370.348175][ T5681] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 371.750604][ T5681] gspca_vc032x: reg_r err -32 [ 371.750623][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750634][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750669][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750679][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750688][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750697][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750706][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750716][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750725][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750733][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750741][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750750][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750758][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750766][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750780][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750812][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750821][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750830][ T5681] gspca_vc032x: I2c Bus Busy Wait 00 [ 371.750839][ T5681] gspca_vc032x: Unknown sensor... [ 371.750908][ T5681] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 371.881002][ T5681] usb 4-1: USB disconnect, device number 82 [ 372.212317][T12630] FAULT_INJECTION: forcing a failure. [ 372.212317][T12630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.212349][T12630] CPU: 1 UID: 0 PID: 12630 Comm: syz.4.2401 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.212377][T12630] Tainted: [L]=SOFTLOCKUP [ 372.212385][T12630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.212397][T12630] Call Trace: [ 372.212405][T12630] [ 372.212415][T12630] dump_stack_lvl+0xe8/0x150 [ 372.212439][T12630] should_fail_ex+0x410/0x560 [ 372.212458][T12630] prepare_alloc_pages+0x223/0x600 [ 372.212511][T12630] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 372.212540][T12630] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 372.212576][T12630] ? __pfx_policy_nodemask+0x10/0x10 [ 372.212598][T12630] alloc_pages_mpol+0x21e/0x390 [ 372.212615][T12630] alloc_pages_noprof+0xb1/0x2b0 [ 372.212631][T12630] get_free_pages_noprof+0xf/0x80 [ 372.212655][T12630] __kasan_populate_vmalloc+0x38/0x1c0 [ 372.212677][T12630] ? do_raw_spin_unlock+0xf5/0x200 [ 372.212726][T12630] alloc_vmap_area+0xd1a/0x1420 [ 372.212751][T12630] ? __pfx_alloc_vmap_area+0x10/0x10 [ 372.212765][T12630] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 372.212779][T12630] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 372.212796][T12630] ? __get_vm_area_node+0x155/0x2f0 [ 372.212831][T12630] __get_vm_area_node+0x200/0x2f0 [ 372.212872][T12630] __vmalloc_node_range_noprof+0x343/0x1540 [ 372.212886][T12630] ? bpf_prog_calc_tag+0x51/0x370 [ 372.212900][T12630] ? lock_acquire+0x115/0x350 [ 372.212924][T12630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.212935][T12630] ? bpf_verifier_vlog+0x55a/0x900 [ 372.212964][T12630] ? bpf_prog_calc_tag+0x51/0x370 [ 372.212988][T12630] __vmalloc_noprof+0xd2/0x120 [ 372.213008][T12630] ? bpf_prog_calc_tag+0x51/0x370 [ 372.213032][T12630] bpf_prog_calc_tag+0x51/0x370 [ 372.213048][T12630] check_and_resolve_insns+0xbb/0x21d0 [ 372.213067][T12630] ? add_subprog+0x2e2/0x3f0 [ 372.213082][T12630] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 372.213113][T12630] bpf_check+0x18f7/0x2ef0 [ 372.213155][T12630] ? __pfx_bpf_check+0x10/0x10 [ 372.213181][T12630] ? bpf_obj_name_cpy+0x194/0x1e0 [ 372.213199][T12630] bpf_prog_load+0x14d6/0x1c20 [ 372.213219][T12630] ? __pfx_bpf_prog_load+0x10/0x10 [ 372.213252][T12630] __sys_bpf+0xd0d/0xd90 [ 372.213285][T12630] ? __pfx___sys_bpf+0x10/0x10 [ 372.213321][T12630] ? __fget_files+0x2a/0x420 [ 372.213344][T12630] ? ksys_write+0x242/0x270 [ 372.213357][T12630] ? __pfx_ksys_write+0x10/0x10 [ 372.213371][T12630] __x64_sys_bpf+0xba/0xd0 [ 372.213384][T12630] do_syscall_64+0x166/0x520 [ 372.213407][T12630] ? trace_irq_disable+0x3b/0x140 [ 372.213429][T12630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.213449][T12630] ? clear_bhb_loop+0x70/0xc0 [ 372.213474][T12630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.213488][T12630] RIP: 0033:0x7f9a37f9f559 [ 372.213499][T12630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.213509][T12630] RSP: 002b:00007f9a38f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.213522][T12630] RAX: ffffffffffffffda RBX: 00007f9a38225fa0 RCX: 00007f9a37f9f559 [ 372.213530][T12630] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 372.213537][T12630] RBP: 00007f9a38f19090 R08: 0000000000000000 R09: 0000000000000000 [ 372.213548][T12630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.213567][T12630] R13: 00007f9a38226038 R14: 00007f9a38225fa0 R15: 00007f9a3834fa48 [ 372.213600][T12630] [ 372.213782][T12630] syz.4.2401: vmalloc error: size 88, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 372.213843][T12630] CPU: 1 UID: 0 PID: 12630 Comm: syz.4.2401 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.213869][T12630] Tainted: [L]=SOFTLOCKUP [ 372.213877][T12630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.213889][T12630] Call Trace: [ 372.213897][T12630] [ 372.213906][T12630] dump_stack_lvl+0xe8/0x150 [ 372.213933][T12630] warn_alloc+0x24d/0x270 [ 372.213946][T12630] ? lockdep_hardirqs_on+0x7b/0x110 [ 372.214046][T12630] ? __pfx_warn_alloc+0x10/0x10 [ 372.214067][T12630] ? kfree+0x1c5/0x650 [ 372.214084][T12630] ? __get_vm_area_node+0x219/0x2f0 [ 372.214105][T12630] __vmalloc_node_range_noprof+0x36b/0x1540 [ 372.214117][T12630] ? lock_acquire+0x115/0x350 [ 372.214150][T12630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.214172][T12630] ? bpf_verifier_vlog+0x55a/0x900 [ 372.214202][T12630] ? bpf_prog_calc_tag+0x51/0x370 [ 372.214224][T12630] __vmalloc_noprof+0xd2/0x120 [ 372.214237][T12630] ? bpf_prog_calc_tag+0x51/0x370 [ 372.214252][T12630] bpf_prog_calc_tag+0x51/0x370 [ 372.214267][T12630] check_and_resolve_insns+0xbb/0x21d0 [ 372.214283][T12630] ? add_subprog+0x2e2/0x3f0 [ 372.214309][T12630] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 372.214345][T12630] bpf_check+0x18f7/0x2ef0 [ 372.214381][T12630] ? __pfx_bpf_check+0x10/0x10 [ 372.214396][T12630] ? bpf_obj_name_cpy+0x194/0x1e0 [ 372.214413][T12630] bpf_prog_load+0x14d6/0x1c20 [ 372.214433][T12630] ? __pfx_bpf_prog_load+0x10/0x10 [ 372.214482][T12630] __sys_bpf+0xd0d/0xd90 [ 372.214518][T12630] ? __pfx___sys_bpf+0x10/0x10 [ 372.214540][T12630] ? __fget_files+0x2a/0x420 [ 372.214565][T12630] ? ksys_write+0x242/0x270 [ 372.214579][T12630] ? __pfx_ksys_write+0x10/0x10 [ 372.214600][T12630] __x64_sys_bpf+0xba/0xd0 [ 372.214625][T12630] do_syscall_64+0x166/0x520 [ 372.214649][T12630] ? trace_irq_disable+0x3b/0x140 [ 372.214671][T12630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.214685][T12630] ? clear_bhb_loop+0x70/0xc0 [ 372.214698][T12630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.214709][T12630] RIP: 0033:0x7f9a37f9f559 [ 372.214719][T12630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.214729][T12630] RSP: 002b:00007f9a38f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.214743][T12630] RAX: ffffffffffffffda RBX: 00007f9a38225fa0 RCX: 00007f9a37f9f559 [ 372.214758][T12630] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 372.214772][T12630] RBP: 00007f9a38f19090 R08: 0000000000000000 R09: 0000000000000000 [ 372.214785][T12630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.214798][T12630] R13: 00007f9a38226038 R14: 00007f9a38225fa0 R15: 00007f9a3834fa48 [ 372.214830][T12630] [ 372.214958][T12630] Mem-Info: [ 372.214968][T12630] active_anon:12218 inactive_anon:0 isolated_anon:0 [ 372.214968][T12630] active_file:8886 inactive_file:60337 isolated_file:0 [ 372.214968][T12630] unevictable:0 dirty:213 writeback:0 [ 372.214968][T12630] slab_reclaimable:13459 slab_unreclaimable:98797 [ 372.214968][T12630] mapped:36282 shmem:5859 pagetables:1674 [ 372.214968][T12630] sec_pagetables:0 bounce:0 [ 372.214968][T12630] kernel_misc_reclaimable:0 [ 372.214968][T12630] free:1270674 free_pcp:12029 free_cma:0 [ 372.215007][T12630] Node 0 active_anon:48872kB inactive_anon:0kB active_file:35544kB inactive_file:241152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145128kB dirty:852kB writeback:0kB shmem:23436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14616kB pagetables:6552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 372.215035][T12630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 372.215084][T12630] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.215210][T12630] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 372.215249][T12630] Node 0 DMA32 free:1133460kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48872kB inactive_anon:0kB active_file:35544kB inactive_file:241152kB unevictable:0kB writepending:852kB zspages:0kB present:3129332kB managed:2527440kB mlocked:0kB bounce:0kB free_pcp:42320kB local_pcp:26016kB free_cma:0kB [ 372.215297][T12630] lowmem_reserve[]: 0 0 0 0 0 [ 372.215316][T12630] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.215347][T12630] lowmem_reserve[]: 0 0 0 0 0 [ 372.215382][T12630] Node 1 Normal free:3933876kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5796kB local_pcp:5336kB free_cma:0kB [ 372.215438][T12630] lowmem_reserve[]: 0 0 0 0 0 [ 372.215457][T12630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 372.215543][T12630] Node 0 DMA32: 51*4kB (UE) 10*8kB (E) 628*16kB (UME) 588*32kB (UME) 272*64kB (UM) 127*128kB (UME) 140*256kB (UME) 109*512kB (UME) 38*1024kB (M) 9*2048kB (UME) 225*4096kB (UM) = 1133404kB [ 372.215657][T12630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 372.215746][T12630] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 7*16kB (UM) 4*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (M) 1*512kB (M) 3*1024kB (M) 0*2048kB 959*4096kB (UM) = 3933980kB [ 372.215856][T12630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.215873][T12630] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 372.215888][T12630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.215896][T12630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 372.215905][T12630] 75081 total pagecache pages [ 372.215910][T12630] 3 pages in swap cache [ 372.215914][T12630] Free swap = 124984kB [ 372.215918][T12630] Total swap = 124996kB [ 372.215923][T12630] 2097051 pages RAM [ 372.215927][T12630] 0 pages HighMem/MovableOnly [ 372.215931][T12630] 433575 pages reserved [ 372.215935][T12630] 0 pages cma reserved [ 373.248430][T12634] bond3: entered allmulticast mode [ 373.311179][T12634] macvlan1: entered promiscuous mode [ 373.311196][T12634] macvlan1: entered allmulticast mode [ 373.316993][T12634] bond3: (slave macvlan1): Opening slave failed [ 373.586554][ T1219] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 373.749008][ T1219] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 373.750115][ T1219] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 373.750141][ T1219] usb 5-1: config 0 has no interface number 0 [ 373.750182][ T1219] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 373.752250][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.752272][ T1219] usb 5-1: Product: syz [ 373.752285][ T1219] usb 5-1: Manufacturer: syz [ 373.752299][ T1219] usb 5-1: SerialNumber: syz [ 373.813906][ T1219] usb 5-1: config 0 descriptor?? [ 373.814735][T12639] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 373.829060][ T1219] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 373.986427][ T5681] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 374.017747][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 374.017999][T12484] elan 0003:04F3:074D.0017: timeout initializing reports [ 374.026396][ T190] usb 3-1: USB disconnect, device number 63 [ 374.051840][ T1219] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 374.070999][ T1219] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 374.087550][ T5613] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 374.146427][ T5681] usb 4-1: Using ep0 maxpacket: 16 [ 374.154113][ T5681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 374.154168][ T5681] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 374.183470][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.183510][ T5681] usb 4-1: Manufacturer: ఊ [ 374.183526][ T5681] usb 4-1: SerialNumber: syz [ 374.235555][T12652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.236609][ T5613] usb 2-1: Using ep0 maxpacket: 16 [ 374.237446][ T5613] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 374.243219][ T5613] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 374.243244][ T5613] usb 2-1: config 4 has no interface number 0 [ 374.243284][ T5613] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 374.243308][ T5613] usb 2-1: config 4 interface 9 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0 [ 374.243329][ T5613] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 0 [ 374.243351][ T5613] usb 2-1: config 4 interface 9 has no altsetting 0 [ 374.254437][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.254464][ T5613] usb 2-1: Product: syz [ 374.254478][ T5613] usb 2-1: Manufacturer: syz [ 374.254493][ T5613] usb 2-1: SerialNumber: syz [ 374.271210][T12649] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 374.319530][ T5613] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 374.326949][T12652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.523229][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.525517][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.557266][T12662] mmap: syz.3.2408 (12662): VmData 37646336 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 374.597194][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.601042][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.673146][T12668] FAULT_INJECTION: forcing a failure. [ 374.673146][T12668] name failslab, interval 1, probability 0, space 0, times 0 [ 374.673184][T12668] CPU: 0 UID: 0 PID: 12668 Comm: syz.0.2413 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.673210][T12668] Tainted: [L]=SOFTLOCKUP [ 374.673218][T12668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 374.673230][T12668] Call Trace: [ 374.673238][T12668] [ 374.673247][T12668] dump_stack_lvl+0xe8/0x150 [ 374.673281][T12668] should_fail_ex+0x410/0x560 [ 374.673314][T12668] should_failslab+0xa8/0x100 [ 374.673343][T12668] __kmalloc_cache_node_noprof+0xaa/0x620 [ 374.673370][T12668] ? __get_vm_area_node+0x155/0x2f0 [ 374.673399][T12668] ? __get_vm_area_node+0x155/0x2f0 [ 374.673443][T12668] __get_vm_area_node+0x155/0x2f0 [ 374.673473][T12668] __vmalloc_node_range_noprof+0x343/0x1540 [ 374.673493][T12668] ? bpf_prog_calc_tag+0x51/0x370 [ 374.673519][T12668] ? lock_acquire+0x115/0x350 [ 374.673566][T12668] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.673588][T12668] ? bpf_verifier_vlog+0x55a/0x900 [ 374.673617][T12668] ? bpf_prog_calc_tag+0x51/0x370 [ 374.673639][T12668] __vmalloc_noprof+0xd2/0x120 [ 374.673660][T12668] ? bpf_prog_calc_tag+0x51/0x370 [ 374.673688][T12668] bpf_prog_calc_tag+0x51/0x370 [ 374.673716][T12668] check_and_resolve_insns+0xbb/0x21d0 [ 374.673745][T12668] ? add_subprog+0x2e2/0x3f0 [ 374.673774][T12668] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 374.673809][T12668] bpf_check+0x18f7/0x2ef0 [ 374.673851][T12668] ? __pfx_bpf_check+0x10/0x10 [ 374.673877][T12668] ? bpf_obj_name_cpy+0x194/0x1e0 [ 374.673910][T12668] bpf_prog_load+0x14d6/0x1c20 [ 374.673946][T12668] ? __pfx_bpf_prog_load+0x10/0x10 [ 374.673995][T12668] __sys_bpf+0xd0d/0xd90 [ 374.674028][T12668] ? __pfx___sys_bpf+0x10/0x10 [ 374.674064][T12668] ? __fget_files+0x2a/0x420 [ 374.674100][T12668] ? ksys_write+0x242/0x270 [ 374.674123][T12668] ? __pfx_ksys_write+0x10/0x10 [ 374.674148][T12668] __x64_sys_bpf+0xba/0xd0 [ 374.674173][T12668] do_syscall_64+0x166/0x520 [ 374.674195][T12668] ? trace_irq_disable+0x3b/0x140 [ 374.674217][T12668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.674238][T12668] ? clear_bhb_loop+0x70/0xc0 [ 374.674261][T12668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.674281][T12668] RIP: 0033:0x7fa51059f559 [ 374.674301][T12668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.674318][T12668] RSP: 002b:00007fa511432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.674339][T12668] RAX: ffffffffffffffda RBX: 00007fa510825fa0 RCX: 00007fa51059f559 [ 374.674354][T12668] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 374.674368][T12668] RBP: 00007fa511432090 R08: 0000000000000000 R09: 0000000000000000 [ 374.674380][T12668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.674392][T12668] R13: 00007fa510826038 R14: 00007fa510825fa0 R15: 00007fa51094fa48 [ 374.674431][T12668] [ 375.000230][T12669] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 375.000249][T12669] syzkaller1: group set to 0 [ 375.078627][ T5681] usb 4-1: cannot find UAC_HEADER [ 375.237994][ T5681] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 375.270942][ T5681] usb 4-1: USB disconnect, device number 83 [ 375.288757][ T8485] udevd[8485]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.379762][T12115] usb 2-1: Failed to submit usb control message: -110 [ 375.379786][T12115] usb 2-1: unable to send the bmi data to the device: -110 [ 375.379796][T12115] usb 2-1: unable to get target info from device [ 375.379804][T12115] usb 2-1: could not get target info (-110) [ 375.379823][T12115] usb 2-1: could not probe fw (-110) [ 375.495923][T12676] vivid-000: disconnect [ 375.516715][T12675] vivid-000: reconnect [ 376.047994][ T5681] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 376.111582][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 376.196371][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 376.197154][ T5681] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 376.198500][ T5681] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 376.198524][ T5681] usb 4-1: config 0 has no interface number 0 [ 376.198559][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.198582][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 376.198605][ T5681] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.198629][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.198666][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.201665][ T5681] usb 4-1: config 0 descriptor?? [ 376.302232][ T5681] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 376.342039][ T5613] usb 5-1: USB disconnect, device number 70 [ 376.376231][ T5613] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 376.403101][ T5613] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 376.403794][ T5613] quatech2 5-1:0.51: device disconnected [ 376.809216][T12689] xt_hashlimit: size too large, truncated to 1048576 [ 376.834611][ T5613] usb 2-1: USB disconnect, device number 85 [ 377.929277][T12717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.020604][T12717] loop3: detected capacity change from 0 to 7 [ 378.034408][T12717] Dev loop3: unable to read RDB block 7 [ 378.034461][T12717] loop3: unable to read partition table [ 378.034810][T12717] loop3: partition table beyond EOD, truncated [ 378.034978][T12717] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 378.510642][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.510767][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.786861][ T5613] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 378.790266][ T5681] usb 4-1: USB disconnect, device number 84 [ 378.815058][ T5681] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 378.836629][T12738] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 378.931745][T12740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2432'. [ 378.936624][ T5613] usb 3-1: Using ep0 maxpacket: 16 [ 378.937862][ T5613] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 378.951223][ T5613] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 378.979208][T12738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.979697][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.979724][ T5613] usb 3-1: Product: syz [ 378.979739][ T5613] usb 3-1: Manufacturer: syz [ 378.979754][ T5613] usb 3-1: SerialNumber: syz [ 379.012081][ T5613] r8152-cfgselector 3-1: Unknown version 0x0000 [ 379.012106][ T5613] r8152-cfgselector 3-1: config 0 descriptor?? [ 379.069611][T12741] bond3: (slave geneve4): making interface the new active one [ 379.072266][T12741] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 379.223467][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.266912][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.742936][ T5681] r8152-cfgselector 3-1: USB disconnect, device number 64 [ 379.893012][T12758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.969803][T12762] netlink: 'syz.4.2438': attribute type 2 has an invalid length. [ 381.119262][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 381.119292][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 381.119418][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 381.156408][ T5613] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 381.323056][ T5613] usb 4-1: unable to get BOS descriptor or descriptor too short [ 381.323090][ T5613] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 381.324726][ T5613] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.324750][ T5613] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.327584][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.327608][ T5613] usb 4-1: Product: syz [ 381.327623][ T5613] usb 4-1: Manufacturer: syz [ 381.327637][ T5613] usb 4-1: SerialNumber: syz [ 381.415961][ T5613] usb 4-1: selecting invalid altsetting 1 [ 381.430826][ T5613] usb 4-1: unit 6 not found! [ 381.805823][ T5613] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 382.005375][ T5613] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 382.175645][ T8485] udevd[8485]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.416985][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2454'. [ 382.430252][T12825] program syz.0.2454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.456631][ T5681] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 382.607245][ T5681] usb 3-1: New USB device found, idVendor=05da, idProduct=80ac, bcdDevice=d3.ea [ 382.608581][ T5681] usb 3-1: config 253 has an invalid interface number: 62 but max is 1 [ 382.608609][ T5681] usb 3-1: config 253 has an invalid interface number: 249 but max is 1 [ 382.608629][ T5681] usb 3-1: config 253 has no interface number 0 [ 382.608647][ T5681] usb 3-1: config 253 has no interface number 1 [ 382.608700][ T5681] usb 3-1: config 253 interface 62 altsetting 13 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 382.608739][ T5681] usb 3-1: config 253 interface 249 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 382.608762][ T5681] usb 3-1: config 253 interface 249 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 382.608788][ T5681] usb 3-1: config 253 interface 62 has no altsetting 0 [ 382.608814][ T5681] usb 3-1: config 253 interface 249 has no altsetting 0 [ 382.612383][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.612409][ T5681] usb 3-1: Product: syz [ 382.612424][ T5681] usb 3-1: Manufacturer: syz [ 382.612440][ T5681] usb 3-1: SerialNumber: syz [ 382.692818][T12848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2458'. [ 383.126501][ T190] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 383.276381][ T190] usb 5-1: Using ep0 maxpacket: 16 [ 383.277341][ T190] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 383.285339][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.285403][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.285421][ T190] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 383.285466][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.351183][ T190] usb 5-1: config 0 descriptor?? [ 383.790392][ T190] hid_parser_main: 14 callbacks suppressed [ 383.790473][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790530][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790558][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790585][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790613][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790640][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790692][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790716][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790738][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.790765][ T190] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 383.890703][ T190] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0018/input/input31 [ 383.958037][ T190] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 383.964107][ T5688] usb 4-1: USB disconnect, device number 85 [ 384.048879][ T190] usb 5-1: USB disconnect, device number 71 [ 384.255644][T12856] fido_id[12856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 384.365131][ T5681] usb 3-1: can only deal with bulk endpoints; endpoint 12 is not bulk. [ 384.365159][ T5681] usb 3-1: can only deal with bulk endpoints; endpoint 6 is not bulk. [ 384.365177][ T5681] usb 3-1: can only deal with bulk endpoints; endpoint 8 is not bulk. [ 384.365195][ T5681] usb 3-1: couldn't find two input bulk endpoints. Bailing out. [ 384.409382][ T5681] usb 3-1: can only deal with bulk endpoints; endpoint 3 is not bulk. [ 384.409409][ T5681] usb 3-1: can only deal with bulk endpoints; endpoint 10 is not bulk. [ 384.409426][ T5681] usb 3-1: couldn't find two input bulk endpoints. Bailing out. [ 384.443028][ T5681] usb 3-1: USB disconnect, device number 65 [ 384.497442][ T5688] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 384.636503][ T5688] usb 4-1: device descriptor read/64, error -71 [ 384.896550][ T5688] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 385.027180][ T5688] usb 4-1: device descriptor read/64, error -71 [ 385.147104][ T5688] usb usb4-port1: attempt power cycle [ 385.438486][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 385.486606][ T5688] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 385.507083][ T5688] usb 4-1: device descriptor read/8, error -71 [ 385.526455][ T5681] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 385.656376][ T5681] usb 5-1: device descriptor read/64, error -71 [ 385.746443][ T5688] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 385.768186][ T5688] usb 4-1: device descriptor read/8, error -71 [ 385.885105][ T5688] usb usb4-port1: unable to enumerate USB device [ 385.897073][ T5681] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 386.036478][ T5681] usb 5-1: device descriptor read/64, error -71 [ 386.141438][T12902] input: syz0 as /devices/virtual/input/input32 [ 386.167356][ T5681] usb usb5-port1: attempt power cycle [ 386.403752][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 386.403777][T12908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2477'. [ 386.506428][ T5681] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 386.526590][ T5688] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 386.527235][ T5681] usb 5-1: device descriptor read/8, error -71 [ 386.686735][ T5688] usb 2-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 386.687903][ T5688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.687959][ T5688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.687985][ T5688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.688006][ T5688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.688044][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.690740][ T5688] usb 2-1: config 0 descriptor?? [ 386.776749][ T5681] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 386.799500][ T5681] usb 5-1: device descriptor read/8, error -71 [ 386.907773][ T5681] usb usb5-port1: unable to enumerate USB device [ 386.969714][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 387.281912][ T5688] hid-generic 0003:047E:FFFF.0019: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047e:ffff] on usb-dummy_hcd.1-1/input0 [ 387.390078][ T5688] usb 2-1: USB disconnect, device number 86 [ 387.646439][ T5613] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 387.797286][ T5613] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 387.798233][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.798262][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.804148][ T5613] usb 4-1: config 0 descriptor?? [ 388.024491][ T5613] usbhid 4-1:0.0: can't add hid device: -71 [ 388.024597][ T5613] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 388.057624][ T5613] usb 4-1: USB disconnect, device number 90 [ 388.391674][T12952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.396993][T12952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.413232][ T5681] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 388.567435][ T5613] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 388.589118][ T5681] usb 2-1: New USB device found, idVendor=0000, idProduct=0100, bcdDevice= 2.09 [ 388.589158][ T5681] usb 2-1: no configurations [ 388.589170][ T5681] usb 2-1: can't read configurations, error -22 [ 388.617624][ T5688] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 388.716463][ T5681] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 388.740907][ T5613] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 388.741872][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.741900][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.743386][ T5613] usb 4-1: config 0 descriptor?? [ 388.790947][ T5688] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 388.806253][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.806393][ T5688] usb 5-1: Product: syz [ 388.806410][ T5688] usb 5-1: Manufacturer: syz [ 388.806424][ T5688] usb 5-1: SerialNumber: syz [ 388.809636][ T5688] usb 5-1: config 0 descriptor?? [ 388.887255][ T5681] usb 2-1: New USB device found, idVendor=0000, idProduct=0100, bcdDevice= 2.09 [ 388.887299][ T5681] usb 2-1: no configurations [ 388.887313][ T5681] usb 2-1: can't read configurations, error -22 [ 388.887572][ T5681] usb usb2-port1: attempt power cycle [ 389.109073][ T24] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 389.218550][T12961] FAULT_INJECTION: forcing a failure. [ 389.218550][T12961] name failslab, interval 1, probability 0, space 0, times 0 [ 389.218586][T12961] CPU: 0 UID: 0 PID: 12961 Comm: syz.0.2491 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.218604][T12961] Tainted: [L]=SOFTLOCKUP [ 389.218608][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 389.218615][T12961] Call Trace: [ 389.218620][T12961] [ 389.218626][T12961] dump_stack_lvl+0xe8/0x150 [ 389.218651][T12961] should_fail_ex+0x410/0x560 [ 389.218686][T12961] should_failslab+0xa8/0x100 [ 389.218716][T12961] __kvmalloc_node_noprof+0x176/0x820 [ 389.218748][T12961] ? __kvmalloc_node_noprof+0x345/0x820 [ 389.218762][T12961] ? bpf_compute_postorder+0x131/0x970 [ 389.218774][T12961] ? bpf_compute_postorder+0x131/0x970 [ 389.218789][T12961] bpf_compute_postorder+0x131/0x970 [ 389.218808][T12961] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 389.218837][T12961] ? add_kfuncs+0x251/0x2e0 [ 389.218866][T12961] bpf_check+0x261d/0x2ef0 [ 389.218899][T12961] ? __pfx_bpf_check+0x10/0x10 [ 389.218914][T12961] ? bpf_obj_name_cpy+0x194/0x1e0 [ 389.218932][T12961] bpf_prog_load+0x14d6/0x1c20 [ 389.218960][T12961] ? __pfx_bpf_prog_load+0x10/0x10 [ 389.219011][T12961] __sys_bpf+0xd0d/0xd90 [ 389.219040][T12961] ? __pfx___sys_bpf+0x10/0x10 [ 389.219059][T12961] ? __fget_files+0x2a/0x420 [ 389.219081][T12961] ? ksys_write+0x242/0x270 [ 389.219105][T12961] ? __pfx_ksys_write+0x10/0x10 [ 389.219132][T12961] __x64_sys_bpf+0xba/0xd0 [ 389.219158][T12961] do_syscall_64+0x166/0x520 [ 389.219181][T12961] ? trace_irq_disable+0x3b/0x140 [ 389.219193][T12961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.219204][T12961] ? clear_bhb_loop+0x70/0xc0 [ 389.219219][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.219230][T12961] RIP: 0033:0x7fa51059f559 [ 389.219246][T12961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.219264][T12961] RSP: 002b:00007fa511432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.219286][T12961] RAX: ffffffffffffffda RBX: 00007fa510825fa0 RCX: 00007fa51059f559 [ 389.219301][T12961] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 389.219315][T12961] RBP: 00007fa511432090 R08: 0000000000000000 R09: 0000000000000000 [ 389.219328][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.219336][T12961] R13: 00007fa510826038 R14: 00007fa510825fa0 R15: 00007fa51094fa48 [ 389.219353][T12961] [ 389.226867][ T5681] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 389.271607][ T5681] usb 2-1: New USB device found, idVendor=0000, idProduct=0100, bcdDevice= 2.09 [ 389.271640][ T5681] usb 2-1: no configurations [ 389.271647][ T5681] usb 2-1: can't read configurations, error -22 [ 389.272156][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 389.285636][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.285663][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.285680][ T24] usb 3-1: config 0 has no interface number 0 [ 389.331615][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.331671][ T24] usb 3-1: Product: syz [ 389.331686][ T24] usb 3-1: Manufacturer: syz [ 389.331699][ T24] usb 3-1: SerialNumber: syz [ 389.374427][ T24] usb 3-1: config 0 descriptor?? [ 389.536525][ T5681] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 389.589768][ T5681] usb 2-1: New USB device found, idVendor=0000, idProduct=0100, bcdDevice= 2.09 [ 389.589808][ T5681] usb 2-1: no configurations [ 389.589821][ T5681] usb 2-1: can't read configurations, error -22 [ 389.590042][ T5681] usb usb2-port1: unable to enumerate USB device [ 389.598827][ T24] cx231xx 3-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 389.598858][ T24] cx231xx 3-1:0.1: Not found matching IAD interface [ 389.721088][T12953] netlink: 'syz.4.2488': attribute type 39 has an invalid length. [ 390.231165][ T5688] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 390.231313][ T5688] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 390.231340][ T5688] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 390.279793][ T5688] usb 5-1: USB disconnect, device number 76 [ 390.435104][ T5613] usbhid 4-1:0.0: can't add hid device: -71 [ 390.435219][ T5613] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 390.475946][ T5613] usb 4-1: USB disconnect, device number 91 [ 390.640362][T12969] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 390.803557][T12971] fuse: Unknown parameter 'rootmote' [ 390.843491][T12975] fuse: Unknown parameter 'rootmote' [ 390.868027][ T29] audit: type=1326 audit(1792552614.414:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 390.868245][ T29] audit: type=1326 audit(1792552614.414:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 390.872699][ T29] audit: type=1326 audit(1792552614.414:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 391.009764][ T29] audit: type=1326 audit(1792552614.554:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 391.009890][ T29] audit: type=1326 audit(1792552614.554:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 391.010678][ T29] audit: type=1326 audit(1792552614.554:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a37f5fd8e code=0x7ffc0000 [ 391.161860][ T29] audit: type=1326 audit(1792552614.704:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 391.232577][ T29] audit: type=1326 audit(1792552614.774:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a37f408d9 code=0x7ffc0000 [ 391.232686][ T29] audit: type=1326 audit(1792552614.774:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 391.306371][ T29] audit: type=1326 audit(1792552614.844:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.4.2497" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9a37f9f559 code=0x7ffc0000 [ 391.686957][ T5613] usb 3-1: USB disconnect, device number 66 [ 391.845409][T13001] FAULT_INJECTION: forcing a failure. [ 391.845409][T13001] name failslab, interval 1, probability 0, space 0, times 0 [ 391.845446][T13001] CPU: 1 UID: 0 PID: 13001 Comm: syz.4.2507 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.845474][T13001] Tainted: [L]=SOFTLOCKUP [ 391.845481][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 391.845493][T13001] Call Trace: [ 391.845502][T13001] [ 391.845511][T13001] dump_stack_lvl+0xe8/0x150 [ 391.845547][T13001] should_fail_ex+0x410/0x560 [ 391.845581][T13001] should_failslab+0xa8/0x100 [ 391.845611][T13001] __kvmalloc_node_noprof+0x176/0x820 [ 391.845637][T13001] ? kasan_save_track+0x3e/0x80 [ 391.845661][T13001] ? __kvmalloc_node_noprof+0x50f/0x820 [ 391.845682][T13001] ? bpf_stack_liveness_init+0x29/0x90 [ 391.845703][T13001] ? bpf_check+0x263f/0x2ef0 [ 391.845725][T13001] ? bpf_compute_const_regs+0x18f/0x3450 [ 391.845750][T13001] ? bpf_compute_const_regs+0x18f/0x3450 [ 391.845783][T13001] bpf_compute_const_regs+0x18f/0x3450 [ 391.845837][T13001] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 391.845863][T13001] ? check_attach_btf_id+0x325/0x1af0 [ 391.845898][T13001] ? bpf_stack_liveness_init+0x29/0x90 [ 391.845920][T13001] ? trace_kmalloc+0x2a/0xf0 [ 391.845942][T13001] ? __pfx_check_attach_btf_id+0x10/0x10 [ 391.845966][T13001] ? bpf_stack_liveness_init+0x29/0x90 [ 391.845990][T13001] ? __kvmalloc_node_noprof+0x52f/0x820 [ 391.846025][T13001] ? __asan_memset+0x22/0x50 [ 391.846051][T13001] bpf_check+0x26ac/0x2ef0 [ 391.846093][T13001] ? __pfx_bpf_check+0x10/0x10 [ 391.846121][T13001] ? bpf_obj_name_cpy+0x194/0x1e0 [ 391.846155][T13001] bpf_prog_load+0x14d6/0x1c20 [ 391.846201][T13001] ? __pfx_bpf_prog_load+0x10/0x10 [ 391.846253][T13001] __sys_bpf+0xd0d/0xd90 [ 391.846284][T13001] ? __pfx___sys_bpf+0x10/0x10 [ 391.846315][T13001] ? __fget_files+0x2a/0x420 [ 391.846352][T13001] ? ksys_write+0x242/0x270 [ 391.846375][T13001] ? __pfx_ksys_write+0x10/0x10 [ 391.846402][T13001] __x64_sys_bpf+0xba/0xd0 [ 391.846427][T13001] do_syscall_64+0x166/0x520 [ 391.846454][T13001] ? trace_irq_disable+0x3b/0x140 [ 391.846475][T13001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.846496][T13001] ? clear_bhb_loop+0x70/0xc0 [ 391.846522][T13001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.846542][T13001] RIP: 0033:0x7f9a37f9f559 [ 391.846563][T13001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.846580][T13001] RSP: 002b:00007f9a38f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.846602][T13001] RAX: ffffffffffffffda RBX: 00007f9a38225fa0 RCX: 00007f9a37f9f559 [ 391.846617][T13001] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 391.846631][T13001] RBP: 00007f9a38f19090 R08: 0000000000000000 R09: 0000000000000000 [ 391.846644][T13001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.846656][T13001] R13: 00007f9a38226038 R14: 00007f9a38225fa0 R15: 00007f9a3834fa48 [ 391.846686][T13001] [ 392.596800][ T5674] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 392.747980][ T5674] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 392.762242][ T5674] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 392.762270][ T5674] usb 5-1: Product: syz [ 392.762285][ T5674] usb 5-1: Manufacturer: syz [ 392.762299][ T5674] usb 5-1: SerialNumber: syz [ 392.801117][ T5674] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 393.021370][ T5681] hid_parser_main: 4 callbacks suppressed [ 393.021387][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.021406][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.021421][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.021437][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.023350][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.023407][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.023433][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.023458][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.023484][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.023509][ T5681] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 393.122182][ T5681] hid-generic 0000:0000:0000.001A: hidraw0: HID vffffff.fe Device [syz0] on syz0 [ 393.329989][ T5674] vp7045: USB control message 'in' went wrong. [ 393.330172][ T5674] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 393.330218][ T5674] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 393.547336][ T5674] usb 5-1: USB disconnect, device number 77 [ 393.743911][T13037] FAULT_INJECTION: forcing a failure. [ 393.743911][T13037] name failslab, interval 1, probability 0, space 0, times 0 [ 393.743946][T13037] CPU: 1 UID: 0 PID: 13037 Comm: syz.1.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.743971][T13037] Tainted: [L]=SOFTLOCKUP [ 393.743977][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 393.743988][T13037] Call Trace: [ 393.743996][T13037] [ 393.744005][T13037] dump_stack_lvl+0xe8/0x150 [ 393.744038][T13037] should_fail_ex+0x410/0x560 [ 393.744074][T13037] should_failslab+0xa8/0x100 [ 393.744099][T13037] __kvmalloc_node_noprof+0x176/0x820 [ 393.744124][T13037] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 393.744152][T13037] ? sort_subprogs_topo+0xbf/0xf20 [ 393.744175][T13037] ? sort_subprogs_topo+0xbf/0xf20 [ 393.744203][T13037] sort_subprogs_topo+0xbf/0xf20 [ 393.744230][T13037] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 393.744276][T13037] bpf_check+0x26f8/0x2ef0 [ 393.744319][T13037] ? __pfx_bpf_check+0x10/0x10 [ 393.744346][T13037] ? bpf_obj_name_cpy+0x194/0x1e0 [ 393.744381][T13037] bpf_prog_load+0x14d6/0x1c20 [ 393.744418][T13037] ? __pfx_bpf_prog_load+0x10/0x10 [ 393.744467][T13037] __sys_bpf+0xd0d/0xd90 [ 393.744500][T13037] ? __pfx___sys_bpf+0x10/0x10 [ 393.744537][T13037] ? __fget_files+0x2a/0x420 [ 393.744572][T13037] ? ksys_write+0x242/0x270 [ 393.744594][T13037] ? __pfx_ksys_write+0x10/0x10 [ 393.744617][T13037] __x64_sys_bpf+0xba/0xd0 [ 393.744638][T13037] do_syscall_64+0x166/0x520 [ 393.744654][T13037] ? trace_irq_disable+0x3b/0x140 [ 393.744666][T13037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.744678][T13037] ? clear_bhb_loop+0x70/0xc0 [ 393.744692][T13037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.744703][T13037] RIP: 0033:0x7f1f97f9f559 [ 393.744715][T13037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.744725][T13037] RSP: 002b:00007f1f98df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.744737][T13037] RAX: ffffffffffffffda RBX: 00007f1f98225fa0 RCX: 00007f1f97f9f559 [ 393.744746][T13037] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 393.744753][T13037] RBP: 00007f1f98df0090 R08: 0000000000000000 R09: 0000000000000000 [ 393.744760][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.744767][T13037] R13: 00007f1f98226038 R14: 00007f1f98225fa0 R15: 00007f1f9834fa48 [ 393.744783][T13037] [ 394.142049][T13043] binder: BINDER_SET_CONTEXT_MGR already set [ 394.142059][T13043] binder: 13042:13043 ioctl 4018620d 200000000040 returned -16 [ 394.251697][T13047] netlink: 'syz.2.2523': attribute type 61 has an invalid length. [ 394.376948][ T5674] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 394.528359][ T5674] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 394.535954][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.535985][ T5674] usb 2-1: Product: syz [ 394.536002][ T5674] usb 2-1: Manufacturer: syz [ 394.536017][ T5674] usb 2-1: SerialNumber: syz [ 394.602605][ T5674] usb 2-1: config 0 descriptor?? [ 395.117471][ T5681] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 395.233265][T13043] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2524'. [ 395.233296][T13043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.263285][ T5674] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 395.263314][ T5674] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 395.263340][ T5674] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 395.290283][ T5681] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 395.291587][ T5681] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 51, changing to 4 [ 395.293939][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.293963][ T5681] usb 5-1: Product: syz [ 395.293976][ T5681] usb 5-1: Manufacturer: syz [ 395.293990][ T5681] usb 5-1: SerialNumber: syz [ 395.326064][ T5674] usb 2-1: USB disconnect, device number 91 [ 395.564948][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.575370][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.576079][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.600365][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.602338][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.602822][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.632923][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.633196][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.655051][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.655374][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.750198][T13069] 8021q: VLANs not supported on ip_vti0 [ 396.186617][ T5681] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 396.236682][ T5681] usb 5-1: USB disconnect, device number 78 [ 396.260673][ T5674] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 396.336947][T13084] netlink: 'syz.3.2537': attribute type 61 has an invalid length. [ 396.336974][T13084] netlink: 'syz.3.2537': attribute type 268 has an invalid length. [ 396.391334][T13086] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 396.417178][ T5674] usb 2-1: Using ep0 maxpacket: 32 [ 396.417981][ T5674] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 396.419735][ T5674] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 396.419761][ T5674] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 396.419782][ T5674] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 396.419802][ T5674] usb 2-1: config 1 has no interface number 0 [ 396.419847][ T5674] usb 2-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 396.419868][ T5674] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 396.419908][ T5674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.514239][ T5674] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 396.637693][ T5613] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 396.642993][ T5674] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 396.643715][ T5674] snd_usb_pod 2-1:1.1: invalid control EP [ 396.643733][ T5674] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 396.643945][ T5674] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 396.644829][ T5674] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 396.821558][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 396.844635][ T5674] usb 2-1: USB disconnect, device number 92 [ 396.846623][ T5613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 396.846669][ T5613] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 396.873232][ T5613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.873260][ T5613] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.873281][ T5613] usb 3-1: config 1 has no interface number 0 [ 396.873321][ T5613] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.925369][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.925399][ T5613] usb 3-1: Product: syz [ 396.925413][ T5613] usb 3-1: Manufacturer: syz [ 396.925427][ T5613] usb 3-1: SerialNumber: syz [ 397.163622][ T5613] usb 3-1: unknown sample rate [ 397.262911][ T5613] usb 3-1: USB disconnect, device number 67 [ 397.308892][ T8485] udevd[8485]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.595202][ T29] audit: type=1326 audit(1792552621.134:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.595236][ T29] audit: type=1326 audit(1792552621.134:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.649162][ T29] audit: type=1326 audit(1792552621.194:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.649191][ T29] audit: type=1326 audit(1792552621.194:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.649213][ T29] audit: type=1326 audit(1792552621.194:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.649532][ T29] audit: type=1326 audit(1792552621.194:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.649557][ T29] audit: type=1326 audit(1792552621.194:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.650131][ T29] audit: type=1326 audit(1792552621.194:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.650160][ T29] audit: type=1326 audit(1792552621.194:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 397.650182][ T29] audit: type=1326 audit(1792552621.194:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.1.2547" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f97f9f559 code=0x7ffc0000 [ 398.329623][T13117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.387801][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.406436][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.478861][T13133] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 398.478980][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'. [ 398.619531][T13127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.627679][T13127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.918780][T13148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2562'. [ 398.948071][T13148] bridge_slave_1: entered allmulticast mode [ 399.084960][T13153] netlink: 'syz.1.2563': attribute type 61 has an invalid length. [ 399.084978][T13153] netlink: 'syz.1.2563': attribute type 268 has an invalid length. [ 399.349811][T13163] ip_tables: iptables: counters copy to user failed while replacing table [ 399.436453][ T5613] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 399.606726][ T5613] usb 5-1: Using ep0 maxpacket: 32 [ 399.607444][ T5613] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 399.608305][ T5613] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.608329][ T5613] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.609970][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.609985][ T5613] usb 5-1: Product: syz [ 399.609993][ T5613] usb 5-1: Manufacturer: syz [ 399.610004][ T5613] usb 5-1: SerialNumber: syz [ 399.611617][ T5613] usb 5-1: config 0 descriptor?? [ 399.821298][ T5688] usb 5-1: USB disconnect, device number 79 [ 399.998205][T13178] FAULT_INJECTION: forcing a failure. [ 399.998205][T13178] name failslab, interval 1, probability 0, space 0, times 0 [ 399.998242][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.3.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.998269][T13178] Tainted: [L]=SOFTLOCKUP [ 399.998277][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 399.998290][T13178] Call Trace: [ 399.998299][T13178] [ 399.998309][T13178] dump_stack_lvl+0xe8/0x150 [ 399.998346][T13178] should_fail_ex+0x410/0x560 [ 399.998381][T13178] should_failslab+0xa8/0x100 [ 399.998411][T13178] __kvmalloc_node_noprof+0x176/0x820 [ 399.998441][T13178] ? bpf_compute_scc+0xb8/0xb10 [ 399.998463][T13178] ? bpf_compute_scc+0xb8/0xb10 [ 399.998492][T13178] bpf_compute_scc+0xb8/0xb10 [ 399.998561][T13178] bpf_check+0x271e/0x2ef0 [ 399.998607][T13178] ? __pfx_bpf_check+0x10/0x10 [ 399.998633][T13178] ? bpf_obj_name_cpy+0x194/0x1e0 [ 399.998668][T13178] bpf_prog_load+0x14d6/0x1c20 [ 399.998706][T13178] ? __pfx_bpf_prog_load+0x10/0x10 [ 399.998756][T13178] __sys_bpf+0xd0d/0xd90 [ 399.998787][T13178] ? __pfx___sys_bpf+0x10/0x10 [ 399.998823][T13178] ? __fget_files+0x2a/0x420 [ 399.998858][T13178] ? ksys_write+0x242/0x270 [ 399.998878][T13178] ? __pfx_ksys_write+0x10/0x10 [ 399.998902][T13178] __x64_sys_bpf+0xba/0xd0 [ 399.998933][T13178] do_syscall_64+0x166/0x520 [ 399.998954][T13178] ? trace_irq_disable+0x3b/0x140 [ 399.998976][T13178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.998997][T13178] ? clear_bhb_loop+0x70/0xc0 [ 399.999023][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.999044][T13178] RIP: 0033:0x7f1a7879f559 [ 399.999063][T13178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.999080][T13178] RSP: 002b:00007f1a769f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.999101][T13178] RAX: ffffffffffffffda RBX: 00007f1a78a25fa0 RCX: 00007f1a7879f559 [ 399.999116][T13178] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 399.999128][T13178] RBP: 00007f1a769f6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.999140][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.999149][T13178] R13: 00007f1a78a26038 R14: 00007f1a78a25fa0 R15: 00007f1a78b4fa48 [ 399.999166][T13178] [ 400.286973][ T5688] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 400.320097][T13183] netlink: 'syz.1.2576': attribute type 61 has an invalid length. [ 400.320130][T13183] netlink: 'syz.1.2576': attribute type 268 has an invalid length. [ 400.449516][ T5688] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 400.451194][ T5688] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 400.451255][ T5688] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 400.451281][ T5688] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 26213, setting to 1024 [ 400.454021][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.454048][ T5688] usb 3-1: Product: syz [ 400.454061][ T5688] usb 3-1: Manufacturer: syz [ 400.454076][ T5688] usb 3-1: SerialNumber: syz [ 400.488375][ T5688] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 401.054589][ T5688] usb 3-1: Scarlett Gen 2 USB request result cmd 0 was -32 [ 401.054644][ T5688] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 401.115865][T13196] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 401.115996][T13196] block device autoloading is deprecated and will be removed. [ 401.370001][ T5688] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 401.514347][ T8485] udevd[8485]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.541704][T13217] netlink: 'syz.1.2588': attribute type 61 has an invalid length. [ 401.541733][T13217] netlink: 'syz.1.2588': attribute type 268 has an invalid length. [ 401.689677][ T5674] usb 3-1: USB disconnect, device number 68 [ 401.742274][T13222] FAULT_INJECTION: forcing a failure. [ 401.742274][T13222] name failslab, interval 1, probability 0, space 0, times 0 [ 401.742297][T13222] CPU: 0 UID: 0 PID: 13222 Comm: syz.4.2590 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.742313][T13222] Tainted: [L]=SOFTLOCKUP [ 401.742317][T13222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 401.742324][T13222] Call Trace: [ 401.742329][T13222] [ 401.742335][T13222] dump_stack_lvl+0xe8/0x150 [ 401.742363][T13222] should_fail_ex+0x410/0x560 [ 401.742383][T13222] should_failslab+0xa8/0x100 [ 401.742400][T13222] __kvmalloc_node_noprof+0x176/0x820 [ 401.742415][T13222] ? __kvmalloc_node_noprof+0x345/0x820 [ 401.742428][T13222] ? bpf_compute_scc+0xd2/0xb10 [ 401.742439][T13222] ? bpf_compute_scc+0xd2/0xb10 [ 401.742454][T13222] bpf_compute_scc+0xd2/0xb10 [ 401.742475][T13222] bpf_check+0x271e/0x2ef0 [ 401.742504][T13222] ? __pfx_bpf_check+0x10/0x10 [ 401.742518][T13222] ? bpf_obj_name_cpy+0x194/0x1e0 [ 401.742537][T13222] bpf_prog_load+0x14d6/0x1c20 [ 401.742556][T13222] ? __pfx_bpf_prog_load+0x10/0x10 [ 401.742582][T13222] __sys_bpf+0xd0d/0xd90 [ 401.742599][T13222] ? __pfx___sys_bpf+0x10/0x10 [ 401.742620][T13222] ? __fget_files+0x2a/0x420 [ 401.742640][T13222] ? ksys_write+0x242/0x270 [ 401.742653][T13222] ? __pfx_ksys_write+0x10/0x10 [ 401.742667][T13222] __x64_sys_bpf+0xba/0xd0 [ 401.742681][T13222] do_syscall_64+0x166/0x520 [ 401.742694][T13222] ? trace_irq_disable+0x3b/0x140 [ 401.742706][T13222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.742717][T13222] ? clear_bhb_loop+0x70/0xc0 [ 401.742735][T13222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.742746][T13222] RIP: 0033:0x7f9a37f9f559 [ 401.742758][T13222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.742767][T13222] RSP: 002b:00007f9a38f19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.742780][T13222] RAX: ffffffffffffffda RBX: 00007f9a38225fa0 RCX: 00007f9a37f9f559 [ 401.742788][T13222] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 401.742795][T13222] RBP: 00007f9a38f19090 R08: 0000000000000000 R09: 0000000000000000 [ 401.742802][T13222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.742809][T13222] R13: 00007f9a38226038 R14: 00007f9a38225fa0 R15: 00007f9a3834fa48 [ 401.742826][T13222] [ 402.001917][T13225] 8021q: VLANs not supported on ip6_vti0 [ 402.362396][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2598'. [ 402.398107][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 402.416803][T13237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.462873][T13237] use of bytesused == 0 is deprecated and will be removed in the future, [ 402.462885][T13237] use the actual size instead. [ 402.732460][T13237] libceph: resolve '1270.1' (ret=-3): failed [ 402.768235][T13250] netlink: 'syz.1.2601': attribute type 61 has an invalid length. [ 402.768263][T13250] netlink: 'syz.1.2601': attribute type 268 has an invalid length. [ 403.078533][T13261] FAULT_INJECTION: forcing a failure. [ 403.078533][T13261] name failslab, interval 1, probability 0, space 0, times 0 [ 403.078556][T13261] CPU: 0 UID: 0 PID: 13261 Comm: syz.2.2605 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.078572][T13261] Tainted: [L]=SOFTLOCKUP [ 403.078576][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 403.078584][T13261] Call Trace: [ 403.078588][T13261] [ 403.078594][T13261] dump_stack_lvl+0xe8/0x150 [ 403.078615][T13261] should_fail_ex+0x410/0x560 [ 403.078635][T13261] should_failslab+0xa8/0x100 [ 403.078651][T13261] __kvmalloc_node_noprof+0x176/0x820 [ 403.078667][T13261] ? __kvmalloc_node_noprof+0x345/0x820 [ 403.078679][T13261] ? bpf_compute_scc+0xec/0xb10 [ 403.078691][T13261] ? bpf_compute_scc+0xec/0xb10 [ 403.078706][T13261] bpf_compute_scc+0xec/0xb10 [ 403.078727][T13261] bpf_check+0x271e/0x2ef0 [ 403.078750][T13261] ? __pfx_bpf_check+0x10/0x10 [ 403.078764][T13261] ? bpf_obj_name_cpy+0x194/0x1e0 [ 403.078782][T13261] bpf_prog_load+0x14d6/0x1c20 [ 403.078802][T13261] ? __pfx_bpf_prog_load+0x10/0x10 [ 403.078828][T13261] __sys_bpf+0xd0d/0xd90 [ 403.078845][T13261] ? __pfx___sys_bpf+0x10/0x10 [ 403.078866][T13261] ? __fget_files+0x2a/0x420 [ 403.078892][T13261] ? ksys_write+0x242/0x270 [ 403.078905][T13261] ? __pfx_ksys_write+0x10/0x10 [ 403.078919][T13261] __x64_sys_bpf+0xba/0xd0 [ 403.078932][T13261] do_syscall_64+0x166/0x520 [ 403.078946][T13261] ? trace_irq_disable+0x3b/0x140 [ 403.078958][T13261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.078969][T13261] ? clear_bhb_loop+0x70/0xc0 [ 403.078982][T13261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.078993][T13261] RIP: 0033:0x7ff32339f559 [ 403.079005][T13261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.079014][T13261] RSP: 002b:00007ff3241d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.079027][T13261] RAX: ffffffffffffffda RBX: 00007ff323625fa0 RCX: 00007ff32339f559 [ 403.079035][T13261] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 403.079042][T13261] RBP: 00007ff3241d4090 R08: 0000000000000000 R09: 0000000000000000 [ 403.079049][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.079056][T13261] R13: 00007ff323626038 R14: 00007ff323625fa0 R15: 00007ff32374fa48 [ 403.079073][T13261] [ 403.836621][ T5674] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 403.988516][ T5674] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 403.989744][ T5674] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 403.989771][ T5674] usb 2-1: config 1 has no interface number 0 [ 403.989811][ T5674] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 403.989838][ T5674] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 403.989863][ T5674] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 404.038996][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.039025][ T5674] usb 2-1: Product: syz [ 404.039038][ T5674] usb 2-1: Manufacturer: syz [ 404.039052][ T5674] usb 2-1: SerialNumber: syz [ 404.100298][T13266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.331900][T13266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.334660][ T5674] usb 2-1: No status endpoint found [ 404.573835][ T5674] usb 2-1: USB disconnect, device number 93 [ 405.182067][T13289] netlink: 'syz.3.2614': attribute type 61 has an invalid length. [ 405.182085][T13289] netlink: 'syz.3.2614': attribute type 3 has an invalid length. [ 405.606945][ T5674] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 405.757131][ T5674] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.758026][ T5674] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.758061][ T5674] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 405.760492][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.760516][ T5674] usb 3-1: Product: syz [ 405.760531][ T5674] usb 3-1: Manufacturer: syz [ 405.760546][ T5674] usb 3-1: SerialNumber: syz [ 405.825518][T13301] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 405.846842][ T5674] usb 3-1: selecting invalid altsetting 1 [ 406.031550][T13301] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2618'. [ 406.344754][T13292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.375655][ T5674] cdc_ncm 3-1:1.0: bind() failure [ 406.407289][ T5674] usb 3-1: USB disconnect, device number 69 [ 406.442850][T13311] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2620'. [ 406.442868][T13311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 406.442878][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 406.530881][T13310] lo: entered allmulticast mode [ 406.612665][T13315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2620'. [ 406.612723][T13315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2620'. [ 406.832910][T13301] nvme nvme0: failed to connect socket: -22 [ 407.113314][T13325] random: crng reseeded on system resumption [ 407.273381][T13330] netlink: 'syz.3.2626': attribute type 61 has an invalid length. [ 407.273408][T13330] netlink: 'syz.3.2626': attribute type 3 has an invalid length. [ 408.136102][T13345] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2630'. [ 408.386583][ T5674] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 408.410024][T13357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.411158][T13357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.469687][T13357] sg_write: data in/out 768/1 bytes for SCSI command 0xf4-- guessing data in; [ 408.469687][T13357] program syz.0.2633 not setting count and/or reply_len properly [ 408.516585][ T5674] usb 2-1: device descriptor read/64, error -71 [ 408.756526][ T5674] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 408.886546][ T5688] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 408.896521][ T5674] usb 2-1: device descriptor read/64, error -71 [ 409.006639][ T5674] usb usb2-port1: attempt power cycle [ 409.017756][ T5688] usb 5-1: device descriptor read/64, error -71 [ 409.122551][T13379] netlink: 'syz.3.2639': attribute type 61 has an invalid length. [ 409.122578][T13379] netlink: 'syz.3.2639': attribute type 3 has an invalid length. [ 409.258398][ T5688] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 409.346530][ T5674] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 409.367122][ T5674] usb 2-1: device descriptor read/8, error -71 [ 409.386427][ T5688] usb 5-1: device descriptor read/64, error -71 [ 409.496717][ T5688] usb usb5-port1: attempt power cycle [ 409.616611][ T5674] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 409.647024][ T5674] usb 2-1: device descriptor read/8, error -71 [ 409.748110][T13395] tipc: Started in network mode [ 409.748134][T13395] tipc: Node identity , cluster identity 4711 [ 409.748148][T13395] tipc: Failed to obtain node identity [ 409.748171][T13395] tipc: Enabling of bearer rejected, failed to enable media [ 409.756714][ T5674] usb usb2-port1: unable to enumerate USB device [ 409.836482][ T5688] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 409.860331][ T5688] usb 5-1: device descriptor read/8, error -71 [ 410.090455][T13405] netlink: 'syz.3.2651': attribute type 61 has an invalid length. [ 410.090510][T13405] netlink: 'syz.3.2651': attribute type 3 has an invalid length. [ 410.096450][ T5688] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 410.117065][ T5688] usb 5-1: device descriptor read/8, error -71 [ 410.226890][ T5688] usb usb5-port1: unable to enumerate USB device [ 410.708346][ T5674] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 410.858313][ T5674] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 410.864527][ T5674] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.864561][ T5674] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.907954][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.907982][ T5674] usb 4-1: Product: syz [ 410.907991][ T5674] usb 4-1: Manufacturer: syz [ 410.907999][ T5674] usb 4-1: SerialNumber: syz [ 411.376683][ T5674] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 411.425798][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.446179][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.527735][ T5674] usb 2-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=37.4c [ 411.528932][ T5674] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 411.528949][ T5674] usb 2-1: config 0 has no interface number 0 [ 411.528975][ T5674] usb 2-1: config 0 interface 146 has no altsetting 0 [ 411.574803][ T5674] usb 2-1: string descriptor 0 read error: -22 [ 411.574941][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.600138][ T5674] usb 2-1: config 0 descriptor?? [ 411.613506][ T5674] snd-usb-caiaq 2-1:0.146: can't set alt interface. [ 411.613541][ T5674] usb 2-1: unable to init card! (ret=-5) [ 411.613824][ T5674] snd-usb-caiaq 2-1:0.146: probe with driver snd-usb-caiaq failed with error -5 [ 411.681655][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.681903][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.764850][T13424] socket: no more sockets [ 411.776726][ T5674] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 411.864707][ T5688] usb 2-1: USB disconnect, device number 98 [ 411.928486][ T5674] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 411.930986][ T5674] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 411.931003][ T5674] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 411.931034][ T5674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.981475][ T5674] usb 5-1: probing VID:PID(0424:012C) [ 411.994465][ T5674] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 411.994493][ T5674] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 411.994511][ T5674] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 411.994531][ T5674] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 411.994549][ T5674] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 412.387148][T13422] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2657'. [ 412.597060][ T5674] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 412.634533][T13435] netlink: 'syz.1.2662': attribute type 61 has an invalid length. [ 412.634551][T13435] netlink: 'syz.1.2662': attribute type 3 has an invalid length. [ 412.797722][ T5674] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 413.196413][ T190] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 413.336491][ T190] usb 3-1: device descriptor read/64, error -71 [ 413.399559][ T5688] usb 4-1: USB disconnect, device number 92 [ 413.576474][ T190] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 413.621769][T13450] bridge_slave_0: left allmulticast mode [ 413.621787][T13450] bridge_slave_0: left promiscuous mode [ 413.621936][T13450] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.650027][T13450] bridge_slave_1: left promiscuous mode [ 413.650167][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.662755][ T5674] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 413.693756][ T5674] usb 5-1: USB disconnect, device number 84 [ 413.736901][ T190] usb 3-1: device descriptor read/64, error -71 [ 413.747459][T13450] bond0: (slave bond_slave_0): Releasing backup interface [ 413.786767][T13450] bond0: (slave bond_slave_1): Releasing backup interface [ 413.796238][T13450] team0: Port device team_slave_0 removed [ 413.817137][T13450] team0: Port device team_slave_1 removed [ 413.818932][T13450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.824077][T13450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.843469][T13450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.847793][ T190] usb usb3-port1: attempt power cycle [ 413.880235][ T5674] USB vub300 remote SDIO host controller[0] now disconnected [ 414.226539][ T190] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 414.249728][ T190] usb 3-1: device descriptor read/8, error -71 [ 414.427426][T13466] netlink: 'syz.0.2674': attribute type 61 has an invalid length. [ 414.427454][T13466] netlink: 'syz.0.2674': attribute type 3 has an invalid length. [ 414.486853][ T190] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 414.507235][ T190] usb 3-1: device descriptor read/8, error -71 [ 414.616783][ T190] usb usb3-port1: unable to enumerate USB device [ 414.631956][ T5674] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 414.690248][T13475] netlink: ct_mark mask cannot be 0 [ 414.690284][T13475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.730143][T13475] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2679'. [ 414.738126][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 414.738146][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 414.738159][ C0] preempt_count: 101, expected: 0 [ 414.738167][ C0] RCU nest depth: 0, expected: 0 [ 414.738193][ C0] locks held by swapper/0/0: 1, last CPU#0: [ 414.738369][ C0] #0: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 414.738457][ C0] Preemption disabled at: [ 414.738462][ C0] [] schedule_preempt_disabled+0x1d/0x30 [ 414.738545][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.738567][ C0] Tainted: [L]=SOFTLOCKUP [ 414.738574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 414.738585][ C0] Call Trace: [ 414.738593][ C0] [ 414.738603][ C0] dump_stack_lvl+0xe8/0x150 [ 414.738632][ C0] __might_resched+0x36a/0x4c0 [ 414.738662][ C0] ? schedule_preempt_disabled+0x1d/0x30 [ 414.738690][ C0] __cancel_work_sync+0x6d/0x110 [ 414.738736][ C0] mmc_free_host+0x19/0x40 [ 414.738844][ C0] call_timer_fn+0x18d/0x5f0 [ 414.738873][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 414.738926][ C0] ? call_timer_fn+0xd5/0x5f0 [ 414.738951][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 414.738988][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.739048][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 414.739076][ C0] __run_timer_base+0x652/0x8b0 [ 414.739110][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 414.739135][ C0] ? ktime_get+0x1f5/0x220 [ 414.739156][ C0] ? lapic_next_event+0x11/0x20 [ 414.739181][ C0] run_timer_softirq+0xb7/0x170 [ 414.739198][ C0] handle_softirqs+0x226/0x860 [ 414.739229][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 414.739254][ C0] __irq_exit_rcu+0xcb/0x220 [ 414.739274][ C0] irq_exit_rcu+0x9/0x30 [ 414.739294][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 414.739316][ C0] [ 414.739330][ C0] [ 414.739337][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.739355][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 414.739375][ C0] Code: 4b 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 05 20 00 fb f4 cc 0c 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 414.739390][ C0] RSP: 0000:ffffffff8fa07ca0 EFLAGS: 00000242 [ 414.739407][ C0] RAX: 00000000007604f1 RBX: ffffffff819bf590 RCX: 8000000000000001 [ 414.739420][ C0] RDX: 0000000000000001 RSI: ffffffff8e46a3ae RDI: ffffffff8c6dcf80 [ 414.739431][ C0] RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 [ 414.739443][ C0] R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 [ 414.739455][ C0] R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 [ 414.739470][ C0] ? do_idle+0x2e0/0x540 [ 414.739498][ C0] default_idle+0x9/0x20 [ 414.739520][ C0] default_idle_call+0x72/0xb0 [ 414.739538][ C0] do_idle+0x2e0/0x540 [ 414.739556][ C0] ? __pfx_do_idle+0x10/0x10 [ 414.739580][ C0] cpu_startup_entry+0x43/0x60 [ 414.739596][ C0] rest_init+0x378/0x3a0 [ 414.739620][ C0] ? __pfx_rest_init+0x10/0x10 [ 414.739650][ C0] ? __pfx_kernel_init+0x10/0x10 [ 414.739678][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 414.739777][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 414.739837][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 414.739855][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 414.739931][ C0] start_kernel+0x392/0x3e0 [ 414.739958][ C0] x86_64_start_reservations+0x24/0x30 [ 414.740016][ C0] x86_64_start_kernel+0x137/0x1b0 [ 414.740029][ C0] common_startup_64+0x13e/0x157 [ 414.740060][ C0] [ 414.740203][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffffff8fa00000, but annotated. [ 414.740566][ C0] ------------[ cut here ]------------ [ 414.740573][ C0] 1 [ 414.740583][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: swapper/0/0 [ 415.135682][ C0] Modules linked in: [ 415.139596][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 415.150095][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 415.155274][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.165352][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 415.171249][ C0] Code: ff 06 cc 41 ff c7 44 89 3d e9 72 e7 16 48 c7 c1 80 d8 6d 8c 48 c7 c7 e0 d8 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ed 1a 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 41 6c 0b 3b 05 7f [ 415.191041][ C0] RSP: 0000:ffffc900000079b8 EFLAGS: 00010046 [ 415.197122][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: d8972bbe03373000 [ 415.205080][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 415.213044][ C0] RBP: ffffffff8fa8f020 R08: 0000000000000100 R09: 1ffffffff20d26d8 [ 415.221024][ C0] R10: dffffc0000000000 R11: fffffbfff20d26d9 R12: 1ffff92000000f4c [ 415.228996][ C0] R13: ffff888034f5e0a8 R14: dffffc0000000000 R15: 0000000000000001 [ 415.237006][ C0] FS: 0000000000000000(0000) GS:ffff888123abb000(0000) knlGS:0000000000000000 [ 415.245955][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.252556][ C0] CR2: 0000001b33c0bff8 CR3: 0000000054bc0000 CR4: 00000000003526f0 [ 415.260530][ C0] Call Trace: [ 415.263805][ C0] [ 415.266641][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 415.272192][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 415.277260][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 415.282798][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 415.287825][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 415.293632][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 415.299167][ C0] ? synchronize_srcu+0x20a/0x260 [ 415.304187][ C0] wakeup_source_unregister+0x129/0x3f0 [ 415.309816][ C0] mmc_host_classdev_release+0x47/0x100 [ 415.315363][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 415.321523][ C0] device_release+0xc4/0x1f0 [ 415.326213][ C0] kobject_put+0x222/0x550 [ 415.330739][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 415.335504][ C0] call_timer_fn+0x18d/0x5f0 [ 415.340087][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 415.346754][ C0] ? call_timer_fn+0xd5/0x5f0 [ 415.351430][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 415.356555][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.361782][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 415.368455][ C0] __run_timer_base+0x652/0x8b0 [ 415.373308][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 415.378675][ C0] ? ktime_get+0x1f5/0x220 [ 415.383091][ C0] ? lapic_next_event+0x11/0x20 [ 415.387960][ C0] run_timer_softirq+0xb7/0x170 [ 415.392835][ C0] handle_softirqs+0x226/0x860 [ 415.397608][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 415.402365][ C0] __irq_exit_rcu+0xcb/0x220 [ 415.406949][ C0] irq_exit_rcu+0x9/0x30 [ 415.411194][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 415.416812][ C0] [ 415.419727][ C0] [ 415.422643][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.428623][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 415.434253][ C0] Code: 4b 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 05 20 00 fb f4 cc 0c 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 415.453854][ C0] RSP: 0000:ffffffff8fa07ca0 EFLAGS: 00000242 [ 415.459915][ C0] RAX: 00000000007604f1 RBX: ffffffff819bf590 RCX: 8000000000000001 [ 415.467876][ C0] RDX: 0000000000000001 RSI: ffffffff8e46a3ae RDI: ffffffff8c6dcf80 [ 415.475836][ C0] RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 [ 415.483794][ C0] R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 [ 415.491763][ C0] R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 [ 415.499760][ C0] ? do_idle+0x2e0/0x540 [ 415.504011][ C0] default_idle+0x9/0x20 [ 415.508249][ C0] default_idle_call+0x72/0xb0 [ 415.513022][ C0] do_idle+0x2e0/0x540 [ 415.517103][ C0] ? __pfx_do_idle+0x10/0x10 [ 415.521711][ C0] cpu_startup_entry+0x43/0x60 [ 415.526475][ C0] rest_init+0x378/0x3a0 [ 415.530736][ C0] ? __pfx_rest_init+0x10/0x10 [ 415.535492][ C0] ? __pfx_kernel_init+0x10/0x10 [ 415.540424][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 415.545807][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 415.551088][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 415.556388][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 415.561860][ C0] start_kernel+0x392/0x3e0 [ 415.566369][ C0] x86_64_start_reservations+0x24/0x30 [ 415.571830][ C0] x86_64_start_kernel+0x137/0x1b0 [ 415.576938][ C0] common_startup_64+0x13e/0x157 [ 415.581892][ C0] [ 415.584913][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 415.592184][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 415.602678][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 415.607862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.617904][ C0] Call Trace: [ 415.621175][ C0] [ 415.624009][ C0] vpanic+0x56d/0xa60 [ 415.628023][ C0] ? __pfx__printk+0x10/0x10 [ 415.632606][ C0] ? __pfx_vpanic+0x10/0x10 [ 415.637103][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 415.642386][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 415.647583][ C0] panic+0xc5/0xd0 [ 415.651301][ C0] ? __pfx_panic+0x10/0x10 [ 415.655717][ C0] ? common_startup_64+0x13e/0x157 [ 415.660825][ C0] __warn+0x315/0x4c0 [ 415.664804][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 415.670081][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 415.675355][ C0] __report_bug+0x276/0x570 [ 415.679929][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 415.685211][ C0] ? __pfx___report_bug+0x10/0x10 [ 415.690236][ C0] ? __wake_up_klogd+0xf0/0x130 [ 415.695102][ C0] ? vprintk_emit+0x4ee/0x560 [ 415.699776][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 415.704801][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 415.710077][ C0] report_bug+0x16b/0x220 [ 415.714402][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 415.719672][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 415.724948][ C0] handle_bug+0x9c/0x200 [ 415.729194][ C0] exc_invalid_op+0x1a/0x50 [ 415.733694][ C0] asm_exc_invalid_op+0x1a/0x20 [ 415.738536][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 415.744418][ C0] Code: ff 06 cc 41 ff c7 44 89 3d e9 72 e7 16 48 c7 c1 80 d8 6d 8c 48 c7 c7 e0 d8 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ed 1a 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 41 6c 0b 3b 05 7f [ 415.764013][ C0] RSP: 0000:ffffc900000079b8 EFLAGS: 00010046 [ 415.770076][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: d8972bbe03373000 [ 415.778037][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 415.786001][ C0] RBP: ffffffff8fa8f020 R08: 0000000000000100 R09: 1ffffffff20d26d8 [ 415.793966][ C0] R10: dffffc0000000000 R11: fffffbfff20d26d9 R12: 1ffff92000000f4c [ 415.801930][ C0] R13: ffff888034f5e0a8 R14: dffffc0000000000 R15: 0000000000000001 [ 415.809910][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 415.815193][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 415.820746][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 415.825773][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 415.831305][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 415.836339][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 415.842136][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 415.847675][ C0] ? synchronize_srcu+0x20a/0x260 [ 415.852691][ C0] wakeup_source_unregister+0x129/0x3f0 [ 415.858253][ C0] mmc_host_classdev_release+0x47/0x100 [ 415.863808][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 415.869957][ C0] device_release+0xc4/0x1f0 [ 415.874543][ C0] kobject_put+0x222/0x550 [ 415.878957][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 415.883722][ C0] call_timer_fn+0x18d/0x5f0 [ 415.888315][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 415.894996][ C0] ? call_timer_fn+0xd5/0x5f0 [ 415.899690][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 415.904816][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.910022][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 415.916798][ C0] __run_timer_base+0x652/0x8b0 [ 415.921665][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 415.927036][ C0] ? ktime_get+0x1f5/0x220 [ 415.931451][ C0] ? lapic_next_event+0x11/0x20 [ 415.936300][ C0] run_timer_softirq+0xb7/0x170 [ 415.941149][ C0] handle_softirqs+0x226/0x860 [ 415.945912][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 415.950675][ C0] __irq_exit_rcu+0xcb/0x220 [ 415.955610][ C0] irq_exit_rcu+0x9/0x30 [ 415.959843][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 415.965471][ C0] [ 415.968388][ C0] [ 415.971313][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.977283][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 415.982918][ C0] Code: 4b 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 05 20 00 fb f4 cc 0c 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 416.002518][ C0] RSP: 0000:ffffffff8fa07ca0 EFLAGS: 00000242 [ 416.008592][ C0] RAX: 00000000007604f1 RBX: ffffffff819bf590 RCX: 8000000000000001 [ 416.016573][ C0] RDX: 0000000000000001 RSI: ffffffff8e46a3ae RDI: ffffffff8c6dcf80 [ 416.024555][ C0] RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 [ 416.032525][ C0] R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 [ 416.040490][ C0] R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 [ 416.048458][ C0] ? do_idle+0x2e0/0x540 [ 416.052711][ C0] default_idle+0x9/0x20 [ 416.056951][ C0] default_idle_call+0x72/0xb0 [ 416.061710][ C0] do_idle+0x2e0/0x540 [ 416.065773][ C0] ? __pfx_do_idle+0x10/0x10 [ 416.070363][ C0] cpu_startup_entry+0x43/0x60 [ 416.075121][ C0] rest_init+0x378/0x3a0 [ 416.079362][ C0] ? __pfx_rest_init+0x10/0x10 [ 416.084130][ C0] ? __pfx_kernel_init+0x10/0x10 [ 416.089070][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 416.094442][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 416.099727][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 416.105020][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 416.110475][ C0] start_kernel+0x392/0x3e0 [ 416.114973][ C0] x86_64_start_reservations+0x24/0x30 [ 416.120427][ C0] x86_64_start_kernel+0x137/0x1b0 [ 416.125531][ C0] common_startup_64+0x13e/0x157 [ 416.130481][ C0] [ 416.133758][ C0] Kernel Offset: disabled [ 416.138094][ C0] Rebooting in 86400 seconds..